公开(公告)号：US20040162996A1

公开(公告)日：2004-08-19

申请号：US10615513

申请日：2003-07-08

Applicant: Nortel Networks Limited

Inventor： R. Bruce Wallace ,  Thomas P. Chmara ,  Siva Subramanian

IPC: H04L009/00

CPC classification number: H04L63/104 ,  H04L67/12

Abstract: Distributed security for industrial networks is achieved through the implementation of Security Policy Implementation Points (SPIPs) on the network to apply security policy in a distributed fashion to prevent network users from taking action in particular areas of the network. The SPIP integrates with network services to perform authentication and authorization services on behalf of particular factory machines, groups of factory machines, and other industrial network resources. The SPIP also maintains a local access policy to enable emergency access to the factory machines as well as enable local access to attendant programmable logic controllers. The SPIP also includes audit functionality to enable the SPIP to record local accesses and network accesses to maintain a log of users and network devices that have interfaced with the SPIP. The SPIP may also support VPNs, encryption, compression, and numerous other functions to engage in communications on the network.

Abstract translation: 通过在网络上实施安全策略实施点（SPIP）来实现工业网络的分布式安全，以分布式方式应用安全策略，以防止网络用户在网络的特定区域采取行动。 SPIP与网络服务集成，代表特定工厂机器，工厂机组和其他工业网络资源执行认证和授权服务。 SPIP还维护本地访问策略，以便能够紧急访问工厂机器，并使本地可访问话务员可编程逻辑控制器。 SPIP还包括审计功能，使SPIP能够记录本地访问和网络访问，以维护与SPIP接口的用户和网络设备的日志。 SPIP还可以支持VPN，加密，压缩和许多其他功能，以便在网络上进行通信。