CA2875518C - Industrial control system redundant communications/control modules authentication - Google Patents

Industrial control system redundant communications/control modules authentication Download PDF

Info

Publication number
CA2875518C
CA2875518C CA2875518A CA2875518A CA2875518C CA 2875518 C CA2875518 C CA 2875518C CA 2875518 A CA2875518 A CA 2875518A CA 2875518 A CA2875518 A CA 2875518A CA 2875518 C CA2875518 C CA 2875518C
Authority
CA
Canada
Prior art keywords
communications
control module
nonce
datagram
authentication
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CA2875518A
Other languages
English (en)
French (fr)
Other versions
CA2875518A1 (en
Inventor
Timothy Clish
Samuel Galpin
James G. Calvin
Albert Rooyakkers
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Bedrock Automation Platforms Inc
Original Assignee
Bedrock Automation Platforms Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US14/446,412 external-priority patent/US10834820B2/en
Priority claimed from US14/469,931 external-priority patent/US9191203B2/en
Priority claimed from US14/519,047 external-priority patent/US9467297B2/en
Application filed by Bedrock Automation Platforms Inc filed Critical Bedrock Automation Platforms Inc
Publication of CA2875518A1 publication Critical patent/CA2875518A1/en
Application granted granted Critical
Publication of CA2875518C publication Critical patent/CA2875518C/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • G—PHYSICS
    • G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09C—CIPHERING OR DECIPHERING APPARATUS FOR CRYPTOGRAPHIC OR OTHER PURPOSES INVOLVING THE NEED FOR SECRECY
    • G09C1/00—Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3263—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3271—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Programmable Controllers (AREA)
  • Safety Devices In Control Systems (AREA)
  • Mobile Radio Communication Systems (AREA)
CA2875518A 2014-07-07 2014-12-19 Industrial control system redundant communications/control modules authentication Active CA2875518C (en)

Applications Claiming Priority (8)

Application Number Priority Date Filing Date Title
US201462021438P 2014-07-07 2014-07-07
US62/021,438 2014-07-07
US14/446,412 US10834820B2 (en) 2013-08-06 2014-07-30 Industrial control system cable
US14/446,412 2014-07-30
US14/469,931 US9191203B2 (en) 2013-08-06 2014-08-27 Secure industrial control system
US14/469,931 2014-08-27
US14/519,047 US9467297B2 (en) 2013-08-06 2014-10-20 Industrial control system redundant communications/control modules authentication
US14/519,047 2014-10-20

Publications (2)

Publication Number Publication Date
CA2875518A1 CA2875518A1 (en) 2015-04-02
CA2875518C true CA2875518C (en) 2018-04-24

Family

ID=52781379

Family Applications (1)

Application Number Title Priority Date Filing Date
CA2875518A Active CA2875518C (en) 2014-07-07 2014-12-19 Industrial control system redundant communications/control modules authentication

Country Status (4)

Country Link
EP (3) EP3687108B1 (https=)
JP (1) JP6425984B2 (https=)
CN (1) CN105278327B (https=)
CA (1) CA2875518C (https=)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20220239641A1 (en) * 2019-04-29 2022-07-28 Siemens Aktiengesellschaft Engineering Control System, Technical Installation and Method and System for Awarding Publicly Trusted Certificates
US11463267B2 (en) * 2016-09-08 2022-10-04 Nec Corporation Network function virtualization system and verifying method

Families Citing this family (27)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8862802B2 (en) 2011-12-30 2014-10-14 Bedrock Automation Platforms Inc. Switch fabric having a serial communications interface and a parallel communications interface
US9191203B2 (en) 2013-08-06 2015-11-17 Bedrock Automation Platforms Inc. Secure industrial control system
US12061685B2 (en) 2011-12-30 2024-08-13 Analog Devices, Inc. Image capture devices for a secure industrial control system
US9600434B1 (en) 2011-12-30 2017-03-21 Bedrock Automation Platforms, Inc. Switch fabric having a serial communications interface and a parallel communications interface
US9467297B2 (en) 2013-08-06 2016-10-11 Bedrock Automation Platforms Inc. Industrial control system redundant communications/control modules authentication
US10834094B2 (en) 2013-08-06 2020-11-10 Bedrock Automation Platforms Inc. Operator action authentication in an industrial control system
US11967839B2 (en) 2011-12-30 2024-04-23 Analog Devices, Inc. Electromagnetic connector for an industrial control system
US9727511B2 (en) 2011-12-30 2017-08-08 Bedrock Automation Platforms Inc. Input/output module with multi-channel switching capability
US11144630B2 (en) 2011-12-30 2021-10-12 Bedrock Automation Platforms Inc. Image capture devices for a secure industrial control system
US11314854B2 (en) 2011-12-30 2022-04-26 Bedrock Automation Platforms Inc. Image capture devices for a secure industrial control system
US8971072B2 (en) 2011-12-30 2015-03-03 Bedrock Automation Platforms Inc. Electromagnetic connector for an industrial control system
US10834820B2 (en) 2013-08-06 2020-11-10 Bedrock Automation Platforms Inc. Industrial control system cable
US9437967B2 (en) 2011-12-30 2016-09-06 Bedrock Automation Platforms, Inc. Electromagnetic connector for an industrial control system
US10613567B2 (en) 2013-08-06 2020-04-07 Bedrock Automation Platforms Inc. Secure power supply for an industrial control system
CN105281061A (zh) 2014-07-07 2016-01-27 基岩自动化平台公司 工业控制系统电缆
JP7085826B2 (ja) * 2016-12-16 2022-06-17 ベドロック・オートメーション・プラットフォームズ・インコーポレーテッド 安全な産業用制御システムのためのイメージ・キャプチャ・デバイス
CN107992027B (zh) * 2017-12-13 2020-05-22 中核控制系统工程有限公司 一种dcs冗余通信模块切换方法
EP3547618B1 (de) * 2018-03-29 2023-03-01 Siemens Aktiengesellschaft Verfahren zum aufbau einer redundanten kommunikationsverbindung und ausfallgesicherte steuerungseinheit
DE102018214158B4 (de) * 2018-08-22 2024-03-14 Audi Ag Steuervorrichtung zur Freischaltung von Funktionen, Kraftfahrzeug mit einer Steuervorrichtung und ein Verfahren zum Betreiben einer Steuervorrichtung
CN109639438B (zh) * 2019-02-26 2021-08-27 燕山大学 一种基于数字签名的scada网络工业信息加密方法
AT16973U1 (https=) * 2019-06-05 2021-01-15 Siemens Ag
EP3845984B1 (en) * 2019-12-31 2025-09-10 Schneider Electric Systems USA, Inc. Secure network of safety plcs for industrial plants
CN111865908B (zh) * 2020-06-08 2022-05-17 杭州电子科技大学 一种基于随机加密策略的资源受限系统安全通讯方法
US11601268B2 (en) * 2020-08-03 2023-03-07 Nuvoton Technology Corporation Device attestation including attestation-key modification following boot event
US11720090B2 (en) * 2020-11-20 2023-08-08 Rockwell Automation Technologies, Inc. Fault tolerant backplane slot assignment
CN113704154B (zh) * 2021-07-30 2024-02-23 浙江亚太智能网联汽车创新中心有限公司 一种感知系统通用接口集成系统及装置
CN113783683B (zh) * 2021-11-12 2022-03-08 晨越建设项目管理集团股份有限公司 基于传感器网络的云平台隐私保护可验证数据聚合方法

Family Cites Families (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP3453944B2 (ja) * 1995-09-04 2003-10-06 日本電信電話株式会社 秘話通信方法
JPH11312111A (ja) * 1998-04-30 1999-11-09 Nec Corp データベース復旧方法及びデータベース管理システム
JP2001357373A (ja) * 2000-06-15 2001-12-26 Sony Corp データ記憶装置およびデータ記憶方法、情報処理装置および情報処理方法、並びに記録媒体
JP2003110576A (ja) * 2001-09-26 2003-04-11 Toshiba Corp 無線ネットワークシステム、無線ネットワークの管理方法、及び、コンピュータで実行可能な無線ネットワークの管理プログラム
US7536548B1 (en) * 2002-06-04 2009-05-19 Rockwell Automation Technologies, Inc. System and methodology providing multi-tier-security for network data exchange with industrial control components
CN100393034C (zh) * 2004-04-30 2008-06-04 北京航空航天大学 一种应用于组播通信系统中的源认证方法
JP4540454B2 (ja) * 2004-11-26 2010-09-08 株式会社エヌ・ティ・ティ・データ アプリケーション設定装置、ｉｃチップ及びプログラム
CN101005359B (zh) * 2006-01-18 2010-12-08 华为技术有限公司 一种实现终端设备间安全通信的方法及装置
JP2008022526A (ja) * 2006-06-13 2008-01-31 Hitachi Ltd 属性証明書検証方法、属性認証局装置、サービス提供装置、および属性証明書検証システム
US8327130B2 (en) * 2007-09-25 2012-12-04 Rockwell Automation Technologies, Inc. Unique identification of entities of an industrial control system
US8001381B2 (en) * 2008-02-26 2011-08-16 Motorola Solutions, Inc. Method and system for mutual authentication of nodes in a wireless communication network
JP5329184B2 (ja) * 2008-11-12 2013-10-30 株式会社日立製作所 公開鍵証明書の検証方法及び検証サーバ
US9225754B2 (en) * 2011-03-03 2015-12-29 Securekey Technologies Inc. Ad-hoc network communications
US8973124B2 (en) * 2012-04-30 2015-03-03 General Electric Company Systems and methods for secure operation of an industrial controller

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11463267B2 (en) * 2016-09-08 2022-10-04 Nec Corporation Network function virtualization system and verifying method
US20220239641A1 (en) * 2019-04-29 2022-07-28 Siemens Aktiengesellschaft Engineering Control System, Technical Installation and Method and System for Awarding Publicly Trusted Certificates
US12126611B2 (en) * 2019-04-29 2024-10-22 Siemens Aktiengesellschaft Engineering control system, technical installation and method and system for awarding publicly trusted certificates

Also Published As

Publication number Publication date
CN105278327B (zh) 2020-03-17
EP3687108A1 (en) 2020-07-29
EP2966806B1 (en) 2018-08-22
EP3422631B1 (en) 2020-02-12
JP2016019280A (ja) 2016-02-01
CA2875518A1 (en) 2015-04-02
EP2966806A1 (en) 2016-01-13
CN105278327A (zh) 2016-01-27
EP3422631A1 (en) 2019-01-02
JP6425984B2 (ja) 2018-11-21
EP3687108B1 (en) 2022-02-02

Similar Documents

Publication Publication Date Title
US11977622B2 (en) Authentication between industrial elements in an industrial control system
US12212577B2 (en) Operator action authentication in an industrial control system
CA2875518C (en) Industrial control system redundant communications/control modules authentication
US11899604B2 (en) Input/output module with multi-channel switching capability
US12032675B2 (en) Secure industrial control system
EP3054385B1 (en) Input/output module with multi-channel switching capability
EP2966520B1 (en) Operator action authentication in an industrial control system
US11144630B2 (en) Image capture devices for a secure industrial control system
US12061685B2 (en) Image capture devices for a secure industrial control system
US11314854B2 (en) Image capture devices for a secure industrial control system
CA2920133C (en) Input/output module with multi-channel switching capability

Legal Events

Date Code Title Description
MPN Maintenance fee for patent paid

Free format text: FEE DESCRIPTION TEXT: MF (PATENT, 10TH ANNIV.) - SMALL

Year of fee payment: 10

U00 Fee paid

Free format text: ST27 STATUS EVENT CODE: A-4-4-U10-U00-U101 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: MAINTENANCE REQUEST RECEIVED

Effective date: 20241209

U11 Full renewal or maintenance fee paid

Free format text: ST27 STATUS EVENT CODE: A-4-4-U10-U11-U102 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: MAINTENANCE FEE PAYMENT PAID IN FULL

Effective date: 20241209

R11 Change to the name of applicant or owner or transfer of ownership requested

Free format text: ST27 STATUS EVENT CODE: A-4-4-R10-R11-R127 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: TRANSFER RECORDAL REQUEST OR RESPONSE

Effective date: 20250326

W00 Other event occurred

Free format text: ST27 STATUS EVENT CODE: A-4-4-W10-W00-W111 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: CORRESPONDENT DETERMINED COMPLIANT

Effective date: 20250424

R14 Transfer of ownership recorded

Free format text: ST27 STATUS EVENT CODE: A-4-4-R10-R14-R129 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: TRANSFER REQUIREMENTS DETERMINED COMPLIANT

Effective date: 20251117

MPN Maintenance fee for patent paid

Free format text: FEE DESCRIPTION TEXT: MF (PATENT, 11TH ANNIV.) - SMALL

Year of fee payment: 11

U00 Fee paid

Free format text: ST27 STATUS EVENT CODE: A-4-4-U10-U00-U101 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: MAINTENANCE REQUEST RECEIVED

Effective date: 20251121

U11 Full renewal or maintenance fee paid

Free format text: ST27 STATUS EVENT CODE: A-4-4-U10-U11-U102 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: MAINTENANCE FEE PAYMENT PAID IN FULL

Effective date: 20251121