4.1.
User authentication
The user has to authenticate himself by giving a user name and password. The
user name and password have to be communicated to the core unit to check
the authentication. For security reasons, to avoid access from intruders and
not authenticated users, the information (user name and password) is
encrypted with a non-convertible key.
Therefore, digest authentication algorithms are used in the configuration tool
and REF 542plus core unit. This way passwords are not communicated as
plain text through the communication line because they are already converted
on the PC level with an AES algorithm encryption key and converted back on
the device level. The AES algorithm is a symmetric block cipher that can
encrypt (encipher) and decrypt (decipher) information. The encryption
converts data to an unintelligible form called ciphertext; decrypting the
ciphertext converts the data back into its original form called the plaintext.
The AES algorithm is capable of using cryptographic keys of 128, 192, and
256 bits to encrypt and decrypt data in blocks of 128 bits.
4.2.
Security for writing operations
Web-enabled REF 542plus allows some writing operations. This means that
the user can change information on the server, such as the telephone numbers
for SMS messaging.
This writing operation needs an authentication based on user name and
password. For security reasons, the digest authentication is applied. This way
passwords are not communicated as plaintext through the communication
line.
4.3.
Security for saving passwords
Web-enabled REF 542plus allows interaction with the device for different
types of user rights. Operation requiring special rights needs an authentication
based on the user name and password. All the passwords are stored in the
SCL file on the PC. This file is prepared by the Configuration Tool and then
sent to the device. For security purposes, all the passwords are not stored as
plaintext but as already encrypted.
Selecting a suitable password is crucial and part of the security aspects of the
application. A password should be handled like a key and should never be
public. The password should be changed randomly and it should not contain
names or words in order to increase access security for hackers and unwanted
actions. It is further recommended to have figures and special characters in
the password to increase the security level for any intruders.
The password must have a minimum of 8 characters, otherwise
the password is not accepted.
16
REF 542plus
Multifunctional Protection and Switchbay
Control Unit
Installation Manual for Web Interface
Installation manual
1MRS755865
