Matrox Extio 3’s advanced security features provide remote operators around the world with protected access to Kuwait National Petroleum Company oil refinery control systems
Background
Since its establishment in 1960, Kuwait National Petroleum Company (KNPC) has been responsible for oil refining, gas liquefaction, and the distribution of petroleum for local and international markets. In order to meet market demands for transport fuels, increase processing capacity, and optimize the operational capabilities of its refineries, KNPC launched its $12 billion USD Clean Fuels Project (CFP).
KNPC engaged Wood as the Project Management Consultants (PMC) to execute the project on behalf of the Kuwait National Petroleum Company (KNPC) during the Engineering, Procurement & Construction (EPC) phases of CFP. This massive upgrade has not only required assistance from experts and equipment suppliers in various global locations, but also a robust, secure means to connect them to systems at KNPC’s oil refineries. With Matrox® Extio™ 3 IP KVM extenders, KNPC is able to ensure that remote access to critical components of its refinery control systems is safeguarded from exposure to cybersecurity threats.
Challenge
KNPC had originally chosen Extio 3 IP KVM extenders after launching the CFP in order to create a silent control room and free up space for operators. Extio 3’s high security, ease of deployment, and industrial form factor – backed by Matrox’s reliable technical expertise and support – made the KVM extenders the perfect fit for KNPC. A few years later when the COVID-19 pandemic brought about border closings and travel restrictions, KNPC knew that it could rely on its existing Extio 3 KVM extension solution for secure remote access to its control systems.
Solution
As Middle Eastern oil and gas operators are at constant risk of cyber attacks, KNPC’s Integrated Control and Safety Systems (ICSS) require advanced protection, especially when suppliers in separate locations need to remotely connect to sensitive assets. Therefore, KNPC needed a secure solution that would allow for remote connections on a network that is physically separated from unsecured networks. With other remote KVM solutions being more complex to deploy and not offering the right security features for KNPC’s environment, Extio 3 put KNPC at ease thanks to its ability to integrate IPsec VPN. Extio 3 runs over a secure VPN connection, which allows for the protected transmission of all audio, video, and USB signals over WAN so that remote users can securely connect to control systems located at KNPC’s oil refineries.
Though KNPC originally deployed Extio 3 via LAN after first acquiring it, the company is now using the KVM solution over WAN to connect remote users to its control systems on a daily basis. These remote users – who are often located in different countries – are sent an Extio 3 receiver device, which enables them to view and monitor KNPC’s compressor control systems in Kuwait.