Industrial Controller Secure Communication via Inverted Client-Server Model

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Industrial controller systems are vulnerable to unauthorized access and malware due to their typical server role in communication protocols, which exposes them to potential attacks when accessed remotely over networks.

Innovation Solution

Reversing the client-server relationship by having the industrial controller system initiate an outgoing communication to establish a bidirectional communication channel during an initialization phase, then switching to a server role in the operation phase, while blocking incoming communications to minimize exposure to unauthorized access or malware.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the industrial controller system operates as a server in communication protocols to enable remote access and data exchange, then the operability and user comfort are enhanced, but the system becomes vulnerable to unauthorized access and malware attacks

Engineering Contradiction:
Improveremote access capabilityVSAvoidvulnerability to unauthorized access and malware
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent inverts the traditional client-server communication model by having the industrial controller system (typically the server) initiate outgoing connections to communication partners instead of listening for incoming connections. This role reversal during the initialization phase allows the controller to establish trusted communication channels while minimizing exposure to network attacks, as incoming connection attempts are blocked by default.

Inventive Principle:
Principle #13The other way round (Inversion)

2Adaptability or versatility

If the industrial controller system accepts incoming communications to maintain standardized protocol compliance, then communication versatility is improved, but the exposure to potential attack vectors increases

Engineering Contradiction:
Improvecommunication protocol compatibilityVSAvoidattack surface
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements preliminary action by establishing all necessary communication channels during an initialization phase before the controller enters its normal operational mode. During initialization, the controller proactively connects to all required communication partners and establishes trusted relationships. Once initialization is complete, the controller blocks incoming connections, ensuring that no new communication endpoints are exposed during operation.

Inventive Principle:
Principle #10Preliminary action

3Productivity

If the industrial controller system maintains open communication endpoints for remote updates and data exchange, then the productivity and efficiency are improved, but the risk of unauthorized access and virus infiltration increases

Engineering Contradiction:
Improveremote maintenance capabilityVSAvoidsystem security
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent segments the communication lifecycle into distinct phases: initialization phase and operational phase. During the initialization phase, the controller actively establishes communication channels with partners for remote updates and data exchange. During the operational phase, these pre-established channels are used exclusively, and all new incoming connection attempts are blocked. This temporal segmentation allows remote maintenance capabilities while eliminating continuous exposure risks.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentEP3598713B1Establishing a secure communication in an industrial control environment
Publication Date: 2023.06.07 CODESYS HLDG GMBH
  • EP3598713B1 patent drawingFigure 1
  • EP3598713B1 patent drawingFigure 2~3
  • EP3598713B1 patent drawingFigure 4

AI summary

A method for establishing a secure communication channel between an industrial controller system and a communication partner unit over a communication link comprises, in an initialization phase, establishing a bidirectional communication channel between the industrial controller system and the communication partner unit, wherein establishing the bidirectional communication channel comprises the industrial controller system initiating an outgoing communication to the communication partner unit over the communication link. In an operation phase subsequent to the initialization phase, the industrial controller system operates as the server when communicating with the communication partner unit employing the established communication channel.