IDiyas

For the Inventor, By the Inventor

The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Patent No.:

US 9985789 B1

PDFFull Text
Date of Patent:
May. 29, 2018

Filed:

Oct. 07, 2016

Authentication between industrial elements in an industrial control system

Applicant:

Bedrock Automation Platforms Inc., San Jose, CA (US);

Inventors:

Timothy Clish, Taunton, MA (US);

Samuel Galpin, Westford, MA (US);

James G. Calvin, Attleboro, MA (US);

Albert Rooyakkers, Sunnyvale, CA (US);

Assignee:

Bedrock Automation Platforms Inc., Mansfield, MA (US);

Attorney:

Advent, LLP

Primary Examiner:

Robert B Leung

Int. Cl.
CPC ...
H04L 9/32 (2006.01); G06F 21/44 (2013.01); H04L 9/14 (2006.01); H04L 9/30 (2006.01); H04L 29/06 (2006.01); H04L 29/08 (2006.01);
U.S. Cl.
CPC ...
H04L 9/3263 (2013.01); G06F 21/445 (2013.01); H04L 9/14 (2013.01); H04L 9/30 (2013.01); H04L 63/0823 (2013.01); H04L 63/164 (2013.01); G06F 2212/175 (2013.01); H04L 67/12 (2013.01);
Abstract

A set of redundant industrial control system communications/control modules includes at least a first communications/control module and a second communications/control module. The first and second communications/control modules are configured to perform an authentication sequence including: transmitting a request datagram from the first communications/control module to the second communications/control module, the request datagram including a first nonce, a first device authentication key certificate, and a first identity attribute certificate; transmitting a response datagram from the second communications/control module to the first communications/control module, the response datagram including a second nonce, a first signature associated with the first and second nonces, a second device authentication key certificate, and a second identity attribute certificate; and transmitting an authentication datagram from the first communications/control module to the second communications/control module when the response datagram is valid, the authentication datagram including a second signature associated with the first and second nonces.

Find Patent Forward Citations

Loading…