Wireless Dongle Asymmetrical Encryption Industrial Field Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current wireless solutions for industrial field devices in process automation lack sufficient data security, as they rely on insecure key exchange methods and are not optimized for industrial power budgets, making them unsuitable for secure configuration and encryption in industrial settings.
Innovation Solution
A wireless dongle with a USB connection interface, a Bluetooth interface for energy-efficient data transmission, an arithmetic unit for generating and testing signatures and performing asymmetrical encryption, and a housing with protective measures against manipulation, including a hardware random number generator, to ensure secure configuration and encryption of field devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If wireless transmission is used to connect field devices, then cabling costs are reduced and serviceability is improved, but data security is insufficient
Solution Approach 1:
A wireless dongle is introduced as an intermediary device between the computer and field device. The dongle contains a secure arithmetic unit that performs asymmetrical encryption and stores authentication keys, acting as a security mediator that enables wireless communication while maintaining industrial-grade security standards.
Solution Approach 2:
The patent replaces the mechanical/wired connection system with a wireless communication system using Bluetooth or similar wireless standards. This substitution reduces cabling costs and improves serviceability while the dongle's encryption mechanisms ensure data security remains adequate for industrial applications.
2Ease of operation
If consumer wireless standards (e.g., Bluetooth) are used, then ease of operation is improved, but power budget requirements are not met for industrial field devices
Solution Approach 1:
The system is segmented into three parts: the computer (for configuration interface), the wireless dongle (for security and wireless protocol handling), and the field device (for process control). This segmentation allows the field device to use low-power wireless communication while the dongle handles the computationally intensive encryption operations.
Solution Approach 2:
The wireless dongle acts as an intermediary that bridges the computer and field device. It handles the wireless communication protocol and security operations, allowing the field device to maintain low power consumption while still enabling easy configuration through the computer's interface.
3Ease of operation
If standard Bluetooth pairing is used, then operating convenience is improved, but security is reduced due to weak authentication
Solution Approach 1:
The patent implements asymmetrical (public-key) encryption in the dongle's arithmetic unit. This creates an asymmetric security model where the dongle holds private keys for authentication, enabling strong security while maintaining ease of operation through automatic key management and seamless pairing processes.
Solution Approach 2:
Authentication keys and encryption credentials are pre-configured in the dongle before use. The dongle automatically performs authentication and encryption operations during the pairing process, eliminating the need for users to manually configure security settings while ensuring industrial-grade security.
4Adaptability or versatility
If computer memory is used for encryption operations, then flexibility is improved, but security is compromised due to potential Trojan or viral attacks on RAM
Solution Approach 1:
The encryption and authentication functions are extracted from the computer's general-purpose memory and processing units and relocated to a dedicated wireless dongle with its own secure arithmetic unit and memory. This extraction isolates security-critical operations from potential computer security threats while maintaining flexibility through the USB connection interface.
Data Source
AI summary
The present disclosure relates to a wireless dongle for the wireless transmission of data from a computer to at least one field device of a process automation system. The dongle includes a connection interface for connecting the dongle to a computer, a wireless interface for transmitting the data from the dongle to a field device, a memory, an arithmetic unit configured to generate and test signatures and release codes, as well as to perform encryption, and a housing, wherein the wireless interface, the memory, the arithmetic unit, and the connection interface are arranged in the housing, wherein only the part of the connection interface relevant for the connection to the computer is omitted from the housing. The present disclosure further relates to a method for wirelessly transmitting data from a computer to a field device.