Computer-Implemented Method for Checking a Communication Input of a Programmable Logic Controller of an Automation Component of a Plant

• US 20130086244A1
• Filed: 10/04/2012
• Published: 04/04/2013
• Est. Priority Date: 10/04/2011
• Status: Active Grant

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: BESOLD, Norbert, SCHUIERER, Wolfgang, KOSSACK, Carl
• Granted Patent: US 9,338,236 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

In order to determine for a programmable logic controller whether or not a communication input is blocked, a nominal/actual comparison between the communication input and predefined rules of a nominal communication is performed, a reaction matrix being used for case differentiation.

Claims

1. A computer-implemented method for checking a communication input of a programmable logic controller of an automation component of a plant, said checking occurring immediately upstream of an input interface of the programmable logic controller, the method comprising the steps of:

performing a nominal/actual comparison between a communication input and predefined rules of a nominal communication;

forwarding a communication input directly to the input interface of the programmable logic controller, if the communication input satisfies at least one predefined rule of the nominal communication;

forwarding the communication input to a processor in which internal statistics of all nominal/actual deviations are initially updated and deciding based on a predefined reaction matrix whether a respective communication input shall result in issuance of a predefined active warning, if the communication input does not satisfy the at least one predefined rule;

forwarding, by the processor, the communication input to a gate upstream of the input interface of the programmable logic controller, if the communication input does not satisfy at least one predefined rule; and

determining in the gate whether the communication input is one of blocked and not blocked depending on the predefined reaction matrix.

2. The method as claimed in claim 1, wherein the predefined rules of the nominal communication are created by one of a learning mode in which the programmable logic controller stores a communication input profile when the learning mode is activated, manual configuration and distributing, by a central server, a communication input profile to programmable logic controllers.

3. The method as claimed in claim 1, wherein the predefined reaction matrix includes control features for controlling processes in one of the processor and the gate, the method further comprising the step of:

deciding, based on the control features at least one of;

(i) whether statistics of all the nominal/actual deviations are to be updated and in which manner the statistics of all the nominal/actual deviations are to be updated,

(ii) whether to issue a warning comprising an information message;

(iii) a form of the information message if the warning is to be issued;

(iv) which information message is to be transmitted;

(v) which address the information message is to be sent; and

(vi) whether the communication input is to be one of blocked and not blocked in the gate.

4. The method as claimed in claim 2, wherein the predefined reaction matrix includes control features for controlling processes in one of the processor and the gate, the method further comprising the step of:

deciding, based on the control features at least one of;

(i) whether statistics of all the nominal/actual deviations are to be updated and in which manner the statistics of all the nominal/actual deviations are to be updated,

(ii) whether to issue a warning comprising an information message;

(iii) a form the information message if the warning is to be issued;

(iv) which information message is to be transmitted;

(v) which address the information message is to be sent; and

(vi) whether the communication input is to be one of blocked and not blocked in the gate.

5. The method as claimed in claim 1, wherein the predefined reaction matrix is at least one of entered directly as a stand-alone configuration during configuration of the programmable logic controller and transmitted as a profile from a centrally configured configuration server.

6. The method as claimed in claim 2, wherein the predefined reaction matrix is at least one of entered directly as a stand-alone configuration during configuration of the programmable logic controller and transmitted as a profile from a centrally configured configuration server.

7. The method as claimed in claim 3, wherein the predefined reaction matrix is at least one of entered directly as a stand-alone configuration during configuration of the programmable logic controller and transmitted as a profile from a centrally configured configuration server.

8. The method as claimed in claim 1, wherein the predefined rules of the nominal communication comprise at least one attribute comprising at least one of at least one MAC address, at least one IP address, at least one port, at least one Profinet equipment name, at least one number of TCP connections and at least one number of data packets per time unit.

9. The method as claimed in claim 1, wherein the warning is communicated as at least one of an email, an SMS, via SNMP and by a Web service.

10. The method as claimed in claim 3, wherein the warning is communicated as at least one of an email, an SMS, via SNMP and by a Web service.

11. The method as claimed in claim 1, wherein the internal statistics of all the nominal/actual deviations are available for readout by central servers.

12. The method as claimed in claim 3, wherein the internal statistics of all the nominal/actual deviations are available for readout by central servers.

13. A non-transitory computer program product having a computer program executing on a processor which, when used on a programmable logic controller, causes the processor to check a communication input of a programmable logic controller of an automation component of a plant, said checking occurring immediately upstream of an input interface of the programmable logic controller, the computer program comprising:

program code for performing a nominal/actual comparison between a communication input and predefined rules of a nominal communication;

program code for forwarding a communication input directly to the input interface of the programmable logic controller, if the communication input satisfies at least one predefined rule of the nominal communication;

program code for forwarding the communication input to a processor in which internal statistics of all nominal/actual deviations are initially updated and deciding based on a predefined reaction matrix whether a respective communication input shall result in issuance of a predefined active warning, if the communication input does not satisfy the at least one predefined rule;

program code for forwarding, by the processor, the communication input to a gate upstream of the input interface of the programmable logic controller, if the communication input does not satisfy at least one predefined rule; and

program code for determining in the gate whether the communication input is one of blocked and not blocked depending on the predefined reaction matrix.

14. A checking device for checking a communication input of a programmable logic controller of an automation component of a plant, wherein components for performing the checking method being connected immediately upstream of an input interface of the programmable logic controller, the checking device comprising:

at least one processor;

at least one gate;

a first module for nominal/actual comparison between a communication input and predefined rules of a nominal communication;

a second module for forwarding the communication input directly to the input interface of the programmable logic controller if the communication input satisfies at least one predefined rule of the nominal communication;

a third module for forwarding the communication input to the processor, the third module including a module for updating internal statistics of all nominal/actual deviations and a module for applying a predefined reaction matrix, and the processor being configured to decide, by applying the predefined reaction matrix, whether a respective communication input shall result in issuance of a predefined active warning;

a fourth module for forwarding the communication input from the processor to the gate upstream of the input interface of the programmable logic controller if the communication input does not satisfy the at least one predefined rule;

wherein the gate is configured to determine, based on the reaction matrix, whether the communication input is blocked.

15. The checking device as claimed in claim 14, further comprising:

a fifth module for receiving the communication input,

a seventh module for implementing a learning mode to create the at least one predefined rule for the nominal communication;

a reaction matrix module for deciding which reaction is to be performed, the reaction including at least one of issuing a warning, sending an information message from the at least one processor, forwarding the communication input to the gate, and one of blocking and not blocking the communication input in the gate,

an eighth module for issuing the warning;

a ninth module for creating and sending an information message for at least one of local reporting and central reporting;

a tenth module for forwarding the communication input from the at least one processor to the gate;

an eleventh module for blocking the communication input;

a twelve module for forwarding the communication input from the gate to the input interface of the programmable logic controller if the communication input is not blocked in the gate;

a thirteenth module for receiving a communication profile containing the predefined rules of the nominal communication, the communication profile being defined on a central configuration server;

a fourteenth module for using the received communication profile for local nominal/actual comparison between an incoming communication input and the predefined rules of the nominal communication;

a fifteenth module for receiving the reaction matrix administered on the central configuration server;

a sixteenth module for locally applying the received reaction matrix during evaluation of the incoming communication input;

an eighteenth module for locally executing predefined reactions derived from the received reaction matrix;

a nineteenth module for sending an information message to a central server; and

a twentieth module for providing the central server with locally updated internal statistics of all the nominal/actual deviations.

17. The automation network as claimed in claim 15, wherein the central configuration server is configured to configure, control and monitor the checking device, the central configuration server comprising:

a first module for defining rules of the nominal communication of the checking device;

a second module for forwarding the communication profile containing the predefined rules of the nominal communication to each individual checking device;

a third module for administering the predefined reaction matrix with definition of reactions in response to the communication input passing through at least one of the processor and the gate of the checking device;

a fourth module for at least one of interrogating, reading out and evaluating the statistics of all the nominal/actual deviations updated internally in the at least one processor of the checking device;

a fourth module for receiving warnings issued by the at least one processor of the checking device.

16. An automation network for controlling and checking a communication of an input interface, the automation network comprising:

at least one programmable logic controller of an automation component of a plant, the at least one programmable logic controller including the input interface;

a central configuration server;

a checking device immediately upstream of the input interface of the at least one individual programmable logic controller, the checking device comprising;

at least one processor;

at least one gate;

a first module for nominal/actual comparison between a communication input and predefined rules of a nominal communication;

a second module for forwarding the communication input directly to the input interface of the programmable logic controller if the communication input satisfies at least one predefined rule of the nominal communication;

a third module for forwarding the communication input to the processor, the third module including a module for updating internal statistics of all nominal/actual deviations and a module for applying a predefined reaction matrix, and the at least one processor being configured to decide, by applying the predefined reaction matrix, whether a respective communication input shall result in issuance of a predefined active warning; and

a fourth module for forwarding the communication input from the processor to the gate upstream of the input interface of the programmable logic controller if the communication input does not satisfy the at least one predefined rule, the gate being configured to determine, based on the predefined reaction matrix, whether the communication input is blocked; and

a communication module for communication between the central configuration server and the checking device.

18. The automation network as claimed in claim 16, wherein the configuration server is configured to configure, control and monitor the checking device, the configuration server comprising:

a first module for defining rules of the nominal communication of the checking device;

a second module for forwarding the communication profile containing the predefined rules of the nominal communication to each individual checking device;

a third module for administering the predefined reaction matrix with definition of reactions in response to the communication input passing through at least one of the processor and the gate of the checking device;

a fourth module for at least one of interrogating, reading out and evaluating the statistics of all the nominal/actual deviations updated internally in the at least one processor of the checking device;

a fourth module for receiving warnings issued by the at least one processor of the checking device.