1. A method of securing an industrial control system, comprising:
operating the industrial control system in an open mode, wherein communications between a plurality of devices of the industrial control system are unencrypted when the industrial control system is in the open mode;
exchanging security tokens between the plurality of devices of the industrial control system; and
ceasing operating the industrial control system in the open mode and instead operating the industrial control system in a secure mode, wherein the communications between the plurality of devices of the industrial control system are encrypted using the security tokens when the industrial control system is operating in the secure mode.
2. The method of claim 1, comprising the plurality of devices acquiring respective security tokens from a security server of the industrial control system.
3. The method of claim 2, wherein acquiring respective security tokens comprises the plurality of devices acquiring respective certificates from a certificate authority (CA) hosted by the security server.
4. The method of claim 1, wherein the plurality of devices comprises a human machine interface (HMI) system, a manufacturing execution system (MES), a supervisor control and data acquisition (SCADA) system, or a distributed control system (DCS), or a combination thereof.
5. The method of claim 1, wherein the plurality of devices includes a device hosting an industrial control system configuration application.
6. The method of claim 1, wherein the plurality of devices includes an industrial controller.
7. The method of claim 1, wherein the plurality of devices includes a field device configured to perform at least one measurement of the operation of a monitored system.
8. The method of claim 7, wherein the monitored system comprises a gas turbine system, an automated manufacturing system, a petroleum refinery system, a chemical production system, a gasification system, an automated power generation system, a power plant, a steam turbine system, or a wind turbine system, or a combination thereof.
9. A method of securing an industrial control system, comprising:
transmitting unencrypted data between a first device and a second device of an industrial control system;
generating a first security token and a second security token for the first and second devices, respectively, using at least one processor of the industrial control system;
exchanging the first and second security tokens between the first and second devices of the industrial control system; and
ceasing transmitting unencrypted data between the first and second devices, and subsequently only transmitting encrypted data between the first and second devices, wherein the encrypted data is encrypted based on the first and second security tokens.
10. The method of claim 9, wherein the security tokens comprise certificates including at least one key.
11. The method of claim 10, comprising generating the encrypted data based on the at least one key of the first and second security tokens.
12. The method of claim 9, wherein exchanging the first and second security tokens between the first and second devices comprises:
the first device verifying an identity of the second device using the second security token; and
the second device verifying an identity of the first device using the first security token.
13. The method of claim 9, wherein the first device comprises a human machine interface (HMI) system and the second device comprises an industrial controller.
14. The method of claim 9, wherein the first device comprises a device hosting an industrial control system configuration application and the second device comprises an industrial controller.
15. The method of claim 9, wherein the first device comprises a field device and the second device comprises an industrial controller.
16. The method of claim 9, wherein transmitting the encrypted data between the first and second devices comprises establishing a secure socket layer (SSL) connection between the first and second devices and using the SSL connection to transmit the encrypted data between the first and second devices.
17. A system, comprising:
an industrial control network comprising a plurality of devices that includes an industrial controller, wherein the plurality of devices is configured to:
exchange respective security tokens between the plurality of devices over the industrial control network;
cease exchanging unencrypted data over the industrial control network; and
exchange encrypted data over the industrial control network, wherein the encrypted data is generated based on the respective security tokens.
18. The system of claim 17, wherein the plurality of devices includes a device hosting an industrial control system configuration application.
19. The system of claim 17, wherein the plurality of devices includes a human machine interface (HMI) system, manufacturing execution system (MES), a supervisor control and data acquisition (SCADA) system, or a distributed control system (DCS), or a combination thereof.
20. The system of claim 17, wherein the plurality of devices comprises a security server configured to generate the respective security tokens for the plurality of devices.
21. The system of claim 20, wherein the security server comprises a certificate authority (CA) configured to generate respective certificates for the plurality of devices as the respective security tokens of the plurality of devices.
22. The system of claim 17, wherein the plurality of devices is configured to perform mutual authentication using the respective security tokens of the plurality of devices.
23. The system of claim 17, wherein the plurality of devices is configured to use the respective security tokens to establish at least one secure socket layer (SSL) connection over the industrial control network.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A dispensing machine for dispensing items to customers, the dispensing machine comprising:
a cabinet having at least one window;
a plurality of supports for supporting a plurality of different items to be dispensed to customers;
a pointing device operable to select a desired item from the plurality of items;
an indicator associated with the pointing device and operable to provide an indication, visible through the window, of which item is being selected by the pointing device without dispensing said selected item; and
a dispensing mechanism operable to dispense the selected item in response to a dispensing instruction.
2. The dispensing machine of claim 1 further comprising a control system operably connected to the pointing device and the indicator, wherein the control system, in response to a signal from the pointing device, controls the indicator to provide an indication, visible through the window, of which item is being selected by the pointing device.
3. The dispensing machine of claim 1, wherein the pointing device is selected from the group consisting of a roller ball, a touch pad, a touch sensitive transparent window, a joystick, or a pointing stick.
4. The dispensing machine of claim 3, wherein the pointing device comprises a roller ball to control selection of the items.
5. The dispensing machine of claim 3, wherein the pointing device comprises a touch pad.
6. The dispensing machine of claim 1, further comprising an illuminator to illuminate the item being selected by the pointing device.
7. The dispensing machine of claim 6, wherein the illuminator comprises a downward facing light to illuminate the selected item from above.
8. The dispensing machine of claim 6, wherein the illuminator comprises a forward facing light adjacent to the selected item.
9. The dispensing machine of claim 7 and 8, wherein the light comprises a LED.
10. The dispensing machine of claim 1, further comprising a display for displaying information relating to the selected item or instructions for operating the machine to the customers.
11. The dispensing machine of claim 1, wherein the dispensing mechanism comprises a plurality of dispensing spirals.
12. A method for operating a dispensing machine for dispensing items to customers, the method comprising the steps of:
using a pointing device for selecting a desired item, the selection comprising moving an indicator, wherein the indicator is operable to provide an indication, visible to customers through at least one window of the dispensing machine, to show which item is being selected by the pointing device without dispensing said selected item; and
dispensing a selected item in response to a dispensing instruction.
13. The method of claim 12 further comprising browsing items through control of the pointing device.
14. The method of claim 12, wherein the indicator provides an indication visible to customers by locally illuminating the selected item.
15. The method of claim 12, further comprising displaying information relating to the items or instructions for operating the machine to the customers.