Interface to generate data compatible with an external system in an oil and gas asset supply chain

• US 10,438,012 B2
• Filed: 04/04/2014
• Issued: 10/08/2019
• Est. Priority Date: 04/04/2014
• Status: Active Grant

• Current Assignee: Sicpa Holding SA
• Original Assignee: Sicpa Holding SA
• Inventors: Finkel, Charles, Campbell, Mark, Van Ngoc Ty, Christophe, Caset, Giorgio
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Lapian, Alexander R
• Application Number:
  US15/301,572
• Publication Number:
  US 20170116434A1
• Time in Patent Office: 2,013 Days
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06Q 50/06 Energy or water supply
• CPC Class Codes: G08B 13/00 Burglar, theft or intruder alarms

Abstract

The present disclosure generally relates to an interface system and method of interfacing to generate data compatible with an external system in an oil and gas asset supply chain, and in particular to an interface and interface method for generating secure and verifiable data to prevent tampering, injection of unwanted data resulting from an unauthorized access along a supply chain. An interface generates and transforms data in an oil and gas supply chain for compatibility with external systems. Collected data is captured by an industrial control system sensor or data collector, which is transferred in a secure intermediary hardware platform to interface with a software component. The collected data is then modified using a business rules engine to create enhanced data and events created from the enhanced data.

Claims

1. A method of generating data in an oil and gas supply chain for compatibility with external systems, comprising:

capturing collected data from at least one of an industrial control system, sensor and data collector;

signing and storing the collected data in a secure intermediary hardware platform comprising at least one software component; and

adding attributes to the collected data using a business rules engine to create enhanced data useful in a global management system, wherein the additional attributes of the enhanced data include at least one of a secure attribute allowing detection of modification or corruption and authentication, and

wherein the method comprises authenticating the collected data by acquiring several times from the at least one of the industrial control system, sensor and data collector, averaging the collected data and verifying whether the collected data is of the same nature, prior to being transferred to the secure intermediary hardware platform.

2. The method according to claim 1, wherein at least part of the enhanced data created using the business rules engines are transformed into events.

3. The method according to claim 2, wherein the enhanced data or the events based on the enhanced data are signed or encrypted with at least one of hardware or software security module(s).

4. The method according to claim 1, further comprising securely collecting the collected data from at least one of the industrial control system, sensor and data collector.

5. The method according to claim 1, further comprising protecting the secure intermediary hardware platform from at least one of tampering, injection of unwanted data and unauthorized access.

6. A system for generating data in an oil and gas supply chain for compatibility with external systems, comprising:

at least one of an industrial control system, sensor and data collector to capture collected data;

a secure intermediary hardware platform for signing and storing the collected data to interface with at least one software component;

a business rules engine adding attributes to the collected data to create enhanced data useful in a global management system, wherein the additional attributes of the enhanced data include at least one of a secure attribute allowing detection of modification or corruption and authentication, and

wherein the system is configured to authenticate the collected data by acquiring several times from the at least one of the industrial control system, sensor and data collector, averaging the collected data and verifying whether the collected data is of the same nature, prior to being transferred to the secure intermediary hardware platform.

7. The system according to claim 6, wherein the enhanced data created using the business rules engines are transformed into events.

8. The system according to claim 7, wherein the enhanced data or the events based on the enhanced data are signed or encrypted with at least one of hardware or software security module(s).

9. The system according to claim 6, wherein the collected data from at least one of the industrial control system, sensor and data collector are collected in a secure manner.

10. The system according to claim 6, wherein the secure intermediary hardware platform is protected from at least one of tampering, injection of unwanted data and unauthorized access.

11. A non-transitory computer readable medium storing a program to generate data in an oil and gas supply chain for compatibility with external systems, the program when executed by a processor, comprising:

capturing collected data from at least one of an industrial control system, sensor and data collector;

signing and storing the collected data in a secure intermediary hardware platform to interface with at least one software component; and

adding attributes to the collected data using a business rules engine to create enhanced data useful in a global management system, wherein the additional attributes of the enhanced data include at least one of a secure attribute allowing detection of modification or corruption and authentication, and

wherein the program comprises authenticating the collected data by acquiring several times from the at least one of the industrial control system, sensor and data collector, averaging the collected data and verifying whether the collected data is of the same nature, prior to being transferred to the secure intermediary hardware platform.

12. The non-transitory computer readable medium according to claim 11 wherein the enhanced data created using the business rules engines are transformed into events.

13. The non-transitory computer readable medium according to claim 12, wherein the enhanced data or the events based on the enhanced data are signed or encrypted with at least one of hardware or software security module(s).

14. The non-transitory computer readable medium according to claim 11, further comprising securely collecting the collected data from at least one of the industrial control system, sensor and data collector.

15. The non-transitory computer readable medium according to claim 11, further comprising protecting the secure intermediary hardware platform from at least one of tampering, injection of unwanted data and unauthorized access.