Rockwell Automation Technologies Incorporated

Daniel Baliey Seger

Kenwood H Hall

Michael D Kalan

Taryl Jon Jasper

Douglas J Reichard

Robert J Kretschmann

Subbian Govindaraj

Ronald Eric Bliss

Kenneth Scott Plache

Raymond John Staron

Russell William Brandes

James Harry Jarrett

David Alan Vasko

Sujeet Chand

Brian J McMullen

Alex Laurence Nicoll

David A Snyder

John B Dart

Timothy Patrick Boppre

Stephen C Briant

Joachim Thomsen

Scott N Sandler

Noel Henderson

Manuel Sukerman

Paul G Kucharski

Kevin E Colloton

Timothy F Roback

An industrial data presentation system leverages structured data types defined on industrial devices to generate and deliver meaningful presentations of industrial data. Industrial devices are configured to support structured data types referred to as basic information data types (BIDTs) comprising a finite set of structured information data types, including a rate data type, a state data type, an odometer data type, and an event data type. The BIDTs are discoverable by a gateway device on which models of industrial assets can be defined, where the models reference the BIDTs defined on the industrial devices. The gateway device can retrieve industrial data from the data tags, formatted in accordance with the data types and associated user-defined metadata specific to the respective data types. The gateway device or a separate application server system can then generate graphical presentations of the industrial data in accordance with the model and the metadata.

Industrial automation information contextualization method and system

Aspects describe multiple interface support that provides dynamic switching between new and old interface revisions. A first interface application is selected from a set of alternative interface applications for an industrial automation system. Support for each interface application included in the set of alternative interface applications is provided. A second interface application is downloaded and associated with the first interface application. The second interface application is enabled during runtime. If needed, the second interface application can be selectively disabled and an operation resumed with the first interface application.

Multiple interface support

An industrial control system hardened against malicious activity monitors highly dynamic control data to develop a dynamic thumbprint that can be evaluated to detect deviations from normal behavior of a type that suggest tampering or other attacks. Evaluation of the dynamic thumbprint may employ a set of ranges defining normal operation and reflecting known patterns of interrelationship between dynamic variables.

Security system for industrial control infrastructure using dynamic signatures

An industrial controller resistant to malicious attacks may provide a graduated response employing the elements of the control system to reduce access to the control system, log data, and announce intrusion based on a dynamically evolving assessment of the severity of any detected security issues.

Active response security system for industrial control infrastructure

A template for implementing a control system with security features provides a generic control program and device programs for distribution to one or more industrial controllers and associated control devices together with matching security programs for distribution to the control devices, the security programs providing for the generation of security thumbprints indicating the state of the control devices. The template may also be associated with a security-monitoring program that can receive and process the security thumbprints.

Rapid configuration security system for industrial control infrastructure

An industrial control system providing security against tampering or modification generates periodic state thumbprints defining a state of control elements that may be forwarded to a security or safety appliance for comparison to a benchmark thumbprint indicating no tampering. The transmitted state thumbprint may capture not only programs but also configuration and environmental states of the control element.

Security system for industrial control infrastructure

Aspects describe multiple machine interfaces that provide automated implementations of a host that executes at least one service. The service comprises internal aspects, which include a reusable definition and a specification, which are hidden from a user or selectively exposed but not modifiable by the user. Functional connections and controls are provided for the automated implementations of the host. Platform configurations, which include the at least one service, interact with the automated implementation of the host. One or more functionalities of the functional connections can be selectively exposed based on a user credential. The automated implementation of the host comprises execution of the at least one service.

Multiple machine interface

System(s), apparatus(es) and method(s) are provided for to managing and developing an industrial system included in the industrial environment. Intelligence related to a configuration of the industrial system is collected and processed to generate information related to operational condition(s) of the industrial system. Intelligence can be collected actively or passively: In active collection, a platform that collects the intelligence retrieves configuration record(s) from the industrial system, whereas in passive collection, the platform received one or more configuration records from the industrial automation system. Collected intelligence is cast into a set of configuration units that defines industrial system and functionality thereof. In addition, a set of services configured to convey specific functionality associated with at least one configuration unit is composed. At least a portion of the generated information can be supplied to the industrial system or one or more components thereof in accordance with a policy configured by the industrial automation system.

Management and development of an industrial environment

Aspects describe an apparatus, method and system for constructing an application in an industrial automation system. An identification component can receive at least one requirement of the application. Based upon the at least one requirement, the identification component can select at least one service that satisfies the at least one requirement. The at least one service can be associated with at least one operational requirement. The identification component can match at least one host to the at least one service by matching the at least one operational requirement with at least one capability of the at least one service.

Hosting requirements for services

An object can be used in an industrial control configuration in relation to performing a function or task. Matching can occur such that an object with operational requirements can bind with a host that has capabilities that meet those operational requirements&#x2014;matching can occur automatically as well as through user operation. Once matched, different functionality can be presented to a user pertaining to the object. To assist the user, the object can include external references, logic, local or private data, as well as others in addition to resources. To facilitate operation, capabilities and resources can be published in a directory that can be accessed by different entities&#x2014;sometimes with security constraints in order to protect configuration integrity. Likewise, a subscription system can be employed such that when a change to a related entity is made, a notice can transfer to related entities and operation can alter based upon the change.

Modular object and host matching

System(s) and method(s) are provided for implementing a set of interface components across a set of layers of an industrial environment, and for managing at least one interface component or at least one layer of the industrial environment. To implement an interface component in at least one layer in the set of layers, a specification that defines the interface component is acquired and, based at least on the specification, a service is generated. Execution of the service implements the interface component. The managing includes deploying or discovering the at least one interface component or the at least one layer of the industrial environment. The managing also includes indexing specific functional feature(s) of the at least one interface component and searching across the set of layers for one or more interface components that satisfy specific functional criteria. Moreover, the managing can include supplying metadata related to interface component(s) or layer(s).

Growing community of inventors

Kennesaw, GA, United States of America

Daniel Baliey Seger