Honeywell International Inc.

Garrett Transportation I Inc.

Honeywell Lntemational Inc.

Alexander Chernoguzov

Prasad Samudrala

William R Hodson

Soumitri N Kolavennu

Paul Francis McLaughlin

Arun Vijayakumari Mahasenan

Christopher Pulini

Ramakrishna S Budampati

Thomas R Markham

Harshal Haridas

Yu-Gene T Chen

Channabasavaraj Raravi

Todd Frederick Bill

Norman Raymond Swanson

William Osei-Bonsu

Patrick S Gonia

Tariq Samad

James Christopher Kirk

SrinivasaRao Katuri

Paul B Gerhart

Kevin P Staggs

Kevin Staggs

Robert Powell

Michael L Baker

Pavel Trnka

Michal Hojsik

Julie Hull Roskos

W Russell Massey

Gary Drayton

Stanley Robert Gorzelic

Mukunda Gudi

Vanathi Ravindran

Niral B Sanghavi

Karthikeya S Ramanathan

William Russell Massey, Jr

Harshal S Haridas

Stanley Gorzelic

Paul F Mclaughlin

Samudrala Prasad

Roger N c/o Honeywell International Inc Schmidt

Christopher F Pulini

Julie J Hull Roskos

An authentication system having a communications bus, a transmitter connected to the bus, and a receiver connected to the bus. A physical layer signal may be applied by the transmitter to a message on the bus for authenticating the transmitter. The physical layer signal may incorporate an identifier (ID) of the transmitter. The receiver may receive the message and decode the physical layer signal on the message. Decoding the physical layer signal on the message may reveal the ID of the transmitter sending the message. The receiver may look up the ID on a list of IDs corresponding to transmitters approved to send the message, to determine whether the ID of the transmitter sending the message matches an ID on the list. Only if the ID of the transmitter matches an ID on the list, then the transmitter may be authenticated and authorized to send the message.

Authentication system for electronic control unit on a bus

Wireless network site survey systems and methods are described herein. One system includes a plurality of wireless nodes placed at a number of locations and a computing device configured to: receive communication metrics, wherein the communication metrics include metrics of communication between the plurality of wireless nodes and between the computing device and each of the plurality of wireless nodes, and generate a node coverage map based on the received communication metrics.

Wireless network site survey systems and methods

A device for secure transmission of vehicle data over vehicle datalinks that may be shared with passenger devices and are connected to a publicly shared network is provided. The device comprises a processor embedded within a portion of an Ethernet cable for a vehicle. A plurality of applications resides in the processor and comprises a VPN application, and a VPN address and certificate update application. A first Ethernet transceiver communicates with the processor through the VPN application and also communicates with onboard electronic equipment. A second Ethernet transceiver communicates with the processor through the VPN application and also communicates with an external datalink. The VPN application automatically establishes a VPN when the datalink is available, provides an authentication certificate to verify that the device is a correct and legitimate node, and verifies a VPN hosting certification to determine whether the device is communicating with a correct and legitimate external facility.

Cross-domain data-gate for secure transmission of data over publicly shared datalinks

An apparatus includes a first distributed control system (DCS) node. The first DCS includes at least one interface configured to communicate, over a network, with a second DCS node. The first DCS node also includes at least one processing device. The processing device is configured to exchange a security association policy with the second DCS node. The processing device is also configured to exchange public keys with the second DCS node using the security association policy. The processing device is also configured to send a public key of the second DCS node to a field programmable gate array of the first DCS node. The processing device is also configured to receive a shared secret from the field programmable gate array. The processing device is also configured to generate a hash of a message using the shared secret.

Embedded security architecture for process control systems

A method includes coupling an adapter device to a field instrument in an industrial control system to provide a wireless communication capability to the field instrument. The method also includes converting, by the adapter device, information from a first protocol native to the field instrument into a second protocol native to a wireless network. The method further includes transmitting the information to at least one other device over the wireless network.

Adapter device for coupling an industrial field instrument to an industrial wireless network

A redundant process controller arrangement includes a primary controller and parallel connected secondary controller each coupled to actuators and sensors coupled to processing equipment. The primary and secondary controllers include a main writable memory including a cache data control algorithm, central processing unit (CPU) with cache memory including cache not supporting write-thru, tracker logic coupled to a control cycle database in a tracked memory region and to a primary tracking buffer. A redundancy link is between the CPUs for passing tracked changes. The algorithm implements memory tracking using copy-back including the primary tracker logic each cycle writing tracked changes into the primary tracking buffer, and at cycle end, transferring tracked changes from the primary tracking buffer to the secondary controller over the redundancy link, and writing tracked changes to the secondary control database.

Memory tracking using copy-back cache for 1:1 device redundancy

A method includes receiving first data from multiple wireless field devices at a remote terminal unit. The first data is received using multiple wireless communication protocols. The method also includes executing control logic at the remote terminal unit in order to control at least part of an industrial process. The method further includes communicating second data to the wireless field devices from the remote terminal unit. The second data is transmitted using the multiple wireless communication protocols. In addition, the method includes communicating at the remote terminal unit with a control system, where the remote terminal unit is at least partially controlled by the control system.

Remote terminal unit (RTU) with wireless diversity and related method

A method includes receiving data from multiple wireless field devices using multiple wireless communication protocols. The method also includes normalizing the data from the wireless field devices using one or more templates associated with the wireless field devices. The method further includes transmitting the normalized data in a unified format. The method could also include generating the one or more templates using device description (DD) files associated with the wireless field devices. Each template may provide, for one wireless field device or type of wireless field device, (i) an indication of a type of data provided by the wireless field device or type of wireless field device, (ii) a range of data provided by the wireless field device or type of wireless field device, and (iii) how to normalize data from the wireless field device or type of wireless field device into the unified format.

Apparatus and method for providing a common interface for multiple wireless communication protocols

Devices, systems, and methods for role-based access control permissions are disclosed. One method includes a policy decision point that receives up-to-date security context information from one or more outside sources to determine whether to grant access for a data client to a portion of the system and creates an access vector including the determination; receiving, via a policy agent, a request by the data client for access to the portion of the computing system by the data client, wherein the policy agent checks to ensure there is a session established with communications and user/application enforcement points; receiving, via communications policy enforcement point, the request from the policy agent, wherein the communications policy enforcement point determines whether the data client is an authorized node, based upon the access vector received from the policy decision point; and receiving, via the user/application policy enforcement point, the request from the communications policy enforcement point.

Role-based access control permissions

A method includes dividing a Time Division Multiple Access (TDMA) structure into a plurality of first time slots and a plurality of second time slots. The first and second time slots are allocated to communications using first and second protocols, respectively. The method also includes communicating with at least one first wireless device using the first protocol during the first time slots. The method further includes communicating with at least one second wireless device using the second protocol during the second time slots.

Slot segregation for supporting multiple communication protocols in an industrial wireless network

A method includes generating at least one access vector associated with a specified device in an industrial process control and automation system. The specified device has one of multiple device roles. The at least one access vector is generated based on one or more communication policies defining communications between one or more pairs of devices roles in the industrial process control and automation system, where each pair of device roles includes the device role of the specified device. The method also includes providing the at least one access vector to at least one of the specified device and one or more other devices in the industrial process control and automation system in order to control communications to or from the specified device.

Policy-based secure communication with automatic key management for industrial control and automation systems

A method includes receiving, at a first distributed control system (DCS) node over a network, information associated with a security manager. The method also includes establishing multiple communication channels between the first DCS node and the security manager over the network using the information, where the communication channels include a non-secure channel and a secure channel. The method further includes receiving security credentials from the security manager at the first DCS node over the non-secure channel and receiving a security policy and an activation time from the security manager at the first DCS node over the secure channel. In addition, the method includes transitioning the first DCS node to communicate with a second DCS node over the network using the security policy at the activation time.

Apparatus and method for securing a distributed control system (DCS)

Adapter device for coupling an industrial field instrument to an industrial wireless network and related system and method

Growing community of inventors

Warrington, PA, United States of America

Alexander Chernoguzov