WO2019193557A1

WO2019193557A1 - Device and method for securement and transfer of data on industrial parameters between an industrial network to be secured and a target

Info

Publication number: WO2019193557A1
Application number: PCT/IB2019/052802
Authority: WO
Inventors: Aurélien HANNOTEAUX
Original assignee: Braincube
Priority date: 2018-04-05
Filing date: 2019-04-05
Publication date: 2019-10-10
Also published as: FR3079948A1; FR3079948B1

Abstract

The invention relates to a computer component for securement and unidirectional transfer (1) of data for transferring data from a source industrial network (10) to be secured against intrusions to a target network (20), comprising: an interface (2) for receiving data from the source network (10); an emulator module (3) for creating a unidirectional emulated gateway allowing the isolation of the source network from the target network; an intermediate storage base (5) for intermediate storage of the data to be transferred; a snapshot-taking module (4); a transfer module (7) that can be connected to the target network (20); and a snapshot storage base (6) provided in the transfer module (7); the source network (10) being isolated from the target network (20) by the emulated gateway and by the snapshot storage base (6).

Description

Device and method for securing and transferring industrial parameter data between an industrial network to be secured and a target

TECHNICAL FIELD OF THE INVENTION

The present invention relates to a device for securing and transferring data for transferring data from a source industrial network to secure against intrusions to a target network. The invention also relates to a corresponding method of securing and transferring data.

STATE OF THE PRIOR ART

[0002] For almost two decades, computer systems and networks of industrial companies have increasingly been linked to communication, exchange and data sharing networks. The largest network, the Internet, today makes it possible to link the essential of existing systems and networks. The efficiency and productivity gains inherent in this connectivity are considerable. However, some disadvantages remain unresolved. In addition, we observe in recent years massive cyber attacks increasingly destructive and devastating, which can lead to downtime, breakdowns, losses or contamination of production data, etc. The risks and inconveniences associated with a global connection are now considered by some manufacturers as outweighing the benefits. Therefore, to avoid or circumvent the risks of intrusion or attacks, some manufacturers choose to "disconnect" a factory or one or more production entities from any external network.

[0003] Thus, in order to reduce the risk of intrusion, certain industrial networks operate autonomously, without permanent connection with other networks, in particular global networks such as the Internet or even third-party systems or machines. likely to provide bridges for intruders to enter the network. There are, however, regular needs for a disconnected network to send data or data files to a target source for processing, analysis, diagnostics, and so on. The document FR3010202 discloses protection means for detecting anomalies in a computer system deployed in an industrial infrastructure. The industrial infrastructure includes functional elements to implement processes. For this, one collects behavior information relating to the state and the behavior of the functional elements as well as system information relating to the computer system. Then a reference state, from a list of previously defined states, is determined from the behavior information. A deviation is identified between, on the one hand, the behavior information and the collected system information, and on the other hand behavior reference information and system reference information associated with the reference state. The means described make it possible to detect problems inherent to the industrial process. However, these means do not detect a possible security breach, and do not improve the level of protection of the system.

The document FR3030832 describes a computer security component (CS) intended to be connected to a computer entity (SI) comprising a communication interface (Eth; USB) with at least one computer management system (SIEM). It comprises in particular: a secure memory space, state data storage of the computer entity, intended to be communicated from the communication interface, and a secure memory access access module to check any write command from the communication interface. The objective of this component is to monitor the integrity of an industrial network, by enabling an analysis of its security parameters. The component allows the writing of only a certain type of data, including data related to network security, for analysis purposes. The component allows a remote computer to receive only those same types of data. The component described does not make it possible to carry out a transfer of data of all kinds to a target network. This component is not in itself a system for transferring data, but rather for controlling and monitoring the integrity of the industrial network to which it is connected.

There is therefore a need for a data transfer means that is completely reliable and secure. The highest levels of security and reliability are sought after because the industrial and economic consequences of a fraudulent attack can be considerable.

To overcome these disadvantages, the invention provides different technical means.

SUMMARY OF THE INVENTION

First, a first object of the invention is to allow the sending of data from a source industrial network to a target network for using the data of the industrial network while ensuring the security of the source network.

Another object of the invention is to allow the sending of data from a source industrial network to a target network for using the data of the industrial network while protecting the source network against possible intrusions from the target network.

To do this, the invention provides a computer component for securing and unidirectional transfer of parameter data of an industrial process (or manufacturing data of a product obtained by implementing an industrial process). a source industrial network to be secured against intrusions, said source industrial network used to implement said industrial process, for transferring data to a target computer entity, preferably a target network, to allow processing by the target network of said industrial process parameter data, said component comprising:

a microprocessor;

an interface for receiving data of industrial process parameters from the source network;

a read / write intermediate storage base from the source industrial network;

a database for storing snapshots, accessible only in writing by the anti-intrusion interface;

an anti-intrusion interface, designed to protect the source industrial network against sending data or computer program from the target network to network through said component, said anti-intrusion interface comprising:

an emulator module, for creating a unidirectional emulated gateway making it possible to isolate the source network of the target entity;

a module for taking snapshots and copies, making it possible on the one hand to capture at least one structural descriptive state of the data to be transferred stored in the intermediate memory and, on the other hand, to copy the elements captured by the image of the intermediate base, to the snapshot storage base;

a transfer module, able to connect the snapshot storage base with the target entity;

the source network being isolated from the target network entity by the emulated gateway, protecting said source network against any possible intrusion attempt from the target entity.

The reception interface is preferably USB type. In addition, the source network is bound only to the staging database, while the target entity is bound only to the snapshot storage base. Only the snapshot and copy module has access to both databases at once, but it has only limited read access to the intermediate database (because it accesses it using the image), and does not accesses the contents of the snapshot database (accessible to the source network) only in writing (no reading is made on it by the snapshot and copy module).

The computer component allows the transfer of data from the source network to the target network. It also makes it possible, thanks to the anti-intrusion interface, to prevent any communication or any attempted intrusion in the opposite direction, that is to say from the target network to the source industrial network. This unidirectional mode of communication with double protection stage allows a very high level of security of the industrial network, machines and processes in progress. The device operates autonomously and does not require configuration, eliminating the risk of configuration errors that can create security vulnerabilities. According to an advantageous embodiment, the anti-intrusion interface comprises an instantaneous image storage base provided in the transfer module.

According to another advantageous embodiment, the emulator module is designed to emulate a USB mass storage gateway ("USB mass storage").

The use of a USB mass storage protocol provides a unidirectional exchange mode for isolating the source network and preventing any sending of data to this network.

The invention also provides a method for securing and unidirectional transfer of parameter data of an industrial process of a source industrial network to secure against intrusions using an anti-intrusion interface, said network industrial source for carrying out said industrial process, said method being provided for transferring said parameter data to a target computer entity, preferably a target network, to enable the target network to process said industrial process parameter data said method comprising the steps of:

an emulator module of the anti-intrusion interface creates a unidirectional emulated gateway allowing the filing of files from said source network to an intermediate storage base, said unidirectional gateway preventing access to said source network from a target network;

a reception interface receives data to be transferred from the source network and stores them in an intermediate storage base;

a module for taking snapshots and copying of the anti-intrusion interface takes at least one snapshot providing a structural descriptive state of the data to be transferred from the intermediate storage base;

-said snapshot and copy module uses the previously created image to read-only access to the staging database and copies the contents to the snapshot storage base where it only accesses the snapshot database. writing;

a transfer module of the anti-intrusion interface, when linked to the target network, allows the transfer of data from the storage base of the snapshots to the target network while blocking any possible attempts to communicate to the source network as well as possible writes based on storing snapshots from the target network;

the target network receives a copy of the industrial process parameter data of the source network, in particular in order to perform a processing of said industrial process parameter data.

In case of writing by a third party in the snapshot storage base, these writes are not read by the source network that has access, neither read nor write to the snapshot storage base. In addition, during a possible subsequent cycle of writing new parameter data to be transferred, the new snapshot data overwrites the data written by the third party by updating said snapshot data.

According to an advantageous embodiment, the snapshot data is stored in a snapshot storage base provided in a transfer module.

According to yet another advantageous embodiment, the transfer of the data from the storage base to the target network is performed substantially simultaneously with the sending of the snapshot data of the snapshot storage base.

Alternatively, the transfer of data from the intermediate storage base to the snapshot storage base, and then to the target network is performed after constituting snapshots.

DESCRIPTION OF THE FIGURES

All the details of implementation are given in the description which follows, supplemented by FIGS. 1 and 2, presented solely for purposes of non-limiting examples, and in which:

FIG. 1 is a schematic representation of an example of a unidirectional data transfer device for transferring data from a source industrial network to secure against intrusions to a target network; FIG. 2 is a functional flow diagram of an exemplary unidirectional data transfer method between a source industrial network to be secured against intrusions to a target network.

DETAILED DESCRIPTION OF THE INVENTION

TRANSFER COMPUTING COMPONENT

FIG. 1 illustrates an exemplary embodiment of a computer component 1 for securing (or anti-intrusion) and data transfer designed to transfer data from a source network 10, preferably an industrial network to a target network. And on the other hand to secure the same source industrial network 10 against any intrusion from the target network 20, or a third party using the target network as an intermediary.

The source industrial network 10 uses and processes a very large volume of parametric data in relation to products or composition to be manufactured. The data relate to the products or components themselves, the machines used in the industrial process, the parameters to control, measure or monitor the evolution of the process, as well as the physical environmental parameters related to the process and / or the industrial installation. It is therefore a very large volume of data, often involving several hundred or thousands of parameters, followed over long periods, and thus generating volumes that may exceed several terabytes.

For various reasons, it is often useful to transfer these data to an external network, to enable various treatments, analyzes or diagnostics, or others.

However, to ensure the safety and durability of the industrial network, connected machines and processes in progress, it is often useful to isolate the network from any other network or system. In order to carry out the aforementioned treatments or diagnostics, it is important to be able to provide a gateway for transferring the production data to a target network intended for data processing, without presenting a security risk. of the industrial entity. As illustrated, the component 1 comprises a reception interface 2 of the data from the source network 10. This interface makes it possible to receive the data of the source network 10 to be sent to the target network 20 when a communication is established with the source network 10 via a connection 8.

The device comprises an intermediate storage base 5 intended to contain the data to be transferred from the source network 10 before they are transferred to the target network 20.

The device comprises an anti-intrusion interface 9, itself comprising an emulator module 3. This module is designed to emulate a unidirectional gateway. The emulated gateway is advantageously a USB mass storage gateway. Such a gateway is designed on the one hand to store the data or files from the source network 10 in the intermediate storage base 5, and on the other hand to protect the source network 10 against any attempt to intrude from the network target.

A snapshot taking and data copying module 4, also provided in the anti-intrusion interface 9, makes it possible to capture, at least one descriptive state of the data to be transferred stored in the intermediate memory 5.

The anti-intrusion interface 9 finally includes a transfer module 7, which may be in connection with the target network 20. This module has a base 6 for storing snapshots. The snapshot data can thus easily be received by the target network 20, via a connection 12.

The computer component 1, and more particularly the anti-intrusion interface 9, as designed, provide a double layer of protection against intrusions. A first level comes from the emulated gateway, which is by unidirectional design. The second level comes from the snapshot storage base 6, provided in the transfer module 7. This arrangement also provides unidirectional operation, the snapshots being generated and immediately stored in the memory module 6. This process is intrinsically unidirectional.

This architecture allows the component 1 to capture data from the source network continuously if necessary. The successive snapshots generated during the evolution of intermediate data storage make it possible to know the state and the structure of the accumulated data. According to an advantageous embodiment, the snapshots are generated regularly, for example whenever a storage of a file is completed. The data still being recorded is then absent from the snapshot directories and is not available for transfer to the target.

METHOD OF SECURING (OR ANTI-INTRUSION) AND TRANSFER

FIG. 2 is a functional flow diagram of an exemplary method of securing and transferring. The data concerned are production parameter data or manufacturing of an industrial process in connection with the source industrial network 10. The method firstly makes it possible to secure the source industrial network against any attempted intrusion.

The method also makes it possible to send the industrial parameter data to a target computer entity, preferably a target network 20. The target network can thus process or analyze the received data. For example, they may be analyzes to identify a qualitative problem with production, to optimize yield, or whatever.

In this example of implementation, the method comprises the following steps. In the first step, corresponding to the reference numeral 30, an emulator module 3 creates a unidirectional emulated gateway. This gateway allows data or files from the source network 10 to be temporarily stored in an intermediate storage base 5. The gateway also has the function of preventing access to said source network from a target network 20 . In step 31, a connection is established between the source network 10 and the computer component 1 via a connection 8. A receiving module 2 can thus in step 32 receive the data to be transferred. from the source network 10 and store them in an intermediate storage base.

In step 33 a trigger (or "timer") generates a signal to the module 4 taking snapshot and copy so that it takes one or more snapshots of data from the intermediate base, providing a state and a structural description of the data of the intermediate storage base. Said snapshot module 4 and copy uses the image created previously to read-only access to the staging database and copies the contents to the snapshot storage base 6 where it only accesses writing.

The transfer module 7, when in connection with the target network 20, allows the transfer of data from the snapshot database while blocking any possible attempt of communication or intrusion to the source network 10.

The actual transfer of data from the intermediate storage base 5 can be carried out for example at each snapshot (step 35) or for example at the request of the target network 20. Steps 36 and 37 allow this example of implementing by providing a copy of the snapshot data at the transfer module (step 36) and providing the target network 20 with data to be transferred and snapshot data (step 37).

Step 38 provides a test to determine if other data should be transferred or not after a transfer has been made. If this is the case (step 39), the process continues in step 32 of receiving the new data of the source network. In the case where there is no more data to transfer (step 40), the process ends. Reference numbers used in the figures

Claims

1. Computer component (1) for securing and unidirectional transfer of parameter data of an industrial process of a source industrial network (10) to be secured against intrusions, said source industrial network (10) serving to implement said industrial process, for transferring data to a target computer entity, preferably a target network (20), to enable the target network to process said industrial process parameter data, said component comprising:

a microprocessor (11);

an interface (2) for receiving industrial process parameter data from the source network (10);

an intermediate storage base (5) accessible read / write from the source industrial network (10);

a snapshot storage base (6) accessible only in writing by the anti-intrusion interface (9);

an anti-intrusion interface (9), designed to protect the source industrial network (10) against any sending of data or computer program from the target network (20) to this network through said component, said anti-intrusion interface (9) ) including;

an emulator module (3) for creating a unidirectional emulated gateway for isolating the source network of the target entity (20);

a module for taking snapshots (4) and copying, making it possible on the one hand to capture at least one structural descriptive state of the data to be transferred stored in the intermediate memory (5) and, on the other hand, to copy the elements captured by the image of the intermediate base to the snapshot storage base (6);

a transfer module (7) capable of connecting the snapshot storage base (6) with the target entity (20);

the source network (10) being isolated from the target network entity (20) by the emulated gateway, protecting said source network (10) against any possible intrusion attempt from the target entity (20).

2. computer component (1) according to claim 1, wherein the anti-intrusion interface comprises a storage base (6) of the snapshots, provided in the transfer module (7).

The computer component (1) according to any one of claims 1 or 2, wherein the emulator module (3) is adapted to emulate a USB mass storage gateway.

4. A method for securing and unidirectional transfer of parameter data of an industrial process of a source industrial network (10) to secure against intrusions by means of an anti-intrusion interface (9), said industrial network source (10) for carrying out said industrial process, said method being provided for transferring said parameter data to a target computing entity, preferably a target network (20), to allow the target network to process said data process parameters, said method comprising the steps of:

an emulator module (3) of the anti-intrusion interface (9) creates a unidirectional emulated gateway allowing the filing of files from said source network (10) to an intermediate storage base (5), said unidirectional gateway preventing accessing said source network from a target network (20);

a reception interface (2) receives data to be transferred from the source network (10) and stores them in an intermediate storage base (5);

a module for taking snapshots (4) and copying the anti-intrusion interface (9) takes at least one snapshot providing a structural descriptive state of the data to be transferred from the intermediate storage base (5);

-said snapshot (4) and copy module uses the previously created image to read-only access to the staging database, and copies the contents to the snapshot storage base (6) where it only accesses writing;

a transfer module (7) of the anti-intrusion interface (9), when linked to the target network (20), allows the transfer of the data from the storage base of the snapshots (6) to the target network (20) while blocking any possible attempts to communicate to the source network (10) as well as possible writes to the snapshot storage base (6) from the target network; the target network (20) receives a copy of the industrial process parameter data of the source network, in particular in order to carry out a processing of said industrial process parameter data.

The method of securing and transferring of claim 4, wherein the snapshot data is stored in an instantaneous image storage base (6) provided in a transfer module (7).

The method of securing and transferring according to one of claims 4 or 5, wherein the transfer of data from the storage base (5) to the target network is performed substantially simultaneously with the sending of the instantaneous image data of the base (6) of snapshot data.

Unidirectional transfer method according to one of claims 4 or 5, wherein the transfer of data from the intermediate storage base (5) to the snapshot storage base, then to the target network is performed after constitution of instant images.