Gateway to the Danger Zone: Secure and Authentic Remote Reset in Machine Safety
The increasing digitization of modern flexible manufacturing systems has opened up new possibilities for higher levels of automation, paving the way for innovative concepts such as Equipment-as-a-Service. Concurrently, remote access has gained traction, notably accelerated by the COVID-19 pandemic. While some areas of manufacturing have embraced these advancements, safety applications remain localized. This work aims to enable the remote reset of local safety events. To identify necessary requirements, we conducted expert-workshops and analyzed relevant standards and regulations. These requirements serve as the foundation for a comprehensive security and safety concept, built around a secure gateway. It uses secure elements, crypto agility, PQC, and certificates for secure and authentic communication. To show its applicability, we implemented a prototype, which utilizes a gateway, cameras, and light barriers to monitor the danger zone of a robot and thus enable remote reset via public Internet. The real-world limitations we faced, were used to refine our requirements and concept iteratively. Ultimately, we present a secure and safe solution that enables the remote acknowledgment of safety-critical applications.
Gateway to the Danger Zone: Secure and Authentic Remote Reset in Machine Safety
ARES '24: Proceedings of the 19th International Conference on Availability, Reliability and Security
| Authors: | Sebastian N. Peters, Nikolai Puch, Michael P. Heinl, Philipp Zieris, Mykolai Protsenko, Thorsten Larsen-Vefring, Marcel Ely Gomes, Aliza Maftun,, and Thomas Zeschg |
| Year/month: | 2024/7 |
| Booktitle: | ARES '24: Proceedings of the 19th International Conference on Availability, Reliability and Security |
| Pages: | 1 - 9 |
| Fulltext: | click here |
Abstract |
|
| The increasing digitization of modern flexible manufacturing systems has opened up new possibilities for higher levels of automation, paving the way for innovative concepts such as Equipment-as-a-Service. Concurrently, remote access has gained traction, notably accelerated by the COVID-19 pandemic. While some areas of manufacturing have embraced these advancements, safety applications remain localized. This work aims to enable the remote reset of local safety events. To identify necessary requirements, we conducted expert-workshops and analyzed relevant standards and regulations. These requirements serve as the foundation for a comprehensive security and safety concept, built around a secure gateway. It uses secure elements, crypto agility, PQC, and certificates for secure and authentic communication. To show its applicability, we implemented a prototype, which utilizes a gateway, cameras, and light barriers to monitor the danger zone of a robot and thus enable remote reset via public Internet. The real-world limitations we faced, were used to refine our requirements and concept iteratively. Ultimately, we present a secure and safe solution that enables the remote acknowledgment of safety-critical applications. | |
Bibtex:
@inproceedings {author = { Sebastian N. Peters and Nikolai Puch and Michael P. Heinl and Philipp Zieris and Mykolai Protsenko and Thorsten Larsen-Vefring and Marcel Ely Gomes and Aliza Maftun, and Thomas Zeschg},
title = { Gateway to the Danger Zone: Secure and Authentic Remote Reset in Machine Safety },
year = { 2024 },
month = { July },
booktitle = { ARES '24: Proceedings of the 19th International Conference on Availability, Reliability and Security },
pages = { 1 - 9 },
url = { https://doi.org/10.1145/3664476.3670940 },
}