The present invention relates to a system and methodology facilitating automation security in a networked-based industrial controller environment. Various components, systems and methodologies are provided to facilitate varying levels of automation security in accordance with security analysis tools, security validation tools and/or security learning systems. The security analysis tool receives abstract factory models or descriptions for input and generates an output that can include security guidelines, components, topologies, procedures, rules, policies, and the like for deployment in an automation security network. The validation tools are operative in the automation security network, wherein the tools perform security checking and/or auditing functions, for example, to determine if security components are in place and/or in suitable working order. The security learning system monitors/learns network traffic patterns during a learning phase, fires alarms or events based upon detected deviations from the learned patterns, and/or causes other automated actions to occur.

System and methodology providing automation security analysis, validation, and learning in an industrial controller environment

Automation security in a networked-based industrial controller environment is implemented. Various components, systems and methodologies are provided to facilitate varying levels of automation security in accordance with security analysis tools, security validation tools and/or security learning systems. The security analysis tool receives abstract factory models or descriptions for input and generates an output that can include security guidelines, components, topologies, procedures, rules, policies, and the like for deployment in an automation security network. The validation tools are operative in the automation security network, wherein the tools perform security checking and/or auditing functions, for example, to determine if security components are in place and/or in suitable working order. The security learning system monitors/learns network traffic patterns during a learning phase, fires alarms or events based upon detected deviations from the learned patterns, and/or causes other automated actions to occur.

System and methodology providing automation security analysis and network intrusion protection in an industrial environment

The subject invention provides reliable messaging with and within a control environment. The systems and methods utilize a message broker that facilitates message exchange. The message broker can be located within an industrial controller, as a dedicated entity within a control environment and/or an entity external to the control environment. Messages transmitted from an industrial controller and/or the external entity can be routed through the message broker prior to reaching a destination, wherein the message can be stored in the message broker and subsequently obtained by a recipient. The message broker decouples the message sender (e.g., an industrial controller, an external entity . . . ) from the message recipient (e.g., an industrial controller, an external entity . . . ) such that messages can be successfully transmitted (to the message broker) regardless of a state of the recipient, and messages can be retrieved (from the message broker) regardless of a state of the sender.

Reliable messaging instruction

A lane-level vehicle routing and navigation apparatus includes a simulation module that performs microsimulation of individual vehicles in a traffic stream, and a lane-level optimizer that evaluates conditions along the candidate paths from an origin to a destination as determined by the simulation module, and determines recommended lane-level maneuvers along the candidate paths. A link-level optimizer may determines the candidate paths based on link travel times determined by the simulation module. The simulation may be based on real-time traffic condition data. Recommended candidate paths may be provided to delivery or service or emergency response vehicles, or used for evacuation planning, or to route vehicles such as garbage or postal trucks, or snowplows. Corresponding methods also may be used for traffic planning and management, including determining, based on microsimulation, at least one of (a) altered road geometry, (b) altered traffic signal settings, such as traffic signal timing, or (c) road pricing.

Lane-level vehicle navigation for vehicle routing and traffic management

A National Online Parcel-Level Map Data Portal (NPDP) is provided that optimizes online delivery of parcel-level maps and linked attribute data. To do this, the NPDP manages a database of assembled and current vector based parcel data in a spatial format (GIS) that enables geocoded parcel boundaries to be linked to property tax records. A user enters a street address into an appropriate screen window to call up and view road right-of-ways, all parcel boundaries and the “exact” address location as a highlighted parcel area. In addition, a list of property record attributes such as owner, use code, assessed value and year constructed can be displayed. Other on screen parcels can likewise be selected if one wishes to view their linked attributes. Subscribers may customize the NPDP to perform a variety of spatial analysis/reporting functions. Under public/private alliances, agreements are negotiated with individual property assessor's offices whereby they receive a portion of NPDP service provider revenue in return for parcel map database updates. Such on-going commerce between data sponsors and the NPDP service provider is utilized to assure a sustained and expanding flow of increasingly competent content.

Computerized national online parcel-level map data portal

A network and system of electrical devices comprising a device-independent controller, a device-dependent controller, a console through which a user interfaces with the system, and a communication protocol for network-enabling the devices, and a method for such network-enablement are described. The integration of information content from a network, such as the Internet, with the network-enabling hardware and software of the present invention provides a flexible inexpensive way to enhance the overall utility and range of capabilities of a system of networked devices in a device-independent network application.

Eman Safadi

Papers

Method and apparatus for network-enablement of devices using device intelligence and network architecture