Patents by Inventor Sivaram Balasubramanian

Sivaram Balasubramanian has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Patent number: 10110561
    Abstract: An improved system for establishing rules in a firewall for an industrial network is disclosed. Rules are established at an application level, identifying, for example, actions to occur between two devices. The action may be, for example, read data table or get attribute, and each action may require multiple message packets to be transmitted between the two devices in order to complete. A network device executing the firewall is configured to receive message packets from a sending device and to inspect the message packets to determine which action the sending device is requesting to perform. If the action corresponds to a rule in the database, the network device manages communications between the two devices until all message packets have been transmitted. Thus, a single action, or application, may be defined in the rules database to permit multiple data packets to be communicated between the devices.
    Type: Grant
    Filed: November 26, 2014
    Date of Patent: October 23, 2018
    Assignee: Rockwell Automation Technologies, Inc.
    Inventors: Brian A. Batke, Sivaram Balasubramanian, Petr Ptacek, Taryl Jasper
  • Publication number: 20180248799
    Abstract: A method and system for interacting with data frames passing through a module connected to an industrial network is disclosed. Each module includes an aggregation unit located on the network interface above the physical layer. To transmit data, the aggregation unit reads a header from a dynamic data packet to determine if the module is a participant module for the packet. If so, the aggregation unit inserts data from the module into the data packet and transmits the packet to another module. To receive data, the aggregation unit reads a header from the data packet to determine whether the data. packet includes data for the module. If so, the aggregation unit reads the data and passes the data packet to another module. If the aggregation unit determines that a data packet is not intended for the module, the data packet is passed to another module with no further interaction.
    Type: Application
    Filed: April 30, 2018
    Publication date: August 30, 2018
    Inventors: Sivaram Balasubramanian, Jonathan D. Bradford, Anthony G. Gibart, Kenwood H. Hall, Kendal R. Harris, Raymond R. Husted, Edward C. Korsberg, Gregory A. Majcher, Scott A. Pierce, Gregg M. Sichner, Patrick D. Telljohann, Robert J. Kretschmann
  • Patent number: 9960997
    Abstract: A method and system for interacting with data frames passing through a module connected to an industrial network is disclosed. Each module includes an aggregation unit located on the network interface above the physical layer. To transmit data, the aggregation unit reads a header from a dynamic data packet to determine if the module is a participant module for the packet. If so, the aggregation unit inserts data from the module into the data packet and transmits the packet to another module. To receive data, the aggregation unit reads a header from the data packet to determine whether the data packet includes data for the module. If so, the aggregation unit reads the data and passes the data packet to another module. If the aggregation unit determines that a data packet is not intended for the module, the data packet is passed to another module with no further interaction.
    Type: Grant
    Filed: March 30, 2016
    Date of Patent: May 1, 2018
    Assignee: Rockwell Automation Technologies, Inc.
    Inventors: Sivaram Balasubramanian, Jonathan D. Bradford, Anthony G. Gibart, Kenwood H. Hall, Kendal R. Harris, Raymond R. Husted, Edward C. Korsberg, Gregory A. Majcher, Scott A. Pierce, Gregg M. Sichner, Patrick D. Telljohann, Robert J. Kretschmann
  • Patent number: 9674146
    Abstract: A high-speed security device for network connected industrial controls provides hybrid processing in tandem hardware and software security components. The software security component establishes state-less data identifying each packet that requires high-speed processing and loads a data table in the hardware component. The hardware component may then allow packets matching data of the data table to bypass the software component while passing other non-matching packets to the software component for more sophisticated state analysis.
    Type: Grant
    Filed: September 1, 2016
    Date of Patent: June 6, 2017
    Assignee: Rockwell Automation Technologies, Inc.
    Inventors: Brian A. Batke, Sivaram Balasubramanian
  • Publication number: 20160373410
    Abstract: A high-speed security device for network connected industrial controls provides hybrid processing in tandem hardware and software security components. The software security component establishes state-less data identifying each packet that requires high-speed processing and loads a data table in the hardware component. The hardware component may then allow packets matching data of the data table to bypass the software component while passing other non-matching packets to the software component for more sophisticated state analysis.
    Type: Application
    Filed: September 1, 2016
    Publication date: December 22, 2016
    Inventors: Brian A. Batke, Sivaram Balasubramanian
  • Publication number: 20160294692
    Abstract: A method and system for interacting with data frames passing through a module connected to an industrial network is disclosed. Each module includes an aggregation unit located on the network interface above the physical layer. To transmit data, the aggregation unit reads a header from a dynamic data packet to determine if the module is a participant module for the packet. If so, the aggregation unit inserts data from the module into the data packet and transmits the packet to another module. To receive data, the aggregation unit reads a header from the data packet to determine whether the data packet includes data for the module. If so, the aggregation unit reads the data and passes the data packet to another module. If the aggregation unit determines that a data packet is not intended for the module, the data packet is passed to another module with no further interaction.
    Type: Application
    Filed: March 30, 2016
    Publication date: October 6, 2016
    Inventors: Sivaram Balasubramanian, Jonathan D. Bradford, Anthony G. Gibart, Kenwood H. Hall, Kendal R. Harris, Raymond R. Husted, Edward C. Korsberg, Gregory A. Majcher, Scott A. Pierce, Gregg M. Sichner, Patrick D. Telljohann, Robert J. Kretschmann
  • Patent number: 9438562
    Abstract: A high-speed security device for network connected industrial controls provides hybrid processing in tandem hardware and software security components. The software security component establishes state-less data identifying each packet that requires high-speed processing and loads a data table in the hardware component. The hardware component may then allow packets matching data of the data table to bypass the software component while passing other non-matching packets to the software component for more sophisticated state analysis.
    Type: Grant
    Filed: October 1, 2013
    Date of Patent: September 6, 2016
    Assignee: Rockwell Automation Technologies, Inc.
    Inventors: Brian A. Batke, Sivaram Balasubramanian
  • Patent number: 9413552
    Abstract: Aspects of the present invention provide a ring supervisor operating as a server for maintaining and allocating addresses for devices in a ring topology. The ring supervisor may obtain an ordered list of devices in the ring by sending a data collection frame that passes through each device around the ring with each device appending its preconfigured address information. The ring supervisor may then operate to apply the addressing provided by each device, or alternatively, allocate different addresses to each device from a separate pool. As a result, control program software for ring devices can be developed using a general pool of addresses without requiring specific knowledge of actual addresses. Also, if a device requires replacement, the device may be replaced without requiring modification to the control program to provide the address for the replacement device.
    Type: Grant
    Filed: July 30, 2014
    Date of Patent: August 9, 2016
    Assignee: Rockwell Automation Technologies, Inc.
    Inventors: Jessica E. Forguites, Sivaram Balasubramanian, Mark G. Devonshire, Mark R. Hantel
  • Patent number: 9374387
    Abstract: Aspects of the present invention provide a device, method and system which utilize hardware-based granular evaluation of industrial control protocol packets to withstand traffic storms. In an embodiment, packet evaluation circuitry coupled to a port may be adapted to evaluate one or more protocol fields contained in each inbound packet before switching circuitry can send the inbound packet to the proper destination. The inbound packet may be sent by the switching circuitry if it is a particular message, or may be selectively inhibited from being sent by the switching circuitry if the inbound packet does not contain the particular message for being sent and if the total number of bytes of the inbound packet type exceeds a threshold for the outbound port during a given period of time. As such, critical industrial applications may continue to operate in the presence of a traffic storm.
    Type: Grant
    Filed: October 12, 2012
    Date of Patent: June 21, 2016
    Assignee: Rockwell Automation Technologies, Inc.
    Inventors: Brian A. Batke, Sivaram Balasubramanian
  • Publication number: 20160149861
    Abstract: An improved system for establishing rules in a firewall for an industrial network is disclosed. Rules are established at an application level, identifying, for example, actions to occur between two devices. The action may be, for example, read data table or get attribute, and each action may require multiple message packets to be transmitted between the two devices in order to complete. A network device executing the firewall is configured to receive message packets from a sending device and to inspect the message packets to determine which action the sending device is requesting to perform. If the action corresponds to a rule in the database, the network device manages communications between the two devices until all message packets have been transmitted. Thus, a single action, or application, may be defined in the rules database to permit multiple data packets to be communicated between the devices.
    Type: Application
    Filed: November 26, 2014
    Publication date: May 26, 2016
    Inventors: Brian A. Batke, Sivaram Balasubramanian, Petr Ptacek, Taryl Jasper
  • Publication number: 20160036602
    Abstract: Aspects of the present invention provide a ring supervisor operating as a server for maintaining and allocating addresses for devices in a ring topology. The ring supervisor may obtain an ordered list of devices in the ring by sending a data collection frame that passes through each device around the ring with each device appending its preconfigured address information. The ring supervisor may then operate to apply the addressing provided by each device, or alternatively, allocate different addresses to each device from a separate pool. As a result, control program software for ring devices can he developed using a general pool of addresses without requiring specific knowledge of actual addresses. Also, if a device requires replacement, the device may be replaced without requiring modification to the control program to provide the address for the replacement device.
    Type: Application
    Filed: July 30, 2014
    Publication date: February 4, 2016
    Inventors: Jessica E. Forguites, Sivaram Balasubramanian, Mark G. Devonshire, Mark R. Hantel
  • Patent number: 9197576
    Abstract: The subject matter disclosed herein describes a method to allocate and prioritize data communications on an industrial control network. A transmission schedule including multiple priority windows and multiple queues is established. Each queue is assigned to at least one priority window, and each priority window may have multiple queues assigned thereto. A control device communicating on the control network transmits data packets according to the transmission schedule. Within each priority window, data packets corresponding to one of the queues assigned to the priority window may be transmitted. The data packets may be transmitted at any point during the priority window, but will only be transmitted if no data packet from a higher queue is waiting to be transmitted.
    Type: Grant
    Filed: November 15, 2010
    Date of Patent: November 24, 2015
    Assignee: Rockwell Automation Technologies, Inc.
    Inventors: Sivaram Balasubramanian, David A. Vasko, Anatoly Moldovansky, Kenwood H. Hall, Anthony G. Gibart
  • Patent number: 9160661
    Abstract: An industrial network with bidirectional communication for real time control includes nodes selectively operable in either a switch mode or a serial shifting mode. Nodes operating in the switch mode are capable of initiating data frames for transmission on the network and receiving data frames from the network. Nodes operating in either the switch mode or the serial shifting mode are capable of extracting and/or inserting data into a data frame as it is transmitted through that node. An initialization procedure determines end nodes and intermediate nodes within the network. The end nodes are configured to initially operate in the switch mode and the intermediate nodes are configured to initially operate in the serial shifting mode. The intermediate nodes are additionally operable to selectively toggle between operation in switch mode and serial shift mode and may operate in both modes during a single scan cycle.
    Type: Grant
    Filed: July 24, 2014
    Date of Patent: October 13, 2015
    Assignee: Rockwell Automation Technologies, Inc.
    Inventor: Sivaram Balasubramanian
  • Patent number: 9100294
    Abstract: A device is configured to be operable in a plurality of network environments. A number of different configurations are available to be set on the device, where a first configuration enables operation on a first network, and a second configuration enables operation on a second, disparate, network. A plurality of external ports in conjunction with a multiplexer switch, network switch, internal CPU, external CPU, routing links, etc., can be combined to facilitate multiple configurations for the device. The device is suitable for incorporation into a human machine interface, for application in an industrial processing operation. Receive port information can be incorporated into a data frame to facilitate identification of an external port associated with the reception of the data frame. Applicable networks include linear topology, ring topology, star topology, Ethernet, ROCKWELL NEO, EtherNet/IP, one or more LANs, etc. Configuration can be via a USB device or an interface.
    Type: Grant
    Filed: January 30, 2013
    Date of Patent: August 4, 2015
    Assignee: ROCKWELL AUTOMATION TECHNOLOGIES, INC.
    Inventors: Sivaram Balasubramanian, Gary D. Dotson, Benjamin Nave
  • Patent number: 9100210
    Abstract: Multiple gateway devices communicating between a device level ring (DLR) network and a spanning tree (ST) network may be provided a gateway protocol that cooperatively ensures that only a single gateway is active at a given time. This cooperation may be effected by the transmission of advertise messages by gateways, the advertise messages holding precedence values so that only a single gateway having a highest precedence value is active at a given time. Loss of the advertise messages may trigger a gateway held in a backup state to assume an active gateway role.
    Type: Grant
    Filed: November 15, 2011
    Date of Patent: August 4, 2015
    Assignee: Rockwell Automation Technologies, Inc.
    Inventors: Sivaram Balasubramanian, Anatoly Moldovansky
  • Publication number: 20140334341
    Abstract: An industrial network with bidirectional communication for real time control includes nodes selectively operable in either a switch mode or a serial shifting mode. Nodes operating in the switch mode are capable of initiating data frames for transmission on the network and receiving data frames from the network. Nodes operating in either the switch mode or the serial shifting mode are capable of extracting and/or inserting data into a data frame as it is transmitted through that node. An initialization procedure determines end nodes and intermediate nodes within the network. The end nodes are configured to initially operate in the switch mode and the intermediate nodes are configured to initially operate in the serial shifting mode. The intermediate nodes are additionally operable to selectively toggle between operation in switch mode and serial shift mode and may operate in both modes during a single scan cycle.
    Type: Application
    Filed: July 24, 2014
    Publication date: November 13, 2014
    Inventor: Sivaram Balasubramanian
  • Patent number: 8843652
    Abstract: A distributed control system and methods of operating such a control system are disclosed. In one embodiment, the distributed control system is operated in a manner in which interrupts are at least temporarily inhibited from being processed to avoid excessive delays in the processing of non-interrupt tasks. In another embodiment, the distributed control system is operated in a manner in which tasks are queued based upon relative timing constraints that they have been assigned. In a further embodiment, application programs that are executed on the distributed control system are operated in accordance with high-level and/or low-level requirements allocated to resources of the distributed control system.
    Type: Grant
    Filed: September 8, 2010
    Date of Patent: September 23, 2014
    Assignee: Rockwell Automation Technologies, Inc.
    Inventor: Sivaram Balasubramanian
  • Patent number: 8824333
    Abstract: An industrial network with bidirectional communication for real time control includes nodes selectively operable in either a switch mode or a serial shifting mode. Nodes operating in the switch mode are capable of initiating data frames for transmission on the network and receiving data frames from the network. Nodes operating in either the switch mode or the serial shifting mode are capable of extracting and/or inserting data into a data frame as it is transmitted through that node. An initialization procedure determines end nodes and intermediate nodes within the network. The end nodes are configured to initially operate in the switch mode and the intermediate nodes are configured to initially operate in the serial shifting mode. The intermediate nodes are additionally operable to selectively toggle between operation in switch mode and serial shift mode and may operate in both modes during a single I/O scan cycle.
    Type: Grant
    Filed: May 31, 2011
    Date of Patent: September 2, 2014
    Assignee: Rockwell Automation Technologies, Inc.
    Inventor: Sivaram Balasubramanian
  • Publication number: 20140211657
    Abstract: A device is configured to be operable in a plurality of network environments. A number of different configurations are available to be set on the device, where a first configuration enables operation on a first network, and a second configuration enables operation on a second, disparate, network. A plurality of external ports in conjunction with a multiplexer switch, network switch, internal CPU, external CPU, routing links, etc., can be combined to facilitate multiple configurations for the device. The device is suitable for incorporation into a human machine interface, for application in an industrial processing operation. Receive port information can be incorporated into a data frame to facilitate identification of an external port associated with the reception of the data frame. Applicable networks include linear topology, ring topology, star topology, Ethernet, ROCKWELL NEO, EtherNet/IP, one or more LANs, etc. Configuration can be via a USB device or an interface.
    Type: Application
    Filed: January 30, 2013
    Publication date: July 31, 2014
    Applicant: ROCKWELL AUTOMATION TECHNOLOGIES, INC.
    Inventors: Sivaram Balasubramanian, Gary D. Dotson, Benjamin Nave
  • Publication number: 20140105004
    Abstract: Aspects of the present invention provide a device, method and system which utilize hardware-based granular evaluation of industrial control protocol packets to withstand traffic storms. In an embodiment, packet evaluation circuitry coupled to a port may be adapted to evaluate one or more protocol fields contained in each inbound packet before switching circuitry can send the inbound packet to the proper destination. The inbound packet may be sent by the switching circuitry if it is a particular message, or may be selectively inhibited from being sent by the switching circuitry if the inbound packet does not contain the particular message for being sent and if the total number of bytes of the inbound packet type exceeds a threshold for the outbound port during a given period of time. As such, critical industrial applications may continue to operate in the presence of a traffic storm.
    Type: Application
    Filed: October 12, 2012
    Publication date: April 17, 2014
    Applicant: Rockwell Automation Technologies, Inc.
    Inventors: Brian A Batke, Sivaram Balasubramanian