Client-Server SCADA Technology

Size: px

Start display at page:

Download "Client-Server SCADA Technology"

Blanche Welch
9 years ago
Views:

Client-Server SCADA Technology A FULL WEB BROWSER-BASED SUITE BRIDGING THE OPERATION & INFORMATION GAP WITH WEB BROWSER DASHBOARDS FOR: v MANAGEMENT DECISION MAKERS v PRODUCTION/ OPERATIONS v MOBILE

1 Client-Server SCADA Technology A FULL WEB BROWSER-BASED SUITE BRIDGING THE OPERATION & INFORMATION GAP WITH WEB BROWSER DASHBOARDS FOR: v MANAGEMENT DECISION MAKERS v PRODUCTION/ OPERATIONS v MOBILE WORKFORCES & v REMOTE ASSETS SCADANEXUS FEATURES: v HIGH LEVEL ENCRYPTION AND SOPHISTICATED USER AUTHENTICATION WITH v PROVEN CLIENT/SERVER INTERNET COMMUNICATIONS DELIVERING CRITICAL OPERATIONAL STATUS INFORMATION SECURELY : where you want it and when you need it. SCADANEXUS: A COMPREHENSIVE PACKAGE THAT INCLUDES CONFIGURATION, MAINTENANCE & OBSOLESCENCE PROTECTION. Remote Assets v EASY TO BUY, v EASY TO OPERATE, AND v EASY TO IMPLEMENT.

2 Client-Server SCADA Technology How it works ü STATUS AND DATA INFORMATION IS GATHERED FROM REMOTE ASSETS BY THE SCADA NEXUS GATEWAYS. ü GATEWAYS THEN PITCH THE DATA ACROSS COMMUNICATION NETWORKS TO THE SCADA NEXUS CLOUD. ü THE CLOUD APP FORMATS THE INFORMATION INTO USER DEFINED DASHBOARDS AS WEB PAGES. ü USING A WEB BROWSER ON ANY DEVICE USERS LOGIN SECURELY TO VIEW DATA AND INTERACT WITH IED S. The SCADA Nexus Cloud is hosted RAI technology on various server-farm providers. Historical information is stored and available for reporting and trending capabilities. Alarms can be sent via or SMS alerts to mobile devices using predetermined responses. The management interface is secured using password protected user accounts to access your information. Remote Assets

3 Response SECURITY by Design 1. Users MUST be validated by login & password 2. All actions logged 3. Unauthorized access attempts logged 4. All Logins time out - no sharing SCADA NEXUS Clients Pitching to Server Network Cloud Enabled 128bit AES Capable Substation Fence Gateway connects & pitches to validated DataCatcher only DataCatcher responds to Gateway pitch only 1.Will not accept incoming connections 2. Accepts command requests only from valid DataCatcher 3. All Commands originate in ERTU behind the CIP Fence 4. Logs all local access with DataCatcher 5.Detects unauthorized access PC & 3G/4G Cell Phone Users Data Pitch Command Response Secured Web A SECURITY REVIEW Of Technologies NERC-CIP Secured Web Server Central User Access Control Validates User command requests Data Historian Central CIP Logs DataCatcher Server(s) NERC-CIP Secured; 1. Fence in place 2.No Holes or Open ports Nexus Gateway IED/slave NERC-CIP secured; 1. IED blocked from all unsecured connections 2. Gateway will not passthru any Poll or Command to the IED Other Master SCADA Licensed Radio For Sales and Technical Information Contact: Slave Radio 1. No CIP Fence 2. No Access logging 3. No Connection Control 4. No Unauthorized Access attempt detection RTU/ IED/ slave NERC-CIP unsecured; RTU/ IED accepts any outside connection & will respond to any Poll or Command No Master validation Master Polling Slaves Master Licensed Radio RS232 or RS485 Serial Master SCADA Computer Different Methods of Polling Serial OR Telnet Polling Command RS232 or RS485 Rep or Reseller contact data here Users only need to gain access to the Master computer(s). 1. Individual users actions not logged 2. Users share Logins 3. No unauthorized attempted access detection or logging 4. Commands originate outside the secure area Network LAN w/nat Holes for Master Port WAN Network Substation Fence w/nat Holes for each IED The CIP Fence has holes allowing outside connections into the Secure area. Telnet Server 1. No central access control 2. No Unauthorized attempted access Detection 3. No Central Log Rep or Reseller Logo here

4 Features and Bolt-On Modules Features: The Gateway is the only part to buy. Connect the Gateway to your IED(s) and the Web You have NERC secure SCADA! Use your Cell, Tablet, or Desktop as a Master Gateways are Friendly Advanced SSL Encryption & Verification Gateway Protocols are On-Board Modbus, DNP, 2179, OPC and others The Gateway Automatically signs up annually for Hosted Cloud Service - You get no-charge Web access Web Browser HMI with included Editor Included Historian for IED data Secure User Login with Passwords Full Alarm Suite Bolt-On Modules: Aggregated Metering Create/Add Virtual Metering points BPA Billing Approved Load Management Pumping, Heating, HVAC, Bldg Management Demand Response Voltage Regulator DR Multi-system Aggregation TWACS Sensus Comverge, others Security Systems Network Cams Visually inspect critical remote assets anytime of the day or night Add Life Extension to Master/ Slave systems Bolt-on Secure Web Access to existing Masters Redundant Systems for Ultra- Reliable Operations Redundant Gateways thru Cloud Servers ensures reliable operation regardless of weather or power situations Simple Secure Remote Access IED Management with logs EVE, SOE Reports with auto-retrieval IED Configuration and Management Remote PLC Programming

5 Enabling The Mobile Workforce Contact Us for Additional Details and Pricing Add Rep/Reseller contact data here

Using the DNP3.0 Protocol via Digi Device Servers and Terminal Servers

Using the DNP3.0 Protocol via Digi Device Servers and Terminal Servers For years, electric power utilities have relied on Digi internal serial cards (i.e., DigiBoard solutions) to connect UNIX, Linux and