Secure network for data collection

® Publication number

108 418

02633

NATIONAL INSTITUTE OF INDUSTRIAL PROPERTY (to be used only for reproduction orders) 21) National registration number:

COURBEVOIE @ Int Cl⁸ : G 06 F21 / 60 (2019.12)

A1 PATENT APPLICATION

<img file="FR3108418A1_D0001.tif" />

Applicant (s): ORANGE Public limited company - FR.

<img file="FR3108418A1_D0002.tif" />

Date of availability to the public of the request: 24.09.21 Bulletin 21/38.

Inventor (s): AVENEL Loic, ESNAULT Régis and LANCIEN Jean-Yves.

(56) List of documents cited in the preliminary research report: See the end of this booklet

@) References to other related national documents:

(73) Holder (s): ORANGE Public limited company.

©) Extension request (s):

(® Representative (s): PLASSERAUD IP.

FR 3 108 418 - A1 (54) Secure data collection network.

(57) The present invention relates to a data collection network (NTW) comprising a plurality of equipments (EQ1, EQ2, EQ3), and a collection apparatus (APP) adapted to collect data generated by the equipments.

The network further comprises a plurality of diode-network type devices (DR1, DR2, DR3) respectively associated with the items of equipment, each item of equipment being connected to the collection apparatus via the associated diode-network type device. Each diode-network type device is arranged to make the connection between the associated equipment and the collection apparatus unidirectional in the direction from the equipment to the collection apparatus.

Such a network thus makes it possible to prevent, in the event of an intrusion into one of the items of equipment or into the collection device, that the intrusion could spread to other items of equipment.

<img file="FR3108418A1_D0003.tif" />

lllllllllllllllllllllllllllllllllllllllllllll

Description

Title of the invention: Secure data collection network

Technical area

The field of the invention relates to securing a data collection network.

Prior art

The present invention falls within the context of a network, in particular a computer network, for collecting data, namely a network having an architecture in which several items of equipment are connected to a device for collecting data generated by these equipment.

[0003] Such an architecture can for example be that of a local network, in particular a home network connecting household appliances, meters, connected objects (in particular any connected equipment located in the home of an individual) or be part of a '' a computer installation for access to a network such as the Internet within the home of an individual, a local network using serial links implementing in particular the CAN (acronym for “Controller Area Network”) communication protocol used in particular for the automobile. But we also find this architecture in an industrial context regardless of the communication protocol used (Internet, CAN, etc.), in particular in a production plant or a factory, to connect industrial equipment such as machine tools, connected robots, portable Internet of Things devices, automatically guided vehicles known as AGVs (acronym for “Automated Guided Vehicles”), etc.

Typically, the data generated by the equipment and then collected by the collection device correspond to files listing the events that have affected the equipment and the computer network. Such a file, also called a “log” but more commonly known by the English term “log file” or more simply “log”, allows the collection device to establish a history of the events of the computer network. Furthermore, the data may also relate to an alert in the event of a problem or malfunction in equipment of the computer network. Finally, the data can also relate to measurements or a remote reading of equipment.

[0005] However, the architecture of a data collection network induces an interconnection between the various items of equipment and the collection device so that, in the event of an intrusion into one of the items of equipment, there is a high risk that this intrusion extends to other equipment and the collection device. Likewise, an intrusion into the collection device can spread to the equipment. Such an architecture thus facilitates the propagation of a computer virus, of malicious software (better known under the English term “malware”) or of autonomous mechanisms of computer infection within the computer network.

[0006] The prospect of such intrusions constitutes a threat:

- for the preservation and protection of confidential information, whether personal data in the case of a home network or, at industrial level, an industrial secret relating to an operating process of one or more equipment or a process manufacturing a product;

- for the normal operation of a production line in a factory, a connected vehicle, the home automation network, etc.

Abstract

The present invention improves the situation.

[0008] As such, the present invention relates to a data collection network comprising:

- at least one equipment, and

a collection device suitable for collecting data generated by said at least one item of equipment.

The network is characterized in that it further comprises at least one diode-network type device respectively associated with said at least one item of equipment, the item of equipment being connected to the collection device via the diode-type device. associated network, the diode-network type device being arranged to make the connection between the equipment and the collection device unidirectional in the direction from the equipment to the collection device.

Typically, the network comprises a plurality of devices and a plurality of devices of the diode-network type, at least one device of the plurality of devices being connected to the collection device via at least one device of the plurality. diode-network type devices.

Advantageously, a device of the diode-network type is associated with each device so that each device is connected to the collection device via the associated device of the diode-network type.

In one or more embodiments, the network further comprises an aggregation node connected to each item of equipment via the diode-network type device associated with said item of equipment. The aggregation node is suitable for aggregating the data generated by the equipment, the collection apparatus being suitable for collecting the data once they have been aggregated by the aggregation node.

[0013] For example, a device of the diode-network type associated with an item of equipment is installed within said item of equipment.

[0014] For example, a device of the diode-network type associated with an item of equipment is installed in the network outside of said item of equipment.

In one or more embodiments, the network further comprises at least one switch configured to selectively activate or deactivate at least one device of the diode-network type in order to be able to re-establish, if necessary, a bidirectional connection between the associated equipment. said diode-array type device and the collection device.

[0016] For example, the network is at least in part a wired network.

[0017] For example, the network is at least in part a wireless network.

In one or more embodiments, at least one piece of equipment is a machine tool.

In one or more embodiments, at least one diode-network device comprises a photocoupler unidirectionally connecting two controllers.

[0020] In one or more embodiments, a method of operating one or more items of equipment or a method of manufacturing a product by one or more items of equipment is characterized by a set of information distributed among the items of equipment of the plurality equipment.

The present invention also relates to equipment installed within a data collection network comprising a collection device. The equipment is connected to the collection apparatus via a device of the diode-network type associated with the equipment, the device of the diode-network type being arranged to make the connection between the equipment and the collection apparatus unidirectional in the direction from the equipment to the collection device.

In one or more embodiments, the equipment comprises the associated diode-network device.

Finally, the invention relates to a device capable of receiving data generated by at least one item of equipment of a data collection network associated with at least one device of the diode-network type, the data collection network comprising a collection device. The device capable of receiving data is connected to said at least one item of equipment via said at least one device of the diode-network type, the device of the diode-network type being arranged to make the connection between the equipment and the collection device unidirectional. in the direction of the equipment towards the collecting device.

In one or more embodiments, the device comprises at least one aggregation node adapted to aggregate the data generated by the equipment, the collection apparatus being adapted to collect the data once they have been aggregated by the aggregation node.

Brief description of the drawings

Other characteristics, details and advantages will become apparent on reading the detailed description below, and on analyzing the appended drawing, in which:

[0026] [fig. 1] illustrates a data collection network according to the invention.

Description of embodiments

The [fig.l] illustrates a data collection network, hereinafter NTW network.

The NTW network has an architecture in which the items of equipment are connected to a device for collecting the data generated by these items of equipment. The NTW network is for example a data collection computer network.

The NTW network comprises a plurality of devices, here three devices EQ1, EQ2, EQ3, a collection device APP, an aggregation node NA, a plurality of devices of the diode-network type, here three devices of the type network diode DR1, DR2, DR3, and a CMT switch.

The NTW network can be at least in part a wired network. By “at least in part a wired network” is meant that at least two entities of the NTW network, one entity being able to designate one item of equipment from the plurality of items of equipment, the collection device APP, the aggregation node NA or the switch CMT, are connected to each other by a wired link.

Furthermore, the NTW network can be at least in part a wireless network. By “at least partly a wireless network” is meant that at least two entities of the NTW network are connected to each other by a wireless link.

As explained in the part devoted to the prior art, the architecture of the NTW network may be that of a LAN network, such as a home network, a network of a vehicle, or of a network in a industrial context.

When the NTW network is a home network, the items of equipment of the plurality of items of equipment can be household appliances, meters or form part of a computer installation for access to a network such as the Internet within the home of an individual. Thus, in the context of a home network, the equipment can be, by way of example, an electric meter, a home gateway (better known under the term “Internet Box”), a food processor, or household robot, or a connected washing machine.

For example, the equipment EQ1 is an electric meter, the equipment EQ2 is a domestic gateway and the equipment EQ3 is a food processor.

When the NTW network is a network in an industrial context, for example in a production plant or in a factory, the equipment is industrial equipment such as machine tools.

In the context of the invention, the items of equipment of the plurality of items of equipment generate, in operation, data intended to be collected by the collection device APP. Such data correspond for example to files listing the events that have affected the equipment and the NTW network. Such a file, commonly known by the English term “log file” or “log”, allows the collection apparatus APP to establish a history of events of the NTW network.

The data can also relate to an alert in the event of a problem or a malfunction in one of the devices of the NTW network. Finally, the data can also relate to measurements or a remote reading of equipment.

For example, in a domestic context, if the equipment EQ1 is an electricity meter, the equipment EQ1 is suitable for generating data relating to the electricity consumption of the home or even to the time slots corresponding to peak hours and to off-peak hours. If the item of equipment EQ2 is a domestic gateway, the item of equipment EQ2 is suitable for generating data relating to the uplink rate, the downlink rate or Internet consumption. Finally, if the equipment EQ3 is a household robot, the equipment EQ3 is suitable for generating data relating to a frequency of use or to a recent update. Such data may be transmitted, via the NTW network, to the collection device APP.

In an industrial context, the data generated by industrial equipment relates for example to electricity consumption, to Internet access for connected equipment, to a recent update, for example implemented remotely by the manufacturer, or to measurements of parameters characterizing the operation of industrial equipment and providing information on production.

As illustrated in [fig. 1], each item of equipment of the plurality of items of equipment comprises at least one memory, one processor and one communication module. Thus, in the example illustrated here, the item of equipment EQ1 comprises a memory MEM1, a processor PROC1 and a communication module C0M1, the item of equipment EQ2 comprises a memory MEM2, a processor PROC2 and a communication module COM2, and the EQ3 equipment comprises a memory MEM3, a processor PROC3 and a communication module COM3.

The memory of an item of equipment is configured to store instructions of a computer program, the execution of which by the processor results in the operation of the equipment.

Furthermore, the memory of an item of equipment can also store all or part of the data generated by the equipment, whether these data are intended to be collected by the collection device APP or not.

The memory can also be configured to store information characterizing an operating process of one or more items of equipment or a manufacturing process of a product. In the industrial context, we will speak in particular of industrial secrecy. Typically, the information relating to the industrial secret can be distributed among items of equipment of the plurality of items of equipment. For example, in the case described here, part of the information relating to the industrial secret can be stored in the memory MEM1 of the equipment EQ1, part of the information relating to the industrial secret can be stored in the memory MEM2 of the equipment EQ2 and part of the information relating to the industrial secret can be stored in the memory MEM3 of the equipment item EQ3.

The communication module of a device is configured to allow the device to communicate with at least one other entity of the NTW network. In particular, in the context of the invention, the communication module of a device is configured to send the data generated by this device to the collection device APP. In the embodiment, illustrated in [fig.l], in which the NTW network further comprises an aggregation node NA, it is understood that the communication module of a device is then configured to send the data generated by the equipment destined for the aggregation node NA.

As explained above, the NTW network can be at least partly wired and / or at least partly wireless. It is understood here that, on the plurality of devices, the communication module may be of a different nature from one device to another.

In general, the invention can be used in many types of two-way communication networks, such as, for example radio communication networks, cellular or non-cellular, and depending on the embodiment, the module communication equipment may integrate one or more communication sub-modules, for example radio frequency communication and be configured for the transmission and reception of radio frequency signals, according to one or more technologies, such as TDM A, FDMA, OFDMA, CDMA, or one or more radiocommunication standards, such as GSM, EDGE, CDMA, UMTS, HSPA, LTE, LTE-A, WiFi (IEEE 802.11) and WiMAX (IEEE 802.16), or their variants or evolutions, currently known or developed later. A device can also communicate with other entities of the NTW network using power line communication technology (known by the acronym "PLC") if all or part of the NTW network is an electrical network.

The APP collection device is suitable for collecting the data generated by the equipment.

As explained previously, the data generated by the equipment are typically files, or "logs", listing the events that have affected the equipment and the NTW network. The collection device APP is then adapted to establish, on the basis of the “logs” received, a history of the events of the NTW network.

The APP collection device can also be configured to update such a history of events when the data collected relates to an alert in the event of a problem or malfunction in an item of equipment of the NTW network or when the data relate to measurements or remote reading of equipment.

At the industrial level, the data collected by the APP collection device can also make it possible to establish detailed statistics concerning the production of a factory or the energy consumption. The collection apparatus APP can also make it possible to have information concerning the performances and the efficiency of the equipments.

The APP collection apparatus comprises a COM communication module.

The communication module COM is configured to allow the collection device APP to communicate with the equipment of the plurality of equipment of the NTW network. In particular, the communication module COM is configured to receive the data generated by the devices and sent by the respective communication modules of the devices. In the embodiment, illustrated in [fig.l], in which the NTW network further comprises an aggregation node NA, it is understood that the communication module COM is then configured to receive the data aggregated by the node of NA aggregation.

The preceding considerations concerning the respective communication modules of the equipment and in particular the different types of data communication networks naturally also apply to the COM communication module of the collection device APP.

In the embodiment illustrated in [fig.l], the NTW network comprises an aggregation node NA.

The aggregation node NA is connected to each item of equipment of the plurality of items of equipment. The aggregation node NA is suitable for receiving and aggregating the data generated by the devices. The aggregation node may be further adapted to transmit the thus aggregated data to the collection apparatus APP.

The aggregation node NA can make it possible, for example, to prevent the collection device from continuously receiving the data generated by the equipment. The aggregation node NA can thus be adapted to aggregate the data received during a period of time and then transfer the data thus aggregated at regular time intervals.

A diode-network type device is arranged to make a bidirectional connection unidirectional. In the remainder of the description, the device of diode-network type is called a “diode-network” for the sake of simplicity. However, it is understood here that the device of the diode-network type generally designates any device having the main functionality of a diode-network, namely the transformation of a bidirectional connection into a unidirectional connection.

The NTW network comprises a plurality of diode-networks. Each network diode is associated with a device so that there are as many network diodes as there are devices within the NTW network.

In the embodiment illustrated in [fig.l], the plurality of diodes-arrays comprises three diodes-arrays DR1, DR2, DR3. Each of these network diodes is associated with one item of equipment from the plurality of items of equipment so that the network diode DR1 is associated with the equipment EQ1, the network diode DR2 is associated with the equipment EQ2 and the network diode DR3 is associated with the EQ3 equipment.

In the absence of a network diode, the connection between an item of equipment and the collection device APP is bidirectional. In other words, data and information can just as easily be transmitted by an item of equipment to the collection device AP, or vice versa. Likewise, still in the absence of a diode-network and when the NTW network includes an aggregation node NA, data and information can just as easily be transmitted by a device to the aggregation node NA as the reverse. .

On the other hand, in the context of the invention, the NTW network comprises a plurality of network diodes so that each item of equipment is connected to the collection device APP via the network diode with which it is associated.

The connection between an item of equipment and the collection device APP is thus unidirectional and no longer bidirectional. The diode-network associated with a device is arranged so that the only direction of communication authorized is the direction from the device to the collection device. In other words, the network diode associated with a device is arranged so that data generated by the device can be transmitted from the device in question to the collection device. On the other hand, data cannot be transmitted from the collection device to a piece of equipment. Likewise, data cannot be transmitted from one device to another device.

Likewise, in the case where the NTW network comprises an aggregation node NA, each item of equipment of the plurality of items of equipment is connected to the aggregation node NA via the network diode to which the item of equipment in question is associate. The considerations are then similar: a device can transmit data to the aggregation node NA, but the latter cannot transmit data to a device. Here again, two devices cannot communicate with each other because such a communication necessarily involves going through the aggregation node NA, which cannot transmit data to a device.

These various aspects concerning the communications permitted and those made im9 possible by the use of diodes-networks are illustrated in [fig.l] using arrows. Thus, by way of example, the communication module COM3 of the equipment EQ3 can transmit data, via the network diode DR3 associated with the equipment EQ3, to the aggregation node NA. The aggregation node can then aggregate the data received from the device EQ3 with other data received from the other devices, here the devices EQ1 and EQ2, then transmit them to the collection device APP. This possible direction of communication is illustrated by the arrow starting from the equipment EQ3 and going towards the collection device APP.

Still by way of example, the communication module COM of the collection device APP can transmit data to the aggregation node NA. On the other hand, the data thus received by the aggregation node NA from the collection device APP cannot be transmitted to the device EQ1, and more exactly to the communication module C0M1. Indeed, the diode-network DR1 makes the connection between the equipment EQ1 and the aggregation node NA unidirectional in the direction of the equipment EQ1 towards the aggregation node NA. This direction of communication from the collection device APP to the equipment EQ1 made impossible by the presence of the network diode DR1 is illustrated by the crossed out arrow starting from the collection device APP and going to the equipment EQ1.

Finally, still with reference to [fig.l], the communication module COM3 of the equipment EQ3 can transmit data, via the network diode DR3 associated with the equipment EQ3, to the node of NA aggregation. On the other hand, the data thus received by the aggregation node NA from the equipment EQ3 cannot be transmitted to the equipment EQ2, and more exactly to the communication module COM2. Indeed, the diode-network DR2 makes the connection between the equipment EQ2 and the aggregation node NA unidirectional in the direction of the equipment EQ2 towards the aggregation node NA. This direction of communication from the EQ3 device to the EQ2 device made impossible by the presence of the network diode DR2 is illustrated by the crossed out arrow going from the network diode DR3 to the network diode DR2.

Furthermore, the diode-network associated with an item of equipment can be installed within the item of equipment in question. In the example illustrated in [fig.l], this is the case with the diode-network DR1 associated with the equipment EQ1 and located within it.

Conversely, the diode-network associated with an item of equipment can be installed in the NTW network outside the item of equipment in question. In the example illustrated in [fig.l], this is the case of the network diode DR2 associated with the equipment EQ2 and located in the NTW network outside of it. The same is true for the diode-network DR3 associated with the equipment EQ3 and located in the NTW network outside it.

In one or more embodiments, the network diode associated with an item of equipment comprises a photocoupler unidirectionally connecting two controllers. One of the controllers is located on the equipment side while the other controller is located on the APP collection device side or the NA aggregation node side.

In particular, a single device can integrate the termination controller of all the network diodes of the aggregation node NA and of the collection device APP.

The photocoupler, also called optocoupler, is an electronic component capable of transmitting a signal from one circuit to another without there being any galvanic contact between them. Typically, the photocoupler comprises a light-emitting diode (better known by the acronym “DEL” or the acronym “LED”) combined with a phototransistor comprising an emitter, a base and a collector. Electric current passes from the collector of the phototransistor to the emitter provided that the base receives light (visible or infrared).

Of course, it is known to those skilled in the art that there are other types of diode-array type devices functionally similar to the photocoupler described above and therefore making it possible to make a bidirectional connection unidirectional.

Finally, as illustrated in [fig.l], the NTW network can further include a CMT switch.

The CMT switch is configured to selectively activate or deactivate at least one device of the diode-network type in order to be able to re-establish, if necessary, a bidirectional connection between the equipment associated with the device of the diode-network type in question and the collection device. APP.

In the example described here, the switch CMT is configured to control the diode network DR2 associated with the equipment EQ2. Thus, the switch CMT can make it possible to deactivate the network diode DR2 so that the connection between the equipment EQ2 and the collection apparatus APP is again bidirectional. Once the network diode DR2 has been deactivated, it is then possible to transmit data coming from the collection device, or coming from the aggregation node NA, to the equipment EQ2. Likewise, it is then also possible to transmit data originating from another item of equipment of the plurality of items of equipment, for example here the items of equipment EQ1 and EQ3, to the item of equipment EQ2.

Such a CMT switch thus makes it possible to update or configure the equipment EQ2. Restoring a bidirectional connection between the equipment EQ2 and the collection device APP or the aggregation node NA also makes it possible to facilitate an intervention on the equipment EQ2, in particular in the event of a malfunction.

Of course, when the network diode associated with an item of equipment is installed within the equipment itself, as is for example the case for the network diode DR1 associated with the equipment EQ1, the CMT switch can also be integrated into the equipment concerned.

The present invention has several advantages.

First of all, the present invention makes it possible to improve data protection and the integrity of the various equipment items of a data collection network. Thus, when an item of equipment, for example a machine tool, is compromised by a malfunction or a malicious intrusion, the propagation of such an intrusion or of a virus is strongly limited by the presence of devices of the diode-network type which prevent the recovery of information or data from other equipment or the collection device.

Furthermore, the distribution of information relating to a know-how or to an industrial secret between the different pieces of equipment of the plurality of pieces of equipment in the network makes it possible to improve their protection since such information cannot be transmitted to the network. corrupted equipment. Indeed, the presence of diode-network type devices prevent the passage of such a communication to the corrupted equipment. Thus, the distribution over a large number of devices contributes to making unusable the information extracted from a corrupted device.