Microsoft PowerPoint - MOF2012 Panel theme_Rev5.ppt [互換モード]

Size: px

Start display at page:

Download "Microsoft PowerPoint - MOF2012 Panel theme_Rev5.ppt [互換モード]"

茶杜
5 years ago
Views:

1 MOF2012 Panel discussion theme Technical Committee on Instrument and Control Networks, The Society of Instrumentation and Control Engineers (SICE) 1 Session List Session1 Session2 Session3 time point item Chair Flexible reconfiguration Humancentered interfaces System stable operation with ensuring convenience TCP/IP Connectivity and continuity of TCP/IP PA Wireless for PA networks Unified view of control, visualization and configuration functions through network layers Cyber security for ICSs Takayanagi Ito Yamada 2 (Theme) 1

2 Session1: TCP/IP Connectivity and continuity of TCP/IP PA Wireless for PA networks Flexible reconfiguration Technical Committee on Instrument and Control Networks, The Society of Instrumentation and Control Engineers (SICE) 3 Session1: TCP/IP Connectivity and continuity of TCP/IP 4 (Theme) 2

3 Session1: PA Wireless for PA networks 5 Evaluation under user s implementation Stable than expected Impressed because fast and easy But not became heated Issue Usability Several standards in paralell User s merit? WirelessHART IEC ISA a IEC CDV CDV COMMITTEE DRAFT FOR VOTE 6 (Theme) 3

4 But not became heated Issue: Implementation R&D Issue Implementation From Monitoring Example of chemical plant But not became heated Issue: Reliability At the moment, no problem 10 GW GW Required function 8 (Theme) 4

5 But not became heated Issue: Performance monitoring Communication status monitoring 9 Threats on Wireless Network (From Industrial wireless network security by Kazunori Miyazawa (Yokogawa) at Network Symposium in SICE IA div. Conference 2011) Threats on physical layer System Jamming()/ Interference() Tampering( ) Threats on Data-link layer Exhausting() / DoS() Threats on Routing Black hole, Sink hole Worm hole, Selective Forwarding Sensor Sybil Attack Routing Manipulation Threats for applications Eaves Dropping Falsification( ) Spoofing( ) Replay Attack DE synchronization( MAC Phy MAC Phy MAC Phy MAC Phy 10 (Theme) 5

6 Session2: Unified view of control, visualization and configuration functions through network layers Human-centered interfaces Technical Committee on Instrument and Control Networks, The Society of Instrumentation and Control Engineers (SICE) 11 user s message DCSDD DD utilization in Asset Management System connected to DCS by multivendor field device environment. DD Device specific function can be covered by DD? Reduction of device configuration work at factory construction? Want to use same function same as device specific hand held terminal. FDT Can FDT cover device specific information? Analog device is still used in process. FDT: Field Device Technology DD: Device Description 12 (Theme) 6

Confirmation of User s benefit Confirm whole functionality from sustainability Analog signal transmission device specific terminal Unified view of control, visualization and configuration functions

7 Confirmation of User s benefit Confirm whole functionality from sustainability Analog signal transmission device specific terminal Unified view of control, visualization and configuration functions through network layers Asset management system Usability (Unified standard) FDT2 Technical Description FDI White Paper White_Paper.pdf General topics of information sharing Information sharing between different network I/F Corresponding to upper system I/F Cyber Security FDT: Field Device Technology FDI: Field Device Integration 13 Interoperability of FDT/DTM Engineering, Commissioning, Operation, Maintenance, FDT defines I/F between FDT Frame application and DTM DTM can represent whole device functionality. software components Frame Applications FDT Frame application executes DTM(Device Type Manager) as software components. 14 (Theme) 7

Interoperability of ED Engineering, Commissioning, Operation, Maintenance, Host Application ED

Application interprets ED(Electronic Device Description Language) which includes property and usage

15 Usability (Unifid Standard) FDT DTM base (IEC 62453) software components FDI ED base (IEC

PA,HART, FOUNDATION Fieldbus H1/HSE, Interbus,PROFINET, Modbus TCP/RTU/ASCII, Ethernet/IP,EtherCAT,

8 Interoperability of ED Engineering, Commissioning, Operation, Maintenance, Host Application ED Discripti ve file Host Application ED Discripti ve file Descriptive file Host Application Host Application interprets ED(Electronic Device Description Language) which includes property and usage of device parameter. 15 Usability (Unifid Standard) FDT DTM base (IEC 62453) software components FDI ED base (IEC ) Electronic Device Description Language Discripti ve file PA/FA PROFIBUS DP, PROFIBUS PA,HART, FOUNDATION Fieldbus H1/HSE, Interbus,PROFINET, Modbus TCP/RTU/ASCII, Ethernet/IP,EtherCAT, DeviceNet,ControlNet, IO- Link,ASInterface,CANopen,SERCOS III, CC-Link and ISA (early 2012 annexes) PA Field Device point of view System point of view FDT, Foundation Fieldbus, HART, OPC, PROFIBUS 16 (Theme) 8

FDT2 DTM FDI Device Package User Interface FDT2 DTM Device

User Interface 17 Interoperability between FDT2 and FDI

FDI Device Package Discripti ve file FDI White Paper

9 FDT2 DTM FDI Device Package User Interface FDT2 DTM Device Model FDI Device Package Device Model Discripti ve file User Interface 17 Interoperability between FDT2 and FDI FDT2 Technical Description FDT Frame Application FDI DTM FDI Device Package Discripti ve file FDI White Paper Discripti ve file FDI Device Package FDT Frame Application 18 (Theme) 9

General topics of information sharing Information sharing between different network Nested communication I/F Corresponding to upper system

White Paper Nested communication 19 Session3: Cyber security for ICSs System stable operation with ensuring convenience Technical

10 General topics of information sharing Information sharing between different network Nested communication I/F Corresponding to upper system I/F Client/Server architecture OPC-UA Corresponding to OPC-UA Cyber Security Digitally signed certificate FDT2 Technical Description FDI White Paper Nested communication 19 Session3: Cyber security for ICSs System stable operation with ensuring convenience Technical Committee on Instrument and Control Networks, The Society of Instrumentation and Control Engineers (SICE) 20 (Theme) 10

11 IT Challenges It's necessary to introduce cyber security to ICS for the sake of information sharing by IT. What should we do at the introducing and operating phase of security deployment? Point of view: At the introducing phase ICS: Industrial Control System Discarding a convenient configuration mitigates the risk of cyber-related exploitation. (Online maintenance, Self diagnostic, Remote monitoring) Introducing security features to ICSs (Policy, System configuration, Device selection, Conformity to standards) Establishing safety shutdown function outside a computer keeps the total system safe and minimizes damages. 21 Point of view: At the operating phase Maintenance organizations should add cyber-oriented incident handling to existing troubleshooting flows of ICS. Maintenance organizations should manage to share information about whole network security. Managers and Operators should simulate cyber incident experiences. At the incident Operators should be able to distinguish cyber incident from normal incident. Maintenance organizations should recover and restart ICSs with ensuring the safety. 22 (Theme) 11

12 Standards Trend IEC62443 IEC62443 is drawing attention as security standard for general industrial control system. Some companies get to include its standard into their system procurement requirement.. Standard Target General Control Systems Power Systems Smart Grid Train Systems Oil, Chemical Plant Organization System Component Legend Encryption MOF Panel discussion theme 23 Wireless Network Security DCS MES PRM DCS PL ID ID IP PL 4-20mA, FF, HART GW PL ISA100.11a, WirelssHART PLAN DO CHECK ACTOIN 24 (Theme) 12

13 Enterprise / Office Network Wireless Network Security Identifier Threats example Perimeter of PIMS Perimeter of Control System PL Boarder of Plant DCS MES 4-20mA, FF, HART Depend on Physical Security PRM DCS GW PL PL ISA100.11a, WirelssHART User Access Control Physical Security of network Perimeter of physical security of the field Secured by Crypto User ID Host name User ID Impersonati Device Name on IP address Social Hacking Computer Virus Device Tag Address Impersonati on Social Hacking Computer Virus Falsificatio n Tapping Interferenc e Risk Analysis Policy Design Implementation, Installation Validation, Assessment Maintenance, Improvement PLAN DO CHECK ACTOIN 25 (Theme) 13

2014_

2014_ 新鼎系統股份有限公司簡介台北總公司 11510 臺北市南港路三段 52 號 5 樓 TEL: 886-2-2785-3839 FAX: 886-2-2782-0180 高雄分公司 811 高雄市楠梓區楠梓新路 306 號 TEL: 886-7-352-5226 FAX: 886-7-351-3698 新鼎信息技術 (