Automated cypher configuration of industrial devices

A method of automating cypher configuration of an industrial device of an industrial system, the method comprising:

• connecting with a central cypher configuration module providing centralized cypher configuration for the industrial system;
• receiving an optimal cypher configuration, wherein different configurations have different strengths of applied encryption and wherein the optimal cypher configuration is customized for the industrial device based on or using system parameters for the industrial system and device parameters for the industrial device, the system parameters indicating at least a target security level of the industrial system and the device parameters indicating at least one of computation power of the industrial device, hardware acceleration capabilities for cypher computation of the industrial device, and geographic location of the industrial device;
• configuring the industrial device's cypher configuration using the optimal cypher configuration;
• and
• receiving new optimal cypher configuration from the central cypher configuration module, the new optimal cypher configuration being determined based on a determination by the cypher configuration module that at least one relevant change has occurred as indicated by update data from an external update server.

A central cypher configuration module for automating cypher configuration for a plurality of industrial devices within an industrial system, comprising:

• a memory configured to store instructions;
• at least one processing device disposed at a location and in communication with the memory, wherein the at least one processing device upon execution of the instructions is configured to:
• receive system parameters for the industrial system;
• receive from a data source, device parameters for respective individual industrial devices of the plurality of industrial devices;
• select, generating and/or updating an optimal cypher configuration for the respective individual industrial devices based on or using the system parameters for the industrial system and the device parameters for the respective individual devices, wherein different cypher configurations have different strengths of applied encryption;
• provide the respective optimal cypher configuration to the corresponding individual industrial devices for configuration of the individual industrial devices' cypher configuration;
• receive update data;
• monitor the update data for changes that impact cypher configuration needs of the industrial system and/or the plurality of industrial devices;
• in response to determining at least change has occurred, determine if the optimal cypher configuration previously determined for the at least one of the respective individual industrial devices is still optimal;
• in response to determining the optimal cypher configuration previously determined for the at least one of the respective individual industrial devices is no longer optimal, determine a new optimal cypher configuration for at least one of the respective individual industrial devices;
• and
• provide the respective new optimal cypher configuration(s) to the corresponding individual industrial devices of the at least one of the respective individual industrial devices for updated configuration of the at least one respective individual industrial devices' cypher configuration, including to cause configuration of the at least one of the respective individual industrial devices using the respective new optimal cypher configuration(s) that were provided.

An industrial device comprising:

• a memory configured to store instructions;
• at least one processing device disposed at a location and in communication with the memory, wherein the at least one processing device upon execution of the instructions is configured to:
• connect with a central cypher configuration module providing centralized cypher configuration for an industrial system;
• receive an optimal cypher configuration, wherein different cypher configurations have different strengths of applied encryption and wherein the optimal cypher configuration is customized for the industrial device based on or using system parameters for the industrial system and device parameters for the industrial device, the system parameters indicating at least a target security level of the industrial system and the device parameters indicating at least one of computation power of the industrial device, hardware acceleration capabilities for cypher computation of the industrial device, and geographic location of the industrial device;
• configure the industrial device's cypher configuration using the optimal cypher configuration;
• and
• receive new optimal cypher configuration from the central cypher configuration module, the new optimal cypher configuration being determined based on a determination by the cypher configuration module that at least one relevant change has occurred as indicated by update data from an external update server.