Invensys Systems, Inc.

Emc Corporation

Emc IP Holding Company LLC

Scott Volk

Mark Allen Johnson

Robert Hall

Keith E Eldridge

Paul Meskonis

Steven Dardinski

Brian Mackay

Kenneth A Burke

Matthew Stevens

Bernard E Brady, Jr

Brian McKay

Shuva Brata Deb

Edward G Quackenbush

Kurt Severance

Methods, apparatus, and processor-readable storage media for generating security policies for end-user devices using group rankings and partial policy determinations are provided herein. An example computer-implemented method includes ranking end-user device groups within an enterprise, wherein each of the groups is associated with one or more security-related policy settings; assigning a given end-user device to two or more of the groups based on device parameters attributed to the given end-user device; generating a policy for the given end-user device by performing partial policy determinations across the two or more groups to which the given end-user device is assigned, wherein performing the partial policy determinations comprises defining, in an order based at least in part on the ranking of the groups, security-related settings from the two or more groups, until all security-related settings required by the policy are defined; and outputting the policy to the given end-user device.

Generating security policies for end-user devices using group rankings and partial policy determinations

Methods and apparatus are provided to monitor and analyze activity occurring on a networked computer system. In some embodiments, a method is provided for capturing, in a data structure, at least a portion of a notification describing a network event provided by a node on a computer network, identifying a data element (e.g., an IP address of the node) within the notification, and updating an index and/or summary based on the data element. The data structure may be stored in a file system maintained on a site, and sites may exchange information related to the notification data stored on each. In some embodiments, a query which is issued to a site may be processed using data transferred from other sites, and/or may be split into one or more additional queries which may be transmitted for processing to other sites.

Network event capture and retention system

Connection objects or other such data structures facilitate establishing and configuring connections between objects that model components in a process control system. A first set of data structures (e.g., the object connection type structures) identify valid types for component-to-component pairings and the respective roles of each component in the pairing (e.g., parent or child, source or sink). A second set of data structures (e.g., the parameter connection type structures) supply similar information for parameter-to-parameter connections. Together, these data structures can be used, for example, to validate component-to-component connections suggested by the user and to automatically configure parameter-to-parameter connections. Actual connections, both at the component or parameter level, are reflected using parameter overrides within the parameterized object model&#x2014;with which the connection objects are constructed.

Process control configuration system with connection validation and configuration

Methods and apparatus for configuring process, environmental, industrial and other control systems generate and/or utilize models representing configurations of control systems and/or the systems controlled by them. Records of changes to the models or the configurations represented by them are maintained, thereby, for example, providing bases for determining current states, prior states and histories of changes. Objects in the model have characteristics, such as an object type characteristic and an area characteristic. Users can have corresponding permissions. A security mechanism apparatus controls access by users to the objects. Composite objects are defined by definition objects and are displayed in encapsulated or expanded formats. Objects can include an edit control type identifier that determines how they are presented for editing. Functionality responds to user commands by transferring characteristics of a first object depicted by the graphical user interface to a second object. Configuration-time formulas contained objects are evaluated to constants prior to downloading to the control system.

Control systems and methods with versioning

Apparatus for control systems with objects that are associated with live data

Apparatus and method for configuring a process control system having one or more digital data processors

Control system configurator and methods with object characteristic swapping

Methods and apparatus for configuring a process control system with a configuration editor executing on a digital data processing device

Control system configurator and methods with edit selection

Control systems and methods with smart blocks

Control systems and methods with composite blocks

Apparatus and method for configuring and editing a control system with live data

Methods and apparatus for control configuration with versioning, security, composite blocks, edit selection, object swapping, formulaic values and other aspects

Growing community of inventors

North Easton, MA, United States of America

Scott Volk