Control Network Management System with Packet Priority and Hash Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing control network management systems face challenges in ensuring the security and priority of process control wireless communications, particularly when coexisting with Wi-Fi communications, as they are vulnerable to tampering by malicious third parties, which can disrupt the real-time responsiveness required for process control signals.

Innovation Solution

A control network management system that employs a first repeater to write priority information in the header of process control wireless communication packets and add a hash value, a second repeater to zero-clear or change priority information in Wi-Fi communication packets, and a third repeater to apply priority control based on the received information, ensuring secure and prioritized transmission of communication packets.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of time

If priority control is applied to process control wireless communication to ensure high real-time responsiveness, then the real-time responsiveness is improved, but the system becomes vulnerable to tampering by malicious third parties

Engineering Contradiction:
Improvereal-time responsivenessVSAvoidsecurity against tampering
Core Design Contradiction:
Loss of timeVSReliability

Solution Approach 1:

The patent applies preliminary action by pre-calculating and attaching hash values to communication packets before transmission. The repeater performs hash calculation on the header of each packet in advance, and the control device verifies the hash value upon receipt, preventing tampering before it can occur during transmission.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent uses hash values as an intermediary mechanism to verify packet integrity. The hash value acts as a digital fingerprint that mediates between the transmitted packet and the verification process, allowing the control device to detect any tampering without directly examining the entire packet content.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If process control wireless communication and Wi-Fi communication coexist in the same network, then network versatility is improved, but communication security and priority control become compromised

Engineering Contradiction:
Improvenetwork compatibilityVSAvoidcommunication security
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent applies local quality by implementing different handling mechanisms for different communication types. The repeater identifies process control packets versus Wi-Fi packets and applies specific security measures (hash calculation) only to process control packets, while allowing Wi-Fi packets to pass through with standard handling.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent segments the network traffic into different categories (process control communication and Wi-Fi communication) and applies different security protocols to each segment. This allows secure priority control for process control packets while maintaining compatibility with standard Wi-Fi traffic.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS9331949B2Control network management system
Publication Date: 2016.05.03 YOKOGAWA ELECTRIC CORP
  • US9331949B2 patent drawing
  • US9331949B2 patent drawing
  • US9331949B2 patent drawing

AI summary

A control network management system for relaying first and second wireless communications comprises a first repeater having a packet control means for writing priority information in a header of communication packet data of the first wireless communication, as received and transmitting the communication packet data with a hash value of the header, added thereto, a second repeater having a packet control means for zero-clearing priority information in a header of communication packet data of the second wireless communication, as received, or changing the priority information to a predetermined value before transmitting the communication packet data with a hash value of the header, added thereto, and a third repeater having a priority control means for applying priority control to the header of the communication packet data received from the first repeater or the second repeater, on the basis of priority information, thereby transmitting the communication packet data to a control system.