Digital rights management system and method

Abstract

The present invention concerns application of digital rights management to industrial automation devices including programmable logic controllers (PLCs), I / O devices, and communication adapters. Digital rights management involves a set of technologies for controlling and managing access to device objects and / or programs such as ladder logic programs. Access to automation device objects and / or programs can be managed by downloading rules of use that define user privileges with respect to automation devices and utilizing digital certificates, among other things, to verify the identity of a user desiring to interact with device programs, for example. Furthermore, the present invention provides for secure transmission of messages to and amongst automation devices utilizing public key cryptography associated with digital certificates.

Description

TECHNICAL FIELD [0001] The present invention relates generally to industrial control systems and more particularly towards digital rights management and secure communication to and amongst industrial automation devices. BACKGROUND [0002] Industrial controllers are special-purpose computers utilized for controlling industrial processes, manufacturing equipment, and other factory automation, such as data collection or networked systems. In accordance with a control program, the industrial controller, having an associated processor (or processors), measures one or more process variables or inputs reflecting the status of a controlled system, and changes outputs effecting control of such system. The inputs and outputs may be binary, (e.g., on or off), as well as analog inputs and outputs assuming a continuous range of values. [0003] Measured inputs received from such systems and the outputs transmitted by the systems generally pass through one or more input / output (I / O) modules. These I...

AI Technical Summary

Benefits of technology

[0009] According to another aspect of the subject invention, a certification component can be employed locally within an industrial automation system. The certification component provides a local trusted authority to verify the identity of devices. In other words, I / O devices can identify themselves to controllers as real with a degree of certainty provided by the trusted certification component and controllers can identify themselves as real and deserving of trust to I / O devices. The certification component, therefore, provides a local mechanism to prevent spoofing or impersonation by malevolent persons or entities within a public key infrastructure.

[0011] According to still another aspect of the present invention, certificates can be utilized in conjunction with digital signatures to provide optimal security for communications between and amongst industrial automation devices.

[0012] The present invention is advantageous in that it provides a mechanism for secure communications amongst automaton devices, does not require Internet connectivity, or employment and payment of a third party provider of certificate authority service (e.g., VeriSign™). Furthermore, access to and use of automation devices programs and other documents can be securely managed utilizing certificates as one mechanism for identifying users or entities.

Problems solved by technology

Presently, industrial control systems have no viable means of controlling and managing access to industrial control programs and documents.

Furthermore, there is little or no mechanism to secure communications to and amongst industrial control devices.

Failure to provide reliable and secure communication devices such as controllers and I / O devices can at the very least be fiscally detrimental to a company employing such systems as some company employees could inadvertently or intentionally make changes to systems that cause a plant to shut down of operate inefficiently.

Moreover, in today's world of corporate espionage and terrorism, vulnerable factory systems make for tempting targets.

In extreme cases, vulnerable manufacturing systems can expose secure information such as trade secret processes.

Moreover, the infiltration of malicious programs can result in catastrophic property damage and possibly loss of human life.

Images