IoT - Internet of Things or Internet of Threats?

IoT – Internet of Things or Internet of Threats?

New IO-Link master for a secure sensor-to-cloud architecture

The IoT is taking shape, and with it the potential security risks are becoming bigger and more diverse. As the number of networked embedded devices at the edge grows, the attack surface increases — and end-to-end also implies, conversely, that unauthorised access all the way down to the level of sensors and actuators is theoretically possible. If sensor parameters such as switching points can be manipulated without authorisation, an IT security issue quickly becomes a threat to operational technology and production facilities. IT/OT integration at its worst.

To ensure the Internet of Things doesn’t turn into an Internet of Threats, data must be captured, collected and transmitted as securely as possible. All the more surprising is the nonchalant approach to data security in most sensor-to-cloud architectures. Modern IO-Link masters enable digital signal transmission between IO-Link sensors and any endpoints, for example into SCADA systems or into a private or public cloud environment where virtual controllers map PLC functionality or where the ERP is hosted. Secure encryption of the data should therefore be right at the top of the requirements specification for every IoT project. When it comes to IO-Link masters, the right hardware for this has so far been lacking.

Hardware for the highest security requirements

With the AD009, autosen has developed a new IO-Link master that meets the particularly high security requirements in a networked production environment. First and foremost, the device is a fully functional IO-Link master with all common features and 8 IO-Link ports, via which sensor data can be captured and then transmitted directly to the cloud via Ethernet, a router or similar. Transmission is fully encrypted at sub-second intervals, which rules out unauthorised external access or manipulation. autosen uses TLS encryption for this. It works with certificates for authentication and controlled key exchange — the TLS handshake — and a symmetric cryptosystem for encryption and decryption.

Thanks to secure end-to-end communication between the field and control levels, the AD009 can also be used to make critical processes more efficient, more economical and more resilient via the cloud. The AD009 is available on autosen.com from 14/11/2023.