Technion Research & Development Foundation Ltd

Flash Networks, Ltd

Sara Bitan-Erlich

Eli Biham

Stuart Sanders Jeffery

Yair Karmi

Yaron Menahem Peleg

Eyal Katz

Eli Gavril

Alon Dankner

One of the main obstacles of securing industrial control systems is the lack of an appropriate security model that is both implementable by vendors and addresses the inherent security and usability issues needed by organizations. Current solutions such as device passwords and IPSec lack scalable key management infrastructure and fine granularity access control mechanisms. A security model for industrial control systems that supports organizational level authorizations and authentication requirements, while hiding the low-level details (e.g., keys and passwords) from the users is disclosed. It also enables easy addition and removal of PLCs, engineering station, HMI devices and users, and assigning permission to them. A major advantage is its support for hybrid ICS systems, characterized by co-existence of legacy devices and new devices, while using the same protocol. Devices may communicate therein either natively, or by a connected converter. This co-existence allows organizations to gradually switch from a fully-legacy ICS to ICS natively supporting the disclosed security model, by replacing a single (or a few) devices at a time, incurring little or no system downtime. An exemplary protocol supporting the disclosed security model, namely K7, is based on the Siemens S7 protocol, and enhances it with new cryptographic features to support the extra functionality. Similar enhancements may be applied to other protocols. A ticket-based system, (e.g., Kerberos with LDAP server) used to support the exchange of permissions and keys, is incorporated into the disclosed protocol. K7 may be implemented as a protocol converter add-on to standard Siemens clients and PLCs that transform them into augmented devices that use K7. Siemens and other vendors may add direct support for K7 on their ICS systems, devices, and the like in the future.

Protected protocol for industrial control systems that fits large organizations

A system for authenticating messages transmitted on a bus based on physical location of transmitting units, comprising a reflector adapted to inject a plurality of reflection signals at a first point of a line topology bus, each in response to each of a plurality of messages transmitted by a plurality of bus connected units and a probe adapted to intercept the messages and the reflection signals at a second point of the bus. The probe calculates propagation timing between a reception time of the message and a reception time of an associated reflection signal transmitted in response to the message and determines validity of the message according to a match between the calculated propagation timing and a predefined propagation timings associated with the bus connected units. Wherein the bus connected units are statically connected to the bus between the first point and the second point.

Message authentication based on a physical location on a bus

A multiple entity gateway for supporting cellular authentication from a non-cellular network, the gateway comprising a plurality of entities each located at a different one of a plurality of secure zones and having at least one gap between said entities across said secure zones, said gateway being configured to predefine communication signals allowed across said gap between said entities, thereby to filter out non-allowed signals, and provide secure cellular authentication for a communication originating from said non-cellular network. The gateway allows cellular users to connect to a cellular network via a wireless local area network such as a hotspot, use the services of the cellular network, the Internet and the hotspot at will, and be securely authenticated and charged through the cellular infrastructure.

Accessing cellular networks from non-native local networks

Growing community of inventors

Moshav Hadar-Am, Israel

Sara Bitan-Erlich