November 20, 2023 S2OPC Awarded the Security Visa from ANSSI for the CSPN

Systerel has been awarded the Security visa, issued by the French National Cybersecurity Agency (ANSSI).

Systerel, has been awarded the Security visa, issued by the French National Cybersecurity Agency (ANSSI), for the CSPN (First Level Security Certification) for its products S2OPC, the safe & secure open-source OPC UA stack. Thanks to this huge milestone, S2OPC becomes the OPC UA market’s pioneer in obtaining the Security visa from ANSSI, highlighting its unwavering commitment to providing unmatched security.

Commitment to cybersecurity in industry 4.0

OPC UA is the key communication standard of industry 4.0, enabling seamless and secure data exchange between different devices and platforms. It plays a pivotal role in the evolution of smart factories, ensuring interoperability, data integrity, and robust security.

The ANSSI Security visa rewards Systerel’s strong commitment to deliver secure and trustworthy components by meeting strict cybersecurity standards.

A rigorous certification process

The CSPN certification attests to the robustness of products in accordance with the rigorous requirements established by ANSSI using methodologies that best meet the security needs of users and take into account technological developments. It is widely recognized and trusted by the French administration and industries.

The certification involves a comprehensive conformity analysis and rigorous penetration tests carried out by an independent third-party assessor (CESTI), under the authority of ANSSI. The evaluation encompasses a 35 man-days scrutiny, analyzing the product conformity to its security specifications; measuring the effectiveness of the security functions and the impact of the product on the security of the host system¹, as well as a cryptographic analysis². This certification attests to the robustness and the reliability of S2OPC.

A mutual recognition in France and Germany

Currently, there is a strong demand for certified cybersecurity solutions at the European level.

Thanks to the intensive cooperation between French and German cybersecurity agencies, a mutual recognition of certificates has been established³. Hence, S2OPC benefits from BSZ certification: the German equivalent of CSPN.

This reduces the need for manufacturers to undergo multiple certification procedures in different markets, reducing costs and trade barriers.

S2OPC: a double certification for unmatched security

S2OPC stands out from its competition by becoming the first implementation of the OPC UA standard certified by both the OPC Foundation and ANSSI. This dual certification assures users of unmatched levels of security.

Vincent Pouzol, Products Department Manager at Systerel, emphasizes: “With the CSPN and OPC Foundation certifications, S2OPC’s users are guaranteed a high level of trust in the implementation of the OPC UA cyber mechanisms and in the mitigation of the risks incurred by the assets to be protected.” 

Systerel has already deployed S2OPC within the systems of several major companies including Alstom Transport, CIMO (Compagnie Industrielle de Monthey SA), CNES (French National Centre for Space Studies), RTE (France’s Transmission System Operator) and Schneider Electric.

For further information on S2OPC, we invite you to check: www.s2opc.com

To find out more about the ANSSI Security visa, please check: https://cyber.gouv.fr/produits-certifies/s2opc-version-131

About:
Systerel is an independent engineering company specialized in development, validation, and evaluation of safety critical real-time systems. Through numerous implementations of the OPC UA technology in an industrial context, Systerel developed a significant expertise on the OPC UA standard. Systerel is a member of the OPC Foundation.

To find out more, please check: www.s2opc.com

ANSSI Security visas: Security visas make it possible to identify reliable and recognized security solutions following an evaluation carried out by approved laboratories according to a rigorous and proven methodology. This assessment takes the form of penetration tests and an in-depth analysis to verify the compliance of these solutions with the corresponding requirements frameworks. A Security visa takes the form, depending on the context and need, of a certification or qualification. Security visas represent a guarantee of security for users.

Contact:
Vincent Lacroix, S2OPC Product Manager, vincent.lacroix@systerel.fr

¹ ANSSI, Procédure : Certification de sécurité de premier niveau des produits des technologies de l’information https://www.ssi.gouv.fr/uploads/2015/01/anssi-cspn-cer-p-01-certification_de_securite_de_premier_niveau_v5.0.pdf

² ANSSI, Procédure : Modalités pour la réalisation des analyses cryptographiques et des évaluations des générateurs de nombres aléatoires https://www.ssi.gouv.fr/uploads/2015/01/anssi-cc-cry-p-01-modalites-pour-la-realisation-des-analyses-cryptographiques_v4.1.pdf

³ https://www.ssi.gouv.fr/administration/produits-certifies/cspn/

Subscribe to Industry Today