专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明申请

US20140250520A1 FIREWALL METHOD AND APPARATUS FOR INDUSTRIAL SYSTEMS 审中-公开
标题翻译：工业系统的防火方法和装置
公开(公告)号：US20140250520A1
公开(公告)日：2014-09-04
申请号：US14278225
申请日：2014-05-15
申请人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
发明人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
IPC分类号： H04L29/06
CPC分类号： H04L63/102 , H04L63/02 , H04L63/0245 , H04L63/0263 , H04L63/0428 , H04L63/10 , H04L69/16 , H04L69/163 , H04L69/166
摘要： Method and apparatus for use with systems including networked resources where communication between resources is via dual packet protocols wherein a first protocol includes a frame that specifies a destination device/resource and a data field and the second protocol specifies a final destination device/resource and includes a data field, where the second packets are encapsulated in the first protocol packet frames, the method including specifying access control information for resources, for each first protocol packet transmitted on the network, intercepting the first protocol packet prior to the first protocol destination resource, examining a subset of the additional embedded packet information to identify one of the intermediate path resources and the final destination resource, identifying the access control information associated with the identified at least one of the intermediate path resources and the final destination resource and restricting transmission of the first protocol packet as a function of the identified access control information.
摘要翻译：用于包括网络资源的系统的方法和装置，其中资源之间的通信是经由双分组协议，其中第一协议包括指定目的地设备/资源的帧和数据字段，并且第二协议指定最终目的地设备/资源，并且包括数据字段，其中第二分组被封装在第一协议分组帧中，该方法包括为在网络上发送的每个第一协议分组指定用于资源的访问控制信息，在第一协议目的地资源之前拦截第一协议分组，检查附加嵌入式分组信息的子集以识别中间路径资源和最终目的地资源之一，识别与所识别的中间路径资源和最终目的地资源中的至少一个相关联的访问控制信息，并限制第一个协议分组作为所识别的访问控制信息的函数。

22. 发明授权

US08234394B2 Web access for non-TCP/IP control devices of an industrial control system 有权
标题翻译：用于工业控制系统的非TCP / IP控制设备的Web访问
公开(公告)号：US08234394B2
公开(公告)日：2012-07-31
申请号：US12817322
申请日：2010-06-17
申请人： Brian A. Batke , Gary W. Baczkowski , Kenwood H. Hall
发明人： Brian A. Batke , Gary W. Baczkowski , Kenwood H. Hall
IPC分类号： G06F15/16
CPC分类号： H04L67/125 , G05B2219/34444 , H04L69/08 , H04L69/16 , H04L69/162
摘要： A new industrial control system and method are disclosed allowing for communication between multiple control devices of the system and remote devices via the Internet. The system includes a web access interface that is capable of being coupled to the remote devices via the Internet, and is coupled to the control devices by way of a network. A program executed by the interface receives an Internet signal having socket API data and formatted in accordance with the TCP/IP protocol, and extracts the data from the Internet signal. Another program executed by the interface receives the data and transmits a network signal, which includes the data but is not formatted in accordance with the TCP/IP protocol, to an appropriate one of the control devices, each of which has a respective web server program. The data is processed by the server program at the appropriate control device.
摘要翻译：公开了一种新的工业控制系统和方法，允许通过因特网在系统的多个控制设备和远程设备之间进行通信。该系统包括能够经由因特网耦合到远程设备的网络接入接口，并且通过网络耦合到控制设备。由该接口执行的程序接收具有套接字API数据的因特网信号，并根据TCP / IP协议格式化，并从因特网信号中提取数据。由该接口执行的另一程序接收数据，并将包含该数据但未根据该TCP / IP协议进行格式化的网络信号发送给适当的一个控制装置，每个控制装置具有各自的web服务器程序。数据由服务器程序在适当的控制设备处理。

23. 发明授权

US08065358B2 Proxied web access for control devices on industrial control systems 有权
标题翻译：控制设备在工业控制系统上的代理Web访问
公开(公告)号：US08065358B2
公开(公告)日：2011-11-22
申请号：US09967742
申请日：2001-09-28
申请人： Brian A. Batke , Gary W. Baczkowski , Kenwood H. Hall
发明人： Brian A. Batke , Gary W. Baczkowski , Kenwood H. Hall
IPC分类号： G06F15/16
CPC分类号： G06F17/3089 , G05B19/054 , G05B2219/15038 , G06Q30/0277
摘要： An industrial control system includes a plurality of control devices providing control signals to direct an industrial process and a web access module including a web server, an Internet interface and a control network interface. Each of the control devices includes web page data concerning a respective web page associated with the respective control device. The Internet interface is couplable to a remote device via the Internet, and the control network interface is coupled to the control devices. The web access module is able to receive requests from the remote device to access the web pages associated with the control devices. In response to the requests, the web access module obtains the web page data concerning the web pages for which access has been requested, processes the data at the server, and sends data signals related to the data onto the Internet to be received by the remote device.
摘要翻译：工业控制系统包括提供控制信号以指导工业过程的多个控制装置和包括网络服务器，因特网接口和控制网络接口的网络访问模块。每个控制设备包括关于与相应控制设备相关联的相应网页的网页数据。互联网接口可通过互联网耦合到远程设备，并且控制网络接口耦合到控制设备。网络访问模块能够从远程设备接收访问与控制设备相关联的网页的请求。响应于该请求，Web访问模块获取关于已经请求了访问的网页的网页数据，处理服务器上的数据，并且将与数据相关的数据信号发送到因特网上以被远程接收设备。

24. 发明申请

US20110283350A1 Firewall Method and Apparatus for Industrial Systems 有权
标题翻译：工业系统防火墙方法与装置
公开(公告)号：US20110283350A1
公开(公告)日：2011-11-17
申请号：US13182808
申请日：2011-07-14
申请人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
发明人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
IPC分类号： G06F21/00
CPC分类号： H04L63/102 , H04L63/02 , H04L63/0245 , H04L63/0263 , H04L63/0428 , H04L63/10 , H04L69/16 , H04L69/163 , H04L69/166
摘要： Method and apparatus for use with systems including networked resources where communication between resources is via dual packet protocols wherein a first protocol includes a frame that specifies a destination device/resource and a data field and the second protocol specifies a final destination device/resource and includes a data field, where the second packets are encapsulated in the first protocol packet frames, the method including specifying access control information for resources, for each first protocol packet transmitted on the network, intercepting the first protocol packet prior to the first protocol destination resource, examining a subset of the additional embedded packet information to identify one of the intermediate path resources and the final destination resource, identifying the access control information associated with the identified at least one of the intermediate path resources and the final destination resource and restricting transmission of the first protocol packet as a function of the identified access control information.
摘要翻译：用于包括网络资源的系统的方法和装置，其中资源之间的通信是经由双分组协议，其中第一协议包括指定目的地设备/资源的帧和数据字段，并且第二协议指定最终目的地设备/资源，并且包括数据字段，其中第二分组被封装在第一协议分组帧中，该方法包括为在网络上发送的每个第一协议分组指定用于资源的访问控制信息，在第一协议目的地资源之前拦截第一协议分组，检查附加嵌入式分组信息的子集以识别中间路径资源和最终目的地资源之一，识别与所识别的中间路径资源和最终目的地资源中的至少一个相关联的访问控制信息，并限制第一个协议分组作为所识别的访问控制信息的函数。

25. 发明授权

US08028099B2 Industrial control system with web enabled I/O modules 有权
标题翻译：具有Web功能的I / O模块的工业控制系统
公开(公告)号：US08028099B2
公开(公告)日：2011-09-27
申请号：US09967724
申请日：2001-09-28
申请人： Brian A. Batke , Gary W. Baczkowski
发明人： Brian A. Batke , Gary W. Baczkowski
IPC分类号： G06F15/16
CPC分类号： G05B19/054 , G05B2219/15038 , G05B2219/21099 , G05B2219/25145 , G05B2219/25202 , G05B2219/31205 , G05B2219/34038
摘要： An industrial control system provides a programmable logic controller communicating with I/O modules which provide an electrical interface to controlled equipment and which support web servers for communication of I/O data directly with the Internet. The programmable logic controller communicates with the I/O modules over a control-network which may be separate from or shared with the Internet communications. A lock-out system prevents collisions between web clients writing to I/O and allows the programmable logic controller to limit web access to critical I/O points.
摘要翻译：工业控制系统提供与I / O模块通信的可编程逻辑控制器，该I / O模块为受控设备提供电接口，并支持Web服务器直接与因特网通信I / O数据。可编程逻辑控制器通过可能与互联网通信分离或与互联网通信共享的控制网络与I / O模块进行通信。锁定系统可防止Web客户端写入I / O之间的冲突，并允许可编程逻辑控制器限制Web访问关键I / O点。

26. 发明授权

US07990967B2 Firewall method and apparatus for industrial systems 有权
标题翻译：工业系统的防火墙方法和装置
公开(公告)号：US07990967B2
公开(公告)日：2011-08-02
申请号：US11326742
申请日：2006-01-06
申请人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, Jr. , Ramdas M. Pai , Steven J. Scott
发明人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, Jr. , Ramdas M. Pai , Steven J. Scott
IPC分类号： H04L12/56
CPC分类号： H04L63/102 , H04L63/02 , H04L63/0245 , H04L63/0263 , H04L63/0428 , H04L63/10 , H04L69/16 , H04L69/163 , H04L69/166
摘要： The invention includes a method including the steps of specifying access control information for resources, for each first protocol packet transmitted on the network, intercepting the first protocol packet prior to a first protocol destination resource, examining embedded packet information to identify at least one of the intermediate path resources and the final destination resource, identifying the access control information associated with the identified at least one of the intermediate path resources and the final destination resource and restricting transmission of the first protocol packet as a function of the identified access control information.
摘要翻译：本发明包括一种方法，包括以下步骤：为在网络上发送的每个第一协议分组指定资源的访问控制信息，在第一协议目的地资源之前拦截第一协议分组，检查嵌入分组信息以识别至少一个中间路径资源和最终目的地资源，识别与所识别的中间路径资源和最终目的地资源中的至少一个相关联的访问控制信息，并且限制作为所识别的访问控制信息的函数的第一协议分组的传输。

27. 发明授权

US07693581B2 Application and service management for industrial control devices 有权
标题翻译：工业控制设备的应用和服务管理
公开(公告)号：US07693581B2
公开(公告)日：2010-04-06
申请号：US11764702
申请日：2007-06-18
申请人： David M. Callaghan , Brian A. Batke
发明人： David M. Callaghan , Brian A. Batke
IPC分类号： G05B15/02 , G05B19/18 , G05B13/02 , G06F15/16 , G06F17/30
CPC分类号： G05B19/4188 , G05B2219/31101 , G05B2219/31166 , G05B2219/31324 , G05B2219/31334 , Y02P90/16 , Y02P90/185 , Y02P90/24 , Y10S707/99931 , Y10S707/99938
摘要： The subject invention provides systems and methods that facilitate accessing and management of information (e.g., instructions, executables, classes, objects . . . ) associated with a control system. The systems and methods enable a control system entity the ability to leverage functionality of another control system entity, for example, to employ a service and/or execute an application within an execution environment of the other control system entity. Other capabilities include, but are not limited to, installing and uninstalling, registering and deregistering, loading and/or unloading instructions, commencing, pausing and terminating instruction execution, passing parameters and variables to instructions, modifying, overriding instructions and removing instructions, reliable messages, files, executables, classes, data structures, schema, objects, services, notifications, behaviors, alerts, etc. Optionally, a security mechanism can be utilized to determine the scope of access to the control system entity and/or instructions, applications, and services therein.
摘要翻译：本发明提供了便于访问和管理与控制系统相关联的信息（例如，指令，可执行程序，类，对象...）的系统和方法。这些系统和方法使得控制系统实体能够利用另一个控制系统实体的功能，例如在其他控制系统实体的执行环境中使用服务和/或执行应用。其他功能包括但不限于安装和卸载，注册和注销，加载和/或卸载指令，开始，暂停和终止指令执行，将参数和变量传递给指令，修改，覆盖指令和删除指令，可靠的消息，文件，可执行文件，类，数据结构，模式，对象，服务，通知，行为，警报等。可选地，可以利用安全机制来确定对控制系统实体和/或指令，应用，和服务。

28. 发明授权

US09069343B2 Generation and publication of shared tagsets 有权
标题翻译：共享标签集的生成和发布
公开(公告)号：US09069343B2
公开(公告)日：2015-06-30
申请号：US13296072
申请日：2011-11-14
申请人： Paul G. Kucharski , Charles M. Rischar , Michael Kalan , David Van Gompel , Brian A. Batke , Joseph P. Izzo , David A. Johnston
发明人： Paul G. Kucharski , Charles M. Rischar , Michael Kalan , David Van Gompel , Brian A. Batke , Joseph P. Izzo , David A. Johnston
IPC分类号： G05B15/00 , G05B19/042
CPC分类号： G05B19/054 , G05B19/0426 , G05B19/4186 , G05B2219/23192 , H03M13/09 , Y02P90/185
摘要： Systems and methods are provided to facilitate receipt of tag requests from one or more interfaces, based upon which a single tagset is compiled at a controller comprising all the requested tags for a given update rate, whereupon the single compiled tagset is subsequently forwarded to the one or more interfaces. A controller generates a superset of tags associated with an industrial process. Each interface can request a copy of the superset, from which the required tags are selected. The controller receives the requested tags from all of the interfaces and combines the requested tags into a single tagset, for a given update rate, comprising the various parameters associated with the tags. At the selected update rate, the tagset is forwarded to the interfaces. A masterset can be utilized to identify the sequence of tags in a tagset and check code can ensure continuity of the tags in the tagset.
摘要翻译：提供了系统和方法以便于从一个或多个接口接收标签请求，基于该标签请求，在包括针对给定更新速率的所有所请求的标签的控制器处编译单个标签集，随后单个编译的标签集随后被转发到一个或更多接口。控制器产生与工业过程相关联的标签的超集。每个接口可以请求超集的副本，从中选择所需的标签。控制器从所有接口接收所请求的标签，并将所请求的标签组合到单个标签集中，对于给定的更新速率，包括与标签相关联的各种参数。在选定的更新速率下，将标签集转发到接口。可以使用masterset来识别标签集中的标签序列，并且检查代码可以确保标签集中的标签的连续性。

29. 发明申请

US20140259099A1 FIREWALL METHOD AND APPARATUS FOR INDUSTRIAL SYSTEMS 审中-公开
标题翻译：工业系统的防火方法和装置
公开(公告)号：US20140259099A1
公开(公告)日：2014-09-11
申请号：US14285863
申请日：2014-05-23
申请人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
发明人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
IPC分类号： H04L29/06
CPC分类号： H04L63/102 , H04L63/02 , H04L63/0245 , H04L63/0263 , H04L63/0428 , H04L63/10 , H04L69/16 , H04L69/163 , H04L69/166
摘要： Methods and apparatus for controlling access in an electronic network include receiving a communication from a source device, the communication comprising a first protocol packet having first protocol packet information including a first protocol destination resource identifier, wherein a second protocol packet is embedded in the first protocol packet; retrieving at least one access rule based on at least one characteristic of the second protocol packet; applying the at least one access rule to at least one characteristic of the first protocol packet to determine an access rule outcome; and controlling access of the communication to a first protocol destination resource associated with the first protocol destination resource identifier according to the access rule outcome.
摘要翻译：用于控制电子网络中的访问的方法和装置包括从源设备接收通信，所述通信包括具有第一协议分组信息的第一协议分组，所述第一协议分组信息包括第一协议目的地资源标识符，其中第二协议分组被嵌入在所述第一协议包; 基于所述第二协议分组的至少一个特征来检索至少一个访问规则; 将所述至少一个访问规则应用于所述第一协议分组的至少一个特征以确定访问规则结果; 以及根据访问规则结果来控制与第一协议目的地资源标识符相关联的第一协议目的地资源的通信的访问。

30. 发明申请

US20140250493A1 FIREWALL METHOD AND APPARATUS FOR INDUSTRIAL SYSTEMS 审中-公开
公开(公告)号：US20140250493A1
公开(公告)日：2014-09-04
申请号：US14278229
申请日：2014-05-15
申请人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
发明人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
IPC分类号： H04L29/06
CPC分类号： H04L63/102 , H04L63/02 , H04L63/0245 , H04L63/0263 , H04L63/0428 , H04L63/10 , H04L69/16 , H04L69/163 , H04L69/166
摘要： Method and apparatus for use with systems including networked resources where communication between resources is via dual packet protocols wherein a first protocol includes a frame that specifies a destination device/resource and a data field and the second protocol specifies a final destination device/resource and includes a data field, where the second packets are encapsulated in the first protocol packet frames, the method including specifying access control information for resources, for each first protocol packet transmitted on the network, intercepting the first protocol packet prior to the first protocol destination resource, examining a subset of the additional embedded packet information to identify one of the intermediate path resources and the final destination resource, identifying the access control information associated with the identified at least one of the intermediate path resources and the final destination resource and restricting transmission of the first protocol packet as a function of the identified access control information.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式