News


Endress+Hauser establishes Internet security standards

February 2021 News

Secure access to field instruments is of the highest priority for operators across all branches of the process industry. Modern plants contain hundreds or thousands of measurement and control instruments that must be accessed remotely with growing frequency. These field instruments also have to be installed, monitored or serviced on a regular basis. Secure password-based user authentication plays a special role today, especially when devices with digital interfaces are involved.

Security with user-friendly password lengths

In order to utilise Bluetooth communications technology in industrial environments, security experts at Endress+Hauser identified a need for additional protection. The result was the development of a solution called CPace, which belongs to the class of PAKE (password-authenticated key exchange) methods. Among other things, PAKE technology is used with the German electronic ID cards as a means of largely decoupling the cryptographic security level from the length of the password. The advantage of CPace is that the processing power of even the smallest of field instruments is sufficient to provide devices, and thus the industrial systems, with the best level of protection against cyberattacks. At the same time, CPace enjoys a high degree of acceptance among users given that the desired level of security can be achieved without relying on long passwords.

“We had to look internally to find a solution for establishing secure connections to the instruments,” explains Dr Björn Haase, project head at Endress+Hauser. “Previously available secure methods could not be used because of the limited processing power and storage capacity of field instruments. Password verification would have meant a login delay of two minutes or more.”

CPace makes life difficult for hackers

The security of the PAKE-based solution with Bluetooth technology from Endress+Hauser was previously verified in 2016 as part of an analysis by the Fraunhofer Institute for Applied and Integrated Security. The institute classified the protection level of the Endress+Hauser security layer, the core component of which is recommended for use in Internet environments, as high.


Credit(s)



Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

From the editor's desk: Is additive manufacturing poised to go mainstream?
March 2021, Technews Publishing (SA Instrumentation & Control) , News
As digital manufacturing technology pushes its way further towards the production floor, additive manufacturing (3D printing) is emerging as a viable option to complement the more traditional methods ...

Read more...
Endress+Hauser opens vaccination centre
July 2021, Endress+Hauser South Africa , News
As part of a model project, Endress+Hauser is operating a vaccination centre for employees in Maulburg.

Read more...
IS³ accelerates digital transformation through its AVEVA Select partnership
July 2021, IS³ - Industry Software, Solutions & Support , News
IS³ has announced that it has become the first AVEVA Select partner in the EMEA region, making it the only authorised distributor for AVEVA products in southern Africa.

Read more...
Flow Software joins the Eclipse Foundation and Sparkplug Working Group
July 2021 , News
Sparkplug governing body and industry collective welcomes an innovative industrial data analytics and information management software provider to help drive the future of the protocol.

Read more...
IS³ accelerates digital transformation through its AVEVA Select partnership
July 2021, IS³ - Industry Software, Solutions & Support , News
IS³ has announced that it has become the first AVEVA Select partner in the EMEA region, making it the only authorised distributor for AVEVA products in southern Africa.

Read more...
New B2C online shopping platform for engineering consumables
July 2021, Bearing Man Group t/a BMG , News
BMG’s online shopping platform now encompasses a newly launched E-commerce service, designed especially for consumers, to boost their buying experience of engineering consumables.

Read more...
ETG hosts second EtherCAT Interoperability Testing Week
July 2021 , News
After the first EtherCAT Interoperability Testing Week of the EtherCAT Technology Group (ETG) met with a great response, the second event was also very well received.

Read more...
Africa’s economic recovery needs to focus on creating a more resilient continent
July 2021 , News
As a continent, Africa needs to focus on growing its manufacturing capability and lessen its reliance on imports from other regions.

Read more...
SAIMC: From the office of the CEO
July 2021, SAIMC , SAIMC, News
The Identification of Engineering Work that has been in the making since 2000, was eventually gazetted in March this year. People now have roughly three years to comply – depending on your surname. ...

Read more...
SAIMC: Durban branch
July 2021, SAIMC , SAIMC, News
The Durban branch held its latest technology meeting via Zoom on the first Wednesday of June. Bryan Baxter explained the importance of effective cybersecurity for industrial networks – something which ...

Read more...