B-Scada and Security

Transcription

1 B-Scada and Security How B-Scada s Status Products Keep Your Data Secure

2 B-Scada and Security There are four communication relationships in the system that must be considered when thinking about security. 1) Between the Devices and the Data Connector Service 2) Data Connector Service and the Status Server 3) Between the Status Server and Windows Clients 4) Between the Status Server and Web Clients The following discussion applies to both Status Enterprise and Status Device Cloud. OPC UA The B-Scada system is built using OPC UA. The primary server in the system (Status Server) is an OPC UA server. Any applications that communicates with the Status Server must communicate OPC UA. OPC UA is built to be platform independent and the communication is built into layers on top of the standard TCP/IP stack. Above the standard transport layers there are two layers, one that handles the session and one to establish a secure channel between the client and server. The transport layer is made up of TCP/IP and on top of that SSL, HTTP or HTTPS. The Communication layer secure the communication channel not just that the data is corrupted but also it secures the authentication so that the end points can t be infiltrated and changed. This is based on X.509 certificates that have three parts to it and the first peer to peer trust needs to be manually done but after that the rest is taken care of securely. Many hundreds of companies including many Fortune 500 companies rely on OPC UA. PLC manufactures, like Siemens, are now putting OPC UA servers on their PLCs, they selected OPC UA because it is secure. 2

3 Devices and the Data Connector Service As seen in this diagram, data flows from the devices to the B-Scada Data Connector service. B-Scada supports many communication protocols including OPC UA, OPC DA, REST, SNMP, Modbus TCP and many others. The security between the devices and the Data Connector service depends on what protocol you select. If you want something secured with SSL, use a protocol like OPC UA. If the equipment sending the data is using a less secure protocol, there is no way for B-Scada to make the equipment send it in a more secure manner. Contact the manufacturer. 3

4 Data Connector Service and the Status Server The Data Connector Service talks securely using OPC UA to the Status Server (TCP/IP, and on top of that, SSL, HTTP or HTTPS). Status Device Cloud also has a Data Connector Service running. Devices can connect using web friendly protocols including OPC UA and REST. The security between the devices and the Data Connector service depends on what protocol you select. 4

5 Status Server and Windows Clients The Windows Clients talks securely using OPC UA to the Status Server (TCP/IP and on top of that SSL, HTTP or HTTPS). 5

6 Status Server and Web Clients Web browsers browse to web pages served up by the Status Web Gateway. These pages are the mimics designed in the Mimic Designer. The live data connection between the web browser and Status Web Gateway uses web sockets to update the screens in the web browser. The web socket connection is not encrypted. Users may purchase an SSL Certificate and have it installed on the Internet Information Services (IIS) server that is hosting the gateway. 6

7 B-Scada provides software and hardware solutions for the monitoring and analysis of real time data in the SCADA (Supervisory Control and Data Acquisition), IoT (Internet of Things) and Smart City domains. B- Scada systems are sold worldwide in various verticals including building automation, transportation, smart grid, manufacturing, agriculture and commerce. B-Scada solutions are deployed onsite and as cloudhosted solutions in a SaaS (Software as a Service) model. Visit us on the web: W Fort Island Trail, Bldg 9 Crystal River, FL info@b-scada.com Phone +1 (352)