	US 12,081,651 B2
	One-time pad encryption for industrial wireless instruments
Philip George Hunt, Bedford, MA (US); and Mark V. Bertolina, Milton, MA (US)
Assigned to Schneider Electric Systems USA, Inc., Foxborough, MA (US)
Appl. No. 17/420,652
Filed by Schneider Electric Systems USA, Inc., Foxborough, MA (US)
PCT Filed Dec. 5, 2019, PCT No. PCT/US2019/064715 § 371(c)(1), (2) Date Jul. 2, 2021, PCT Pub. No. WO2020/118071, PCT Pub. Date Jun. 11, 2020.
Claims priority of provisional application 62/776,284, filed on Dec. 6, 2018.
Prior Publication US 2022/0103347 A1, Mar. 31, 2022
Int. Cl. H04L 9/06 (2006.01); G05B 19/042 (2006.01); G05B 23/02 (2006.01); G06F 8/65 (2018.01); G06T 19/00 (2011.01); H04L 9/40 (2022.01); H04W 4/38 (2018.01); H04W 12/03 (2021.01); G06F 21/60 (2013.01); H04L 9/12 (2006.01); H04L 9/14 (2006.01); H04L 9/16 (2006.01)

CPC H04L 9/0656 (2013.01) [G05B 19/0425 (2013.01); G05B 23/0283 (2013.01); G06F 8/65 (2013.01); G06T 19/006 (2013.01); H04L 63/107 (2013.01); H04W 4/38 (2018.02); H04W 12/03 (2021.01); G06F 21/60 (2013.01); G06F 21/602 (2013.01); H04L 9/12 (2013.01); H04L 9/14 (2013.01); H04L 9/16 (2013.01); H04L 2209/805 (2013.01)]

20 Claims

1. An industrial wireless instrument equipped with one-time pad (OTP) encryption, comprising:

a pad storage unit installed within the industrial wireless instrument and having a predefined plurality of one-time pads stored therein, wherein the pad storage unit is a solid-state memory device and the predefined plurality of one-time pads is stored in the solid-state memory device during manufacture of the industrial wireless instrument, the plurality of one-time pads including a sufficient number of one-time pads for the industrial wireless instrument to regularly and continuously encrypt data multiple times per day without replenishing the one-time pads over a lifetime of the industrial wireless instrument;

a one-time pad controller configured to communicate with the pad storage unit and further configured to retrieve a one-time pad from the pad storage unit for each plaintext data to be encrypted; and

an arithmetic unit configured to receive the plaintext data and the one-time pad from the one-time pad controller and further configured to encrypt the plaintext data using the one-time pad;

wherein the one-time pad controller is further configured to provide the one-time pad to the arithmetic unit only once for encryption.