Patent ID: 9729507
Date: 2017-08-08
CPC Classifications: G05B,G06Q,H04L

Claim:
1. A cyber-security device for providing secure communication of automation and control data between a first network and a second network in a system operable in one or more system states, the cyber-security device comprising: a first network interface configured to accept messages destined for a supervisor control and data acquisition (SCADA) device or an automation and control device in the second network and transmitting qualified and validated messages to the first network; a second network interface configured to accept messages destined for the first network and transmitting qualified and validated messages to the second network; a memory configured to store current system state information and a programmable rule-set comprising rules for qualifying and validating messages on a byte-by-byte basis, wherein at least one of the rules is a system state-dependent rule; a processor operatively coupled to the memory and to the first network interface and the second network interface, and configured to qualify and validate messages from the first network interface and the second network interface on a byte-by-byte basis; and a physical switch operable to initiate a programming mode of the processor, wherein the processor is operable to replace the programmable rule-set with a new rule-set from the memory only when in the programming mode, and to cycle back to an operational mode after the new rule-set is loaded from the memory; wherein the processor is operable in the operational mode to: