In the past, the need to protect the software on industrial controllers used to come as an afterthought, but no longer: Software protection has long since become a top priority for the people in charge of keeping industrial and mechanical engineering enterprises safe and secure. And this goes beyond the critical infrastructures that regulators already had in their sights. The momentum for more security now comes from the market itself, with ever louder calls to safeguard industrial networks against attacks e.g. by complying with the international IEC 62443 standards. A look at the news shows that this is happening not a moment too soon: Cyberattacks against businesses and industrial installations are a constant threat, and the ability to protect the invaluable intellectual property invested in or handled by the software has become a game changer. On top of pure security concerns, companies will want to control access to their systems or software e.g. for certified service technicians or as a goods means to monetize a device’s add-on features and functions. Users can purchase the licenses they need from the flexible choice of licensing models they are offered, which can include popular options like time-based (subscriptions) or usage-based (pay-per-use) licenses. They allow providers to tailor their licensing models perfectly to match the local market’s needs without having to go back to doctoring their software. CODESYS seized upon these trends at a very early stage. The leading hardware-independent IEC 61131-3 programming system used to create controller applications under Windows is equipped with Wibu-Systems’ CodeMeter technology – the perfect toolkit for putting in place just the right protection, authentication, and licensing solutions.

1. How to protect and license
your CODESYS applications
Stefan Bamberg
Senior Key Account & Partner Manager, Wibu-Systems
Roland Wagner
Head of Product Marketing, CODESYS
CODESYS applications
protected and licensed
25.08.2021 © WIBU-SYSTEMS AG 2021 - CODESYS applications protected and licensed 1

2. Where to find the accompanying audio
25.08.2021 © WIBU-SYSTEMS AG 2021 - CODESYS applications protected and licensed 2
To access the on-demand replay of this masterclass, please visit
www.wibu.com/resources/webinars/2021/your-codesys-applications-
protected-and-licensed/access

3. Challenges and Opportunities in the IoT
25.08.2021 © WIBU-SYSTEMS AG 2021 - CODESYS applications protected and licensed 3
Security
Monetization

4. Industrial Security - Threats (Source VDMA, 2019)
 Human misconduct and sabotage
 Introducing malware
 Social engineering and phishing
 Infection with malware via the Internet/Intranet
 Technical mishaps and force majeure
 (D)DoS attacks
 Compromising extranet and cloud components
 Break-ins via remote maintenance accesses
 Internet-connected control components
 Compromised smartphones in the production environment …
25.08.2021 © WIBU-SYSTEMS AG 2021 - CODESYS applications protected and licensed 4

5. Guidelines for security assistance
 IEC 62443 standard (International Electrotechnical Commission, Geneva)
 A family of standards focused on the security of “Industrial Automation and Control
Systems” (IACS) that covers all the necessary topics, from protection to technical
configurations and compliance
 Structured in four levels:
 General principles
 Security requirements for operators and service providers (also connected to ISO 27000)
 Security requirements for automated systems (production and process automation)
 Security requirements for automated components (product development processes)
 Guidelines published by VDMA: Guide IEC 62443 for mechanical and plant engineering [Link]
25.08.2021 © WIBU-SYSTEMS AG 2021 - CODESYS applications protected and licensed 5

6. Monetization Opportunities
25.08.2021 © WIBU-SYSTEMS AG 2021 - CODESYS applications protected and licensed 6
 Software-based features of devices
 Features-on-demand
 Pay-per-Use
 Subscription plans
 Services and (predictive) maintenance
 Monetization of device or customer
specific control parameters / output
values
 Cloud connected functionalities

7. Solution
25.08.2021 © WIBU-SYSTEMS AG 2021 - CODESYS applications protected and licensed 7

8. Long-lasting partnership
25.08.2021 © WIBU-SYSTEMS AG 2021 - CODESYS applications protected and licensed 8
 CodeMeter technology
integrated with CODESYS
V3.51 and higher
 Project protection
 Application protection
 CodeMeter library
included for customer
specific implementations
 Access authentication and
monetization available
Security Monetization
IEC 61131-3 automation software

9. CodeMeter®
Protection & Licensing
Technical Background
25.08.2021 © WIBU-SYSTEMS AG 2021 - CODESYS applications protected and licensed 9

10. Delivery to the endpoints
The Embedded World: Integrate Once – Deliver Many
25.08.2021 © WIBU-SYSTEMS AG 2021 - CODESYS applications protected and licensed
Integrate Once Deliver Many
Entitlement
Server
L
L L L
10
Online Offline
Integration into software
Software Software
CodeMeter
Protection Suite
Integration into processes
ERP / CRM
E-commerce
CodeMeter
License
Central
Software
License Portal

11. …Integrate Once – Deliver Many (Examples)
25.08.2021 © WIBU-SYSTEMS AG 2021 - CODESYS applications protected and licensed 11
License
• Feature-on-Demand
License
• Subscription plan
License
• Network licenses
License
• Pay-per-Use
Software Software Software Software

12. Security with CodeMeter Protection Suite
25.08.2021 © WIBU-SYSTEMS AG 2021 - CODESYS applications protected and licensed 12

13. CodeMeter: One Technology Fits All
25.08.2021 © WIBU-SYSTEMS AG 2021 - CODESYS applications protected and licensed 13
Supported Platforms
License Containers
Form Factors
Entitlement Management
Integration in backoffice systems

14. End User
Vendor
CodeMeter License Central – Licenses across the Product Lifecycle
25.08.2021 14
Ticket + Fingerprint
4
License
5
Ticket
2
Purchase Order
1
E-Commerce
ERP/CRM Software
License Portal
Ticket:
ABCDE-FGHIJ-KLMNO-PQRST-UVWXY
3
© WIBU-SYSTEMS AG 2021 - CODESYS applications protected and licensed

15. https://www.wibu.com
info@wibu.com
Europe: +49-721-931720
USA: +1-425-7756900
China: +86-21-55661790
Japan: +81-45-5659710
Thank you very much!
25.08.2021 © WIBU-SYSTEMS AG 2021 - CODESYS applications protected and licensed 15

16. SECURITY and MONETIZATION
How to benefit from CodeMeter® Technology
in CODESYS
Wibu Webinars 25/08/2021
Roland Wagner, Head of Product Marketing CODESYS Group

17. 1
•Security and monetization in automation
2
3
•CodeMeter® technology in CODESYS
•How to benefit
4
•Outlook and conclusion
AGENDA
1

18. From control cabinets to Industry 4.0
Security and monetization in automation

19. Security: Assets / protection targets
Security and monetization in automation
Engineering
Runtime
Application
(binary
code)
Availability
Confidentiality Integrity
Legal usage
Application
(source
code)
Availability
Confidentiality Integrity
Legal usage

20. Security: Responsibilities
Security and monetization in automation

21.  Native possibilities
Whitepaper “Security” at
https://www.codesys.com/fileadmin/data/custom ers/security/CODESYS-Security-Whitepaper.pdf
 Use CodeMeter® technology – seamlessly integrated
Security: Measures in CODESYS
Security and monetization in automation

22.  Independent from open source activities
 Possible assets:
 Generic software algorithms available as libraries
 Special software services / functions only necessary in special use cases
 Special corporate competence / know-how (Intellectual Property)
 Realization of Pay-per-use models
 Realization of Software-as-a-Service (SaaS) products directly within the PLC application
Monetization: Your know-how / intellectual property is worth it
Security and monetization in automation

23. 1
•Security and monetization in automation
2
3
•CodeMeter® technology in CODESYS
•How to benefit
4
•Outlook and conclusion
AGENDA
2

24.  In the IDE (CODESYS Development System)
Protection of source code
License management
 In the runtime system (CODESYS Control) of
 devices from CODESYS customers
 native SoftPLCs
Protection of application code
License management
Integration
CodeMeter® Technology in CODESYS

25.  Container used for storing unique access code
 CODESYS Key ( USB dongle)
 CmActContainer ( Software container)
firmly connected to the specific device
 Universal Firm Code (UFC) container
(so far for latest SoftPLC CODESYS Control for ARM Linux SL only)
 Comparison of software and hardware container
https://www.codesys.com/the-system/licensing.html
Integration
CodeMeter ® Technology in CODESYS

26. 1
•Security and monetization in automation
2
3
•CodeMeter® technology in CODESYS
•How to benefit
4
•Outlook and conclusion
AGENDA
3

27.  Encryption of source code
 Open CODESYS project file
only with previously registered dongle
plugged into the workstation PC
Recommendation:
Use more than 1 dongle!
 Backup in case of damage/loss
Use case: Protection of source code know-how
How to benefit

28.  Binding of a discrete application to authorized dongle(s)
 Application download and execution: only possible with authorized dongle plugged in
 No unauthorized copies of applications possible
 Additionally: Signing of applications
 Protection of application integrity
Use case: Protection against unauthorized application usage
How to benefit
+
+ +

29.  Licensing option for CODESYS libraries
 Sale of licenses via the CODESYS Store (via CODESYS Firm code)
with CODESYS Activation URL / mail
 Purchase of licenses via own Firm code
requires CodeMeter® Toolkit
and self-provided Activation URL / mail
Use case: Authorization / monetization of libraries
How to benefit

30.  Library for accessing license information
 Dongle with additional functionality, e. g. to calibrate a machine
 Resell library functions to 3rd parties, e.g. via the CODESYS Store
Use case: Authorization / monetization of functions / services
How to benefit
+ =
+ =
+ =

31.  Interface for encryption/decryption of concrete source code in a project
 Source data protected against unauthorized access
 Decryption by means of license / product code
Use case: Protect concrete parameters/data in the source code
How to benefit

32.  Licensing directly in the IDE
See https://youtu.be/-5t4kN1Gn9Y
 Licensing via special website
http://license.codesys.com
 Cloud-based licensing for bulk operation
within the CODESYS Automation Server
Use case: Easy licensing of product options from software vendor
How to benefit

33. 1
•Security and monetization in automation
2
3
•CodeMeter® technology in CODESYS
•How to benefit
4
•Outlook and conclusion
AGENDA
4

34.  Pay-per-use monetization with license counter
 Extension of the library possibilities (SP18)
 Network licenses for SoftPLCs add-ons (e.g. for fieldbus, visualization, OPC UA)
 Network licenses for workstation add-ons (e.g. Static Analysis, Profiler, UML, Git)
 Cloud licenses
 SoftContainer on virtual machines respectively Server with dongles
 Network licenses
 Scalable licenses (e.g. depending on IEC 61131-3 code size, number of tasks)
 Encryption of SoftPLCs via AxProtector
 Execution depending CodeMeter® runtime
 Guaranteed integrity of SoftPLCs
Future use cases (Roadmap)
Outlook and Conclusion

35.  Proven technology at your fingertips
 Flexible application in different common use cases
 Easy handling due to
 seamless integration
 pre-programmed licenses
 One platform for different targets and functions
 Added value for the security and monetization of your know-how
CodeMeter® in CODESYS
Outlook and Conclusion

36. Thank you for your attention!
CODESYS® is a registered trademark. Technical specifications are subject to change.
Errors and omissions excepted. No reproduction or distribution, in whole or in part, without prior permission.
Note: Not all CODESYS features are available in all territories. For more information on geographic restrictions, please contact sales@codesys.com.