Telegram Processing in Automation Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Automation networks, particularly those using EtherCAT protocol, face challenges in ensuring secure communication and protecting against unauthorized access, as existing encryption methods require complete telegram reception before decryption, leading to delays and potential manipulation of control tasks.
Innovation Solution
A method for processing telegrams in automation networks that involves a master subscriber partially encrypting telegrams, allowing slave subscribers to decrypt and process them in parallel, using a decryption unit connected to the receiving logic, which forwards encrypted portions to the processing unit for immediate processing, and re-encrypting if necessary, without requiring complete telegram reception.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is applied to telegrams in the automation network, then security and confidentiality are improved, but processing time increases because complete telegram reception is required before decryption
Solution Approach 1:
The decryption process is initiated before the complete telegram is received. The receiving logic forwards received portions to the decryption unit, which performs decryption in advance on the incoming data stream, allowing the processing unit to work on decrypted data as soon as it becomes available without waiting for the entire telegram.
Solution Approach 2:
The telegram processing is divided into segments that can be handled independently. The receiving logic, decryption unit, and processing unit operate on different portions of the telegram simultaneously, enabling parallel processing of encrypted and unencrypted segments, thus reducing overall processing time while maintaining security.
2Adaptability or versatility
If network distributors are added to extend the EtherCAT network, then network coverage and connectivity are improved, but security is worsened because external attacks on slave subscribers become possible
Solution Approach 1:
Encryption is applied selectively to different portions of the telegram based on local requirements. The master subscriber encrypts only the portions of the telegram containing sensitive data for specific slave subscribers, while leaving other portions unencrypted. This allows network distributors to be used for network extension while maintaining security for critical data paths.
3Reliability
If complete telegram reception is required before decryption, then data integrity is improved, but productivity decreases due to waiting time
Solution Approach 1:
The decryption unit continuously processes incoming telegram data as it is received, without interruption or waiting for complete reception. The processing unit simultaneously processes decrypted data in real-time, maintaining continuous useful action throughout the data transmission and processing pipeline, thus maximizing productivity while ensuring data integrity through the established decryption verification procedures.
Data Source
AI summary
A method for processing telegrams in an automation network provides a master subscriber to at least partially encrypt and output telegrams, respectively, to another subscriber. The other subscriber comprises an input port, a receiving logic connected to the input port, a decryption unit connected to the receiving logic, and a processing unit connected to the decryption unit and the receiving logic. The receiving logic is configured, when a telegram at least partially encrypted by the master subscriber is present at the input port, to forward an encrypted portion of the telegram to the decryption unit. The decryption unit is configured to decrypt the encrypted portion of the telegram with a key, and to forward the encrypted portion to the processing unit for processing. If an unencrypted telegram is present at the input port, the receiving logic is configured to forward the unencrypted telegram to the processing unit for processing.