Bedrock Automation Platforms Inc.

Analog Devices,inc.

Bedrock Automation Plattforms Inc.

Rooyakkers, Albert

Calvin, James G.

Albert Rooyakkers

James G Calvin

Ken Doucette

Timothy Clish

Samuel Galpin

Michael Koran

Pirooz Parvarandeh

Craig Markovic

Brian Anderson

James C Calvin

Christopher Harlow

John Porter

George Cranshaw

Operator actions and/or other commands or requests are secured via an authentication path from an action originator to a communications/control module or any other industrial element/controller. In implementations, an industrial control system includes an action authenticator configured to sign an action request generated by the action originator. The destination communications/control module or any other industrial element/controller is configured to receive the signed action request, verify the authenticity of the signed action request, and perform a requested action when the authenticity of the signed action request is verified.

Operator action authentication in an industrial control system

A secure industrial control system is disclosed herein. The industrial control system includes a plurality of industrial elements (e.g., modules, cables) which are provisioned during manufacture with their own unique security credentials. A key management entity of the secure industrial control system monitors and manages the security credentials of the industrial elements starting from the time they are manufactured up to and during their implementation within the industrial control system for promoting security of the industrial control system. An authentication process, based upon the security credentials, for authenticating the industrial elements being implemented in the industrial control system is performed for promoting security of the industrial control system. In one or more implementations, all industrial elements of the secure industrial control system are provisioned with the security credentials for providing security at multiple (e.g., all) levels of the system.

Secure industrial control system

A cable includes a wiring assembly with a knuckle and wires bundled together. The cable also includes a connector assembly with a connector having connections for the wires, where the connections are arranged along a longitudinal axis. In some embodiments, the connector assembly captures an end of the wiring assembly, and the knuckle of the wiring assembly is pivotally connected to the connector assembly. In some embodiments, the cable includes circuitry configured to authenticate the cable to a device connected to the cable by the connector and/or to authenticate the device connected to the cable. A control system includes control elements and/or subsystems coupled with a backplane adjacent to one another and cables configured to connect to the control elements and/or subsystems. Wiring assemblies of the cables can articulate to be parallel to each respective connector. Further, each cable can authenticate the cables and/or the control elements or subsystems.

Industrial control system cable

An image capture device for a secure industrial control system is disclosed. In an embodiment, the image capture device includes: an image sensor; a signal processor coupled to the image sensor; and a controller for managing the signal processor and transmitting data associated with processed image signals to at least one of an input/output module or a communications/control module via a communications interface that couples the controller to the at least one of the input/output module or the communications/control module, wherein the controller is configured to establish an encrypted tunnel between the controller and the at least one of the input/output module or the communications/control module based upon at least one respective security credential of the image capture device and at least one respective security credential of the at least one of the input/output module or the communications/control module.

Image capture devices for a secure industrial control system

A smart power system is described. In one or more implementations, the smart power system comprises a microcontroller and a power converter electrically connected to the microcontroller and is configured to convert electrical energy from one form to another. The system also includes a switch element electrically connected to the microcontroller and configured to control distribution of the converted electrical energy to an electrical load. A sense element is electrically connected to the electrical load and to the microcontroller and is configured to monitor the converted electrical energy distributed to the electrical load and to furnish a feedback signal based upon the converted electrical energy. The microcontroller is configured to verify and to monitor the power converter, as well as to control and to monitor distribution of the converted electrical energy to the electrical load based upon the feedback signal.

Smart power system

A programmable discrete input module is described. In one or more implementations, the programmable discrete input module comprises a pulse width modulation module configured to generate a pulse width modulated signal based upon an input signal and a pulse width demodulation module configured to generate a demodulated pulse width signal. An isolator is configured to isolate the pulse width modulation module and the pulse width demodulation module and to generate isolated modulated pulse width signal based upon the pulse width modulated signal for the pulse width demodulation module to generate the demodulated pulse width signal. The programmable discrete input module also includes a first comparator and a second comparator for comparing the demodulated pulse width signal with a respective programmable reference and a digital filter configured to filter a comparison signal output by the first comparator or the second comparator to generate a discrete input signal.

Method and system for a discrete output module

A zero trust industrial control system is disclosed herein. The industrial control system includes a plurality of industrial elements (e.g., modules, cables) which are provisioned during manufacture with their own unique security credentials. A key management entity of the zero trust industrial control system monitors and manages the security credentials of the industrial elements starting from the time they are manufactured up to and during their implementation within the industrial control system for promoting security of the industrial control system. An authentication process, based upon the security credentials, for authenticating the industrial elements being implemented in the industrial control system is performed for promoting security of the industrial control system. In one or more implementations, all industrial elements of the zero trust industrial control system are provisioned with the security credentials for providing security at multiple (e.g., all) levels of the system.

A switch fabric is disclosed that includes a serial communications interface and a parallel communications interface. The serial communications interface is configured for connecting a plurality of slave devices to a master device in parallel to transmit information between the plurality of slave devices and the master device, and the parallel communications interface is configured for separately connecting the plurality of slave devices to the master device to transmit information between the plurality of slave devices and the master device, and to transmit information between individual ones of the plurality of slave devices. The parallel communications interface may comprise a dedicated parallel communications channel for each one of the plurality of slave devices. The serial communications interface may comprise a multidrop bus, and the parallel communications interface may comprise a cross switch.

Switch fabric having a serial communications interface and a parallel communications interface

An industrial control system module and methods are described for self-destruction or the destruction and/or erasure of sensitive data within the industrial control system module upon an indication of an unauthorized module access event. In an implementation, a secure industrial control system module includes a circuit board including electrical circuitry; a sealed encasement that houses the circuit board, where the sealed encasement includes a housing having a first housing side and a second housing side, where the housing is configured to house the circuit board when the first housing side and the second housing side are coupled together; and a first sensor component integrated with the sealed encasement, where the first sensor component is communicably coupled to the circuit board and electrical circuitry and is configured to provide an indication of an unauthorized access event.

Tamper resistant module for industrial control system

A set of redundant industrial control system communications/control modules includes at least a first communications/control module and a second communications/control module. The first and second communications/control modules are configured to perform an authentication sequence including: transmitting a request datagram from the first communications/control module to the second communications/control module, the request datagram including a first nonce, a first device authentication key certificate, and a first identity attribute certificate; transmitting a response datagram from the second communications/control module to the first communications/control module, the response datagram including a second nonce, a first signature associated with the first and second nonces, a second device authentication key certificate, and a second identity attribute certificate; and transmitting an authentication datagram from the first communications/control module to the second communications/control module when the response datagram is valid, the authentication datagram including a second signature associated with the first and second nonces.

Authentication between industrial elements in an industrial control system

An electromagnetic connector is disclosed that is configured to form a first magnetic circuit portion comprising multiple coils disposed about a first core member. The electromagnetic connector is configured to mate with a second electromagnetic connector that is configured to form a second magnetic circuit portion comprising a coil disposed about a second core member. When the electromagnetic connector is mated with the second electromagnetic connector, the first core member and the second core member are configured to couple the multiple coils of the electromagnetic connector to the coil of the second electromagnetic connector with a magnetic circuit formed from the first magnetic circuit portion and the second magnetic circuit portion. The magnetic circuit is configured to induce a signal in a first coil of the multiple coils and the coil of the second electromagnetic connector when a second coil of the multiple coils is energized.

Electromagnetic connector for an industrial control system

An electromagnetic connector is disclosed that is configured to form a first magnetic circuit portion comprising a first core member and a first coil disposed of the first core member. The electromagnetic connector is configured to mate with a second electromagnetic connector, where the second electromagnetic connector is configured to form a second magnetic circuit portion comprising a second core member and a second coil disposed of the second core member. The first core member and the second core member are configured to couple the first coil to the second coil with a magnetic circuit formed from the first magnetic circuit portion and the second magnetic circuit portion when the electromagnetic connector is mated with the second electromagnetic connector. The magnetic circuit is configured to induce a signal in the first coil when the second coil is energized.

Electromagnetic connector for for an industrial control system

A power supply is disclosed for an industrial control system or any system including a distributed power supply network. In embodiments, the power supply comprises: a battery module including a battery cell and a battery monitor configured to monitor the battery cell; and a self-hosted server operatively coupled with the battery module, the self-hosted server being configured to receive diagnostic information from the battery monitor and provide network access to the diagnostic information. In implementations, the diagnostics stored by the self-hosted server can be broadcast to or remotely accessed by enterprise control/monitoring systems, application control/monitoring systems, or other remote systems via a secured network (e.g., secured access cloud computing environment).

Secure power supply for an industrial control system

The present disclosure is directed to an input/output module. In some embodiments, the input/output module includes: a plurality of communication channels, each channel of the plurality of communication channels configured to connect to one or more field devices; switch fabric configured to selectively facilitate connectivity between an external control module and the one or more field devices via the plurality of communication channels; a serial communications port configured for connecting the input/output module to the control module in parallel with a second input/output module, the serial communications port configured for transmitting information between the input/output module and the control module; and a parallel communications port configured for separately connecting the input/output module to the control module, the parallel communications port configured for transmitting information between the input/output module and the control module, and transmitting information between the input/output module and the second input/output module.

Input/output module with multi-channel switching capability

Communication network systems are disclosed. In one or more implementations, the communication network system includes a plurality of network devices. Each of the plurality of network devices incorporates one or more multi-port switches, where each multi-port switch includes a connection to the network device incorporating the multi-port switch and a connection to at least one other port of another multi-port switch incorporated by another respective one of the plurality of network devices.

Growing community of inventors

Sunnyvale, CA, United States of America

Albert Rooyakkers