Method for controlling data acquisition for a plurality of field devices

• US 9,596,090 B1
• Filed: 04/26/2016
• Issued: 03/14/2017
• Est. Priority Date: 04/05/2001
• Status: Expired due to Term

• Current Assignee: DJ Osburn Management LLC
• Original Assignee: DJ Inventions, LLC
• Inventors: Osburn, Douglas C. III
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US15/139,218
• Time in Patent Office: 322 Days
• US Class Current: 1/1
• CPC Class Codes: G05B 2219/32404 Scada supervisory control and data acquisition
• CPC Class Codes: H04L 41/0663 Performing the actions predefined by failover planning, e.g. switching to standby network elements
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A method for online licensing of field devices using an enterprise server with a processor and a data storage, which communicate via a network to the field devices optionally through at least one intelligent cryptographic module. The method receives a request for a license online from a client device for bidirectional communication between field devices and the enterprise server. The method generates a license and a symmetric encryption key. The method generates an object with a communication protocol of the field devices, and a primary communication path. The object contains a schedule configuration and time synchronization configuration and settings. The method then initiates communication, provides a secondary communication path if the primary communication paths fails, and simultaneously collects data by type and value from the field devices and publishes a report.

Claims

1. A method for communication and configuration of online field devices comprising:

a. connecting an enterprise server to a network, the enterprise server comprising a processor in communication with the network and a data storage in communication with the processor;

b. connecting a client device to the network, the client device having a client device processor in communication with a client device data storage;

c. connecting a plurality of field devices to the network, each of the plurality of field devices having a communication protocol;

d. receiving and storing a request for a license from the client device, wherein the request for the license identifies at least one field device of the plurality of field devices and the request comprises;

(i) an install ID;

(ii) a HOSTNAME;

(iii) a MAC; and

(iv) a volume ID;

e. generating the license for each of the plurality of field devices in the request for the license and storing the license in the data storage, the license including;

(i) an install value for the install ID;

(ii) a hostname value for the HOSTNAME;

(iii) a mac value for the MAC;

(iv) a volume ID value for the volume ID;

(v) a device count value;

(vi) an indication of type of data from each of the plurality of field devices; and

(vii) an indication of type of value for each of the plurality of field devices;

f. generating a symmetric encryption key and storing the symmetric encryption key in the data storage;

g. generating an object in the enterprise server for each of the plurality of field devices and storing the object in the data storage, the object comprising;

(i) a communication protocol of each of the plurality of field devices;

(ii) an object name;

(iii) a primary communication path;

(iv) a schedule configuration for scheduling communication with each of the plurality of field devices; and

(v) a communication status indicator;

h. initiating communication with each of the plurality of field devices simultaneously through the object;

i. identifying if communication between the enterprise server and each of the plurality of field devices succeeds or fails and then transmitting the success or the failure of communication to the client device and optionally switching connection from the primary communication path to a secondary communication path between the object and each of the plurality of field devices depending on a success or a failure of the communication; and

j. providing licensing and de-licensing of each of the plurality of field devices while configuring and reconfiguring each of the plurality of field devices online as status and measurement data from each licensed field device is collected using the communication protocol of each of the plurality of field devices independently and without stopping operational functions of the enterprise server supporting the object while simultaneously providing types of data and types of values of data between each of the plurality of field devices and the enterprise server to the client device.

2. The method of claim 1, comprising communicating to a portion of the plurality of field devices from the object through at least one intelligent cryptographic module providing an encrypted communication link between the object and each of the plurality of field devices communicating with the at least one intelligent cryptographic module.

3. The method of claim 2, wherein the at least one intelligent cryptographic module provides authentication of each of the plurality of field devices by:

a. exchanging an ANSI X.509 certificate between each of the plurality of field devices and the object;

b. generating a public key to authenticate an owner of the ANSI X.509 certificate; and

c. generating a symmetric session key for session initiation and continuing communication between each of the plurality of field devices and the enterprise server through the at least one intelligent cryptographic module.

4. The method of claim 2, wherein the at least one intelligent cryptographic module comprises:

a. a secure enclosure;

b. a cryptographic module processor disposed within the secure enclosure;

c. a cryptographic module data storage in communication with the cryptographic module processor comprising;

(i) a cryptographic application programming interface, wherein the cryptographic module processor is adapted to;

1. authenticate the object;

2. be authenticated by the object; and

3. provide encrypted and non-encrypted communication between the object and each of the plurality of field devices;

(ii) computer instructions for instructing the cryptographic module processor to;

1. receive at least one encrypted message from the object;

2. receive at least one non-encrypted message from the object;

3. receive at least one encrypted message from each of the plurality of field devices;

4. receive at least one non-encrypted message from each of the plurality of field devices;

5. decrypt at least one encrypted message forming at least one decrypted message;

6. encrypt at least one non-encrypted message forming at least one encrypted response;

7. transmit the message encrypted by the at least one cryptographic module to either the object or each of the plurality of field devices; and

8. transmit the decrypted message decrypted by the at least one cryptographic module to each of the plurality of field devices or the object; and

d. at least one port connected to the cryptographic module processor for receiving and transmitting at least one of;

(i) an encrypted communication;

(ii) a decrypted communication; and

(iii) a non-encrypted communication.

5. The method of claim 1, comprising transmitting a pass or a fail communication from the object to each of the plurality of field devices either on demand or using the schedule configuration.

6. The method of claim 1, comprising publishing a report based on communication performance between each of the plurality of field devices and the object.

7. The method of claim 1, comprising publishing historical data based on a type of data collected by each of the plurality of field devices.

8. The method of claim 1, comprising transmitting a command from the object to each of the plurality of field devices, wherein the command comprises at least one of:

an actuation command, a deactivation command, a configuration command for online configuration, a reconfiguration command for online reconfiguration, and wherein each command is at least one of;

an encrypted command and a command without encryption.

9. The method of claim 1, wherein generating the object includes generating at least one of:

a. a diagnostic logging module for tracking communication and other activity between the object and each of the plurality of field devices;

b. a report module for providing reporting functions of collected data;

c. a logging for data collection module for analyzing communication performance between the object and each of the plurality of field devices;

d. an alias label for labelling values from each of the plurality of field devices;

e. an unsolicited communication from each of the plurality of field devices; and

f. a time synchronization configuration and settings to synchronize each of the plurality of field devices with the enterprise server, the time synchronization configuration and settings comprising at least one of;

(i) a time synchronization interval;

(ii) a time synchronization priority;

(iii) a time zone; and

(iv) a time synchronization configuration.

10. The method of claim 9, wherein the diagnostic logging module tracks at least one of:

a. errors;

b. messages;

c. security parameters to track changes in registration keys, the symmetric session keys, public keys, or combinations thereof;

d. inappropriate communication status changes indicating a security breach;

e. data values;

f. configuration changes;

g. cryptographic module errors;

h. unsolicited messages from each of the plurality of field devices; and

i. time sync detail commands.

11. The method of claim 1, wherein generating the schedule configuration for periodically communicating with each of the plurality of field devices includes generating at least one of:

a. a periodic communication;

b. a date of a communication comprising;

a month, a year, and a day of the month; and

c. a time of communication comprising;

a start time and an end time for the object.

12. The method of claim 1, wherein each of the plurality of field devices is selected from a group consisting of at least one of:

monitoring devices, detection devices, metering devices, tracking devices, bar code readers, remote terminal units, a virtual field device, programmable logic controllers, wearable computers, physical property measuring devices and physical property sensors.

13. The method of claim 1, wherein the network is a member selected from a group consisting of at least one of:

a satellite network, a global communication network, a cellular network, an acoustic signal network, and a radio frequency network.

14. The method of claim 1, wherein the type of data is a member of the group consisting of:

pressure data, temperature data, flow data, maintenance repair data, battery limit data, entry detection information for an enclosure, leak detection data, equipment run times, plant conditions, and combinations thereof.