SBIR-STTR Award

TecSec's CKM technology and tool kit will be used to develop an effective, easy to use, Secure Cryptographic Management System (SCMS) to protect SCADA systems/network. The management scheme will be designed to meet all unique requirements for SCADA/DCS operations, and provide a seamless migration of future protection schemes. The SCMS facilitates an RBAC methodology that can be set up to reflect the organizational units operating rules and procedures of an end user, and extends seamlessly the security procedures for SCADA/DCS operations. CKM technology systemizes key creation, implementing dual control or split knowledge by using key components to construct the final working key. This working key may be used in several ways including a session key, for a store-and-forward application such as e-mail, and for file encryption applications such as archiving, or protecting file information until accessed by a user.

For Phase Two, TecSec will evolve the scope of the Phase One SCMS prototype design for SCADA/DCS design to reflect the ultimate goal of developing a realworld SCMS prototype with a rapid commercialization potential. For Phase II, TecSec is teamed with General Electric Energy Management Systems (GE EMS), a major player in the EMS/SCADA arena for this Phase II effort. TecSec and GE realize the importance of prototyping an integrated secure EMS with Key Management builtin. Thus, the primary effort for Phase Two will be to integrate the SCMS with GE EMS XA/21 product to create the SCMS2 prototype. TecSec is also proud to have both GTI and Opus continue their participation in Phase Two. The Control Systems Security and Test Center (CSSTC) at the Idaho Engineering and Environmental Laboratory (INEEL), which consists of a central cyber test facility integrated with multiple field test beds that simulate the nation’s critical infrastructure will serve as the test bed for the prototype and will also host the integrated SCMS2 prototype at its facilities for demonstration to the government, industry, and other interested partners. TecSec has also established a key alliance with OSIsoft to investigate incorporating its PI Historian System.