Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
  • H04L63/029—Firewall traversal, e.g. tunnelling or, creating pinholes
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/16—Implementing security features at a particular protocol layer
  • H04L63/162—Implementing security features at a particular protocol layer at the data link layer
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/18—Network architectures or network communication protocols for network security using different networks or channels, e.g. using out of band channels
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/08—Access security
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/08—Access security
  • H04W12/082—Access security using revocation of authorisation
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
  • H04W4/12—Messaging; Mailboxes; Announcements
  • H04W4/14—Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Definitions

• the invention relates to the remote maintenance of industrial equipment, particularly those involved in the manufacture of aeronautical systems such as turbomachines.
• a solution to allow access at any time and from a distance is to permanently connect the equipment to a remotely accessible network.
• the invention overcomes the aforementioned drawbacks.
• the invention relates, according to a first aspect, to a box for managing access to an industrial network, to which industrial equipment is connected, the management box comprising: an access channel to a data network; Internet type, said data network access channel comprising a cutoff unit, a control channel of the data network access channel, said control channel comprising a controller configured to control the cutoff unit so as to to allow communication between the industrial network and the data network.
• the invention is advantageously completed by the following features, taken alone or in any of their technically possible combination:
• control channel comprises a first communication interface configured to put the box into communication with a mobile network of GSM type;
• the breaking unit comprises a switching relay which can be activated by means of a control signal from the controller;
• the first communication interface is a GSM communication interface, the control signal being a function of a received SMS;
• the controller is configured to authenticate a user, the controller being configured to drive the cutoff unit to establish communication between the industrial network and the data network once the user is authenticated.
• a remote maintenance server configured to be connected on the one hand to an industrial network to which a set of industrial equipment is connected and on the other hand to a box according to the invention, the server comprising a control server configured to communicate with the box, said server further comprising a firewall configured to manage access to the industrial network from said box.
• the invention is advantageously complemented by the characteristic that the firewall is configured to isolate an industrial equipment from the other equipment of the network so as to allow access to the isolated equipment only without being able to access the others. .
• the invention relates to a remote maintenance process for a set of industrial equipment connected together to an industrial network, the industrial network being linked to a box for managing access to an industrial network according to the first aspect of the invention, the management box being in connection with a data network and a mobile network, the method comprising the following steps, an anomaly having been detected on a unit of the set called unit of interest: reception on the control channel of the case of a request, for purposes of establishment of a remote maintenance communication between the industrial network and the data network, authentication of the request, and if the request is authenticated, establishment of the remote maintenance communication between the industrial network and the data network.
• the mobile network is a GSM network, the request being constituted by an SMS preferably comprising a confidential code enabling an authentication of said request;
• the establishment of the remote maintenance communication comprises a step of isolating the equipment of interest from the other equipment of the industrial network so that only the equipment of interest is connected to the industrial network;
• the method comprises a step of connecting, via the management box, a terminal of an intervener to the industrial network so that the latter can access the equipment of interest via the data network to perform maintenance operations on said equipment of interest; and once the maintenance operations are completed; the method comprises a disconnection step via the management box, from the operator terminal to the industrial network, the industrial network is no longer accessible via the Internet network;
• the step of connecting the speaker of the speaker includes an authentication of said speaker to verify that it is authorized to connect to the industrial network;
• the method comprises a step of rehabilitation of the industrial network so that all the industrial equipment is accessible via the industrial network but inaccessible from the Internet.
• the invention allows a person authorized to control the remote maintenance solution to set up secure remote maintenance connections so that a maintenance operator who is authorized to connect and perform maintenance or troubleshooting of industrial equipment to any time and from any place in the world.
• the housing integrated in a system for remote maintenance can be controlled remotely via a mobile network including cellular (GSM network) while having a high security.
• GSM network cellular
• the housing allows the opening of an electronic circuit for connection between the remote maintenance server and a data network.
• the opening can be done locally or via a mobile network, this then allows the maintenance operator to access industrial equipment in a secure manner.
• FIG. 1 represents a remote maintenance environment in accordance with the invention
• FIG. 2 illustrates steps of a remote maintenance method according to the invention.
• industrial equipment U1, U2, U3 are connected to an industrial network.
• an industrial network is well known to those skilled in the art and will not be further detailed here.
• a remote maintenance server 20 is connected to the industrial network.
• Such a server 20 makes it possible to control the security of remote maintenance communications relating to the industrial equipment of the industrial network.
• the remote maintenance server 20 makes it possible to manage the accesses to the industrial network and thus the accesses to the industrial equipment connected to it. It is through this remote maintenance server 20 that maintenance operations as such are performed.
• the server 20 comprises a control server 21 configured to communicate with the box 30, and also includes a firewall 22 for filtering the connections according to the intervention to be performed on an industrial equipment. Thanks to the firewall 22, the remote maintenance server 20 makes it possible to isolate an industrial equipment from the other equipment of the network so that a user terminal can access the isolated equipment only without being able to access the others.
• a box 30 for managing access to the industrial network is connected to the remote maintenance server 20.
• This box 30 makes it possible to manage the access of an intervener for the remote maintenance of the industrial network via the remote maintenance server 20 via a terminal 50 'of communication.
• the box 30 allows the opening and closing of a remote maintenance communication in order to remotely troubleshoot industrial equipment of the industrial network 10 via a data network 40 , type Internet.
• an authorized person via his terminal 50, can initiate remote maintenance communication for an authorized maintenance operator or for himself. even.
• an authorized maintenance operator or the authorized person can connect to the industrial network via the data network 40, via a terminal 50, 50 ', in order to troubleshoot one of the equipment U 1 , U2, U3 of the network 10.
• the box allows two separate connections: a connection to a data network 40 and another connection to a mobile network 70.
• a terminal 50, 50 ' is for example a smartphone (in English, "smartphone"), a tablet or a laptop. It will be understood, however, that for the establishment of the remote maintenance communication via the mobile network 70 the terminal is able to connect to such a terminal. network. As well as the terminal for remote maintenance via the data network 40, the terminal is able to connect to such a data network.
• the management box 30 comprises a channel 30a for accessing an Internet type data network and a channel 30b for controlling said data network access channel 30a.
• control channel 30b comprises a first communication interface 32 making it possible to access a wireless network 70 of the GSM type.
• the data network access channel 30a comprises a second communication interface 34 making it possible to access a network 40 of Internet type data.
• the management box 30 is preferably both connected to a mobile network 70 (for example of the GSM type) and to a network 40 of Internet type data.
• the case 30 has two distinct features.
• the first function is to control via the control channel 30b the opening or closing of the remote maintenance communication between the industrial network and the data network 40.
• the opening or closing of the remote maintenance communication as such is effected via the channel 30a access network 40 data.
• the second feature is to secure access to the industrial network.
• the data network access channel 30a comprises a cut-off unit 33 configured to physically isolate the industrial network from the data network 40 so that no communication can be established from the data network 40 .
• the control channel 30b comprises a controller 31 configured to drive the cut-off unit 33 so as to allow access to the industrial network 10 from the data network 40 and thus to establish communication remote maintenance.
• firewall 22 of the remote maintenance server 20 also has the functionality of communicating with the controller 31 of the box 30 of cut in order to authorize or not the opening of the communication of remote maintenance
• the controller 31 is in communication with the remote maintenance server 20 and with the first communication interface 32.
• the opening and closing of the remote maintenance communication are managed by the control channel 30b.
• a request for establishment of remote maintenance communication from the mobile network 70 must be authenticated. This request comes from an authorized person.
• Such authentication is implemented by the controller 31 which processes information received from the first communication interface 32 and transmits it to a server 21 for controlling the remote maintenance server 20.
• the control server 21 comprises a memory (not shown) in which a list of authorized speakers is stored.
• the controller 31 is therefore configured to implement a comparison between the data of the piloting service 21 and data relating to the identity of the person who issued the request for establishment of the remote maintenance communication.
• the first communication interface 32 is a GSM communication interface comprising a SIM card in order to be able to connect the management box 30 to a mobile network of a GSM operator.
• the authorized person may send his request for the purpose of opening the remote maintenance communication by sending an SMS.
• the transmitted SMS responds to a very particular syntax for identifying the authorized person and also includes the control command to be transmitted by the controller 31 to the pilotage service 21.
• the SMS includes a confidential code typically consisting of 8 digits which makes it possible to authenticate the authorized person.
• SMS is advantageously composed of three fields:
• a third field constituted by the piloting control of a particular industrial equipment.
• the control command is a control of a particular industrial equipment U 1, U 2, U 3 to allow its maintenance via the remote maintenance communication. This is in other words a command applied to a device in order to allow its remote maintenance.
• the controller 31 is therefore configured to process the received request (the SMS), in order to compare the identity it contains to the list of authorized persons stored in the memory of the control server 21 (in the case of the SMS, the verification the identity will be implemented thanks to the telephone number from which the SMS originates and thanks to the confidential code contained in the SMS).
• the controller 31 generates a control signal which makes it possible to drive the cutoff unit 33 so that the latter 33 communicates the industrial network with the data network 40 via the second interface 34. Communication.
• the cut-off unit 33 comprises an electronic relay allowing the physical cut-off between two RJ45-type communication ports, one of which is connected to the remote maintenance server 20 via a security gateway 22 and the other to the
• a control signal from the controller 31 adapted to the relay the connection or disconnection of the two communication ports is controlled. Since the relays are controlled by a 12VDC signal, the control (5VDC) from the controller is adapted via an electronic voltage amplifier.
• the cutoff unit 33 can be controlled locally to allow the opening or closing of the circuit without going through the SMS mode.
• authentication is done locally and not remotely by sending a request to the controller 31 via the server control service 21.
• step EO an anomaly on industrial equipment of the industrial network 10 is detected and communicated to the maintenance department of the industrial site.
• the maintenance department has the interest of a remote maintenance call for additional remote support, the latter shall initiate the opening or ask an authorized person to proceed with the establishment of a secure remote maintenance call in order to remotely access the equipment of the industrial network for which an anomaly is detected.
• Equipment of interest Industrial equipment for which an anomaly is detected is, in what follows, called "equipment of interest”.
• the management unit 30 is in communication with the mobile network and is waiting for the receipt of a request for the purpose of establishing a remote maintenance communication between the industrial network and the data network 40.
• the request may consist of the previously described SMS from the authorized person.
• the management unit 30 is only accessible via the mobile network 70 or locally if the request is local.
• a request for establishment of a remote maintenance communication between the industrial network and the data network 40 is received (step E1) by the control channel 30b.
• the request includes the identity of the person authorized to request the establishment of the remote maintenance communication.
• the identity consists of the telephone number from which the SMS constituting the request originates.
• This request is then authenticated (step E2). More specifically, the authentication consists in the controller 31 of the box 30 comparing the identity of the authorized person to a list of people stored in the server 21 of the remote maintenance server 20. In the case of sending the SMS at this stage, the system also checks the PIN contained in the SMS.
• the housing 30 via the controller 31 controls (step 32) the cutoff unit 33 for communicating the industrial network with the data network 40 via said cutoff unit 33.
• the industrial network is in communication with the data network 40 via the second communication interface 34.
• the establishment of the remote maintenance communication comprises prior to the control of the cut-off unit a step (step 31) of isolating the industrial equipment on which an intervention is required on the industrial network of the other equipment.
• step 31 the industrial equipment of interest is accessible on the industrial network.
• a maintenance operator can connect (step E4) to the industrial network via the data network 40 via his terminal (smartphone, tablet, computer, etc.).
• the authorized person who has requested the opening of the remote maintenance communication transmits to the maintenance operator a connection link of "URL" type and then identification information. With this link, the maintenance operator has access to an interface to maintain an industrial equipment.
• the maintenance operator's connection is made via an Internet-type connection to the remote maintenance server and comprises an authentication.
• This authentication consists in verifying that the speaker who connects to the server is the one expected and then authorized to cross the firewall 22 located on the remote maintenance server 20. A secure connection is then established.
• the management unit 30 makes it possible to put the industrial network and the speaker's terminal in communication so that the latter can access the equipment of interest.
• This communication allows the speaker's terminal to access the equipment of interest through the network 40 to perform maintenance operations.
• the management box "physically" connected the industrial network to the internet network 40.
• step E5 the speaker performs (step E5) one or more maintenance operation (s) on the industrial equipment of interest.
• the intervener disconnects (step E6) from the industrial network. This step E6 is initiated by the speaker via his terminal.
• the remote maintenance server 20 then controls the controller 31 of the management box (step E7) to control the cut-off unit 33 in order to isolate the industrial network from the data network again.
• step E8 all industrial equipment is then connected to the industrial network.
• step E9 is implemented by the remote maintenance server 20, and consists of tracing the actions performed by the maintenance operator on the equipment of interest.
• control service 21 records the actions performed on the industrial network 10 for example in the form of video to ensure the integrity of the production data.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Computing Systems (AREA)
• General Engineering & Computer Science (AREA)
• Computer Hardware Design (AREA)
• Data Exchanges In Wide-Area Networks (AREA)
• Telephonic Communication Services (AREA)
• Management, Administration, Business Operations System, And Electronic Commerce (AREA)
• Computer And Data Communications (AREA)
• Testing And Monitoring For Control Systems (AREA)
• Mobile Radio Communication Systems (AREA)
• Selective Calling Equipment (AREA)

Applications Claiming Priority (2)

Publications (1)

Family

ID=62751035

Family Applications (1)

Country Status (8)

Family Cites Families (19)

• 2018
  • 2018-03-14 FR FR1852185A patent/FR3079046B1/fr active Active
• 2019
  • 2019-03-14 BR BR112020018260-5A patent/BR112020018260A2/pt unknown
  • 2019-03-14 JP JP2020548622A patent/JP7466452B2/ja active Active
  • 2019-03-14 CA CA3093392A patent/CA3093392A1/fr active Pending
  • 2019-03-14 CN CN201980019173.9A patent/CN111869181B/zh active Active
  • 2019-03-14 US US16/979,945 patent/US11641344B2/en active Active
  • 2019-03-14 WO PCT/FR2019/050567 patent/WO2019175512A1/fr unknown
  • 2019-03-14 EP EP19717537.5A patent/EP3766224A1/fr active Pending

Also Published As

Similar Documents

Legal Events