Hardware Cybersecurity on the FPGA Platform During Network Interaction of Distributed Industrial Equipment
Valery A. Kokovin, Alexander N. Sytin, Victor V. Skvortsov · 2024
This article discusses methods for reducing cyber threats in the network interaction of industrial equipment under DCS control. It is assumed that the control and network circuits of the equipment use solutions based on the FPGA platform. Methods of protecting network messaging are proposed by replacing separate, specially allocated network segments with uncontrolled access with a hardware-protected network segment (PNS). The PNS consists of two units with FPGA Cyclone 10 LP 10CL025YU256C8G from INTEL. In addition, each unit has an RS-485 Transceiver for connection to the RS-485 network segment and two DS-link LVDS-based Transceivers. An encryption algorithm in PNS for each bit of the transmitted byte of RS-485 data is proposed, in contrast to the widely used block encryption algorithms. DS encoding was used when transmitting data inside the PNS. The presented research focuses on the development and analysis of an effective implementation of a real-time data encryption algorithm. An example of the formation of code sequences during data encryption is considered.