A secure hardware module and system concept for local and remote industrial embedded system identification

Lesjak, Christian; Ruprechter, Thomas; Haid, Josef; Bock, Holger; Brenner, Eugen

doi:10.1109/etfa.2014.7005086

Cited by 19 publications

(13 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In this regard a deployment procedure based on a Dual-Interface Trust Anchor is proposed [20]. The application of such deployment procedure can be found in [21]. Its application to local automation clouds is discussed in [13].…”

Section: B Securitymentioning

confidence: 99%

Enabling IoT automation using local clouds

Delsing

Eliasson

Deventer

et al. 2016

2016 IEEE 3rd World Forum on Internet of Things (WF-IoT)

View full text Add to dashboard Cite

Abstract-Various forms of cloud computing principles and technologies are becoming important recently. This paper addresses cloud computing for automation and control applications. It's argued that the open Internet cloud idea has such limitations that its not appropriate for automation.Since automation is physically and geographically local, it is inevitable to introduce the concept of local automation clouds. It's here proposed that local automation clouds should be self contained an be able to execute the intended automation functionalities without any external resources. Thus providing a fence at the rim of the local cloud preventing any inbound or outbound communication. Such a local cloud provides possibilities to address key requirements of both todays and future automation solutions. Adding mechanisms for secure inter-cloud administration and data tranfere enables local automation cloud to meet IoT automation system requirements as: 1) Interoperability of a wide range of IoT and legacy devices 2) Automation requirement on latency guarantee/prediction for communication and control computations. 3) Scalability of automation systems enabling very large integrated automation systems 4) Security and related safety of automation systems 5) Ease of application engineering 6) Multi stakeholder integration and operations agility.How these requirements can be met in such a local automation cloud is discussed with references to proposed solutions. The local automation cloud concept is further verified for a compartment climate control application. The control application included an IoT controller, four IoT sensors and actuators, and a physical layer communication gateway. The gateway acted as host for local cloud core functionalities. The climate control application has successfully been implemented using the open source Arrowhead Framework and its supports for design and implementation of self contained local automation clouds.

show abstract

Section: B Securitymentioning

confidence: 99%

Enabling IoT automation using local clouds

Delsing

Eliasson

Deventer

et al. 2016

2016 IEEE 3rd World Forum on Internet of Things (WF-IoT)

View full text Add to dashboard Cite

show abstract

“…Secured device identification, a major use case for smart maintenance services, has been investigated in [5]. The presented system allows to authenticate, i.e., identify and cryptographically corroborate, the identity of industrial equipment.…”

Section: B Smart Services and Industrial Control System Securitymentioning

confidence: 99%

Securing smart maintenance services: Hardware-security and TLS for MQTT

Lesjak

Hein

Hofmann³

et al. 2015

2015 IEEE 13th International Conference on Industrial Informatics (INDIN)

View full text Add to dashboard Cite

Increasing the efficiency of production and manufacturing processes is a key goal of initiatives like Industry 4.0. Within the context of the European research project AR-ROWHEAD, we enable and secure smart maintenance services. An overall goal is to proactively predict and optimize the Maintenance, Repair and Operations (MRO) processes carried out by a device maintainer, for industrial devices deployed at the customer. Therefore it is necessary to centrally acquire maintenance relevant equipment status data from remotely located devices over the Internet. Consequently, security and privacy issues arise from connecting devices to the Internet, and sending data from customer sites to the maintainer's back-end.In this paper we consider an exemplary automotive use case with an AVL Particle Counter (APC) as device. The APC transmits its status information by means of a fingerprint via the publish-subscribe protocol Message Queue Telemetry Transport (MQTT) to an MQTT Information Broker in the remotely located AVL back-end. In a threat analysis we focus on the MQTT routing information asset and identify two elementary security goals in regard to client authentication. Consequently we propose a system architecture incorporating a hardware security controller that processes the Transport Layer Security (TLS) client authentication step. We validate the feasibility of the concept by means of a prototype implementation. Experimental results indicate that no significant performance impact is imposed by the hardware security element. The security evaluation confirms the advanced security of our system, which we believe lays the foundation for security and privacy in future smart service infrastructures.

show abstract

“…Second, from a security perspective, each device requires a certificate including the device's ID and public key, and a corresponding private key, which are stored in the memory of the security controller in the CUTIN module. The provisioning of these credentials has been discussed in [17]. Figure 5.…”

Section: A Experimental Prototypementioning

confidence: 99%

ESTADO — Enabling smart services for industrial equipment through a secured, transparent and ad-hoc data transmission online

Lesjak

Ruprechter

Bock

et al. 2014

The 9th International Conference for Internet Technology and Secured Transactions (ICITST-2014)

Self Cite

View full text Add to dashboard Cite

The advent of initiatives like Industry 4.0 promises increased operational efficiency through smart services and interconnected devices. To enable smart maintenance services for today's and future industrial equipment, regular status information must be transmitted from device customers to maintenance service providers over the Internet. However, simply attaching an industrial device to the Internet often leads to a security and privacy nightmare. Transparency about when and what data is being transmitted is of crucial interest to a customer. During transport, data must be protected against modifications and disclosure. A maintainer requires trust in the data's origin and integrity.In this paper, we propose ESTADO, a system that enables smart services by providing the necessary connectivity from industrial equipment to service providers for device state tracking. Our system design focuses on the migration of current devices and the security aspect. Using a non-permanent NFC based connection, connectivity is only established ad-hoc on customer demand, and any data transmission is fully transparent to a customer. We study our design through a prototype implementation using an Infineon security controller and evaluate the security, usability and deployment aspects of our solution.

show abstract

A secure hardware module and system concept for local and remote industrial embedded system identification

Cited by 19 publications

References 9 publications

Enabling IoT automation using local clouds

Enabling IoT automation using local clouds

Securing smart maintenance services: Hardware-security and TLS for MQTT

ESTADO — Enabling smart services for industrial equipment through a secured, transparent and ad-hoc data transmission online

Contact Info

Product

Resources

About

A secure hardware module and system concept for local and remote industrial embedded system identification

Cited by 19 publications

References 9 publications

Enabling IoT automation using local clouds

Enabling IoT automation using local clouds

Securing smart maintenance services: Hardware-security and TLS for MQTT

ESTADO &#x2014; Enabling smart services for industrial equipment through a secured, transparent and ad-hoc data transmission online

Contact Info

Product

Resources

About

ESTADO — Enabling smart services for industrial equipment through a secured, transparent and ad-hoc data transmission online