	US 12,228,897 B2
	Securing access of a process control or automation system
Brian Lamothe, Round Rock, TX (US); Narayanan Doraiswamy, Round Rock, TX (US); Mark J. Nixon, Thorndale, TX (US); Aaron C. Jones, Austin, TX (US); Antonio Ubach, Round Rock, TX (US); Sean Hernandez, Round Rock, TX (US); Sireesha Dakoju, Round Rock, TX (US); Krishna Joshi, Round Rock, TX (US); and Matthew Villarrubia, Round Rock, TX (US)
Assigned to FISHER-ROSEMOUNT SYSTEMS, INC., Round Rock, TX (US)
Filed by FISHER-ROSEMOUNT SYSTEMS, INC., Round Rock, TX (US)
Filed on Jul. 18, 2023, as Appl. No. 18/223,395.
Claims priority of provisional application 63/418,006, filed on Oct. 20, 2022.
Claims priority of provisional application 63/417,861, filed on Oct. 20, 2022.
Claims priority of provisional application 63/398,441, filed on Aug. 16, 2022.
Claims priority of provisional application 63/390,238, filed on Jul. 18, 2022.
Prior Publication US 2024/0028011 A1, Jan. 25, 2024
Int. Cl. G06F 15/173 (2006.01); G05B 15/02 (2006.01); G05B 19/414 (2006.01); G05B 19/418 (2006.01); H04L 9/40 (2022.01)

CPC G05B 15/02 (2013.01) [G05B 19/4142 (2013.01); G05B 19/41835 (2013.01); G05B 19/4184 (2013.01); G05B 19/4185 (2013.01); G05B 19/41865 (2013.01); G05B 19/41885 (2013.01); H04L 63/0272 (2013.01); H04L 63/0428 (2013.01); H04L 63/08 (2013.01); G05B 2219/31368 (2013.01); G05B 2219/34447 (2013.01)]

20 Claims

1. A method performed by a process control or automation system, the method comprising:

first authenticating and/or authorizing, by the process control or automation system, an identity of an instantiated micro-encapsulated execution environment (MEEE) to communicate with a physical device that performs a physical function utilized in control of an industrial or automation process provided by an enterprise, the instantiated MEEE and the physical device associated with a control loop that has a unique identity within the process control or automation system;

second authenticating and/or authorizing, by the process control or automation system, an identity corresponding to the physical device to communicate with the instantiated MEEE; and

when both the identity corresponding to the physical device and the identity of the instantiated MEEE are authenticated and/or authorized, granting permission for the instantiated MEEE and the physical device to communicatively connect to thereby deliver information between the instantiated MEEE and the physical device for controlling at least a portion of the industrial or automation process via the control loop.