Rockwell Automation Technologies Incorporated

Kyle E Neet

Jonathan D Bradford

Sivaram Balasubramanian

Mark A Flood

Anthony Gerard Gibart

Kendal R Harris

Scott A Pierce

Jack Michael Visoky

Raymond R Husted

Chandresh R Chaudhari

David M Fort

Taryl Jon Jasper

Gary W Baczkowski

David E Huffman

Jessica E Forguites

James W Kenst

Nicholas Stay

Stephen A Wenner

Robert Lantzy

James R Copus

Marcus E Griffin

Krzysztof Glensk

William J Petro

A security device includes one or more processors and a memory that includes instructions, that when executed by the processors, cause the processors to perform operations. The operations include monitoring data traffic between industrial automation devices in an industrial system and one or more devices in an external network, determining that a first industrial automation device does not include native security features for receiving secure data from the devices in the external network or transmitting secure data to the devices in the external network, and implementing one or more security techniques in response to determining that the first industrial automation device does not include the native security features.

Systems and methods for automatic security enforcement for industrial automation devices

A system of communicating data over a high availability industrial control system is disclosed. The industrial control system includes a first data producer, a second data producer in communicative connection with the first data producer, a first data consumer, and a second data consumer in communicative connection with the first data consumer. The system further includes the first producer communicating the data over multiple connection paths from the first producer to the first consumer and the second consumer through intermediate modules, and the second producer communicating the data over multiple connection paths from the second producer to the first consumer and the second consumer through intermediate modules. Also disclosed is a method of communicating data over the high availability industrial control system.

System and method of communicating data over high availability industrial control systems

An industrial automation system includes a collector component communicatively coupled to a first network and configured to receive one or more event logs via a first communication protocol. The industrial automation system also includes a first industrial automation component communicatively coupled to the first network and the collector component. The first industrial automation component is configured to communicate via the first communication protocol. Additionally, the industrial automation system includes a second industrial automation component configured to communicate via a second communication protocol, generate a first event log representative of a property associated with the second industrial automation component, and send the first event log to the first industrial automation component. The first industrial automation component is configured to convert the first event log into second event log interpretable by the collector component and send the second event log to the collector component via the first network.

Proxy system for system log messages

Secure data transmission between an input device and both industrial controllers in a high-availability system utilizes a secure connection established between the primary industrial controller and the input device. Data required to establish the secure connection is stored on the primary controller as part of the connection data corresponding to the secure connection. The input device transmits data to the primary controller over the secure connection according to the desired level of security. The primary controller transmits the connection data defining the secure connection to the secondary controller. If a failure occurs in the primary controller, the secondary controller establishes a connection to the input device using the connection data for the secure connection, such that the secondary controller may assume responsibility for the controller end of the secure connection. The primary controller transmits the input signals to the secondary controller via the dedicated connection between controllers.

System and method for secure connections in a high availability industrial controller

An industrial controller executes a control program held in non-transitory medium to: (a) open connections for the communication of data on the industrial control network, the connection subject to a timeout; (b) operate in a synchronized state with the second industrial controller to execute a same control program to communicate same control data; (c) operate in an unsynchronized state providing no-operation data to the industrial control network, the no-operation data preventing timeout of the open connections on which it is communicated.

System and method of connection management during synchronization of high availability industrial control systems

An industrial automation system is provided. The system includes a link layer that includes one or more ports that can communicate via one or more communication protocols. An application layer communicates with one or more network objects and a core layer bridges the application layer and the link layer.

Control and communications architecture

An interface for a network communication card for industrial controllers uses a dual-port memory that may be re-partitioned by values communicated through the dual-port memory itself. A default partitioning and a non re-partitionable common area allow flexible re-partitioning without disrupting the communication necessary for the partition to take place. Negotiation between the controller and network card allow maximum flexibility in re-partitioning while respecting partitioning limits characteristic of the network card and its network.

Industrial controller and network card with buffer negotiation

An interface between a network communication card and an industrial controller allows rapid asynchronous buffering using two buffers and two associated registers for each data direction. A reading of the buffers is proceeded by an attempt to copy from the write designation register to the read designation register checking the equality of the register values and then reading from the buffer designated by their common value. Conclusion of the reading sets the write destination register to zero. Writing of the buffers is proceeded by a checking of the read designation register for zero value and then writing to other than the last buffer indicated by the write designation register. If the read designation register is non-zero, then the writing occurs to the opposite buffer of that in the read designation register. The write designation register is then updated to indicate the buffer written to.

Interface for industrial controller network card

Growing community of inventors

University Heights, OH, United States of America

Kyle E Neet