Policy-based secure communication with automatic key management for industrial control and automation systems

摘要

A method includes generating (308) at least one access vector (232) associated with a specified device (202, 204) in an industrial process control and automation system (100). The specified device has one of multiple device roles. The at least one access vector is generated based on one or more communication policies defining communications between one or more pairs of devices roles in the industrial process control and automation system, where each pair of device roles includes the device role of the specified device. The method also includes providing (312) the at least one access vector to at least one of the specified device and one or more other devices in the industrial process control and automation system in order to control communications to or from the specified device.