Security co-engineering
Method and system of securely delivering a digital file from a provider to an industrial control system. A provider node creates a blockchain contract having metadata relating to the digital file to be delivered and deploys the blockchain contract to a blockchain network for verification. A plurality of other provider nodes, serving as miners, verifies and validates the blockchain contract. If the verification is successful, the blockchain networks notifies an industrial control system node associated with the industrial control system to initiate downloading the digital file from a provider repository for distribution to at least one Industrial Internet of Things (IIoT) device of the industrial control system.
1 . A method of securely delivering a digital file from a provider to an industrial control system, the industrial control system having a plurality of Industrial Internet of Things (IIoT) devices, the method comprising:
creating a blockchain contract for a provider node associated with the provider, wherein the blockchain contract includes metadata relating to the digital file;
deploying the blockchain contract to a blockchain network for verification;
receiving a verification of the blockchain contract, wherein at least one of a plurality of miner nodes executes the verification, and wherein the miner nodes comprise nodes associated with other providers;
notifying an industrial control system node associated with the industrial control system of a successful verification of the blockchain contract;
responsive to the successful verification, downloading, by the industrial control system node, the digital file from a repository coupled to the provider node; and
distributing, by the industrial control system node, the downloaded digital file to at least one of the IIoT devices of the industrial control system.
2 . The method of claim 1 , further comprising storing information relating to the successful verification of the blockchain contract in a ledger of the blockchain network.
3 . The method of claim 1 , wherein the digital file comprises a control application.
4 . The method of claim 1 , wherein the metadata relating to the digital file comprises version information.
5 . The method of claim 1 , further comprising creating, by the provider, the digital file and storing the digital file in the repository coupled to the provider node.
6 . The method of claim 1 , further comprising establishing the blockchain network, the blockchain network comprising at least the provider node, the plurality of miner nodes, and the industrial control system node.
7 . The method of claim 1 , wherein the provider node and the industrial control system node contain credentials proving trusted membership in the blockchain network.
8 . The method of claim 1 , further comprising identifying one or more of the IIoT devices of the industrial control system selected to receive the digital file and notifying the identified one or more of the IIoT devices of the successful verification of the blockchain contract.
9 . The method of claim 8 , further comprising sending, by the identified one or more of the IIoT devices, a request to the industrial control system node to pull the digital file, wherein downloading the digital file from the repository coupled to the provider node is further responsive to the request.
10 . A system for securely delivering a digital file from one or more providers to an industrial control system, the industrial control system having a plurality of Industrial Internet of Things (IIoT) devices, the system comprising:
a plurality of miner nodes coupled to each other via a data communication network and forming a blockchain network;
a provider node associated with one of the one or more providers, the provider node coupled to the miner nodes via the data communication network, the provider node configured for creating a blockchain contract having metadata relating to the digital file to be delivered and deploying the blockchain contract to the miner nodes for verification;
an industrial control system node associated with the industrial control system, the industrial control system node coupled to the miner nodes and to the provider node via the data communication network, the industrial control system node configured for receiving notification of a successful verification of the blockchain contract by the miner nodes, responsive to the successful verification, downloading the digital file from a repository coupled to the provider node, and distributing the digital file to at least one of the IIoT devices of the industrial control system.
11 . The system of claim 10 , further comprising a ledger of the blockchain network storing information relating to the successful verification of the blockchain contract.
12 . The system of claim 10 , wherein the digital file comprises a control application.
13 . The system of claim 10 , wherein the metadata relating to the digital file comprises version information.
14 . The system of claim 10 , further comprising a repository coupled to the provider node storing the digital file.
15 . The system of claim 10 , wherein the blockchain network comprises at least the provider node, the miner nodes, and the industrial control system node.
16 . The system of claim 15 , wherein the provider node and the industrial control system node contain credentials proving trusted membership in the blockchain network.
17 . The system of claim 10 , wherein the miner nodes comprise nodes associated with other providers and wherein the miner nodes execute the verification of the blockchain contract.
18 . The system of claim 10 , wherein the industrial control system node is configured for identifying one or more of the IIoT devices of the industrial control system selected to receive the digital file and notifying the identified one or more of the IIoT devices of the successful verification of the blockchain contract.
19 . The system of claim 18 , wherein the industrial control system node is configured for receiving a request from the identified one or more of the IIoT devices to pull the digital file, and wherein the industrial control system node downloads the digital file from the repository coupled to the provider node in response to the request.