Fdap Security - Honeywell Field Device Access Point User Manual

FDAP security

•
Field Mesh network: Multiple FDAPs can form a self-forming, self-healing wireless
mesh network. This extends the range and coverage of the wireless sensor network
and provides redundant communication paths for improved data availability. Unlike
battery-powered field devices, FDAPs are line powered and so can aggregate data
from multiple field devices including other FDAPs without concerns about battery
life.
• Reduced cost: The FDAP reduces wireless field device cost, infrastructure cost, and
cost per wireless I/O. It reduces the number of wireless routing devices and offers
wireless coverage for wireless field devices. It has lesser installation cost than
Access Points for sensor-only applications.
•
Access points: The FDAP acts as a routing access point for wireless field devices
and it is designed for sensor-only network for monitoring application segment.
• IPv6 device: The FDAP is an Internet Protocol version 4 (IPv4) device. The IPv4
protocol provides an end-to-end data transmission across multiple IP networks.
The FDAP gets the IP address from DHCP Server in Field Device Network (FDN).
You can ping an FDAP from the FDN network, however you cannot ping an FDAP
from the Plant Control Network (PCN). Also, you cannot ping an FDAP when used as
a Router.
•
Backbone router: The FDAP is a backbone router in a rugged industrial enclosure
that acts as a bridge between the field device network and wireless backhaul
network such as IEEE 802.11 WLAN.
OneWireless network protects plant information and ensures safe operations with industry
standard 128-bit encryption at the mesh, Wi-Fi and wireless field device level. The FDAP
offers a robust embedded wireless security.
FDAP Gen3 and FDAP Gen3 Anchor Authentication
In addition to data encryption, wireless standard requires each FDAP Gen3 and FDAP
Gen3 Anchor to be authenticated before joining the network. OneWireless network relies
on a more secured Bluetooth Low Energy (BLE) based authentication key distribution
method as it requires users to be physically near to the FDAP Gen3 and FDAP Gen3
Anchor to add it to the network. The BLE has a range of 10-meter radius. The
authentication keys are generated and managed by the WDM. A Provisioning Handheld
device is used to download keys to FDAP Gen3 and FDAP Gen3 Anchor are using BLE. The
keys are encrypted when distributed over the network. Once a key is deployed to an FDAP
Gen3, it is validated by the WDM before the FDAP Gen3 and FDAP Gen3 Anchor can join
the OneWireless network.
OWDOC-X256-en-323A 15