Security System for Industrial Control Infrastructure

摘要

An industrial control system providing security against tampering or modification generates periodic state thumbprints defining a state of control elements that may be forwarded to a security or safety appliance for comparison to a benchmark thumbprint indicating no tampering. The transmitted state thumbprint may capture not only programs but also configuration and environmental states of the control element.

主权项

1. An industrial control device for use in an industrial control system providing coordinated control of multiple industrial control devices according to a control program, the industrial control device comprising:
a network port for communicating with other elements of the industrial control system; electrical connectors for accepting electrical conductors communicating with industrial equipment to receive or transmit electrical signals from or to that industrial equipment for the control of an industrial process; at least one processor communicating with the network port and. electrical connectors; and an electronic memory system accessible by the processor and holding: operating software describing operation of the control device and executable by the processor, configuration data defining a configuration of the control device, and environmental data describing an operating environment of the control device, wherein the operating software, configuration data, and environmental data together define a control device state; wherein the operating software is executable by the processor to: (1) read at least a portion of the control device state to generate a state thumbprint of the control device state using a lossy compression system; (2) encrypt the state thumbprint; and (3) transmit the encrypted state thumbprint over the network port to the industrial control system.