Computer-implemented method for checking a communication input of a programmable logic controller of an automation component of a plant

• US 9,338,236 B2
• Filed: 10/04/2012
• Issued: 05/10/2016
• Est. Priority Date: 10/04/2011
• Status: Active Grant

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Besold, Norbert, Kossack, Carl, Schuierer, Wolfgang
• Primary Examiner(s): Parry, Chris
• Assistant Examiner(s): Houlihan, Stephen
• Application Number:
  US13/644,424
• Publication Number:
  US 20130086244A1
• Time in Patent Office: 1,314 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

In order to determine for a programmable logic controller whether or not a communication input is blocked, a nominal/actual comparison between the communication input and predefined rules of a nominal communication is performed, a reaction matrix being used for case differentiation.

Claims

1. A computer-implemented method for checking a communication input of a programmable logic controller of an automation component of a plant, said checking occurring immediately upstream of an input interface of the programmable logic controller, the method comprising the steps of:

performing a nominal/actual comparison locally at the programmable logic controller between a communication input and predefined rules of a nominal communication;

forwarding a communication input directly to the input interface of the programmable logic controller, if the communication input satisfies at least one predefined rule of the nominal communication;

forwarding the communication input to a processor in which internal statistics of all nominal/actual deviations are initially updated and deciding, based on a predefined reaction matrix including data arranged in rows and columns and including control features for controlling processes in one of the processor and a gate upstream of the input interface, whether a respective communication input shall result in issuance of a predefined active warning, if the communication input does not satisfy the at least one predefined rule;

forwarding, by the processor, the communication input to the gate upstream of the input interface of the programmable logic controller, if the communication input does not satisfy at least one predefined rule;

determining in the gate whether the communication input is one of blocked and not blocked depending on the predefined reaction matrix including the data arranged in rows and columns; and

deciding, based on the control features, whether statistics of all the nominal/actual deviations are to be updated and in which manner the statistics of all the nominal/actual deviations are to be updated.

2. The method as claimed in claim 1, wherein the predefined rules of the nominal communication are created by one of a learning mode in which the programmable logic controller stores a communication input profile when the learning mode is activated, manual configuration and distributing, by a central server, a communication input profile to programmable logic controllers.

3. The method as claimed in claim 1, further comprising the step of:

deciding, based on the control features at least one of;

(i) whether to issue a warning comprising an information message;

(ii) a form of the information message if the warning is to be issued;

(iii) which information message is to be transmitted;

(vi) which address the information message is to be sent; and

(v) whether the communication input is to be one of blocked and not blocked in the gate.

4. The method as claimed in claim 2, further comprising the step of:

deciding, based on the control features at least one of;

(i) whether to issue a warning comprising an information message;

(ii) a form of the information message if the warning is to be issued;

(iii) which information message is to be transmitted;

(vi) which address the information message is to be sent; and

(v) whether the communication input is to be one of blocked and not blocked in the gate.

5. The method as claimed in claim 1, wherein the predefined reaction matrix is at least one of entered directly as a stand-alone configuration during configuration of the programmable logic controller and transmitted as a profile from a centrally configured configuration server.

6. The method as claimed in claim 2, wherein the predefined reaction matrix is at least one of entered directly as a stand-alone configuration during configuration of the programmable logic controller and transmitted as a profile from a centrally configured configuration server.

7. The method as claimed in claim 3, wherein the predefined reaction matrix is at least one of entered directly as a stand-alone configuration during configuration of the programmable logic controller and transmitted as a profile from a centrally configured configuration server.

8. The method as claimed in claim 1, wherein the predefined rules of the nominal communication comprise at least one attribute comprising at least one of at least one MAC address, at least one IP address, at least one port, at least one Profinet equipment name, at least one number of TCP connections and at least one number of data packets per time unit.

9. The method as claimed in claim 1, wherein the warning is communicated as at least one of an email, an SMS, via SNMP and by a Web service.

10. The method as claimed in claim 3, wherein the warning is communicated as at least one of an email, an SMS, via SNMP and by a Web service.

11. The method as claimed in claim 1, wherein the internal statistics of all the nominal/actual deviations are available for readout by central servers.

12. The method as claimed in claim 3, wherein the internal statistics of all the nominal/actual deviations are available for readout by central servers.

13. A non-transitory computer program product having a computer program executing on a processor which, when used on a programmable logic controller, causes the processor to check a communication input of a programmable logic controller of an automation component of a plant, said checking occurring upstream of an input interface of the programmable logic controller, the computer program comprising:

program code for performing locally at the programmable logic controller a nominal/actual comparison between a communication input and predefined rules of a nominal communication;

program code for forwarding a communication input directly to the input interface of the programmable logic controller, if the communication input satisfies at least one predefined rule of the nominal communication;

program code for forwarding the communication input to a processor in which internal statistics of all nominal/actual deviations are initially updated and deciding, based on a predefined reaction matrix including data arranged in rows and columns and including control features for controlling processes in one of the processor and a gate upstream of the input interface, whether a respective communication input shall result in issuance of a predefined active warning, if the communication input does not satisfy the at least one predefined rule;

program code for forwarding, by the processor, the communication input to the gate upstream of the input interface of the programmable logic controller, if the communication input does not satisfy at least one predefined rule;

program code for determining in the gate whether the communication input is one of blocked and not blocked depending on the predefined reaction matrix including the data arranged in rows and columns; and

program code for deciding, based on the control features, whether statistics of all the nominal/actual deviations are to be updated and in which manner the statistics of all the nominal/actual deviations are to be updated.

14. A checking device for checking a communication input of a programmable logic controller of an automation component of a plant, wherein components for performing the checking method being connected upstream of an input interface of the programmable logic controller, the checking device comprising:

at least one processor;

memory operatively coupled to the at least one processor; and

at least one gate;

wherein the memory includes instructions which are executed to;

perform locally at the programmable logic controller nominal/actual comparisons between a communication input and predefined rules of a nominal communication;

forward the communication input directly to the input interface of the programmable logic controller if the communication input satisfies at least one predefined rule of the nominal communication;

forward the communication input to the processor, the third module including a module for updating internal statistics of all nominal/actual deviations and a module which applies a predefined reaction matrix including data arranged in rows and columns, and the processor being configured to decide, by applying the predefined reaction matrix including the data arranged in rows and columns and including control features for controlling processes in one of the processor and the gate, whether a respective communication input shall result in issuance of a predefined active warning;

forward the communication input from the processor to the gate upstream of the input interface of the programmable logic controller if the communication input does not satisfy the at least one predefined rule; and

decide, based on the control features, whether statistics of all the nominal/actual deviations are to be updated and in which manner the statistics of all the nominal/actual deviations are to be updated; and

wherein the gate is configured to determine, based on the reaction matrix including the data arranged in rows and columns and including control features for controlling processes in one of the processor and the gate, whether the communication input is blocked.

15. The checking device as claimed in claim 14, wherein the memory includes further instructions which are executed to:

receive the communication input,

implement a learning mode to create the at least one predefined rule for the nominal communication;

cause the reaction matrix to decide what reaction is to be performed, the reaction including at least one of issuing a warning, sending an information message from the at least one processor, forwarding the communication input to the gate, and one of blocking and not blocking the communication input in the gate,

issue the warning;

create and send an information message for at least one of local reporting and central reporting;

forward the communication input from the at least one processor to the gate;

block the communication input;

forward the communication input from the gate to the input interface of the programmable logic controller if the communication input is not blocked in the gate;

receive a communication profile containing the predefined rules of the nominal communication, the communication profile being defined on a central configuration server;

utilize the received communication profile for local nominal/actual comparison between an incoming communication input and the predefined rules of the nominal communication;

receive the reaction matrix administered on the central configuration server;

locally apply the received reaction matrix during evaluation of the incoming communication input;

locally execute predefined reactions derived from the received reaction matrix;

send an information message to a central server; and

provide the central server with locally updated internal statistics of all the nominal/actual deviations.

17. The automation network as claimed in claim 15, wherein the central configuration server is configured to configure, control and monitor the checking device, the central configuration server being further configured to:

define rules of the nominal communication of the checking device;

forward the communication profile containing the predefined rules of the nominal communication to each individual checking device;

administer the predefined reaction matrix including data arranged in rows and columns and including control features for controlling processes in one of the processor and the gate with definition of reactions in response to the communication input passing through at least one of the processor and the gate of the checking device;

at least one of interrogate, read out and evaluate the statistics of all the nominal/actual deviations updated internally in the at least one processor of the checking device; and

receive warnings issued by the at least one processor of the checking device.

16. An automation network for controlling and checking a communication of an input interface, the automation network comprising:

at least one programmable logic controller of an automation component of a plant, the at least one programmable logic controller including the input interface;

a central configuration server;

a checking device upstream of the input interface of the at least one individual programmable logic controller, the checking device comprising;

at least one processor;

memory operatively coupled to the at least one processor; and

at least one gate;

wherein the memory includes instructions which are executed to;

perform locally at the programmable logic controller nominal/actual comparisons between a communication input and predefined rules of a nominal communication;

forward the communication input directly to the input interface of the programmable logic controller if the automation component of the plant if the communication input satisfies at least one predefined rule of the nominal communication;

forward the communication input to the processor, the third module including a module for updating internal statistics of all nominal/actual deviations and a module for applying a predefined reaction matrix including data arranged in rows and columns and including control features for controlling processes in one of the processor and the gate, and the at least one processor being configured to decide, by applying the predefined reaction matrix including the data arranged in rows and columns, whether a respective communication input shall result in issuance of a predefined active warning; and

forward the communication input from the processor to the gate upstream of the input interface of the programmable logic controller if the automation component of the plant if the communication input does not satisfy the at least one predefined rule, the gate being configured to determine, based on the predefined reaction matrix, whether the communication input is blocked;

decide, based on the control features, whether statistics of all the nominal/actual deviations are to be updated and in which manner the statistics of all the nominal/actual deviations are to be updated; and

provide communication between the central configuration server and the checking device.

18. The automation network as claimed in claim 16, wherein the configuration server is configured to configure, control and monitor the checking device, the configuration server being further configured to:

define rules of the nominal communication of the checking device;

forward the communication profile containing the predefined rules of the nominal communication to each individual checking device;

administer the predefined reaction matrix including the data arranged in rows and columns with definition of reactions in response to the communication input passing through at least one of the processor and the gate of the checking device;

at least one of interrogate, read out and evaluate the statistics of all the nominal/actual deviations updated internally in the at least one processor of the checking device;

receive warnings issued by the at least one processor of the checking device.