Escolar Documentos
Profissional Documentos
Cultura Documentos
James Yang
GM
EICS (Energy & Industrial Cyber Security) Division
www.lannerinc.com 3
Energy & Industrial Cyber Security Solution
Power and energy industries are experiencing an unprecedented evolution in both interconnectivity and
complexity. To ensure reliability, flexibility and profitability, critical infrastructure owners are searching for
capable solutions to enable a smoothly, compatibly interconnected control system and build up a reliable
cyber security platform to defend their network vulnerabilities, while keeping maintenance costs at low
levels. As a global leader in network security, Lanner offers series of industrial solutions not only ensuring
intelligent industrial communications, but also providing security measures through firewall, intrusion pre-
vention and deep packet inspection.
4 www.lannerinc.com
Smart Grid, see page 14
Lanner’s rackmount appliances for substation automation offer
high level of integration and interoperability with automation
• Power SCADA Automation Platform
devices and sensors for control consolidation, infrastructure mon-
• Power SCADA Communication Gateway
itoring and data transmission to achieve the highest stability and
• Automation Platform for Substation
productivity.
• IED Communication Gateway
www.lannerinc.com 5
Industrial Cyber Security
Traditionally, industrial control systems (ICS) like SCADA used to be isolated for its sole purpose of performing
mission-critical tasks and controlling the processes within important infrastructures such as oil refinery,
power plants, manufacturing factories, water/sewage treatment and energy plants. These systems are built
with conventional structures and operate in multiple decades of lifespan. However, with the increasing
complexity in hardware design and the implementation of open network due to convenience and cost
effectiveness, ICS environments are vulnerable towards cyber threats. There have been incidents of cyber
attacks over the past few years and thus ICS security has presented a great challenge.
Source: NCCIS/ICS-CERT
6 www.lannerinc.com
Lanner Industrial Cyber Security Solutions
As the leading hardware solution provider for network security, Lanner offers tailored-made hardware
platforms designed to continuously protect the communication in the targeted automation networks, such
as energy, manufacturing, oil and gas industries. Our hardware solutions range from rugged industrial UTM
installed in the industrial zones, to 1U/2U network security appliances applicable for the industrial DMZ and
office networks.
Internet
Level 5
Enterprise Web Server Email Sever
DMZ
FW-8896
NCA-4210
LEC-3231 Firewall
LEC-6032 Firewall
with IEC 61850
SCADA, DCS
Automation System Substation System
Level 2
Supervisory HMI HMI HMI
HMI LAN
Level 1
Controller PLC PLC RTU IED
LAN
www.lannerinc.com 7
Key Features & Benefits
Various Mounting
Majority of our industrial platforms are
designed with DIN-Rail and wall mounting
options for multiple installation purposes
in industrial environments.
Fanless Design
Without the most frequently replaced
parts, the systems can be widely
deployed in various environments. Excellent Network Design
Provide more than 4.8Gbps
throughput at UDP, 1518 bytes.
High-Performance CPU
Utilize latest Intel® Atom™ (BayTrail)
processors, delivering high performance Versatile I/O Design
and power efficiency. Various communication interface options,
including multiple Copper, Fiber LAN ports
and serial ports.
8 www.lannerinc.com
Factory Cyber Security Application
ICS structures are implemented in segregated environments to control
and monitor critical infrastructures. In recent years, we have heard various
incidents of critical infrastructures such as nuclear plants being breached
by malicious cyber attacks. One of the most discussed is the Stuxnet which
devastated the computing system of Iran’s nuclear plant. There are reports
indicating that hackers usually attack the weak sides of DCS, PLC and HMI.
Therefore, it is necessary to implement firewalls designed with endurance in
harsh environments.
Operating Center
LEC-3231
Factory_A
LEC-6032
LEC-6021
Factory_B
DCS
HMI
PLC controllers
www.lannerinc.com 9
Smart Energy
Lanner has been dedicated in renewable energy platforms, building automation and smart city management
solutions. We offer comprehensive solution and software services for our smart energy gateways that will
help improve manageability, service-availability and cyber security of your critical infrastructures.
AmphiGate Cloud
Customized Web UI
& Mobile App
Renewable Energy Management
Open API for
Re-development
Pyranometer
SSL/VPN
DNP 3.0
MQTT
Modbus
IEEE1888
Modbus TCP
10 www.lannerinc.com
Manageability
• Friendly UI/UX design to manage devices easily
• Flexible dashboard design to increase management efficiency
• Remote service deployment to waive non-necessary field trip
• Real-time device status monitoring to reduce local service cost
Availability
• Hybrid cloud integration support to protect confidential data
• Rich database type support to enable different front-end and back-end systems
• Redundant database design to prevent accidental data crash
• Flexible data storage policy to reduce non-necessary cloud space expenses
Security
• Proprietary firewall mechanism to enhance system security
• Secured access control mechanism to prevent non-authorized intrusion
Digital Signage
Optional Private
Storage SOS Alarm
Weather Station
IP Surveillance
Lighting Control
HTTP Command
XML
Mobus
Data
Lighting
Water Control Control
Chiller
Pump Security
www.lannerinc.com 11
Renewable Energy Management System
Lanner REMCS is a cloud-based monitoring and control system which enables
power plant owner or third party operator to execute 24/7 management task
to ensure that energy generation is reliable and sustainable. With intuitive
Web GUI and dashboard, managers can easily observe and track energy
generation status of PV farm or wind farm.
Operating Center
Gateway Specification
Suggested Hardware
Device Management
Maximum Device Registry 256
Temp. meter
Inverter
Data Aggregation Locally aggregate device data to produce events
and translate protocols Temp. meter
Connection Management
Uplink Protocol MQTT, IEEE1888, Modbus TCP, XML
Device Status Sync frequency Real-time PV Cell
12 www.lannerinc.com
Building Energy Management System
To effectively collect electricity usage from thousands of electricity meters in
urban buildings, the administrators needed an intelligent electricity monitoring
system for collecting and storing data from various terminal devices, as well as
uploading collected data back to a datacenter.
Our SEG-1000 Series are ideal for building energy monitoring. This ultra-
compact fanless industrial computer features 2 LAN ports with magnetic
isolation and 4 isolated serial ports. The compact, DIN rail form factor, front
facing I/O ports and the ARM9260 CPU together make the SEG-1000 Series
energy and space-efficient appliances for energy monitoring applications.
Data Center Support data upload to mutiple Data Centers Intelligent Building
DNS Lookup Support DNS lookup function
Converter Support thrid-party communication gateway's unified
data format and be able to revert originl protocols and
parameters
www.lannerinc.com 13
Smart Grid
Utility institutions today are relying on substation automation systems to have a secured and reliable solution
for controlling and monitoring status of the substations and grids. Lanner provides IEC 61850 compliant
industrial communication platforms that integrate substation’s control, automation, monitoring and
protection system in one device while eliminating possible compatibility issues among devices with various
communication protocols.
Communication 22
ºC
Gateway
G ate way 22
ºC
1 6
Substation 2 7
3 8
4 9
Automation 5 0
X ok
Target Applications:
- Power SCADA System Communication Gateway
- Automation Platform for Substation
- IED Communication Gateway
IED
RTU
14 www.lannerinc.com
Key Features & Benefits
Lanner’s communications gateway platforms for power systems are specifically designed for versatile
deployments in substation and renewable energy plants. Our solutions offer high levels of stability and
reliability, as well as well-rounded balance of size, cost, performance and power consumption. Lanner’s
power communications gateway and their key features are illustrated.
LEC-3231
Testing Standards
Fast Transient/Burst, 4kV, 5kHz on AC/DC power supply IEC-61850-3:2013, IEC-61000-4-4, IEEE C37.90.1
*4kV ,5KHz on communication line
Dielectric Strength
- Power supply input 2.0kV(rms)
- Signal port 0.5kV(rms) IEEE C37.90
Insulation
Impulse Voltage
- Severity Level:
- 5kV power supply, communication ports
Vibration Response and Endurance Test IEC 61850-3: 2013, IEC 60255-21-1
Mechanical Performance
Shock Response Withstand and Bump Test IEC-61850-3: 2013, IEC 60255-21-2
www.lannerinc.com 15
Modular Industrial Communication Device
With the trend of automation, the demand for efficient power equipments is increasing by multiples.
Communication management is one of the main concerns for automation as it often attracts cyber
threats. To enhance communication and cyber security in automation, Lanner introduces the industrial-
grade, rackmount Box PC LEC-3231, designed for power substation deployment. The rugged, fanless box
PC is driven by processor choices of Intel
Celeron 847E, Core i3-3217UE or Core i7-
3517UE, depending on the SKU selected,
and also supports up to 10 isolated COM
ports, 8 magnetic isolated LAN ports, and
redundant power supplies. To function as
a safe and secured platform, LEC-3231 is
compliant with IEC 61850-3 and IEEE 1613
for the energy sector.
Serial Standard 2 x DB9,& 2x2x10pin terminal block for 10 x RS-232/422/485 2 x DB9,& 2x2x10pin terminal block for 10 x RS-232/422/485
Serial
ESD Protection 15 KV for all signals 15 KV for all signals
Interface
Isolation
2 KV digital isolation 2 KV digital isolation
Protection
Display Display Interface DB15 x1 for VGA DB15 x1 for VGA
Weight 5.8 kg 6 kg
Dimensions (W x H x D) 440 x 89 x 351.5 mm (17.32”x3.50”x13.84”) 440 x 88 x 301.2 mm (17.32”x3.46”x11.85”)
Operating
-20~55°C -40~70°C
Temperature
Environment
Storage
-40~80°C -40~85°C
Temperature
AC power input
Input Voltage 36~48Vdc or 90~264Vac/100~300Vdc
Power 100~240Vac
Redundant PSU - Yes
Alter tool Built-in buzzer and RTC (real-time clock) with battery lithium backup Built-in buzzer and RTC (real-time clock) with battery lithium backup
Reliability
Automatic Reboot Trigger Watchdog Timer 1~255 level Watchdog Timer 1~255 level
LEC-3231B/LEC-3231C/
LEC-3231D: withoout PSU,
Ordering Information LEC-3230B, LEC-3230C, LEC-3230D
LEK-3231-PW1: 36~48 Vdc
LEK-3231-PW2: 90~264 Vac/100-300 Vdc
Part LEK-2G2F: 4x Gigabit Ethernet LEK-EN1: 4x Gigabit Ethernet LEK-8GE: 8x Gigabit Ethernet LEK-2GE2MM: Ethernet LEK-2GE2MMA: Ethernet LEK-COM8A: Isolated RS-
Number module module module module w/ Gigabit and 100M module w/ Gigabit and 100M 232/422/485 module
MM optic fiber SM optic fiber
Feature • Intel i210T/i210IS • Intel 82583V • Intel 82583V • Intel 82583V / VIA • Intel 82583V / VIA • EXAR 17B358
• 2 x RJ45, 2 x SFP • 4 x RJ45 • 8 x RJ45 VT6105M controller VT6105M controller • 8 x RS-232/422/485
• Windows 7/Linux driver • Windows/Linux driver • Windows/Linux driver • 2 x RJ45, 2 x multi-mode • 2 x RJ45, 2 x single-mode • Windows/Linux driver
ST ST
• Windows/Linux driver • Windows/Linux driver
16 www.lannerinc.com
Hybrid Industrial Communication Device (Hybrid ICD)
Lanner’s LEC-3480 is the first product built with Hybrid ICD architecture, which defines the next-generation
performance and multi-operability for industrial communication platform. There are 6 computing blades
in one 4U rackmount form factor, capable of flexible configurations, high scalability and redundant power
supplies. LEC-3480 is a successful integration of Intel® x86 and RISC architectures, supporting up to 6
processors.
Multi-platform
Multi-processor
Multi-I/O
Dimensions (W x H x D) 436.8 x 276 x 177 mm 436.8 x 276 x 177 mm 440 x 44.5 x 301 mm 440 x 44.5 x 301 mm
Operating
-20~55°C (-40~70°C) -20~55°C (-40~70°C) -20~55°C -20~55°C
Temperature
Environment
Storage
-40~85°C -40~85°C -40~85°C -40~85°C
Temperature
Power Input Voltage DC +12V (Internal Bus) DC +12V (Internal Bus) DC +12V (Internal Bus) DC +12V (Internal Bus)
Built-in buzzer and RTC (real-time Built-in buzzer and RTC (real-time Built-in buzzer and RTC (real-time Built-in buzzer and RTC (real-time
Alter tool
clock) with lithium battery backup clock) with lithium battery backup clock) with battery lithium backup clock) with battery lithium backup
Reliability
Automatic Reboot
Watchdog Timer 1~255 level Watchdog Timer 1~255 level Watchdog Timer 1~255 level Watchdog Timer 1~255 level
Trigger
Ordering Information LEC-3480 LEC-3480-16CM LEC-3430 LEC-3430-16CM
www.lannerinc.com 17
Selection
Guide
CPU Intel® Celeron® N2807, Atom E3815 Intel® Atom E3825 Intel® Atom™ N2600
BIOS AMI Flash BIOS AMI SPI Flash BIOS AMI SPI Flash BIOS
Magnetic Isolation Protection 1.5KV magnetic isolation protection 1.5KV magnetic isolation protection 1.5KV build-in
ESD Protection 15KV ESD protection 15KV ESD protection 15KV for all signals
I/O Digital I/O 1x 2x5 Pin terminal block for 4x DI/DO (without isolation) LEC-3031-DI4: 4x DI/ 4x DO (without isolation) -
Expansion
Mini-PCIe / PCIe - - -
Interface
Watchdog Watchdog Timer 1~255 Level Time Interval System Reset, Watchdog Timer 1~255 Level Time Interval System Reset, Watchdog Timer 1~255 Level Time Interval System
Timer Software Programmable Software Programmable Reset, Software Programmable
Connector 2-pin connector Terminal Block 2-pin connector Terminal Block 2 or 6-Pin Terminal Block
Power
Power Consumption (Idle) TBD TBD TBD
LEC-3030A: Steel,
Construction Aluminum + Steel Aluminum
Mechanical LEC-3030T: Aluminum + Steel
Mounting DIN rail, Wallmount DIN rail, Wallmount DIN rail, Wallmount
Microsoft Windows Windows 7, Windows 7 Embedded Windows 7, Windows 7 Embedded Windoows 7, Windoows 7 Embedded
Driver
Support
Linux Kernel 2.6 Kernel 2.6 Kernel 2.6
Ordering
LEC-3030B/C LEC-3031-A4/A6/A8/I4/I10/DI4 LEC-6020-A/B/C/D
Information
18 www.lannerinc.com
LEC-6021A LEC-6032 LEC-6033 LEC-6040H/M
LEC-6040H: Intel® Core™ i5-4402E
Intel® Atom™ N2600 Intel® Atom™ E3845 Intel® Celeron® N2807
LEC-6040M: Intel® Core™ i3-4102E
2C 4C 2C 2C
AMI SPI Flash BIOS AMI SPI Flash BIOS AMI Flash BIOS AMI SPI Flash BIOS
DDR3 800 MHz DDR3L 1333 MHz DDR3L 1333 MHz DDR3L 1333/1600 MHz
Internal pin header Internal pin header 1x VGA Internal pin header
1.5KV build-in 1.5KV build-in 1.5KV magnetic isolation protection 1.5KV build-in
1x 2.5” Drive Bay (Optional) 1x 2.5” Drive Bay 1x 2.5” Drive Bay 1x 2.5” Drive Bay
15KV for all signals 15KV for all signals 15KV ESD protection 15KV for all signals
- - - -
- - 1x Full-sized mini PCIe and 1x Half-Sizd mini-PCIe 1x Full-sized mini PCIe and 1x Half-Sizd mini-PCIe
Watchdog Timer 1~255 Level Time Interval System Watchdog Timer 1~255 Level Time Interval System Watchdog Timer 1~255 Level Time Interval System Watchdog Timer 1~255 Level Time Interval System
Reset, Software Programmable Reset, Software Programmable Reset, Software Programmable Reset, Software Programmable
6-Pin Terminal Block 6-pin Phoenix Contact Connector Phoenix contact 2-pin connector 2-pin Phonex Contact Connector
53.5x186x160 mm (2.11"x 7.32"x 6.30") 78x146x127 mm (3.07"x 5.75"x 5.00") 170 x 138 x 41.5 68x210x190 mm (2.68"x 8.27"x 7.84")
DIN rail, Wallmount DIN rail, Wallmount DIN rail, Wallmount DIN rail, Wallmount
Windoows 7 Embedded Windoows 7, Windoows 7 Embedded Windows 7, Windows 7 Embedded Windoows 7, Windoows 7 Embedded
RoHS, IEC 61850 RoHS, C1D2 RoHS RoHS, IEC 61850-3, IEEE 1613
LEC-6040H-B1/B2/B3
LEC-6021A LEC-6032B/C/D/F LEC-6033A/B/C
LEC-6040M-B1/B2/B3
www.lannerinc.com 19
Corporate
USA China
Lanner Electronics Inc. 立华科技
47790 Westinghouse Drive 北京市海淀区农大南路33号
Fremont, CA 94539 厢黄旗东路兴天海园一层
T: +1-855-852-6637 T: +86 010-82795600
F: +1-510-979-0689 F: +86 010-62963250
E: sales_us@lannerinc.com E: service@ls-china.com.cn
Canada Taiwan
LEI Technology Canada Ltd 立端科技股份有限公司
3160A Orlando Drive 221新北市汐止區
Mississauga, ON L4V 1R5 大同路二段173號7樓
Canada T: +886-2-8692-6060
T: +1 877-813-2132 F: +886-2-8692-6101
F: +1 905-362-2369 E: contact@lannerinc.com
E: sales_ca@lannerinc.com
Please verify specifications before quoting. All product specifications are subject to change without
notice. No part of this publication may be reproduced in any form or by any means, electronic, photo-
copying or otherwise without prior written permission of Lanner Electronics Inc. All brand names and
product names are the trademarks or registered trademarks of their respective companies.
© Lanner Electronics Inc., 2016 www.lannerinc.com