Apparatus and methods for authenticating cyber secure control system configurations using distributed ledgers

Patent metadata

Field	Value
Publication number	US-11456891-B2
Application number	US-201916283643-A
Country	US
Kind code	B2
Filing date	Feb 22, 2019
Priority date	Dec 20, 2018
Publication date	Sep 27, 2022
Grant date	Sep 27, 2022

Abstract

Control systems and methods for securely authenticating and validating a control system. The control system may include a plurality of dependent control nodes and master control nodes. Each dependent control node is communicatively coupled to one or more peripheral devices. Each control node maintains a unit level distributed ledger, where each unit level distributed ledger includes information from corresponding peripheral devices. Each control node may transmit a portion of the unit level distributed ledger to a master control node. Each master control node may maintain a system level distributed ledger that includes information from the corresponding unit level distributed ledgers. Each master node may transmit a portion of the system level distributed ledger to a central node that maintains a separate secure distributed ledger. The master node may authenticate the control system based on the received portion of the system level distributed ledgers and the secure distributed ledgers.

First claim

What is claimed is:

1. A method for securely controlling a braided ring network having a plurality of dependent control nodes and a plurality of master control nodes, each of the plurality of dependent control nodes associated with a respective distributed I/O node, the distributed I/O nodes interfacing with at least one peripheral device, the method comprising:
at each of the plurality of dependent control nodes:
maintaining a unit level distributed ledger, wherein the unit level distributed ledger comprises information from distributed I/O nodes associated with the respective control nodes; and
transmitting a portion of the unit level distributed ledger to a respective one of the plurality of master control nodes;

at each of the plurality of master control nodes:
maintaining, a system level distributed ledger, wherein the system level distributed ledger comprises information from the unit level distributed ledger of the control nodes associated with the respective master control node; and
transmitting the portion of the system level distributed ledger to a central processor; and

at the central processor:
maintaining a separate central distributed ledger for each of the system level distributed ledgers received from the master control nodes.

2. The method of claim 1 , further comprising comparing a respective received system level distributed ledger with the respective central distributed ledger, wherein the braided ring network controls an operation of a machine, and the machine is operated based on the comparison.

3. The method of claim 2 , further comprising updating the unit level distributed ledgers, system level distributed ledgers, and the central distributed ledgers subsequent the operation of the machine.

4. The method of claim 1 , further comprising at each of the distributed I/O nodes:
maintaining a device level distributed ledger, wherein the device level distributed ledger comprises a local hash of information related to the at least one peripheral device associated with the distributed I/O; and
transmitting a portion of the device level distributed ledger to the respective control node.

5. The method of claim 1 , wherein the peripheral device is a sensor or actuator.

6. The method of claim 2 , wherein the machine is a gas turbine and the operation is starting the gas turbine.

7. The method of claim 4 further comprising, at the control node, comparing a portion of the respective device level distributed ledger with the respective unit level distributed ledger and operating a machine based on the comparison.

8. The method of claim 1 further comprising, at the master control node, comparing a portion of respective unit level distributed ledger with the respective system level distributed ledger and operating a machine based on the comparison.

9. The method of claim 1 , wherein the portion of the unit level distributed ledger comprises a hash.

10. The method of claim 1 , wherein the portion of the system level distributed ledger comprises a hash.

11. The method of claim 1 , wherein the step of transmitting the portion of the unit level distributed ledger to the respective one of the plurality of master control nodes includes encrypting a message with one of a private key or public key.

12. The method of claim 1 , wherein the step of transmitting the portion of the system level distributed ledger to the central processor includes encrypting a message with one of a private key or public key.

13. The method of claim 1 , wherein the unit level distributed ledger comprises a digital certificate and data from at least a preceding engine start, and wherein the step of transmitting the portion of the unit level distributed ledger to the respective one of the plurality of master control nodes further comprises updating the unit level distributed ledger.

14. The method of claim 13 , wherein the data is selected from the group consisting of manufacturer, serial number of a smart node, software configuration, date of manufacture, date of qualification, public key and a preceding hash.

15. The method of claim 13 , wherein the step of updating the unit level distributed ledger further comprises deleting a preceding block from the unit level distributed ledger.

Assignees

• Rolls Royce Nam Tech Inc
• Rolls Royce Corp

Inventors

• Skertic Richard Joseph
• Costello John Joseph

Classifications

• H04L12/40

  Bus networks · CPC title

• G06F16/245

  Query processing · CPC title

• H04L9/38

  Encryption being effected by mechanical apparatus, e.g. rotating cams, switches, keytape punchers · CPC title

• H04L9/06

  the encryption apparatus using shift registers or memories for block-wise {or stream} coding, e.g. DES systems {or RC4; Hash functions; Pseudorandom sequence generators} · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title