System and method for securing network communications

• US 20030233573A1
• Filed: 06/17/2003
• Published: 12/18/2003
• Est. Priority Date: 06/18/2002
• Status: Abandoned Application

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Phinney, Thomas L.
• Application Number:
  US10/463,560
• Publication Number:
  US 20030233573A1
• Time in Patent Office: Days
• US Class Current: 726/14
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 12/18 for broadcast or conference , e.g. multicast
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A system and method of user installable devices that self-establish and maintain their own unique communications security system to provide secure communications in a control system, such as a supervisory control and data acquisition (SCADA) system with a wide area network (WAN) is disclosed. This security system provides source authentication, confidentiality, integrity protection, and replay protection.

Claims

1. A system for securing network communications, comprising:

a first security component;

a second security component; and

a security management component;

wherein said first security component, said second security component, and said security management component are capable of providing security for a communication between a first task-oriented component and a second task-oriented component.

2. The system according to claim 1, wherein said provided security relates to at least one security attribute selected from the group consisting of:

source authentication, confidentiality, integrity protection, and replay protection.

3. The system according to claim 1, further comprising:

a communications component in communication with said first security component and said second security component;

wherein said first security component is in communication with said first task-oriented component and said security management component; and

wherein said second task-oriented component is in communication with said second security component.

4. The system according to claim 3, wherein said first security component is a first dongle.

5. The system according to claim 3, wherein said first security component comprises executable instructions capable of being stored in said first task-oriented component.

6. The system according to claim 3, wherein said second security component is a second dongle.

7. The system according to claim 3, wherein said second security component comprises executable instructions capable of being stored in said second task-oriented component.

8. The system according to claim 3, wherein said first task-oriented component is a first master terminal unit (MTU) and said second task-oriented component is a first remote terminal unit (RTU) in a control system.

9. The system according to claim 8, further comprising:

a third security component in communication with said communications component; and

a second remote terminal unit (RTU) in communication with said third security component.

10. The system according to claim 9, wherein said first security component, said third security component, and said security management component are capable of providing source authentication, confidentiality, integrity protection, or replay protection for a communication between said first master terminal unit (MTU) and said second remote terminal unit (RTU).

11. The system according to claim 8, further comprising:

a second master terminal unit (MTU) in communication with said security management component; and

a third security component in communication with said second master terminal unit (MTU).

12. The system according to claim 11, wherein said first security component, said third security component, and said security management component are capable of providing source authentication, confidentiality, integrity protection, or replay protection for a communication between said second master terminal unit (MTU) and said first remote terminal unit (RTU).

13. The system according to claim 3, wherein said control system is applied to an application, said system being selected from the group consisting of:

power transmission and distribution, oil and gas pipeline, and water and sewage management.

14. The system according to claim 8, wherein said first master terminal unit (MTU) is part of a control site.

15. The system according to claim 8, wherein said communications component is a wide area network (WAN).

16. The system according to claim 3, wherein said security management component serves executable instructions to said first security component.

17. The system according to claim 3, wherein said security management component serves keys to said first security component and has access to a random number source.

18. The system according to claim 3, wherein said second task-oriented component is a field instrument.

19. The system according to claim 3, wherein said second task-oriented component is located remotely from said first task-oriented component.

20. A method for securing network communications, comprising:

commissioning, by a security management component, a first security component;

commissioning, by said security management component, a second security component; and

altering, by said first security component and said second security component, a communication between a first task-oriented component and a second task-oriented component;

wherein said first security component, said second security component, and said security management component are capable of providing security for said communication between said first task-oriented component and said second task-oriented component.

21. The method according to claim 20, further comprising:

precommissioning said first security component with a unique identifier and at least one cryptographic secret.

22. The method according to claim 21, further comprising:

storing said unique identifier and said at least one cryptographic secret.

23. The method according to claim 20, further comprising:

deploying said first security component to be in communication with said first task-oriented component and a communications component; and

deploying said second security component to be in communication with said communications component and said second task-oriented component.

24. The method according to claim 20, wherein said providing security for said communication is at least one selected from the group consisting of:

source authentication, confidentiality, integrity protection, and replay protection.

25. The method according to claim 21, wherein said precommissioning comprises:

obtaining a session key to said first security component;

obtaining executable instructions enciphered under said session key to said first security component;

obtaining a birth key encryption key (KEK) to said first security component; and

obtaining at least one encrypted version of said birth key encryption key (KEK) to said first security component.

26. The method according to claim 25, further comprising:

obtaining a boot loader to said first security component; and

obtaining a class identifier and an identifier to said first security component.

27. The method according to claim 21, wherein said first security component is a dongle having an indicator for indicating that said precommissioning has completed.

28. The method according to claim 20, wherein said commissioning comprises:

activating a bootstrap program on said first security component to erase a flash memory of said first security component;

providing executable instructions to said first security component to load into said flash memory;

authenticating said first security component; and

validating said first security component.

29. The method according to claim 28, further comprising:

interrogating said first security component to determine that said first security component needs commissioning.

30. The method according to claim 20, wherein said altering comprises:

adding, by said first security component, control and integrity information and encrypting a resulting expanded message; and

decrypting, by said second security component, said resulting expanded message and removing said control and integrity information.

31. The method according to claim 20, wherein said first task-oriented component is a master terminal unit (MTU) and said second task-oriented component is a remote terminal unit (RTU) in a control system.

32. The method according to claim 20, wherein said communications component is a wide area network (WAN).

33. The method according to claim 20, wherein said first security component is a dongle interposed between said first task-oriented component and a modem.

34. A computer-readable medium having computer-executable instructions for performing a method, comprising:

commissioning, by a security management component, a first security component;

commissioning, by said security management component, a second security component; and

altering, by said first security component and said second security component, a communication between a first task-oriented component and a second task-oriented component;

wherein said first security component, said second security component, and said security management component are capable of providing security for said communication between said first task-oriented component and said second task-oriented component.