OPC UA Security - SKS (Security Key Service) with PubSub
Function extension:
For secure PubSub communication, it is necessary that the publisher and the subscriber have a "shared secret" (hereinafter referred to as "key" or also "key") with which the data can be encrypted and signed.
Creating a shared key is complicated for separate applications, which can also be active at different times.
For this reason, the Security Key Service (SKS) was defined for OPC UA PubSub, which is used to exchange keys. This Security Key Service is a stand-alone application that provides a public OPC UA interface via which keys can be queried.
The entire management of the keys, including updating, is then carried out by the SKS, which can be used to query the current key at any time. The (symmetric) key is then used to encrypt the publisher's messages and decrypt them again by the subscriber.
For more information, please refer to the enclosed documentation - see chapter "OPC UA Security Key Service".
