Jump Host Authentication for Industrial Control Commands

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

There is a need for improved methods and systems to efficiently authenticate and authorize remote control commands for industrial assets and machines, particularly in distributed environments where real-time responsiveness is critical and security is paramount.

Innovation Solution

The implementation of an authentication system that uses a jump host as a secure administrative interface between a cloud network and local industrial machine controllers, with a whitelisted list of approved control commands and unique syntax string identifiers, along with an optional cloud application for additional authentication layers, ensures only authorized commands are executed, preventing unauthorized access and ensuring secure operation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If remote control commands are implemented in distributed industrial environments, then real-time responsiveness and operational flexibility are improved, but security risks and authentication complexity increase

Engineering Contradiction:
Improvereal-time responsivenessVSAvoidsecurity
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent implements a jump host as an intermediary system between remote command sources and industrial controllers. The jump host receives control commands from various remote sources, authenticates them against a whitelist of approved commands, and only forwards authenticated commands to the target controllers. This intermediary architecture enables real-time remote operation while maintaining security through centralized authentication and command filtering.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If authentication mechanisms are added to verify remote control commands, then security is improved, but system complexity and processing overhead increase

Engineering Contradiction:
ImprovesecurityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system performs preliminary authentication of control commands before they reach the industrial controllers. The jump host maintains a whitelist of pre-approved commands with unique syntax string identifiers, and automatically validates incoming commands against this whitelist. This preliminary action approach simplifies the overall system architecture by centralizing authentication logic in the jump host, preventing the need for complex authentication mechanisms at each controller location.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If a whitelist of approved commands is implemented, then unauthorized access is prevented, but command flexibility and adaptability are reduced

Engineering Contradiction:
Improveaccess controlVSAvoidcommand flexibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The whitelist of approved commands in the jump host is designed to be dynamically updateable. Administrators can add, remove, or modify commands in the whitelist based on changing operational requirements. Each command in the whitelist has a unique syntax string identifier that enables precise matching and validation. This dynamic capability allows the system to maintain strict access control while adapting to new operational scenarios without requiring system redesign.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentEP3506594B1Command authentication related to the control of industrial systems
Publication Date: 2020.11.25 GENERAL ELECTRIC CO
  • EP3506594B1 patent drawingFigure 1
  • EP3506594B1 patent drawingFigure 2
  • EP3506594B1 patent drawingFigure 3

AI summary

A method for controlling an operation of an industrial machine that includes authenticating control commands remotely issued by command issuers through a network. The control commands each describe a modifying action to the operation of the industrial machine. The method includes: providing a jump host as a communication buffer between a unit controller of the industrial machine and the network; maintaining within a memory of the jump host whitelisted commands, the whitelisted commands including a list of the approved control commands; receiving, at the jump host, a first control command via the network; determining, at the jump host, whether the first control command is contained within the whitelisted commands; in response to an affirmative determination that the first control command is contained within the whitelisted commands, deeming the first control command as being authenticated; and transmitting the first control command to the unit controller of the industrial machine.