TETRA - the best choice for narrow band wireless SCADA and IP-communication

Transcription

1 TETRA - the best choice for narrow band wireless SCADA and IP-communication June 2016 CCW / TWC Funk-Electronic Piciorgros GmbH Michael D. Piciorgros (CEO)

2 Why should someone chose TETRA for SCADA and IP Applications? Feature Rich Technology Stringent IOP Procedure Scaleable - From Single Site to Country Wide TETRA Performance and Data Speed The Technology is (the) Save(est) against IP Risks

3 Feature Rich Technology

4 Funk-Electronic Piciorgros GmbH (TMC-200 / TETRA Modem Core) 350, 380, 410, 450, 800 MHz Status, SDS, Packet Data, MSPD Voice, Individual / Group Communication, Authentication, Encryption, E2EE, TEA1, 2, 3, +++

5 TETRA Modem Two serial Ports, one Ethernet Port and an optional Audio Port

6 TETRA RTU as before with additional embedded I/O optional Audio Port

7 IOP Procedure

8 Funk-Electronic Piciorgros GmbH (IOP Certificates) Rohill SELEX EADS / Airbus 3T-Frequentis (Sepura) Damm, Motorola Teltronics Hytera, ETELM

9

10

11 Approvals

12 Funk-Electronic Piciorgros GmbH (National Approvals) EU (BABT Certificate) Hong Kong, Thailand, Russia FCC (USA), IC (Canada), Algeria, Philippines, Australia, Malaysia, Russia, +++

13

14 TETRA Performance and Data Speed

15 TETRA SCADA Application using an SDS Gateway SCADA Control Room TMO-100 SDS (PD) I/O or Serial Interface SDS (PD) PLC / PRTU PLC / PRTU PLC / PRTU PLC / PRTU TMO-100 Analog and Digital I/O SDS (PD) Command and Control Line Device TGW-100 SDS Gateway IP Communication TETRA Switch TMO-100 Serial Interface PLC / RTU

16 Performance Test with SDS-Gateway on FOUR SCCH/MCCH: Infrastructure: TETRA with one carrier TETRA Data Link: MCCH plus three SCCH Data Compression: OFF Data nodes: One or more polling nodes, polling 10 TMO-100 each Protocol: Modbus RTU Polling Target: Polling different numbers of bytes from inside the TMO- 100 One Node (on each TS) Two Nodes (on each TS) Three Nodes (on each TS) Four Nodes (on each TS) 16 Nodes SDS: 20 Bytes (on each TS) Table showing total polls (on all time slots) per minute (values rounded)

17 TETRA SCADA Applications (using the TMO-100 TETRA Modem and RTU)

18 Country: City: User: Network Manufacturer: Data Communication: Gateway: Application: Thailand Bangkok Power Company Cassidian / Airbus Packet Data No Control of Pole Mounted Switches

19 Country: City: User: Network Manufacturer: Data Communication: Gateway: Application: Hong Kong Hong Kong Power Company Hytera SDS Multiple Different user depending Applications

20 Country: City: User: Network Manufacturer: Data Communication: Gateway: Application: Luxembourg Luxembourg Power Company 3T / Sepura Packet Data + SDS Yes + Pure IP Link Monitoring and Control of med. Power Transformer Stations

21 Country: City: User: Network Manufacturer: Data Communication: Gateway: Application: Panama Panama City Panama Canel Motorola Dimetra SDS Not yet Canel Telemetry

22 Country: City: User: Network Manufacturer: Data Communication: Gateway: Application: Kazachstan Astana Railways Motorola Dimetra Packet Data No Train Monitoring and Data Communication

23 Country: City: User: Network Manufacturer: Data Communication: Gateway: Application: Algeria Hassi Messaoud Gas and Oil Etelm SDS No Oil Well Monitoring

24 Country: City: User: Network Manufacturer: Data Communication: Gateway: Application: Spain Barcelona Public Safety Cassidian SDS No Control and Command

25 Country: City: User: Network Manufacturer: Data Communication: Gateway: Application: Romania Bucharest Otopeni Airport Motorola SDS No Water Tank Monitoring

26 Country: City: User: Network Manufacturer: Data Communication: Gateway: Application: South Africa JoBurg Power Company Rohill Packet Data + SDS No Street Lights Med. Pwr Transf.

27 Country: State: User: Network Manufacturer: Data Communication: Gateway: Application: USA Georgia Water Company Power Trunk Packet Data Pure IP Link Monitoring of Pumping Stations

28 TETRA Data Applications IP Risks and IP Security

29 The search term Cyber Attack Industry Gives more than Results

30

31

32 Potential IP Risks (Back Doors) Control Room Air Interface Remote Modem

33 Risks using IP Communication via wireless Infrastructures to Remote Outstations SCADA Control Room PD TMO-100 IP Remote Modem Control Room PD Router / Gateway PD TMO-100 I/O Command and Control Line Device Tetra Switch Air Interface TMO-100 IP AMR, PLC or RTU

34 Potential IP Risks (Hacks) Access from the SwMi side to the remote modems (RTU s) Hacker send Control and Command data to the remote RTU s Access from the remote devices to the SCADA Server (Intranet) Hacker try to access and stress the Intranet, SCADA Server or any other Intranet Server Access via the Air Interface (using a spare TMO-100) Hacker try to access the Intranet or try to send commands to the Outstation RTU s IP Data flooding via a remote device Hacker try to flood and stress the TETRA Infrastructure with data packets Using IP Services to access the Intranet via a Remote Modem Hacker try to use services (ports) like Telnet, FTP or others to access and stress the Intranet

35 TMO-100 Protection and Firewall(s) Access from the SwMi side to the remote modems (RTU s) The IP Server Source Address received by the TMO-100 can be restricted to a specific IP Address or a specific IP Address range Access from the remote devices to the SCADA Server (Intranet) The RTU Source Address received by the TMO-100 can be restricted to a specific IP Address or a specific IP Address range Access via the Air Interface (using a spare TMO-100) Enable AIE to avoid unwanted Access via the Air Interface IP Data flooding via a remote device A configurable IP Flooding Filter stops the data flow for a specific time (5 minutes), after the TMO-100 has received a specific number of IP Packets (5 packets) in a specific time frame (10 seconds) Using IP Services to access the Intranet via a Remote Modem Optional all IP ports can be disabled while up to 5 can be enabled individually

36 Conlusion: The TETRA Performance is sufficient for the most SCADA Applications TETRA can do Serial and IP Communication With TETRA as a PMR Network, the user has full control of his Infrastructure (Power Supply, Antennas, Back Bone, ) TETRA is the savest (ref.: Public Safety) existing wireless network Existing Technologies to protect against Cyber Criminals TETRA will be available at least for the next Years

37 Funk - Electronic Piciorgros GmbH Claudiastr Köln-Porz Germany Thank you very much for your interest in our Products