Industrial Controller Secure Communication via Inverted Client-Server Model
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Industrial controller systems are vulnerable to unauthorized access and malware due to their typical server role in communication protocols, which exposes them to potential attacks when accessed remotely over networks.
Innovation Solution
Reversing the client-server relationship by having the industrial controller system initiate an outgoing communication to establish a bidirectional communication channel during an initialization phase, then switching to a server role in the operation phase, while blocking incoming communications to minimize exposure to unauthorized access or malware.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the industrial controller system operates as a server in communication protocols to enable remote access and data exchange, then the operability and user comfort are enhanced, but the system becomes vulnerable to unauthorized access and malware attacks
Solution Approach 1:
The patent inverts the traditional client-server communication model by having the industrial controller system (typically the server) initiate outgoing connections to communication partners instead of listening for incoming connections. This role reversal during the initialization phase allows the controller to establish trusted communication channels while minimizing exposure to network attacks, as incoming connection attempts are blocked by default.
2Adaptability or versatility
If the industrial controller system accepts incoming communications to maintain standardized protocol compliance, then communication versatility is improved, but the exposure to potential attack vectors increases
Solution Approach 1:
The patent implements preliminary action by establishing all necessary communication channels during an initialization phase before the controller enters its normal operational mode. During initialization, the controller proactively connects to all required communication partners and establishes trusted relationships. Once initialization is complete, the controller blocks incoming connections, ensuring that no new communication endpoints are exposed during operation.
3Productivity
If the industrial controller system maintains open communication endpoints for remote updates and data exchange, then the productivity and efficiency are improved, but the risk of unauthorized access and virus infiltration increases
Solution Approach 1:
The patent segments the communication lifecycle into distinct phases: initialization phase and operational phase. During the initialization phase, the controller actively establishes communication channels with partners for remote updates and data exchange. During the operational phase, these pre-established channels are used exclusively, and all new incoming connection attempts are blocked. This temporal segmentation allows remote maintenance capabilities while eliminating continuous exposure risks.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
A method for establishing a secure communication channel between an industrial controller system and a communication partner unit over a communication link comprises, in an initialization phase, establishing a bidirectional communication channel between the industrial controller system and the communication partner unit, wherein establishing the bidirectional communication channel comprises the industrial controller system initiating an outgoing communication to the communication partner unit over the communication link. In an operation phase subsequent to the initialization phase, the industrial controller system operates as the server when communicating with the communication partner unit employing the established communication channel.