Network security management for a building automation system

• Main Authors: Gasmen, Glenn Richard, Holst, David C, Sivagnanam, Mangayarkarasi, Fletcher, Thomas A
• Format: Patent
• Language: English
• Published: 07.11.2023
• Subjects: CONTROL OR REGULATING SYSTEMS IN GENERAL; CONTROLLING; ELECTRIC COMMUNICATION TECHNIQUE; ELECTRICITY; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS ORELEMENTS; PHYSICS; REGULATING; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

A computer-implemented method and building automation system, the building automation system including a network of electronic devices connected in electronic communication. The method includes initiating an electronic security scan of the controller. The controller electronically assesses security vulnerabilities of the controller, including identifying one or more of a validation of whether the controller is protected by a firewall or other network security device, identifying which communication ports are open, identifying and verifying an Ethernet and Wi-Fi configuration of the controller, determining whether any routers communicating with the controller are protected by the firewall or other network security device, determining whether the controller is running an up-to-date software or firmware version, and determining a listing of software applications and versions installed on the controller. The controller calculates a risk score and listing of recommendations for resolving security vulnerabilities of the controller based on the electronically assessing security vulnerabilities of the controller.