Method of Increasing Information Security of Petrochemical Industry Enterprises Using NFC Technology

摘要

The phenomena inherent in the introduction and development of digital technologies have given rise to the term digitalization as a means of increasing the competitiveness of industry through the enhanced integration of man-machine systems into factory processes. This approach, having shown its effectiveness in industry, began to find its application in other areas of life. Thus, in the course of transformation and advancement into all sorts of spheres of life, digitalization has reached the present level of development. Now this level is conventionally designated by the phrase “Industry 4.0”. One of the widespread human-machine interfaces is NFC technology. Some large petrochemical companies are starting to use it extensively. This allows you to speed up both scheduled maintenance and emergency repairs of infrastructure elements. But the relative benefits from the introduction of NFC technology in petro-chemical production systems can be canceled out by a decrease in the overall level of information security of these systems. The article proposes an approach to ensuring the security of a geographically distributed computer system. As such a system, many oil pumping chairs are considered, equipped with computing power and communication facilities, including those supporting NFC technology. The dangers in the use of NFC sensors as part of geographically remote clusters of oil pumping chairs are noted, in this regard, a set of measures is proposed to improve the security of the cluster of oil pumping units. The most vulnerable oil pumping station is the one on which the administrative terminal is located; accordingly, an approach to organizing secure access based on NFC technology to the administrative terminal of the cluster of oil pumping chairs is proposed. Protection is proposed to be carried out through maximum difficulty for an attacker to use the vulnerabilities present in NFC technology. First, an organizational approach is proposed for this and, secondly, the implementation of this approach is proposed in accordance with a special game-theoretic model of the problem of ensuring information security of a cluster of oil pumps, where one of the players is the administrator of the information security system of the cluster of oil pumps, and the other is potential intruder. An example of using the proposed approach is given.