Honeywell International Inc.

Honeywell Lntemational Inc.

Kevin Staggs

Paul Francis McLaughlin

Alexander Chernoguzov

Thomas R Markham

James Christopher Kirk

Julie Hull Roskos

A device for secure transmission of vehicle data over vehicle datalinks that may be shared with passenger devices and are connected to a publicly shared network is provided. The device comprises a processor embedded within a portion of an Ethernet cable for a vehicle. A plurality of applications resides in the processor and comprises a VPN application, and a VPN address and certificate update application. A first Ethernet transceiver communicates with the processor through the VPN application and also communicates with onboard electronic equipment. A second Ethernet transceiver communicates with the processor through the VPN application and also communicates with an external datalink. The VPN application automatically establishes a VPN when the datalink is available, provides an authentication certificate to verify that the device is a correct and legitimate node, and verifies a VPN hosting certification to determine whether the device is communicating with a correct and legitimate external facility.

Cross-domain data-gate for secure transmission of data over publicly shared datalinks

Devices, systems, and methods for role-based access control permissions are disclosed. One method includes a policy decision point that receives up-to-date security context information from one or more outside sources to determine whether to grant access for a data client to a portion of the system and creates an access vector including the determination; receiving, via a policy agent, a request by the data client for access to the portion of the computing system by the data client, wherein the policy agent checks to ensure there is a session established with communications and user/application enforcement points; receiving, via communications policy enforcement point, the request from the policy agent, wherein the communications policy enforcement point determines whether the data client is an authorized node, based upon the access vector received from the policy decision point; and receiving, via the user/application policy enforcement point, the request from the communications policy enforcement point.

Role-based access control permissions

A system includes a multi-core computer processor. One or more cores of the multi-core computer processor are configured as a security co-processor for the system and for other cores of the multi-core processor, and one or more cores of the multi-core computer processor are configured as a safety manager co-processor for the system and for other cores of the multi-core processor. An operating system of the security co-processor and an operating system of the safety manager co-processor are independent of operating systems of the other cores of the multi-core processor. The security co-processor and the safety manager co-processor are configured to boot before the other cores and to enforce security policy and/or safety policy on the other cores.

Security and safety manager implementation in a multi-core processor

A system includes a computing cloud comprising at least one data storage unit and at least one processing unit. The computing cloud is configured to connect to at least one client and monitor the traffic of the at least one client. The computing cloud is further configured to determine an operational mode of the client, compare the monitored traffic with an anticipated traffic pattern associated with the operational mode, and determine if a security threat is indicated based on the comparison.

Cloud computing as a security layer

A system includes a computing cloud having at least one data storage unit and at least one processing unit. The computing cloud is configured to provide at least one service. The system also includes a plurality of clients each configured to communicate with the computing cloud and at least one industrial automation unit and to transmit information associated with the at least one industrial automation unit to the computing cloud. The at least one processing unit in the computing cloud is configured to determine a status of the at least one industrial automation unit using the information provided the clients.

Cloud computing as a basis for equipment health monitoring service

A system includes a computing cloud having at least one data storage unit and at least one processing unit. The computing cloud is configured to provide at least one service. The system also includes a client configured to communicate with the computing cloud and to selectively offload data to the computing cloud based upon one or more specified criteria. The client is also configured to offload processes to the computing cloud based upon the one or more specified criteria and to use the at least one service of the computing cloud. At least one of the specified criteria may be based upon a determination of whether the data is required for at least one real time process and/or a determination of whether each process is required for at least one real time process. The system may be used in a data storage and retention application or in an industrial automation application.

Growing community of inventors

Peoria, AZ, United States of America

Kevin Staggs