US 9,806,891 B2 · System and method for an extended web of trust

Abstract

An industrial automation gateway providing an extended web of trust is provided. The industrial automation gateway includes a cloud communication interface coupled with a cloud automation facility, a hardware memory, and a processor coupled with the cloud communication interface and the hardware memory. The cloud automation facility includes a cloud hardware memory storing a cloud root certificate from a first root certificate authority and a subordinate certificate. The hardware memory stores a gateway root certificate from a second root certificate authority and the subordinate certificate. The processor is configured to determine if the subordinate certificate has been certified by the first root certificate authority and the second root certificate authority. The processor is also configured to transfer automation data to the cloud automation facility using the subordinate certificate only if the subordinate certificate has been certified by the first root certificate authority and the second root certificate authority.

Claims18

Dependent claims

An industrial automation gateway providing an extended web of trust comprising:

a cloud communication interface coupled with, and configured for communication with, a cloud automation facility, the cloud automation facility comprising a cloud hardware memory storing a cloud root certificate from a first root certificate authority and a subordinate certificate;
a hardware memory storing a gateway root certificate from a second root certificate authority and the subordinate certificate;
and
a processor coupled with the cloud communication interface and the hardware memory, configured to:
determine if the subordinate certificate has been certified by the first root certificate authority and the second root certificate authority;
and
transfer automation data to the cloud automation facility using the subordinate certificate only if the subordinate certificate has been certified by both the first root certificate authority and the second root certificate authority.

4 more elements

A method for providing an extended web of trust within an industrial automation gateway comprising:

receiving a gateway root certificate from a second root certificate authority;
storing the gateway root certificate in a gateway hardware memory along with a subordinate certificate;
receiving a command request from a cloud automation facility, the cloud automation facility comprising a cloud hardware memory storing a cloud root certificate from a first root certificate authority and the subordinate certificate;
determining if the subordinate certificate has been certified by the first root certificate authority and the second root certificate authority;
and
receiving the command from the cloud automation facility using the subordinate certificate using the subordinate certificate only if the subordinate certificate has been certified by both the first root certificate authority and the second root certificate authority.

3 more elements

One or more non-transitory computer-readable media having stored thereon program instructions to facilitate an extended web of trust within an industrial automation gateway, wherein the program instructions, when executed by a computing system, direct the computing system to at least:

receive a gateway root certificate from a second root certificate authority;
store the gateway root certificate in a gateway hardware memory along with a subordinate certificate;
receive a command request from a cloud automation facility, the cloud automation facility comprising a cloud hardware memory storing a cloud root certificate from a first root certificate authority and the subordinate certificate;
determine if the subordinate certificate has been certified by the first root certificate authority and the second root certificate authority;
and
receive the command from the cloud automation facility using the subordinate certificate only if the subordinate certificate has been certified by both the first root certificate authority and the second root certificate authority.

3 more elements

Dependencies are inferred from the claim text.

System and method for an extended web of trust

Life of this patent

System and method for an extended web of trust

Life of this patent

Abstract

Claims18