Pump Unit Speed Signal Monitoring for Cyberattack Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Centrifugal pump units are vulnerable to cyber attacks, which can disrupt operations, cause production losses, and potentially lead to safety hazards like explosions, due to the lack of effective protection mechanisms in industrial control systems.
Innovation Solution
A method and device that monitor and analyze signals related to the speed and operation of centrifugal pumps, detecting deviations from normal behavior to initiate a secure state, decoupling the system from networks and alerting operators to prevent cyber attacks, utilizing a decentralized control unit and sensors to ensure continuous operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If ICS are physically decoupled from other IT systems and networks, then security protection is improved, but networking capability and operational flexibility deteriorate
Solution Approach 1:
The system is divided into a process control system and a separate cybersecurity monitoring system. The monitoring system independently monitors cybersecurity parameters without being integrated into the process control logic, allowing network connectivity while maintaining security isolation. This segmentation enables the system to benefit from both networking capabilities and enhanced security protection.
Solution Approach 2:
A dedicated cybersecurity monitoring system acts as an intermediary between the process control system and external networks. This intermediary independently evaluates cybersecurity risks and can trigger safety states without being compromised by direct network integration, thus maintaining both networking capability and security protection.
2Use of energy by moving object
If speed control is implemented using frequency converter, then energy efficiency is improved, but system vulnerability to cyber attacks worsens
Solution Approach 1:
The control system is segmented into functional control (frequency converter for speed control) and security monitoring (independent cybersecurity monitoring system). This separation allows the frequency converter to optimize energy efficiency while the independent monitoring system protects against cyber attacks, resolving the contradiction between energy efficiency and security.
Solution Approach 2:
The independent cybersecurity monitoring system serves as an intermediary that monitors the frequency converter and associated control systems for cyber threats. This intermediary can detect and respond to attacks without interfering with the energy-efficient speed control operations, maintaining both energy efficiency and system security.
3Measurement precision
If decentralized control unit is used for cyber security monitoring, then detection capability is improved, but device complexity worsens
Solution Approach 1:
The decentralized control unit is designed to perform multiple functions: it monitors process parameters, evaluates cybersecurity risks, and can trigger safety states. By consolidating these functions into a single multi-functional unit, the system achieves improved detection capability without proportionally increasing overall system complexity.
Solution Approach 2:
The decentralized control unit autonomously monitors cybersecurity parameters and independently determines when to trigger safety states without requiring constant external intervention. This self-service capability improves detection responsiveness while reducing the operational complexity of managing the monitoring system.
Data Source
Figure 1
Figure 2
AI summary
The invention relates to a method for protecting a pump unit comprising a variable-speed fluid-conveying device (2), particularly a centrifugal pump, a drive and a control system, in the event of cyber attacks. According to said method, signals relating to the speed and/or speed regulation of the fluid-conveying device (2) are first detected. The signals are then evaluated in order to detect a maliciously effected, anomalous operation of the pump unit (cyber attack). At least one nominal variable and at least one actual variable derived from the analysed signal are then compared. Subsequently, a unit (9) transmits signals to components of the pump unit in order to effect the operation of the fluid-conveying device (2) in conformity with the rules and to generate a state in which the fluid-conveying device (2) is protected from current and/or other cyber attacks.