WO2014094983A1 - Système de mise en service et procédé pour un échange sécurisé d'informations sensibles en vue de la mise en service et de la configuration d'un équipement technique - Google Patents

Système de mise en service et procédé pour un échange sécurisé d'informations sensibles en vue de la mise en service et de la configuration d'un équipement technique Download PDF

Info

Publication number
WO2014094983A1
WO2014094983A1 PCT/EP2013/003658 EP2013003658W WO2014094983A1 WO 2014094983 A1 WO2014094983 A1 WO 2014094983A1 EP 2013003658 W EP2013003658 W EP 2013003658W WO 2014094983 A1 WO2014094983 A1 WO 2014094983A1
Authority
WO
WIPO (PCT)
Prior art keywords
communication
commissioning
secure
gateway
network
Prior art date
Application number
PCT/EP2013/003658
Other languages
English (en)
Inventor
Dirk SCHULZ
Ravish Kumar
Thomas Ruschival
Original Assignee
Abb Ag
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Abb Ag filed Critical Abb Ag
Publication of WO2014094983A1 publication Critical patent/WO2014094983A1/fr

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H04L63/162—Implementing security features at a particular protocol layer at the data link layer
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H04L63/164—Implementing security features at a particular protocol layer at the network layer
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/03—Protecting confidentiality, e.g. by encryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y04—INFORMATION OR COMMUNICATION TECHNOLOGIES HAVING AN IMPACT ON OTHER TECHNOLOGY AREAS
    • Y04S—SYSTEMS INTEGRATING TECHNOLOGIES RELATED TO POWER NETWORK OPERATION, COMMUNICATION OR INFORMATION TECHNOLOGIES FOR IMPROVING THE ELECTRICAL POWER GENERATION, TRANSMISSION, DISTRIBUTION, MANAGEMENT OR USAGE, i.e. SMART GRIDS
    • Y04S40/00—Systems for electrical power generation, transmission, distribution or end-user application management characterised by the use of communication or information technologies, or communication or information technology specific aspects supporting them
    • Y04S40/20—Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Definitions

  • the invention relates to a commissioning system and method for the secure exchange of sensitive information for the commissioning and configuring of technical equipment, in particular of field devices, by use of wireless connections according to the preamble of the independent claims.
  • wireless connections which intrinsically seem to be unsecure in real practice, may still be used securely by applying specific communication means, in particular interfaces, and restrictions.
  • WirelessHART as a new communication standard in industrial automation introduces a number of new challenges compared to classical wired communication, which have to be addressed at an early stage in the respective Device Management System (DMS) during topology engineering and commissioning.
  • DMS Device Management System
  • the DMS requires instances for gateways and devices and must reflect the logical communication topology from the previous network layout.
  • security measures defined in the HART, in particular the wirelessHART, standard introduce additional complexity into the commissioning workflow.
  • WirelessHART WirelessHART
  • the WirelessHART standard defines mandatory authentication and encryption mechanisms for the wireless communication. It further requires that the related en ⁇ cryption keys are exchanged through secure connections. Wired FSK communication is considered to fulfill this security requirement, are even fully autonomous wireless devices must provide a corresponding interface. Just like any other device parameter, also encryption keys may be pre-parameterized by the device manufacturer.
  • WirelessHART uses symmetric encryption, namely usage of the same key for encryption and decryption, for the authentication and communication between field devices and wireless access points. Corresponding keys must be available within both the gateway and the field device that wish to communicate.
  • a gateway receives an individual join key per device. To validate a join request, it requires a list of join keys and corresponding device IDs (hardware addresses). There is no way to disable encryption and authentication, but for ease of use the security level can be lowered. A common join key may then be shared between the devices in a network, and any device with a valid key is allowed to join.
  • the WirelessHART - devices must be connected to a "join key source", for example a commissioning station/engineering/handheld, via a secure connection or communication line.
  • Said connection typically is realized via a wired FSK Modem connection or a short-range IR connection, which all devices must support, even fully autonomous ones.
  • a HMI (human machine interface) port is also technically possible, but not standardized among manufacturers. Any wired port must be exposed during commissioning, whereby only the non-standard HMI port allows the device to remain closed.
  • the object of the invention is to provide an enhanced possibility for the secure exchange and easy handling or easy management of sensitive information of technical equipment and in particular of field devices by use of wireless connections, in particular also for wide range exchange.
  • the invention relates to a commissioning system for a secure and easy to manage exchange of sensitive information for the commissioning and configuring of technical equipment of a process and/or plant automation system comprising at least two components and/or devices, in particular field devices, communicating wirelessly, thereby using communication means to secure the wireless communication, in particular without the need to use higher protocol layers, like in particular authentication or encryption functionalities, wherein the communication means provide and ensure near-range communication, in particular by restricting communication signals to a secure area and determining if a device is within a certain area and allow communication if it is or refuse to communicate if it is not.
  • the at least two components or devices may be "regular” field devices but also dedicated “care-free” routers, providing an adapter and an energy source, in particular a battery or an accumulator and/or a photovoltaic or solar cell.
  • fully autonomous devices which in particular are equipped with wireless communication and autonomous energy sources, for example like batteries, which might physically be hard to access because of their site of operation or place of installation, and accordingly do not need or do not have to be accessed or opened and connected through a wired interface.
  • the communication between devices in particular field devices , for example from specific and/or special or specific WirelessHART gateways, from WirelessHART handhelds, or from handhelds supporting IR or RFID communication providing near- range communication, wherein a handheld may be any type of smartphone, tablet PC, netbook, PDA (Personal Digital Assistant), may be treated as being relatively secure.
  • field devices for example from specific and/or special or specific WirelessHART gateways, from WirelessHART handhelds, or from handhelds supporting IR or RFID communication providing near- range communication, wherein a handheld may be any type of smartphone, tablet PC, netbook, PDA (Personal Digital Assistant), may be treated as being relatively secure.
  • the system according to the invention allows a pre-parameterization or installation or putting into operation / commissioning of wireless - devices, in particular WirelessHART - devices for example by use of a portable commissioning device or station or handheld, in general a portable data processing device or unit, in a secure environment.
  • Secure in the context of this application means with high safety from interception but also a relatively high data or information transfer rate and/or a relatively high data or information transfer quality and/or high connectivity, independent from the circumstances and the environmental conditions in the plant or field.
  • the system provides a time efficient, flexible, secure and reliable interface or communication interface respectively and access to different type of field devices in particular in a plant or field with a relatively high pollution and/or dirt, so that external connector plugs or ports to establish a wired connection or cable connection would or might be contaminated and/or damaged and accordingly may not work properly anymore.
  • the same problem would arise if the ports are integrated in the interior of the device, so that one has to open the enclosure of the device, what in said environment may damage the device as such. This might be the case for example in an offshore environment and/or in the oil, gas and minerals site or industry, in particular a roller plant, in the chemical or pharmaceutical industry.
  • the communication means to secure wireless communication comprise properties of a physical layer and/or link layer and/or measurements.
  • physical layer describes the first and lowest layer in the seven-layer OSI model (Open System Interconnection Reference Model).
  • the physical layer accordingly comprises all the basic networking hardware transmission technologies of a network and all the necessary means for implementing said technologies and in particular for transmitting raw bits as well as logical data packets over physical link connecting network nodes, whereas the data which have to be transmitted are converted to a physical signal that may be transmitted.
  • identification means are provided, which use device identification information to determine the trustworthiness of a communication partner.
  • verification means are provided to introduce a verification step executed by a human to yet increase the attained level of security.
  • the radio transmissions in the physical layer are influenced without any modification to the field device to restrict the transmissions to a secure are. This is done by various means and at least one of setting transmission power to a level sufficiently high for local communication but low enough so communication cannot be overheard from outside of the commissioning area; encasing at least the antenna, if not the entire device, of device and gateway in a common, shielded housing; restricting the radio direction of device and gateway by shields/reflectors which are not part of the device but for the gateway may be part of a static gateway setup.
  • the system for a secure exchange of sensitive information of technical equipment by use of at least one wireless connection comprises communication means which provide or include a commissioning network, in particular a commissioning network comprising a regular wireless gateway which in the wireless management system is integrated like a multi-drop wired modem, wherein said dedicated commissioning network, in particular a WirelessHART Network, uses a well- known Network ID and a shared Join Key and which network is not used for any production purpose whatsoever, and wherein the devices joined in this network are visible to the integration component for the wireless network implemented by the gateway, for example .
  • a commissioning network in particular a commissioning network comprising a regular wireless gateway which in the wireless management system is integrated like a multi-drop wired modem
  • said dedicated commissioning network in particular a WirelessHART Network
  • any such device may be assigned to the target network, in particular by a commissioning engineer, and to secure this process, the identification information, in particular the device type, the manufacturer, the serial number or the like, or the device proximity to the commissioning network can be used by man or machine to check the legitimacy of the device; the latter is achieved by evaluating receive signal levels and used transmission energy.
  • FSK defines a common frequency modulation technique.
  • this commissioning network can be shared between all Communication DTMs, wherein device assignment is a manual task and accordingly not more than one such DTM (Device Typ Manager) might be opened at a time and communicates with the gateway.
  • DTM Device Typ Manager
  • a so called soft reset as part of decommissioning a device which initiates and executes a reset of the Network ID and Join Key to the well-known values, a so called soft reset, is provided.
  • the invention comprises a device which is prepared and equipped to support or initiate and/or execute a "hard reset of the security data" to the default values using e.g. magnetic pins at the respective HMI (Human Machine Interface).
  • the antenna of the commissioning gateway is enclosed in a radio-shielded tube, in particular made of plastic with embedded metal mesh, and connected via cable to the gateway. When connecting a device, this tube is simply put over the device antenna, resulting in secure and directed or targeted, almost vectored, communication already on the physical layer.
  • a handheld wherein the commissioning network is provided by a wireless handheld.
  • the term "handheld” is synonymously used for all type of handheld devices or handheld computer, in particular mobile computers and/or mobile phones and /or cell phones and or smart phones and /or PDA ' s and /or handhelds or handheld organizers and or tablet computer, whereas a handheld is a relatively small hand-held computing device with an operating system and a power supply, in particular a battery or rechargeable accumulator power source.
  • IR infrared
  • RFID radio frequency identification
  • a RFID key storage may be provided, wherein an RFID chip stores the join key.
  • This key can, contrary to WirelessHART, be read from the chip but only from about half a meter of distance, what still seems to be very secure, in particular in view of the risk of tapping or interception. Presuming that the RFID chip still works even in a damaged device, device exchange on location is possible without any connection to the device management system; the handheld can read the key from the old device and download it into the replacement device.
  • a key storage device for dedicated key storage and/or generation which contains a storage unit for a number of key/device and network IDs and which is connected to an engineering client and/or a commissioning device, in particular via Bluetooth, FSK, RFID, IR, HMI Port or the like, to receive a list of key/ID triples.
  • the respective commissioning engineer may simply walk by each all wireless devices and establish a connection with each at one time, which will automatically cause the download of the key/network ID pair to a device whose ID is the list.
  • USB stick with any of the previously described interfaces at the other end, like in particular FSK, RFID, IR, HMI Port or the like.
  • a commissioning/maintenance adapter for an HMI Port comprising a WirelessHART adapter equipped with an HMI interface so it can be plugged directly onto the device by a short range wired or wireless connection to provide long range wireless connectivity for the respective device during commissioning or maintenance.
  • the FDT DTM field device tool device type manager
  • the FDT DTM field device tool device type manager
  • Said roaming adapter avoids the need for a handheld when distributing join keys to wireless devices, in particular wireless devices which have their own wireless connection once they have received the keys and/or in hybrid plants, where only some devices use wireless communication technologies, to parameterize the wired devices in the same way as the wireless ones.
  • a secure connectivity over unsecure channels for all variants of key distribution and device parameterization is provided, using either standardized interfaces or the ABB HMI interface
  • the commissioning adapter may be used for configuring a wired or wireless device wirelessly.
  • the commissioning adapter is equipped with at least two interfaces, in particular comprising a WirelessHART- and a FSK- interface.
  • the commissioning adapter communicates with the WirelessHART gateway using the WirelessHART interface and device, which needs to be configured, using FSK interface.
  • the commissioning adapter provides more flexibility and mobility for remotely device configuration and secure handing of network credentials
  • the commissioning adapter is acting in a similar way like the other WirelessHART field devices. It joins the WirelessHART network in the same manner as specified in WirelessHART standard. After joining the network it will be used as remote device configurator.
  • the device which needs to be commissioned should have connection with
  • the device commissioning related commands can be sent to the commissioning adapter via the WirelessHART gateway.
  • the commissioning adapter After receiving the commissioning command, the commissioning adapter will start the device commissioning operation and will send back the command execution result to the engineering workplace via response message.
  • the commissioning adapter can have at least one of a RFID- or IR- HMI-Port or a combination thereof to establish or provide a connection to the field device which needs to be commissioned.
  • a commissioning adapter by means of a commissioning adapter a secure network credentials handling may be provided, wherein from an engineering workplace the distribution of device network credentials is initiated and executed in a completely secure manner.
  • a remote device diagnostic and troubleshooting operation is performed, wherein the commissioning adapter diagnoses the field device on the site location and sends the diagnostic information remotely to the network manager.
  • the required interaction by the respective user according to the invention is a simple plug & play. Compared to a state-of-the-art handheld no manual parameterization task is needed, no knowledge of join keys is required. By integrating the secure connectivity with the DCS engineering clients, the join keys never need to be exposed or disclosed to a user.
  • the invention relates to a method for a secure exchange of sensitive information of technical equipment, in particular by use of a system according to the invention as described above, whereas a secure wireless communication between at least two components and/or devices, in particular field devices, is provided and established by using communication means to ensure a secure near-range communication, in particular by restricting communication signals to a secure area and determining if a device is within a certain area and allow communication if it is or refuse to communicate if it is not, without the need to use higher protocol layers, like in particular authentication or encryption functionalities. Furthermore, to ensure security of the wireless communication properties of a physical layer and/or link layer and/or measurements are processed.
  • device identification information is used to determine the trustworthiness of a communication partner.
  • a verification step is executed by a human to yet increase the attained level of security.
  • the radio transmissions in the physical layer are influenced without any modification to the field device to restrict the transmissions to a secure area, as already described above.
  • the method for a secure exchange of sensitive information of technical equipment is applied to a commissioning network with a wireless gateway and uses a well-known Network ID and a shared Join Key wherein the devices joined in this network are visible to the respective Communication DTM (device type manager) for the wireless gateway in the same manner as devices connected to an FSK (frequency shift keying) modem, thus any such device may be assigned to the target network, in particular by a commissioning engineer, and to secure this process, the identification information, in particular the device type, the manufacturer, the serial number or the like, or the device proximity to the commissioning network can be used by man or machine to check the legitimacy of the device; the latter is achieved by evaluating receive signal levels and used transmission energy.
  • FSK defines a common frequency modulation technique.
  • this commissioning network can be shared between all communication DTMs, wherein device assignment is a manual task and accordingly not more than one such DTM might be opened at a time and communicates with the gateway. Furthermore, as part of decommissioning a device a reset of the Network ID and Join Key to the well-known values, a so called soft reset, is provided.
  • a handheld wherein the commissioning network is provided by a wireless handheld.
  • the term "handheld” is synonymously used for all type of handheld devices or handheld computer, in particular mobile computers and/or mobile phones and /or cell phones and or smart phones and /or PDA ' s and /or handhelds or handheld organizers and or tablet computer, whereas a handheld is a relatively small hand-held computing device with an operating system and a power supply, in particular a battery or rechargeable accumulator power source.
  • IR infrared
  • RFID radio frequency identification
  • a RFID key storage may be provided, wherein an RFID chip stores the join key.
  • This key can, contrary to WirelessHART, be read from the chip but only from about half a meter of distance, what still seems to be very secure, in particular in view of the risk of tapping or interception. Presuming that the RFID chip still works even in a damaged device, device exchange on location is possible without any connection to the device management system; the handheld can read the key from the old device and download it into the replacement device.
  • a number of key/device and network IDs may be retrieved and accesses via a key storage (commissioning device, handheld) device for dedicated key storage and/or generation, which contains a storage unit for said key/device and network ID's and which is connected to the engineering client and/or commissioning device, which has to be synchronized with the DMS, in particular via USB, to receive a list of key/ID triples.
  • a key storage transmissioning device, handheld
  • the engineering client and/or commissioning device which has to be synchronized with the DMS, in particular via USB, to receive a list of key/ID triples.
  • a connection with each wireless device may be established at one time, which will automatically initiate and cause the download of the key/network ID pair to a device whose ID is the list.
  • this key storage/commissioning device or handheld could be a USB stick with any of the previously described interfaces at the other end, like in particular FSK, RFID, IR, HMI Port or the like.
  • a commissioning/maintenance adapter in particular a "pre- secured portable wireless" connection device, for a maintenance port, which comprises a WirelessHART adapter equipped with an FSK interface so it can be plugged directly onto the device to provide wireless connectivity during
  • the FDT DTM field device tool device type manager
  • the FDT DTM field device tool device type manager
  • Said roaming adapter avoids the need for a handheld when distributing join keys to wireless devices, in particular wireless devices which have their own wireless connection once they have received the keys and/or in hybrid plants, where only some devices use wireless communication technologies, to parameterize the wired devices in the same way as the wireless ones.
  • a secure connectivity over unsecure channels for all variants of key distribution and device parameterization is provided, using either standardized interfaces or the ABB HMI interface.
  • the required interaction by the respective user according to the invention is a simple plug & play. Compared to a state-of-the-art handheld no manual parameterization task is needed, no knowledge of join keys is required. By integrating the secure connectivity with the DCS engineering clients, the join keys never need to be exposed or disclosed to a user.
  • the figure 1 discloses a method and system for a secure exchange of sensitive information of technical equipment by use of at least one wireless connection 7 comprising communication means which provide or include a commissioning network, wherein said dedicated commissioning network uses a well-known Network ID and a shared Join Key and which network is not used for any production purpose whatsoever, and wherein the devices ,5,6,8 joined in this network are visible to the integration component for the wireless network or gateway such as a Communication DTM (device type manager) or FDI gateway or communication device package instance for the WirelessHART Gateway 1 in the same manner as devices connected to an FSK (frequency shift keying) modem, thus any such device may be assigned to the target network, in particular by a commissioning engineer, and to secure this process, the identification information, in particular the device type, the manufacturer, the serial number or the like, or the device proximity to the commissioning network can be used by man or machine to check the legitimacy of the device 1 ,5,6,8; the latter is achieved by evaluating receive signal levels and used transmission energy.
  • FSK defines a common frequency
  • the antenna electrically connected to the commissioning gateway 1 in this example a WirelessHART gateway, by use of a cable con- nection 2 is enclosed in a radio-shielded tube 4, in particular made of plastic with embedded metal mesh.
  • a radio-shielded tube 4 in particular made of plastic with embedded metal mesh.
  • a secure wireless near-range communication 7 is provided and established which hinders a WirelessHART listener 8 from outside the shielding to retrieve or detect the exchanged or transmitted sensitive information of technical equipment. Therefore, said system and data or information exchange may be treated as being secure.
  • the present invention also comprises any combination of preferred embodiments as well as individual features and developments provided they do not exclude each other.
  • WirelessHART Listener (Device, Adapter, Gateway, Sniffer)

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

La présente invention se rapporte à un système de mise en service et à un procédé pour un échange sécurisé d'informations sensibles en rapport avec un équipement technique, un dispositif de champ en particulier. Le système selon l'invention comprend au moins deux composants et/ou dispositifs, des dispositifs de champ en particulier, qui communiquent d'une manière sans fil, et qui utilisent donc des moyens de communication pour sécuriser la communication sans fil sans qu'il soit nécessaire d'utiliser des couches de protocole supérieures, comme des fonctions d'authentification ou de chiffrement en particulier. L'invention est caractérisée en ce que les moyens de communication fournissent et garantissent une communication en champ proche, en limitant en particulier des signaux de transmission à une zone sécurisée, et en déterminant si un dispositif se trouve, ou non, à l'intérieur d'une certaine zone. Quand le résultat de la détermination est positif, les moyens de communication autorisent la communication ; et quand le résultat de la détermination est négatif, les moyens de communication refusent la communication.
PCT/EP2013/003658 2012-12-20 2013-12-04 Système de mise en service et procédé pour un échange sécurisé d'informations sensibles en vue de la mise en service et de la configuration d'un équipement technique WO2014094983A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
IN1438/KOL/2012 2012-12-20
IN1438KO2012 2012-12-20

Publications (1)

Publication Number Publication Date
WO2014094983A1 true WO2014094983A1 (fr) 2014-06-26

Family

ID=49886862

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/EP2013/003658 WO2014094983A1 (fr) 2012-12-20 2013-12-04 Système de mise en service et procédé pour un échange sécurisé d'informations sensibles en vue de la mise en service et de la configuration d'un équipement technique

Country Status (1)

Country Link
WO (1) WO2014094983A1 (fr)

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2008036961A2 (fr) * 2006-09-22 2008-03-27 Kineto Wireless, Inc. Procédé et appareil pour la gestion des ressources
WO2010124739A1 (fr) * 2009-04-30 2010-11-04 Peertribe Sa Procédé et système de connexion sans fil d'un dispositif mobile à un fournisseur de service par l'intermédiaire d'un noeud d'accès sans fil hébergeur
US20120294443A1 (en) * 2011-05-19 2012-11-22 Suhas Mathur Establishing Secure Links Between Wireless Devices in Proximity Using Ambient Wireless Signals

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2008036961A2 (fr) * 2006-09-22 2008-03-27 Kineto Wireless, Inc. Procédé et appareil pour la gestion des ressources
WO2010124739A1 (fr) * 2009-04-30 2010-11-04 Peertribe Sa Procédé et système de connexion sans fil d'un dispositif mobile à un fournisseur de service par l'intermédiaire d'un noeud d'accès sans fil hébergeur
US20120294443A1 (en) * 2011-05-19 2012-11-22 Suhas Mathur Establishing Secure Links Between Wireless Devices in Proximity Using Ambient Wireless Signals

Similar Documents

Publication Publication Date Title
WO2014094982A1 (fr) Procédé et système de mise en service pour un échange sécurisé d'informations sensibles pour la mise en service et à la configuration d'équipements techniques
RU2518941C2 (ru) Улучшенное обслуживание беспроводных полевых устройств
CN101855854B (zh) 向无线设备安全自动加载密钥的无线网格网络
RU2666495C2 (ru) Передатчик технологического параметра с беспроводным приемопередатчиком с питанием от контура
CN101960888B (zh) 无线设备的连接密钥配置
CN107644154A (zh) 过程工厂中的用户接口设备的双因素认证
CN106888452A (zh) 从计算机向至少一个现场设备无线发送数据的无线加密收发器和方法
Priller et al. Case study: From legacy to connectivity migrating industrial devices into the world of smart services
JP2019517172A (ja) Ｎｆｃ対応無線プロセス通信ゲートウェイ
CN103218876B (zh) 远控智能电能表信息安全管理模块
CN103198574B (zh) 嵌有信息安全管理模块的远控智能水表
CN103078874B (zh) 嵌有信息安全管理模块的远控智能燃气表
CN103152166B (zh) 远控智能水表信息安全管理模块
CN105208554A (zh) 一种实现zigbee终端设备入网的方法、系统和设备
CN106597873A (zh) 用于对自动化设备进行远程维护的方法、装置和系统
WO2014094983A1 (fr) Système de mise en service et procédé pour un échange sécurisé d'informations sensibles en vue de la mise en service et de la configuration d'un équipement technique
CN103259649A (zh) 嵌有信息安全管理模块的远控智能热能表
CN103152175B (zh) 远控智能燃气表信息安全管理模块
Cagalaban et al. Scada network insecurity: Securing critical infrastructures through scada security exploitation
CN203219309U (zh) 嵌有信息安全管理模块的远控智能电能表
CN203104484U (zh) 远控智能燃气表信息安全管理模块
CN104504815A (zh) 嵌有信息安全管理模块的远控智能热能表
Trevisan Automation system of powder-based 3D printer in the Industry 4.0 environment
Andersen Security of Internet of Things Protocol Stacks
Hjalmarsson et al. Wireless remote control of a PLC system

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 13814826

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 13814826

Country of ref document: EP

Kind code of ref document: A1