Patent ID: 8789182
Filing Date: 2014-07-22
Classification: H04L,Y04S

Abstract:
1. A method of handling security events in a Process Control (PC) system which includes a communication network interconnecting devices of the PC system, the method comprising: transmitting, on the communication network, by first and second devices of the PC system, security event messages including security event information according to a first protocol and a second protocol, respectively, the first protocol being one of an International Electrotechnical Committee (IEC) 61850-7-4 protocol and a Syslog protocol, and the second protocol being the other one of the IEC 61850-7-4 protocol and the Syslog protocol; receiving a first security event message according to the first protocol, and extracting security event information from the first security event message; and mapping the extracted security event information to the second protocol, wherein the first protocol is the IEC 61850-7-4 protocol and the second protocol is the Syslog protocol, and wherein the method comprises: by a gateway device connected to the communication network, converting the extracted security event information into a Syslog message; providing the Syslog message to a Syslog archive; by the gateway device, based on a security event severity indication of the first message indicating an alarm, converting the extracted security event information into an Network Control Center (NCC) message according to an NCC protocol; and providing the NCC message to an NCC of the electrical power system.