Refine
Year of publication
- 2023 (20) (remove)
Document Type
- Article (6)
- Course Material (5)
- Report (4)
- Conference Proceeding (3)
- Bachelor Thesis (1)
- Master's Thesis (1)
Has Fulltext
- yes (20)
Is part of the Bibliography
- no (20)
Keywords
- PROFInet (6)
- PROFINET Security (4)
- Computersicherheit (3)
- IEC 62443 (3)
- Regelungstechnik (3)
- Automatisierungstechnik (2)
- Ethernet (2)
- Gilbert (2)
- Hautus (2)
- Kalman (2)
Institute
- Fakultät I - Elektro- und Informationstechnik (20) (remove)
Das PROFINET Protokoll wurde in der aktuellen Version um Security-Funktionen erweitert. Damit können für PROFINET flexible Netzwerkarchitekturen unter Berücksichtigung von OT-Security Anforderungen entworfen werden, die durch die bisher erforderliche Netzwerksegmentierung nicht möglich waren. Neben den Herstellern der Protokollstacks sind nachfolgend auch die Komponentenhersteller gefordert, eine sichere Implementierung in ihren Geräten umzusetzen. Die erforderlichen Maßnahmen gehen dabei über die Nutzung eines sicheren Protokollstacks hinaus. Der Beitrag zeigt am Beispiel eines Ethernet-APL Messumformers mit PROFINET-Kommunikation die künftig von PROFINET-Geräteherstellern zu berücksichtigenden technischen und organisatorischen Rahmenbedingungen.
This paper reflects the content of the presentation “The Next Generation: Ethernet-APL for Safety Systems” at the NAMUR Annual General Meeting 2022. It deals with the use of the Ethernet Advanced Physical Layer (Ethernet-APL) in combination with the PROFINET/PROFIsafe protocol for safety applications. It describes the virtues of the digital communication between the field and safety system. In parallel the aspect of OT security for this use case is touched as well. The paper proposes a secure architecture, where safety- and non-safety field communications are still separated. At the end a set of requirements for the development of future APL devices is described.
Operators of production plants are increasingly emphasizing secure communication, including real-time communication, such as PROFINET, within their control systems. This trend is further advanced by standards like IEC 62443, which demand the protection of realtime communication in the field. PROFIBUS and PROFINET International (PI) is working on the specification of the security extensions for PROFINET (“PROFINET Security”), which shall fulfill the requirements of secure communication in the field.
This paper discusses the matter in three parts. First, the roles and responsibilities of the plant owner, the system integrator, and the component provider regarding security, and the basics of the IEC 62443 will be described. Second, a conceptual overview of PROFINET Security, as well as a status update about the PI specification work will be given. Third, the article will describe how PROFINET Security can contribute to the defense-in-depth approach, and what the expected operating environment is. We will evaluate how PROFINET Security contributes to fulfilling the IEC 62443-4-2 standard for automation components.
Two of the authors are members of the PI Working Group CB/PG10 Security.
Conventional fluorescent tubes are increasingly being replaced with innovative light-emitting diodes (LEDs) for lighting poultry houses. However, little is known about whether the flicker frequencies of LED luminaires are potential stressors in poultry husbandry. The term “light flicker” describes the fluctuations in the brightness of an electrically operated light source caused by the design and/or control of the light source. In this context, the critical flicker frequency (CFF) characterizes the frequency at which a sequence of light flashes is perceived as continuous light. It is known that CFF in birds is higher than that in humans and that light flicker can affect behavioral patterns and stress levels in several bird species. As there is a lack of knowledge about the impact of flicker frequency on fattening turkeys, this study aimed to investigate the effects of flicker frequency on the behavior, performance, and stress response in male turkeys. In 3 trials, a total of 1,646 male day-old turkey poults of the strain B.U.T. 6 with intact beaks were reared for 20 wk in 12 barn compartments of 18 m² each. Each barn compartment was illuminated using 2 full-spectrum LED lamps. Flicker frequencies of 165 Hz, 500 Hz, and 16 kHz were set in the luminaires to illuminate the compartments. Analyses of feather corticosterone concentration were performed on fully grown third-generation primaries (P 3) of 5 turkeys from each compartment. No significant differences were found in the development of live weight, feed consumption, or prevalence of injured or killed turkeys by conspecifics reared under the above flicker frequencies. The flicker frequencies also did not significantly influence feather corticosterone concentrations in the primaries of the turkeys. In conclusion, the present results indicate that flicker frequencies of 165 Hz or higher have no detrimental effect on growth performance, injurious pecking, or endocrine stress response in male turkeys and, thus, may be suitable for use as animal-friendly lighting.
PROFINET Security: A Look on Selected Concepts for Secure Communication in the Automation Domain
(2023)
We provide a brief overview of the cryptographic security extensions for PROFINET, as defined and specified by PROFIBUS & PROFINET International (PI). These come in three hierarchically defined Security Classes, called Security Class 1, 2 and 3. Security Class 1 provides basic security improvements with moderate implementation impact on PROFINET components. Security Classes 2 and 3, in contrast, introduce an integrated cryptographic protection of PROFINET communication. We first highlight and discuss the security features that the PROFINET specification offers for future PROFINET products. Then, as our main focus, we take a closer look at some of the technical challenges that were faced during the conceptualization and design of Security Class 2 and 3 features. In particular, we elaborate on how secure application relations between PROFINET components are established and how a disruption-free availability of a secure communication channel is guaranteed despite the need to refresh cryptographic keys regularly. The authors are members of the PI Working Group CB/PG10 Security.