A cryptographic credential based access control mechanism for industrial control system

There involves a large number of relatively closed and limited computing power industrial components in different Industrial Control System (ICS), such as Programmable Logic Controller (PLC), and Radio Frequency Identification (RFID), etc. These units are used in specific industrial environments, and are specifically need security features, such as secure communication, access control, authorization and audit. More smart solutions are needed to support security in ICS. In this article we describe the design of an cryptographic credential based access control mechanism for ICS and this will separate simple authorization functions with complicated and flexible identity identification and authentication, respectively, in terminal equipment and a dedicated access control server implementation; then use access control info from access control server to end equipment securely to prevent the transmission of the access control decision is counterfeiting and tampering; finally, the authorized components in end equipment will use the access control info for final implementation.