CN112799356B - 用于安全的数据记录的装置和方法 - Google Patents

用于安全的数据记录的装置和方法

Info

Publication number
CN112799356B
CN112799356B CN202011268925.6A CN202011268925A CN112799356B CN 112799356 B CN112799356 B CN 112799356B CN 202011268925 A CN202011268925 A CN 202011268925A CN 112799356 B CN112799356 B CN 112799356B
Authority
CN
China
Prior art keywords
data
network
information
control system
process control
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202011268925.6A
Other languages
English (en)
Chinese (zh)
Other versions
CN112799356A (zh
Inventor
S·迪亚兹
G·K·劳
G·谢里夫
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Fisher Rosemount Systems Inc
Original Assignee
Fisher Rosemount Systems Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Fisher Rosemount Systems Inc filed Critical Fisher Rosemount Systems Inc
Publication of CN112799356A publication Critical patent/CN112799356A/zh
Application granted granted Critical
Publication of CN112799356B publication Critical patent/CN112799356B/zh
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/25—Integrating or interfacing systems involving database management systems
    • G06F16/254—Extract, transform and load [ETL] procedures, e.g. ETL data flows in data warehouses
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00—Program-control systems
    • G05B19/02—Program-control systems electric
    • G05B19/418—Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM]
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/552—Detecting local intrusion or implementing counter-measures involving long-term monitoring or reporting
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00—Program-control systems
    • G05B19/02—Program-control systems electric
    • G05B19/418—Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM]
    • G05B19/4184—Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM] characterised by fault tolerance, reliability of production system
    • G—PHYSICS
    • G01—MEASURING; TESTING
    • G01D—MEASURING NOT SPECIALLY ADAPTED FOR A SPECIFIC VARIABLE; ARRANGEMENTS FOR MEASURING TWO OR MORE VARIABLES NOT COVERED IN A SINGLE OTHER SUBCLASS; TARIFF METERING APPARATUS; MEASURING OR TESTING NOT OTHERWISE PROVIDED FOR
    • G01D9/00—Recording measured values
    • G01D9/005—Solid-state data loggers
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/554—Detecting local intrusion or implementing counter-measures involving event detection and direct action
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/82—Protecting input, output or interconnection devices
    • G06F21/85—Protecting input, output or interconnection devices interconnection devices, e.g. bus-connected or in-line devices
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416—Event detection, e.g. attack signature detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425—Traffic logging, e.g. anomaly detection
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00—Program-control systems
    • G05B2219/30—Nc systems
    • G05B2219/31—From computer integrated manufacturing till monitoring
    • G05B2219/31088—Network communication between supervisor and cell, machine group
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2101—Auditing as a secondary aspect
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/22—Parsing or analysis of headers

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Databases & Information Systems (AREA)
  • Manufacturing & Machinery (AREA)
  • Automation & Control Theory (AREA)
  • Quality & Reliability (AREA)
  • Computing Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Mining & Analysis (AREA)
  • Testing And Monitoring For Control Systems (AREA)
CN202011268925.6A 2019-11-14 2020-11-13 用于安全的数据记录的装置和方法 Active CN112799356B (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US16/684,108 2019-11-14
US16/684,108 US11126636B2 (en) 2019-11-14 2019-11-14 Apparatus and methods for secure data logging

Publications (2)

Publication Number Publication Date
CN112799356A CN112799356A (zh) 2021-05-14
CN112799356B true CN112799356B (zh) 2025-09-16

Family

ID=73726917

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011268925.6A Active CN112799356B (zh) 2019-11-14 2020-11-13 用于安全的数据记录的装置和方法

Country Status (5)

Country Link
US (1) US11126636B2 (enExample)
JP (1) JP7676126B2 (enExample)
CN (1) CN112799356B (enExample)
DE (1) DE102020130166A1 (enExample)
GB (1) GB2592459B (enExample)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102017218531A1 (de) * 2017-10-17 2019-04-18 Siemens Mobility GmbH Verfahren und Vorrichtung zum rückwirkungsfreien und integritätsgeschützten Synchronisieren von Log-Daten
CN113671933B (zh) * 2021-08-10 2024-03-08 西门子能源自动化(南京)有限公司 用于处理与汽轮机相关的数据的系统和方法
DE102022102619A1 (de) * 2022-02-03 2023-08-03 Lenze Se Verfahren zur Analyse von Betriebsereignissen im Betrieb einer technischen Einrichtung
US20240380733A1 (en) * 2024-02-03 2024-11-14 Mohan Kumar JINDAL System, method, and data diode for selective unidirectional data transfer

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2018025854A (ja) * 2016-08-08 2018-02-15 株式会社東芝 発電制御システム、保守装置、および制御装置

Family Cites Families (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7035877B2 (en) * 2001-12-28 2006-04-25 Kimberly-Clark Worldwide, Inc. Quality management and intelligent manufacturing with labels and smart tags in event-based product manufacturing
US7590473B2 (en) * 2006-02-16 2009-09-15 Intel Corporation Thermal management using an on-die thermal sensor
JP4743539B2 (ja) * 2006-11-20 2011-08-10 横河電機株式会社 プロセスデータ記録装置およびプロセスデータ記録方法
US9349279B2 (en) * 2014-08-05 2016-05-24 Google Inc. Systems and methods for compensating for sensor drift in a hazard detection system
US10191464B2 (en) * 2015-08-14 2019-01-29 Nuscale Power, Llc Notification management systems and methods for monitoring the operation of a modular power plant
US20170065232A1 (en) * 2015-09-04 2017-03-09 Welch Allyn, Inc. Method and apparatus for adapting a function of a biological sensor
US10970175B2 (en) * 2016-06-15 2021-04-06 Sap Se Flexible per-request data durability in databases and other data stores
US10180812B2 (en) * 2016-06-16 2019-01-15 Sap Se Consensus protocol enhancements for supporting flexible durability options
US10140834B2 (en) * 2016-08-08 2018-11-27 Blackberry Limited Mobile transceiver having asset-based alarm profile and a method of operation
US10877465B2 (en) * 2016-10-24 2020-12-29 Fisher-Rosemount Systems, Inc. Process device condition and performance monitoring
US10270745B2 (en) * 2016-10-24 2019-04-23 Fisher-Rosemount Systems, Inc. Securely transporting data across a data diode for secured process control communications
US9934671B1 (en) * 2016-10-24 2018-04-03 Fisher Controls International Llc Valve service detection through data analysis
US20180217234A1 (en) * 2017-01-27 2018-08-02 4Sense, Inc. Diffractive Optical Element for a Time-of-Flight Sensor and Method of Operation of Same
US20180217235A1 (en) * 2017-01-27 2018-08-02 4Sense, Inc. Projection System for a Time-of-Flight Sensor and Method of Operation of Same
EP3382479B1 (en) * 2017-03-31 2023-07-05 ABB Schweiz AG Rule-based communicating of equipment data from an industrial system to an analysis system using uni-directional interfaces
US20190018106A1 (en) * 2017-07-11 2019-01-17 4Sense, Inc. Light-Source Array for a Time-of-Flight Sensor and Method of Operation of Same
US20200386668A1 (en) * 2019-04-16 2020-12-10 iButtonLink, LLC Flexible sensor system

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2018025854A (ja) * 2016-08-08 2018-02-15 株式会社東芝 発電制御システム、保守装置、および制御装置

Also Published As

Publication number Publication date
US20210149909A1 (en) 2021-05-20
US11126636B2 (en) 2021-09-21
GB2592459A (en) 2021-09-01
CN112799356A (zh) 2021-05-14
DE102020130166A1 (de) 2021-05-20
GB202016987D0 (en) 2020-12-09
GB2592459B (en) 2025-06-25
JP2021082272A (ja) 2021-05-27
JP7676126B2 (ja) 2025-05-14

Similar Documents

Publication Publication Date Title
JP7676126B2 (ja) 安全なデータロギングのための装置および方法
US11818098B2 (en) Security system, device, and method for protecting control systems
EP3101581B1 (en) Security system for industrial control infrastructure using dynamic signatures
Morris et al. Industrial control system traffic data sets for intrusion detection research
JP6749106B2 (ja) 産業用通信ネットワークにおける異常検出、異常検出システム、及び異常検出を行う方法
US10250619B1 (en) Overlay cyber security networked system and method
Bushigampala et al. Threat Detection in Critical Infrastructure Using AI Models
EP3101586B1 (en) Active response security system for industrial control infrastructure
EP3101491B1 (en) Security system for industrial control infrastructure
JP5926491B2 (ja) ネットワークにおけるセキュリティ保全のための方法及び、プロセッサにセキュリティ保全のための方法を遂行させるようなコンピュータ・プログラムのコンピュータ読取り可能な命令を有しているコンピュータ読取り可能な媒体
US10574671B2 (en) Method for monitoring security in an automation network, and automation network
US20130245793A1 (en) Anomaly detection system, anomaly detection method, and program for the same
US10547634B2 (en) Non-intrusive digital agent for behavioral monitoring of cybersecurity-related events in an industrial control system
CN108063753A (zh) 一种信息安全监测方法及系统
Graveto et al. A stealth monitoring mechanism for cyber-physical systems
Lim et al. Attack induced common-mode failures on PLC-based safety system in a nuclear power plant: practical experience report
CN111193738A (zh) 一种工业控制系统的入侵检测方法
CN105553973A (zh) 一种探测工控设备异常的系统与方法
US10666671B2 (en) Data security inspection mechanism for serial networks
Colelli et al. Securing connection between IT and OT: the Fog Intrusion Detection System prospective
CN117997572A (zh) 工业互联网安全监管系统
JP5492150B2 (ja) 多重系コントローラシステムとその運転方法
US20250063365A1 (en) Modular edge network security
US20240219879A1 (en) Method, System and Inspection Device for Securely Executing Control Applications
Colelli et al. Exploiting system model for securing cps: the anomaly based ids perspective

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant