SYSTEM AND METHOD FOR CONTROLLED DEVICE ACCESS

摘要

An industrial environment includes an industrial system device. The industrial system device includes a processor to receive a certificate describing a security policy of one or more access constraints for the industrial system device and to implement the security policy on the industrial system device. Accordingly, access to the device may be customizable based upon a particular job to be completed on the device, providing more appropriate device access. Further, the security policy certificate may be provided to the device without relying on an “always-on” server-based system, resulting in fewer points of failure for accessing the device.

主权项

1. An industrial system, comprising:
an industrial system device, comprising: a memory configured to store customizable access policies; and a processor configured to:
receive a certificate comprising a security policy describing the customizable access policies including one or more access constraints of a user for the industrial system device, wherein the certificate is signed with a private key corresponding to a public key embedded within the industrial system device; andimplement the security policy on the industrial system device upon verifying the certificate, and wherein the customizable access policies are stored in the memory upon verifying the certificate.