Background:

Our customer, a globally renowned ECDIS (Electronic Chart Display and Information System) equipment manufacturer, provides cutting-edge navigation systems and route planning solutions to vessel owners across the world. As a leader in maritime technology, they are committed to delivering innovative and reliable solutions to ensure safe and efficient maritime operations.

 

Challenges:

  1. Manual Software Updates:The manufacturer faced significant challenges with manually updating their software across a global fleet. Ships visiting various ports worldwide made it difficult to ensure timely updates, leading to potential discrepancies and inefficiencies.
  1. Business Model Transformation:In a bid to enhance their business model, the manufacturer aimed to transition from selling systems to offering them as a rental service. This shift necessitated a connected solution that would enable seamless software updates, fleet monitoring, and on-demand support. And Remote Service Support scheme is absolutely vital for MG460 as device is equipped with 4G LTE modem and installed worldwide coverage SIM with prepaid traffic provides ECDIS software updating in any port, where connection is available.
  2. Cybersecurity Compliance:With the IACS UR E26 & E27 becoming mandatory cybersecurity standards by 1st July 2024, ensuring robust protection for their systems became imperative. The manufacturer needed to prepare their solutions for compliance with these stringent standards.

Solution

The manufacturer adopted Robustel's Linux Based MG460 and RCMS Stack Marine to comprehensively address all of the challenges posed:

  1. Comprehensive Connectivity:The MG460 connects to their ECDIS system on-board and is interconnected with other on-board equipment through various interfaces. It provides 4G LTE network connectivity near the shore and automatically fails over to satellite communication when offshore.
  2. Secure Internal DMZ:The customer runs their software in the MG460's Internal DMZ, leveraging its computing power to process data locally within a protected zone, secured by antivirus software.
  3. Remote Management and Monitoring:Robustel’s Gateway / router management platform was chosen to allow remote updates to the gateway and connected equipment. RCMS (Robustel Cloud Management System) – can connect over Satellite, cellular, Wi-Fi or any other type of internet connection to provide full remote access and extensive fleet-wide diagnostics.
  4. VPN-Based Direct Communication:The RCMS Stack Marine offers VPN-based Direct Communication between the MG460 and remotely connected service engineers. The VPN's connectivity can be easily controlled by the captain and crew via the BAM system, connecting of VPN ON/OFF physical switcher, minimizing cybersecurity risks and ensuring compliance with E27 requirements.

Solution Architecture

ECDIS_Topology

Solution Components

MG460 Maritime Cyber Security Gateway

As the world's first product to receive IEC61162-460 (Ed. 3) type approval from DNV as well as 460-Gateway and 460-Wiresless Gateway, the MG460 not only meets the highest cybersecurity standards for maritime navigation and wireless communication systems but also complies with IEC60945, meeting SOLAS vessel standards.

Device & Network Management Platform

Through RCMS Stack Marine, users can monitor the operational status and network connectivity of devices in real time, enabling timely problem identification and resolution. Furthermore, it provides VPN network services that comply with IEC61162-460 standards (direct communication mode), ensuring the security and integrity of data transmission.

Solution Benefits

  • Streamlined Compliance and Market Readiness: The solution enabled the manufacturer to achieve IEC61162-460 ed.3 type approval from DNV and other societies without major modifications. This expedited delivery of an E26 & E27 ready solution to the market, saving time and R&D costs.
  • Enhanced Fleet Management: RCMS Stack Marine supports real-time monitoring, remote firmware/configuration updates, and offers diagnostic tools for remote troubleshooting, reducing the need for on-site visits.
  • Cost-Effective Edge Computing: The Internal DMZ allows the manufacturer to run software on MG460's Docker, protected by antivirus software as specified in E27. This setup offers powerful edge computing capabilities without the need for costly external Marine PC (460-Node) as Application Server.
  • Ongoing Support and Security Assurance: As an IEC62443-4-1 certified company, Robustel provides continuous support to the ECDIS manufacturer, addressing secure development lifecycle (SDLC) requirements in E26 & E27, ensuring ongoing security and reliability.
  • Versatile Interface Support: The MG460 provides wide list of necessary interfaces, including RS232, RS422, RS485, I/O, and Ethernet, to seamlessly connect onboard systems and equipment.

Want to speak to one of our IoT experts to find out how Robustel can help you build your solution?