Sensenstone (CEO Changhoon Yoo), a company specializing in authentication security, has launched a solution that provides advanced authentication and access control without the need for separate modifications to PLCs (Programmable Logic Controllers), thereby establishing security measures for OT operating organizations and companies themselves.

Senstone recently launched 'OTAC Trusted Access Gateway (TAG)', a security solution that provides advanced authentication and access control to PLCs without separate modifications, in collaboration with CPS security specialist company NNSP.

OTAC Trusted Access Gateway simultaneously solves the vulnerabilities of existing fixed-value-based passwords and the problem of useless access logs, and enables you to establish your own security measures by breaking away from the PLC manufacturer-dependent security method that requires high-cost equipment investment and a long time.

As cyber threats targeting OT environments have increased recently, many organizations and companies are pursuing the advancement of OT security, and SenseTone and NNSP's innovative solutions are responding to this.

This solution is provided by linking OTAC (One-Time Authentication Code), a one-way dynamic authentication technology of Senstone, and nNetTAG of NNSP.

OTAC generates dynamic codes that cannot be reused without duplication even in non-telecommunication environments. nNetTAG provides unauthorized asset blocking, access control, and audit logs to PLCs without program modification.

OTAC Trusted Access Gateway can be applied to all OT devices that use fixed passwords, including PLCs, HMIs, RTUs, and DCSs.

It uniquely authenticates users or devices through a dynamic code that is newly generated each time and cannot be reused, and it works even in environments without a communication network, making it suitable for closed OT environments.

This solution can be deployed 1:1 in front of all PLCs or 1:N in front of a master PLC, providing strong security and access control without requiring any changes to existing PLC devices or support from the manufacturer. Users can easily log in using an OTAC authentication code generated from a pre-registered device.

“OTAC Trusted Access Gateway is an innovative solution that enables OT operating organizations and companies to enhance PLC authentication security and even control user access without the help of PLC manufacturers,” said Yoo Chang-hoon, CEO of SenseTone.

He also emphasized, “We have improved the completeness of our products through collaboration with NNSP, a leading domestic company in the ICS/OT security field, and have verified their stability and performance through a proof-of-concept (PoC) process with global companies.”

With the launch of this OTAC Trusted Access Gateway, SenseTone plans to first target organizations and companies that want to dramatically improve authentication security vulnerabilities while maintaining their existing OT environments.

We also plan to continue collaboration with global PLC manufacturers to enhance the authentication function of the PLC itself.