Secure industrial control system
A secure industrial control system is disclosed herein. The industrial control system includes a plurality of industrial elements (e.g., modules, cables) which are provisioned during manufacture with their own unique security credentials. A key management entity of the secure industrial control system monitors and manages the security credentials of the industrial elements starting from the time they are manufactured up to and during their implementation within the industrial control system for promoting security of the industrial control system. An authentication process, based upon the security credentials, for authenticating the industrial elements being implemented in the industrial control system is performed for promoting security of the industrial control system. In one or more implementations, all industrial elements of the secure industrial control system are provisioned with the security credentials for providing security at multiple (e.g., all) levels of the system.
1. A secure industrial control system, comprising:
an industrial element provisioned with a first unique security credential, the industrial element including a first memory device and a first processor coupled to the first memory device, the industrial element being operable to receive information from or send information to a field device; and
a control module provisioned with a second unique security credential, the second unique security credential indicating an original equipment manufacturer of the control module, the control module including a second memory device and a second processor coupled to the second memory device, the control module being configured to monitor and control the industrial element,
wherein the control module is configured to at least partially disable operability of the industrial element based upon an authentication process performed with the first unique security credential and the second unique security credential when the authentication process indicates a second original equipment manufacturer of the industrial element that is different from the original equipment manufacturer of the control module.
2. The secure industrial control system as recited in claim 1 , wherein the industrial element is configured to at least partially enable or disable operability of the control module based upon an authentication process performed with at least the second unique security credential.
3. The secure industrial control system as recited in claim 2 , wherein the first processor is configured to implement an authentication or revocation of the first unique security credential in response to a first communication received from a key management entity, the at least one industrial element, or a second control module while the at least one control module is operated at a site different from a respective point of manufacture of the at least one control module.
4. The secure industrial control system as recited in claim 1 , further comprising:
a power module provisioned with a third unique security credential, the power module including a third memory device and a third processor coupled to the third memory device, the power module being configured to supply power for at least one of the industrial element or the control module, wherein the control module is configured to at least partially enable or disable operability of the power module based upon an authentication process performed with at least the third unique security credential.
5. The secure industrial control system as recited in claim 4 , further comprising:
a physical interconnect device provisioned with a fourth unique security credential, the physical interconnect device being configured to couple at least two of the control module, the industrial element, and the power module, wherein at least one of the control module or the industrial element is configured to at least partially enable or disable operability of the physical interconnect device based upon an authentication process performed with at least the fourth unique security credential.
6. The secure industrial control system as recited in claim 1 , wherein the control module is further configured to connect the industrial element to at least a second industrial element that is also monitored and controlled by the control module.
7. The secure industrial control system as recited in claim 1 , further comprising:
a backplane that physically and communicatively couples the control module and the industrial element.
8. The secure industrial control system as recited in claim 1 , wherein at least one of the first and second unique security credentials comprises a public security credential.
9. The secure industrial control system as recited in claim 1 , wherein at least one of the first and second unique security credentials comprises a secret security credential.
10. The secure industrial control system as recited in claim 1 , wherein at least one of the first and second unique security credentials comprises an encryption key.
11. The secure industrial control system as recited in claim 1 , wherein at least one of the first and second unique security credentials comprises a certificate or an identification number.
12. A method of securing an industrial control system, comprising:
provisioning an industrial element with a first unique security credential, the industrial element being operable to receive information from or send information to a field device;
provisioning a control module with a second unique security credential, the second unique security credential indicating an original equipment manufacturer of the control module, the control module being operable to monitor and control the industrial element; and
at least partially disabling operability of at least one of the control module or the industrial element based upon an authentication process performed between the control module and the industrial element with the first unique security credential and the second security credential when the authentication process indicates a second original equipment manufacturer of the industrial element that is different from the original equipment manufacturer of the control module.
13. The method as recited in claim 12 , further comprising:
provisioning a power module a third unique security credential, the power module being operable to supply power for at least one of the industrial element or the control module; and
at least partially enabling or disabling operability of the power module based upon an authentication process performed with at least the third unique security credential.
14. The method as recited in claim 13 , further comprising:
provisioning a physical interconnect device with a fourth unique security credential, the physical interconnect device being operable to couple at least two of the control module, the industrial element, and the power module; and
at least partially enabling or disabling operability of the physical interconnect device based upon an authentication process performed with at least the fourth unique security credential.
15. A secure industrial control system, comprising:
an industrial element provisioned with a first unique security credential, the first unique security credential indicating an original equipment manufacturer of the industrial element, the industrial element including a first memory device and a first processor coupled to the first memory device, the industrial element being operable to receive information from or send information to a field device; and
a control module provisioned with a second unique security credential, the control module including a second memory device and a second processor coupled to the second memory device, the control module being configured to monitor and control the industrial element and to connect the industrial element to at least a second industrial element that is also monitored and controlled by the control module,
wherein the industrial element is configured to at least partially disable operability of the control module based upon an authentication process performed with the first unique security credential and the second unique security credential when the authentication process indicates a second original equipment manufacturer of the control module that is different from the original equipment manufacturer of the industrial element.
16. The secure industrial control system as recited in claim 15 , wherein the first processor is configured to implement an authentication or revocation of the first unique security credential in response to a first communication received from a key management entity, the at least one industrial element, or a second control module while the at least one control module is operated at a site different from a respective point of manufacture of the at least one control module.
17. The secure industrial control system as recited in claim 16 , wherein the second processor is configured to implement an authentication or revocation of the second unique security credential in response to a second communication received from the key management entity, the at least one control module, or a second industrial element while the at least one industrial element is operated at a site different from the respective point of manufacture of the at least one industrial element.
18. The secure industrial control system as recited in claim 15 , further comprising:
a power module provisioned with a third unique security credential, the power module including a third memory device and a third processor coupled to the third memory device, the power module being configured to supply power for at least one of the industrial element or the control module, wherein the control module is configured to at least partially enable or disable operability of the power module based upon an authentication process performed with at least the third unique security credential.
19. The secure industrial control system as recited in claim 18 , further comprising:
a physical interconnect device provisioned with a fourth unique security credential, the physical interconnect device being configured to couple at least two of the control module, the industrial element, and the power module, wherein at least one of the control module or the industrial element is configured to at least partially enable or disable operability of the physical interconnect device based upon an authentication process performed with at least the fourth unique security credential.
20. The secure industrial control system as recited in claim 18 , further comprising:
a backplane that physically and communicatively couples the control module, the industrial element, and the power module.