Secure access to field instruments is of the highest priority for operators across all branches of the process industry. Modern plants contain hundreds or thousands of measurement and control instruments that must be accessed remotely with growing frequency. These field instruments also have to be installed, monitored or serviced on a regular basis. Secure password-based user authentication plays a special role today, especially when devices with digital interfaces are involved.
Security with user-friendly password lengths
In order to utilise Bluetooth communications technology in industrial environments, security experts at Endress+Hauser identified a need for additional protection. The result was the development of a solution called CPace, which belongs to the class of PAKE (password-authenticated key exchange) methods. Among other things, PAKE technology is used with the German electronic ID cards as a means of largely decoupling the cryptographic security level from the length of the password. The advantage of CPace is that the processing power of even the smallest of field instruments is sufficient to provide devices, and thus the industrial systems, with the best level of protection against cyberattacks. At the same time, CPace enjoys a high degree of acceptance among users given that the desired level of security can be achieved without relying on long passwords.
“We had to look internally to find a solution for establishing secure connections to the instruments,” explains Dr Björn Haase, project head at Endress+Hauser. “Previously available secure methods could not be used because of the limited processing power and storage capacity of field instruments. Password verification would have meant a login delay of two minutes or more.”
CPace makes life difficult for hackers
The security of the PAKE-based solution with Bluetooth technology from Endress+Hauser was previously verified in 2016 as part of an analysis by the Fraunhofer Institute for Applied and Integrated Security. The institute classified the protection level of the Endress+Hauser security layer, the core component of which is recommended for use in Internet environments, as high.
Reinstatement opportunity for ECSA registration
News
In 2023 the Engineering Council of South Africa (ECSA) announced a special opportunity for engineers in South Africa to reinstate their registration status if it had been cancelled. This exclusive offer is available until the end of August 2024.
Read more...Modular training workstation for Bosch Rexroth Bosch Rexroth Africa
News
To enhance its training services and address the shortage of hydraulic and pneumatic skills across the continent, Bosch Rexroth Africa’s training department has unveiled a state-of-the-art modular training workstation.
Read more...Pepperl+Fuchs Channel Partner Conference Pepperl+Fuchs
News
Pepperl+Fuchs recently hosted its Channel Partner Conference. Under the theme ‘Together, Breaking Ground in Africa’, the conference served as both a celebration of partnerships and a strategic forum focused on future growth.
Read more...Bühler celebrates expansion, innovation and sustainability
News
Bühler has marked another milestone in its dedication to regional support with the expansion of its Cape Town Service Centre. Hosting its annual customer day, the company showcased the facility’s new offerings and highlighted its commitment to service excellence, local innovation, and sustainability.
Read more...From the editor's desk: First break it, then fix it Technews Publishing (SA Instrumentation & Control)
News
Welcome to another year with SA Instrumentation & Control. May it be a happy and healthy one where you can rise to the challenges ahead and still enjoy all the good things we have in this country.
...
Read more...SEW-EURODRIVE’s new service and repair centre SEW-EURODRIVE
News
As part of its strategy to ‘close the loop’ in its service offering, SEW-EURODRIVE has broken ground on a new 17 000 m2 Service and Repair Centre. The establishment of the state-of-the-art facility plugs the gap for expert repair services for gearboxes in Africa.
Read more...EtherCAT Technology Group holds its annual Plug Fest
News
The 2024 EtherCAT Plug Fest of the EtherCAT Technology Group offered participants a valuable opportunity to test the interoperability of their 9 EtherCAT MainDevices and 10 EtherCAT SubDevices. Using the knowledge gained, they will be able to improve compatibility and optimise their products for use in the field.
Read more...Leading the way in industrial automation and digital transformation Iritron
News
As a pioneering engineering, integration, and manufacturing firm, Iritron has built a reputation as a trusted partner in critical industries such as mining, energy and manufacturing. By embedding innovation and expertise into its four foundational pillars, the company continues to deliver tailored solutions that meet the evolving needs of modern industry.
printer friendly version