Hms Networks Ab · OMXSTO:HMS
Hms Networks Ab — Technical Presentation (March 2022)
42 slides from Hms Networks Ab's technical presentation, Mar 29, 2022
Slide 1: Secure Industrial communication and IIoT to protect your devices from cyberthreats
Secure Industrial communication and IIoT to protect your devices from cyberthreats Handout
Slide 2: HMS stands for Hardware Meets Software
HMS stands for Hardware Meets Software™ HMS enables valuable data and insights from industrial equipment allowing our customers to increase productivity and sustainability
Slide 3: HMS at a glance
ua AITIS “uM +7,000,000 devices connected in automation +300,000 machines connected to cloud systems sah \ 700 ‘mployees Ml worldwide ay HMS at a glance Our field: Industrial ICT (Information and Communication Technlogy) 5G Smart Grid = ALOT Partners in over 50 countries Officesinl6 countries At the
Slide 4: Operations in 16 countries. Connections everywhere.
Operations in 16 countries. Connections everywhere.
Slide 5: Hardware Meets Software with HMS products
Hardware Meets Software™ with HMS products
Slide 6: Secure Industrial communication and IIoT to protect your devices from cyberthreats
Secure Industrial communication and IIoT to protect your devices from cyberthreats Kurt van Buul Siobhan Chapman kvb@hms-networks.com scn@hms-networks.com March 2022
Slide 7: IIoT Trends
{ ~ lloT Trends °o
Slide 8: IIoT Trends
IIoT Trends IT Smart Smart Smart Smart Smart (Information Technologies) Maintenance Service Information Sustainability Operation OT 1 (Operational Technologies) 3 Internet On-Prem 2 Industrial Automation • Deterministic real-time control • Industrial Networks • Machine Safety • Man/Machine collabora
Slide 9: IIoT Application Domains
IIoT Application Domains Business model Quality Management In-machine • Customer & Internal access • Dashboards / Databases • Successor of Modbus • Pay-per-use • Parallel to real-time data • Device & Data structure • Service & Maintenance • High data amount • Remote cloud control
Slide 10: IIoT Pitfalls
IIoT Pitfalls
Slide 11: IIoT Pitfalls: Safety versus Security
IIoT Pitfalls Safety versus Security Safety • Safety aimed at preventing accidents • Secured in regulations, such as IEC60204, PL/e, SIL-3 • Suppliers must comply to this Security • Security focused on preventing malicious activity via IoT (Cyber Security) • No requirements or regulations • Common R
Slide 12: Security & Device Management
IIoT Pitfalls The tailor-made data journey Application (Saas) and cloud connections Security & Device Management Cloud / Application Broker Connectivity Portal API & Connectors (CaaS) WiFi 3G/4G Ethernet Routers / Gateways OT/IT intelligence Industrial Fieldbus and Industrial Ethernet communication
Slide 13: IIoT Pitfalls: IT versus OT
IIoT Pitfalls Information Technology (IT) Operational Technology (OT) Secure oriented Process oriented • Confidentiality / Integrity • Operating Running / Low down-time • Credentials mandatory • Credentials for protecting IP / User roles • Security scanning & updates (patches) • Firmware only to sol
Slide 14: IIoT Cyber Attacks
IIoT Pitfalls IIoT Cyber Attacts 2016 2020 2021 2017 2010
Slide 15: Right Security Level
IIoT Pitfalls Right Security Level
Slide 16: Cyber Security
Cyber Security
Slide 17: Type of hacks
Cyber Security Type of hacks IT OT Coincidental event Cybercrime Hacker Groups / Terrorists Nations / States
Slide 18: Vulnerabilities
Cyber Security Vulnerabilities Issues • No 1-to-1 connection • OT connected to IT • Man-in-the-middle ? OPC UA Connector • Via IT to OT Data path • Inside Internet path • Unknown attendees VPN ?
Slide 19: Secure Connection and Authentication
Cyber Security Secure Connection and Authentication Process • Request access • Certificates exchange • Encryption OPC UA Connector • Credentials Data path Internet path • Safe certification storage Encrypted
Slide 20: Node Building blocks
Cyber Security Node Building blocks Certificate Encryption Security Chip Secure Boot Management Test Test Test Trusted parties Secure channels Store secret data Trusted firmware
Slide 21: Secure Factory Network
Cyber Security Secure Factory Network
Slide 22: Design-in
Design-in °o
Slide 23: Embedded Design-in: Industrial network shares 2021
Embedded Design-in Industrial network shares 2021 Industrial Ethernet 65% 2020 - 64% Fieldbus 28% 2020 - 30% Wireless 7% Source: HMS
Slide 24: Embedded - Design-in
Embedded - Design-in Hardware Software Understanding the architectures Understanding the protocols • Beside RJ45 everything is different • Stacks requires in-depth knowledge • Different MAC’s, processing units, … • Understand information exchange • Copper vs Fiber Optics • Requiring full certificati
Slide 25: Multiple-protocol - Multiple software stacks
Embedded Design-in Multiple-protocol - Multiple software stacks Software is not standardized • Different vendors • Different structures • Different interfaces • Different drivers • Different releases
Slide 26: Multiple-protocol - Multiple software stacks
Embedded Design-in Multiple-protocol - Multiple software stacks Software is not standardized • Different vendors • Different structures • Different interfaces • Different drivers • Different releases Multi-protocol software-development is a complex task!
Slide 27: Anybus CompactCom
Anybus CompactCom . | | |
Slide 28: CompactCom 40
CompactCom 40 Communication slave module connected to host CPU M40 • Module formfactor • Including connectors • Slide-in slot • User installable B40 • Brick / Plug-on formfactor • Free connector choice • Economical
Slide 29: CompactCom: Principle solution
CompactCom 40 Principle solution Host • Host CPU Host CPU • Communication Module SI • Software Interface Master • Master PLC • Electronic Design Sheet e.g. Temperature EDS Information • End-to-end information Information Data packages / Networking Information • Low-level coverage
Slide 30: Host & Master principle: PROFINET & EtherCAT
CompactCom 40 Host & Master principle: PROFINET & EtherCAT Temp Temp Status Status RPM RPM CMD CMD
Slide 31: Host & Master principle: PROFINET & EtherCAT
CompactCom 40 Host & Master principle: PROFINET & EtherCAT Temp Temp Status Status RPM RPM CMD CMD
Slide 32: CompactCom Secure Versions
CompactCom 40 Secure Versions Building blocks • Certificate Management Host CPU • User roles • Encryption • Secure chip • Secure boot Secure protocols • Profinet IRT or EtherNet/IP • OPC UA Secure • MQTT Secure • WEB-server HTTPS • File transfer WebDAV
Slide 33: CompactCom 40 certificate process
CompactCom 40 ID Certificate Device Certification Secure Operation Set-up custom with tool Identification at start-up Secure and Identified • Factory-set public key • Sent certificate to server • All nodes certified • Send key to local secure server • Return certificate • Trusted data exchange • Sav
Slide 34: Practice
Practice °o
Slide 35: STM32 Eval Kit with M40 Option Board and M40 IIoT Secure Module
Practice STM32 Eval Kit with M40 Option Board and M40 IIoT Secure Module Option Board M40 IIoT Secure STM32_EVAL SPI Interrupt Reset Power
Slide 36: ADI Definition
Practice ADI Definition Tower Light with 5 colors ADI #100 Name: TowerLights Array of 5 Boolean Read Slot Slot Subslot Index Index Robot arm ADI #200 Class Coils Name: PositionCtrl Instance Inputs Array of 3 Dword Attribute Registers Read ADI #201 PDO Name: DeviceStatus EDS SDO Integer (sub-)Index W
Slide 37: ADI Definition
Practice ADI Definition /*----------------------------------------------------------------------------------------------------------------------------------------------- ** 1. Instance | 2. Name | 3. DataType | 4. NumOfElements | 5. Bits| 6. ValuePtr | 7. ValuePropPtr | 8. StructPtr | 9. GetADIPtr |
Slide 38: OPC UA Information Model
Practice OPC UA Information Model
Slide 39: ADI as OPC UA Variable node
Practice ADI as OPC UA Variable node Variable node NodeId ADI NodeClass Name BrowseName Data type DisplayName Number of Elements Description Descriptor WriteMask Value UserWriteMask Max value Value Min value Variable node DataType Default value Variable node … node Variable ValueRank … … Value Array
Slide 40: Final
Final
Slide 41: Key Take Aways
3 Key Take Aways Anybus CompactCom IIoT Secure • Rapid design-in, reduces up to 70% of development time • Full secured solution with local certificate management • One development access to all networks and fieldbuses
Slide 42: STAY CONNECTED!
STAY CONNECTED! www.hms-networks.com