| Watch this video on the recent uptick in cybersecurity breaches. | To help operators achieve this, Rockwell Automation has released the Allen-Bradley Common Industrial Protocol (CIP) Security Proxy, which aims to allow end-users to more easily retrofit their systems to be compatible with CIP security methodologies.
CIP security works by initiating a transport layer security (TLS) “handshake” whenever a new device is added to a network. Before any communication is established, the TLS handshake checks to guarantee that the device being added possesses a security certificate that must be embedded in the device by the vendor. Once the identity of the device is established, encryption keys are created and exchanged, which allow the devices to communicate cryptographically, effectively baking security into the communications themselves. This ensures that communications are authentic, that they have not been altered by an outside party, and that they remain private.
Similar techniques have been used to ensure safe and confidential network communication in the IT world for many years, but it is the increased need for device-level security in industrial environments that has brought it to the plant floor.
However, some legacy systems and equipment may not have native support for CIP security, due to lacking hardware and firmware. To remedy this, Rockwell’s CIP Security Proxy can be connected to any EtherNet/IP-compliant device, granting it a security certificate and allowing it to engage in encrypted communication with higher-level systems.
The proxy device contains three gigabit EtherNet/IP ports, and can be configured through Rockwell’s FactoryTalk Policy Manager software and FactoryTalk system services. In addition, it supports motion for Kinetix drives and offers a web server for viewing diagnostics.
