NCS Configuration Monitoring for Tamper Detection and Isolation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Networked Control Systems (NCSs) face malfunctions due to discrepancies in configuration information between sensors, actuators, and controllers, which can lead to system failures, and existing methods lack efficient automated detection and response mechanisms for tampering.

Innovation Solution

A configuration management device within the NCS, connected to sensors, actuators, and a control manager, compares received configuration data with reference data to detect discrepancies, sending tamper detection signals to suspend or switch to redundant components, thereby isolating tampered components and ensuring system integrity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If manual monitoring of configuration information is used, then system complexity is reduced, but detection precision and response time to tampering deteriorate

Engineering Contradiction:
Improvedetection precisionVSAvoidsystem complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The system performs self-diagnosis by automatically comparing its own configuration information against stored reference data, eliminating the need for external manual monitoring while maintaining high detection precision

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The configuration management device continuously monitors configuration information from sensors and actuators, compares it with reference data, and provides feedback signals to the control manager when discrepancies are detected, enabling automatic tampering detection

Inventive Principle:
Principle #23Feedback

2Reliability

If automated tamper detection is implemented, then reliability is improved, but device complexity increases

Engineering Contradiction:
Improvesystem reliabilityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

A dedicated configuration management device is introduced as an intermediary component that handles the complexity of automated configuration monitoring and comparison, isolating this functionality from the main control manager and sensors/actuators

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system is divided into distinct functional modules: sensors/actuators that generate configuration information, a configuration management device that monitors and compares this information, and a control manager that receives alerts, allowing each component to focus on its specific function

Inventive Principle:
Principle #1Segmentation

3Reliability

If continuous monitoring of configuration data is performed, then operational reliability is improved, but use of energy increases

Engineering Contradiction:
Improveoperational reliabilityVSAvoiduse of energy
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The configuration management device performs periodic monitoring and comparison of configuration information at scheduled intervals rather than continuously, reducing energy consumption while maintaining system reliability through regular checks

Inventive Principle:
Principle #19Periodic action

Data Source

PatentUS10922412B2Automatic tampering detection in networked control systems
Publication Date: 2021.02.16 THE BOEING CO
  • US10922412B2 patent drawing
  • US10922412B2 patent drawing
  • US10922412B2 patent drawing

AI summary

A configuration manager is associated with a Networked Control System (NCS) comprising a plurality of sensors and actuators. The configuration manager automatically discovers the hardware and/or software configurations of the sensors and actuators, and analyzes that information in order to detect whether any of the sensors and actuators have been tampered with. Provided the configuration manager detects such tampering, the configuration manager indicates the tampering to a control manager of the NCS, which then functions to minimize potential damage to the NCS.