专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08327130B2 Unique identification of entities of an industrial control system 有权
标题翻译：工业控制系统实体的独特识别
公开(公告)号：US08327130B2
公开(公告)日：2012-12-04
申请号：US11861082
申请日：2007-09-25
申请人： John C. Wilkinson, Jr. , Kenwood Henry Hall , Taryl Jon Jasper , Michael Dean Kalan
发明人： John C. Wilkinson, Jr. , Kenwood Henry Hall , Taryl Jon Jasper , Michael Dean Kalan
IPC分类号： H04L29/06
CPC分类号： H04L63/0807 , H04L9/3231 , H04L9/3234 , H04L2209/60 , H04L2209/805
摘要： Systems and methods are provided for issuing unique identification credentials to a plurality of devices, and their constituent components, in an industrial control system. Identification credentials are granted by an identification authority and conveyed to each of the credentialed devices and/or component through an identity token. The identification credentials include (1) a unique device identifier, (2) an identification authority component identifier, and (3) an indication of the location of the identification authority component. To secure the issued credentials, such credentials are encrypted and the identification token can be embedded with biometrics features. Identification credentials provide for the following prominent features: (i) Secure access to a device form a client and (ii) determination a topology of a set of credentialed devices in an industrial control system. The topology is network agnostic and facilitates organizational modeling of processes in the industrial control system.
摘要翻译：提供了系统和方法，用于向工业控制系统中的多个设备及其组成部件发布唯一的识别凭证。识别凭证由识别机构授予，并通过身份令牌传送给每个经过身份验证的设备和/或组件。识别凭证包括（1）唯一的设备标识符，（2）识别授权组件标识符，和（3）识别授权组件的位置的指示。为了确保所发出的证书，这样的凭证被加密，并且识别令牌可以嵌入生物识别特征。识别凭证提供以下突出特征：（i）安全地访问客户端的设备，以及（ii）确定工业控制系统中的一组已认证设备的拓扑。拓扑结构与网络无关，有利于工业控制系统中过程的组织建模。

2. 发明申请

US20090083843A1 UNIQUE IDENTIFICATION OF ENTITIES OF AN INDUSTRIAL CONTROL SYSTEM 有权
标题翻译：工业控制系统实体的全面识别
公开(公告)号：US20090083843A1
公开(公告)日：2009-03-26
申请号：US11861082
申请日：2007-09-25
申请人： John C. Wilkinson, JR. , Kenwood Henry Hall , Taryl Jon Jasper , Michael Dean Kalan
发明人： John C. Wilkinson, JR. , Kenwood Henry Hall , Taryl Jon Jasper , Michael Dean Kalan
IPC分类号： H04L9/32
CPC分类号： H04L63/0807 , H04L9/3231 , H04L9/3234 , H04L2209/60 , H04L2209/805
摘要： Systems and methods are provided for issuing unique identification credentials to a plurality of devices, and their constituent components, in an industrial control system. Identification credentials are granted by an identification authority and conveyed to each of the credentialed devices and/or component through an identity token. The identification credentials include (1) a unique device identifier, (2) an identification authority component identifier, and (3) an indication of the location of the identification authority component. To secure the issued credentials, such credentials are encrypted and the identification token can be embedded with biometrics features. Identification credentials provide for the following prominent features: (i) Secure access to a device form a client and (ii) determination a topology of a set of credentialed devices in an industrial control system. The topology is network agnostic and facilitates organizational modeling of processes in the industrial control system.
摘要翻译：提供了系统和方法，用于向工业控制系统中的多个设备及其组成部件发布唯一的识别凭证。识别凭证由识别机构授予，并通过身份令牌传送给每个经过身份验证的设备和/或组件。识别凭证包括（1）唯一的设备标识符，（2）识别授权组件标识符，和（3）识别授权组件的位置的指示。为了确保所发出的证书，这样的凭证被加密，并且识别令牌可以嵌入生物识别特征。识别凭证提供以下突出特征：（i）安全地访问客户端的设备，以及（ii）确定工业控制系统中的一组已认证设备的拓扑。拓扑结构与网络无关，有利于工业控制系统中过程的组织建模。

3. 发明授权

US5890086A Removable programmable cartridge for a lift truck control system 失效
标题翻译：用于叉车控制系统的可拆卸可编程墨盒
公开(公告)号：US5890086A
公开(公告)日：1999-03-30
申请号：US936680
申请日：1997-09-24
申请人： Timothy A. Wellman , John C. Wilkinson, Jr. , Nicholas D. Thobe , Ned E. Dammeyer , Mark E. Schumacher
发明人： Timothy A. Wellman , John C. Wilkinson, Jr. , Nicholas D. Thobe , Ned E. Dammeyer , Mark E. Schumacher
IPC分类号： B66F9/24 , G06F9/445 , G06F165/00
CPC分类号： B66F9/24 , G06F8/65
摘要： A lift truck control system which utilizes a distributed control network including at least a display module, a distribution module, a traction module, a brake module and a steering module. The display and steering modules each are configurable by software which controls the module and the various drivers in each module. In the preferred embodiment, the display module includes flash memory which stores application software and can be rewritten so that the performance characteristics of the modules are software configurable. The display module is connectable to a programmable cartridge which includes nonvolatile flash memory that carries application software for the display and steering modules. When connected, the cartridge downloads the particular application software which is written over the stored software in flash memory for the display and steering modules. The programmable cartridge also can be used to store and download boot software to the display and steering modules, so that the boot procedure performed by the display and steering modules is also software configurable. The system accepts modules which can be installed in a variety of different lift truck vehicles with minimal physical changes; the performance of the modules is configured by the application software written into the flash memory of the module.
摘要翻译：一种起重车控制系统，其利用包括至少显示模块，分配模块，牵引模块，制动模块和转向模块的分布式控制网络。显示和转向模块各自可以通过软件进行配置，该软件控制模块和每个模块中的各种驱动程序。在优选实施例中，显示模块包括闪存，其存储应用软件并且可以被重写，使得模块的性能特性是软件可配置的。显示模块可连接到可编程盒式磁带，其包括携带用于显示和转向模块的应用软件的非易失性闪存。当连接时，墨盒将存储的软件上写入的特定应用软件下载到闪存中，用于显示和转向模块。可编程盒式存储器还可用于将引导软件存储和下载到显示器和转向模块，使得显示器和转向模块执行的引导过程也是软件可配置的。该系统接受可以安装在各种不同的起重车辆上的模块，其体力变化最小; 模块的性能由写入模块的闪存的应用软件配置。

4. 发明申请

US20140250520A1 FIREWALL METHOD AND APPARATUS FOR INDUSTRIAL SYSTEMS 审中-公开
标题翻译：工业系统的防火方法和装置
公开(公告)号：US20140250520A1
公开(公告)日：2014-09-04
申请号：US14278225
申请日：2014-05-15
申请人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
发明人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
IPC分类号： H04L29/06
CPC分类号： H04L63/102 , H04L63/02 , H04L63/0245 , H04L63/0263 , H04L63/0428 , H04L63/10 , H04L69/16 , H04L69/163 , H04L69/166
摘要： Method and apparatus for use with systems including networked resources where communication between resources is via dual packet protocols wherein a first protocol includes a frame that specifies a destination device/resource and a data field and the second protocol specifies a final destination device/resource and includes a data field, where the second packets are encapsulated in the first protocol packet frames, the method including specifying access control information for resources, for each first protocol packet transmitted on the network, intercepting the first protocol packet prior to the first protocol destination resource, examining a subset of the additional embedded packet information to identify one of the intermediate path resources and the final destination resource, identifying the access control information associated with the identified at least one of the intermediate path resources and the final destination resource and restricting transmission of the first protocol packet as a function of the identified access control information.
摘要翻译：用于包括网络资源的系统的方法和装置，其中资源之间的通信是经由双分组协议，其中第一协议包括指定目的地设备/资源的帧和数据字段，并且第二协议指定最终目的地设备/资源，并且包括数据字段，其中第二分组被封装在第一协议分组帧中，该方法包括为在网络上发送的每个第一协议分组指定用于资源的访问控制信息，在第一协议目的地资源之前拦截第一协议分组，检查附加嵌入式分组信息的子集以识别中间路径资源和最终目的地资源之一，识别与所识别的中间路径资源和最终目的地资源中的至少一个相关联的访问控制信息，并限制第一个协议分组作为所识别的访问控制信息的函数。

5. 发明申请

US20110283350A1 Firewall Method and Apparatus for Industrial Systems 有权
标题翻译：工业系统防火墙方法与装置
公开(公告)号：US20110283350A1
公开(公告)日：2011-11-17
申请号：US13182808
申请日：2011-07-14
申请人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
发明人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
IPC分类号： G06F21/00
CPC分类号： H04L63/102 , H04L63/02 , H04L63/0245 , H04L63/0263 , H04L63/0428 , H04L63/10 , H04L69/16 , H04L69/163 , H04L69/166
摘要： Method and apparatus for use with systems including networked resources where communication between resources is via dual packet protocols wherein a first protocol includes a frame that specifies a destination device/resource and a data field and the second protocol specifies a final destination device/resource and includes a data field, where the second packets are encapsulated in the first protocol packet frames, the method including specifying access control information for resources, for each first protocol packet transmitted on the network, intercepting the first protocol packet prior to the first protocol destination resource, examining a subset of the additional embedded packet information to identify one of the intermediate path resources and the final destination resource, identifying the access control information associated with the identified at least one of the intermediate path resources and the final destination resource and restricting transmission of the first protocol packet as a function of the identified access control information.
摘要翻译：用于包括网络资源的系统的方法和装置，其中资源之间的通信是经由双分组协议，其中第一协议包括指定目的地设备/资源的帧和数据字段，并且第二协议指定最终目的地设备/资源，并且包括数据字段，其中第二分组被封装在第一协议分组帧中，该方法包括为在网络上发送的每个第一协议分组指定用于资源的访问控制信息，在第一协议目的地资源之前拦截第一协议分组，检查附加嵌入式分组信息的子集以识别中间路径资源和最终目的地资源之一，识别与所识别的中间路径资源和最终目的地资源中的至少一个相关联的访问控制信息，并限制第一个协议分组作为所识别的访问控制信息的函数。

6. 发明授权

US07990967B2 Firewall method and apparatus for industrial systems 有权
标题翻译：工业系统的防火墙方法和装置
公开(公告)号：US07990967B2
公开(公告)日：2011-08-02
申请号：US11326742
申请日：2006-01-06
申请人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, Jr. , Ramdas M. Pai , Steven J. Scott
发明人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, Jr. , Ramdas M. Pai , Steven J. Scott
IPC分类号： H04L12/56
CPC分类号： H04L63/102 , H04L63/02 , H04L63/0245 , H04L63/0263 , H04L63/0428 , H04L63/10 , H04L69/16 , H04L69/163 , H04L69/166
摘要： The invention includes a method including the steps of specifying access control information for resources, for each first protocol packet transmitted on the network, intercepting the first protocol packet prior to a first protocol destination resource, examining embedded packet information to identify at least one of the intermediate path resources and the final destination resource, identifying the access control information associated with the identified at least one of the intermediate path resources and the final destination resource and restricting transmission of the first protocol packet as a function of the identified access control information.
摘要翻译：本发明包括一种方法，包括以下步骤：为在网络上发送的每个第一协议分组指定资源的访问控制信息，在第一协议目的地资源之前拦截第一协议分组，检查嵌入分组信息以识别至少一个中间路径资源和最终目的地资源，识别与所识别的中间路径资源和最终目的地资源中的至少一个相关联的访问控制信息，并且限制作为所识别的访问控制信息的函数的第一协议分组的传输。

7. 发明申请

US20140259099A1 FIREWALL METHOD AND APPARATUS FOR INDUSTRIAL SYSTEMS 审中-公开
标题翻译：工业系统的防火方法和装置
公开(公告)号：US20140259099A1
公开(公告)日：2014-09-11
申请号：US14285863
申请日：2014-05-23
申请人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
发明人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
IPC分类号： H04L29/06
CPC分类号： H04L63/102 , H04L63/02 , H04L63/0245 , H04L63/0263 , H04L63/0428 , H04L63/10 , H04L69/16 , H04L69/163 , H04L69/166
摘要： Methods and apparatus for controlling access in an electronic network include receiving a communication from a source device, the communication comprising a first protocol packet having first protocol packet information including a first protocol destination resource identifier, wherein a second protocol packet is embedded in the first protocol packet; retrieving at least one access rule based on at least one characteristic of the second protocol packet; applying the at least one access rule to at least one characteristic of the first protocol packet to determine an access rule outcome; and controlling access of the communication to a first protocol destination resource associated with the first protocol destination resource identifier according to the access rule outcome.
摘要翻译：用于控制电子网络中的访问的方法和装置包括从源设备接收通信，所述通信包括具有第一协议分组信息的第一协议分组，所述第一协议分组信息包括第一协议目的地资源标识符，其中第二协议分组被嵌入在所述第一协议包; 基于所述第二协议分组的至少一个特征来检索至少一个访问规则; 将所述至少一个访问规则应用于所述第一协议分组的至少一个特征以确定访问规则结果; 以及根据访问规则结果来控制与第一协议目的地资源标识符相关联的第一协议目的地资源的通信的访问。

8. 发明申请

US20140250493A1 FIREWALL METHOD AND APPARATUS FOR INDUSTRIAL SYSTEMS 审中-公开
公开(公告)号：US20140250493A1
公开(公告)日：2014-09-04
申请号：US14278229
申请日：2014-05-15
申请人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
发明人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, JR. , Ramdas M. Pai , Steven J. Scott
IPC分类号： H04L29/06
CPC分类号： H04L63/102 , H04L63/02 , H04L63/0245 , H04L63/0263 , H04L63/0428 , H04L63/10 , H04L69/16 , H04L69/163 , H04L69/166
摘要： Method and apparatus for use with systems including networked resources where communication between resources is via dual packet protocols wherein a first protocol includes a frame that specifies a destination device/resource and a data field and the second protocol specifies a final destination device/resource and includes a data field, where the second packets are encapsulated in the first protocol packet frames, the method including specifying access control information for resources, for each first protocol packet transmitted on the network, intercepting the first protocol packet prior to the first protocol destination resource, examining a subset of the additional embedded packet information to identify one of the intermediate path resources and the final destination resource, identifying the access control information associated with the identified at least one of the intermediate path resources and the final destination resource and restricting transmission of the first protocol packet as a function of the identified access control information.

9. 发明授权

US08774186B2 Firewall method and apparatus for industrial systems 有权
标题翻译：工业系统的防火墙方法和装置
公开(公告)号：US08774186B2
公开(公告)日：2014-07-08
申请号：US13182808
申请日：2011-07-14
申请人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, Jr. , Ramdas M. Pai , Steven J. Scott
发明人： David D. Brandt , Brian A. Batke , Bryan L. Singer , Craig D. Anderson , Glenn B. Schulz , Michael A. Bush , John C. Wilkinson, Jr. , Ramdas M. Pai , Steven J. Scott
IPC分类号： H04L12/28 , H04L29/06
CPC分类号： H04L63/102 , H04L63/02 , H04L63/0245 , H04L63/0263 , H04L63/0428 , H04L63/10 , H04L69/16 , H04L69/163 , H04L69/166
摘要： Method and apparatus for use with systems including networked resources where communication between resources is via dual packet protocols wherein a first protocol includes a frame that specifies a destination device/resource and a data field and the second protocol specifies a final destination device/resource and includes a data field, where the second packets are encapsulated in the first protocol packet frames, the method including specifying access control information for resources, for each first protocol packet transmitted on the network, intercepting the first protocol packet prior to the first protocol destination resource, examining a subset of the additional embedded packet information to identify one of the intermediate path resources and the final destination resource, identifying the access control information associated with the identified at least one of the intermediate path resources and the final destination resource and restricting transmission of the first protocol packet as a function of the identified access control information.
摘要翻译：用于包括网络资源的系统的方法和装置，其中资源之间的通信是经由双分组协议，其中第一协议包括指定目的地设备/资源的帧和数据字段，并且第二协议指定最终目的地设备/资源，并且包括数据字段，其中第二分组被封装在第一协议分组帧中，该方法包括为在网络上发送的每个第一协议分组指定用于资源的访问控制信息，在第一协议目的地资源之前拦截第一协议分组，检查附加嵌入式分组信息的子集以识别中间路径资源和最终目的地资源之一，识别与所识别的中间路径资源和最终目的地资源中的至少一个相关联的访问控制信息，并限制第一个协议分组作为所识别的访问控制信息的函数。

10. 发明授权

US08015409B2 Authentication for licensing in an embedded system 有权
标题翻译：在嵌入式系统中进行许可验证
公开(公告)号：US08015409B2
公开(公告)日：2011-09-06
申请号：US11627477
申请日：2007-01-26
申请人： John C. Wilkinson, Jr. , Taryl J. Jasper , Michael D. Kalan , Nicholas L. Perrotto, Jr. , Glenn B. Schulz , James A. Meeker , Kevin M. Tambascio , Jack M. Visoky
发明人： John C. Wilkinson, Jr. , Taryl J. Jasper , Michael D. Kalan , Nicholas L. Perrotto, Jr. , Glenn B. Schulz , James A. Meeker , Kevin M. Tambascio , Jack M. Visoky
IPC分类号： H04L9/32
CPC分类号： H04L63/0442 , H04L63/0823
摘要： An industrial automation system is provided. This includes at least one license component that is granted by a third party to permit access to a portion of an industrial control component. At least one protocol component that is based in part on a private key exchange facilitates authentication and access to the portion of the industrial control component.
摘要翻译：提供工业自动化系统。这包括由第三方授予许可访问工业控制组件的一部分的至少一个许可组件。部分基于私钥交换机的至少一个协议组件有助于对工业控制组件的部分的认证和访问。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式