Trustworthy Industrial IoT Gateways for Interoperability Platforms and Ecosystems

Abstract

The industrial Internet of Things (IIoT) is having a significant impact in the manufacturing industry, especially in the context of horizontal integration of operational systems in factories as part of information systems in supply chains. Manufacturing companies can use this technology to create data streams along the supply chain that monitor and control manufacturing and logistic processes, to in the end make these data streams interoperable with other software systems and to enable smart interactions among supply chain processes. However, the provision of these data streams may expose manufacturing operational systems to cyber-attacks. Therefore, cybersecurity is a critical aspect to design trustworthy gateways, which are system components that implement interoperability mechanisms between operational systems and information systems. Gateways must provide security mechanisms at different system layers to minimize threats. This paper presents the Device Drivers security architecture: trustworthy gateways between operational technology and information technology used in the virtual factory open operating system (vf-OS) platform, which is a multisided platform orientated to manufacturing and logistics companies to enable collaboration among supply chains in all sectors. The main contribution of this paper is the evaluation of fallback mechanisms to improve resilience. In situations when the system may be under attack, the proposed mechanisms provide means to quickly recover component availability, by applying alternative security measures to minimize the threat at the same time. Other significant contributions are: a description of the threat model for Device Drivers, a presentation of the security countermeasures implemented in the vf-OS system, the mapping of the vf-OS response objectives to the different characteristics of a trustworthy system: security, privacy, reliability, safety, and resilience and how the proposed countermeasures complement this response.

A Conceptual Framework to Manage Resilience and Increase Sustainability in the Supply Chain

“…Besides, these objectives are associated with indicators that also need to be defined, as well as their relationship with the intra-organizational objectives of each node [204]. This network is complex, since the definition of metrics associated to those indicators must take into account the data aggregation to move from the intra-organizational to the inter-organizational level [168,205]. Additionally, it is necessary to establish goals for each indicator to monitor its evolution over time.…”

“…This information must include (among others) density, complexity and criticality of the nodes in the face of disruptive events. 28 12.07% [25,26,[29][30][31][32][33]46,114,125,130,157,160,163,165,168,169,190,202,203,205,[212][213][214][215][216][217] Trust…”

IoT and Blockchain in the Development of Smart Cities

“…Such drive for encouraging local uniqueness will encourage residents to create products and services using blockchain and IoT, thus eschewing national and overly capitalistic brands in favor of local brands that serve the local population. For this to be successful, however, the different blockchain applications and IoT platforms will have to be interoperable and compatible with each other [42]. This challenge is currently being solved by companies such as Chain of Things that are attempting to make IoT (software and hardware) and blockchain infrastructures interoperable [43].…”

Secure Interconnection of IT-OT Networks in Industry 4.0

“…Through ABAC+Risk-BAC, it is possible to take more stringent decisions established by the real attributes of the context and the risks associated with that context [57], further delimiting the access conditions by dynamically managing roles. In the literature, there several related works for IoT and IIoT environments [38,29,14], which can be considered for future implementations.…”