<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.26.0">
</HEAD>
<BODY>
I'm pondering on this for a friend. (really!) He supports control systems for power plants. <BR>
<BR>
Power companies are adamant that their control systems will NEVER touch the internet. I'm not sure I disagree with them; but it don't matter. <BR>
<BR>
So, whenever said friend gets a call from said power plant, if he can't resolve it over the phone, he gets in the car and drives. Hundreds of miles. <BR>
<BR>
Ergo, accepting that the power company won't ever change, I'm thinking what kind of remote access could be configured that would meet their most<BR>
rigorous requirements:<BR>
<BR>
A. No in-bound access.<BR>
B. Initiate FROM the power plant TO the support vendor. Shutdown when problem resolved. <BR>
C. Allowing many power plants to access a single vendor number, although not all at the same time. <BR>
D. Effectively impossible to intercept.<BR>
E. Insignificant monthly costs. <BR>
<BR>
I'm coming up with the vendor hanging a 56K dialup modem on a linux box, supporting an inbound PPP call from the vendor with a 56K modem. Dog slow, but I remember the days when we thought that was wicked fast and it's still waaaaay faster than driving to pensacola and back. Essentially impossible to eavesdrop or intercept, and it's really easy to verify the modem is switched off when the vendor is done. Of course, that requires a "real" phone line to work. <BR>
<BR>
What else? I was thinking a bonded ISDN line. Those support dialup to another ISDN, and would get them up to 128KB. (whoohoo) Also essentially not possible to intercept and the same degree of isolation, but the power company might not "trust" that it's truly dormant when offline. <BR>
<BR>
What else? They could technically go with leased lines, but client fear of that might be impossible to overcome. You could talk yourself blue about running a VPN over the leased line, but they'll plug their ears and run. <BR>
<BR>
Somehow initiating a new project with 56K modems sounds like dinosaurs mating in the snow, but I'm not seeing really swell alternatives.
</BODY>
</HTML>