The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Apr. 09, 2019

Filed:

Oct. 24, 2016
Applicant:

Fisher-rosemount Systems, Inc., Round Rock, TX (US);

Inventors:

Eric Rotvold, West Saint Paul, MN (US);

Mark J. Nixon, Round Rock, TX (US);

Michael J. Boudreaux, Round Rock, TX (US);

Assignee:

FISHER-ROSEMOUNT SYSTEMS, INC., Round Rock, TX (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); G05B 19/418 (2006.01); H04L 9/08 (2006.01); H04L 9/06 (2006.01);
U.S. Cl.
CPC ...
H04L 63/0209 (2013.01); G05B 19/4185 (2013.01); H04L 9/0656 (2013.01); H04L 9/0838 (2013.01); H04L 9/0891 (2013.01); H04L 63/0428 (2013.01); H04L 63/0457 (2013.01); H04L 63/06 (2013.01); H04L 63/061 (2013.01); H04L 63/068 (2013.01); H04L 63/0823 (2013.01); H04L 63/102 (2013.01); H04L 63/0492 (2013.01); H04L 63/166 (2013.01); H04L 2209/24 (2013.01); H04L 2209/80 (2013.01); Y02P 90/18 (2015.11); Y02P 90/28 (2015.11);
Abstract

Securing communications from a process plant to a remote system includes a data diode disposed therebetween that allows data to egress from the plant but prevents ingress of data into the plant and its associated systems. Data is secured across the data diode by securely provisioning a sending device at the plant end of the diode to a receiving device at the remote system end. The sending and receiving devices share secret key material that is recurrently updated. To ensure fidelity of communications across the unidirectional data diode, the sending device recurrently provides context information that is descriptive of data sources of the plant. Additionally, data transmitted from plant data sources to the sending device of the data diode may be secured using a respective security mechanism/technique, and data transmitted from the receiving device of the data diode to the remote system may be secured using a respective security mechanism/technique.


Find Patent Forward Citations

Loading…