SDL Specification of a Security Architecture for the TS 61158

Abstract

This paper discusses the security in Fieldbuses, and presents the specification of a security architecture for the centralized Fieldbuses. The discussion takes into account, on one hand, the security services defined by ISO, and on the other hand, the security services defined by TS 61158. The discussion shows that the TS 61158 provides users with the authentication and control access services for some application objects. Nevertheless, as Fieldbuses become more and more diverse, complex and integrated into other kind of networks, the TS 61158 must provide other security services, such as user and nodes authentication, integrity, and confidentiality because there are three critical points for attacking this network: the Link Active Scheduler, the Delegated Token and the Bus. The paper presents then the specification, using the Specification and Description Language (SOL), of a security architecture for the TS 61158 based on the following cryptographic mechanisms: a reduced version of DES (user-authentication), a node's private key (node-authentication), and the RC4 algorithm (confidentiality).