Back to results
US 9,426,653 B2Granted
Secure remote access using wireless network
AssigneeHoneywell International Inc.
InventorsRobert Charles Becker, Bruce W. Anderson, Alan Cornett, Todd Charles Steeves
Life of this patent
Estimating the term…
Abstract
A method includes receiving a request from a mobile device to attach to a private wireless network, determining if a subscriber identifier is in a security database, determining if a mobile device equipment identifier is in the security database, authenticating the phone using the subscriber identifier and the mobile device equipment identifier, granting access to the private wireless network only if the phone is authenticated, and passing data between a computer system and a mobile device to monitor and control a remote monitoring and control system.
Claims20
A method comprising:
- receiving at a computer server, a request from a mobile device to attach to a private cell phone wireless network utilizing an encrypted subscriber identifier, an encrypted equipment identifier, and an encryption key;
- determining via the computer server if the subscriber identifier is in a security database;
- determining via the computer server if the equipment identifier is in the security database;
- estimating whether a mobile device is located approximately within a remote monitoring and control system boundary utilizing timing offsets between the mobile device and a cell tower of the cell phone wireless network;
- authenticating via the computer server the mobile device using the subscriber identifier and the equipment identifier, wherein authenticating includes sharing the encryption key between the mobile device and the server to validate both the server and the mobile device as authorized;
- granting access to the private cell phone wireless network only if the subscriber identifier is found in the security database, the equipment identifier is found in the security database, the mobile device is located approximately within the remote monitoring and control system boundary, and the mobile device is authenticated, otherwise access to the private cell phone wireless network is rejected;
- and
- securely passing data between an isolated computer system and a mobile device via the private cell phone wireless network to monitor and control a remote monitoring and plant control system, wherein the passed data is control system data representative of the plant.
5 more elements
A non-transitory computer readable storage device having instructions for causing a computer to perform a method, the method comprising:
- receiving a request from a mobile device to attach to a private cell phone wireless network utilizing an encrypted subscriber identifier, an encrypted equipment identifier, and an encryption key;
- determining if the subscriber identifier is in a security database;
- determining if the equipment identifier is in the security database;
- estimating whether a mobile device is located approximately within a remote monitoring and control system boundary utilizing timing offsets between the mobile device and a cell tower of the cell phone wireless network;
- authenticating the mobile device using the subscriber identifier and the equipment identifier, wherein authenticating includes sharing the encryption key between the mobile device and the server to validate both the server and the mobile device as authorized;
- granting access to the private cell phone wireless network only if the subscriber identifier is found in the security database, the equipment identifier is found in the security database, the mobile device is located approximately within the remote monitoring and control system boundary, and the mobile device is authenticated, otherwise access to the private cell phone wireless network is rejected;
- and
- passing data between a computer system and a mobile device to monitor and control an isolated remote plant monitoring and control system, wherein the passed data is control system data representative of the plant.
5 more elements
A system comprising:
- a security center having a security database configured to:
- receive an encrypted subscriber identifier, an encrypted equipment identifier, and an encryption key provided by a mobile device;
- determine if the subscriber identifier is in the security database;
- determine if the equipment identifier is in the security database;
- estimate whether the mobile device is located approximately within a remote monitoring and control system boundary utilizing timing offsets between the mobile device and a cell tower of the cell phone wireless network, and
- authenticate the mobile device, wherein authenticating the mobile device further includes sharing the encryption key between the mobile device and the server to validate both the server and the mobile device as authorized;
- grant access to a private cell phone wireless network only if the subscriber identifier is found in the security database, the equipment identifier is found in the security database, the mobile device is located approximately within the remote monitoring and control system boundary, and the mobile device is authenticated, otherwise access to the private cell phone wireless network is rejected;
- and
- an isolated process monitor and automation controller to interact with the security center and receive communications from the authenticated mobile device;
- and
- a media server to provide a private cell phone wireless network to communicate with authenticated mobile devices, the security center, and the process monitor and automation controller, wherein data is passed between the isolated process monitor and automation controller and a mobile device via the private cell phone wireless network to remotely monitor and control the process monitor and automation controller, wherein the passed data is control system data representative of the process.
8 more elements
Dependencies are inferred from the claim text.