Mobile SCADA access in SCADA systems - Step-by-Step Execution

Process Flow - Mobile SCADA access

User opens mobile SCADA app

↓

App sends login request

↓

SCADA server authenticates user

↓

Access granted

↓

User views SCADA data

↓

User sends control commands

↓

SCADA server processes commands

↓

Updates sent back to mobile app

This flow shows how a mobile SCADA app connects to the SCADA server, authenticates the user, and allows viewing and controlling SCADA data.

Execution Sample

SCADA systems

1. User opens mobile SCADA app
2. App sends login request to server
3. Server checks credentials
4. If valid, server sends SCADA data
5. User views data and sends commands
6. Server processes commands and updates data

This sequence shows the basic steps for mobile SCADA access from login to command execution.

Process Table

Step	Action	Input/Condition	Result	Next Step
1	Open app	User launches app	App ready to login	Send login request
2	Send login request	User credentials	Request sent to server	Server authenticates
3	Authenticate user	Check credentials	Credentials valid?	If yes: grant access; if no: deny
4	Grant access	Credentials valid	Access granted, send SCADA data	Display data on app
5	Display data	SCADA data received	User sees real-time data	User sends control commands
6	Process commands	User commands received	Commands executed on SCADA	Send updates to app
7	Update app	SCADA updates	App shows updated status	Wait for next user action
8	Deny access	Credentials invalid	Access denied message	End session

💡 Execution stops when user logs out or access is denied due to invalid credentials.

Status Tracker

Variable	Start	After Step 2	After Step 4	After Step 6	Final
User credentials	None	Entered by user	Validated	Used for commands	Cleared on logout
SCADA data	None	None	Received from server	Updated after commands	Displayed on app
Access status	None	Pending	Granted or Denied	Active if granted	Inactive after logout

Key Moments - 3 Insights

Why does the app stop if credentials are invalid?

Because at step 3 in the execution table, if credentials are invalid, the server denies access and the session ends at step 8.

How does the app get updated SCADA data after commands?

At step 6, the server processes user commands and sends updated data back to the app, which is shown at step 7.

What happens if the user does not send any commands after login?

The app continues to display real-time SCADA data and waits for user input, as shown in steps 5 and 7.

Visual Quiz - 3 Questions

Look at the execution table, at which step does the server check user credentials?

A Step 4

B Step 2

C Step 3

D Step 5

💡 Hint

Check the 'Action' column for 'Authenticate user' in the execution table.

According to the variable tracker, what is the state of 'Access status' after step 4?

A Pending

B Granted or Denied

C None

D Active

💡 Hint

Look at the 'Access status' row under 'After Step 4' in the variable tracker.

If the user sends no commands, what does the app do according to the execution flow?

A Continues showing SCADA data and waits

B Displays error message

C Closes immediately

D Logs out automatically

💡 Hint

Refer to steps 5 and 7 in the execution table where the app displays data and waits for user commands.

Concept Snapshot

Mobile SCADA access flow:
1. User opens app and logs in.
2. Server authenticates credentials.
3. If valid, SCADA data is sent to app.
4. User views data and sends commands.
5. Server processes commands and updates app.
6. Access denied if credentials invalid.

Full Transcript

Mobile SCADA access starts when the user opens the mobile SCADA app. The app sends a login request with user credentials to the SCADA server. The server checks these credentials. If they are valid, the server grants access and sends SCADA data to the app. The user can then view real-time SCADA data and send control commands. The server processes these commands and sends updates back to the app. If credentials are invalid, the server denies access and the session ends. The app continues to display data and wait for user commands until logout or denial.

Practice

1. What is the main benefit of mobile SCADA access for operators?

easy

A. Allows monitoring and control from anywhere

B. Requires physical presence at the control room

C. Eliminates the need for any security measures

D. Only works on desktop computers

Solution

1. Step 1: Understand mobile SCADA access purpose

   Mobile SCADA access is designed to let operators monitor and control systems remotely.

2. Step 2: Identify the benefit for operators

   This remote access improves flexibility and response time by allowing control from anywhere.

3. Final Answer:

   Allows monitoring and control from anywhere -> Option A

4. Quick Check:

   Mobile SCADA access = Remote control [OK]

Hint: Mobile SCADA means control from any location [OK]

Common Mistakes:

• Thinking mobile SCADA requires being onsite
• Assuming no security is needed
• Believing it only works on desktops

2. Which of the following is the correct way to secure mobile SCADA access?

easy

A. Disable all encryption protocols

B. Use open Wi-Fi without passwords

C. Implement VPN and strong authentication

D. Share passwords via email

Solution

1. Step 1: Identify security best practices for mobile access

   Secure mobile SCADA access requires encrypted connections and strong user verification.

2. Step 2: Match options with best practices

   Using VPN and strong authentication protects data and access effectively.

3. Final Answer:

   Implement VPN and strong authentication -> Option C

4. Quick Check:

   Secure access = VPN + strong login [OK]

Hint: Secure mobile access needs VPN and strong login [OK]

Common Mistakes:

• Using open Wi-Fi without protection
• Disabling encryption
• Sharing passwords insecurely

3. Given this simplified SCADA mobile access log snippet:

2024-06-01 10:00:00 UserA login success
2024-06-01 10:05:00 UserB login fail
2024-06-01 10:10:00 UserA command start pump
2024-06-01 10:15:00 UserB login success
2024-06-01 10:20:00 UserB command stop pump

What is the correct sequence of events?

medium

A. UserA started the pump before UserB logged in successfully

B. UserB stopped the pump before logging in

C. UserB logged in before UserA started the pump

D. UserA failed login after starting the pump

Solution

1. Step 1: Read the log events in order

   UserA logs in at 10:00, UserB fails login at 10:05, UserA starts pump at 10:10, UserB logs in at 10:15, UserB stops pump at 10:20.

2. Step 2: Analyze event timing

   UserA started the pump at 10:10, which is before UserB's successful login at 10:15.

3. Final Answer:

   UserA started the pump before UserB logged in successfully -> Option A

4. Quick Check:

   Event order = UserA start pump before UserB login [OK]

Hint: Check timestamps to order events correctly [OK]

Common Mistakes:

• Ignoring failed login attempts
• Mixing event times
• Assuming commands before login

4. A mobile SCADA user reports they cannot connect remotely. Which is the most likely cause?

medium

A. SCADA system is offline but mobile app shows connected

B. User entered correct credentials

C. Mobile device battery is full

D. VPN service is down or misconfigured

Solution

1. Step 1: Identify common connection issues

   VPN problems often block remote SCADA access because it secures the connection.

2. Step 2: Evaluate options for connection failure

   Correct credentials and full battery do not cause connection failure; system offline with app connected is unlikely.

3. Final Answer:

   VPN service is down or misconfigured -> Option D

4. Quick Check:

   Connection failure = VPN issue [OK]

Hint: Check VPN status first for remote access issues [OK]

Common Mistakes:

• Blaming correct credentials
• Ignoring VPN or network problems
• Assuming device battery causes connection

5. You want to set up mobile SCADA access with multi-factor authentication (MFA). Which sequence correctly describes the setup steps?

hard

A. Disable VPN, allow open access, skip MFA, test login

B. Enable VPN, configure MFA on SCADA server, distribute MFA apps to users, test login

C. Configure MFA only on mobile devices, no VPN needed, test login

D. Allow direct internet access to SCADA without authentication

Solution

1. Step 1: Secure connection setup

   Enable VPN to protect data transmission between mobile devices and SCADA server.

2. Step 2: Configure MFA and user setup

   Set up MFA on the SCADA server and provide users with MFA apps to enhance login security.

3. Step 3: Test the complete login process

   Verify that users can log in using VPN and MFA to ensure security and functionality.

4. Final Answer:

   Enable VPN, configure MFA on SCADA server, distribute MFA apps to users, test login -> Option B

5. Quick Check:

   Secure mobile access = VPN + MFA setup [OK]

Hint: Setup VPN first, then MFA, then test login [OK]

Common Mistakes:

• Skipping VPN or MFA
• Allowing open internet access
• Configuring MFA only on devices without server support