Signed Action Authentication Path for Industrial Control Commands
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Industrial control systems are vulnerable to unauthorized access, malware, and spyware due to the lack of secure authentication mechanisms for action requests, which can lead to malicious or unintended changes in control parameters and data access.
Innovation Solution
Implementing a secure authentication path that requires action requests to be signed by an action authenticator, verified by the communications/control module, and only executed when authenticity is confirmed, thereby preventing unauthorized actions and protecting the system from malware and spyware.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional industrial control systems operate without authentication mechanisms, then system operation is simple and fast, but the system becomes vulnerable to unauthorized access, malware, and spyware
Solution Approach 1:
The patent implements preliminary authentication by requiring action requests to be signed with cryptographic credentials before execution. The authentication path verifies the signature and originator identity before allowing the control module to execute the requested action, preventing unauthorized access and malware execution in advance
Solution Approach 2:
The patent introduces an authentication path as an intermediary component between the action originator and the control module. This intermediary verifies cryptographic signatures and validates the authenticity of action requests, adding security without requiring direct complex interactions between the originator and control module
2Reliability
If action requests are authenticated through cryptographic verification, then unauthorized access is prevented, but processing time and system complexity increase
Solution Approach 1:
Cryptographic signing is performed preliminarily by the action originator before submitting the request to the control module. This shifts the computational burden of cryptographic operations to the request creation stage, allowing the verification stage at the control module to be more efficient and faster
Solution Approach 2:
The patent uses cryptographic signatures as a copy of the originator's identity and authorization credentials. Instead of requiring the originator to be physically present or continuously authenticated, the signature copy validates the request's authenticity, reducing real-time processing overhead
Data Source
AI summary
Operator actions and/or other commands or requests are secured via an authentication path from an action originator to a communications/control module or any other industrial element/controller. In implementations, an industrial control system includes an action authenticator configured to sign an action request generated by the action originator. The destination communications/control module or any other industrial element/controller is configured to receive the signed action request, verify the authenticity of the signed action request, and perform a requested action when the authenticity of the signed action request is verified.