Abstract: Technologies for performing secure session establishment in remote desktop infrastructure environments are disclosed. A remote desktop client application obtains client candidate network addresses using the Interactivity Connectivity Establishment (“ICE”) protocol and provides the client candidate network addresses to an instance of a remote desktop server application. The instance of the remote desktop server application obtains server candidate network addresses also using the ICE protocol and provides the server candidate network addresses to the remote desktop client application. The remote desktop client application and remote desktop server application evaluate the client network addresses and select a pair of network addresses for establishing a remote desktop networking session using the ICE protocol. The remote desktop client application and remote desktop server establish the network session using a remote desktop protocol over User Datagram Protocol (“UDP”).

Abstract: The techniques disclosed herein provide an enhanced single sign-on flow for secure computing resources, such as a virtual machine or hosted applications. In some configurations, the techniques process different types of security data, e.g., credentials, tokens, certificates, and reference objects at specific computing entities of a system to provide a single sign-on flow for providing access to secure computing resources from a client computing device. In one illustrative example, a select type of security data, such as a certificate, is generated from a token and a claim at a particular computing resource, such as an agent operating on a virtual machine. In another example, a signed version of the certificate can be stored and verified at the virtual machine. By generating certificates at such particular computing resources, the computing resource can verify a person's credentials using a secure single sign-on flow without requiring the person to provide credentials multiple times.

Abstract: A customization tool is described in association with a universal device type manager (DTM) utility. The customization tool includes a set of user interfaces and associated functionality that facilitates creating a set of customized templates for a particular device type. The customized templates define access to device data via graphical user interfaces supported by the universal DTM utility and/or universal BTM utility for instances of the device type.

Abstract: A customization tool is described in association with a universal device type manager (DTM) utility. The customization tool includes a set of user interfaces and associated functionality that facilitates creating a set of customized templates for a particular device type. The customized templates define access to device data via graphical user interfaces supported by the universal DTM utility and/or universal BTM utility for instances of the device type.

Abstract: A customization tool is described in association with a universal device type manager (DTM) utility. The customization tool includes a set of user interfaces and associated functionality that facilitates creating a set of customized templates for a particular device type. The customized templates define access to device data via graphical user interfaces supported by the universal DTM utility and/or universal BTM utility for instances of the device type.

Abstract: A universal device type manager (DTM) utility is described herein including a generalized architecture facilitating defining and generating user interfaces associated with a variety of field device types. The utility includes a device description data store interface that provides access to a device description store wherein standard device descriptions (DD files) for a variety of field device types are maintained. No specialized customization is done to the device descriptions by the device or tool vendors. A device type template store interface provides access to a set of device type manager definitions. A device type manager engine renders, on-demand, a device type manager user interface providing user access to parameters and other information for a field device type/instance based upon: (1) a device description and (2) a device type manager definition.

Abstract: A method and user interfaces are described herein installing a field device as a replacement for a previously installed field device of a same type in a process control system. The disclosed method includes initially specifying a device type commissioning definition that includes a set of device-type specific parameters. A first set of instance-specific configuration parameter values are then stored for a first field device. When replacing the first field device by a second field device of the same type on a process control network, the commissioning definition and the previously stored parameters for the first device are used to automatically configure the second device.

Abstract: The invention provides, in some aspects, a process, environmental, manufacturing, industrial or other such control system (hereinafter, “control system”) with enhanced, real-time change tracking. The system includes one or more configurable elements (e.g., field devices), a change tracking system that records of changes to those configurable elements (e.g., for compliance reporting, etc.) and a change detection system that responds to detected changes in configuration of those element(s) by inferring an identity of a person and/or device responsible for a change, the time of the change, and/or the reason for the change. This is unlike prior art systems, in which that such information must be specified, e.g., in a data entry form filled-in by the field engineer, operator or other who is making the change.

Abstract: A device management utility is described that includes a generalized graphical user interface facilitating access to a variety of resources associated with selected device types. In particular, the utility includes information interfaces communicatively linking the utility of a variety of data sources. In addition, the utility includes a graphical user interface display providing a variety of information associated with a selected device type. Such information includes device identification information, links to supplemental resources, and a set of screen selection controls for exposing multiple functional modes of operation of the device management utility.

Abstract: In one general aspect, methods and devices for use with multiple communications protocols automatically determine which communications protocol to use when connected to a system bus. Signals transmitted on the system bus are monitored to determine what communications protocol the system bus is using. After determining which communications protocol the system is using, a compatible communications protocol is selected from one of several communications protocols stored in a device's memory. As a result, a user may connect a device to the system bus without having to determine which communications protocol is used by the system bus. Furthermore, suppliers may stock a single type of device that is compatible with multiple communications protocols reducing overhead associated with stocking devices. In addition, a device may be switched between systems without regard to the communications protocol of the device or system.

Abstract: The invention provides, in some aspects, improved apparatus for configuring a control system. The apparatus includes a model made up of objects representing devices of such a system, including, at least one device that defines and/or controls communications on at least a portion of a network within that system. That device is referred to, here, as a “bus master” and the portion of the network is referred to as a “segment.” The object (or objects) representing the bus master can include information defining timings, port assignments and/or other aspects of the configuration of the segment. A download service transfers configuration information from objects in the model to devices in the control system. This includes transferring to the bus master communications configuration information for the segment. A download service according to this aspect of the invention generates—e.g., for logging by a change tracking system—indicia of the configuration information transferred to the bus master.

Abstract: The invention provides improved apparatus for configuring a control system that includes a model that is made up of one or more objects representing one or more devices in the system. The objects have parameters reflecting characteristics of the devices represented by the respective objects. At least one of those parameters is associated with a “track” attribute indicating whether at least selected configuration information transferred from that object to the respective device in the control system is to be logged to a change tracking system. A download service transfers configuration information from objects in the model to devices in the control system. Those downloads can go directly to the respective devices or can go indirectly, e.g., via other devices in the control system (such as controllers, field bus modules, and so forth).

Abstract: The invention provides, in some aspects, a process, environmental, manufacturing, industrial or other such control system (hereinafter, “control system”) with enhanced, real-time change tracking. The system includes one or more configurable elements (e.g., field devices), a change tracking system that records of changes to those configurable elements (e.g., for compliance reporting, etc.) and a change detection system that responds to detected changes in configuration of those element(s) by inferring an identity of a person and/or device responsible for a change, the time of the change, and/or the reason for the change. This is unlike prior art systems, in which that such information must be specified, e.g., in a data entry form filled-in by the field engineer, operator or other who is making the change.

Abstract: The invention provides, in some aspects, improved apparatus for configuring a control system. The apparatus includes a model made up of objects representing devices of such a system, including, at least one device that defines and/or controls communications on at least a portion of a network within that system. That device is referred to, here, as a “bus master” and the portion of the network is referred to as a “segment.” The object (or objects) representing the bus master can include information defining timings, port assignments and/or other aspects of the configuration of the segment. A download service transfers configuration information from objects in the model to devices in the control system. This includes transferring to the bus master communications configuration information for the segment. A download service according to this aspect of the invention generates—e.g., for logging by a change tracking system—indicia of the configuration information transferred to the bus master.

Abstract: The invention provides, in some aspects, improved apparatus for configuring a control system. The apparatus includes a model made up of objects representing devices of such a system, including, at least one device that defines and/or controls communications on at least a portion of a network within that system. That device is referred to, here, as a “bus master” and the portion of the network is referred to as a “segment.” The object (or objects) representing the bus master can include information defining timings, port assignments and/or other aspects of the configuration of the segment. A download service transfers configuration information from objects in the model to devices in the control system. This includes transferring to the bus master communications configuration information for the segment. A download service according to this aspect of the invention generates—e.g., for logging by a change tracking system—indicia of the configuration information transferred to the bus master.

Abstract: A method and apparatus to modify control devices residing on a Fieldbus communications network, without interrupting the operation of the control devices. The control device updating may further be controlled and monitored by a remotely located host that also communicates on the Fieldbus network. The control device may comprise at least two distinct memory areas, wherein at least one memory area must be active, and at least one memory area must be inactive. Active memory areas provide the control device microprocessor operating system with executable instructions or data. The host downloads new executable instructions or data to inactive memory areas, with associated data entry points, during unscheduled communications periods wherein data input/output is not being performed between the control device and the host or another control device.

Abstract: In one general aspect, methods and devices for use with multiple communications protocols automatically determine which communications protocol to use when connected to a system bus. Signals transmitted on the system bus are monitored to determine what communications protocol the system bus is using. After determining which communications protocol the system is using, a compatible communications protocol is selected from one of several communications protocols stored in a device's memory. As a result, a user may connect a device to the system bus without having to determine which communications protocol is used by the system bus. Furthermore, suppliers may stock a single type of device that is compatible with multiple communications protocols reducing overhead associated with stocking devices. In addition, a device may be switched between systems without regard to the communications protocol of the device or system.

Abstract: In one general aspect, methods and devices for use with multiple communications protocols automatically determine which communications protocol to use when connected to a system bus. Signals transmitted on the system bus are monitored to determine what communications protocol the system bus is using. After determining which communications protocol the system is using, a compatible communications protocol is selected from one of several communications protocols stored in a device's memory. As a result, a user may connect a device to the system bus without having to determine which communications protocol is used by the system bus. Furthermore, suppliers may stock a single type of device that is compatible with multiple communications protocols reducing overhead associated with stocking devices. In addition, a device may be switched between systems without regard to the communications protocol of the device or system.

Abstract: A method and user interfaces are described herein installing a field device as a replacement for a previously installed field device of a same type in a process control system. The disclosed method includes initially specifying a device type commissioning definition that includes a set of device-type specific parameters. A first set of instance-specific configuration parameter values are then stored for a first field device. When replacing the first field device by a second field device of the same type on a process control network, the commissioning definition and the previously stored parameters for the first device are used to automatically configure the second device.

Abstract: A method and apparatus to modify control devices residing on a Fieldbus communications network, without interrupting the operation of the control devices. The control device updating may further be controlled and monitored by a remotely located host that also communicates on the Fieldbus network. The control device may comprise at least two distinct memory areas, wherein at least one memory area must be active, and at least one memory area must be inactive. Active memory areas provide the control device microprocessor operating system with executable instructions or data. The host downloads new executable instructions or data to inactive memory areas, with associated data entry points, during unscheduled communications periods wherein data input/output is not being performed between the control device and the host or another control device.