Controller Mutual Authentication via Certificate Authority
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Controller devices used in industrial settings are susceptible to unauthorized use due to lack of effective security measures, which can lead to unauthorized access and modifications.
Innovation Solution
Implementing a system that uses mutual authentication through a certificate authority (CA) to secure controller devices, allowing only authenticated users to access and modify the controllers, with role-based access to restrict interactions based on user roles.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If mutual authentication through certificate authority is implemented, then security against unauthorized access is improved, but system complexity increases
Solution Approach 1:
The system performs preliminary authentication actions by requiring users to obtain certificates from a certificate authority before accessing the controller. The controller and HMI device exchange authentication information in advance, establishing trusted identities before any control operations occur. This preliminary security setup prevents unauthorized access without requiring complex runtime security decisions.
Solution Approach 2:
The certificate authority acts as an intermediary that issues certificates to both users and the controller, enabling mutual authentication without direct complex verification between them. The HMI device serves as another intermediary by relaying authentication information between the user and controller. These intermediaries simplify the authentication process while maintaining high security standards.
2Reliability
If role-based access control is implemented, then protection against unauthorized modifications is improved, but ease of operation deteriorates
Solution Approach 1:
The system applies different access restrictions to different users based on their roles, rather than applying a uniform security policy to all. Each user certificate contains role information that determines what operations they can perform on the controller. This localized approach to access control provides fine-grained protection while maintaining ease of operation for authorized users with appropriate roles.
Solution Approach 2:
The system implements partial access control by allowing users to perform only the specific operations their role requires, rather than requiring full authentication for every possible operation. This selective approach provides sufficient security protection for critical functions while maintaining operational efficiency for routine tasks within each user's authorized scope.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A system includes a controller (28, 30) and a certificate authority (32, 34). The controller is configured to control a process. The certificate authority (CA) is configured to issue and to revoke certificates, wherein the controller is configured to use the CA to mutually authenticate a user to enter into a secure mode of operation.