Toward Human-centric Industries“Connected Industries”
New vision for the future of Japanese industries

Industrial security Requirements-extracted from discussion on a cross organization use case-Industrial security AG, RRI

2017 Copyright Robot Revolution Initiative, All Rights Reserved.

1

Toward Human-centric Industries

Japan & German collaboration on Industrial Cyber security“Connected Industries”
New vision for the future of Japanese industries

Our Goal: To identify new security requirements in future manufacturingsystems of Industrie4.0
New Security Requirements
In future manufacturing system

Security Requirements
already mentioned inIEC62443

2017 Copyright Robot Revolution Initiative, All Rights Reserved.

2Toward Human-centric Industries

Challenges“Connected Industries”
New vision for the future of Japanese industries

To identify new security requirements, we have to first identify and share
future business use cases and their system architecture.
Future businessuse cases(business needs)

Difficult!
Futuristic but realistic from the view point of mega trend.

FutureSystemArchitectureFirst target

Difficult!
Realistic from the view point of current technology andto-be technology.

FutureSecurity
Requirements

Easy if the system architecture is clear
Tech. concepts of I4.0(“Admin shell”,“Industrial Data space”etc.)
are here!
Security
Not discussed yetFunction
SecurityImplementation2017 Copyright Robot Revolution Initiative, All Rights Reserved.

Toward Human-centric Industries

A system architecture of the Use Case

“Connected Industries”
New vision for the future of Japanese industries

External Advisor EA1(Japan)
FirewallOperation states of each controller in factories are monitored
through the Data Access Platformby External Advisors
Internetfor early fault detection and recovery.
Manufacture M1 (German)
Production
Scheduler(PS) (M1)
Opreator

Factory2

Robot Cont.
Model B.

MnMESModel1

PLC
Model1MES
Model2PLC
Model2Firewall

Robot Cont.
Model A.

OA Terminal
(M1)

EAm
Data
Analyzing
Server(DAS) Mainte-nance Eng.

FirewallFactory1

ERP(M1)OA terminal

Data access platform(the 3rd country)
Data Accessserver・Operation logs of Robot Controllers in eachfactory(ex. in German) are gathered to theplatform in the 3rd country.
・External Adversary in Japan for Robot Cont. get
the data of them from the platform.
・if a EA predicts faults, it sends the alarm to thecorresponding ERP.
・The ERP contacts with Production scheduler anddetermine the production schedule andmaintenance schedule.

2017 Copyright Robot Revolution Initiative, All Rights Reserved.

4Security requirements for the architecture

Toward Human-centric Industries“Connected Industries”
New vision for the future of Japanese industries“Global”, “dynamic” and “horizontal integration” could be the key to identify
I4.0 specific security requirements.
Red: I4.0 specific seq.req.candidates

System/network-Unique IDs should be assigned to users to authenticate them-Need to access policy” should be applied to system and network-In order to adapt dynamic change of entities which need access to the system and network,
automatic access control change mechanism should be introduced.
-Communications for inter-organization and inter-component should be protected.

Components- Unique IDs are assigned for unified global access and identification.
-Access right for components should be “need to access” basis(ex. in a role based manner).
-”Who access to what components when” should be kept for audit and tracability.

Etc.(data)- Personal information should be protected for complying with privacy regulation.
2017 Copyright Robot Revolution Initiative, All Rights Reserved.

5

Toward Human-centric Industries

Future work

“Connected Industries”
New vision for the future of Japanese industries

We are going to identify new security requirements though the process of ①②③④,
and also to deeply understand Industie4.0 Sec.Func. with the need of proper implementation.
Future businessuse cases(business needs)④
Add other use cases①
Identify system architecture

FutureSystemArchitecture②
Identify security requirements
FutureSecurity
Requirements③
Add other architecture

Security
Function

Admin shell
Industrial Data spaceEtc.

Security
Implementation2017 Copyright Robot Revolution Initiative, All Rights Reserved.

6

Toward Human-centric Industries“Connected Industries”
New vision for the future of Japanese industries

Appendix2017 Copyright Robot Revolution Initiative, All Rights Reserved.

7

Business use case map(Where is our business use case?)

Toward Human-centric Industries“Connected Industries”
New vision for the future of Japanese industries

Both German and Japan side have shared the whole picture
which shows where values exist in product/production
lifecycle and its maintenance. We have chosen VBS as thestart discussion item.
IPDSAL
SP2SPD
IPD Innovative Product Development
SPD Seamless and Dynamic Plant
Engineering
AF Adaptable Factory
SP2 Smart Product Development for
Smart Production
OCP Order-Controlled Production
HTI Human-Technology-Interactionin the Production
SAL Self Organization andAdaptive Logistics

TAPAF
OCP

HTI

VBS

VBS: Value Based Service

TAP Transparency and
Adaptablility of Delivered Products
VBS Value-Based Services2017 Copyright Robot Revolution Initiative, All Rights Reserved.

8Business Use case:
Early fault detection and rapid fault isolation/recovery(VBS)

Toward Human-centric Industries“Connected Industries”
New vision for the future of Japanese industries

This objective is for manufacturers to attain higher availability (smaller down time) by meansof early fault detection and rapid fault isolation and/or recovery.

･The present scenario introduces Platform, which collects the operating information of machines used all over the world and gain
benefits by offering the information to External Advisory.
・By doing so, External Advisory does not have to pay effort on collecting information, and he/she can enhance its diagnosis expertise.
・Alternatively, External Advisory can gain benefits by offering a model of machines regarding their faulty behavior and necessary
measurement to Platform.
・By doing so, Platform can gain benefits by providing diagnosis service to Manufacturer using their information infrastructure, which
is used for monitoring machines.
92017 Copyright Robot Revolution Initiative, All Rights Reserved.

Toward Human-centric Industries“Connected Industries”
New vision for the future of Japanese industries

This figure shows how new kinds of interactions and trust are needed in industrie4.0
So that management can intuitively understand the security challenges in industrie4.0.

2017 Copyright Robot Revolution Initiative, All Rights Reserved.

10Toward Human-centric Industries“Connected Industries”

Admin shells applied for the system structure

New vision for the future of Japanese industries

FirewallEach component and server with “admin shell” could be join to I4.0 systems and interact
with each other as a standardized I4.0 object.
External Advisor B
Internet
Manufacture A
Admin. Shell (AS)

Production
Scheduler(PS)

AS

AS

Robot
Cont.1

AS

AS

PLC1

MES1

AS

AS

AS

PLC2

MES2

Factory1

AS

Factory2

Robot
Cont.2

Data
Analyzing
Server(DAS)AS

OA
Terminal

FirewallERP

OA
TerminalAS

DF Header

Admin. Shell(AS)DF: Digital Factory

Identification Item
Identification of the cntrl. panel=DF Body

Partial model 1
Partial model 2
Partial model 3

Compo.
Manager

2017 Copyright Robot Revolution Initiative, All Rights Reserved.

11