Fisher-rosemount Systems, Inc

Fieldbus Foundation

Lee Allen Neitzel

David A Glanzer

Dan Halver Ussing

Mark J Nixon

Ling Zhou

Hiroshi Mori

Mitsugu Tanaka

Ram Ramachandran

Thomas B Kinney

Kenneth D Krivoshein

Jack Elias

Chuji Akiyama

Yasuo Kumeda

William R Hodson

Patricia E Brett

Frank Lynch

Ashok K Gupta

Gary Keith Law

Terrence L Blevins

Godfrey Roland Sherriff

Neil J Peterson

Johan Ingemar Tegnell

Tony J Kozlik

Teresa A Chatkoff

Michael D Hirst

Robert Kent Huba

Donald Goff

Colin R Corles

Terrance L Blevins

Raymond D Sawyer

William M Hawkins

Steven K Brodman

Johan I Tegnell

Stephen K Brodman

Colin Richard Corles

A process control system software security architecture, that is more effective at preventing zero-day or other types of malware attacks, implements the use of 'least privileges' when executing the applications and services run within a computer device. The least privileges based architecture separates “service” processes from desktop applications that run on behalf of a logged-on user by partitioning the global namespace of the software system into service namespaces and logged-on user namespaces, and by strictly controlling communications between the applications and services in these different namespaces using interprocess communications. Moreover, the security architecture uses custom accounts to assure that each service process has the least set of privileges that are needed for implementing its function regardless of the privileges associated with the calling application or user.

Process control software security architecture based on least privileges

A process control system software security architecture, that is more effective at preventing zero-day or other types of malware attacks, implements the use of 'least privileges' when executing the applications and services run within a computer device. The least privileges based architecture separates 'service' processes from desktop applications that run on behalf of a logged-on user by partitioning the global namespace of the software system into service namespaces and logged-on user namespaces, and by strictly controlling communications between the applications and services in these different namespaces using interprocess communications. Moreover, the security architecture uses custom accounts to assure that each service process has the least set of privileges that are needed for implementing its function regardless of the privileges associated with the calling application or user.

A process control system having an external data server that provides process control data to external networks via one or more firewalls implements a cost-effective security mechanism that reduces or eliminates the ability of the external data server to be compromised by viruses or other security attacks. The security mechanism includes a DMZ gateway disposed outside of the process control network that connects to an external data server located within the process control network. A configuration engine is located within the process control network and configures the external data server to publish one or more preset or pre-established data views to the DMZ gateway, which then receives the data/events/alarms as defined by the data views from the control system automatically, without performing read and write requests to the external data server. The DMZ gateway then republishes the data within the data views on an external network to make the process control data within the published data views available to one or more client applications connected to the external network. Because this security mechanism does not support client read, write, or configuration access to the external data server within the control system, this security mechanism limits the opportunity of viruses to use the structure in the DMZ gateway device to access the process control network.

Process plant network with secured external access

Example methods and apparatus to access process data stored on a server are described herein. An example method includes receiving a request to access process data via a web browser, identifying a server that stores at least a portion of the process data, wherein the server is associated with an interoperability data packing format, accessing the server to receive the process data, converting the process data from a format associated with the interoperability data packing format to a web browsing format, and embedding at least a first portion of the converted process data into at least one data field for display via the web browser.

Methods and apparatus to access process data stored on a server

Example methods and apparatus to display localized process control objects. A disclosed example method includes receiving a request to view a process control object associated with a process control system, selecting a device description file based on the process control object, the device description file including a tag, selecting a set of locale templates based on a locale associated with the request, selecting a locale template from the set of locale templates based on the process control object, and processing the process control object for display by inserting portions of the selected locale template into the tag in the device description file.

Methods and apparatus to display localized process control objects

Example methods and apparatus to access process data stored on a server are disclosed. A disclosed example method includes receiving a request to access process data via a web browser, identifying a server that stores at least a portion of the process data, wherein the server is associated with an interoperability data packing format, accessing the server to receive the process data, converting the process data from a format associated with the interoperability data packing format to a web browsing format, and embedding at least a first portion of the converted process data into at least one data field for display via the web browser.

Example removable security modules for use with process control devices and related methods are disclosed. An example removable security module includes a body configured to be removably coupled to the process control device and a memory disposed in the body with a shared secret stored in the memory. The example removable security module also includes a processing unit disposed in the body, coupled to the memory and configured to read information from the process control device, compare the information to the shared secret and authenticate the process control device based on the comparison.

Removable security modules and related methods

Example methods and apparatus to provide layered security for interface access control are disclosed. A disclosed example method includes receiving a connect message in a first server from a client application to access at least one server endpoint, in response to receiving the connect message, opening a session between the at least one server endpoint and the client application if the session is authorized to be opened, receiving a request from the client application to open an endpoint that provides at least one of read access, write access, or subscribe access to at least one resource, opening the endpoint within the open session after determining that the client application is authorized to access the at least one resource via the endpoint, receiving a request from the client application to assign a selection of the at least one authorized resource to the endpoint, assigning the at least one selected resource to the endpoint, and granting the client application access to the at least one resource via the endpoint.

Methods and apparatus to provide layered security for interface access control

A communication technique enables the efficient transmission of data through a communication link having a large delay bandwidth product and/or a high bit error rate. The communication technique multiplexes data from one or more data sources through a plurality of communication connections to increase the overall throughput and to reduce the average data transfer delay of the communication link. Each communication connection has a set of communication connection parameters that may be uniquely configured so that each connection carries a particular type of data at a particular effective priority level. Each communication connection may be uniquely configured to have a particular sending buffer size, to deliver messages having a particular length to an underlying layer and to send the messages into the link at a particular rate to orchestrate the manner in which the communication connections send data through the link.

Multiplexed data transmissions through a communication link

A new and improved control system architecture with a single server interface for application software that eliminates manual intervention by providing online, immediate access to information needed for plant/enterprise optimization, operation, configuration, maintenance and diagnostic application software. The control system architecture provides a method of dynamically creating a server directory to enable automatic access in an integrated control system. The method includes accessing a live list of fieldbus devices, building/updating a browse tree structure, the browse tree structure defining a branch and leaf node organization and naming for and data from the fieldbus devices, copying AP directories and FF objects from active fieldbus devices into a FF directory and mapping the FF Directory into the server directory.

Integrated fieldbus data server architecture

A distributed control system architecture (HSE) provides an open, interoperable solution optimized for integration of distributed control systems and other control devices in a high performance backbone, provides an open, interoperable solution that provides system time synchronization suitable for distributed control applications operable over a high performance backbone, and provides an open, interoperable solution that provides a fault tolerant high performance backbone as well as fault tolerant devices that are connected to the backbone. The distributed control system architecture comprises a High speed Ethernet Field Device Access (HSE FDA) Agent, which maps services of a distributed control system, e.g., a fieldbus System, to and from a standard, commercial off-the-shelf (COTS) Ethernet/Internet component. The distributed control system architecture also comprises a High speed Ethernet System Management Kernel (HSE SMK) that operates to keep a local time, and keeps the difference between the local time and a system time provided by a time server within a value specified by the time sync class. The local time is used to time stamp events so that event messages from devices may be correlated across the system. The distributed control system architecture further comprises a High speed Ethernet Local Area Network Redundancy Entity (HSE LRE) that provides redundancy transparent to the applications running on the system. The HSE LRE of each device periodically transmits a diagnostic message representing its view of the network to the other Devices on the system. Each device uses the diagnostic messages to maintain a Network Status Table (NST), which is used for fault detection and selection from a redundant pair of resources.

Block-oriented control system on high speed ethernet

The present invention is a block oriented control system that allows interoperability between devices made by different manufacturers. A block oriented control system is a system which includes a plurality of field devices incorporating a physical layer, communication stack, and user layer, with the field devices being connected by a transmission medium, such as a bus. The physical layer receives signals from the bus and translates the signals into a message for the communications stack, and receives messages from the communications stack and translates the messages into signals for the bus. The communication stack controls the communications between devices operating in the control system. The user layer is a block oriented approach to the system's control functions, and includes function blocks and system management. The function blocks are standardized encapsulations of control functions, such as analog input or proportional/derivative. The system management allows synchronization of the device applications and the network processing.

Block-oriented control system

Block oriented control system

Growing community of inventors

Austin, TX, United States of America

Lee Allen Neitzel