Rockwell Automation Technologies Incorporated

Robert A Brandt

Michael B Miller

Michael A Bush

Taryl Jon Jasper

Clark L Case

John C Wilkinson

Ronald Eric Bliss

An automation control system is provided that includes an interface device configured to enable a user to monitor, control, or monitor and control processes of the automation control system. The interface device includes a display that presents a graphical-user-interface that enables the user to monitor, control, or monitor and control the process of the automation control system. Further, a processor renders a plurality of interface screens to the display. The processor determines a current set of access rights of a protected interface screen of the plurality of interface screens, at least one object of the protected interface screen, or both. The access rights are inherited from access rights associated with one or more of the plurality of interface screens, a folder containing the at least one interface screen, or both. Further, the processor provides access, via the protected interface screen, to monitor, control, or monitor and control the processes based upon the set of access rights.

Flexible security control environment

Techniques to facilitate protecting control programs used in an industrial automation environment are disclosed herein. In at least one implementation, control system content provided by a primary entity is received along with a primary security authority provided by the primary entity, wherein the primary security authority defines primary usage rights for the control system content granted to a secondary entity. A secondary security authority provided by the secondary entity is received, wherein the secondary security authority defines secondary usage rights for the control system content that further restrict the primary usage rights. A request is received from a user associated with the secondary entity to perform an action associated with the control system content, and the request is processed with the secondary security authority to determine if the user is authorized to perform the action associated with the control system content based on the secondary usage rights.

Secondary security authority

Techniques to facilitate controlling access to objects associated with an industrial automation environment are disclosed. In at least one implementation, a policy set associated with an object type is created, wherein the policy set defines one or more actions that are allowed for at least one user group to perform with respect to the object type. An object of the object type is identified for security configuration, and a selection of the policy set associated with the object type to apply to the object is received. In response to the selection of the policy set, security is configured for the object by applying the policy set associated with the object type to the object.

Custom security policies for multiple objects

Systems and/or methods are described relating to a security model that provides interoperability with foreign security domains while remaining scalable to small embedded devices. A security token service is provided, which is configured to issue, renew, and/or validate security tokens in response to a token request. A communication protocol, corresponding message structures, and the security tokens are defined in accordance with protocol buffer definitions.

Security model for industrial devices

An automation control system is provided with an interface device configured to enable a user to monitor, control, or monitor and control processes of the automation control system. Upon power on or initialization of the interface device or when a previously logged in user is logged off, the interface device logs in a guest account associated with a user role having a defined set of access rights and provides access to monitor, control, or monitor and control the processes based upon the set of access rights.

An improved system and method for controlling access of components to industrial automation system resources by reference to the various operational states of the industrial automation system. A central access control system includes a processing circuitry, interface circuitry configured to receive information pertaining to the operational state of an automation system, memory circuitry, and a display and user interface. In operation, access to automation components are either allowed or denied based on the designation of an operational state of an automation system.

Growing community of inventors

Menomonee Falls, WI, United States of America

Robert A Brandt