Method for Setting Up a Secure Communication Connection, a Communication Device and Connection Controller

摘要

In the case of a secure communication connection to a communication device connected to the industrial automation system via a non-secure subnetwork, a monitoring unit checks whether a new communication network address assigned to the communication device for a connection to the non-secure subnetwork becomes valid. In the event of a change in a communication network address and in the case of a still existing secure communication connection, the monitoring unit transmits an address change notification via the existing secure communication connection, where upon receiving the address change notification, the set-up of an additional secure communication connection and a changeover from the existing secure communication connection to the additional secure communication connection are initiated.

主权项

1. A method for setting up a secure communication connection to a communication device connected to an industrial automation system, comprising:
setting up a secure communication connection between a first communication device and a second communication device via a non-secure first subnetwork, the second communication device additionally being connected to a secure second subnetwork assigned to the industrial automation system; checking, by a monitoring unit assigned to the second communication device, whether a new communication network address assigned to the second communication device for a connection to the first subnetwork becomes valid; transmitting by the monitoring unit an address change notification to the first communication device via the existing secure communication connection in an event of a change in a communication network address assigned to the second communication device for a connection to the first subnetwork and when a still existing secure communication connection between the first and second communication devices is present; initiating, by the first communication device, a set-up of an additional secure communication connection between the first and second communication devices via the first subnetwork upon receiving the transmitted address change notification; and concluding, by the first communication device, a changeover from the existing secure communication connection to the additional secure communication connection as soon as the additional secure communication connection is set up and established.