Centrally managed proxy-based security for legacy automation systems

• US 20060085839A1
• Filed: 09/28/2004
• Published: 04/20/2006
• Est. Priority Date: 09/28/2004
• Status: Active Grant

• Current Assignee: Rockwell Automation Technologies Incorporated (Allen-Bradley Co., Inc.)
• Original Assignee: Rockwell Automation Technologies Incorporated (Allen-Bradley Co., Inc.)
• Inventors: Anderson, Mark B., Batke, Brian A., Brandt, David D., Bush, Michael A.
• Granted Patent: US 7,950,044 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G05B 19/4185 characterised by the network communication
• CPC Class Codes: G05B 2219/31241 Remote control by a proxy or echo server, internet - intranet
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: Y02P 90/02 Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]
• CPC Class Codes: Y02P 90/80 Management or planning

Abstract

A system that facilitates enhanced security with respect to an industrial automation environment comprises a legacy device that is existent within an industrial automation system and a central access authority that provides access rules to a proxy. The proxy receives an access request directed to the legacy device and determines whether the access request is permitted based at least in part upon characteristics of the access request and the access rules provided by the central access authority.

Claims

1. A system that facilitates enhanced security with respect to an industrial automation environment, comprising:

a central access authority that provides access rules relating to a legacy device; and

a proxy that receives the access rules and an access request directed to the legacy device, the proxy determines whether the access request is permitted based at least in part upon characteristics of the access request and the access rules.

2. The system of claim 1, the proxy one of permits and denies access to the legacy device based at least in part upon characteristics of the access request and the access rules.

3. The system of claim 1, the characteristics comprise at least one of an identity of an entity requesting access, an identity of the legacy device, a location of origination of the access request, a location of the legacy device, a read-only request, a read/write request, a write-only request, and a time the access request was received by the proxy.

4. The system of claim 1, the proxy disables access upon inactivity of a pre-determined time.

5. The system of claim 4, the inactivity is based upon a lack of data flow.

6. The system of claim 4, the inactivity is based upon a link-level disconnection notification.

7. The system of claim 6, the inactivity is determined by pinging an entity that requests access.

8. The system of claim 1, an operator initiates the access request.

9. The system of claim 1, an automation device initiates the access request.

10. The system of claim 1, an inline communication device comprises the proxy.

11. The system of claim 10, the inline communication device is a dongle.

12. The system of claim 11, the dongle is fitted external to the legacy device.

13. The system of claim 11, the dongle is permanently attached to an access port of one or more of the legacy device and a remote terminal.

14. The system of claim 1, an IT infrastructure device comprises the proxy.

15. The system of claim 14, the IT infrastructure is one or more of an intelligent switch, a firewall, and a router.

16. The system of claim 1, a server comprises the proxy.

17. The system of claim 1, the proxy is configured to regulate access to a plurality of legacy devices.

18. The system of claim 1, the proxy device is associated with a sensor that monitors whether the legacy device is connected to the proxy.

19. The system of claim 18, the sensor is a link-level mechanism.

20. The system of claim 18, the sensor monitors the legacy device at an application level.

21. The system of claim 1, the proxy communicates with one or more of a disparate proxy and a server upon detection of tampering.

22. The system of claim 1, the central security authority monitors the proxy, and action is taken upon determining that the proxy has been disconnected from the legacy device.

23. An automation security system for an industrial system, comprising:

a central access authority that generates access rules relating to a legacy device within the industrial system; and

a proxy that one of permits and denies access to the legacy device based at least in part upon the generated rules and characteristics associated with the request.

24. A method for enhancing security in an industrial automation system that includes one or more legacy devices, comprising:

associating a legacy device with a proxy, the proxy receives access rules relating to the legacy device; and

receiving an access request relating to the legacy device, access is one of permitted and denied based at least in part upon the access rules and characteristics relating to the request.

25. The method of claim 24, further comprising:

relaying access privileges to a remote terminal,

connecting the remote terminal to the proxy; and

one of permitting and denying access to the legacy device based at least in part upon the access privileges within the remote terminal and the access rules.

26. The method of claim 24, further comprising:

monitoring whether the legacy device is connected to the proxy; and

generating an alarm upon a determination that the legacy device has been disconnected.

27. The method of claim 24, further comprising protecting the proxy and the legacy device via a physical barrier.

28. The method of claim 27, further comprising unlocking a lock associated with the physical barrier upon receipt of a signal from the proxy.

29. The method of claim 24, further comprising logging audit information relating to the legacy device.

30. The method of claim 24, further comprising:

sensing that a legacy device has been replaced; and

automatically providing security relating to a replacement device upon obtaining characteristics of the replacement device.

31. An enhanced security system, comprising:

means for associating a legacy device with a proxy;

means for centrally providing the proxy with access rules relating to the legacy device; and

means for determining whether an entity requesting access to the legacy device should obtain such access.

32. A factory floor security system, comprising:

a component that receives an access request with respect to a factory floor device; and

a location component that regulates access to the factory floor device based at least in part upon a location of an entity initiating the access request and a location of the factory floor device.