成果報告書詳細
管理番号20160000000754
タイトル*平成27年度中間年報 国際研究開発・実証プロジェクト/コファンド事業 日本-イスラエル研究開発協力事業 サイバー・フィジカル統合セキュリティ基盤の研究開発
公開日2016/8/5
報告書年度2015 - 2015
委託先名日本電気株式会社
プロジェクト番号P14005
部署名IoT推進部
和文要約
英文要約Title:Japan-Israel R&D Cooperation Program "Research and Development on Cyber Physical Integrated Security Platform" (FY2015-FY2017) FY2015 Annual Report

1. Simulated Control Center / Substation Test Bed
For future scenario-based evaluation of the Cyber-Physical Integrated Security Platform that will be developed in the Program, a simulated control center / substation test bed was put together. The test bed consists of the components that represent existing power distribution systems as well as the additional components that are introduced to protect such power distribution systems from malicious attackers. On one hand, existing power distribution systems include electrical equipment such as transformers and relays (not included in this test bed) needed to efficiently route powers to the consumers, as well as automation mechanism used to control the equipment automatically. Such automation mechanism is called an instrumentation system and consists of sensors that measure the status of the electrical equipment, controllers with logic on how to control the electrical equipment based on the measurements from sensors, and actuators which actually perform the control. The instrumentation system is also connected to an operations management system in remote control center that remotely monitors its behavior. On the other hand, the additional components that are introduced include cyber security subsystem, physical security subsystems and an integration server. Details of these components are introduced in the paragraph below.

2. Basic Development
Requirements analysis was conducted and constituent functional components were extracted: cyber security subsystem, physical security subsystems and an integration server. Cyber security subsystem allows for viewing and controlling of the behaviors of the controller and the network in detail which will be achieved by modifying Radiflow security gateway firmware. Physical security subsystems consist of two-factor authentication system using face and IC card to reliably identify the worker, as well as surveillance camera analytics that automatically extract meaningful security events such as restricted area intrusion. The integration server is software that centrally controls these cyber and physical subsystems and monitors workers that come in contact with the electrical power system under protection so as to limit his/her activities to the minimum that is required to perform the task that is defined by the work order. The work order defines a set of permitted activities in cyber space and in physical space as well as their sequence. For this purpose, a dedicated security-rule description language was developed. Also, a basic GUI was developed for creating work orders using pre-defined templates.
ダウンロード成果報告書データベース(ユーザ登録必須)から、ダウンロードしてください。

▲トップに戻る