Remote control of switching devices is the most critical function of SCADA. To make this operation more secure, we have implemented and already successfully tested at a number of sites a specialised Remote Control Security System (RCSS) for protected transmission of remote control commands, designed to ensure the required level of information security when authorising and transmitting remote control commands to power facilities.

The RCSS allows separation of the automated preparation of remote control commands from their transmission for execution at power facilities via industrial telecontrol protocols. Security functions ensure that remote control commands are generated in the form of corresponding industrial protocol frames only after successful confirmation by the dispatcher through multi-factor authentication.

Security is ensured at multiple levels. Confirmation is performed from a specialised device to which only control centre personnel have physical access. Each dispatcher sees only the list of commands they have personally initiated. Command confirmation can be further protected using auxiliary devices: biometric scanners or USB tokens.

The RCSS supports both single remote control commands and command sequences generated by switching programmes/forms and execution of temporary outage schedules.

The application of this new functionality increases the security level of automated process control systems. The technology enables compliance with industry requirements for multi-factor authentication of remote control, reduces the risks of unauthorised interference in remote control, including those resulting from errors or abnormal operation of automation tools. Furthermore, for most automated process control system components, the use of the RCSS allows for a reduction in the CII (critical information infrastructure) category, thereby lowering information security expenditure