Introducing security modules in PROFINET IO

Åkerberg, Johan; Björkman, Mats

doi:10.1109/etfa.2009.5347205

Cited by 12 publications

(7 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Doing it in this way, the cryptographic keys are assigned in the same way, using the same engineering tool, as IP-addresses for PROFINET IO field devices. Security Modules uses the same concept [5], and this enables a simple key distribution mechanism for PROFINET IO and WirelessHART. Figure 9 illustrates the on-demand key distribution process.…”

Section: E On-demand Configuration Datamentioning

confidence: 99%

See 1 more Smart Citation

Integration of WirelessHART networks in Distributed Control Systems using PROFINET IO

Åkerberg

Gidlund

Lennvall

et al. 2010

2010 8th IEEE International Conference on Industrial Informatics

Self Cite

View full text Add to dashboard Cite

In this paper we describe a method to integrate WirelessHART networks in Distributed Control Systems (DCS) using PROFINET IO. By modeling the WirelessHART network in the Generic Station Description file, that describes a PRO-FINET IO device, the WirelessHART related configuration can be distributed from the central engineering stations. In this way, both process controller configuration and WirelessHART network configuration is engineered and maintained from a central location. Thus the end-user does not need any additional tool-specific training, as the existing tools are used to engineer the WirelessHART networks. We base the method of integration on the keywords simple deployment and maintenance, and flexible topology.A proof-of-concept implementation of the proposed method shows that it is possible to download WirelessHART configuration both to the WirelessHART network managers, as well as the WirelessHART sensors. By integrating WirelessHART in this way, maintenance is greatly simplified as the actual configuration will be downloaded automatically by the DCS when faulty field devices are replaced.

show abstract

Section: E On-demand Configuration Datamentioning

confidence: 99%

“…In [5],Åkerberg and Björkman presented the first and important concept of Security Modules as a method of retrofitting network security in PROFINET IO. This paper uses the same approach of distributing cryptographic keys from the DCS to the WirelessHART network.…”

Section: Introductionmentioning

confidence: 99%

Integration of WirelessHART networks in Distributed Control Systems using PROFINET IO

Åkerberg

Gidlund

Lennvall

et al. 2010

2010 8th IEEE International Conference on Industrial Informatics

Self Cite

View full text Add to dashboard Cite

show abstract

“…Doing it in this way, the cryptographic keys are assigned in the same way, using the same engineering tool, as IPaddresses for Profinet IO field devices without any changes in the Profinet IO standard. security modules use the same concept [41], and this enables a simple key distribution mechanism for Profinet IO and WirelessHART. Distribution of security-relevant data should in general be transmitted with additional protection compared to for example IP-addresses.…”

Section: B On-demand Configuration Datamentioning

confidence: 99%

“…In order to retrofit security in Profinet IO we introduce a concept called security modules [41]. In this work, we have chosen the aforementioned technologies, but other technologies can also be used, since our proposed framework is technology independent.…”

Section: Seamless Integration Of Safe and Secure Wired/ Wireless Commmentioning

confidence: 99%

“…security modules [41] is a concept that makes it possible to retrofit a security layer on top of Profinet IO, without changing the underlying transmission system or standards. By using security modules on top of Profinet IO, end-to-end network security can be achieved and ensure authentication, integrity and confidentiality for real-time communication.…”

Section: Communication With Security Modulesmentioning

confidence: 99%

See 1 more Smart Citation

Efficient integration of secure and safety critical industrial wireless sensor networks

Åkerberg

Gidlund

Lennvall

et al. 2011

J Wireless Com Network

View full text Add to dashboard Cite

Wireless communication has gained more interest in industrial automation due to flexibility, mobility, and cost reduction. Wireless systems, in general, require additional and different engineering and maintenance tasks, for example cryptographic key management. This is an important aspect that needs to be addressed before wireless systems can be deployed and maintained efficiently in the industry. In this paper, we take an holistic approach that addresses safety and security regardless of the underlying media. In our proposed framework we introduce security modules which can be retrofitted to provide end-to-end integrity and authentication measures by utilizing the black channel concept. With the proposed approach, we can extend and provide end-to-end security as well as functional safety using existing automation equipment and standards, such as Profisafe, Profinet IO, and WirelessHART. Furthermore, we improve the WirelessHART standard with periodic and deterministic downlink transmissions to enable efficient usage of wireless actuators, as well as improving the performance of functional safety protocols.

show abstract

No Need to Marry to Change Your Name! Attacking Profinet IO Automation Networks Using DCP

Mehner

König

2019

Detection of Intrusions and Malware, and Vulnerability Assessment

View full text Add to dashboard Cite

Introducing security modules in PROFINET IO

Cited by 12 publications

References 17 publications

Integration of WirelessHART networks in Distributed Control Systems using PROFINET IO

Integration of WirelessHART networks in Distributed Control Systems using PROFINET IO

Efficient integration of secure and safety critical industrial wireless sensor networks

No Need to Marry to Change Your Name! Attacking Profinet IO Automation Networks Using DCP

Contact Info

Product

Resources

About