CKMI: Comprehensive Key Management Infrastructure Design for Industrial Automation and Control Systems

Abstract

Industrial Automation and Control Systems (IACS) are broadly utilized in critical infrastructures for monitoring and controlling the industrial processes remotely. The real-time transmissions in such systems provoke security breaches. Many security breaches have been reported impacting society severely. Hence, it is essential to achieve secure communication between the devices for creating a secure environment. For this to be effective, the keys used for secure communication must be protected against unauthorized disclosure, misuse, alteration or loss, which can be taken care of by a Key Management Infrastructure. In this paper, by considering the generic industrial automation network, a comprehensive key management infrastructure (CKMI) is designed for IACS. To design such an infrastructure, the proposed scheme employs ECDH, matrix method, and polynomial crypto mechanisms. The proposed design handles all the standard key management operations, viz. key generation, device registration, key establishment, key storage, device addition, key revocation, key update, key recovery, key archival, and key de-registration and destruction. The design supports secure communication between the same and different levels of IACS devices. The proposed design can be applied for major industrial automation networks to handle the key management operations. The performance analysis and implementation results highlight the benefits of the proposed design.

PLC Cybersecurity Test Platform Establishment and Cyberattack Practice

“…To increase the security of distributed control systems (DCS), Sergi et al proposed the incorporation of public key infrastructure (PKI), helping to generate a "security by default" implementation scenario [15]. Additional efforts to improve the infrastructure of industrial automation and control systems (IACS) were proposed by Pramod et al [16]. Rezai et al summarized the existing key management schemes in SCADA networks, highlighting issues requiring extensive research, such as cryptographic authority or protocol vulnerability assessments [17].…”

Attacks and Preventive Measures on Video Surveillance Systems: A Review

“…Preventing attacks against connected devices requires effort from both the industry and users. Vendors must adopt good practices for built-in security measures, such as secure remote access, basic encryption, and patching all known vulnerabilities [39][40][41][42][43][44][45][46][47]. Without proper safeguarding, IP-connected cameras are vulnerable to hacking, which can lead to the compromise of millions of security cameras and video recorders.…”

The Dynamic Symmetric Four-Key-Generators System for Securing Data Transmission in the Industrial Control System

“…The industry needs a control system to implement an automation process. This system, the collection of individual control systems and other hardware that automates or operates industrial processes, is identified as the Industrial Control System (ICS refers to [1]). Some industries carry out production activities in several processes at the same time, but in different areas.…”