Firewall for Road Finisher Network Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing complexity of computer systems in road finishers and feeder vehicles poses a risk to system safety due to the potential for networked functions and components to be compromised by external data access, leading to vulnerabilities in safety-critical operations.
Innovation Solution
Implementing a firewall with its own processor and operating system to separate internal and external network areas, ensuring that only filtered data from the external network can access the internal network, thereby protecting safety-critical functions and components from external threats.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a network is implemented to coordinate computerized elements in road finishers and feeder vehicles, then communication reliability and standardization are improved, but system safety deteriorates due to potential external data access threats
Solution Approach 1:
The network system is segmented into an internal network area for safety-critical functions and an external network area for non-critical communications. The firewall divides the network into separate segments, allowing reliable communication within each segment while preventing harmful external data from reaching critical systems.
Solution Approach 2:
A firewall acts as an intermediary device between the external and internal network areas. It monitors and filters data communication, allowing legitimate traffic while blocking malicious external data access attempts, thus maintaining both communication reliability and system safety.
2Extent of automation
If computer systems are increasingly complex with multiple networked functions, then automation and digitalization capabilities are improved, but system safety deteriorates due to increased vulnerability to external threats
Solution Approach 1:
The complex computer system is segmented into distinct network areas with different security requirements. Safety-critical automated functions operate in the isolated internal network area, while non-critical functions interface with external networks, reducing overall vulnerability despite high automation levels.
Solution Approach 2:
The firewall serves as a protective intermediary that enables automated systems to communicate with external networks while filtering out threats. This allows the road finisher and feeder vehicle to maintain advanced automation capabilities without proportionally increasing vulnerability to external threats.
3Adaptability or versatility
If external network access is allowed for data communication functions, then data communication capability is improved, but system safety deteriorates due to potential compromise of safety-critical operations
Solution Approach 1:
The system is segmented into an external network area that handles diverse data communication tasks and an internal network area that protects safety-critical operations. This segmentation allows versatile external communication while maintaining reliable safety-critical functions through physical and logical isolation.
Solution Approach 2:
The firewall acts as a security intermediary that enables adaptable data communication with external networks while enforcing strict access controls. It allows legitimate data exchange for non-critical functions while preventing any compromise of safety-critical operations in the internal network area.
Data Source
AI summary
A construction vehicle may be a road finisher or a feeder vehicle for a road finisher. The construction vehicle comprises an internal network area of the construction vehicle, which comprises a computing unit for controlling an operation of the construction vehicle, and an external network area of the construction vehicle, which is in data communication connection with the internal network area. A firewall is configured to monitor data communication from the external network area of the construction vehicle to the internal network area of the construction vehicle, wherein the firewall has its own processor and operating system.