Field Device Authentication Telegram Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current field devices in automation technology lack effective authentication methods to prevent unauthorized tampering and ensure the integrity of information transmitted, allowing unauthorized 'fake' devices to go undetected and failing to detect errors from erroneous or deliberate parameter changes.
Innovation Solution
A method for authenticating field devices using a telegram with a first data field containing device status and parameter information, and a second data field with cryptographic security data, verified by a destination device using asymmetric or symmetric cryptographic methods, including checksums or message-authentication codes, to ensure authenticity and integrity, and detect potential replay attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic authentication methods are implemented in field devices, then security and reliability are improved, but device complexity increases
Solution Approach 1:
The authentication data is segmented into two separate fields: a first data field containing device status and parameter information, and a second data field containing cryptographic security data (checksum or message-authentication code). This segmentation allows the authentication function to be implemented without overwhelming the device's processing capabilities, as each field can be handled independently with appropriate computational requirements.
Solution Approach 2:
A destination device serves as an intermediary that performs the cryptographic verification of the authentication data. The field device generates and transmits the authentication information, but the actual verification burden is shifted to the destination device, which has greater computational resources. This mediator approach allows simple field devices to participate in secure authentication without requiring them to perform complex cryptographic operations.
2Reliability
If security verification is performed on transmitted data, then protection against unauthorized tampering is improved, but processing time increases
Solution Approach 1:
The cryptographic security data (checksum or message-authentication code) is calculated and attached to the telegram in advance, during the data preparation phase, before transmission begins. This preliminary calculation allows the verification process at the destination device to proceed efficiently without requiring complex real-time computations during data reception, thereby minimizing the time loss associated with verification.
3Loss of information
If detailed device status information is transmitted, then monitoring capability is improved, but data transmission volume increases
Solution Approach 1:
Instead of transmitting all possible device information, the system extracts and transmits only the specific status information and parameters that are relevant for authentication and monitoring purposes. The telegram is structured to include only essential data elements in the first data field, with the cryptographic verification data in the second field, thereby maintaining information completeness for security purposes while minimizing unnecessary data transmission volume.
Data Source
AI summary
The present disclosure includes a method for authenticating a field device of automation technology with respect to a destination device. A telegram is created by the field device, which telegram includes a first data field and at least a second data field. The first data field includes information on the status of the field device and/or of the device components of the field device and/or information on the device parameterization/configuration, and a sequence counter or a time stamp. Security data are generated from the first data field via a cryptographic method, which security data are stored in the second data field. The telegram is transmitted from the field device to the destination device, wherein the destination device verifies the second data field as to authenticity or integrity upon receipt of the telegram, and wherein a first alarm is generated if the authenticity or the integrity of the second data field is not successfully verified.