Methods and security control apparatuses for transmitting and receiving cryptographically protected network packets
US-2018375842-A1 · Dec 27, 2018 · US
US12093009B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-12093009-B2 |
| Application number | US-202117211445-A |
| Country | US |
| Kind code | B2 |
| Filing date | Mar 24, 2021 |
| Priority date | Mar 24, 2021 |
| Publication date | Sep 17, 2024 |
| Grant date | Sep 17, 2024 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Implementations are described herein for provisioning a device such as a DCN with configuration data for operation on a process automation network using an “out-of-band” communication channel. In various implementations, a temporary out-of-band communication channel may be established between a first and second DCNs. The out-of-band communication channel may be distinct from a process automation network through which the first DCN is to be communicatively coupled with other process automation nodes of a process automation system. Provisioning data may be transmitted from the second DCN to the first DCN over the temporary out-of-band communication channel. The provisioning data may include: information technology (IT) configuration data and operational technology (OT) configuration data. Subsequent to the transmitting, the temporary out-of-band communication channel may be closed.
Opening claim text (preview).
What is claimed is: 1. A method for provisioning a first distributed control node (DCN) for operation as part of a process automation system, the method implemented using one or more processors and comprising: establishing a temporary out-of-band communication channel between the first DCN and a second DCN, wherein the temporary out-of-band communication channel is distinct from a process automation network through which the first DCN is to be communicatively coupled with other process automation nodes of the process automation system; transmitting provisioning data from the second DCN to the first DCN over the temporary out-of-band communication channel, wherein the provisioning data includes: information technology (IT) configuration data that is usable by the first DCN to join the process automation network, and operational technology (OT) configuration data that is usable by the first DCN to cooperate with one or more of the other process automation nodes of the process automation system to implement an at least partially automated process; and subsequent to the transmitting, closing the temporary out-of-band communication channel, wherein the transmitting includes cloning one or both of the IT and OT configuration data from the second DCN to the first DCN, and in response to the cloning, transitioning the second DCN into a disabled state in which the second DCN is prevented from cloning IT or OT configuration data to any additional DCNs. 2. The method of claim 1 , wherein the IT configuration data includes one or more networking parameters used by the second DCN previously. 3. The method of claim 1 , further comprising, subsequent to the cloning, transitioning the first DCN into a locked state in which the first DCN will reject at least some subsequent provisioning data. 4. The method of claim 1 , wherein the second DCN is simulated by a computing device. 5. The method of claim 1 , further comprising triggering a provisioning routine on the first DCN in response to the transmitting, wherein the provisioning routine automatically configures the first DCN based on the IT and OT configuration data. 6. The method of claim 5 , wherein the provisioning routine restarts one or more networking services executed by the first DCN after the first DCN is configured based on the IT configuration data. 7. The method of claim 1 , wherein the temporary out-of-band communication channel comprises a universal serial bus (USB) channel and the process automation network comprises an Ethernet network. 8. The method of claim 1 , wherein the temporary out-of-band communication channel comprises a near field communication (NFC) or Bluetooth channel. 9. The method of claim 1 , wherein one of the first or second DCN refrains from transmitting data on the process automation network until the other of the first or second DCN is assigned a new Internet Protocol (IP) address. 10. The method of claim 9 , further comprising exchanging, between the first and second DCNs via the temporary out-of-band communication channel, confirmatory data that the other of the first or second DCN has received the new IP address. 11. The method of claim 9 , wherein the temporary out-of-band communication channel is closed in response to the assignment of the new IP address. 12. A distributed control node (DCN) comprising circuitry to: establish a temporary out-of-band communication channel with a provisioning DCN, wherein the temporary out-of-band communication channel is distinct from a process automation network through which the DCN is to be communicatively coupled with other process automation nodes of a process automation system; receive, from the provisioning DCN via the temporary out-of-band communication channel, information technology (IT) configuration data and operational technology (OT) configuration data; clone one or both of the IT and OT configuration data received from the provisioning DCN; in response to the cloning, transition the DCN into a locked state in which the DCN will reject at least some subsequent provisioning data; based on the IT configuration data, join the process automation network; and based on the OT configuration data, cooperate with one or more of the other process automation nodes of the process automation system to implement an at least partially automated process. 13. The DCN of claim 12 , wherein the IT configuration data includes one or more networking parameters used by the provisioning DCN previously. 14. The DCN of claim 12 , further comprising instructions to trigger a provisioning routine on the DCN in response to receipt the IT and OT configuration data, wherein the provisioning routine automatically configures the DCN based on the IT and OT configuration data. 15. The DCN of claim 14 , wherein the provisioning routine restarts one or more networking services executed by the DCN after the DCN is configured based on the IT configuration data. 16. At least one non-transitory computer-readable medium for provisioning a first distributed control node (DCN) for operation as part of a process automation system, the medium comprising instructions that, on execution by one or more processors, cause the one or more processors to: establish a temporary out-of-band communication channel between the first DCN and a second DCN, wherein the temporary out-of-band communication channel is distinct from a process automation network through which the first DCN is to be communicatively coupled with other process automation nodes of the process automation system; transmit provisioning data from the second DCN to the first DCN over the temporary out-of-band communication channel, wherein the provisioning data includes: information technology (IT) configuration data that is usable by the first DCN to join the process automation network, and operational technology (OT) configuration data that is usable by the first DCN to cooperate with one or more of the other process automation nodes of the process automation system to implement an at least partially automated process; and subsequent to the transmission of the provisioning data, close the temporary out-of-band communication channel, wherein transmission of the provisioning data includes cloning one or both of the IT and OT configuration data from the second DCN to the first DCN, and in response to the cloning, transition the second DCN into a new state in which the second DCN is prevented from cloning IT or OT configuration data to any additional DCNs.
Bluetooth® · CPC title
Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title
Connection setup · CPC title
Ethernet · CPC title
Configuration by using pre-existing information, e.g. using templates or copying from other elements · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.