SYSTEM AND METHOD FOR CONNECTING CLOSED, SECURE PRODUCTION NETWORK

• US 20090013030A1
• Filed: 07/03/2007
• Published: 01/08/2009
• Est. Priority Date: 07/03/2007
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Choudhury, Ziyad A.
• Granted Patent: US 8,341,277 B2
• Time in Patent Office: Days
• US Class Current: 709/203
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 45/02 Topology update or discovery
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A system and method for providing connectivity to a closed, secure production network, and computer program products for executing the same and, more particularly, to a system and method for creating a virtual network to provide communication with remote tools. The system includes a server configured to create a virtual network for tools in a production facility and provide authentication and tool routing information to a client in order to gain access to the tools in the virtual network. The virtual network isolates each tool of the tools from each other.

Claims

1. A system, comprising a server configured to create a virtual network for tools in a production facility and provide authentication and tool routing information to a client in order to gain access to the tools in the virtual network, the virtual network isolates each tool of the tools from each other.

2. The system of claim 1, wherein the server is configured to create a firewall between the client and the server.

3. The system of claim 1, wherein the tools are on a private, non-advertised, network.

4. The system of claim 1, further comprising a host server configured to provide client credentials to the server.

5. The system of claim 4, wherein the server receives the credentials from the host server and sends authentication and routing information to the client based on the credentials.

6. The system of claim 5, wherein the server sends the authentication and routing information directly to the client.

7. The system of claim 5, wherein the server sends the authentication and routing information to the client through the host server.

8. The system of claim 7, wherein the host server gains access to a tool via the virtual network and allows the client to communicate with the tool, while isolating any remaining tools from the client which are non-authorized.

9. The system of claim 5, wherein the client and server communicate through one of TCP/IP communications, a LAN, and a WAN.

10. The system of claim 1, wherein the server uses Multi-protocol Label Switching (MPLS) technology to set up the virtual network.

11. The system of claim 1, wherein a host server is aware of the virtual network and is configured to communicate natively with the tools.

12. The system of claim 1, wherein the tools are independent nodes on the virtual network, isolated from each other.

13. The system of claim 1, wherein the server is configured to block off all network traffic going to a private network from systems in an offline room.

14. A method, comprising:

receiving client credentials and tool access information, the tool access information being associated with tools residing in a private, non-advertised network;

creating a virtual network where each tool residing in the private, non-advertised network is an isolated node;

sending authentication and routing information to a client in order to permit access to a tool on an isolated node in the virtual network; and

providing access to the tool in the virtual network.

15. The method of claim 14, wherein the sending of the authentication and routing information is sent directly to the client.

16. The method of claim 14, wherein the sending of the authentication and routing information is sent to the client through a host server.

17. The method of claim 14, further comprising creating a firewall between a server and the client.

18. The method of claim 14, wherein the access to the tool is provided to a single authenticated tool or tools, while isolating other tools in the virtual network.

19. A computer program product for creating a virtual network in a production facility for private, non-advertised tools, the computer program product including instructions for causing a computer to implement a method, comprising:

creating a virtual network where each tool on a private non-advertised network is an isolated node;

sending authentication and routing information to a client for a specific tool or group of tool in the private non-advertised network; and

providing access to the tool in the virtual network.

20. The computer program product of claim 19, further comprising instructions for providing access to a single authenticated tool or tools, while isolating other tools in the virtual network.