Security Service Architecture Design Based on IEC 62443 Standard

Smart factory development has resulted in numerous advantages such as increased efficiency, productivity, and flexibility. However, integrating multiple technologies in smart factories has led to security challenges. With the number of network-connected automation devices increasing, industrial control systems are becoming increasingly vulnerable to cyberattacks. Therefore, to address security vulnerabilities in automation control systems, the International Electrotechnical Commission (IEC) established the IEC 62443 standard. In this study, internationally accepted operational technology security standards and a demo security-proven industrial automation and control system were used to enhance smart manufacturing cybersecurity. IEC 62443-2-4 is part of the IEC 62443 standard that specifies a comprehensive set of requirements for security capabilities. The service providers of industrial automation and control systems offer to asset owners during the integration and maintenance of automation solutions. To develop an industrial automation and control system, the Taiwan Instrument Research Institute (TIRI) conducted security assessments and implemented countermeasures required by IEC 62443-2-4. Thus, to provide industrial protection measures and operating procedures for field security deployment, operation, and maintenance, an automation solution was also designed in this study. This process is to process manufacturing projects of any automation scale. To plan the security protection process of industrial automation and ensure the security of the asset owner’s field, the risk assessment and management of industrial control were employed. Generally, the hierarchical architecture of the physical network used by the TIRI in the service field is composed of network security equipment and equivalent mechanisms. The purpose of this project is to enhance the security service architecture by adopting the IEC 62443-2-4 standard. Adopting this framework helps smart factories ensure the protection of sensitive data, improve device authentication and strengthen overall security.