Secure socket layer (SSL) for the secure networking of control

Since the time of introducing the M1 Bachmann Electronic has built on control networking being based on the Ethernet. The transmission protocols specifically designed for internet capability support the remote maintenance of the plant via the World Wide Web in contrast to other protocols like the ProfiNet.

Technically speaking, the TCP/IP protocol is used for the communication among the controls and for the integration of the controls into client/server networks. »In order to permit internet-capable and quick networking we have built the communication of the Bachmann systems on a RPC XML (Remote Procedure Call) model with optimised SOAP (Simple Object Access Protocol)«, says Josef Fritsche, manager of the software development at Bachmann Electronic.

However, unencrypted transmission can all too easily be abused by unauthorized persons via the internet. Consistent internet-capability demands standardised concepts, as far as data backup is concerned. Bachmann Electronic builds on the use of SSL (Secure Socket Layer). »We use this standardised protocol for the data exchange and can protect both the log-on and the transmission of the data against unauthorized access«, Fritsche explains.
The advantage of SSL is that neighbouring software layers are not impaired by this protocol, as SSL is completely transparent for them. This permits to extend existing protocols by software updates and to clearly separate the time-critical, but safe system-internal communication, and the less time-critical external transmission of encryption data.
»In general, encryption algorithms consume a lot of computer power«, Fritsche points out, and yet he comforts: »But our high-performance processors of the MPC and MX series simply solve these problems.«

From the perspective of Bachmann Electronic, a special challenge was that the management of the necessary encryption parameters had to be designed as simple as possible for the user. The solution quickly became clear: Bachmann Electronic provides its customers with all required components: keys, certificates, and the required trusted server. Josef Fritsche comments: »This underlines our philosophy to implement all critical software components directly in the source code. It enables us not only to guarantee best performance and simple handling for the customer, but also long-term availability of the software – without any obligations to third parties.«

We have reached the aim with SSL on the M1: encrypted communication in the network via TCP/IP on the basis of a world-wide standard. This makes the transmission of valuable equipment data as safe as telebanking.