ShaunR's recent topic on Security reminded me of a situation we explored in the summer and need to revisit at some point. We were looking for a method to protect the communication with a cRIO.
The situation is that we need to communicate between a cRIO and a host on an unsecured network (manufacturing environment.) We concluded that we needed some form of encryption as well as a standard login mechanism but identified that having a single symmetrical key would not provide enough protection (for various reasons and specific use cases.)
Therefore, we looked into SSL and LabVIEW Web Services because it already includes that library and all the security features that we need. We figured out that it would definitely offer the protection required but that would mean rewriting most of existing code to use Web Service instead or establish some for of communication through a new Web Service. Considering the amount of unknown and risks associated with modifying our code, we looked into an alternative and came up with the following scheme:
In short, we would use a Web Service for the initial login and create a new symmetrical key which would be passed to the host and to the main application on the target (cRIO) and would be used to encrypt/decrypt all data during the session. This way, we could still program all of our code in LabVIEW and easily download/deploy the services and applications to the Target using NI standard tools but benefit from proper security and only have to add fairly simple wrappers to some sections of our existing code.
I wonder if anyone else has already gone down that route to add protection to an existing application. Would you suggest a different implementation method or an easier path to a similar result? Is there some obvious pitfalls in this approach that we do not see?
By Neil Pate
Can anybody shed some light on some strange behaviour I am seeing when deploying an executable with Web Services and Public Content.
I have an HTML page that gets served up as part of my application. My LabVIEW application interacts with a browser via Web Services.
Everything runs (mostly) fine, I can browse to localhost/ws/index.html and I get my web page.
Does the Public Content in the Web Service get packaged into either the .exe or the .lvws up as part of the build process?
I am really perplexed by this. I have tried all the obvious things like clearing browser caches etc. I even tried using a brand spanking new browser that had never been installed on my PC and I got the same symptoms.
Hi guys, just wondering if it is possible to publish a web service with a control and simulation loop in the vi. I have a simulation loop and an output of an array and matrix of data from a signal, yet i can't seem to be able to deploy the vi at all. It will build but not deploy.
Any help or advice would be most appreciated.
It has been a while but I'm back :-)
I'm having some 'problems' with http requests ....
LabVIEW 2010 Application that reads sensor logs from a database.
The application gets its data via http requests: --> architecture of the project --> data must be accessible via web-service
Example: http://localhost:8085/sensorservice/sensor/test/temperature..... (and some paramaters about the amount of data to return.) is entered in the LabVIEWHTTPClient.lvlib:GET.vi and I receive my data in the body and header controls.
So far so good.
Every data request takes about 0.3 s Not bad .... but .... all sensors that are read in the application are handled sequentially in a FOR loop. So 60 sensors *0.3s == 18s update rate.
Not fast enough for my customer.
The LabVIEWHTTPClient.lvlib:GET.vi is reentrant and it allocates an instance for each clone.
So i quickly made an active object for each sensor and call the LabVIEWHTTPClient.lvlib:GET.vi by ref with x08 as option when i open the vi ref.
It returns the data BUT ... requests are still sequential and not parallel :-(
LabVIEWHTTPClient.lvlib:GET.vi blockdiagram is protected with a password, but I assume it still blocks because of a dll call.
Did anyone make an application with parallel http requests ?