Method and system for integration of wireless devices with a distributed control system

• US 20070153677A1
• Filed: 12/30/2005
• Published: 07/05/2007
• Est. Priority Date: 12/30/2005
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Chernoguzov, Alexander, McLaughlin, Paul, Samad, Tariq
• Granted Patent: US 8,406,220 B2
• Time in Patent Office: Days
• US Class Current: 370/216
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/24 Multipath
• CPC Class Codes: H04L 45/28 using route fault recovery
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/38 for collecting sensor information
• CPC Class Codes: H04W 40/02 Communication route or path selection, e.g. power-based or shortest path routing
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A method includes determining first and second communication paths from a leaf node of a plurality of leaf nodes to first and second gateway nodes, respectively, of a plurality of gateway nodes. The first and second communication paths may include first and second intermediate nodes, respectively, of a plurality of intermediate nodes. A wireless message is sent from the leaf node to the first and second gateway nodes via the first and second communication paths, respectively. Information in the wireless message is communicated from at least one of the first and second gateway nodes to a component of a process control system.

Claims

1. A method comprising:

determining first and second communication paths from a leaf node of a plurality of leaf nodes to first and second gateway nodes of a plurality of gateway nodes, respectively;

sending a wireless message from the leaf node to the first and second gateway nodes via the first and second communication paths, respectively, wherein the wireless message comprises message information; and

communicating the message information from at least one of the first and second gateway nodes to a process control system component.

2. The method of claim 1, wherein the method further comprises:

communicating the message information from the first gateway node to the second gateway node.

3. The method of claim 1, wherein:

the step of determining first and second communication paths determines the first communication path via a first of a plurality of intermediate nodes and determines the second communication path via a second of the plurality of intermediate nodes;

the step of sending a wireless message from the leaf node to the first and second gateway nodes further comprises sending the wireless message via the first and second intermediate nodes, respectively.

4. The method of claim 3, wherein:

the step of determining the second communication path further determines the second communication path via a third intermediate node of the plurality of intermediate nodes; and

the step of sending a wireless message from the leaf node to the second gateway node further comprises sending the wireless message via the third intermediate node of the plurality of intermediate nodes.

5. The method of claim 3, wherein, in response to an error in sending the wireless message from the leaf node to the second gateway node, the method further comprises:

determining a third communication path from the leaf node to the second gateway node via a third intermediate node of the plurality of intermediate nodes; and

the step of sending a wireless message from the leaf node to the second gateway node further comprises sending the wireless message via the third intermediate node.

6. The method of claim 1, further comprising:

loading first and second gateway security keys into the first and second gateway nodes, respectively;

communicating first and second gateway authentication information from the first and second gateway nodes, respectively, to a key server, wherein the first and second gateway authentication information is prepared using the first and second gateway security keys, respectively;

authenticating the first and second gateway nodes in the key server using the first and second gateway authentication information, respectively;

loading a leaf node security key into the leaf node;

sending a wireless leaf node authentication message from the leaf node to the first gateway node, wherein the wireless leaf node authentication message comprises leaf node authentication information prepared using the leaf node security key;

communicating the leaf node authentication information to the key server from the first gateway node; and

authenticating the leaf node in the key server using the leaf node authentication information.

7. The method of claim 6, further comprising encrypting the message information in the leaf node using the leaf node security key before sending the wireless message to the first and second gateway nodes, wherein the step of communicating the message information to the process control system further comprises decrypting the message information in the key server.

8. The method of claim 3, further comprising:

loading first and second gateway security keys into the first and second gateway nodes, respectively;

communicating first and second gateway authentication information from the first and second gateway nodes, respectively, to a key server, wherein the first and second gateway authentication information is prepared using the first and second gateway security keys, respectively;

authenticating the first and second gateway nodes in the key server using the first and second gateway authentication information, respectively;

loading first and second intermediate node security keys into the first and second intermediate nodes, respectively;

communicating first and second intermediate node authentication information from the first and second intermediate nodes, respectively, to the key server, wherein the first and second intermediate node authentication information is prepared using the first and second intermediate node security keys, respectively;

authenticating the first and second intermediate nodes in the key server using the first and second intermediate node authentication information, respectively;

loading a leaf node security key into the leaf node;

sending an wireless leaf node authentication message from the leaf node to the first gateway node, wherein the wireless leaf node authentication message comprises leaf node authentication information;

communicating the leaf node authentication information to the key server from the first gateway node; and

authenticating the leaf node in the key server using the leaf node authentication information.

9. The method of claim 8, further comprising encrypting the message information in the leaf node using the leaf node security key before sending the wireless message to the first and second gateway nodes, wherein the step of communicating the message information to the process control system further comprises decrypting the message information in the key server.

10. The method of claim 1, wherein the first gateway node comprises a cache memory, the method further comprising:

receiving in the first gateway node a request from a process data consumer for the message information;

if the message information is not stored in the cache memory of the first gateway;

sending a wireless message to the leaf node requesting the message information;

receiving the wireless message from the leaf node in response to the request from the gateway node; and

storing the message information from the received message in the cache memory;

if the message information is stored in the cache memory of the first gateway, retrieving the message information from the cache memory; and

communicating the message information to the process data consumer in response to the request from the process data consumer.

11. A system, comprising:

a plurality of gateway nodes, capable of communicating with a process control system component and communicating wirelessly with a leaf node; and

a plurality of leaf nodes, capable of communicating wirelessly with a gateway node, wherein;

a leaf node of the plurality of leaf nodes and a first gateway node of the plurality of gateway nodes are further capable of exchanging wireless messages to determine a first communication path from the leaf node to the first gateway node;

the leaf node and a second gateway node of the plurality of gateway nodes are further capable of exchanging wireless messages to determine a second communication path from the leaf node to the second gateway node;

the leaf node is further capable of sending a wireless message to the first and second gateway nodes via the first and second communication paths, respectively, wherein the wireless message comprises message information; and

at least one of the first and second gateway nodes is further capable of communicating the message information to the process control system component.

12. The system of claim 11, wherein the first gateway node is further capable of communicating the message information to the second gateway node.

13. The system of claim 11, further comprising:

a plurality of intermediate nodes, capable of communicating wirelessly with a gateway node and with a leaf node,

wherein;

a first intermediate node of the plurality of intermediate nodes is further capable of exchanging wireless messages with the leaf node and the first gateway node to determine the first communication path from the leaf node to the first gateway node via the first intermediate node;

a second intermediate node of the plurality of intermediate nodes is further capable of exchanging wireless messages with the leaf node and the second gateway node to determine the second communication path from the leaf node to the second gateway node via the second intermediate node; and

the leaf node is further capable of sending the wireless message to the first and second gateway nodes via the first and second intermediate nodes, respectively.

14. The system of claim 13, wherein:

a third intermediate node of the plurality of intermediate nodes is capable of exchanging wireless messages with the second intermediate node to further determine the second communication path from the leaf node to the second gateway node via the third intermediate node; and

the leaf node is further capable of sending the wireless message to the second gateway node via the third intermediate node.

15. The system of claim 13, wherein, in response to an error in sending the wireless message from the leaf node to the second gateway node:

a third intermediate node of the plurality of intermediate nodes is further capable of exchanging wireless messages with the leaf node and the second gateway node to determine a third communication path from the leaf node to the second gateway node via the third intermediate node; and

the leaf node is further capable of sending the wireless message to the second gateway node via the third intermediate node.

16. The system of claim 13, further comprising:

a key server capable of;

communication with the plurality of gateway nodes; and

authenticating a node using authentication information received from the node,

wherein;

the first and second gateway nodes are further capable of;

loading first and second gateway security keys, respectively;

preparing first and second gateway authentication information using the first and second gateway security keys, respectively; and

communicating the first and second gateway authentication information, respectively, to the key server for authentication; and

the leaf node is further capable of;

loading a leaf node security key; and

sending to the first gateway node a wireless leaf node authentication message comprising leaf node authentication information prepared using the leaf node security key, wherein the first gateway node is further capable of communicating the leaf node authentication information to the key server for authentication.

17. The system of claim 16, wherein:

the leaf node is further capable of encrypting the message information using the leaf node security key before sending the wireless message to the first and second gateway nodes; and

the key server is further capable of decrypting the message information.

18. The system of claim 13, further comprising:

a key server capable of;

communication with the plurality of gateway nodes; and

authenticating a node using authentication information received from the node,

wherein;

the first and second gateway nodes are further capable of;

loading first and second gateway security keys, respectively;

preparing first and second gateway authentication information using the first and second gateway security keys, respectively; and

communicating the first and second gateway authentication information, respectively, to the key server for authentication;

the first and second intermediate nodes are further capable of;

loading first and second intermediate node security keys, respectively;

preparing first and second intermediate node authentication information using the first and second intermediate node security keys, respectively; and

communicating the first and second intermediate node authentication information, respectively, to the key server for authentication; and

the leaf node is further capable of;

loading a leaf node security key; and

sending to the first gateway node via the first intermediate node a wireless leaf node authentication message comprising leaf node authentication information prepared using the leaf node security key, wherein the first gateway node is further capable of communicating the leaf node authentication information to the key server for authentication.

19. The system of claim 18, wherein:

the leaf node is further capable of encrypting the message information using the leaf node security key before sending the wireless message to the first and second gateway nodes via the first and second intermediate nodes, respectively; and

the key server is further capable of decrypting the message information.

20. The system of claim 11, wherein the first gateway node comprises a cache memory and wherein:

the first gateway node is further capable of;

receiving a request from a process data consumer for the message information;

if the information is not stored in the cache memory of the first gateway;

sending a wireless message to the leaf node requesting the message information;

receiving the wireless message from the leaf node in response to the request from the gateway node; and

storing the message information from the received message in the cache memory;

if the message information is stored in the cache memory of the first gateway, retrieving the message information from the cache memory; and

communicating the message information to the process data consumer in response to the request from the process data consumer.

21. A system, comprising:

a process data consumer;

a key server;

a plurality of gateway nodes, capable of communicating with the process data consumer and communicating wirelessly with an intermediate node and a leaf node; and

a plurality of intermediate nodes, capable of communicating wirelessly with a gateway node and with a leaf node,

a plurality of leaf nodes, capable of communicating wirelessly with an intermediate node and a gateway node,

wherein;

the process data consumer is capable of sending a subscription message to one of a first and second gateway nodes of the plurality of gateway nodes, wherein the subscription message identifies a leaf node of the plurality of leaf nodes, requests information supplied by the identified leaf node, and requests that the information be published at a first rate;

the leaf node is capable of;

loading a security key created by the key server;

at a second rate, repeatedly encrypting current leaf node information using the security key and sending a wireless message to the first and second gateway nodes via first and second intermediate nodes of the plurality of intermediate nodes, respectively, wherein the wireless message comprises the encrypted leaf node information; and

the first and second gateway nodes are capable of;

receiving the wireless messages sent by the leaf node at the second rate;

decrypting the encrypted leaf node information using the key server; and

sending the decrypted leaf node information to the process data consumer at the first rate.