Ethernet Safety Packet Authentication for Industrial Data Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Industrial control systems face challenges in maintaining data integrity due to issues like corruption, repetition, sequence changes, loss, delay, insertion, masquerade, and incorrect addressing, which current Ethernet frame structures struggle to address effectively, particularly in meeting the stringent error probability requirements set by IEC 61508 for safety-critical applications.
Innovation Solution
A communication device and method that generates a safety unique identifier for establishing secure connections between devices, incorporates error detection codes, and uses a structured protocol data unit within Ethernet frames to ensure data integrity, including error detection and authentication mechanisms to maintain a fail-safe state in case of errors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If current Ethernet frame structures are used for data transmission, then device complexity is reduced and ease of operation is maintained, but data integrity and reliability cannot satisfy the stringent error probability requirements (SIL3>=10^-9) of industrial control systems
Solution Approach 1:
The communication protocol is segmented into distinct functional layers: a safety data layer for critical information with enhanced integrity checks, and a standard Ethernet layer for general transport. This segmentation allows SIL3-compliant error detection and authentication mechanisms to be applied selectively to safety-critical data without requiring complete redesign of the entire Ethernet infrastructure, thus improving reliability while controlling complexity.
Solution Approach 2:
Safety unique identifiers and error detection codes are generated and embedded in data packets before transmission. Connection establishment procedures include pre-validation of safety identifiers and authentication credentials. This preliminary action ensures that integrity checks are performed proactively, preventing undetected errors from propagating through the system, thereby achieving high reliability without requiring complex real-time monitoring.
2Reliability
If comprehensive error detection and authentication mechanisms are implemented to satisfy SIL3 requirements, then data integrity is improved, but communication overhead and transmission time increase
Solution Approach 1:
The protocol implements partial error detection by applying comprehensive authentication and error detection codes (such as CRC and safety unique identifiers) only to safety-critical data fields rather than entire data packets. This selective approach provides sufficient error detection capability for industrial control requirements while minimizing the time overhead associated with processing and transmitting redundancy information.
Solution Approach 2:
The error detection parameters are optimized by using compact identifier formats and efficient authentication algorithms that provide SIL3-compliant reliability (error probability >=10^-9) with minimal bit overhead. By carefully selecting and tuning these parameters, the system achieves high error detection capability while keeping communication overhead and transmission time within acceptable limits for real-time industrial control applications.
3Reliability
If safety unique identifiers are generated and verified for each connection, then protection against masquerade and incorrect addressing is improved, but processing time and computational load increase
Solution Approach 1:
Safety unique identifiers are generated as compact digital representations of device identities and connection credentials. These identifier copies can be quickly transmitted and verified without requiring complex authentication handshakes, thus providing strong protection against masquerade and incorrect addressing while maintaining fast connection establishment speeds suitable for real-time industrial control systems.
Data Source
Figure 1
Figure 2
Figure 3~5
AI summary
A method for a first communication device transmitting data to a second communication device, according to one embodiment of the present invention, comprises the steps of: the first communication device generating a safety unique identifier by using a unique identifier of the first communication device and a unique identifier of the second communication device, in order to confirm the validity of connection between the first communication device and the second communication device; the first communication device calculating a data error detection code for detecting an error by using the safety unique identifier and the data; the first communication device generating a packet comprising the data and the data error detection code; and the first communication device transmitting the packet to the second communication device.