Industrial File Authentication Using Local FAC for Rapid Code Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Industrial automation systems face challenges in ensuring the integrity of mobile code executed on industrial devices, as unauthorized access can lead to malicious attacks compromising the integrity or behavior of these devices.
Innovation Solution
The implementation of a lightweight file authentication sequence that generates a unique file authentication code (FAC) accessible only via local connections, coupled with hash-based message authentication codes (HMAC) to verify the authenticity of mobile code before execution, preventing unauthorized execution of malicious code.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key infrastructure techniques are used for file authentication, then security is improved, but resource intensity and complexity increase
Solution Approach 1:
The patent extracts the authentication mechanism from complex public key infrastructure and implements a simplified custom protocol using HMAC. This involves removing unnecessary cryptographic complexity while retaining essential security functions through device-specific authentication codes and hash-based verification.
Solution Approach 2:
The patent uses computationally lightweight authentication codes that can be generated and verified efficiently. The HMAC mechanism provides secure authentication without requiring the heavy computational resources of public key cryptography, making it suitable for resource-constrained industrial devices.
2Ease of operation
If FAC is accessible via network ports, then ease of operation is improved, but security is worsened due to unauthorized remote access
Solution Approach 1:
The patent implements different access policies for different communication interfaces. Local ports (USB, serial, memory) allow FAC retrieval for legitimate maintenance, while network ports block FAC access to prevent remote attacks. This spatial differentiation of access rights maintains operational ease for authorized users while securing against unauthorized access.
Solution Approach 2:
The patent uses the communication interface type as an intermediary to control FAC access. By checking the source of FAC retrieval requests and blocking network-based attempts, the system mediates between accessibility needs and security requirements, allowing legitimate local access while preventing remote exploitation.
3Adaptability or versatility
If mobile code execution is allowed for industrial process control, then adaptability is improved, but vulnerability to malicious attacks increases
Solution Approach 1:
The patent performs authentication verification before executing mobile code. By checking HMAC values and validating device-specific authentication codes prior to execution, the system prevents malicious code from running while allowing legitimate adaptive code to execute, thus maintaining flexibility without compromising security.
Solution Approach 2:
The patent implements preliminary security measures by blocking network-based FAC access and verifying code authenticity through HMAC validation before execution. These preemptive actions prevent malicious attacks before they can compromise the system, allowing safe mobile code execution.
Data Source
AI summary
An industrial device is configured to implement a lightweight file authentication sequence that rapidly verifies the integrity of mobile code supplied to the industrial device. The industrial device generates a file authentication code (FAC), which is stored on the industrial device and only made accessible to users via a local connection to the industrial device. The device-specific file FAC is installed on the program development application used to develop or edit the mobile code to be executed on the industrial device. The development application provides the mobile code to the industrial device together with a hash-based message authentication code (HMAC) generated using a retrieved copy of the FAC. The industrial device only permits execution of the mobile code if the HMAC included with the mobile code matches a locally created HMAC generated by the industrial device based on the mobile code and the device's local copy of the FAC.