Endress+Hauser Establishes Internet Security Standards

  Enquiry / contact me

The Internet Engineering Task Force (IETF) has chosen the SmartBlue CPace protocol from Endress+Hauser as a recommended internet standard for password-protected access to instruments

Automation, Sensor Technology, Test & Measurement

With the CPace protocol, Endress+Hauser ensures secure access to field instruments
With the CPace protocol, Endress+Hauser ensures secure access to field instruments

The cryptography working group within the IETF standards organization (Internet Engineering Task Force) has chosen the Endress+Hauser-developed CPace protocol as a recommended method for use in internet standards. After undergoing extensive security analyses, the CPace protocol emerged as the winner in a competition among submissions from developers at several well-known companies.

Secure access to field instruments is of the highest priority for operators across all branches of the process industry. Modern plants contain hundreds or thousands of measurement and control instruments that must be accessed remotely with growing frequency. These field instruments also have to be installed, monitored or serviced on a regular basis. Secure password-based user authentication plays a special role today, especially when devices with digital interfaces are involved.

Security with user-friendly password lengths 

In order to utilize Bluetooth communications technology in industrial environments, security experts at Endress+Hauser identified a need for additional protection. The result was the development of a solution called CPace, which belongs to the class of PAKE (password-authenticated key exchange) methods. Among other things, PAKE technology is used with the German electronic ID cards as a means of largely decoupling the cryptographic security level from the length of the password. The advantage of CPace is that the processing power of even the smallest of field instruments is sufficient to provide devices, and thus the industrial systems, with the best level of protection against cyberattacks.

At the same time CPace enjoys a high degree of acceptance among users given that the desired level of security can be achieved without relying on long passwords.

“We had to look internally to find a solution for establishing secure connections to the instruments. Previously available secure methods could not be used because of the limited processing power and storage capacity of field instruments. Password verification would have meant a login delay of two minutes or more,” explains Dr Björn Haase, head of the project at Endress+Hauser.

CPace makes life difficult for hackers

The security of the PAKE-based solution with Bluetooth technology from Endress+Hauser was previously verified in 2016 as part of an analysis by the Fraunhofer Institute for Applied and Integrated Security (AISEC). The institute classified the protection level of the Endress+Hauser security layer, the core component of which is recommended for use in internet environments, as ‘high’.
 

Posted on October 27, 2020 - (248 views)
Related articles
Low Distortion Fiber Optic Channel Plates
Tutorials for Flow Meter Installation
Rugged Smart & Easy-to-Install IR Sensors
Predictive Maintenance of Rotating Equipment
Global Survey Conducted by Molex Highlights Continued Progress in Industry 4.0
Linear Position Sensor Engineered for Valve Position Detection Applications in Steam Turbine Control Systems
Vibration Data Loggers of the PCE-VT 3900 Series
Imperas Signs A Multi-Year Distribution And Support Agreement with Valtrix for Advanced Verification of RISC-V Processors
“We can provide resourceful collaboration with customers by providing new or alternate perspectives to solving known or unrecognized challenges.”
Computer-On-Module With 4 to 16 Cores
Rugged Smart & Easy-to-Install IR Sensors
Global Survey Conducted by Molex Highlights Continued Progress in Industry 4.0
Inductive Displacement Measuring System
High-precision Automated Inline 3D Inspection
Non-Contact Voltage Clamp Meter Ensuring Secure Electrical Measurements
Capacitive Rotation Speed Sensor for Industrial Measurement Tasks
High-Temperature LVDT Position Sensors
Magnetostrictive Linear Displacement Transducer
Environmental Resistant Linear Encoder
Semi-absolute Linear Encoder
Tutorials for Flow Meter Installation
IERA 2021 Awarded to ABB's PixelPaint Solution
Mobile Thermal Imagers for Swift On-Site Inspection
New Current Sensor Element and Firmware Upgrade for Award-winning Yokogawa Precision Power Analyzer 
More Machining and Less Programming: ESPRIT Keeps the Success Flowing for WET
PTC Leverages Spatial Computing Capabilities with Vuforia Engine Area Targets
New High-Speed Pyrometer CT 4M from Optris
Micro Sensor for Temperature, Pressure, Tension, Torsion, Position, Electric Current and Magnetic Field Measurements
AC Servo Drives & Motors
Unistream®, the Award-Winning Programmable Controllers Series With Integrated HMI by Unitronics