Selcom Industries Inc.

LS-108N Remote Unit

Thu, 10 Apr 2008 14:30:50 -0800

The LS-108N is typically located at the remote end (eg. substation) and connects between the phone line and multiple (up to eight) dial-up SCADA equipment such as IEDs and meters. It can be installed into existing dial up circuits with no change to the existing dial up parameters.
It logs activity information including time / date, identity of calling Unit and duration of call. This information is recorded regardless if the call is completed or not.
Each LINESHIELD Unit is factory configured with a unique serial number and customer ID.
The LS-108N is the same as the LINESHIELD LS-108 unit except that it does not perform authentication and authorization when connected to the phone line. If the latter functions are required in the future, the LS-108N is field upgradeable to the LS-108 version.
For larger systems, a Central Administration System (CAS) can be used to automatically gather individual LS-108N records. The call authentication and authorization part of CAS would of course not be enabled.

SPECIFICATIONS

Power:
Standard: 20 - 160 VDC, < 7W idle, < 15W max
Optional: 10 - 160 VDC ...

Aux & Fuse Alarm Outputs:
1 Fuse alarm output form A / B jumper selectable
2 Aux outputs form A / B jumper selectable

Phone Line & Device Ports:
1 phone line jack, 8 device jacks

Environment
Standard: 32 to 120 °F (0 to 50 °C), 0 - 95% non condensing rel. humidity
Optional: -40 to 120 °F (-40 to 50 °C) ...

Certification
Meets USA / Canada interconnect and power line cross standards
Substation hardened - meets IEEE1613 standards
Physical
Mounting: Single or double (side by side) rack mount (1 RU), wall mount.
Dimensions: 8-3/8"W x 1-3/4"H x 9-1/2"D (21.3cm x 4.5cm x 24.1cm)
Shipping weight: 4 lbs. (1.8 Kg.)

LSP-101 Portable Unit

Thu, 10 Apr 2008 14:30:40 -0800

<< LINESHIELD Units Index

Printable Version

The LSP-101 is a single port, portable version of the LINESHIELD. It is primarily intended for field technicians to access substation SCADA equipment connected to LINESHIELD Units from any location.
A Central Administration System computer (CAS) is required for functionality. LSP-101 user must call into the CAS System daily (typical) for a security update in order to obtain the current access code and to remain functional. This automatically disables lost or stolen Units which would not call in or if they did, would not have the correct user password.
The LSP-101 connects between the LINE port of a laptop or desk top computer and a phone line. It is controlled and powered via the USB connection.
Only outgoing calls are possible from the LSP-101.
Each LSP-101 is factory configured with a serial number, customer ID number and access code.

SPECIFICATIONS

Power:
Via USB connection

Phone Line & Device Ports:
1 phone line jack, 1 device jack (connects to LINE jack of computer)

Environment
Standard: 32 to 120 °F (0 to 50 °C), 0 - 95% non condensing rel. humidity

Certification
Meets USA / Canada interconnect and power line cross standards

Physical
Mounting: Desktop
Dimensions: 4.1"W x 1.3"H x 4.9"D (10.5cm x 3.3cm x 12.5cm)
Shipping weight: 1 lb (0.45 Kg.)

LS-116 Remote Unit

Thu, 10 Apr 2008 14:30:30 -0800

<< LINESHIELD Units Index

Printable Version

The LS-116 is typically located at the remote end (eg. substation) and connects between the phone line and multiple (up to 16) dial-up SCADA equipment such as IEDs and meters. It can be installed into existing dial up circuits with no change to the existing dial up parameters.
Both incoming and outgoing calls are supported.
It logs activity information including time / date, identity of calling Unit and duration of call. This information is recorded regardless if the call is completed or not.
The LS-116 has the same functionality as the LS-101 Host Unit or the LS-108 Remote Unit and can in fact be used in place of either of the latter.
Each LINESHIELD Unit is factory configured with a unique serial number and customer ID.
Each Unit contains a list of other Units and their respective security codes that that they are authorized to connect to. Subsequent communications through two LINESHIELD Units can take place only if both Units contain each other's security codes allowing encrypted authorization to succeed.
In systems with a Central Administration System computer (CAS), security codes are randomly generated and are automatically aged and assigned to all of the LINESHIELD Units (Host, Remote and Portable versions). These security codes are maintained by the CAS and are not accessible to the user.
Without a CAS controlled system, LS-116 configuration changes can be done in the field. However in a CAS based system, such configuration changes will be reset to the CAS database values during the next CAS connection to the LS-116.
Call authentication, records and passwords are managed automatically based on user preferences and number of locations.
Device port security features can be programmed individually.
If the Central Administration Computer is compromised in any way, the Remote Units will continue to function independently and continue to operate with the last set of security codes.

SPECIFICATIONS

Power:
Standard: 20 - 160 VDC, < 7W idle, < 15W max
Optional: 10 - 160 VDC ...

Aux & Fuse Alarm Outputs:
1 Fuse alarm output form A / B jumper selectable
2 Aux outputs form A / B jumper selectable

Phone Line & Device Ports:
1 phone line jack, 16 device jacks

Environment
Standard: 32 to 120 °F (0 to 50 °C), 0 - 95% non condensing rel. humidity
Optional: -40 to 120 °F (-40 to 50 °C) ...

Certification
Meets USA / Canada interconnect and power line cross standards

Physical
Mounting: Single or double (side by side) rack mount (1 RU), wall mount.
Dimensions: 8-3/8"W x 1-3/4"H x 9-1/2"D (21.3cm x 4.5cm x 24.1cm)
Shipping weight: 4 lbs. (1.8 Kg.)

LS-108 Remote Unit

Thu, 10 Apr 2008 14:30:20 -0800

<< LINESHIELD Units Index

Printable Version

The LINESHIELD LS-108 is a telephone line sharing switch with call authentication and logging capability. It is typically located at utility substations and connects between the phone line and up to eight (up to 16 for the LS-116) dial-up devices such SCADA equipment, IEDs and meters. The LS-108 handles both incoming and outgoing calls and can be installed into existing dial up circuits with few changes to the existing dial up parameters.
To allow for seamless transition from legacy line sharing switches to the LINESHIELD switches, incoming call DTMF routing to a particular device port is still possible when the authentication feature is off. After a certain comfort level has been established while operating in the legacy mode, authentication can then be turned on either remotely via CAS or locally.
The LS-108 logs all call activity, whether authenticated or not, including time / date, identity of calling Unit and duration of call.
Each LINESHIELD Unit is factory configured with a serial number and customer ID.
Each LS-108 contains a list of access codes of other LINESHIELD Units that are authorized to call in. An incoming authenticated call through a LINESHIELD Unit can succeed only if the receiving LINESHIELD Unit has the originating LINESHIELD Unit access code in its configuration memory
In systems with a Central Administration System computer (CAS), CAS generates and assigns all access codes to all of the LINESHIELD Units (Host, Remote and Portable versions). These access codes are maintained by CAS and are not accessible to the user. CAS also manages LINESHIELD Unit configurations and call activity data downloads.
For smaller systems without a CAS controlled system, LS-108 configuration changes and call activity data downloads are done locally on each Unit.
Device port security can be enabled / disabled on a port by port basis.
LS-108 Remote Units function independently of one another and operate with or without CAS.
The LS-108 has the same functionality as the LS-101 Host Unit and can in fact be used in place of the LS-101.

SPECIFICATIONS

Power:
Standard: 20 - 160 VDC, < 7W idle, < 15W max
Optional: 10 - 160 VDC ...

Aux & Fuse Alarm Outputs:
1 Fuse alarm output form A / B jumper selectable
2 Aux outputs form A / B jumper selectable

Phone Line & Device Ports:
1 phone line jack, 8 device jacks

Environment
Standard: 32 to 120 °F (0 to 50 °C), 0 - 95% non condensing rel. humidity
Optional: -40 to 120 °F (-40 to 50 °C) ...

Certification
Meets USA / Canada interconnect and power line cross standards
Substation hardened - meets IEEE1613 standards

Physical
Mounting: Single or double (side by side) rack mount (1 RU), wall mount.
Dimensions: 8-3/8"W x 1-3/4"H x 9-1/2"D (21.3cm x 4.5cm x 24.1cm)
Shipping weight: 4 lbs. (1.8 Kg.)

LS-101 Host Unit

Thu, 10 Apr 2008 14:30:10 -0800

<< LINESHIELD Units Index

Printable Version

The LINESHIELD LS-101 is usually located at the host location (eg. Control Center) and connects between the host computer dial up modem and the phone line. The LS-101 handles both incoming and outgoing calls and can be installed into existing dial up circuits with few changes to the existing dial up parameters. It communicates with other LINESHIELD Units located at various Remote (eg. Substation) sites.
The LS-101 logs all call activity, whether authenticated or not, including time / date, identity of calling Unit and duration of call.
LS-101's are factory configured with a serial number, customer ID.
Each LS-101 contains a list of access codes of other LINESHIELD Units that are authorized to call in. An incoming authenticated call through a LINESHIELD Unit can succeed only if the receiving LINESHIELD Unit has the originating LINESHIELD Unit access code in its configuration memory.
In systems with a Central Administration System computer (CAS), CAS generates and assigns all access codes to all of the LINESHIELD Units (Host, Remote and Portable versions). These access codes are maintained by CAS and are not accessible to the user. CAS also manages LINESHIELD Unit configurations and call activity data downloads.
For smaller systems without a CAS controlled system, LS-101 configuration changes and call activity data downloads are done locally on each Unit.
LS-101 Host Units function independently with or without CAS.
The LS-101 can also be used as a Remote Unit where only one device needs to be connected.

SPECIFICATIONS

Power:
Standard: 20 - 160 VDC, < 7W idle, < 15W max
Optional: 10 - 160 VDC ...

Fuse Alarm Outputs:
1 Fuse alarm output form A / B jumper selectable

Phone Line & Device Ports:
1 phone line jack, 1 device jack

Environment
Standard: 32 to 120 °F (0 to 50 °C), 0 - 95% non condensing rel. humidity
Optional: -40 to 120 °F (-40 to 50 °C) ...

Certification
Meets USA / Canada interconnect and power line cross standards
Substation hardened - meets IEEE1613 standards

Physical
Mounting: Single or double (side by side) rack mount (1 RU), wall mount.
Dimensions: 8-3/8"W x 1-3/4"H x 9-1/2"D (21.3cm x 4.5cm x 24.1cm)
Shipping weight: 4 lbs. (1.8 Kg.)

Central Administration

Thu, 10 Apr 2008 14:30:00 -0800

<< LINESHIELD Units Index

Printable Version

Central Administration System (CAS)

The Central Administration System computer (CAS) allows centralized management of all LINESHIELD units including the LS-101, LSP-101, LS-108, and the LS-116.
Once enabled, all access control functions are available only via the CAS. The CAS maintains a database of all the LINESHIELD Unit configurations and administers which LINESHIELD Units are authorized to connect to which other LINESHIELD Units.
The CAS will automatically update LINESHIELD Units with the latest configuration and authorization changes and collects the detailed call activity logs from all LINESHIELD Units.
The CAS hardware platform consists of a Schweitzer Engineering SEL-1102 industrial PC typically equipped with up to 4 dial up modems for small to medium systems and up to 8 modems or more for larger systems. More modems are useful if faster system updates are desired or required. This will depend on the frequency of system updates required and data collection being done, and, the number of phone lines available.

CAS Hardware Features

Robust hardware design: no fans, no moving parts, ten-year warranty
Improved reliability with the SEL-1102, which has a predicted Mean Time Between Failures (MTBF) of at least ten times that of typical computers.
Eliminates inverters by using station dc power.

CAS Hardware Specifications

Processor: Pentium® M 1.1 GHz CPU w/ 512 MB DDR SDRAM
Power Supply: 48/125 VDC or 120 VAC
Serial Ports: up to 8 ports standard
Ethernet Network Connections: Port 1 10/100BASE-T + 100BASE-FX(2) + Port 2 100BASE-FX
Compact Flash drive primary: 4 GB
Compact Flash drive secondary: 4 GB
Mounting: Horizontal Rack Mount

Additional Technical Specifications: SEL-1102 http://www.selinc.com/sel-1102.htm

Privacy Policy

Thu, 10 Apr 2008 12:00:50 -0800

All content on the Selcom Industries Inc. website including the elements of design and layout unless otherwise noted is copyrighted material and protected by the copyright laws of the Province of British Columbia, Canada.

Trademarks

Selcom Industries Inc. and the Selcom Industries Inc. logo are trademarks of Selcom Industries Inc. Other product and company names mentioned on the Selcom Industries Inc. website may be the trademarks or trademarks of their respective owners.

Privacy Policy

By visiting this website you consent to the collection and use of your information as we have outlined in the following privacy policy. We respect and protect the privacy of our website visitors. We hope that the following Privacy Policy answers most of your questions regarding privacy as far as it concerns this website.

Kinds of Information Collected

There are two kinds of information that can be obtained about our website visitors:

- Aggregate Information
- Personally Identifiable Information.

Aggregate Information is anonymous data that website administrators use to diagnose problems on a website servers, to better administer the sites, and to help improve the quality of our website. It may be your domain name (e.g. "XYZ.com") or your IP address (a number that is automatically assigned to your computer whenever you're touring the Internet).

Personally Identifiable Information is any information that identifies you. It can be your email address, or any other details that you supply voluntarily.

Information We Collect

We track Aggregate Information such as your IP address, browser type (e.g., Netscape or Internet Explorer), and domain of your Internet Service Provider (e.g., "XYZ.com"). We may share Aggregate Information with third parties, such as the number of visitors to our website. None of this data is Personally Identifiable Information. When you enter our site you are anonymous and will remain that way unless you choose otherwise.

We do not automatically obtain any Personally Identifiable Information. We collect Personally Identifiable Information (such as your name, address, phone number, and e-mail address) only when you specifically and knowingly provide this information to us via email, or through a Web form.

Security of Collected Information

Any Personally Identifiable Information you to give us is kept in secure files. Access is limited to only those within this company who have the need to know. We make all reasonable efforts to protect your information from theft, misuse and alteration.

Disclosure

We do not disclose your personal data to any other organizations unless required to do so in order to comply with any valid legal process such as a search warrant, subpoena, statute, or court order.

Access to Your Data

You can get in touch with us by any of the means listed on our Contact Us page and have us erase or modify any data that we have collected about you.

Use of Cookies

We reserve the right to use cookies on occasion in order to limit multiple responses and registrations on a customer survey. We also may use cookies to limit the number of times a promotional page will appear.

We never use cookies to retrieve information from your computer that was not originally sent by us to you in a cookie. We do not use information transferred through cookies for any promotional or marketing purposes.

As we do not run advertising on our website from third parties, you will not receive a cookie from a third party advertiser by visiting our site.

Most browsers are initially set to accept cookies. If you'd prefer, you can set yours to refuse cookies or to alert you when cookies are being sent. However, it is possible that some parts of the site, such as the polls & surveys (if we should conduct any), will not function properly if you do so.

Links & Advertisements

We do not have third party advertisements on our website. We may provide links to some other businesses that we think our customers may be interested in, such as the company that runs our website. These other sites are not subject to our privacy policy and we are not responsible for the privacy policies for these other sites, nor for the use of any information that these sites may collect.

We would not consciously link to or endorse another site with offensive content.

Content Safe for Children

Our website content is intended for a general audience.

Changes to Our Privacy Policy

This Privacy Policy was last updated August 5, 2005. We reserve the right to change our policy from time to time, as we deem appropriate in our sole discretion. When we do make changes, we will post the changes on this page.

We take your electronic privacy seriously. Questions regarding this statement or our practices should be directed to us by email at . You may also send inquiries to us by mail, please see our contact page for details. We promise to respond to you in a timely manner.

Site Map

Thu, 10 Apr 2008 12:00:40 -0800

Selcom Industries Inc.

Contact Us
Our Location
Selcom Jobs

EMS Capabilities
Design Guidelines
Telephone Line Switches
Privacy Policy

Contact Information

Thu, 10 Apr 2008 12:00:30 -0800

Selcom Industries Inc.
112-113 3011 Underhill Ave.
Burnaby, B.C. V5A 3C2
Canada

Tel: 604-420-7575
Fax: 604-420-5558
Email:

Selcom Industries Inc. is located in the Lake City district of North Burnaby, BC, Canada.

Click this map to launch Google Maps

Selcom Industries Inc.
112-113 3011 Underhill Ave.
Burnaby, B.C. V5A 3C2
Canada

Job Opportunities

Thu, 10 Apr 2008 12:00:20 -0800

MANUFACTURING JOBS

Due to the nature of contract manufacturing work, we have additional requirements for assembly & testing work from time to time. We welcome your resumes at any time - please email to
. We review unsolicited resumes as they are received.

If there are any specific positions that need to be filled, we do post the job descriptions here.

SMT MACHINE PROGRAMMER - PART TIME

Require Phillips Emerald / Topaz pick & place machine programmer looking for part time extra income during off hours. Potentially, this job could result in full time employment.

ELECTRONIC BOARD ASSEMBLY - PART TIME

Require assembly help on a part time basis during off hours. This job could result in full time employment.

Ordering Info

Thu, 10 Apr 2008 12:00:10 -0800

Please contact us for assistance in defining your requirements.

About Selcom

Thu, 10 Apr 2008 12:00:00 -0800

Selcom Industries Inc.

For 20 years Selcom Industries has been designing and manufacturing communications and control equipment for direct OEM sales, private label customers and contract customers. The flagship OEM product (over 50,000 in use) has been TS series of Call Processors. It allows up to to 8 devices to share a single telephone line and operates from either a 10 - 160VDC universal input (used in substations and a variety of microwave and mobile radio sites) or standard 117VAC. The LINESHIELD series is our most recent product and was a natural evolution of the TS series of line sharing switches. It is used especially in substation environments and is fully NERC CIP compliant and IEE 1613 certified.

Selcom Industries is centrally located in the heart of the Greater Vancouver area and serves customers throughout North America. We aggressively pursue the highest standards of quality, workmanship and service.

Contract manufacturing services include SMT and thru hole assembly for prototype and larger production runs on a turn key or customer provided parts basis. Clients appreciate that we are not just an assembly house but that we can also provide in house technical assistance during any phase of the design or manufacturing cycle.

Important Links

Tue, 08 Apr 2008 17:18:22 -0800

www.nerc.com

North American Electric Reliability Corporation
NERC is a self-regulatory organization that relies on the diverse and collective expertise of industry participants. As the Electric Reliability Organization, Contains pertinent NERC and CIP Information

www.ferc.gov

Federal Energy Regulatory Commission
The Federal Energy Regulatory Commission, or FERC, is an independent agency that regulates the interstate transmission of natural gas, oil, and electricity. FERC also regulates natural gas and hydropower projects.

www.utc.org

Utilities Telecom Council
(UTC) is a global trade association dedicated to creating a favorable business, regulatory, and technological environment for companies that own, manage, or provide critical telecommunications systems in support of their core business.

www.ieee.org

Institute of Electrical and Electronics Engineers
They are a central source of standardization in both traditional and emerging fields, particularly telecommunications, information technology and power generation.

F.A.Q.

Tue, 08 Apr 2008 17:10:59 -0800

We only have a few circuits that require upgrading to be NERC CIP compliant. What is the minimum system required for us to become compliant?

Only two units are required, a LS-101 Host unit and a LS-108 Remote unit (if there is only one device at the remote end that requires protection, the eight port LS-108 Remote could be substituted with a single port LS-101 Host unit). Data logs can be downloaded with a laptop via the readily accessible front panel USB port. A CAS central computer is not required. CAS only makes it more convenient to gather records and manage the Host and Remote LINESHIELD units. For larger systems (greater than say 6 - 12 remotes sites, CAS should be used.

Is there a trade in program for existing non-secured line sharing switches?

Yes there is. Talk to us and we will be happy to provide you with a trade in program on a case by case basis to assist in any LINESHIELD conversions that you wish to implement.

Is there an incentive program to be the first purchaser of LINESHIELD product in a particular NERC regional entity?

Yes again. Talk to us!

Rather than using the LINESHIELD CAS (Central Computer System), is it possible to interface with other data gathering systems for downloading / managing the LINESHIELD units?

Yes it is possible. The LINESHIELD units in the Host site perimeter could be connected via their optional Ethernet ports and then to the other party data gathering system. One must appreciate that although it is possible, a thorough technical understanding is required before undertaking such connectivity. Talk to us!

Features & Benefits

Tue, 08 Apr 2008 16:56:38 -0800

Compatibility

Works with leading operating systems including Windows XP, Vista and Unix
Works with existing substation hardware and software. No changes to existing SCADA Systems

Cost Savings

Remote devices have line sharing capabilities which allow up to 16 devices to be connected to a single phone line
Provides the ability to use lower cost dialup lines while being NERC CIP compliant

NERC CIP Compliance

Maintains logs for all activities at host, portable and remote sites
Generates activity reports to enable easy NERC CIP audit compliance
Supports NERC CIP standards 002-009
Unique passwords and authorization for each unit

Security

Each LINESHIELD unit is factory configured with a unique serial number and customer ID.
Authenticated and authorized connections
Authenticated outbound dialing from substations (two way authentication)
Each Unit contains a list of other Units and their respective security codes that that are authorized to connect to it.
CAS Stores and maintains a database of all LINESHIELD unit configurations and activity logs. Logs can be analyzed for any potential security risks
The LINESHIELD unit does not allow multiple attempts at authentication. If authentication fails the call is immediately dropped.
The CAS computer assigns security codes. System Users and Administrators have no access to these codes. They can only initiate a change.
All changes to LINESHIELD Unit configurations can only be done via the CAS.
LINESHIELD units produce no modem tones when the call is answered preventing possible attackers from identifying the type of equipment attached to the line.
Decentralized Operation. LINESHIELD Units work independently. Central Administration Computer is only required for administration. If the CAS is not available Units will keep working.

Hardware

CAS System built on Industrial PC platform using low maintenance extended life components

LINESHIELD units have LCD displays and USB port for easy programming and trouble shooting

8 port and 16 port versions for remote sites

Minimal impact on connection times

Rack (single or in pairs) or wall mountable (brackets included)

Operational Description

Tue, 08 Apr 2008 16:54:38 -0800

Printable Version

The Selcom LINESHIELD System provides an effective shield against cyber attacks on dialup devices in electrical substations. By allowing only authenticated and authorized connections between application computers and substation dial-up equipment (i.e. between SCADA Systems and IEDs, meters etc.) the LINESHIELD prevents unauthorized connections to your remote devices.

There are four variations of LINESHIELD Units (LS-101, LS-108, LS116 and LSP-101) that perform the authentication and authorization function. The type of Unit used is determined by application and location. Certain LINESHIELD units have built-in line sharing capability that allows you to connect up to 16 remote devices through a single phone line.

Making an Authenticated call using the Selcom LINESHIELD

In the above example, to make an authenticated call, a Selcom LINESHIELD unit is required at each end of the call.

If the number of the remote system is 555-1212 and you want to connect to the device attached to port 4 which has an access code of 44 then the Local System would dial: 5551212*44

The calling system dials the number of the remote system with a suffix that indicates the desired port number. The destination LINESHIELD unit will answer the call and authenticate the calling LINESHIELD unit. If the calling unit is authorized to call the remote unit it will ring the desired port and connect the call to the calling system. If the calling unit is not authorized to call the remote unit the call will be dropped and the local system will hear a busy tone.

Making a Non-authenticated Call to a Selcom LINESHIELD

In the above example, to make a non-authenticated call, a Selcom LINESHIELD unit is only required at the called end.

If the number of the remote system is 555-1212 and you want to connect to the device attached to port 4 which has an access code of 44, then the local system would dial: 5551212,,44

The calling system dials the number of the remote system with a suffix that indicates the desired port number. The destination LINESHIELD unit will answer the call and listens for the port code. If the requested port does not require authorization the remote unit will ring the desired port and connect the call to the calling system. If the requested port requires authorization the remote unit will send busy tone and then disconnects the call.

Security features

Near silent operation. When a LINESHIELD unit answers a call only a short special tone is sent otherwise it is silent. This prevents war dialers from finding your remote devices
No retries after authentication failures. If a LINESHIELD unit fails to authenticate it will immediately disconnect the call. This will severely inhibit security code cracking attempts.
Remote security code updating. Using the CAS it is possible to expire and replace security codes remotely whenever there is a requirement to do so.
All call activity is recorded and time stamped for collection and analysis by the CAS.
Unique customer IDs. Only units with the same customer IDs will authenticate with each other.
No master security codes. Each unit has its own unique security code.
Decentralized system. Each LINESHIELD unit operates independently and does not require the CAS in order to operate.

The Centralized Administration System (CAS)

The Centralized Administration System (CAS) manages all the settings, security codes and collects the call activity logs from the LINESHIELD Units.

With the CAS one can manage all the functions of the LINESHIELD units including:

setting security codes
setting port authentication requirements
setting port access codes
setting authentication links
collecting call activity logs
storing activity records
updating remote LINESHIELD units
enable and disable remote LINESHIELD units

The CAS hardware consists of an industrial PC with up to 15 modems. The number of modems depends on the number of LINESHIELD units being managed and the frequency of system updates and data collection being done.

NERC/CIP Information

Tue, 08 Apr 2008 16:53:27 -0800

NERC CIP Compliance by the LINESHIELD Authenticating Switch

NERC CIP Requirement/Category	Section Number	LINESHIELD Feature
Reports and Logs	CIP-003-1 CIP-004-1 CIP-005-1 CIP-007-1 CIP-008-1	searchable activity logs user reports authorized user lists details of individual units and activity reports of unusual activity such as unauthorized access attempts Logs stored in Central Administration System and in the remote units exportable data files
Password protection and user access control	CIP-004-1 CIP-005-1 CIP-007-1	Strong password authentication Detailed user permissions (administrator can revoke user rights) Individual unit authorizations User rights set by administrator on an individual basis
User Rights Termination	CIP-004-1	Administrator termination of user rights Administrator decommissioning of remote units Automatic suspension of Portable devices if not used within a defined timeframe
Dial Up Security	CIP-005-1	Authorized and authenticated access Single attempt at log in per call Calls only between authorized units defined on an individual basis
Access Control Management	CIP-003-1 CIP-005-1	Central Administration to control all system activity Changes made in the field overridden by changes in the Central Administration System Software CAS Hardware only used in the application not shared for other uses and is not accessible by unauthorized users
Personnel Security	CIP-004-1	Expiration of user Authorization/rights time sensitive termination of user rights permanent record and tracking of suspended equipment/accounts
Recovery Plans	CIP-009-1	Disaster recovery planning Scheduled or unscheduled data backup primary and secondary administration computers CAS hardware designed for minimal failure redundancy and restore functions and is proprietary to LINESHIELD only. Not usable for other applications CAS designed to minimize service disruptions through rugged design features
Electronic Security Perimeter	CIP-002-1 CIP-003-1 CIP-005-1 CIP-007-1 CIP-009-1	Secure access at all dial-in points Connections Authorized and Authenticated Multi-level security protection though password and authorization codes randomly assigned security codes not available to the end user LINESHIELD does not affect any existing equipment within the substations
Critical Asset Identification	CIP-004-1	Unique Serial Numbers for LINESHIELD equipment Assets/Users recorded permanently in Central Administration System

LINESHIELD Units

Tue, 08 Apr 2008 16:49:24 -0800

Central Administration System (CAS) Computer

The Central Administration System computer (CAS) enables centralized management of all LINESHIELD units located at the head end or in the field. Once enabled, all access control functions are available only via the CAS. The CAS maintains a database of all the LINESHIELD Unit configurations and administers which LINESHIELD Units are authorized to connect to which other LINESHIELD Units.

The CAS will update all LINESHIELD units with the latest configuration and authorization changes. The CAS also collects detailed call activity logs from all LINESHIELD Units and stores them for use as reporting tools. The CAS hardware consists of an Industrial PC with connections for up to 15 modems(although typically 4 or less) depending on the number of remote locations and the desired update time required. More modems and associated phone lines will provide faster system updates.

>> More Details || Print Version

LS-101 Host

The LS-101 is a single port version of the Selcom LINESHIELD Unit. Typically, it is located at the SCADA head end where one LS-101 unit is used per dialup modem. It is connected between the phone line and the control system modem. It has a wide range (8:1) DC power input supply that is capable of operating from all communications and station battery systems.

>> More Details || Print Version

LS-108 Remote

It is located at the Substation and connects between the phone line and the dial-up SCADA equipment such as IEDs and meters. Up to eight devices can be connected to each LS-108 Remote Unit with all devices sharing one phone line. It is very flexible and can be used in place of the LS-101 Unit at the head end.

>> More Details || Print Version

LS-116 Remote

It is located at the Substation and connects between the phone line and the dial-up SCADA equipment such as IEDs and Meters. Up to sixteen devices can be connected to each LS-116 Remote Unit with all devices sharing a single phone line.

>> More Details || Print Version

LSP-101 Portable

The LSP-101 is small, lightweight and portable and is used for outgoing calls by technicians and other personnel who require connection to substation LINESHIELD Units. It is used from either a fixed location or from the field. It is powered and operated from a notebook or desktop PC USB port and connects between the PC modem and the phone line.

>> More Details || Print Version

LS-108N Remote

Similar to the LS-108, it is located at a remote site and connected between the phone line and remote equipment such IEDs and meters and supports up to eight devices sharing one phone line. The LS-108N is the non-authenticating version of the LS-108 and therefore does not provide any security to the connected devices. It is fully upgradable to the LS-108.

>> More Details || Print Version

Introducing LINESHIELD

Tue, 08 Apr 2008 16:44:08 -0800

An Effective NERC CIP Compliant Solution Against Cyber Attacks

The Selcom LINESHIELD System provides an effective shield against cyber attacks on dialup devices. By allowing only authenticated and authorized connections between application computers and substation dial-up equipment the LINESHIELD prevents unauthorized connections to your remote locations.

The LINESHIELD units have built-in line sharing capability that depending on the configuration, allows you to connect up to 16 remote devices through a single phone line. LINESHIELD fits seamlessly between your application modems and phone lines.

LINESHIELD OVERVIEW

Compatibility

Works with all leading operating systems including Windows XP, Vista, and UNIX
Works with existing substation hardware and software
No changes to existing SCADA Systems

Cost Savings

Remote devices have Line Sharing capabilities which allow up to 16 devices to be connected to a single phone line
Use lower cost dialup lines while being NERC CIP compliant

NERC CIP Compliance

Maintains logs for all activities at host, portable and remote sites
Generates Activity reports to enable easy NERC CIP audit compliance
Supports NERC CIP standards 002-009
Unique passwords and Authorization for each Unit

Contract Services (EMS)

Mon, 26 Sep 2005 16:14:10 -0800

Circuit Board & Electronics Manufacturing Services

General Capabilities:

Through hole and Surface Mount assembly
Programmable Selective soldering - Lead and Lead Free
Wave soldering up to 16" wide - Lead and Lead Free

SMT Vision Limits:

Component size > 0201 standard
Board size 16" X 18" standard *
IC lead pitch 0.3mm (12 mil)+
BGA ball pitch .8mm (31mil)+

Testing Capability:

We have a core of skilled people who can handle most types of testing. Our specialties include analog, digital and RF testing.

Project Types:

You provide boards, parts kit, parts layout, test spec's etc. and we build / test.
Turnkey projects - you provide files and test spec's - we supply parts, build / test.
Custom project arrangement to suit your needs.
Give us a schematic, an approximate board layout, and or enclosure details and we can do the rest to provide you with a quality product complete with packaging. Alternatively we can design from concept to finished product.

Design Guidelines

Mon, 26 Sep 2005 16:14:05 -0800

DFM (Design for Manufacturability) Guidelines & References

Please contact us for any information you may require.

Telephone Line Switches

Mon, 26 Sep 2005 16:09:35 -0800

TS-2005 Call Processor - single line device with 4 or 8 device ports. This unit automatically answers incoming calls and based on tones / DTMF code string received, steers the call to the respective device ports. 30,000+ units have been successfully installed to date. The wide range of power supply inputs as well as the emergency line seize capability have made this unit particularly attractive for electric utilities.

Alternatively, this unit has 4 device ports with up to 8 form A or B relay contact outputs for remote control. Typically the latter can be used for remote reset of computers and ancillary equipment.

Available power inputs include 117 VAC, 10-30 VDC & 20-160VDC. The latter can be used with 24 or 48 VDC communication power supplies as well as with 129 VDC electric utility station supplies.

These units can be ordered for operation in industrial temperature environments.

>> Open the PDF brochure

DID 2 x8 Call Processor - Two line device with 8 device ports - works similar to the TS-2005 except it can steer incoming calls to a particular device port from either line.

Ring Commander - Single line device with either 2 or 3 device ports. Automatically steers distinctive rings to the respective device. Single rings appear at device 1, double rings appear at device 2 and triple rings appear at device 3. The unit is phone line powered.

4 x 8 Line Concentrator with 911 capability - 4 line inputs and 8 device ports - allows up to 8 devices to share 4 telephone lines. Units can be paralleled for sharing the same 4 lines with 16 or more devices.

If a particular device is busied out because all lines are already occupied by other devices, emergency 911 calls can still be made by that busied out device. This is useful in jurisdictions where 911 call capability is mandatory.

2 x 4 & 2 x 8 Line Concentrator with 911 capability - 2 line inputs with either 4 or 8 device ports. The units works in a similar fashion as the 4x8 units described above.

X x Y (up to 15 Lines x 32 Terminals) Line Concentrator - up to 15 line inputs and 32 terminal ports. Automatically finds and sets itself up to the available line inputs. Checks if line is available before allowing terminal to line connection. Connections to lines and terminals is via rear 50 pin AMP connectors.

MD-2005 Modem Disconnect Switch - if data traffic is detected on any of the lines (8 maximum), the switch will release the device. The switch is used where it is desirable to keep modem traffic off a group of voice lines. Alternatively, it can be used to prohibit unauthorized data traffic on what is supposed to be a voice line only.

CRC-2005 Centrex Ring Converter Switch - converts a multiple ring cadence into a normal single 2 second ring pattern. The switch will handle up to 4 lines. Alternatively, it could be used to convert one ring pattern to another.

PS-2005 Priority Switch - single line device which connects 2 devices - one being a priority device - to one phone line. If the priority device attempts an outgoing call, it will wrest control from the non priority device. The non priority device will now get a busy tone indicating that the line is occupied by the priority device. Incoming calls are routed to the non priority device. All parameters are programmable to handle all situations.