Protection of Operational Technology (OT) systems

Active system protection for the railway infrastructure of today and tomorrow. Protecting railway systems requires a comprehensive approach. Our solutions ensure security at every stage, from initial deployment to ongoing operations. With secured mobility assets, processes, and solutions, we provide end-to-end protection, ensuring your system remains secure and compliant with industry standards.

Active system protection for the railway infrastructure of today and tomorrow. Protecting railway systems requires a comprehensive approach. Our solutions ensure security at every stage, from initial deployment to ongoing operations. With secured mobility assets, processes, and solutions, we provide end-to-end protection, ensuring your system remains secure and compliant with industry standards.

CoreShield DCU: the Data Capture Unit

The Siemens CoreShield DCU (Data Capture Unit) provides a high level of system security and flexibility while allowing controlled access to the system from the outside. Acting as a passive network gateway, the CoreShield DCU allows data to be transferred, but only in one direction, e.g., from the hardware to the cloud.

CoreShield DCU

This compact hardware component provides reliable physical (galvanic) isolation, preventing interaction between critical and open networks. Data transmission is via induction, with the added benefit of minimal impact on the properties of the tapped signal.

Since there is no direct wire connection between the two networks, this setup effectively blocks any attempt to send data through the CoreShield DCU into the critical network. Another key benefit is that the CoreShield DCU has no impact on the data communication or functionality of the critical network, even if the diode loses power or fails. At the same time, the integrity of the tapped data is guaranteed at all times. 

1 / 2

CoreShield Connect: the solution for Secure Connectivity

CoreShield Connect is the standard connectivity solution for Siemens Mobility products, combining hardware and software to establish secure connections between industrial operational technology (OT) and information technology (IT) systems of the railway infrastructure.

CoreShield Connect

CoreShield Connect collects and transmits data from railway assets and systems to on-premises and cloud environments. Its modular, flexible architecture ensures easy deployment and adaptability to diverse product and project requirements. It supports scalable deployment for both centralized and distributed architectures, based on project needs. Standard interfaces like MQTT (Message Queuing Telemetry Transport) and OPC Unified Architecture enable seamless integration with diagnostic and third-party systems. Integrated with CoreShield services and CoreShield Secure Operating System, it provides robust, secure connectivity.

Optionally, a CoreShield DCU hardware data diode ensures all required data is available on-premises or in cloud platforms while fully protecting source systems from cyber-attacks. This advanced security measure creates a physical one-way communication path, allowing data to flow outward while physically protecting critical railway infrastructure from external threats. This provides maximum security without compromising data accessibility.

CoreShield SSI: the Shared Security Infrastructure

Siemens CoreShield SSI (Shared Security Infrastructure) is a state-of-the-art security solution tailored for railway automation systems, ensuring compliance with IEC 62443-3-3 SL3 standards. It comprises hardware and software components, which are built on top of the CoreShield Secure Operating System to provide centralised security functions.

CoreShield SSI

Its core components are CoreShield Public Key Infrastructure - Local Registration Authority (PKI LRA), CoreShield Enhanced Radius Server (ERS), CoreShield Identity, CoreShield RSU (Remote Software Update), and Access Management (IAM). These infrastructure components enable synchronised time service for all devices in the railway automation network and streamline asset management through centralised automation. CoreShield SSI provides secure access control with Identity and Access Management and Public Key Management. It also simplifies maintenance with centralised configuration updates and seamless integration with other devices and infrastructure via standardised interfaces.

Related contents