Rockwell Automation Technologies Incorporated

James Joseph Kay

David Allen Johnston

Nathaniel S Sandler

Ronald Edwin Schultz

Karl Staas

Tim S Biernat

Shelly Lynn Urdaneta

Daniel W Clark

Stuart Blair Siegel

Brian Alan Batke

Jack Michael Visoky

Richard J Grgic

William B Cook

Scot A Tutkovics

James W Kenst

Scott A Mintz

Douglas Robert Bodmann

Daniel E Killian

Dale R Terdan

Robert P Anderson

Scott A Tutkovics

A method may include receiving, via a first computing node of a cluster of computing nodes in a container orchestration system, a pod from a second computing node in the cluster of computing nodes. The method may also involve retrieving an image file that includes containers from a registry, such that the pod detail an indication of a location of the image file in the registry. The method then involves generating a package based on the one or more containers and one or more mapped commands implementable by a control system in an operational technology (OT) domain. The mapped commands correspond to operations performable by the control system that corresponds to commands specified in the containers. The method may then involve storing the package in a filesystem shared with the control system.

Integrating container orchestration systems with operational technology devices

A method may include receiving, via a first computing node of a cluster of computing nodes in a container orchestration system, a pod from a second computing node in the cluster of computing nodes. The method may also include retrieving an image file comprising one or more containers from a registry, such that the pod may include an indication of a location of the image file in the registry. The one or more containers may include one or more pre-analytic operations for a control system of a plurality of control systems to perform. The method may then involve generating a package based on the one or more containers and storing the package in a filesystem shared with the control system.

Implementing serverless functions using container orchestration systems and operational technology devices

A method may include receiving, via a first computing node, a first pod from a second computing node. The method may also include retrieving a first image file that may include a first set of containers from a registry based on the first pod. The first set of containers may cause a control system to halt operations. The method may then involve generating a first package based on the first set of containers and storing the first package in a filesystem, receiving a second pod from the second computing node, and retrieving a second image file having a second set of containers from the registry. The second pod may include the second set of containers may cause the control system to update software components. The method may also involve generating a second package based on the second set of containers and storing the second package in the filesystem.

Updating operational technology devices using container orchestration systems

Metering automation controller functionality includes accessing a project code that defines one or more operations of an industrial automation controller, analyzing the project code to identify one or more capabilities of the industrial automation controller that are utilized by the one or more operations, generating a file indicative of the one or more capabilities of the industrial automation controller, transmitting the file to a server that generates a certificate for authorizing the industrial automation controller to execute the project code, receiving the certificate from the server that identifies the file and an authorization for the industrial automation controller to execute the project code to perform the one or more operations, and transmitting the project code, the file, and the certificate to the industrial automation controller for execution.

Systems and methods for metered automation controller functionality

A method for installing embedded firmware is provided. The method includes generating one or more firmware file instances and generating one or more digital certificate instances that are separate instances from the firmware file instances. The method includes associating the one or more digital certificate instances with the one or more firmware file instances to facilitate updating signature-unaware modules with signature-aware firmware or to facilitate updating signature-aware modules with signature-unaware firmware.

Methods for firmware signature

A system and method for employing a file system and file system services on the industrial controller. The file system allows industrial control programs to implement many functions previously performed within the industrial control program and stored in the same memory as the industrial control program. An execution engine is provided that interprets instructions included in an industrial control program. The instructions utilize services in the file system for including user defined routine files loaded from local or remote locations, to load and unload recipe files from local and remote locations, to log and retrieve measured data and trend data to files at local or remote locations, to select different operating systems and to select a running program from a plurality of running programs utilizing the file system.

Method for consistent storage of data in an industrial controller

A method and apparatus to securely distribute embedded firmware to a module in an industrial control system is disclosed. A security certificate corresponding to the firmware is generated utilizing a proprietary algorithm. The certificate includes an identifier corresponding to the module on which the firmware is to be loaded and an identifier corresponding to a removable medium on which the firmware is distributed. The removable medium is inserted into the module in the industrial control system on which the firmware is to be loaded. The module reads the security certificate and verifies that the firmware is intended for the module and verifies that the security certificate includes the identifier for the removable medium which was inserted into the module. If the firmware is intended for the module and the security certificate includes the identifier for the removable medium, the module loads the firmware from the removable medium.

Method and apparatus for secure distribution of embedded firmware

A multicore processor for industrial control provides for the execution of separate operating systems on the cores under control of one of the cores to tailor the operating system to optimum execution of different applications of industrial control and communication. One core may provide for a reduced instruction set for execution of industrial control programs with the remaining cores providing a general-purpose instruction set.

Growing community of inventors

Chardon, OH, United States of America

James Joseph Kay