SYSTEM AND METHOD FOR SECURE UNIDIRECTIONAL TRANSFER OF COMMANDS TO CONTROL EQUIPMENT

摘要

A system for securely transferring commands to a recipient device. An access interface allows a user to enter a command for the recipient device. The access interface only allows the user to enter commands within a subset of commands associated with a role assigned to the user. The control interface receives information, i.e., the command entered by the user and the associated user role, from the access interface. The control interface outputs, to the manifest engine, the information and a manifest table which identifies each role and the subset of commands associated with each role. The manifest engine compares the information with the contents of the received manifest table, and, if the command entered by the user corresponds to a command within the set of commands associated with the role assigned to the user, forwards the command to the recipient device.

主权项

1. A system for securely transferring commands to a recipient device, comprising:
an access interface configured to allow a user to enter a command, wherein the command comprises one of a set of commands, wherein the user is assigned one of a predetermined set of roles, each role associated with a subset of the set of commands, wherein the access interface is configured to restrict the user to be able to enter only commands within the predetermined subset of commands associated with the assigned role; a control interface coupled to receive information from the access interface, the information comprising the command entered by the user and the assigned role of the user, the control interface configured to output the information and a manifest table, the manifest table identifying each role and the subset of commands associated with each role; and a manifest engine coupled to the control interface, the manifest engine configured to receive the information and manifest table from the control interface, to compare the information with the contents of the received manifest table, and, if the command entered by the user corresponds to a command within the set of commands associated with the role assigned to the user, to forward the command on an output to the recipient device.