Bedrock Automation provides industrial automation solutions including controllers, I/O modules, and software. Their Open Secure Automation platform features intrinsic cybersecurity through techniques like embedded cryptography, secure boot, and tamper resistance in hardware modules. Modules have cryptographic identities and only authentic ones can operate. The platform offers various I/O module options like analog, discrete, serial, and Ethernet types. It provides redundancy, high performance, and universal connectivity through a patented backplane module interconnect.

2. CERTIFIED SYSTEM’S INTEGRATOR (CSI)
WWW.PCODED.COM
(832) 941-7979
BEDROCK AUTOMATION

3. The Company
Bedrock Automation
3

4. 4

5. BedrockTM
5
Open Secure AutomationTM

6. Simple, Scalable, Secure
6

7. Lowest Lifecycle Cost
Advanced Technology for Platform Unification
Intrinsic Cyber Security
7

8. Platform Unity
PLC
SCADA
RTU
Safety
System
DCS
Cost Low Low High Medium Low
Cyber Security Add On Add On Add On Add On Intrinsic
Redundancy Single Single
Triple or Quad
SiL II, III and IV
Single or
Dual
Single, Dual or
Triple
I/O
All Types
Low Perf.
All Types
Medium Perf.
All Types
Medium Perf.
All Types
High Perf.
Software Defined,
Extreme
Performance
Control
Network
10/100 Enet
Wide Area
Networks
10/100 Enet 10/100 Enet
Cyber Secured
Gbit Ethernet
Control Loop
Response
1 - 100msec
100 -
1000msec
100 - 500msec
250 -
1000msec
< 5 msec
8

9. Secure Control
Secure Power Secure Input/Output
Backplane Module
Interconnect
9
BedrockTM

10. Backplane Module Interconnect - BMI
• Radical patented electromagnetic interconnect
improves reliability, performance, cost, security
• No I/O module pins to bend, break or corrode
• Fixed fast scan time regardless of amount of I/O
• Built in galvanic isolation
• Sealed all metal construction
• Patented 4 Gbit parallel redundant
communication topology and redundant power
topology called Black Fabric
Controller
Power Input Output
10

11. 11

12. 3 Bedrock BMIs
12
5 slot
10 slot
20 slot

13. Secure Input/Output - SIO
Controller
Power
Backplane
• BMI power and communication without pins
• Software defined Virtual Marshalling
• Single/Dual/Triple redundancy
• Layered and embedded security
• Extreme galvanic isolation, 1200v CtC, 1500v CtG
• Extreme performance: speed, accuracy,
temperature, isolation, density
• Single universal cable for I/O terminations
13

14. Benefits of All Metal Module Housing Benefits of Plastic Housing
Environmental Hardening
Cheap
EMI and EMP Hardening
Structural Integrity
Thermal Integrity
Cyber Integrity - Anti Tamper
+50 Year Life
All-Metal For Reliability and Cyber Security
14

15. Advanced Universal I/O
o Universal Configurable
Cyber Secure Serial I/O
o Universal Configurable
Cyber Secure Ethernet I/O
o Universal Configurable
Cyber Secure Analog/Discrete I/O
Unmatched Flexibility and Performance

16.  5 ports 10/100 Ethernet
 POE, 25W per port
 Concurrent IP stacks
 Cyber Secure L1 & L2 Ethernet
Universal Ethernet SIO4.E
Foundation for Secure IIoT
16

17.  AI/AO/DI/DO/Pulse/NAMUR
 AO and DO Readback
 Hart 7 Modem every channel
 Single/Dual/Triple
 Cyber Secure
Universal AI/AO/DI/DO
17

18. 18
Universal I/O Cable
One180 Degree Rotation

19. 19
I/O Module and Cable Management

20. Secure Power Module - SPM
Controller
Input Output
Backplane
• Universal AC/DC input + DC out
• Backplane coupled with advanced diagnostics
• Redundant and cyber secure
• No fans and extreme reliability
• Available directly-coupled lithium polymer UPS
20

21. Power Input Output
Secure Controller Module - SCC
Backplane
• Universal controller for all control modes: Discrete,
Continuous, Ladder & User Defined Apps
• Deeply embedded cyber security
• Built-in OPC UA server
• Extreme speed and robustness
• Advanced redundancy and advanced diagnostics
21

22. Stand Alone Secure Lithium UPS
UPS500
Controller
Input Output
Backplane
• Advanced lithium ion battery chemistry
• 12aH capacity with 24 VDC output
• Sealed all metal construction for remote
mounting and extreme robustness
• Cyber secure ARM processor with embedded
10/100 Ethernet communications
• Embedded OPC UA Server
• Advanced diagnostics – individual cell
monitoring and control
22

23. Extreme Robustness
Incredible Power Density
Embedded OPCUA Server
Individual cell monitoring and
control
Introducing UPS500
Automation UPS redefined
Advanced Security, True IIoT

24. Stand Alone Secure Power Supply
SPS500
Controller
Input Output
Backplane
• 500W field mounted 24VDC power supply
• Sealed all metal construction for remote
mounting and extreme robustness
• Universal AC input with 24 VDC output
• Cyber secure ARM processor with embedded
10/100 Ethernet communications
• Embedded OPC UA Server
• Advanced diagnostics – onboard data logging
24

25. Extreme Robustness
Diagnostics
Embedded OPCUA Server
Onboard data logging
Introducing SPS500
Automation power redefined
Advanced Security, True IIoT

26. Extensive Testing Completed
5 Year Warranty!
 UL Listed – E362245
 Class I Groups A-D, Division II
 IEC 60068
 60068-X-X Vibration, Relative Humidity, Cold and Dry Heat, Temp Shock,
Drop, Shock Operating and Non Operating
 Functional and Calibration Testing
 CE Testing to EMC Directive 89/336
 EN00XX – 2 Emission, Immunity
 IEC61000-4X ESD, RFI, EFT/Burst, Surge, Conducted
 EMP to MIL-STD-461
26

27.  336 temperature cycles
over 60 continuous days…
 67 times more than IEC
specification!
Extreme Environmental
Hardening
Bedrock System Under Test
27

28. Extreme EMP Hardening
Bedrock System Under Test
28

29. Extreme EFT Hardening
Bedrock UPS and OSA™ System Under Test
29

30. Ongoing Testing and Certification
 GE/Wurldtech L1 and L2
 ISA Secure (IEC62443)
 IEC61508 SiL II
 Advanced HALT – stress to failure
 Large scale system – continued regression
30

31. Bedrock IDE
(Integrated Development Environment)
31
• Based on CODESYS
• Developed from the ground-up
• Easy to learn and use
• Supports all IEC-61131
languages
• Broad user-base from microcontrollers to DCS Systems
• Leverages latest software environment technology
• Wealth of 3rd party applications and libraries available
• More than 700,000 licenses issued in 2013
• Object Oriented Programming Extensions
• Free website download!

32. Module Type Typical ICS OSA™
AI/AO/DI/DO/PI
Fieldbus/Gateway
20 - 30 1 - 2
Controllers Multiple 1
Power Supplies/UPS Multiple 1
System and
Termination Cables
Dozens 1
Software Defined Automation
32

33. Single Controller and 20 Channel IO
For Improved Small System Cost and Density
Front View Side View
33

34. Fully Redundant Control and I/O
Redundant Control
Front View Side View
S/D/T I/O Redundancy
34

35. Ethernet+POE
- Ethernet/IP
- ModbusTCP
- TCP/IP
- OPC UA
Control Network
Copper/Fiber/Wireless
Switched Gbit Ethernet 20Km Fiber Star Topology
Extended Black Fabric
Copper/Fiber up to 100Km
Multi-drop Gbit Ethernet
1 to 10 Backplanes
4 Gbit Black Fabric
- Parallel Comms
- Parallel Power
1 to 500 SCC Nodes
SIO S.5SIO E.5
Analog/Discrete
- AI/AO/DI/DO/Pulse/NAMUR
- AO & DO Readback
- DO Electronic Fusing
- DI Cont. Sense/Volt. Mon.
- HART/FDT 2.0
SIO U.10
Serial Comm
- RS232
- RS485
- RS422
- Profibus
Future
Others
- Foundation Fieldbus
- Devicenet
- Profinet
- DNP3
Power
80-260VAC/125VDC/+24VDC
- Dual Independent Feed
- Power Factor Correction
- All System & Field
- Local +24VDC Out
SPM.U
1 to 20 SIO s
per Backplane
SCC
Control
- IEC61131
- PLC Open
- FDT 2.0
- OPC UA
Single/Dual Single/Dual/Triple
Universal Architecture
35

36. Cyber Security
36

37. 37

38. 38
Status Quo

39. Islands of Automation
Air gapping still not enough…

40. 40
“The only truly secure way to protect Industrial Control
Systems is to embed security in the foundation, namely in
the controller itself which requires a complete rethinking of
how to architect and build Industrial Control Systems.
Based on my review, Bedrock has rethought the architecture
from a clean sheet of paper and embedded the security.”
Joe Weiss, ISA Fellow and author of
Protecting Industrial Control Systems
From Electronic Threats

41. Built In
Bolted On
versus
What does Intrinsic mean?

42. Intrinsic like this…

43. Cyber Threats
• Viruses
• Worms
• Logic bombs
• Cloned devices
• Cloned software
• Operators
• Maintenance
• Engineering
• Bad code
• DoS attacks
Client
Management
Computers
Networks
Controllers
Sensors/Actuators
43

44. OT Cyber Security Paradigm
44

45. Intrinsic Security Domains
Platform Domain Supply Chain Domain Operations Domain
- Hardware
- Firmware
- OS/RTOS
- Applications
- Semiconductor Providers
- PWA Providers
- Contract Manufacturers
- Test Houses
- ICS Users
- Networks
- Administrators
Intrinsic Security Relevant In All Domains
45

46. INTEGRITY: The Operating System For OSA™
Certifying Authority Level Achieved Applicability Industry
FAA DO-178B Level A Reliability, Safety Avionics
EASA DO-178B Level A Reliability, Safety Avionics
NSA EAL6+, High Robustness, Type 1 Security Defense
FDA Class II, III Reliability, Safety Medical
TUV Nord, Exida IEC 61508: SIL 3 Safety Industrial Automation
TUV Nord, Exida EN 50128: SWSIL 4 Safety Rail, Transportation
Transdyne Corp. SEI/CMMI Certified Quality All
IEEE and The Open Group 1003.1 IEEE POSIX Certified Open, Interoperable All
46

47. STRONG CRYPTO
NIST SP800–53/82, AES-256, RSA-3072, ECC-P521
SECURE COMPONENTS
TRNG, Hardware Crypto Acceleration, Secure ROM, OTP
Secure Monolith, SECURE BOOT
COMPONENT ANTI TAMPER
Monolithic Die, Anti Tamper Shield, Active Tamper Detection
Side Attack Protection
SECURE FIRMWARE
Hardened RTOS, Separation Kernel, Encrypted Files, Crypto Libraries
Secure Development Environment
SECURE COMMUNICATIONS
Pinless Interconnect, Point to Point, Anti Snoop, TLS1.2, X.509v3
MODULE ANTI TAMPER
Sealed All Metal Construction, Passive Anti Tamper, Active Anti Tamper,
FIPS140-2 Compliance, Intrusion Detection and Alarming
30 distinct cyber technologies
In every module !
Layered and Embedded
Cyber Security from Inside-Out
47

48. • Platform Domain
 Advanced physical anti-tamper
 Trusted boot
 Based on EAL 6+ RTOS (INTEGRITY)
 Strong embedded cryptography
• No global secrets
• All system code digitally signed
• Code updates encrypted and signed
• Modules have cryptographic identities
– Lock to OEM, Lock to Customer, Lock to Application
 Only authentic modules can operate
48 Bedrock Automation Platforms, Inc. Confidential
Intrinsic Security Domains

49. Comparing Crypto Strengths
Optimized for Industrial Lifecycle
Cryptographic
Strength
Symmetric
Algorithm
Hash
Algorithm
Elliptic Curve
Asymmetric
Algorithms
RSA/DSA/DH
Asymmetric
Algorithms
Expected
Lifetime
Expiry
56 bits DES Expired
60 bits (MD5) 111 bits 512 bits Expired
80 bits 3DES (2 key) SHA-1 160 bits 1024 bits 2010
112 bits 3DES (3 key) SHA-224 224 bits 2048 bits 2030
128 bits AES-128 SHA-256 256 bits 3072 bits 2031+
192 bits AES-192 SHA-384 384 bits 7680 bits 2031+
256 bits AES-256 SHA-512 512 bits 15360 bits 2031+
49 Bedrock Automation Platforms, Inc. Confidential

50. • Supply Chain Domain
 DLM system securely programs every module
 No human knowledge of any cryptographic keys
 Eliminates counterfeit modules and systems
• Operations Domain
 No human transport/entry of cryptographic secrets
 Authenticated communications
 Cryptographically-enforced whitelist
 OEM code updates encrypted and signed
 Operator role based access control
 Extensive logging of system and operator actions
50
Intrinsic Security Domains
Bedrock Automation Platforms, Inc. Confidential

51. Platform Keying for Authentication
Bedrock Hardware
Platform
Secure Element
Operating Environment
Bedrock Platform Keying
& HW Authentication
Secure OS & Boot Image
Bedrock Boot Image
Authentication
Bedrock Base Automation App
& API
Bedrock Base Automation
App & API Authentication
OEM & Customer
Applications
App 1 App 2 App 3
OEM & Customer
App Authentication
51
Intrinsic Security Included in Bedrock Platform
Bedrock Automation Platforms, Inc. Confidential

52.  Platform consolidation
 Flattened architecture
 Software defined hardware
 Pinless interconnections
 Advanced backplanes
 Advanced monolithic
components
 Strong crypto
 True random numbers
 Secure memories
 Crypto accelerators
 Secure boot
 Sealed all metal construction
 Component anti tamper
 Module anti tamper
 Secure RTOS
 Secure software tools
 Secure development environment
 Secure supply chain
 Key management system
 Patent attorneys
 Intensive development
Checklist of Security Fundamentals
52

53. Hardware End Point Root of Trust
Intrinsically Secure Supply Chain
Platform to Deploy Public Key Infrastructure for
Extended Authentication, Integrity and Confidentiality of
the Operations Domain
Results of Intrinsic Cyber Security
53

54. Compare
Security Element Bedrock System
Today’s Industrial
Control Systems
Secure OS Yes No
Authenticated Modules Yes No
Authenticated Software Yes No
Authenticated Supply Chain Yes No
Secure Remote Updates Yes No
Authenticated Messages Yes No
Anti-counterfeit protection Yes No
All metal tamper proof design Yes No
54

55. o Reduces Automation Cost Throughout Lifecycle
o Delivers Extreme System Performance and Reliability
o End Point Root of Trust Can Be Leveraged From The
Edge Device (IIoT) to The User (Role Based Access)
o Intrinsic Cyber Security Is Transparent and Easy to Own
User Benefits of Intrinsic Cyber Security
55

56. Life Cycle Cost
56

57. EngineeringEngineering
Commissioning
Bedrock Reduces Cost in All Areas
Cyber Security
Maintenance Installation
System
Life Cycle Cost
Management
57

58. 58
System
Perpetual Non-Obsolescence
..for Reduced Cost
The Problem:
 Component lifecycles span years while
product lifecycles span decades
 Component companies adversely
affect product companies
The Bedrock Solution:
 Component company is the product
company
 Perpetual Non-Obsolescence possible
with advanced component lifecycle
management

59. 59
Engineering
 I/O is installed, terminated and software configured in
the field
 Eliminating junction boxes reduces cable termination
requirements
 Reduced construction project BOM simplifies design
requirements
 Loop diagrams can be eliminated
Engineering is reduced by 33%
..for Reduced Cost
System Engineering

60. 60
Universal Configurability
 Confirm assets against design criteria, accelerate construction
completion, turnover and startup
 Issue control panels for fabrication and installation prior to
completing engineering
 Reduce control system commissioning spares
 Reduce the impact of late design changes
 Simplify the documentation and red-line processes
..for Reduced Cost
Commissioning
I/O universality reduces cost & startup time

61. Platform Unity
Module Type Typical ICS BEDROCK Improvement
Analog I/O 15 1 93%
Contact Input 17 1 94%
Contact Output 18 1 94%
Power Supplies Multiple 1 >50%
System Cables Many 1 >80%
61
Module types reduced by >90%
..for Reduced Cost
Maintenance

62. 62
Solutions OEMs Bedrock
Assessment $ To Do By Design
Remediate $ To Do By Design
Manage $ To Do By Design
Assure $ To Do By Design
Application Whitelisting $ To Do By Design
IP and Counterfeiting
Theft Protection
X 
Military and Aerospace
Technology
X 
Transparent to the User X 
ICS Supplier Security offerings
require
 Service and support ($)
 Implementation resources ($)
 Additional training & monitoring
($)
= Added Cost & Time ($$$)
Bedrock Cyber Security is
embedded into the processors,
memory, communication,
interconnections, backplane and
package technology at no extra
cost
..for Reduced Cost
Intrinsic SecurityCyber Security

63. 63
Industry Challenges Solutions
Cost
 Maintenance and inventory
 Repair cycle and End Of Life (EOL)
 Complex installation
 Hardware defined functionality
 Extreme reduction in module types
 High reliability and non obsolescence
 Easy installation
 Software defined functionality
Security
 Accelerated cyber attacks
 Compromised IP
 Compromised infrastructure
 Layered and embedded cyber security
 Authenticated and secured IP
 Secured infrastructure
Safety
 Outdated technologies
 Fragmented systems
 Advanced technologies
 Unified systems
Reliability
 Bent pins, cable failure
 Complicated configurations
 Environmental wear and failures
 Fragmented platforms
 No I/O pins, reduced failure modes
 Simplified system configurations
 Extremely rugged – 5 year warranty
 Unified platform
Solutions Summary

64. Unique Features That
Improve Automation and Reduce Cost
Unified automation platform, ideally suited to PLC, DCS and RTU
applications
Electromagnetic backplane for maximum robustness and security
Digital and physical cyber security embedded in the platform
Automation engineered to its simplest and most elegant functions
Perpetual non obsolescence to address primary lifecycle cost issue
Fiber control and I/O networks for maximum distribution flexibility
All metal construction for highest environmental and cyber protection
Advanced technologies and massively integrated semiconductor
component designs for improved performance, reliability, security and cost
All backed by a 5 Year Warranty
64

65. CERTIFIED SYSTEM’S INTEGRATOR (CSI)
WWW.PCODED.COM
(832) 941-7979
BEDROCK AUTOMATION