METHOD AND SYSTEM FOR SECURING ELECTRONIC DATA EXCHANGE BETWEEN AN INDUSTRIAL PROGRAMMABLE DEVICE AND A PORTABLE PROGRAMMABLE DEVICE

1 . A method for securing electronic data exchange comprising:

providing electronic data exchange between an industrial programmable device implementing industrial process control and a portable programmable device, said portable programmable device being adapted to be operated by a user and to exchange electronic data with said industrial programmable device via a first communication protocol, each of said industrial programmable device and portable programmable device comprising a communication module enabling said first communication protocol,

reading, on the industrial programmable device first user identifier using a user identification device, and

checking, on the industrial programmable device whether said first user identifier (UID 1 ) belongs to a set of user identifiers previously stored in a memory of said industrial programmable device;

in case of a negative result from the checking on the industrial programmable device, disabling the communication module of said industrial programmable device;

reading, on the portable programmable device, a second user identifier using a user identification device, and

checking, on the portable programmable device whether said second user identifier belongs to a list of user identifiers previously stored in a memory of said portable programmable device;

in case of a negative result from the checking on the portable programmable device, disabling the communication module of said portable programmable device; and

verifying whether said first user identifier is identical to said second user identifier, and in case of negative verification, disabling the communication module of said industrial programmable device and/or disabling the communication module of said portable programmable device.

2 . The method for securing electronic data exchange according to claim 1 , further comprising:

obtaining, on said portable programmable device, a private key for Authentication, belonging to a pair of cryptographic keys, said authentication private key being locally memorized in association with said second user identifier;

encrypting the second user identifier with the authentication private key and transmitting an item of information containing the encrypted second user identifier to the industrial programmable device;

receiving, on said industrial programmable device, the item of information containing the encrypted second user identifier, and decrypting said item of information using an authentication public key memorized in the industrial portable device in association with said first user identifier to obtain a decrypted second user identifier; and

comparing the decrypted second user identifier with the first user identifier.

3 . The method for securing electronic data exchange according to claim 1 , wherein the reading of the first user identifier comprises physically connecting a user identification card to the industrial programmable device, and/or wherein the reading of the second user identifier comprises physically connecting the user identification card to the portable programmable device.

4 . The method for securing electronic data exchange according to claim 1 , wherein the reading of the first user identifier comprises a communication of said first user identifier to the industrial programmable device via a second communication protocol, and/or the reading of the second user identifier comprises a communication of said second user identifier to the portable programmable device via a second communication protocol,

said second communication protocol being different from the first communication protocol.

5 . The method for securing electronic data exchange according to claim 1 , further comprising, after verifying that the first user identifier is identical to said second user identifier, establishing an encrypted communication channel between the industrial programmable device and the portable programmable device comprising:

obtaining, on the industrial programmable device, a pair of exchange encryption keys comprising an exchange public key and an exchange private key associated with the first user identifier,

encrypting the exchange public key with the authentication public key associated with the first user identifier, and

sending the encrypted exchange public key to the portable programmable device.

6 . The method for securing electronic data exchange according to claim 5 , wherein the obtaining of a pair of exchange encryption keys comprises applying a pseudo-random re-shuffling of a second list of key pairs stored on the industrial programmable device.

7 . Method for securing electronic data exchange according to claim 5 , further comprising:

receiving, on the portable programmable device, the encrypted exchange public key and obtaining the exchange public key by applying decryption using the authentication private key locally stored.

8 . The method for securing electronic data exchange according to claim 5 , further comprising exchanging data encrypted with the pair of exchange encryption keys during a predetermined lapse of time.

9 . The method for securing electronic data exchange according to claim 8 , further comprising, after said predetermined time lapse, the steps of:

obtaining, on the industrial programmable device, a new pair of exchange encryption keys comprising a new exchange public key and a new exchange private key associated with the first user identifier,

repeating the steps of encrypting and sending on the industrial programmable device, using the new exchange public key as exchange public key, and

repeating the steps of receiving and obtaining an exchange public key on the portable programmable device.

10 . The method for securing electronic data exchange according to claim 9 , further comprising exchanging data encrypted with the new pair of exchange encryption keys during the predetermined lapse of time.

11 . the method for securing electronic data exchange according to claim 1 , wherein said first communication protocol is a wireless communication protocol.

12 . A system for securing electronic data exchange, comprising:

an industrial programmable device implementing industrial process control and a portable programmable device, said portable programmable device being adapted to be operated by a user and to exchange electronic data with said industrial programmable device via a first communication protocol, each of said industrial programmable device and portable programmable device comprising a communication module enabling said first communication protocol,

the industrial programmable device is adapted to:

read a first user identifier from a user identification device, and

check whether said first user identifier belongs to a list of user identifiers previously stored in a memory of said industrial programmable device,

in case of a negative result from the checking on the industrial programmable device, maintain the communication module of said industrial programmable device disabled,

the portable programmable device is adapted to:

read a second user identifier from a user identification device, and

check whether said second user identifier belongs to a list of user identifiers previously stored in a memory of said portable programmable device,

in case of negative checking, maintain the communication module of said portable programmable device disabled,

the industrial programmable device comprising a module adapted to verify whether said first user identifier is identical to said second user identifier, and in case of negative verification, to disable the communication module of said industrial programmable device and/or to disable the communication module of said portable programmable device.

13 . The system for securing electronic data exchange according to claim 12 , wherein said industrial programmable device comprises an integrated user identification reader adapted to receive a user identification card and/or said portable programmable device comprises an integrated user identification reader adapted to receive a user identification card.

14 . The system for securing electronic data exchange according to claim 12 , wherein said industrial programmable device comprises a second communication module adapted to communicate with an external user identification device via a second communication protocol, and/or said portable programmable device comprises a second communication module adapted to communicate with an external user identifier reading device via a second communication protocol, the second communication protocol being different from the first communication protocol.