BACnet/SC (Secure Connect)

BACnet/SC, added in Niagara 4.11, provides a link layer for securing the messages communicated among the Secure Connect nodes of a BACnet network. BACnet Secure Connect (BACnet/SC) uses TLS (Transport Layer Security) version 1.3 to provide strong data encryption and device authentication. With the increased likelihood of cyber attacks on critical infrastructure, including buildings, it is important to secure automation networks. BACnet/SC secures communication on TCP/IP networks using standard IT technologies that are used in critical applications, such as online banking.

TLS is the widely-available protocol that uses PKI (Public Key Infrastructure) keys to encrypt and decrypt data transmissions, and certificates to ensure that only authorized devices can communicate with each other.

With TLS protecting a BACnet network, companies can use a service, such as Qualys, which is a web application and cloud-based service used to detect data breaches and critical misconfigurations across a company’s global hybrid environment. E-banking and other critical applications use such services to identify vulnerabilities including cross-site scripting (XSS) and SQL injection.