General Electric Company

William Robert Pettigrew

Justin Brandon Chong

Steven William Smith

David Richard Socky

Robert James Boring

Pavan Kumar Singh Thakur

Dana Robert Kreft

Timothy David Rian

Roy Leguire Jackson

Johnny Downor

John Michael Karaffa

John Alexander Petzen, Iii

Andre Steven DeMaurice

Manas Ranjan Sahoo

William Kennedy Galt

Johnny Stephen Downor

A method of securing an industrial control system includes operating the industrial control system in an open mode, wherein communications between a plurality of devices of the industrial control system are unencrypted when the industrial control system is in the open mode. The method includes exchanging security tokens between the plurality of devices of the industrial control system. The method further includes ceasing operating the industrial control system in the open mode and instead operating the industrial control system in a secure mode, wherein the communications between the plurality of devices of the industrial control system are encrypted using the security tokens when the industrial control system is operating in the secure mode.

Systems and methods for secure operation of an industrial controller

Systems, methods, and computer-readable media are disclosed for authentication of networked devices in which a server device may authenticate a client device and/or a client device may authenticate a server device. Authentication credentials may be exchanged by the server device and the client device to enable mutual authentication. Upon authentication of the connection between the server device and the client device, authenticated, and potentially encrypted communications, may be exchanged by the server device and the client device.

Systems and methods for authentication between networked devices

Systems and methods for identifying Foundation Fieldbus linking devices are described. A Foundation Fieldbus linking device may be identified by a gateway device that includes one or more computers. An operational status for the identified linking device may be determined by the gateway device. A virtual address representative of the identified linking device may be determined by the gateway device. A message associated with operation of the identified linking device may be provided by the gateway device to an external system, and the virtual address may be utilized to represent the linking device.

Systems and methods for identifying foundation fieldbus linking devices

The embodiments described herein include systems and methods for removal of alerts for a device. In one embodiment, an industrial process control system includes a controller a controller coupled to a field device. The industrial process control system further includes an alert server coupled to the controller. The controller is configured to detect, via a first protocol, removal of the field device and to communicate, in a second protocol, the removal of the field device to the alert server.

Systems and methods for alert device removal

A system includes an industrial controller having a memory and a processor configured to operate the industrial controller in an open mode, wherein the open mode is configured to enable the industrial controller to receive instructions via unauthenticated network connection or a local connection. The processor of the industrial controller is further configured to operate the industrial controller in a secure mode, wherein the secure mode is configured to enable the industrial controller to receive instructions only via an authenticated network connection.

A system includes a controller configured to control a process, and store at least one binary file, wherein the at least one binary files is generated from at least one source file, wherein the at least one source file comprises instructions configured to be executed by a processor in the controller. The controller may also be configured to retrieve a whitelist file comprising a first hash key value derived from the at least one binary file, and execute an executable file based on the whitelist file, wherein the executable file comprises the source file.

Systems and methods for controlling file execution for industrial control systems

Systems and methods for facilitating communication with Foundation Fieldbus linking devices are described. A first Foundation Fieldbus linking device associated with a first Ethernet network and a second Foundation Fieldbus linking device associated with a second Ethernet network may be identified by a gateway device that includes one or more computers. At least one virtual address representative of the first linking device and the second linking device may be determined by the gateway device. Communications between the first and second linking devices and an external system may be facilitated by the gateway device, and the at least one virtual address may be utilized to represent the linking devices to the external system.

Systems and methods for facilitating communication with foundation fieldbus linking devices

Systems and methods for identifying Foundation Fieldbus linking devices are described. A pair of redundant Foundation Fieldbus linking devices may be identified by a gateway device that includes one or more computers. A single virtual address representative of the pair of redundant linking devices may then be determined by the gateway device, and information associated with operation of at least one of the pair of redundant linking devices may be provided by the gateway device to an external system. During the provision of information to the external system, the virtual address may be utilized to represent the at least one linking device.

Systems and methods for write protecting Foundation Fieldbus linking devices are described. A message output by an external system for communication to a Foundation Fieldbus linking device may be received by a gateway device. The linking device may be identified by a virtual address included in the received message. The gateway device may determine whether the message includes a command to write data to the linking device or a Foundation Fieldbus device connected to the linking device. If it is determined that the message does not include a command to write data, then the gateway device may direct communication of the message to the linking device. If, however, it is determined that the message includes a command to write data, the gateway device may generate an exception for preventing the requested write operation.

Systems and methods for write protecting foundation fieldbus linking devices

A device includes an interface configured to receive an indication of a second device on a network, and a processor configured to determine if the indication is one of an expected set of indications and generate a permanent node address for assignment to the second device if the indication is one of an expected set of indications. The permanent node address places the second device into an active mode as a permanent node addressed device. The processor is further configured to receive at least one device parameter from the permanent node addressed device, determine if the at least one device parameter matches an expected device parameter for the permanent node addressed device, and generate a second permanent node address for assignment to the device if the at least one device parameter matches the expected device parameter for the permanent node addressed device.

Automatic foundation fieldbus device commissioning

Systems and methods for facilitating communication with Foundation Fieldbus linking devices are described. A plurality of Foundation Fieldbus linking devices may be identified by a gateway device that includes one or more computers. A single virtual address representative of the plurality of linking devices may be determined by the gateway device. Communications between the plurality of linking devices and an external system may the be facilitated by the gateway device, and the virtual address may be utilized to represent the plurality of linking devices to the external system.

A system includes a controller and a certificate authority. The controller is configured to control a process. The certificate authority (CA) is configured to issue and to revoke certificates, wherein the controller is configured to use the CA to mutually authenticate a user to enter into a secure mode of operation.

System and method for securing controllers

Systems, methods, and apparatus for facilitating communications between an external controller and Fieldbus devices are described. A primary linking device in communication with the controller and one or more Fieldbus devices may be configured to direct the communication of a timing message to the controller and determine whether a response to the timing message has been received from the controller. Based upon the determination, the primary linking device may direct a switching of communications control to a secondary linking device.

Growing community of inventors

Christianburg, VA, United States of America

William Robert Pettigrew