Abb Power Grids Switzerland Ag

Hitachi Energy Ltd

Hitachi Energy Switzerland Ag

Wolfgang Spahn

Jon Duri Sarott

Walter Binz

To provide secure communication over end-to-end data paths or segments of end-to-end paths in a timed deterministic packet network including a plurality of packet engines that perform packet handling, cipher engines are provided separately from the packet engines. The cipher engines are operative to perform at least one cyber security function. A cipher engine and key manager provides central control for the plurality of cipher engines. A centralized packet flow path manager, PFPM, may set up endpoint nodes and intermediate transit nodes of the end-to-end data paths of the packet network.

Methods and devices for providing cyber security for time aware end-to-end packet flow networks

A packet network includes packet engines that perform packet handling. Cipher engines are provided separately from the packet engines for encryption and/or authentication operations. To preserve relative timing and ordering of data packets, a packet engine performs pre-shaping of data traffic, wherein the packet engine inserts dummy packets into a data flow. The packet engine provides the pre-shaped data traffic to a cipher engine.

Growing community of inventors

Bern, Switzerland

Wolfgang Spahn