{"id":1546,"date":"2020-05-19T13:59:09","date_gmt":"2020-05-19T12:59:09","guid":{"rendered":"https:\/\/www.systerel.fr\/en\/?page_id=1546"},"modified":"2025-10-14T13:38:42","modified_gmt":"2025-10-14T12:38:42","slug":"opc-ua","status":"publish","type":"page","link":"https:\/\/www.systerel.fr\/en\/expertise\/opc-ua\/","title":{"rendered":"OPC UA and industrial cybersecurity"},"content":{"rendered":"\n<p>OPC UA (IEC 62541 standard) is an industrial communication protocol that addresses the growing cybersecurity challenges associated with the deployment of Industry 4.0.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><img decoding=\"async\" src=\"https:\/\/www.systerel.fr\/wp-content\/uploads\/2019\/03\/logo_OPC_UA-1024x333.jpg\" alt=\"OPC UA logo\" class=\"wp-image-3463\" style=\"width:327px;height:106px\"\/><\/figure>\n<\/div>\n\n\n<h2 class=\"wp-block-heading\">Industry 4.0: OPC UA and IIoT security<\/h2>\n\n\n\n<p>With the rise of Industry 4.0, industrial environments have undergone extensive digitalization. The boundaries between Information Technology (IT) and Operational Technology (OT) have gradually disappeared, leading to centralized control of industrial systems.<\/p>\n\n\n\n<p>In this context, cyberattacks have become a major threat.Consequently, the industry has started replacing legacy systems with open, standardized communication protocols that meet modern cybersecurity requirements\u2014as outlined, for instance, in the 2013 French Military Programming Law (LPM).<\/p>\n\n\n\n<p><strong>OPC UA (IEC 62541 standard)<\/strong> plays a central role in this transition. It is:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Recognized as the reference communication standard for Industry 4.0 and the Industrial Internet of Things (IIoT)<\/li>\n\n\n\n<li>Open, standardized, and platform-independent<\/li>\n\n\n\n<li>Maintained by the OPC Foundation<\/li>\n<\/ul>\n\n\n\n<p>These characteristics make OPC UA especially suitable for addressing cybersecurity requirements in industrial environments. It is already deployed across key sectors such as automotive, rail, aerospace, and energy.<\/p>\n\n\n\n<p>The OPC Foundation provides <a href=\"https:\/\/opcfoundation.org\/wp-content\/uploads\/2017\/11\/OPC-UA-Security-Advise-EN.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">guidelines for implementing security when developing OPC UA-based applications<\/a>.<\/p>\n\n\n\n<p>Security is natively built into the OPC UA specification and is based on mechanisms that have been <a href=\"https:\/\/opcconnect.opcfoundation.org\/2017\/06\/federal-office-for-information-security-bsi-completes-analysis-of-opc-ua\/\">thoroughly analyzed<\/a> by the German Federal Office for Information Security (BSI).<\/p>\n\n\n\n<p>In France, the National Cybersecurity Agency (ANSSI) has supported the INGOPCS project, which aims to develop an open-source and certifiable implementation of OPC UA.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Deployment of OPC UA in industrial systems<\/h2>\n\n\n\n<p>OPC UA was initially adopted in SCADA systems using a client-server architecture. Today, it supports a wide range of use cases thanks to its flexible communication paradigms (Client\/Server and PubSub) and support for multiple transport protocols such as TCP, UDP, MQTT, and HTTPS.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The <strong>Client\/Server model<\/strong> enables point-to-point, connected communication, where the server exposes a data model and the client invokes services.<br><\/li>\n\n\n\n<li>The <strong>PubSub model <\/strong>allows for connectionless, message-based communication, where Publishers send data to one or more Subscribers.<\/li>\n<\/ul>\n\n\n\n<p>The PubSub model also allows OPC UA to be deployed at the field level, including controllers, sensors, and embedded systems, which require low-latency and optimized communication over deterministic local networks. It also facilitates direct integration with cloud infrastructures.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">OPC UA security mechanisms<\/h2>\n\n\n\n<p>Client\/Server communication security in OPC UA is based on the exchange of signed X.509 certificates. This provides integrity control, encryption, authentication, authorization, and auditing capabilities.<\/p>\n\n\n\n<p>PubSub communication security relies on symmetric key encryption and message signing. Key management is handled by dedicated servers known as Security Key Services (SKS), which manage the distribution and lifecycle of cryptographic keys.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Systerel: a key player in the OPC UA ecosystem<\/h2>\n\n\n\n<p>For over 15 years, our company has developed strong expertise in the OPC UA standard through multiple implementations of OPC UA technology in industrial contexts.<\/p>\n\n\n\n<p>Systerel is:<\/p>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-9d6595d7 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:66.66%\">\n<ul class=\"wp-block-list\">\n<li><strong>A member of the <a href=\"https:\/\/opcfoundation.org\/\">OPC Foundation<\/a><\/strong><a href=\"https:\/\/opcfoundation.org\/\" target=\"_blank\" rel=\"noreferrer noopener\"><\/a><\/li>\n\n\n\n<li><strong>A member of the <a href=\"https:\/\/gimelec.fr\/nos-missions\/clubs\/hub-opc-france\/\" target=\"_blank\" rel=\"noreferrer noopener\">OPC UA Hub France<\/a><\/strong>, hosted by GIMELEC<\/li>\n\n\n\n<li><strong>A member of GIMELEC\u2019s <a href=\"https:\/\/gimelec.fr\/nos-missions\/clubs\/cyber-ot\/\" target=\"_blank\" rel=\"noreferrer noopener\">Cyber OT Club<\/a><\/strong><\/li>\n\n\n\n<li><strong>Active in several working groups<\/strong> focused on the development and adoption of OPC UA<\/li>\n\n\n\n<li><strong>Recognized by the OPC Foundation<\/strong>, which acknowledges several of our engineers as experts in data modeling, security, and deployment<\/li>\n\n\n\n<li><strong>The developer of the <a href=\"http:\/\/www.s2opc.com\">S2OPC library<\/a><\/strong><\/li>\n\n\n\n<li><strong>A provider <\/strong><a href=\"https:\/\/www.s2opc.com\/services\/training\/\"><strong>of training programs<\/strong> <\/a>on OPC UA technology<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:33.33%\">\n<figure class=\"wp-block-image size-full is-resized\"><a href=\"https:\/\/www.systerel.fr\/en\/wp-content\/uploads\/sites\/3\/2025\/09\/OPC-fondation-logo-360x240-1.png\"><img loading=\"lazy\" decoding=\"async\" width=\"366\" height=\"240\" src=\"https:\/\/www.systerel.fr\/en\/wp-content\/uploads\/sites\/3\/2025\/09\/OPC-fondation-logo-360x240-1.png\" alt=\"Systerel is a member of OPC Foundation\" class=\"wp-image-3345\" style=\"width:150px\" srcset=\"https:\/\/www.systerel.fr\/en\/wp-content\/uploads\/sites\/3\/2025\/09\/OPC-fondation-logo-360x240-1.png 366w, https:\/\/www.systerel.fr\/en\/wp-content\/uploads\/sites\/3\/2025\/09\/OPC-fondation-logo-360x240-1-300x197.png 300w\" sizes=\"auto, (max-width: 366px) 100vw, 366px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><a href=\"https:\/\/www.systerel.fr\/en\/wp-content\/uploads\/sites\/3\/2025\/09\/GIMELEC-logo-366x240-2-1.png\"><img loading=\"lazy\" decoding=\"async\" width=\"366\" height=\"240\" src=\"https:\/\/www.systerel.fr\/en\/wp-content\/uploads\/sites\/3\/2025\/09\/GIMELEC-logo-366x240-2-1.png\" alt=\"Systerel is member of GIMELEC.\" class=\"wp-image-3346\" style=\"width:150px\" srcset=\"https:\/\/www.systerel.fr\/en\/wp-content\/uploads\/sites\/3\/2025\/09\/GIMELEC-logo-366x240-2-1.png 366w, https:\/\/www.systerel.fr\/en\/wp-content\/uploads\/sites\/3\/2025\/09\/GIMELEC-logo-366x240-2-1-300x197.png 300w\" sizes=\"auto, (max-width: 366px) 100vw, 366px\" \/><\/a><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\">S2OPC: a secure open-source implementation of OPC UA<\/h2>\n\n\n\n<p>Systerel has developed S2OPC, <strong>an open-source OPC UA stack<\/strong>.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>It is compliant with version 1.04 of the standard, as validated by the OPC Foundation. <\/li>\n\n\n\n<li>ANSSI awarded S2OPC the <a href=\"https:\/\/www.systerel.fr\/en\/news\/s2opc-awarded-the-security-visa-from-anssi-for-the-c\/?hilite=cspn\">CSPN security certification<\/a>, which BSZ in Germany also recognizes.<\/li>\n<\/ul>\n\n\n\n<p class=\"has-text-align-left\">Designed for critical industrial environments such as energy, transportation, and defense, S2OPC combines a minimal memory footprint, real-time performance, and high scalability.<\/p>\n\n\n\n<p><a class=\"btn from-shortcode \" href=\"https:\/\/www.s2opc.com\" target=\"_blank\">Discover S2OPC<\/a> <a class=\"btn from-shortcode \" href=\"https:\/\/www.linkedin.com\/showcase\/safe-secure-opc\" target=\"_blank\">LinkedIn S2OPC<\/a><\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Through several implementations of the OPC UA technology in an industrial context, Systerel developed a real expertise on the OPC UA standard.<\/p>\n","protected":false},"author":4,"featured_media":0,"parent":303,"menu_order":3,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1546","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>OPC UA and industrial cybersecurity<\/title>\n<meta name=\"description\" content=\"OPC UA has all the key features required to meet the cybersecurity requirements of communications in the context of Industry 4.0 deployment.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.systerel.fr\/en\/expertise\/opc-ua\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OPC UA and industrial cybersecurity\" \/>\n<meta property=\"og:description\" content=\"OPC UA has all the key features required to meet the cybersecurity requirements of communications in the context of Industry 4.0 deployment.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.systerel.fr\/en\/expertise\/opc-ua\/\" \/>\n<meta property=\"og:site_name\" content=\"Systerel English\" \/>\n<meta property=\"article:modified_time\" content=\"2025-10-14T12:38:42+00:00\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.systerel.fr\\\/en\\\/expertise\\\/opc-ua\\\/\",\"url\":\"https:\\\/\\\/www.systerel.fr\\\/en\\\/expertise\\\/opc-ua\\\/\",\"name\":\"OPC UA and industrial cybersecurity\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.systerel.fr\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.systerel.fr\\\/en\\\/expertise\\\/opc-ua\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.systerel.fr\\\/en\\\/expertise\\\/opc-ua\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.systerel.fr\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/logo_OPC_UA-1024x333.jpg\",\"datePublished\":\"2020-05-19T12:59:09+00:00\",\"dateModified\":\"2025-10-14T12:38:42+00:00\",\"description\":\"OPC UA has all the key features required to meet the cybersecurity requirements of communications in the context of Industry 4.0 deployment.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.systerel.fr\\\/en\\\/expertise\\\/opc-ua\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.systerel.fr\\\/en\\\/expertise\\\/opc-ua\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.systerel.fr\\\/en\\\/expertise\\\/opc-ua\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.systerel.fr\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/logo_OPC_UA-1024x333.jpg\",\"contentUrl\":\"https:\\\/\\\/www.systerel.fr\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/logo_OPC_UA-1024x333.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.systerel.fr\\\/en\\\/expertise\\\/opc-ua\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.systerel.fr\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Expertise\",\"item\":\"https:\\\/\\\/www.systerel.fr\\\/en\\\/expertise\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"OPC UA and industrial cybersecurity\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.systerel.fr\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.systerel.fr\\\/en\\\/\",\"name\":\"Systerel English\",\"description\":\"Safe real-time solutions\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.systerel.fr\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OPC UA and industrial cybersecurity","description":"OPC UA has all the key features required to meet the cybersecurity requirements of communications in the context of Industry 4.0 deployment.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.systerel.fr\/en\/expertise\/opc-ua\/","og_locale":"en_US","og_type":"article","og_title":"OPC UA and industrial cybersecurity","og_description":"OPC UA has all the key features required to meet the cybersecurity requirements of communications in the context of Industry 4.0 deployment.","og_url":"https:\/\/www.systerel.fr\/en\/expertise\/opc-ua\/","og_site_name":"Systerel English","article_modified_time":"2025-10-14T12:38:42+00:00","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.systerel.fr\/en\/expertise\/opc-ua\/","url":"https:\/\/www.systerel.fr\/en\/expertise\/opc-ua\/","name":"OPC UA and industrial cybersecurity","isPartOf":{"@id":"https:\/\/www.systerel.fr\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.systerel.fr\/en\/expertise\/opc-ua\/#primaryimage"},"image":{"@id":"https:\/\/www.systerel.fr\/en\/expertise\/opc-ua\/#primaryimage"},"thumbnailUrl":"https:\/\/www.systerel.fr\/wp-content\/uploads\/2019\/03\/logo_OPC_UA-1024x333.jpg","datePublished":"2020-05-19T12:59:09+00:00","dateModified":"2025-10-14T12:38:42+00:00","description":"OPC UA has all the key features required to meet the cybersecurity requirements of communications in the context of Industry 4.0 deployment.","breadcrumb":{"@id":"https:\/\/www.systerel.fr\/en\/expertise\/opc-ua\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.systerel.fr\/en\/expertise\/opc-ua\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.systerel.fr\/en\/expertise\/opc-ua\/#primaryimage","url":"https:\/\/www.systerel.fr\/wp-content\/uploads\/2019\/03\/logo_OPC_UA-1024x333.jpg","contentUrl":"https:\/\/www.systerel.fr\/wp-content\/uploads\/2019\/03\/logo_OPC_UA-1024x333.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.systerel.fr\/en\/expertise\/opc-ua\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.systerel.fr\/en\/"},{"@type":"ListItem","position":2,"name":"Expertise","item":"https:\/\/www.systerel.fr\/en\/expertise\/"},{"@type":"ListItem","position":3,"name":"OPC UA and industrial cybersecurity"}]},{"@type":"WebSite","@id":"https:\/\/www.systerel.fr\/en\/#website","url":"https:\/\/www.systerel.fr\/en\/","name":"Systerel English","description":"Safe real-time solutions","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.systerel.fr\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.systerel.fr\/en\/wp-json\/wp\/v2\/pages\/1546","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.systerel.fr\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.systerel.fr\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.systerel.fr\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.systerel.fr\/en\/wp-json\/wp\/v2\/comments?post=1546"}],"version-history":[{"count":21,"href":"https:\/\/www.systerel.fr\/en\/wp-json\/wp\/v2\/pages\/1546\/revisions"}],"predecessor-version":[{"id":3453,"href":"https:\/\/www.systerel.fr\/en\/wp-json\/wp\/v2\/pages\/1546\/revisions\/3453"}],"up":[{"embeddable":true,"href":"https:\/\/www.systerel.fr\/en\/wp-json\/wp\/v2\/pages\/303"}],"wp:attachment":[{"href":"https:\/\/www.systerel.fr\/en\/wp-json\/wp\/v2\/media?parent=1546"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}