Detecting and deterring network attacks

    公开(公告)号:US10819727B2

    公开(公告)日:2020-10-27

    申请号:US16159925

    申请日:2018-10-15

    Abstract: The present disclosure pertains to detecting a network attack. In one embodiment, a first device may receive a high-precision time signal and may use the signal to associate a first time stamp with each of a plurality of data packets reflecting a time that each data packet is transmitted. A second device may receive the plurality of data packets from the first device via a data network. The second device may also receive the high-precision time signal and may use the signal to associate a second time stamp with each of the plurality of data packets reflecting a time that each data packet is received. A time of flight may be determined based on the first time stamp and the second time stamp. The second device may determine whether the time of flight for each of the first plurality of data packets is consistent with a valid time of flight.

    Systems and methods for time-synchronized communication

    公开(公告)号:US10298343B2

    公开(公告)日:2019-05-21

    申请号:US15448812

    申请日:2017-03-03

    Abstract: The present disclosure pertains to systems and methods for publishing time-synchronized information. In one embodiment, a system may include a time interface configured to receive a common time signal and a network interface configured to transmit a plurality of data packets using a network. A publishing subsystem may be configured to cause the system to publish at least one data value according to a schedule and the common time signal. A processing sequence number subsystem may be configured to generate a processing sequence number to be included in the plurality of data packets and to reset the processing sequence number at a fixed interval based on the common time signal. A data packet subsystem may be configured to generate a plurality of data packets comprising a respective processing sequence number and the at least one data value.

    AUTOMATION OF WATER FLOW IN NETWORKS
    13.
    发明申请

    公开(公告)号:US20180203472A1

    公开(公告)日:2018-07-19

    申请号:US15920037

    申请日:2018-03-13

    Abstract: Disclosed is a control system for a water network. The control system includes a plurality of remotely-located monitoring and or monitoring and automatic control stations each including an automation controller for local control and automation, and each in communication via a dual-ring communication topology for system or wide-area control. The dual-ring facilitates redundant peer-to-peer data exchange to provide upstream and downstream water flow and water quality information. Systems described herein may calculate flow differential based on water flow data from each of the monitoring stations, and control flow based on the calculated flow differential.

    Resilient Communication for an Electric Power Delivery System
    14.
    发明申请
    Resilient Communication for an Electric Power Delivery System 有权
    电力输送系统的弹性通信

    公开(公告)号:US20150311714A1

    公开(公告)日:2015-10-29

    申请号:US14265018

    申请日:2014-04-29

    Abstract: A system for resiliently monitoring an electric power delivery system may include a plurality of server intelligent electronic devices (IEDs) configured to monitor and/or control the electric power delivery system. Each server IED may be communicatively coupled to a client control system by a plurality of communication paths. If a communication path fails, communication may continue along another path. In an embodiment, the client control system may include dual primary client controllers that continually request information from the server IEDs using multiple of the communication paths. The client controllers may request information from each other if the information is not received from the server IEDs, for example, due to a communication failure. In an embodiment, the client control system and server IEDs may be communicatively coupled in a loop topology, and each direction around the loop may be a distinct communication path.

    Abstract translation: 用于弹性监测电力输送系统的系统可以包括被配置为监测和/或控制电力输送系统的多个服务器智能电子设备(IED)。 每个服务器IED可以通过多个通信路径通信地耦合到客户端控制系统。 如果通信路径发生故障,则通信可能沿另一路径继续。 在一个实施例中,客户端控制系统可以包括使用多个通信路径从服务器IED连续请求信息的双主要客户端控制器。 如果没有从服务器IED接收到信息,例如由于通信故障,则客户端控制器可以彼此请求信息。 在一个实施例中,客户机控制系统和服务器IED可以通信地耦合在环路拓扑中,并且环路周围的每个方向可以是不同的通信路径。

    Transmission of data over a low-bandwidth communication channel
    15.
    发明授权
    Transmission of data over a low-bandwidth communication channel 有权
    通过低带宽通信信道传输数据

    公开(公告)号:US09065763B2

    公开(公告)日:2015-06-23

    申请号:US13838437

    申请日:2013-03-15

    Abstract: Disclosed herein are various systems and methods that may improve the transmission of data over low-bandwidth communication channels in an electric power delivery system. Devices communicating across a low-bandwidth communication channel may implement several approaches, according to various embodiments disclosed herein, to reduce the data transmitted across the low-bandwidth communication channel and to prioritize the transmission of time-sensitive and/or more important information with respect to other data. Various embodiments disclosed herein may inspect packets to be transmitted across a low-bandwidth communication channel in order to identify high priority data. High priority data may be time-sensitive information, and accordingly, transmission of such data may be prioritized over other data in order to reduce transmission latency of the higher priority data.

    Abstract translation: 这里公开的各种系统和方法可以改善电力传送系统中的低带宽通信信道上的数据传输。 根据本文公开的各种实施例,在低带宽通信信道上通信的设备可以实现若干方法,以减少在低带宽通信信道上传输的数据,并且优先考虑传输时间敏感和/或更重要的信息, 到其他数据。 本文公开的各种实施例可以检查要在低带宽通信信道上传输的分组,以便识别高优先级数据。 高优先级数据可以是时间敏感信息,因此,这样的数据的传输可以优先于其他数据,以便减少较高优先级数据的传输等待时间。

    Transmission of Data Over a Low-Bandwidth Communication Channel
    16.
    发明申请
    Transmission of Data Over a Low-Bandwidth Communication Channel 有权
    通过低带宽通信信道传输数据

    公开(公告)号:US20140269736A1

    公开(公告)日:2014-09-18

    申请号:US13838437

    申请日:2013-03-15

    Abstract: Disclosed herein are various systems and methods that may improve the transmission of data over low-bandwidth communication channels in an electric power delivery system. Devices communicating across a low-bandwidth communication channel may implement several approaches, according to various embodiments disclosed herein, to reduce the data transmitted across the low-bandwidth communication channel and to prioritize the transmission of time-sensitive and/or more important information with respect to other data. Various embodiments disclosed herein may inspect packets to be transmitted across a low-bandwidth communication channel in order to identify high priority data. High priority data may be time-sensitive information, and accordingly, transmission of such data may be prioritized over other data in order to reduce transmission latency of the higher priority data.

    Abstract translation: 这里公开的各种系统和方法可以改善电力传送系统中的低带宽通信信道上的数据传输。 根据本文公开的各种实施例,在低带宽通信信道上通信的设备可以实现若干方法,以减少在低带宽通信信道上传输的数据,并且优先考虑传输时间敏感和/或更重要的信息, 到其他数据。 本文公开的各种实施例可以检查要在低带宽通信信道上传输的分组,以便识别高优先级数据。 高优先级数据可以是时间敏感信息,因此,这样的数据的传输可以优先于其他数据,以便减少较高优先级数据的传输等待时间。

    OFFLINE TEST MODE SDN VALIDATION
    18.
    发明公开

    公开(公告)号:US20230421453A1

    公开(公告)日:2023-12-28

    申请号:US17808192

    申请日:2022-06-22

    CPC classification number: H04L41/122 H04L63/1408 H04L43/50

    Abstract: Various examples of systems and methods are described herein in which multiple intelligent electronic devices (IEDs) are connected in a network. A software-defined network (SDN) controller may include a rule subsystem, a test mode subsystem, a packet inspection subsystem, and a validation subsystem. The rule subsystem may define a plurality of flow rules. A test mode subsystem may operate the SDN in a testing mode. A packet insertion subsystem may insert test packets within the SDN while the SDN is in the testing mode. The validation subsystem may validate or fail each flow rule depending on how the various test packets are handled.

Patent Agency Ranking