Field-bus Subscriber Error-Safety and Security Layering

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Field-bus systems face challenges in combining error control and information security measures, as existing safety and security methods interfere with each other, failing to completely achieve their protective objectives due to differing demands and channel assumptions.

Innovation Solution

Implementing a method where data passes through an error-safety layer followed by an information-security layer for transmission, and vice versa for reception, using separate layers to process safety and security measures independently, with a bipartite information-security layer for encryption and authentication, and disjoint pseudorandom key streams for encryption and decryption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If the error-safety layer entirely disregards the security measures carried out on the field bus, then error-safety processing is simplified, but potential impacts on the quality are not adequately considered in the verification routines

Engineering Contradiction:
Improveerror-safety processing complexityVSAvoidverification routine quality
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent structures the processing sequence so that error-safety measures are applied first to the original data, creating a baseline verification mechanism. Then security measures are applied to the already error-checked data. This preliminary application of error-safety measures ensures that subsequent security processing does not compromise verification quality, while the layered approach keeps each layer's complexity manageable.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10438002B2Field-bus data transmission
Publication Date: 2019.10.08 BECKHOFF AUTOMATION GMBH
  • US10438002B2 patent drawing
  • US10438002B2 patent drawing

AI summary

A communication subscriber for a field-bus system for transmitting data, comprises a safety layer with an error-safety layer protecting the data against random data transmission errors and an information-security layer protecting against manipulation of data and/or against unauthorized reading of data. The communication subscriber is configured during transmission mode to process the data to be transmitted first by means of the error-safety layer and then by means of the information-security layer, and during receipt mode to process the data first by means of the information-security layer and then by means of the error-safety layer.