Using Physical Location for Device Authentication

An apparatus for authenticating a control device in an industrial control system, the apparatus comprising:

• a mobile computing device including:
• a non-transitory memory storing a first plurality of instructions, and
• a first processor operative to execute the first plurality of instructions;
• and
• a control device including:
• an electromagnetic radiation generating device,
• a non-transitory memory storing a second plurality of instructions, and
• a second processor operative to execute the second plurality of instructions, wherein:
• the first processor is operative to generate an authentication request and to transmit the authentication request to the second processor,
• the second processor is operative to generate an authentication code responsive to receiving the authentication request and to enable the electromagnetic radiation generating device to output the authentication code,
• the first processor is further operative to:
• receive an input code corresponding to the authentication code, and
• transmit the input code to the second processor, and
• the second processor is further operative to verify the input code received from the first processor matches the authentication code.

A method of using physical location for authentication, the method comprising the steps of:

• initiating communication between a mobile device and a control device located within an industrial control system;
• generating an authentication code within the control device;
• outputting the authentication code in either a visible spectrum, an infrared spectrum, or an ultraviolet spectrum from the control device;
• receiving an input code corresponding to the authentication code at the mobile device;
• transmitting the input code from the mobile device to the control device;
• verifying the input code received at the control device matches the authentication code;
• and
• permitting communication between the mobile device and the control device when the input code received at the control device matches the authentication code.