Data sharing and networking system for integrated remote tool access, data collection, and control

• US 7,404,207 B2
• Filed: 03/12/2003
• Issued: 07/22/2008
• Est. Priority Date: 03/12/2002
• Status: Active Grant

• Current Assignee: Telit Technologies (Cyprus) Limited
• Original Assignee: ILS Technology LLC
• Inventors: Perry, Stuart
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Nalven; Andrew L
• Application Number:
  US10/385,442
• Publication Number:
  US 20030229805A1
• Time in Patent Office: 1,959 Days
• Field of Search: 726/15
• US Class Current: 726/15
• CPC Class Codes: G05B 19/4183 characterised by data acquisition, e.g. workpiece identification
• CPC Class Codes: G05B 2219/31471 Operator can select a graphical screen at his will as help diagnostic
• CPC Class Codes: G05B 2219/31479 Operator select part of process he wants to see, video image is displayed
• CPC Class Codes: G05B 2219/32034 Electronic market, network broker
• CPC Class Codes: G05B 2219/32142 Define device, module description using xml format file
• CPC Class Codes: G05B 2223/06 Remote monitoring
• CPC Class Codes: G06F 11/2294 by remote test
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: Y02P 90/02 Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]

Abstract

A system for managing secure network connections among multiple FABs and OEMs is present that comprises: a plurality of VPN devices, one for each FAB and OEM; a plurality of dedicated isolation LANs, each one coupled to one of the plurality of VPN devices; and an e-diagnostic LAN, coupled to the plurality of dedicated isolation LANs, and operative to connect any OEM to any FAB according to authorization rules.

Claims

1. A system for managing secure network connections among multiple FABs and OEMs, comprising:

a connection hub external to the FABs and the OEMs, the connection hub comprising;

a first plurality of VPN devices, one for each of a plurality of FABs;

a second plurality of VPN devices, one for each of a plurality of OEMs;

a first plurality of dedicated isolation LANs, each one coupled to one of said first plurality of VPN devices;

a second plurality of dedicated isolation LANs, each one coupled to one of said second plurality of VPN devices; and

an e-diagnostic LAN, coupled to said first and second pluralities of dedicated isolation LANs, and operative to connect any OEM to any FAB according to authorization rules

wherein each OEM and FAB need only maintain a single connection to the connection hub to communicate with multiple FABs and OEMs, respectively.

2. The system of claim 1, further comprising:

a first plurality of routers located one each at the FABs, each router coupled to one of said first plurality of VPN devices with a secure connection; and

a second plurality of routers located one each at the OEMs, each router coupled to one of said second plurality of VPN devices with a secure connection.

3. The system of claim 2, wherein said first and second pluralities of routers are a combination router, firewall and VPN device.

4. The system of claim 1, wherein said first and second pluralities of dedicated isolations LANs each maintain a single connection to said e-diagnostic LAN.

5. The system of claim 1, wherein said e-diagnostic LAN comprises network hardware, network software, and means for making logical point-to-point connections between OEMs and FABs.

6. A method for providing secure network connections among multiple FABs and OEMs, comprising the steps of:

Providing a connection hub external to the FABs and OEMs, the connection hub comprising;

a first plurality of VPN devices, one for each of a plurality of FABs;

a second plurality of VPN devices, one for each of a plurality of OEMs;

a first plurality of dedicated isolation LANs, each one coupled to one of said first plurality of VPN devices;

a second plurality of dedicated isolation LANs, each one coupled to one of said second plurality of VPN devices; and

an e-diagnostic LAN, coupled to said first and second pluralities of dedicated isolation LANs, and operative to connect any OEM to any FAB according to authorization rules;

receiving a request at the e-diagnostic LAN from one of a plurality of OEMs to connect to one of a plurality of FABs;

determining, at the e-diagnostic LAN, if said one OEM is authorized to access said one FAB;

connecting said OEM to said FAB with a secure point to point connection when said OEM is authorized to access said FAB; and

not connecting said OEM to said FAB when said OEM is not authorized to access said FAB

wherein each OEM and FAB need only maintain a single connection to the connection hub to communicate with multiple FABs and OEMs, respectively.

7. The method of claim 6, wherein said e-diagnostic LAN comprises network hardware, network software, and means for making logical point-to-point connections between OEMs and FABs.

8. The method of claim 6, wherein each OEM and FAB need only maintain a single connection to the e-diagnostic LAN to communicate with multiple FABs and OEMs, respectively.