Enhance the Cybersecurity of Variable Speed Drives

Human users remain the main risk for commercial variable speed drives. At the same time, adopting of the Zero Trust concept is already recommended for operational technology deployments to comply with the principle of never trusting the person accessing the system before performing a security check. Based on the specifications of the Security Level 2 (SL2) on the International Electrotechnical Commission (IEC) 62443-4-2 standard and considering the Cyber Resilience Act regulation this article aims to validate that it is possible to improve the cybersecurity of variable speed drives, developing a cybersecurity subsystem and applying a method to implement access control using Modbus protocol, seeking to control requests made by human users through parameterization software and devices through Fieldbus communication. To validate the role-based access control, which is subjected to tests that simulate threats in a real environment based on Industry 4.0 where edge devices collect and send data to the cloud. Its results are compared with the requirements to quantify and qualify the cybersecurity subsystem's adherence. It demonstrates that 100% of the FR1 requirements were achieved and met 87% of the FR2 requirements for SL 2, which allows the development of VSDs in adherence with IEC 62443-4-2.