Plant Control Zoning for Cyberattack Isolation and Containment

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional plant control systems, despite their isolated network structure, are vulnerable to cyberattacks due to the increasing use of low-cost general-purpose devices that are more susceptible to external threats, posing a risk of widespread damage when compromised.

Innovation Solution

A plant management method and device that acquire correlation information between components to identify potential impacts of a cyberattack, zone components based on this information, and implement manual control and isolation strategies to contain and mitigate damage, using a plant design device that generates fault trees and learns algorithms for early detection and countermeasure presentation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If general-purpose devices are used in plants, then cost is reduced and adaptability is improved, but vulnerability to cyberattacks increases

Engineering Contradiction:

ImproveadaptabilityVSAvoidvulnerability to cyberattacks

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies segmentation by dividing the plant control system into multiple isolated zones based on correlation information. When a cyberattack is detected in one zone, only that specific zone is isolated from the external network, while other zones continue to operate normally. This segmented isolation approach prevents complete system shutdown while maintaining security, resolving the contradiction between using general-purpose devices and protecting against cyberattacks.

Inventive Principle:

Principle #1Segmentation

2Reliability

If components are isolated to prevent cyberattack spread, then security is improved, but system complexity increases

Engineering Contradiction:

ImprovesecurityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements preliminary action by pre-calculating and storing correlation information that maps relationships between plant components before any cyberattack occurs. This correlation information is used to determine optimal isolation strategies in advance. When a cyberattack is detected, the system can immediately execute the pre-determined isolation strategy without complex real-time calculations, thereby improving security response while minimizing the increase in system complexity.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If manual control is implemented to contain damage, then security is improved, but productivity decreases

Engineering Contradiction:

ImprovesecurityVSAvoidproductivity

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent applies partial action by implementing manual control only in the specific zones affected by cyberattacks, while automated control continues to operate in unaffected zones. The isolation strategy targets only the minimum necessary components to contain the threat, allowing the majority of the plant to maintain automated operation and productivity. This resolves the contradiction by applying manual control selectively rather than system-wide.

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS11665193B2Method for managing plant, plant design device, and plant management device

Publication Date: 2023.05.30 CHIYODA CORP

AI summary

A plant management method includes: acquiring correlation information indicating a correlation between a component subjected to a cyberattack and a component to be possibly affected by the cyberattack when a plant including a plurality of components is subjected to the cyberattack; and zoning the plurality of components on the basis of the correlation information.