Schneider Electric Usa, Inc.

Square D Company

Chad Andrew Lloyd

Jayme Lee McQuillan

Jeffrey W Yeo

Piotr Przydatek

Theresa Krivanek Wall

Tony A Johnson

Anthony W Johnson

Coni Christine Wimsatt

Marcus Little

John Jeffrey Dodson

Jason D McClanahan

Yixiong Zheng

Piotr Boleslaw Przydatek

Jayme Lee Mcquillan

Anthony Johnson

Techniques for managing data flowing from mission critical systems. Embodiments include receiving a plurality of data values to transmit to a remote system using a unidirectional data communications network. The data values are prioritized according to a plurality of priority levels and the prioritized plurality of data values are grouped into one or more data updates for each of the plurality of priority levels. Embodiments enqueue the one or more data updates into a respective transmission queue corresponding to each of the plurality of priority levels and transmit the data updates over the unidirectional data communications network in an order determined based on the respective priority levels of the transmission queues.

Secure, efficient and reliable transmission of data in mission critical systems

A method is provided for providing an interface via an AR display for an operator to interact with displayed interactive graphical elements (IGEs) corresponding to respective actual components of a physical asset, wherein the interface is configured for the operator to control a selected actual component using a corresponding IGE, determining, responsive to detected user interaction with the corresponding IGE, whether the selected controllable actual component is designated as sensitive, and responsive to a determination that the selected controllable actual component is designated as sensitive, requiring enhanced multifactor authentication (MFA) to establish that the local user is local to the asset using a first factor of the enhanced MFA and that the local user is authenticated using a second factor of the enhanced MFA, and allowing control of the sensitive actual component based on receipt of proof of authentication of the local user by the enhanced MFA.

Authentication control of an industrial asset

At least one aspect disclosed herein is directed to a SCADA project analysis system. The system includes memory ad at least one processor coupled to memory. The processor is configured to receive information regarding a supervisory control and data acquisition (SCADA) system configured to monitor an industrial process, the information describing at least one first programmable device within the SCADA system, identify at least one analyzer from a plurality of analyzers based on the information, the at least one analyzer being configured to generate an assessment of the SCADA system based on the information, the assessment describing at least one capability of the SCADA system, execute the at least one analyzer to generate the assessment of the SCADA system based on the information, and provide the assessment to an external entity.

Analyzing SCADA systems

A method for analyzing SCADA projects includes generating a configuration for the SCADA system deployed in a default environment, receiving a first result of a set of tests run on the SCADA system using the configuration in the default environment, determining whether the first result of the set of tests is successful, deploying the SCADA system using the configuration in a customer environment, comparing the default environment with the customer environment, determining differences between the default environment and the customer environment, receiving a result of another set of tests run based on the differences between the default environment and the customer environment, adjusting the configuration in the customer environment based on the result of the another set of tests to generate an adjusted configuration, and receiving a second result of the set of tests run on the SCADA system using the adjusted configuration in the customer environment.

Verification systems are provided for verification of proper execution of control commands on remote devices. In some embodiments, the verification systems can include video cameras, audio sensors, thermal detectors, etc., to provide secondary sources of information by which to verify primary reports on a state of a remote device. Each device can be associated with a device profile defining operating characteristics of the remote device in various states. In some examples, device properties can also be defined based on a current state of the device and a received control command. In some examples, the device profiles are models of expected device properties that can used to verify proper execution of control commands. In some embodiments, detection of state mismatch can trigger a variety of actions by the system to mediate the mismatched state according to a variety of control rules.

Systems and methods for advanced confirmation of control operations

According to another embodiment, a system for generating alarm aggregation rules is provided. The system includes a memory and at least one processor coupled to the memory. The at least one processor is configured to receive information descriptive of a set of devices, each device within the set having one or more devices within the set that are associated with the device and each device of the set being capable of entering at least one anomalous state; identify at least one type of alarm aggregation rule that applies to at least one device within the set based on one or more anomalous states that the at least one device is capable of entering; and store an association between an alarm aggregation rule of the at least one type and the set of devices.

Automatic configuration of alarm aggregations

According to one aspect, a SCADA system is provided. The SCADA system includes a network interface configured to communicate data with a plurality of industrial control devices via an industrial control system (ICS) network. The SCADA system further includes a memory storing SCADA configuration information including ICS network configuration information and device information descriptive of each industrial control device of the plurality of industrial control devices and at least one processor in data communication with the memory and the network interface. The SCADA system also includes an intrusion detection component executable by the at least one processor and configured to read the SCADA configuration information, generate, from the SCADA configuration information, authorized communication information descriptive of one or more expected communication types of communications authorized for transmission via the ICS network.

SCADA intrusion detection systems

A method of acquiring data and performing calculations on the data using a provider service. A provider ticket service (PTS) receives tickets from one or more clients. Each ticket includes a calculation identifier and a payload. The calculation identifier identifies a calculation to be performed using information in the payload. The PTS associates a unique ticket identifier with each ticket. A ticket manager submits a selected ticket from the PTS to a provider host service (PHS), which determines which provider is to perform the calculation identified by the selected ticket by inspecting provider identification information in the selected ticket. The PHS launches a provider host thread (PHT) that invokes the provider determined to perform the calculation identified by the calculation identifier of the selected ticket. The provider performs the calculation and returns its result to the PHS, which passes the result back to the PTS, which returns the result to the requesting client.

Calculation engine and calculation providers

A system and methods for using data from an external database compiled from real device used for testing and simulation of a system. The system includes an external database interface to access an external database. The external database includes a plurality of categories of time-value data collected from an electrical device. An importer converts one of plurality of categories of time-value data to a corresponding topic of a common data format. A device profiler is coupled to the importer to create a device profile including the converted topic. A database profiler creates a database profile representing a system including a device defined by the device profile and including the category of time-value data.

Power monitoring device simulation using a database profile generated from real time-value data

Automatically configurable master and slave devices in a master/slave multi-drop serial network are disclosed. In one embodiment, the devices and network utilize the Modbus serial communications protocol over a serial multi-drop network, such as an RS-232 or RS-485 (also referred to as EIA-485) based network. Alternatively, the disclosed embodiments may be used with any master/slave serial multi-drop network. In one embodiment, the master and slave devices include pseudo-slave and pseudo-master auto-configuration operating modes, respectively, whereby slave devices which are introduced to the network may send unsolicited identifying messages to the master device which will determine and assign a unique network address thereto, causing the slave device to configure itself to be responsive to messages addressed therewith and then enter its normal slave operating mode to await such messages. The master device, thereafter, maintains a database of the slave devices and their associated network addresses. In one embodiment, legacy slave devices, which do not support the disclosed pseudo-master auto-configuration mode, are supported by the master device which determines when network addresses are in use by such legacy devices, as will be described, and avoids assigning those addresses to newly introduced auto-configurable slave devices.

Growing community of inventors

Old Hickory, TN, United States of America

Chad Andrew Lloyd