4RF Aprisa SR+ - Architecture; Security

12 | Introduction
Aprisa SR+ Product Description
Architecture
The Aprisa SR+ Architecture is based around a layered TCP/IP protocol stack:
Physical
Proprietary wireless
Standard RS-232 and Ethernet
Link
Proprietary wireless (channel access, ARQ, segmentation)
Standard Ethernet
Network
Standard IP
Proprietary automatic radio routing table population algorithm
Transport
Standard TCP, UDP
Application
Proprietary management application software
Security
The Aprisa SR+ provides security features to implement the key recommendations for industrial control
systems. The security provided builds upon the best in class from multiple standards bodies, including:
IEC/TR 62443 (TC65) ‘Industrial Communications Networks – Network and System Security’
IEC/TS 62351 (TC57) ‘Power System Control and Associated Communications – Data and
Communication Security’
The security features implemented are:
Data encryption
Counter Mode Encryption (CTR) using Advanced Encryption Standard (AES)
Data authentication
Cipher Block Chaining Message Authentication Code (CBC-MAC) using Advanced Encryption
Standard (AES)
Data payload security
CCM Counter with CBC-MAC integrity (NIST special publication 800-38C)
Secured management interface protects configuration
Address filtering enables traffic source authorization
Proprietary physical layer protocol and modified MAC layer protocol based on standardized IEEE
802.15.4
Licensed radio spectrum protects against interference