JP7676126B2 - 安全なデータロギングのための装置および方法 - Google Patents

安全なデータロギングのための装置および方法 Download PDF

Info

Publication number
JP7676126B2
JP7676126B2 JP2020177861A JP2020177861A JP7676126B2 JP 7676126 B2 JP7676126 B2 JP 7676126B2 JP 2020177861 A JP2020177861 A JP 2020177861A JP 2020177861 A JP2020177861 A JP 2020177861A JP 7676126 B2 JP7676126 B2 JP 7676126B2
Authority
JP
Japan
Prior art keywords
data
network
control system
information
event
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
JP2020177861A
Other languages
English (en)
Japanese (ja)
Other versions
JP2021082272A5 (enExample
JP2021082272A (ja
Inventor
セルジオ・ディアス
ギャリー・ケイ・ロウ
ゴッドフリー・シェリフ
Original Assignee
フィッシャー-ローズマウント システムズ,インコーポレイテッド
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by フィッシャー-ローズマウント システムズ,インコーポレイテッド filed Critical フィッシャー-ローズマウント システムズ,インコーポレイテッド
Publication of JP2021082272A publication Critical patent/JP2021082272A/ja
Publication of JP2021082272A5 publication Critical patent/JP2021082272A5/ja
Application granted granted Critical
Publication of JP7676126B2 publication Critical patent/JP7676126B2/ja
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/25Integrating or interfacing systems involving database management systems
    • G06F16/254Extract, transform and load [ETL] procedures, e.g. ETL data flows in data warehouses
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00Program-control systems
    • G05B19/02Program-control systems electric
    • G05B19/418Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM]
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55Detecting local intrusion or implementing counter-measures
    • G06F21/552Detecting local intrusion or implementing counter-measures involving long-term monitoring or reporting
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00Program-control systems
    • G05B19/02Program-control systems electric
    • G05B19/418Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM]
    • G05B19/4184Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM] characterised by fault tolerance, reliability of production system
    • GPHYSICS
    • G01MEASURING; TESTING
    • G01DMEASURING NOT SPECIALLY ADAPTED FOR A SPECIFIC VARIABLE; ARRANGEMENTS FOR MEASURING TWO OR MORE VARIABLES NOT COVERED IN A SINGLE OTHER SUBCLASS; TARIFF METERING APPARATUS; MEASURING OR TESTING NOT OTHERWISE PROVIDED FOR
    • G01D9/00Recording measured values
    • G01D9/005Solid-state data loggers
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55Detecting local intrusion or implementing counter-measures
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55Detecting local intrusion or implementing counter-measures
    • G06F21/554Detecting local intrusion or implementing counter-measures involving event detection and direct action
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/82Protecting input, output or interconnection devices
    • G06F21/85Protecting input, output or interconnection devices interconnection devices, e.g. bus-connected or in-line devices
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416Event detection, e.g. attack signature detection
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425Traffic logging, e.g. anomaly detection
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00Program-control systems
    • G05B2219/30Nc systems
    • G05B2219/31From computer integrated manufacturing till monitoring
    • G05B2219/31088Network communication between supervisor and cell, machine group
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2101Auditing as a secondary aspect
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/22Parsing or analysis of headers

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Databases & Information Systems (AREA)
  • Manufacturing & Machinery (AREA)
  • Automation & Control Theory (AREA)
  • Quality & Reliability (AREA)
  • Computing Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Mining & Analysis (AREA)
  • Testing And Monitoring For Control Systems (AREA)
JP2020177861A 2019-11-14 2020-10-23 安全なデータロギングのための装置および方法 Active JP7676126B2 (ja)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US16/684,108 2019-11-14
US16/684,108 US11126636B2 (en) 2019-11-14 2019-11-14 Apparatus and methods for secure data logging

Publications (3)

Publication Number Publication Date
JP2021082272A JP2021082272A (ja) 2021-05-27
JP2021082272A5 JP2021082272A5 (enExample) 2023-06-26
JP7676126B2 true JP7676126B2 (ja) 2025-05-14

Family

ID=73726917

Family Applications (1)

Application Number Title Priority Date Filing Date
JP2020177861A Active JP7676126B2 (ja) 2019-11-14 2020-10-23 安全なデータロギングのための装置および方法

Country Status (5)

Country Link
US (1) US11126636B2 (enExample)
JP (1) JP7676126B2 (enExample)
CN (1) CN112799356B (enExample)
DE (1) DE102020130166A1 (enExample)
GB (1) GB2592459B (enExample)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102017218531A1 (de) * 2017-10-17 2019-04-18 Siemens Mobility GmbH Verfahren und Vorrichtung zum rückwirkungsfreien und integritätsgeschützten Synchronisieren von Log-Daten
CN113671933B (zh) * 2021-08-10 2024-03-08 西门子能源自动化(南京)有限公司 用于处理与汽轮机相关的数据的系统和方法
DE102022102619A1 (de) * 2022-02-03 2023-08-03 Lenze Se Verfahren zur Analyse von Betriebsereignissen im Betrieb einer technischen Einrichtung
US20240380733A1 (en) * 2024-02-03 2024-11-14 Mohan Kumar JINDAL System, method, and data diode for selective unidirectional data transfer

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2008129754A (ja) 2006-11-20 2008-06-05 Yokogawa Electric Corp プロセスデータ記録装置およびプロセスデータ記録方法
JP2018073417A (ja) 2016-10-24 2018-05-10 フィッシャー−ローズマウント システムズ,インコーポレイテッド プロセスデバイス状態及び性能監視

Family Cites Families (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7035877B2 (en) * 2001-12-28 2006-04-25 Kimberly-Clark Worldwide, Inc. Quality management and intelligent manufacturing with labels and smart tags in event-based product manufacturing
US7590473B2 (en) * 2006-02-16 2009-09-15 Intel Corporation Thermal management using an on-die thermal sensor
US9349279B2 (en) * 2014-08-05 2016-05-24 Google Inc. Systems and methods for compensating for sensor drift in a hazard detection system
US10191464B2 (en) * 2015-08-14 2019-01-29 Nuscale Power, Llc Notification management systems and methods for monitoring the operation of a modular power plant
US20170065232A1 (en) * 2015-09-04 2017-03-09 Welch Allyn, Inc. Method and apparatus for adapting a function of a biological sensor
US10970175B2 (en) * 2016-06-15 2021-04-06 Sap Se Flexible per-request data durability in databases and other data stores
US10180812B2 (en) * 2016-06-16 2019-01-15 Sap Se Consensus protocol enhancements for supporting flexible durability options
US10140834B2 (en) * 2016-08-08 2018-11-27 Blackberry Limited Mobile transceiver having asset-based alarm profile and a method of operation
JP2018025854A (ja) * 2016-08-08 2018-02-15 株式会社東芝 発電制御システム、保守装置、および制御装置
US10270745B2 (en) * 2016-10-24 2019-04-23 Fisher-Rosemount Systems, Inc. Securely transporting data across a data diode for secured process control communications
US9934671B1 (en) * 2016-10-24 2018-04-03 Fisher Controls International Llc Valve service detection through data analysis
US20180217234A1 (en) * 2017-01-27 2018-08-02 4Sense, Inc. Diffractive Optical Element for a Time-of-Flight Sensor and Method of Operation of Same
US20180217235A1 (en) * 2017-01-27 2018-08-02 4Sense, Inc. Projection System for a Time-of-Flight Sensor and Method of Operation of Same
EP3382479B1 (en) * 2017-03-31 2023-07-05 ABB Schweiz AG Rule-based communicating of equipment data from an industrial system to an analysis system using uni-directional interfaces
US20190018106A1 (en) * 2017-07-11 2019-01-17 4Sense, Inc. Light-Source Array for a Time-of-Flight Sensor and Method of Operation of Same
US20200386668A1 (en) * 2019-04-16 2020-12-10 iButtonLink, LLC Flexible sensor system

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2008129754A (ja) 2006-11-20 2008-06-05 Yokogawa Electric Corp プロセスデータ記録装置およびプロセスデータ記録方法
JP2018073417A (ja) 2016-10-24 2018-05-10 フィッシャー−ローズマウント システムズ,インコーポレイテッド プロセスデバイス状態及び性能監視

Also Published As

Publication number Publication date
US20210149909A1 (en) 2021-05-20
CN112799356B (zh) 2025-09-16
US11126636B2 (en) 2021-09-21
GB2592459A (en) 2021-09-01
CN112799356A (zh) 2021-05-14
DE102020130166A1 (de) 2021-05-20
GB202016987D0 (en) 2020-12-09
GB2592459B (en) 2025-06-25
JP2021082272A (ja) 2021-05-27

Similar Documents

Publication Publication Date Title
CN112799356B (zh) 用于安全的数据记录的装置和方法
Morris et al. Industrial control system traffic data sets for intrusion detection research
CN109818985B (zh) 一种工控系统漏洞趋势分析与预警方法及系统
Bushigampala et al. Threat Detection in Critical Infrastructure Using AI Models
JP6749106B2 (ja) 産業用通信ネットワークにおける異常検出、異常検出システム、及び異常検出を行う方法
Gao et al. On cyber attacks and signature based intrusion detection for modbus based industrial control systems
EP3101581B1 (en) Security system for industrial control infrastructure using dynamic signatures
US10574671B2 (en) Method for monitoring security in an automation network, and automation network
US20130245793A1 (en) Anomaly detection system, anomaly detection method, and program for the same
CN108063753A (zh) 一种信息安全监测方法及系统
CN112799358B (zh) 一种工业控制安全防御系统
WO2018044410A1 (en) High interaction non-intrusive industrial control system honeypot
CN113660296A (zh) 一种工控系统防攻击性能的检测方法、装置及计算机设备
Lim et al. Attack induced common-mode failures on PLC-based safety system in a nuclear power plant: practical experience report
CN112822151A (zh) 面向控制网络工业计算机的多层精准主动网络攻击检测方法及系统
US20230388323A1 (en) System and method for enhancing computer network reliability by countering disruptions in network communications
CN111193738A (zh) 一种工业控制系统的入侵检测方法
CN105553973A (zh) 一种探测工控设备异常的系统与方法
EP3729773B1 (en) One-way data transfer device with onboard system detection
US20190212710A1 (en) Validation of control command in substantially real time for industrial asset control system threat detection
US20200183340A1 (en) Detecting an undefined action in an industrial system
Colelli et al. Securing connection between IT and OT: the Fog Intrusion Detection System prospective
US10666671B2 (en) Data security inspection mechanism for serial networks
US20210126925A1 (en) Extraction apparatus, extraction method, computer readable medium
JP5492150B2 (ja) 多重系コントローラシステムとその運転方法

Legal Events

Date Code Title Description
A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20230616

A621 Written request for application examination

Free format text: JAPANESE INTERMEDIATE CODE: A621

Effective date: 20230616

A977 Report on retrieval

Free format text: JAPANESE INTERMEDIATE CODE: A971007

Effective date: 20240529

A131 Notification of reasons for refusal

Free format text: JAPANESE INTERMEDIATE CODE: A131

Effective date: 20240618

A601 Written request for extension of time

Free format text: JAPANESE INTERMEDIATE CODE: A601

Effective date: 20240917

A601 Written request for extension of time

Free format text: JAPANESE INTERMEDIATE CODE: A601

Effective date: 20241115

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20241217

TRDD Decision of grant or rejection written
A01 Written decision to grant a patent or to grant a registration (utility model)

Free format text: JAPANESE INTERMEDIATE CODE: A01

Effective date: 20250401

A61 First payment of annual fees (during grant procedure)

Free format text: JAPANESE INTERMEDIATE CODE: A61

Effective date: 20250430

R150 Certificate of patent or registration of utility model

Ref document number: 7676126

Country of ref document: JP

Free format text: JAPANESE INTERMEDIATE CODE: R150