Systems and methods for providing security and tamper detection in I / O systems

Abstract

The present application relates to systems and methods for providing security and tamper detection in an I / O system. A network adapter within an industrial input / output (I / O) system includes one or more processors. The one or more processors are configured to: receive a first combination; determine whether the first combination matches a predefined lock combination; upon determining that the first combination matches the predefined lock combination, initiate a lock process; receive a second combination; determine whether the second combination matches a predefined lock key; and upon determining that the second combination matches the predefined lock key, lock the adapter.

Description

Technical Field

[0001] The present disclosure relates generally to industrial automation control systems and methods, and more particularly, to systems and methods for providing security and tamper detection in input / output (I / O) systems. Background Art

[0002] In industrial automation systems, remote input / output (I / O) modules can communicate with controllers via a network via an adapter. For example, an EtherNet / IP adapter connected to an I / O module can enable communication between the I / O module and the controller via an EtherNet / IP network. The adapter can be connected to one or more I / O modules to provide power to the I / O modules and enable the I / O modules to transmit data and execute logic. The adapter typically includes a user interface that allows the user to set the adapter. For example, the user can use a user interface including a rotary switch to set an IP address, change an existing IP address, enter or exit protected mode, and reset the adapter. In order to provide physical security and protect the adapter from unauthorized user input to the user interface (for example, an unauthorized user uses a rotary switch to exit protected mode), the adapter and I / O modules are typically stored in a locked cabinet. It would be advantageous to eliminate the need for locked cabinets and provide security and tamper detection to the I / O system to prevent unauthorized personnel from changing adapter settings. Summary of the Invention

[0003] According to one aspect of the present disclosure, a network adapter within an industrial input / output (I / O) system is provided, comprising: one or more processors, wherein the one or more processors are configured to: receive a first combination; determine whether the first combination matches a predefined locking combination; upon determining that the first combination matches the predefined locking combination, start a locking process; receive a second combination; determine whether the second combination matches a predefined locking key; and upon determining that the second combination matches the predefined locking key, lock the adapter.

[0004] According to another aspect of the present disclosure, a network adapter within an industrial input / output (I / O) system is provided, comprising: one or more processors, wherein the one or more processors are configured to: receive a first combination; determine whether the first combination matches a predefined unlock combination; upon determining that the first combination matches the predefined unlock combination, start an unlock process; receive a second combination; determine whether the second combination matches a predefined unlock key; and upon determining that the second combination matches the predefined unlock key, unlock the adapter.

[0005] According to another aspect of the present disclosure, a method for locking / unlocking a network adapter of an industrial I / O system is provided, comprising: receiving a first combination at the network adapter; determining, by the network adapter, whether the first combination matches a predefined lock / unlock combination; starting a lock / unlock process, by the network adapter, upon determining that the first combination matches the predefined lock / unlock combination; receiving a second combination at the network adapter; determining, by the network adapter, whether the second combination matches a predefined lock / unlock key; and locking / unlocking the network adapter upon determining that the second combination matches the predefined lock / unlock key. BRIEF DESCRIPTION OF THE DRAWINGS

[0006] Various objects, aspects, features, and advantages of the present disclosure will become more apparent and better understood by reference to the detailed description presented in conjunction with the accompanying drawings, in which like reference numerals identify corresponding elements throughout. In the drawings, like reference numerals generally indicate identical, functionally similar, and / or structurally similar elements.

[0007] Figure 1 is a block diagram illustrating an industrial control system including a controller, an I / O subsystem, and a network that facilitates communication between the controller and the I / O subsystem, according to an illustrative embodiment;

[0008] Figure 2 shows a network adapter of an I / O subsystem (also referred to as an I / O system) in accordance with an illustrative embodiment;

[0009] Figure 3 A flowchart illustrating a locking process for a network adapter for providing security for an I / O system according to an illustrative embodiment; and

[0010] Figure 4 A flow diagram depicts a process for unlocking a network adapter for providing maintenance or modifications to a secured I / O system in accordance with an illustrative embodiment. DETAILED DESCRIPTION

[0011] Before turning to detailed description of the features of the exemplary embodiments, it should be understood that the present application is not limited to the details or methods set forth in the description or illustrated in the drawings. It should also be understood that the terminology is for descriptive purposes only and should not be regarded as limiting.

[0012] Some embodiments of the present invention relate to a network adapter within an industrial I / O system, the network adapter comprising one or more processors configured to: receive a first combination; determine whether the first combination matches a predefined lock combination; initiate a lock process upon determining that the first combination matches the predefined lock combination; receive a second combination; determine whether the second combination matches a predefined lock key; and lock the adapter upon determining that the second combination matches the predefined lock key.

[0013] Some embodiments of the present invention relate to a network adapter within an industrial I / O system, the network adapter comprising one or more processors configured to: receive a first combination; determine whether the first combination matches a predefined unlock combination; initiate an unlock process upon determining that the first combination matches the predefined unlock combination; receive a second combination; determine whether the second combination matches a predefined unlock key; and unlock the adapter upon determining that the second combination matches the predefined unlock key.

[0014] Some embodiments relate to a method for locking / unlocking a network adapter of an industrial I / O system. The method includes: receiving a first combination at the network adapter; determining, by the network adapter, whether the first combination matches a predefined lock / unlock combination; initiating a lock / unlock process, by the network adapter, upon determining that the first combination matches the predefined unlock combination; receiving a second combination at the network adapter; determining, by the network adapter, whether the second combination matches a predefined lock / unlock key; and locking / unlocking the network adapter upon determining that the second combination matches the predefined unlock key.

[0015] Now refer to Figure 1, shows an industrial control system including a controller 102, an I / O subsystem 100, and a network that facilitates communication between the controller 102 and the I / O subsystem 100, according to an illustrative embodiment. The I / O subsystem 100 includes a network adapter 104 and one or more I / O devices 108 (e.g., I / O devices 108a and 108b). The network adapter 104 is operatively connected to an industrial automation network 112, such as an Ethernet / IP network or other industrial automation network, so that the network adapter 104 receives data from the controller 102, which is also connected to the network 112, sends data to the controller 102, and otherwise communicates with the controller 102. The controller 102 includes one or more programmable logic controllers (PLCs), microprocessors, and / or other electronic processors that are programmed and configured to control an industrial machine, process, or other controlled system. The adapter 104 and the I / O devices 108 are removably connected to a modular or chassis-based backplane 110. In some embodiments, the adapter 104 and I / O devices 108 are connected to the backplane in a sequential manner (e.g., the adapter 104 at one end, followed by the I / O devices 108a and 108b). The adapter 104 provides power to the connected I / O devices 108 via the backplane 110 and transmits data to and from the connected I / O devices 108. The adapter 104 is configured to enable / disable communication between the I / O devices 108 and the controller 102. Each of the I / O devices 108 includes one or more I / O modules (not shown) configured to perform one or more specialized input / output functions, such as DC input, DC output, AC input, AC output, analog input and / or output, RTD and / or thermocouple input and / or output, etc., as is commonly known in the industrial automation field. Each of the I / O devices 108 is connected to one or more field devices (not shown). Input / output data is provided between the controller 102 and the field devices via the corresponding I / O devices 108 and the adapter 104.

[0016] Adapter 104 includes a user interface (UI) 106 and one or more processors 107. UI 106 allows a user to input instructions and configure I / O system 100. UI 106 includes any suitable input mechanism, such as a rotary switch, a button with a digital display, or an instruction file on a portable storage device (e.g., an SD card, a USB device, etc.). One or more processors 107 can perform one or more operations described herein with reference to adapter 104, such as locking or unlocking operations, configuration operations, etc. In some embodiments, adapter 104 is configured with an instruction set, each instruction corresponding to a predefined unique combination or a predefined sequence of combinations of numbers, letters, symbols, or any combination thereof. Upon receiving a predefined combination or sequence of combinations, adapter 104 operates according to the corresponding instruction. For example, a first predefined input combination (e.g., 999) corresponds to an instruction to set an IP address. Upon receiving the first input combination, adapter 104 begins the IP address configuration process and expects to receive an IP address through UI 106. A second predefined input combination (e.g., 888) corresponds to a reset instruction. Upon receiving the second predefined input combination, the adapter 104 is reset to its initial out-of-box settings.

[0017] The adapter 104 is also configured with predefined lock instructions and predefined unlock instructions. The predefined lock instructions correspond to a lock combination input and a lock key input. In some embodiments, the lock combination may include a unique numeric combination and an input duration (e.g., 555 for 5 seconds). In these embodiments, when the adapter 104 receives the lock combination input, the adapter 104 begins the lock process and expects to receive the lock key input after the input duration. In some other embodiments, the lock combination may include a unique sequence of combinations, each associated with an input duration (e.g., first 111 for 5 seconds, second 222 for 5 seconds, third 333 for 5 seconds). In these other embodiments, when the adapter 104 receives the first lock combination (e.g., 111), the adapter 104 expects to receive the second combination after 5 seconds. Upon receiving the second combination (e.g., 222), the adapter 104 expects to receive the third combination after 5 seconds. Upon receiving the third combination (e.g., 333), the adapter 104 expects to receive the lock key input after 5 seconds. The lock key is a unique numeric combination (e.g., 388) provided by the I / O system. In some implementations, a lock key may be generated by the I / O system and provided to an authorized user.

[0018] When the adapter 104 receives the lock combination and lock key, the one or more processors 107 lock the adapter 104. When the adapter 104 is locked, the adapter 104 enters a protected mode. Protected mode prevents access to services that are not needed after the adapter 104 is configured and during normal operation. Protected mode disables features that could make the I / O system 100 vulnerable to destructive actions. In protected mode, the adapter 104 is configured to detect and prevent unauthorized configuration changes that could affect system behavior and cause unexpected and unforeseen changes to the I / O system 100. In protected mode, the adapter 104 is also configured to prohibit various tasks / actions, including but not limited to changing network configuration settings (e.g., port speed), changing IP settings (e.g., changing IP address, mask, and DHCP mode), updating adapter firmware versions, disabling or re-enabling external product ports, performing a remote adapter reset, disabling or enabling the WWW server, disabling or enabling the SNMP server, etc. For example, when the adapter 104 is operating in protected mode, even if an unauthorized user gains access to the network connection 112, the unauthorized user cannot change any settings of the adapter 104. In some embodiments, upon entering protected mode, the adapter 104 registers the identity of each I / O device 108 connected to the adapter 104 and periodically checks at runtime whether the identity of each I / O device 108 is valid. When the adapter 104 detects an invalid identity for an I / O device, the adapter 104 may send a notification reporting the detected unauthorized I / O device to the controller 102. In some embodiments, upon detecting an invalid identity for an I / O device, the adapter 104 may reject the I / O device and disable communication between the I / O device and the controller 102.

[0019] Similar to the predefined locking instructions, the predefined unlocking instructions correspond to inputting an unlocking combination and an unlocking key. The unlocking combination is different from the locking combination. In some embodiments, the unlocking combination may include a unique combination of numbers and an input duration (e.g., 666 for 5 seconds). In these embodiments, when the adapter 104 receives the unlocking combination input, the one or more processors 107 begin the unlocking process and expect to receive the unlocking key input after the input duration. In some other embodiments, the unlocking combination may include a unique sequence of combinations, each associated with an input duration (e.g., first 333 for 5 seconds, second 222 for 5 seconds, third 111 for 5 seconds). In these other embodiments, when the adapter 104 receives the first unlocking combination (e.g., 333), the adapter 104 expects to receive the second combination after 5 seconds. Upon receiving the second combination (e.g., 222), the adapter 104 expects to receive the third combination after 5 seconds. Upon receiving the third combination (e.g., 111), the adapter 104 expects to receive the unlocking key input after 5 seconds. The unlocking key is a unique combination of numbers (e.g., 488) provided by the I / O system. In some embodiments, the unlocking key can be generated by the I / O system and provided to the authorized user. In some embodiments, the unlocking key can be the same as the locking key. In some other embodiments, the unlocking key can be different from the locking key.

[0020] When the adapter 104 receives the correct unlock combination and the correct unlock key, the adapter 104 is unlocked. When the adapter 104 is unlocked, the adapter 104 exits protected mode. An unlocked adapter 104 allows the user to perform one or more maintenance operations, such as reconfiguration, replacement, and the like. For example, when a user wants to replace an I / O device and / or change one or more settings of the adapter 104, the user can enter the unlock combination through the UI 106. Upon receiving the unlock combination, the adapter 104 waits for the unlock key to be entered. After a time duration associated with the unlock combination, the user can enter the unlock key. Upon receiving the unlock key, the adapter 104 is unlocked and exits protected mode. An unlocked adapter allows actions that were previously prohibited in protected mode. In this way, the adapter 104 can identify an authorized user and allow the user to perform one or more replacement and / or reconfiguration actions on the adapter 104. If the unlock combination is entered incorrectly (e.g., no predefined instructions associated with the entered combination are found), the adapter 104 may remain locked. In some embodiments, the adapter 104 may be configured with a predefined number of allowed attempts to receive the correct unlock combination. When the user fails to enter the correct unlock combination within a predefined number of attempts, the adapter 104 may send a notification to the controller 102 reporting the attempt and prohibit further actions by the user until further instructions are received from the controller 102 .

[0021] Figure 2 A network adapter 200 is shown according to an illustrative embodiment. The network adapter 200 is configured to facilitate high-speed data transmission between a controller and one or more I / O devices in an I / O system over an industrial network (e.g., an EtherNet / IP network). In some embodiments, the network adapter 200 is similar to Figure 1 Adapter 200 includes an I / O connector 204 for connecting one or more I / O devices. Adapter 200 also includes a power removable terminal block (RTB) 206 and one or more network ports 208 (e.g., Ethernet ports 208a and 208b). Power RTB 206 provides system-side power to one or more I / O devices. Adapter 200 is connected to an industrial network via network port 208. Adapter 200 includes one or more processors and memory (not shown). One or more processors execute one or more software or firmware applications stored in the memory to provide various functions of adapter 200.

[0022] The adapter includes a user interface, which also includes one or more rotary switches 202 (e.g., rotary switches 202a, 202b, 202c). The rotary switches 202 are configured to allow a user to enter one or more commands, such as setting an IP address, locking / unlocking the adapter 200, etc. Those skilled in the art will appreciate that the rotary switches 202 are shown as an example input mechanism, and any other suitable input mechanism may be used, such as buttons with a numeric display, a keyboard, a command file on a portable storage device (e.g., an SD card, a USB device), etc. The rotary switches 202 allow a user to enter three digits (e.g., each digit from 0 to 9) in any combination. The adapter 200 is configured with a set of commands, and each command corresponds to a unique combination or sequence of combinations. The adapter 200 is configured to receive a combination via the rotary switches 202 and operate according to the corresponding command. For example, an input combination of 999 may instruct the adapter 200 to begin IP setup mode. Upon receiving this combination of 999, the adapter 200 expects to receive an IP address input. An input combination of 888 corresponds to a reset command. Upon receiving the combination of 888, the adapter 200 resets to its initial out-of-box settings.

[0023] The adapter 200 is also configured with predefined lock instructions and predefined unlock instructions. The predefined lock instructions correspond to a lock combination input and a lock key input. In some embodiments, the lock combination may include a unique combination of numbers and an input duration (e.g., a first number 5 entered via rotary switch 202a, a second number 5 entered via rotary switch 202b, and a third number 5 entered via rotary switch 202c for 5 seconds). In these embodiments, when the adapter 200 receives the lock combination input, it begins the locking process and expects to receive a lock key input after the input duration (e.g., determines that the next input is a lock key input). In some other embodiments, the lock combination may include a unique sequence of combinations, each associated with an input duration (e.g., a first combination 111 for 5 seconds, a second combination 222 for 5 seconds, and a third combination 333 for 5 seconds). In these other embodiments, when the adapter 200 receives the first lock combination (e.g., 111) via rotary switches 202a, 202b, and 202c, the adapter 200 expects to receive the second combination 5 seconds later. Upon receiving the second combination (e.g., 222), the adapter 200 expects to receive a third combination after 5 seconds. Upon receiving the third combination (e.g., 333), the adapter 200 expects to receive a lock key input after 5 seconds. The lock key is a unique numeric combination (e.g., 388) provided by the I / O system. In some embodiments, the lock key can be generated by the I / O system and provided to an authorized user. In some embodiments, the duration of the lock combination and the duration of the lock key are predefined for the I / O system.

[0024] When adapter 200 receives a first combination from the user, it determines whether the first combination matches the lock combination. Upon determining that the first combination matches the lock combination, adapter 200 begins the lock process and expects a lock key. Adapter 200 also receives a second combination from the user and determines whether the second combination matches the lock key. Upon determining that the second combination matches the lock key, adapter 200 is locked. When locked, adapter 200 enters protection mode. In protection mode, adapter 200 is configured to detect and prevent actions from unauthorized users and prohibit one or more predefined actions to provide security for the I / O system. Prohibited predefined actions include any actions that could pose a security risk, such as changing network configuration settings (e.g., port speed), changing IP settings (e.g., changing IP address, netmask, and DHCP mode), updating adapter firmware, disabling or re-enabling external product ports, performing a remote adapter reset, disabling or enabling the WWW server, disabling or enabling the SNMP server, replacing one or more I / O devices connected to adapter 200, or connecting unauthorized I / O devices to adapter 200. For example, when the adapter 200 is operating in protected mode, an unauthorized user cannot change any settings of the adapter 200 even if the unauthorized user gains access to the network connection through which the adapter 200 communicates with the controller. In some embodiments, upon entering protected mode, the adapter 200 registers the identity of each I / O device connected to the adapter 200 and periodically checks whether the identity of each I / O device is valid during operation. When the adapter 200 detects an invalid identity of an I / O device, the adapter 200 may send a notification to the controller reporting the detection of the unauthorized I / O device. In some embodiments, upon detecting an invalid identity of an I / O device, the adapter 200 may reject the I / O device and prohibit communication between the I / O device and the controller.

[0025] Similar to the predefined locking instructions, the predefined unlocking instructions correspond to inputting an unlocking combination and an unlocking key. The unlocking combination is different from the locking combination. In some embodiments, the unlocking combination may include a unique numeric combination and an input duration (e.g., 666 for 5 seconds). In these embodiments, when the adapter 200 receives the unlocking combination input, the adapter 200 begins the unlocking process and expects to receive the unlocking key input after the input duration. In some other embodiments, the unlocking combination may include a unique sequence of combinations, each associated with an input duration (e.g., first 333 for 5 seconds, second 222 for 5 seconds, third 111 for 5 seconds). In these other embodiments, when the adapter 200 receives the first unlocking combination (e.g., 333), the adapter 200 expects to receive the second combination after 5 seconds. Upon receiving the second combination (e.g., 222), the adapter 200 expects to receive the third combination after 5 seconds. Upon receiving the third combination (e.g., 111), the adapter 200 expects to receive the unlocking key input after 5 seconds. The unlocking key is a unique numeric combination (e.g., 488) provided by the I / O system. In some embodiments, the unlocking key can be generated by the I / O system and provided to the authorized user. In some embodiments, the unlocking key can be the same as the locking key. In some other embodiments, the unlocking key can be different from the locking key.

[0026] When adapter 200 receives a first combination from a user, it determines whether the first combination matches an unlock combination. Upon determining that the first combination matches the unlock combination, adapter 200 begins the unlock process and expects to receive an unlock key input. Adapter 200 receives a second combination and determines whether the second combination matches a predefined unlock key. Upon determining that the second combination matches the unlock key, adapter 200 is unlocked. When adapter 200 is unlocked, it exits protected mode. An unlocked adapter 200 allows the user to perform one or more maintenance operations, such as reconfiguration or replacement. For example, if a user wishes to replace an I / O device and / or change one or more settings of adapter 200, the user may enter an unlock combination via rotary switch 202. Upon receiving the unlock combination, adapter 200 waits for the unlock key input. After a duration associated with the unlock combination, the user may enter the unlock key. Upon receiving the unlock key, adapter 200 is unlocked. When unlocked, adapter 200 exits protected mode and allows actions previously prohibited in protected mode. In this way, the adapter 200 can identify an authorized user and allow the user to perform one or more replacement and / or reconfiguration actions on the adapter 200. If the unlock combination is entered incorrectly (e.g., no predefined instructions associated with the entered combination are found), or if the unlock key is entered incorrectly, the adapter 200 can remain locked. In some embodiments, the adapter 200 can be configured with a predefined number of attempts to receive the correct unlock combination and the correct unlock key. When the user fails to enter the correct unlock combination and unlock key within the predefined number of attempts, the adapter 200 can send a notification to the controller reporting the attempt and prohibit further actions by the user until further instructions are received from the controller.

[0027] Figure 3 A flow chart of a locking process 300 for a network adapter for providing security for an I / O system is shown according to an illustrative embodiment. The locking process 300 provides built-in physical security and tamper detection for the I / O system. At operation 302, the adapter receives a locking combination. The adapter may receive the locking combination via any suitable input mechanism, such as a rotary switch, a button, a keyboard, an input file stored in a portable storage device (e.g., an SC card, a USB device), etc. The locking combination may be a unique numeric combination (e.g., 5555) or a unique sequence of numeric combinations (e.g., first 5555, second 4444). In some embodiments, the locking combination may include any suitable digits according to the corresponding input mechanism (e.g., by Figure 2 A three-digit combination entered via the rotary switch shown, a four-digit combination entered via the input button). In some embodiments, a lockout combination can be associated with a duration that indicates a duration before the adapter can accept the next combination.

[0028] At operation 304, the adapter determines whether the input lock combination is correct by comparing the received lock combination with a set of predefined combinations. Each predefined combination corresponds to an operation instruction (e.g., lock, unlock, reset, set IP, etc.). When it is determined that the received lock combination matches the predefined lock combination, at operation 308, the adapter receives the lock instruction and expects to receive the lock key. When it is determined that the received lock combination does not match the predefined lock combination, at operation 306, the adapter does not receive the lock instruction and stops the locking process so that the adapter remains unlocked.

[0029] At operation 310, the adapter receives the lock key as expected. The lock key is a unique combination of numbers (e.g., 4888). In some embodiments, the lock key can be a sequence of number combinations (e.g., 4888 first, 3888 second). In some embodiments, the lock key can be associated with a duration indicating the duration before the adapter can receive the next combination. The adapter can receive the lock combination via any suitable input mechanism, such as a rotary switch, a button, a keyboard, an input file stored in a portable storage device (e.g., an SC card, a USB device), etc. In some embodiments, the lock key is different from the lock combination.

[0030] At operation 312, the adapter determines whether the lock key is correct by comparing the received lock key with a predefined lock key. The predefined lock key is assigned to the adapter by the I / O system. In some embodiments, the predefined lock key can be provided by a system administrator. In some other embodiments, the predefined lock key can be generated by the I / O system. If the lock key is correct, the adapter is locked at operation 314. If the lock key is incorrect, the adapter stops the locking process and remains unlocked.

[0031] At operation 316, when the adapter is locked, the adapter enters protected mode. In protected mode, the adapter prohibits one or more predefined actions to prevent unauthorized interaction with the I / O system. The prohibited predefined actions include any actions that may cause security issues, such as changing certain settings of the adapter through the network connection, replacing one or more I / O devices connected to the adapter, installing unauthorized I / O devices on the I / O system, etc. For example, when the adapter is operating in protected mode, even if an unauthorized user gains access to the network connection, the unauthorized user cannot change any settings of the adapter. When the adapter is locked, the adapter also registers all I / O devices connected to the adapter.

[0032] At operation 318, while the I / O system is running (e.g., at runtime), the adapter periodically checks whether the identity of the currently connected I / O device is valid by comparing the identity of the current I / O device with the identities of the registered I / O devices. If any current I / O device does not match a registered I / O device, the adapter may send a notification to the controller of the I / O system reporting the detected invalid I / O device.

[0033] Figure 4 A flow chart of an unlocking process 400 for a network adapter for providing maintenance or modification to a protected I / O system is shown according to an illustrative embodiment. At operation 402, the adapter receives an unlock combination. The adapter may receive the unlock combination via any suitable input mechanism, such as a rotary switch, a button, a keyboard, an input file stored in a portable storage device (e.g., an SC card, a USB device), etc. The unlock combination may be a unique number combination (e.g., 6666) or a unique sequence of number combinations (e.g., first 4444, second 5555). In some embodiments, the unlock combination may include any suitable digits according to the corresponding input mechanism (e.g., by Figure 2 A three-digit combination is entered via the rotary switch shown, a four-digit combination is entered via the input button. In some embodiments, the unlock combination can be associated with a duration that indicates the duration before the adapter can receive the next combination.

[0034] At operation 404, the adapter determines whether the input unlock combination is correct by comparing the received unlock combination with a set of predefined combinations. Each predefined combination corresponds to an operation instruction (e.g., lock, unlock, reset, set IP, etc.). When it is determined that the received unlock combination matches the predefined unlock combination, at operation 408, the adapter receives the unlock instruction and expects to receive the unlock key. When it is determined that the received unlock combination does not match the predefined unlock combination, at operation 406, the adapter does not receive the unlock instruction and stops the unlock process, so that the adapter remains locked.

[0035] At operation 410, the adapter receives the unlock key as expected. The unlock key is a unique combination of numbers (e.g., 4888). In some embodiments, the unlock key can be a sequence of combinations of numbers (e.g., 4888, 3888). In some embodiments, the unlock key can be associated with a duration that indicates the duration before the adapter can receive the next combination. The adapter can receive the unlock combination via any suitable input mechanism, such as a rotary switch, a button, a keyboard, an input file stored in a portable storage device (e.g., an SC card, a USB device), etc. In some embodiments, the unlock key is different from the unlock combination.

[0036] At operation 412, the adapter determines whether the received unlock key is correct by comparing it to a predefined unlock key. The predefined unlock key is assigned to the adapter by the I / O system. In some embodiments, the predefined unlock key may be provided by a system administrator. In some other embodiments, the predefined unlock key may be generated by the I / O system. If the unlock key is determined to be correct, the adapter is unlocked at operation 414. If the unlock key is determined to be incorrect, the adapter stops the unlocking process and remains locked.

[0037] At operation 416, when the adapter is unlocked, the adapter exits protected mode. In protected mode, the adapter prohibits one or more predefined actions to prevent unauthorized interaction with the I / O system. The prohibited predefined actions include any actions that may cause security issues, such as changing certain settings of the adapter through a network connection, replacing one or more I / O devices connected to the adapter, installing unauthorized I / O devices on the I / O system, etc. When exiting protected mode, the adapter allows the prohibited predefined actions. For example, when the adapter exits protected mode, an authorized user can change any settings of the adapter through a network connection. When the adapter is unlocked, the user can replace one or more I / O devices. At operation 418, when the adapter is unlocked, the adapter also suspends the validity check of the connected I / O devices.

[0038] The present disclosure has been described above with reference to the accompanying drawings. These drawings illustrate certain details of specific embodiments of the systems and methods and programs for implementing the present disclosure. However, the use of the drawings to describe the present disclosure should not be construed as imposing any limitations on the present disclosure as presented in the drawings. No element described herein should be construed as a "means-plus-function" element unless the element is explicitly stated using the phrase "means for...". Furthermore, no element, component, or method step in the present disclosure is intended to be dedicated to the public, regardless of whether the element, component, or method step is explicitly stated in the claims.

[0039] When introducing elements or features of the present disclosure and exemplary embodiments, the articles "a," "an," "the," and "said" are intended to mean that there are one or more such elements or features. The terms "comprising," "including," and "having" are intended to be inclusive and mean that there may be additional elements or features in addition to the elements or features specifically noted. It should also be understood that the method steps, processes, and operations described herein should not be interpreted as necessarily requiring them to be performed in the particular order discussed or shown, unless that order is specifically identified as an execution order. It should also be understood that additional steps or alternative steps may be employed.

[0040] References to "controller," "industrial controller," and "computer" should be understood to include any general purpose computing device suitable for the functions described, including workstations, industrial controllers, personal or desktop computers, servers, clouds, computers, etc., operating locally or remotely with respect to other elements of the invention.

[0041] References to "one or more processors" should be understood to include one or more processors that can communicate in an independent and / or distributed environment and, therefore, can be configured to communicate with other processors via wired or wireless communications, wherein such one or more processors can be configured to operate one or more processor-controlled devices, which can be similar or different devices. In addition, unless otherwise specified, references to memory can include one or more processor-readable and accessible memory elements and / or components, which can be internal to the processor-controlled device, external to the processor-controlled device, and accessible via a wired or wireless network.

[0042] It should be noted that although the flowchart provided herein shows a specific order of method steps, it should be understood that the order of these steps may be different from the order depicted. In addition, two or more steps may be performed simultaneously or partially simultaneously. Such variations will depend on the selected software and hardware systems and on the designer's choice. It should be understood that all such variations are within the scope of this disclosure.

[0043] While the above written description of the methods and systems enables one of ordinary skill to make and use what is presently believed to be the best mode thereof, one of ordinary skill will understand and appreciate that variations, combinations, and equivalents of the specific embodiments, methods, and examples herein exist. Accordingly, the methods and systems should not be limited to the above-described embodiments, methods, and examples, but rather to all embodiments and methods within the scope and spirit of the present disclosure.

Claims

1. A network adapter in an industrial input / output (I / O) system, comprising: one or more processors, the one or more processors configured to: receiving a first combination; determining whether the first combination matches a predefined locking combination; upon determining that the first combination matches the predefined locking combination, starting a locking process; receiving a second combination; determining whether the second combination matches a predefined lock key; as well as upon determining that the second combination matches the predefined lock key, locking the network adapter to inhibit one or more predefined actions of making changes to settings of the network adapter via a network connection, wherein, when locked, the network adapter enters a protection mode, and When the network adapter enters the protection mode, the network adapter registers the identities of one or more I / O devices connected to the network adapter and prohibits communication with unregistered I / O devices.

2. The network adapter according to claim 1, further comprising a user interface configured to receive the first combination and the second combination from a user, wherein The first combination includes one or more number combinations.

3. The network adapter according to claim 2, wherein: The user interface is configured to receive an IP setting combination to start an IP setting process and receive an IP address input from the user. The network adapter according to claim 1 , wherein: The one or more predefined actions include one or more of: changing network configuration settings, changing IP settings, updating firmware version, disabling or re-enabling external product ports, performing a remote adapter reset, disabling or enabling a WWW server, and disabling or enabling an SNMP server.

5. The network adapter according to claim 1, wherein: The one or more processors are configured to periodically check the validity of each I / O device connected to the network adapter at runtime when the network adapter enters the protection mode. The network adapter according to claim 5 , wherein: The one or more processors are configured to check the validity of each I / O device connected to the network adapter by comparing an identity of each I / O device to a registered identity.

7. The network adapter according to claim 6, wherein: The one or more processors are configured to send a notification to a controller of the industrial I / O system if the identity of the I / O device does not match any registered identities.

8. A network adapter in an industrial input / output (I / O) system, comprising: one or more processors, the one or more processors configured to: registering the identities of one or more I / O devices connected to the network adapter and disabling communication with unregistered I / O devices, wherein the network adapter is locked and has entered a protected mode; receiving a first combination; determining whether the first combination matches a predefined unlock combination; When it is determined that the first combination matches the predefined unlocking combination, starting an unlocking process; receiving a second combination; determining whether the second combination matches a predefined unlocking key; and upon determining that the second combination matches the predefined unlock key, one or more predefined actions of unlocking the network adapter to allow changes to settings of the network adapter to be made through a network connection, When unlocked, the network adapter exits the protection mode.

9. The network adapter according to claim 8, further comprising a user interface configured to receive the first combination and the second combination from a user, wherein The first combination includes one or more number combinations.

10. The network adapter according to claim 8, wherein The one or more predefined actions are disabled in the protection mode.

11. The network adapter according to claim 10, wherein: The one or more predefined actions include one or more of: changing network configuration settings, changing IP settings, updating firmware version, disabling or re-enabling external product ports, performing a remote adapter reset, disabling or enabling a WWW server, and disabling or enabling an SNMP server.

12. The network adapter according to claim 8, wherein: The one or more processors allow replacement of the one or more I / O devices after the network adapter exits the protection mode.

13. The network adapter according to claim 12, wherein: After the network adapter exits the protection mode, the one or more processors are configured to suspend checking the validity of each I / O device connected to the network adapter.

14. A method for locking / unlocking a network adapter of an industrial I / O system, comprising: receiving, at the network adapter, a first combination; determining, by the network adapter, whether the first combination matches a predefined lock / unlock combination; upon determining that the first combination matches the predefined lock / unlock combination, initiating a lock / unlock process via the network adapter; receiving a second combination at the network adapter; determining, by the network adapter, whether the second combination matches a predefined lock / unlock key; upon determining that the second combination matches the predefined lock / unlock key, locking / unlocking the network adapter, wherein when the network adapter is locked, the network adapter prohibits one or more predefined actions of changing settings of the network adapter via a network connection, When locked, entering a protection mode via the network adapter; as well as After entering the protection mode, identities of one or more I / O devices connected to the network adapter are registered through the network adapter, and communication with unregistered I / O devices is prohibited through the network adapter.

15. The method according to claim 14, further comprising: When unlocked, the protection mode is exited through the network adapter.

16. The method according to claim 15, further comprising: After entering the protection mode, the validity of each I / O device is checked by the network adapter at runtime.

Images