Industrial Controller Dynamic Mode Switching for Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Industrial control systems face challenges in securing operations against unauthorized access and execution of unauthorized instructions, as they often operate in open modes without adequate security restrictions, leading to risks of malicious interventions.

Innovation Solution

The system and method enable an industrial controller to transition from an open mode to a secure mode by applying gradual security restrictions, including disabling unauthenticated network protocols, acquiring security certificates, and using whitelisting to verify executable files, ensuring only authenticated and authorized communications and executions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the industrial controller operates in an open mode to enable easy configuration and instruction loading, then the ease of operation is improved, but the security against unauthorized access deteriorates

Engineering Contradiction:

Improveease of configurationVSAvoidunauthorized access

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The industrial controller dynamically switches between open mode and secure mode based on operational requirements. In open mode, unauthenticated network connections are permitted for ease of configuration and instruction loading. In secure mode, only authenticated connections are accepted, preventing unauthorized access. This dynamic mode transition resolves the contradiction by allowing both easy operation and security at different times as needed.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system changes the authentication parameter of network connections based on the operational mode. In open mode, the authentication requirement is relaxed or removed to facilitate easy configuration. In secure mode, strict authentication is enforced to prevent unauthorized access. This parameter change allows the system to adapt security levels to match operational contexts.

Inventive Principle:

Principle #35Parameter changes

2Ease of operation

If the industrial controller accepts instructions via unauthenticated network connections, then the ease of operation is improved, but the reliability against malicious interventions deteriorates

Engineering Contradiction:

Improveease of instruction loadingVSAvoidprotection against malicious interventions

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The controller dynamically adjusts its acceptance of unauthenticated instructions based on operational context. During initial setup or maintenance phases, unauthenticated instruction loading is permitted for ease of operation. During normal operational phases, the controller requires authenticated connections, ensuring reliability against malicious interventions. This dynamic behavior resolves the contradiction between ease of operation and reliability.

Inventive Principle:

Principle #15Dynamics

3Object-affected harmful factors

If the industrial controller implements strict security authentication, then the security is improved, but the ease of operation deteriorates

Engineering Contradiction:

Improvesecurity protectionVSAvoidease of configuration

Core Design Contradiction:

Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The system implements dynamic security where authentication requirements are adjusted based on the operational mode. In secure mode, strict authentication is enforced to provide security protection. In open mode, authentication requirements are relaxed or removed to facilitate easy configuration and instruction loading. This dynamic approach resolves the contradiction by applying strict security only when necessary.

Inventive Principle:

Principle #15Dynamics

4Reliability

If the industrial controller verifies executable files before execution, then the reliability is improved, but the productivity deteriorates due to additional verification time

Engineering Contradiction:

Improveverification of executable filesVSAvoidexecution speed

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The industrial controller performs preliminary verification of executable files during the instruction loading phase, before execution is required. By verifying the authenticity and integrity of executable files in advance (when the system is in open mode or during maintenance windows), the controller ensures reliability without delaying critical execution operations. This preliminary action resolves the contradiction between reliability and productivity.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentEP2660669B1Systems and methods for secure operation of an industrial controller

Publication Date: 2019.11.20 GENERAL ELECTRIC CO

Figure 1
Figure 2
Figure 3~4

AI summary

A system includes an industrial controller 12 having a memory 34 and a processor 36 configured to operate the industrial controller 12 in an open mode, wherein the open mode is configured to enable the industrial controller 12 to receive instructions via unauthenticated network connection or a local connection. The processor 36 of the industrial controller 24 is further configured to operate the industrial controller in a secure mode, wherein the secure mode is configured to enable the industrial controller 12 to receive instructions only via an authenticated network connection.