Pk-IOTA: Blockchain empowered Programmable Data Plane to secure OPC UA communications in Industry 4.0

TL;DR

Pk-IOTA introduces a blockchain-enabled programmable data plane solution that automates secure OPC UA communication in Industry 4.0, addressing certificate management challenges with minimal overhead and enhanced scalability.

Contribution

It presents an innovative integration of programmable switches and IOTA Tangle for decentralized, automated OPC UA certificate validation and management.

Findings

Minimal communication overhead observed in real-world testbed

Scalable certificate management with tamper-proof security

Effective in-network validation of OPC UA security features

Abstract

The OPC UA protocol is becoming the de facto standard for Industry 4.0 machine-to-machine communication. It stands out as one of the few industrial protocols that provide robust security features designed to prevent attackers from manipulating and damaging critical infrastructures. However, prior works showed that significant challenges still exists to set up secure OPC UA deployments in practice, mainly caused by the complexity of certificate management in industrial scenarios and the inconsistent implementation of security features across industrial OPC UA devices. In this paper, we present Pk-IOTA, an automated solution designed to secure OPC UA communications by integrating programmable data plane switches for in-network certificate validation and leveraging the IOTA Tangle for decen- tralized certificate distribution. Our evaluation is performed on a physical testbed representing a real-world industrial scenario and shows that Pk-IOTA introduces a minimal overhead while providing a scalable and tamper-proof mechanism for OPC UA certificate management.