Electronic User Authentication Key for Access to HMI/SCADA via Unsecured Internet Networks

Area of Science:

• Computer Science
• Cybersecurity
• Industrial Control Systems

Background:

• Human-Machine Interface (HMI) and Supervisory Control and Data Acquisition (SCADA) systems are vulnerable to cyberattacks via Unprotected Internet Networks (UPN).
• Existing vulnerabilities allow cybercriminals to exploit systems for stealing passwords and user authentication credentials, especially during remote access.
• Current protection technologies, including the One-Time Password (OTP) method, require enhancement for robust security.

Purpose of the Study:

• To develop novel hardware and software solutions for securing HMI/SCADA systems access over UPNs.
• To propose a new information security concept for user authentication in UPN environments for remote work.
• To create a reliable electronic user authentication key resistant to software hacking.

Main Methods:

• Investigation of modern protection technologies, focusing on the OTP method.
• Development of a new concept for information security in UPNs, including electronic key structure and connection diagrams.
• Implementation of two-level user identification algorithms and firmware for the ATmega32U4 microcontroller.
• Conducting experiments to validate the reliability and stability of the developed authentication key.

Main Results:

• A new electronic key and associated hardware/software for secure remote access to HMI/SCADA systems have been developed.
• The proposed system incorporates a two-level user identification algorithm for enhanced security.
• Experimental results demonstrate the reliability and stability of the electronic authentication key against software hacking attempts.
• The developed solution addresses vulnerabilities in remote access to industrial control systems via UPNs.

Conclusions:

• The developed electronic user authentication key provides a robust solution for protecting HMI/SCADA systems access over UPNs.
• The proposed security concept effectively mitigates risks associated with remote access to confidential industrial information.
• The system offers enhanced cybersecurity against password theft and unauthorized access, crucial for industrial environments.
• Further validation and implementation of this system can significantly improve the security posture of industrial control systems.