Application Planning
3.6 Check list: Data security
Fail-safe operation of the Mobile Panel 277F IWLAN
50
Function Manual, 08/2008, 6AV6691-1FQ01-2AB0
3.6
Check list: Data security
Introduction
Data security, security in automation technology serves particularly to ensure the availability
and trouble-free operation of industrial plants.
In order to ensure secure transmission of signals via a WLAN for the Mobile Panel
277F IWLAN, you must particularly safeguard the system from unauthorized access.
You can count on the following types of unauthorized accesses:
● Outside accesses
To protect against unauthorized accesses from outside you must protect the WLAN in the
same way you would protect a WLAN for office communication, namely with a firewall.
● Accesses from inside
Investigations have shown that the majority of attacks on data security are executed from
inside the plant. To ensure data security you must take special measures inside the plant.
Possible attack objectives
The HMI device communicates with the fail-safe controller via PROFIsafe. Here the following
possible attack objectives are present:
● Parameter assignment and configuration
Possible objectives of an attack are assignment of parameters to a device and
configuration.
● Productive operation data
The productive data can be manipulated by sending a series of false PROFIsafe
telegrams, which prevent the machine from being switched off.
Data transfer between HMI device and access point is protected by the AES encryption
mechanism. Manipulation of productive data is prevented in this manner.
Organizational measures to ensure data security
The organizational measures to ensure data security are described in the following
documents:
● PROFIsafe – Profile for Safety Technology on PROFIBUS DP and PROFINET IO
(IEC 61784-3-3)
● PROFIsafe - Environmental Requirements
Note the regulations in these documents.
Check list
The following check list shows the organizational measures required to achieve the highest
possible level of data security when transmitting via WLAN.
Specify the organizational measures you must implement in accordance with your plant's
requirements. Take all phases into account:
● The configuration phase
