Image capture devices for a secure industrial control system
An image capture device for a secure industrial control system is disclosed. In an embodiment, the image capture device includes: an image sensor; a signal processor coupled to the image sensor; and a controller for managing the signal processor and transmitting data associated with processed image signals to at least one of an input/output module or a communications/control module via a communications interface that couples the controller to the at least one of the input/output module or the communications/control module, wherein the controller is configured to establish an encrypted tunnel between the controller and the at least one of the input/output module or the communications/control module based upon at least one respective security credential of the image capture device and at least one respective security credential of the at least one of the input/output module or the communications/control module.
1. An image capture device for a secure industrial control system, comprising:
a sensor;
a signal processor coupled to the sensor; and
a controller for managing the signal processor and transmitting packetized data associated with processed signals to at least one of an input/output module (IOM) or a communications/control module (CCM) via a communications interface that couples the controller to the at least one of the input/output module or the communications/control module, wherein the controller is configured to establish an encrypted tunnel between the controller and the at least one of the input/output module or the communications/control module based upon a unique security credential of the image capture device and a unique security credential of the at least one of the input/output module or the communications/control module,
wherein during an authentication sequence of the image capture device, when a determination is made that at least a portion of the image capture device being authenticated was manufactured or supplied by an entity different than an original equipment manufacturer of the image capture device, the functionality of the image capture device can be at least partially disabled within the secure industrial control system.
2. The image capture device of claim 1 , wherein the controller is further configured to perform the authentication sequence with the at least one of the input/output module or the communications/control module utilizing the unique security credential of the image capture device and the unique security credential of the at least one of the input/output module or the communications/control module.
3. The image capture device of claim 1 , wherein the unique security credential is provisioned for the image capture device at a respective point of manufacture from a key management entity.
4. The image capture device of claim 1 , wherein the unique security credential of the image capture device is at least one of modifiable, revocable, or authenticatable by a key management entity at a site different from the respective point of manufacture of the image capture device.
5. The image capture device of claim 1 , wherein the unique security credential of the image capture device is at least one of modifiable, revocable, or authenticatable by the at least one of the input/output module or the communications/control module.
6. The image capture device of claim 1 , wherein the communications interface is configured to connect the controller, via the at least one of the input/output module or the communications/control module, to a communications backplane including a serial communications interface and a parallel communications interface.
7. The image capture device of claim 6 , wherein the communications interface comprises a Power Over Ethernet (POE) port for receiving power supplied by the at least one of the input/output module or the communications/control module.
8. The image capture device of claim 1 , wherein the one or more processed signals include spectral data detected by the sensor.
9. The image capture device of claim 8 , wherein the controller is configured to transmit the spectral data for monitoring one or more industrial control system environmental conditions including an environmental presence of one or more of: fire, dust, smoke, micro-particles, heat, moisture, elevated pressure, gas, or radiation.
10. A secure industrial control system, comprising:
a communications/control module provisioned with a first unique security credential;
an input/output module provisioned with a second unique security credential;
a communications backplane that physically and communicatively couples the communications/control module to the input/output module; and
an image capture device provisioned with a third unique security credential and comprising:
an image sensor;
a signal processor coupled to the image sensor; and
a controller for managing the signal processor and transmitting packetized data associated with processed image signals to at least one of the input/output module or the communications/control module via a communications interface that couples the controller to the at least one of the input/output module or the communications/control module,
wherein the controller is configured to establish an encrypted tunnel between the controller and the at least one of the input/output module or the communications/control module based upon the third unique security credential of the image capture device and at least one of the first and second unique security credential associated with the at least one of the input/output module or the communications/control module, and
wherein during an authentication sequence of the image capture device, when a determination is made that at least a portion of the image capture device being authenticated was manufactured or supplied by an entity different than an original equipment manufacturer of the image capture device, the functionality of the image capture device can be at least partially disabled within the secure industrial control system.
11. The secure industrial control system of claim 10 , wherein the controller is further configured to perform an authentication sequence with the at least one of the input/output module or the communications/control module based on the third unique security credential of the image capture device and at least one of the first and second unique security credentials associated with the at least one of the input/output module or the communications/control module.
12. The secure industrial control system of claim 10 , wherein the at least one respective security credential of the image capture device comprises a unique security credential provisioned for the image capture device at a respective point of manufacture from a key management entity.
13. The secure industrial control system of claim 10 , wherein the third unique security credential of the image capture device is at least one of modifiable, revocable, or authenticatable by a key management entity at a site different from a respective point of manufacture.
14. The secure industrial control system of claim 10 , wherein the third unique security credential of the image capture device is at least one of modifiable, revocable, or authenticatable by the at least one of the input/output module or the communications/control module.
15. The secure industrial control system of claim 10 , wherein the communications interface is configured to connect the controller, via the at least one of the input/output module or the communications/control module, to the communications backplane, wherein the communications backplane includes a serial communications interface and a parallel communications interface.
16. The secure industrial control system of claim 15 , wherein the communications interface comprises a Power Over Ethernet (POE) port for receiving power supplied by the at least one of the input/output module or the communications/control module.
17. The secure industrial control system of claim 10 , wherein the one or more processed image signals include spectral data detected by the image sensor.
18. The secure industrial control system of claim 17 , wherein the controller is configured to transmit the spectral data for monitoring one or more industrial control system environmental conditions including an environmental presence of one or more of: fire, dust, smoke, micro-particles, heat, moisture, elevated pressure, gas, or radiation.
19. The secure industrial control system of claim 10 , wherein at least one of the communications/control module or the input/output module is configured to preprocess or post-process image signals received from the image capture device before transmitting the image signals to another industrial element of the secure industrial control system or a network connected device.
20. A secure industrial control system, comprising:
a communications/control module provisioned with a first unique security credential;
an input/output module provisioned with a second unique security credential;
a communications backplane that physically and communicatively couples the communications/control module to the input/output module, the communications backplane including a serial communications interface for connecting the input/output module to the communications/control module and a parallel communications interface configured for separately connecting the input/output module to the communications/control module;
and an image capture device provisioned with a third unique security credential and comprising:
an image sensor;
a signal processor coupled to the image sensor; and
a controller for managing the signal processor and transmitting packetized data associated with processed image signals to at least one of the input/output module or the communications/control module via a communications interface that couples the controller to the at least one of the input/output module or the communications/control module based upon the third unique security credential and at least one of the first and second unique security credentials associated with the at least one of the input/output module or the communications/control module, and
wherein during an authentication sequence of the image capture device, when a determination is made that at least a portion of the image capture device being authenticated was manufactured or supplied by an entity different than an original equipment manufacturer of the image capture device, the functionality of the image capture device can be at least partially disabled within the secure industrial control system.