Bedrock Automation Platforms Inc.

Analog Devices,inc.

Brooks Automation Gmbh

Timothy Clish

Albert Rooyakkers

James G Calvin

Samuel Galpin

Louis F Genatossio

Joseph Chopy, Jr

John J Varone

Norbert Elsdoerfer

John Burroughs

Rama Machireddy

Operator actions and/or other commands or requests are secured via an authentication path from an action originator to a communications/control module or any other industrial element/controller. In implementations, an industrial control system includes an action authenticator configured to sign an action request generated by the action originator. The destination communications/control module or any other industrial element/controller is configured to receive the signed action request, verify the authenticity of the signed action request, and perform a requested action when the authenticity of the signed action request is verified.

Operator action authentication in an industrial control system

A secure industrial control system is disclosed herein. The industrial control system includes a plurality of industrial elements (e.g., modules, cables) which are provisioned during manufacture with their own unique security credentials. A key management entity of the secure industrial control system monitors and manages the security credentials of the industrial elements starting from the time they are manufactured up to and during their implementation within the industrial control system for promoting security of the industrial control system. An authentication process, based upon the security credentials, for authenticating the industrial elements being implemented in the industrial control system is performed for promoting security of the industrial control system. In one or more implementations, all industrial elements of the secure industrial control system are provisioned with the security credentials for providing security at multiple (e.g., all) levels of the system.

Secure industrial control system

A zero trust industrial control system is disclosed herein. The industrial control system includes a plurality of industrial elements (e.g., modules, cables) which are provisioned during manufacture with their own unique security credentials. A key management entity of the zero trust industrial control system monitors and manages the security credentials of the industrial elements starting from the time they are manufactured up to and during their implementation within the industrial control system for promoting security of the industrial control system. An authentication process, based upon the security credentials, for authenticating the industrial elements being implemented in the industrial control system is performed for promoting security of the industrial control system. In one or more implementations, all industrial elements of the zero trust industrial control system are provisioned with the security credentials for providing security at multiple (e.g., all) levels of the system.

A set of redundant industrial control system communications/control modules includes at least a first communications/control module and a second communications/control module. The first and second communications/control modules are configured to perform an authentication sequence including: transmitting a request datagram from the first communications/control module to the second communications/control module, the request datagram including a first nonce, a first device authentication key certificate, and a first identity attribute certificate; transmitting a response datagram from the second communications/control module to the first communications/control module, the response datagram including a second nonce, a first signature associated with the first and second nonces, a second device authentication key certificate, and a second identity attribute certificate; and transmitting an authentication datagram from the first communications/control module to the second communications/control module when the response datagram is valid, the authentication datagram including a second signature associated with the first and second nonces.

Authentication between industrial elements in an industrial control system

A secure industrial control system is disclosed herein. The industrial control system includes a plurality of industrial elements (e.g., modules, cables) which are provisioned during manufacture with their own unique security credentials. A key management entity of the secure industrial control system monitors and manages the security credentials of the industrial elements starting from the time they are manufactured up to and during their implementation within the industrial control system for promoting security of the industrial control system. An authentication process, based upon the security credentials, for authenticating the industrial elements being implemented in the industrial control system is performed for promoting security of the industrial control system. In one or more implementations, all industrial elements of the secure industrial control system are provisioned with the security credentials for providing security at multiple (e.g., levels of the system.

Industrial control system redundant communication/control modules authentication

Industrial control system redundant communications/control modules authentication

A portable display unit includes a serial port to connect to a device such as a vacuum network controller, cryopump, turbomolecular pump, gauges or compressor. In particular, the display unit can be plugged and unplugged to devices of different types. The portable display unit includes a display and control keys for programming, controlling and monitoring the functions of a device. The device accessible to the display unit includes a display interface having software code and files to interface with the display unit. Accordingly, the portable display unit can be used with any device having software code to interface with the display unit. The software code generates, refreshes and communicates menus to the portable display unit to provide graphical interface of the device's functions. The portable display unit further includes inner and outer hand grips so that the display unit can be held by hands of different sizes. The hand grips allow user with different hand sizes to firmly hold and navigate the display using control keys with fingers.

Growing community of inventors

Taunton, MA, United States of America

Timothy Clish