Small and medium-sized manufacturing companies are dependent on seamless production and supply processes in order to survive in international competition. Internal networking of their own production facilities and IT systems as well as data exchange with partner companies can make the joint production and logistics chain more flexible and efficient. IT security plays a key role in the success and acceptance of networking along the value chain. Together with its project partners, the Fraunhofer Institute for Production Technology IPT in Aachen is developing software that can provide crucial support to manufacturing companies in the secure networking of their data systems.
The potential efficiency gains of internal and external data networking are considerable. Nevertheless, networking initiatives are rarely implemented, especially in small and medium-sized enterprises (SMEs). Companies often lack knowledge of the necessary security measures. Data networking of previously closed systems creates more targets for cyber attacks. Vulnerabilities in the IT systems of individual companies can also have an impact on networked partner companies.
IT security as the key to competitiveness
The "KMUsecure" software, which the Fraunhofer IPT is developing with its project partners, is designed to help manufacturing SMEs identify their security-critical and efficiency-promising data and system interfaces. On the one hand, this requires demand-oriented IT security concepts that guarantee data security and sovereignty and, on the other, a qualified system analysis that localizes the optimization potential of both internal and shared networks.
To this end, the software records the installed production IT systems such as ERP, MES and CAQ as well as all of the company's machines and devices connected to the network. Based on a comprehensive data and network analysis, the software derives a needs-oriented IT security concept that shows the company the maximum cost-benefit ratio between the investment in IT security and the added value of networking.
KMUsecure provides a needs-based analysis and concept in four functions
KMUsecure continuously monitors the data flow and the interfaces of the company's own and shared network. In a data classification, the software assigns corresponding security attributes to the data via a cloud platform and can identify weak points in the network. Using an Industry 4.0-capable data switch, the "vBox" developed by the Fraunhofer IPT, the data can be transferred to the KMUsecure cloud in a secure and legally compliant manner. With the help of the cloud's computing power, the software uses the data to quantify the potential for value creation by opening up and networking the system interfaces.
KMUsecure supports manufacturing SMEs in securing their critical network interfaces in a targeted manner and using efficiency-enhancing networking options.
Project partners
- Allgeier IT Solutions GmbH (project coordinator), Dortmund
- Fraunhofer Institute for Production Technology IPT, Aachen
- MAKA Systems GmbH, Nersingen
- W. Doose Werkzeug-Vorrichtungsbau GmbH & Co KG, Henstedt-Ulzburg
- DQS GmbH - German Association for the Certification of Management Systems, Frankfurt am Main
The project "Efficient and demand-oriented creation of IT security concepts for manufacturing SMEs (ESPRI)" receives funding from the Federal Ministry of Education and Research (BMBF) in the Federal Government's research framework program on IT security "Self-determined and secure in the digital world" (funding code 16KIS1123).