Secure edge system
A system can include edge devices that include communication circuitry; and one or more security components. A method can include receiving security codes from a plurality of edge devices without accessing the Internet: comparing the security codes without accessing the Internet; and, based at least in part on the comparing, connecting the plurality of edge devices for communication without accessing the Internet. A method can include executing a trained machine learning model on an edge device; and, based at least in part on the executing, detecting a change in state of the edge device.
1 . A system comprising:
a plurality of edge devices, each edge device of the plurality of edge devices comprising communication circuitry operatively coupled to hydrocarbon extraction equipment at a field site, wherein the plurality of edge devices comprises:
a first edge device comprising a computing node deployed at the field site; and
a second edge device comprising at least one of a drilling sensor or a wellsite controller; and
one or more security components comprising at least one processor and memory storing instructions that, when executed, cause the system to:
capture a snapshot of an object to create a good snapshot having a good known status, the object including activity logs of the plurality of edge devices, the activity logs having security codes;
store the good snapshot in a location comprising at least one of the first edge device, the second edge device, or an external device;
capture current activity logs including current security codes from one or more edge devices of the plurality of edge devices over a local network at the field site to create a current snapshot;
compare, locally at the field site over the local network, the current snapshot to the good snapshot, the comparing including comparing the security codes to the current security codes;
based on the comparing the security codes, selectively establish authenticated communication connections among the plurality of edge devices over the local network to enable monitoring of drilling parameters of the hydrocarbon extraction equipment via the plurality of edge devices; and
based on the comparing the security codes, and in response to an edge device of the plurality of edge devices having a status differing from the good known status, generate an alert indicative of the status.
2 . The system of claim 1 , wherein the one or more security components comprise a security code interface.
3 . The system of claim 1 , wherein the one or more security components comprise a mobile device that comprises security code sensing circuitry.
4 . The system of claim 3 , wherein the security code sensing circuitry is operatively coupled to a camera.
5 . The system of claim 4 , wherein the mobile device comprises an augmented reality program that operates using images acquired by the camera.
6 . The system of claim 1 , wherein the one or more security components comprise a machine learning model.
7 . The system of claim 6 , wherein the machine learning model comprises a trained machine learning model that processes information generated by one or more edge devices of the plurality of edge devices.
8 . The system of claim 1 , wherein the one or more security components comprise a state characterization component.
9 . The system of claim 1 , wherein the one or more security components comprise a state characterization component and a machine learning model.
10 . The system of claim 9 , wherein the one or more security components comprise a security code interface.
11 . The system of claim 1 , wherein the alert is configured to indicate an action taken to the object in response to the status differing from the good known status, the action comprising at least one of removing the object, adding content to the object, removing content from the object, or adding a file to the object.
12 . A method comprising:
capturing a snapshot of an object to create a good snapshot having a good known status, the object including activity logs of a plurality of edge devices, the activity logs having security codes and the plurality of edge devices comprising:
a first edge device comprising a computing node deployed at a field site; and
a second edge device comprising at least one of a drilling sensor or a wellsite controller;
storing the good snapshot in a location comprising at least one of the first edge device, the second edge device, or an external device;
capturing current activity logs including current security codes from one or more edge devices of the plurality of edge devices over a local network at the field site to create a current snapshot;
comparing, locally at the field site over the local network, the current snapshot to the good snapshot, the comparing including comparing the security codes to the current security codes;
based on the comparing the security codes, selectively establishing authenticated communication connections among the plurality of edge devices over the local network to enable monitoring of drilling parameters of hydrocarbon extraction equipment via the plurality of edge devices; and
based on the comparing the security codes, and in response to an edge device of the plurality of edge devices having a status differing from the good known status, generating an alert indicative of the status.
13 . A non-transitory computer readable medium storing instructions that, when executed by a processor, causes the processor to:
capture a snapshot of an object to create a good snapshot having a good known status, the object including activity logs of a plurality of edge devices, the activity logs having security codes and the plurality of edge devices comprising:
a first edge device comprising a computing node deployed at a field site; and
a second edge device comprising at least one of a drilling sensor or a wellsite controller;
store the good snapshot in a location comprising at least one of the first edge device, the second edge device, or an external device;
capture current activity logs including current security codes from one or more edge devices of the plurality of edge devices over a local network at the field site to create a current snapshot;
compare, locally at the field site over the local network, the current snapshot to the good snapshot, the comparing including comparing the security codes to the current security codes;
based on the comparing the security codes, selectively establishing authenticated communication connections among the plurality of edge devices over the local network to enable monitoring of drilling parameters of hydrocarbon extraction equipment via the plurality of edge devices; and
based on the comparing the security codes, and in response to an edge device of the plurality of edge devices having a status differing from the good known status, generate an alert indicative of the status;
wherein the alert is configured to indicate an action taken to the object in response to the status differing from the good known status, the action comprising at least one of removing the object, adding content to the object, removing content from the object, or adding a file to the object.