IoT Gateway Read-Only Database for Substation Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Interfacing IoT systems with existing industrial control systems in electrical substations poses significant security risks due to unauthorized access, as IoT devices are connected to public global networks, potentially leading to data loss and disruptions in critical infrastructure.

Innovation Solution

An electronic controller with a real-time database and a read-only interface is implemented, allowing authorized systems to read data while preventing writing access, thereby securing the industrial control system from unauthorized modifications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If IoT systems are interfaced with industrial control systems to enable remote monitoring and data access, then service capability and data accessibility are improved, but security risk and vulnerability to unauthorized access increase

Engineering Contradiction:

Improveservice capabilityVSAvoidsecurity risk

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

A gateway device is introduced as an intermediary between the additional control system (IoT system) and the industrial control system. The gateway establishes a secure communication channel and enforces access control policies, allowing service capability enhancement while preventing direct unauthorized access to the industrial control system. The gateway acts as a buffer that mediates all interactions between the two systems.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system architecture is segmented into distinct zones: the industrial control system network, the gateway device, and the additional control system network. This segmentation isolates the critical industrial control system from direct exposure to external networks, allowing service expansion while maintaining security boundaries. Each segment operates with appropriate access controls and communication protocols.

Inventive Principle:

Principle #1Segmentation

2Ease of operation

If read-only access is granted to additional control systems for data retrieval, then data accessibility is improved, but system complexity increases due to interface management

Engineering Contradiction:

Improvedata accessibilityVSAvoidinterface complexity

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The gateway device provides multiple functions within a single unified interface: authentication, data routing, access control policy enforcement, and communication protocol translation. This multi-functionality simplifies the overall system architecture compared to implementing separate security mechanisms at each access point, reducing interface complexity while maintaining data accessibility.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS20220137600A1IoT gateway for industrial control systems, associated devices, systems and methods

Publication Date: 2022.05.05 SCHNEIDER ELECTRIC IND SAS

AI summary

An electronic controller for an industrial control system including:a first communication interface configured to be connected to at least one electrical device of an electrical substation,a second communication interface configured to be connected to an additional control and/or monitoring system, anda real-time database configured to store data exchanged with at least one electrical device of the electrical substation.The electronic controller is configured to allow the additional control and/or monitoring system to read data from the database and to prevent the additional control and/or monitoring system from writing into the database.