Secure remote maintenance devices and method, for remote maintenance of industrial equipment

A method for remote maintenance of a set of industrial equipment connected together to an industrial network, the industrial network being connected with a housing including:

• a channel comprising a first communication interface for access to an Internet-type data network, said channel for access to the Internet-type data network comprising a cut-off unit, wherein the cut-off unit is configured to physically isolate the industrial network from the Internet-type data network so that no communication can be established between the industrial network and the Internet-type data network, wherein the cut-off unit comprises a cut-off relay allowing physical cut-off between the industrial network and the Internet-type data network;
• and
• a control channel for controlling the channel for access to the Internet-type data network, the control channel comprising a second communication interface allowing access to a second network different to the Internet-type data network and a controller configured to control the cut-off unit so as to allow communication between the industrial network and the Internet-type data network, wherein the cut-off relay can be activated by means of a control signal originating in the controller connected to the second network, the housing being connected with the Internet-type data network and a mobile network,
• the method comprising the following steps, an anomaly having been detected on an industrial equipment of interest of the set:
• receiving on the control channel of the housing, via the mobile network, a request for a purpose of establishing a remote maintenance communication between the industrial network and the Internet-type data network,
• authenticating the request, and when the request is authenticated,
• establishing the remote maintenance communication between the industrial network and the Internet-type data network.

A system for managing access to an industrial network comprising a housing for managing access to the industrial network to which a set of industrial equipment is connected, the housing comprising:

• a channel comprising a first communication interface for access to an Internet-type data network, said channel for access to the Internet-type data network comprising a cut-off unit, wherein the cut-off unit is configured to physically isolate the industrial network from the Internet-type data network so that no communication can be established between the industrial network and the Internet-type data network, wherein the cut-off unit comprises a cut-off relay allowing physical cut-off between the industrial network and the Internet-type data network;
• and
• a control channel for controlling the channel for access to the Internet-type data network, the control channel comprising a second communication interface allowing access to a second network different to the Internet-type data network and a controller configured to control the cut-off unit so as to allow communication between the industrial network and the Internet-type data network, wherein the cut-off relay can be activated by a control signal originating in the controller connected to the second network,
• wherein the system for managing access to the industrial network further comprises a remote maintenance server configured to be connected to the industrial network to which the set of industrial equipment is connected, and to the housing, the remote maintenance server comprising a control server configured to communicate with the housing, said remote maintenance server also comprising a firewall configured to manage access to the industrial network from said housing.