Joinwin Electronics HK Limited518031About Join WinJoinwin Electronics HK Limited FLAT/RM 29, 22/F, YAN’S TOWER, 25-27 WONG CHUK HANG ROAD,ABERDEEN HONGKONG Shenzhen ZhongYiYingTong Technology Limited Room 1610, Block A, Overseas Decorative Building, Zhenhua Road,Huaqiang North Street, Shenzhen, 518031Join-Win will be your one-stop purchasing assistant. Join together, achieve win-win!Joinwin Electronics HK Limited518031About Join WinJoinwin Electronics HK Limited FLAT/RM 29, 22/F, YAN’S TOWER, 25-27 WONG CHUK HANG ROAD,ABERDEEN HONGKONG Shenzhen ZhongYiYingTong Technology Limited Room 1610, Block A, Overseas Decorative Building, Zhenhua Road,Huaqiang North Street, Shenzhen, 518031Join-Win will be your one-stop purchasing assistant. Join together, achieve win-win!Joinwin Electronics HK LimitedJoinwin Electronics HK LimitedJoinwin Electronics HK LimitedJoinwin Electronics HK LimitedJoinwin Electronics HK LimitedJoinwin Electronics HK LimitedJoinwin Electronics HK LimitedJoinwin Electronics HK LimitedJoinwin Electronics HK LimitedJoinwin Electronics HK LimitedJoinwin Electronics HK LimitedJoinwin Electronics

Home
News
The Role and Workings of GPUs in Communications and Networking

The Role and Workings of GPUs in Communications and Networking

August 09 , 2023 0

CP (Communication Processor) is a communication medium that connects a PLC or PC to an industrial Ethernet network for sending and receiving data, and it supports PROFINET IO and OPC UA. common CPs are CP343-1 (Advance) connected to S7-300, CP443-1 (Advance) connected to S7-400, CP1243-1 connected to S7-1200, CP1543-1 connected to S7-1500, and CP1628 installed in engineer station and operator station. Advance), CP1243-1 connected to S7-1200, CP1543-1 connected to S7-1500, and CP1628 installed in the engineer station and operator station.

The main services supported by the CP are

(1) The CP can be used as a PROFINET IO controller or device.
(2) Open communication services based on ISO, ISOonTCP, TCP, and UDP connections are supported.
(3) Media Redundancy Protocol MRP is supported in Ethernet networks with ring topology.
(4) Web diagnosis is supported, and diagnostic data can be read out using a Web browser from a station connected to the PG/PC from the CP.
(5) The total number of simultaneous connections allowed to be established by the PLC in an industrial Ethernet network is limited, and the number of resources for connections can be expanded by connecting to the network via the CP.

In recent years, industrial information security has gradually been emphasized. In an automation network, the communication security of each automation unit is the basis of the whole information security, and CP is not only used

as a communication medium here, but also has many information security functions.

(1) Firewall function. Allows network status monitoring to prevent unauthorized access.
(2) VPN. prevents information from being stolen when accessing control points and supports multiple VPN tunnels.
(3) Network segmentation. Connects to the upper network through the CP, and the PLC connects to the lower automation unit, realizing the role of unit protection.
(4) SNMP V3. for secure transmission of network analysis information from eavesdropping.
(5) NAT/NAPT (Network Address Transition). Private/public address translation to avoid attacks from external networks.
(6) NTPV3 (Network Time Protocol). Used for secure transmission during clock synchronization.
(7) Https and Ftps. for encrypted access and secure transmission.
(8) Authentication using certificates. the CP supports OPCUA and can assume the roles of an OPCUA server and an OPCUA client and use certificates to authenticate communications between the CP and OPCUA communication partners.
(9) Write protection. It is possible to block some accesses to the CPU data area.

Siemens provides a defense-in-depth solution for industrial control system security threats, which consists of three main components: plant security, network security, and system integrity. Based on the longitudinal defense solution, user authentication, network

segmentation, quarantine zone (DMZ), remote access (VPN), system redundancy, virus scanning, patch management, and application whitelisting can be realized for the control system.

For the entire plant network, network security measures are taken as shown in Figure 1 to prevent outside access to the automation network from different paths.

Figure1

As can be seen from the figure, segmenting the network is a major measure, so that the entire system is divided into automation units, the outside world can only access the equipment in the units through the SCALANCE S and CP, then all the automation units with a

firewall function and authorization of the access mechanism, which ensures the security of the entire network system.

In the standard control system protection in the figure below, by deploying the SCALANCE S security module and CP communication processor. That is, you can separate and optimize the control of the PLC and the upper communication, but also provides security for

the control unit. Such as

Figure2

Figure3

By placing the CP1543-1, CP343-1, and CP443-1 in front of the protected automation unit in the figure, you can control communications to and from the automation unit, allowing only licensed connections to be established; and at the same time segment the network

through the CP to reduce risk and enhance network security.

For a PC system, the same CP can be used for security, as shown in Figure 3.