information services

cyber security

Reliable vessel operating data is essential for efficient and economical operation—and must be protected. With our Ship-to-Shore solutions, we offer simple and secure data transmission technologies compliant with the European General Data Protection Regulation (GDPR) and based on class-approved hardware.

Fleet connect

efficient and econimical

We offer a multi-level security concept that differentiates between identity protection, access protection and integrity protection.

IDENTITY PROTECTION
Each endpoint of the communication is equipped with a private, cryptographic key ex works. Only if a correct key is known, the device is released to send or receive data.

ACCESS PROTECTION
Once it has been ensured that the data originates from a trusted source, the next step is to establish a secure TLS-encrypted connection between the communication partners. This encrypted connection prevents access by third parties.

INTEGRITY PROTECTION
After successful transmission of the data, a further step ensures that the data is intact and matches the data sent by the ship. Cryptographic signatures according to the industry standard RFC 7519 are used for this purpose.

DATA FLOW OVERVIEW

SHIP

Data is cached during connection interrupt
Time resolution of exported time series data can be adjusted
Transport in small subpackages via encrypted TLS connection
All services run on a single device (HOMIP2) on a single network port to fixed IP addresses. The service provides a very narrow attack surface
On error all transmission systems restart automatically

SHORE

Subpackages are reassembled to full data packages
Data integrity is assured by file hash comparison
Trustworthiness of sender unit cryptographically verified
Files served via TLS encrypted and well documented API to customer

CUSTOMER

Files are provided by the Hoppe Shore Side Datastore via API
Data files are provided in SQLite format
Data transmission from the Hoppe Shore Side Database to customer happens via a TLS encrypted channel