Avoid Unauthorized Access to the Logic Solvers
Communications among logic solvers occur on dedicated safety networks with no direct connection from outside. All communication goes through an isolation node that securely allows DeltaV DCS and DeltaV SIS to exchange data.
Engineering tools offer configurable access control where administrators control user privileges. Items are edited only by approved users. A Logic Solvers lock prevents unauthorized access. A hardware key switch on the CSLS can enforce physical presence before implementing a change which means that logic Solvers are protected even if user credentials were compromised.
How it Works
Improve Security
Because the safety networks are both physically and logically isolated from any outside network, the safety networks are completely independent maintaining a higher level of security. All communication to logic solvers must go through a DeltaV controller — there is no direct access to the logic solvers. All external non-safety communications must pass through filtering and verification functions within the DeltaV SIS system.
Prevent Unauthorized Access
The use of the lock functionality provides the first layer of protection for unauthorized access. For increased security, DeltaV SIS provides the means to ensure physical presence before a change can be implemented. Even if software passwords are compromised, the physical layer will prevent unauthorized changes.
The Charms Smart Logic Solver includes a hardware key switch to enforce physical presence before changes are implemented. The Smart Logic Solver can use an external Intrusion Protection Device to achieve the same goal of enforcing physical presence
Deploy and Replace Faster
Built-for-purpose network components that are plug-and-play eliminate configuration effort, enable faster deployment, and simplify replacement.
Easy Compliance with IEC 61511
IEC 61511 demands rigorous user management and the DeltaV SIS platform provides it. IEC 61511 requires that any changes made from an HMI (e.g. to a trip limit) be extensively vetted to ensure that the right data is written to the right Logic Solver. The DeltaV SIS system automatically provides this data verification.
Frequently Asked Questions
DeltaV SIS with Electronic Marshalling applies a defense-in-depth approach with Cybersecurity, this includes but is not limited to dedicated safety networks, configurable user access controls, logic solver software locks, and hardware key switches that can require physical presence before changes are made. These safeguards help prevent unauthorized modifications to critical safety functions.
DeltaV SIS safety networks are physically and logically isolated from external networks and process control communications. Safety-related communications travel only through dedicated safety networks, reducing the risk of common-cause failures and helping maintain system integrity.
The Local Safety Network (LSN) serves as the communication backbone for DeltaV SIS with Electronic Marshalling logic solvers, while the Global Safety Network (GSN) enables secure, safety-rated communication between multiple local safety networks. This architecture supports scalable safety applications while maintaining functional segregation where required.
DeltaV SIS utilizes dedicated, fully redundant safety networks that isolate safety communications from the control system. This architecture helps ensure continued operation of safety functions, minimizes communication-related risks, and provides reliable system performance even during network disturbances.
DeltaV SIS with Electronic Marshalling makes it easy to meet the requirements of the standard and have capabilities built-in to support compliance. These features include;
- Network segmentation, allow-listing, antivirus, firewalls
- Configurable user privileges (authentication & authorization)
- Logic solver physical and soft locks
- Bypass alerts
- Two factor authentication for downloads
- Version control
