MHIパワーエンジニアリング Product Lineup

Cyber attacks are now in an era where we realize the intrusion only after it has occurred. Monitoring and log collection are the minimum requirements for corporate defense. However, while TAP/SPAN is passive, it is not completely safe because: - Misconfigurations can create bidirectional communication. - If the monitoring side (SOC/log server/NDR) is compromised, there is a risk of backflow. - Software control alone cannot achieve zero risk. - Audits are beginning to demand "backflow countermeasures for monitoring paths." In such situations, the time has come for the "one-way communication restriction device" OWCD, which physically blocks backflow. It can be implemented simply by placing it in the existing network. - No configuration required. - Completely blocks backflow at the physical layer. It enhances the safety of monitoring and log collection. The "five zeros" provided by one-way devices: - Zero backflow. - Zero unauthorized access. - Zero misconfiguration risk. - Zero operational burden. - Minimum implementation cost. It is the only option to add physical safety without changing the existing network. The adoption by infrastructure engineers is rapidly increasing. It is essential for support services. SIers, why not effectively utilize this in your cybersecurity sales efforts? There is an explanatory video at the related link below! Feel free to contact us.

• Firewall and intrusion prevention
• Other security
• Server monitoring and network management tools

Zero Trust is fundamentally about "not trusting," but since the premise is "connecting," there is the challenge of "how to connect under the premise of not connecting." This is where the data diode "OWCD" comes into play! When connecting control networks (OT) in factories and power plants to external networks (IT), the demand for "sending data securely through one-way communication" is increasing, and the adoption of OWCD is on the rise. Today, we will discuss "secure transfer of Syslog" within this context. To realize Zero Trust, it is essential to continuously collect and analyze logs and monitoring data from each device, but if that system management information cannot be sent to infrastructure engineers, it becomes nearly impossible to conduct detailed analysis. Once breached, the consequences can be catastrophic... OWCD is perfectly suited for sending logs and monitoring data from OT to SIEM. It allows data to flow in only one direction. The adoption by infrastructure engineers is rapidly increasing. It is indispensable for support services. SIers, if you want to promote cybersecurity, let's effectively utilize boundary control as well. There is a video explanation linked below! Feel free to reach out for inquiries.

• Other security
• Firewall and intrusion prevention
• filtering

The horror of ransomware lies not only in its ability to steal data but also in its power to halt daily life. It steadily infiltrates deep within systems, targeting file servers and database servers to launch attacks. “Info-stealer” malware is at work, stealing authentication information and thoroughly investigating targets before launching an attack, identifying the locations of important business secrets and personal information. Unlike the moment when a system is encrypted and it becomes immediately apparent that an attack has occurred, the stealthy operation of information-gathering malware allows it to collect data without the victim realizing it, often having infiltrated days in advance and causing data leaks. This malware sends the information it has gathered back to external attackers by tracing the infiltration route. By blocking that communication channel, it secures time until other security measures or virus removals can take effect, minimizing operational downtime. Boundary control is not just for preventing intrusions. The data diode "OWCD" physically restricts communication in one direction, allowing for high security even without on-site personnel due to its physical method. For inquiries, please refer to the related links below.

• Firewall and intrusion prevention
• Other security
• filtering

A data diode that restricts communication in one direction, specifically the physical data diode "OWCD" that truly cuts off the line in one direction, can create a network that protects the supply chain when used effectively. In making meaningful use of the internet, the crucial systems can: - Shut out unauthorized intrusions from the source - Shut out information leaks on the receiving side. How are you sending information between suppliers? Are you struggling to create a DB integration system? While it may lack the glamour of IT technology, often, simple file-based communication is sufficient. Instead of creating a system with many invisible parts, why not just use files? Utilizing JSON is recommended. By placing OWCDs on both sides during the exchange of documents, you can strengthen your defenses. If bidirectional communication is necessary, it can be accommodated by setting up mutual arrangements. There are increasing examples of SIers utilizing this in their proposals to clients. Originality can also be achieved by combining it with various check functions. Please make use of this to strengthen your cybersecurity. For inquiries, please visit our company website through the related link below.

• Firewall and intrusion prevention
• filtering
• Other security

Ransomware encryption and information leaks are occurring one after another. "Backup in a separate environment, immutability, and restoration testing" are listed as essential measures to counter ransomware. The intrusion routes are diverse, including email, web, social media, and VPN devices, and the risk increases as the use of generative AI grows. Once breached, recovery can take days, during which business operations may come to a halt. For prompt recovery, a combination of online and offline data backups is indispensable. Backups are the most critical assets. When there are routes for data to exit externally, attackers have an ideal target. Let's cut off unnecessary communication paths to avoid large-scale damage. OWCD can protect against poor outcomes by making the backup environment a "one-way path for sending stored data" and transferring it with "our software," thereby blocking the information leakage from ransomware. While having OWCD does not solve everything, the way you set up the system using OWCD can significantly enhance your defense capabilities. Please consider it. For inquiries, please visit the related link below. There is an explanatory video available.

• Firewall and intrusion prevention
• Other security
• filtering

Zero Trust Security: Are you aware that if you don't operate it properly at all times, you could have been breached a long time ago? "Stealth Cyber Attacks": Half of passwords are compromised and intruders can enter freely. Even if you notice suspicious signals later, 80% of them are masked to avoid detection, so you won't realize it at that moment... By the time it gets this far, the probability of a bad move failing is only a few percent, allowing them to do as they please. Did you know that OWCD actually has two uses? One is to protect the core without allowing intrusion. The other is to avoid actual damage by "not revealing anything." In most cases, an attack is not considered successful just by gaining access to the target. Once inside, attackers will scout the system, infiltrate critical areas, encrypt data to halt operations, steal confidential information, or send malicious emails in succession... these actions cause actual harm. For this to happen, the virus itself must communicate with external malicious intruders and be remotely controlled. If that communication cannot occur, even if there is an intrusion, no actual damage has occurred yet, allowing time to detect and eliminate even unknown viruses. Let's implement multi-layered defense with Zero Trust to prevent lateral movement and OWCD to prevent vertical intrusion/leakage. For inquiries, please refer to the related links below.

• Firewall and intrusion prevention
• Other security
• Virus software

DX through database integration such as ERP can lead to a situation where a virus spreads throughout the supply chain, causing extensive damage if one mistake is made. By effectively using a data diode (OWCD) that restricts communication in one direction, it is possible to minimize damage that travels through the network by segmenting connections to the necessary range. In addition to CSV and binary formats, adding file transfers such as JSON and HTTPS can clarify the responsibility boundaries and create a network that prevents everything from coming to a halt, even when security management levels and malware countermeasures differ. OWCD physically enforces one-way communication restrictions. While it may seem very mundane, it ensures that what needs to be stopped is indeed stopped, allowing the internet to be used in various ways while ensuring that critical systems can: - Shut out unauthorized intrusions from the source - Shut out unauthorized transmissions from the recipient It can be utilized for various purposes, including understanding production status, IoT, and remote monitoring data collection. There are increasing examples of SIers utilizing OWCD in their proposals to clients. Please make use of it. For inquiries, please visit our company website via the link below.

• Firewall and intrusion prevention
• Other information systems
• filtering

Remote maintenance of systems: While VPNs have been criticized and ZTNA (Zero Trust Network Access) is recommended, are you aware that there is a more robust foundation that can provide stronger protection? It has become difficult to balance intrusion prevention with rapid and efficient maintenance. Are you under the illusion that if VPNs are inadequate, everything will be fine with ZTNA? Connecting directly to applications from remote locations carries various risks beyond just access rights. We provide a system that addresses these issues and enables remote maintenance. Our application isolates communication for Windows computers, routing each through separate paths and inserting an OWCD (Outbound Web Content Delivery) to strongly block unauthorized access to the source. This is an extremely effective method for adding "upper layer defense" to existing environments. Our product offers overwhelming defense by "physically blocking" both external intrusions and internal leaks. It can be used even by those who are not IT-savvy, integrating "peace of mind in connectivity" with "protection mechanisms," making it a security solution that should be chosen. When combined with other security measures, it enables multi-layered defense, minimizing potential damage in case of an incident. For inquiries, please visit our website through the link below ⤵.

• Firewall and intrusion prevention
• Other network tools
• filtering

We have set up CABS, which is utilized for field balancing to address shaft vibration and dynamic balancing issues in large turbo machinery (steam turbine generators, gas turbine generators, blowers/air compressors, etc.), for small and medium-sized machines and motor-driven equipment. The challenges associated with bearings cannot be completely avoided, as there will always be slight imbalances in the rotating body or misalignments during assembly (such as centering and distortion), regardless of how well the bearings are made. Moreover, if field balancing is not performed properly after assembly on long shafts or flexible foundations, it can lead to problems caused by vibrations later on. CABS is actively used for field balancing and continuous monitoring of the condition of large turbo machinery. CABS-M is a condensed version that focuses solely on the core functions for field balancing tasks. Electric drive machines are becoming larger day by day, and while the elastic forces increase, the structure of the foundations is shifting from rigid to flexible, complicating the vibration mechanisms. This helps in understanding and analyzing the vibration state. Please feel free to contact us through https://power.mhi.com/jp/group/eng/business/products/cabs.

• Other inspection equipment and devices
• Other measurement, recording and measuring instruments

One-way communication restriction device data diode "OWCD" In response to the premise that "there is no connection," which is the only aspect that zero trust security cannot address, the simple structure of the data diode, dedicated to physically directing communication in one direction only, is gaining support. However, relying solely on boundary restriction capabilities is insufficient for practical use. Therefore, we are advancing a lineup of models that respond to various communication needs, such as converting bidirectional communication protocols to one direction only, adapting to the recipient's circumstances like the Internet, and enhancing value through the collection and analysis of IoT information. Among these, one example is the data diode OWCD "Data Secure Link." It supports TCP, SMTP relay, and OPC UA. It is absolutely unacceptable for anything to enter internally, and it meets this requirement, enabling utilization suitable for securing customer security. As digital transformation progresses, the operational management becomes increasingly challenging alongside the increase in communication volume. We encourage you to utilize the data diode OWCD "Data Secure Link," which allows for easy and clear use with minimal running costs, ensuring safe and secure operations. There is a video introducing the principles; please check the related link below.

• Firewall and intrusion prevention

The one-way communication restriction device data diode OWCD has become essential for cybersecurity. Its simplicity, dedicated to flowing communication in one direction from left to right, is the reason. There are no complicated settings, and it has the convenience of an Ethernet cable. Taking a step beyond "just flowing communication," we have prepared a system that prevents intruders when moving frequently used "files" to networks with different management classifications, ensuring that unnecessary information is not sent to the recipient. This is the OWCD "File Secure Link." It is equipped with a function that automatically moves files between predetermined computer folders, allowing files to be delivered to another segment. What is actually increasing in Japanese offices is "files." The management of data is difficult to loosely couple with security measures or system expansions, and files are surprisingly used. With files, encryption and backup are easy. OWCD "File Secure Link" can be used easily and clearly, ensuring safe and secure operations. It is used for safely sending files in inter-office collaboration and equipment management in production sites! For inquiries, please visit the related links below.

• Firewall and intrusion prevention

It has been over 40 years since we introduced field balance adjustment for turbo machinery. We have been utilized in various turbo machines, primarily steam turbine generators and gas turbine generators, as well as fans, blowers, and pumps. Building on that foundation, we are not only active in commissioning adjustments during new installations and after-service but also as a permanent vibration monitoring device worldwide. We have prepared a model that further enhances this capability, equipped to monitor the overall condition of the equipment. This is particularly beneficial for machines requiring forced lubrication, as it assists in measurement and dynamic balance adjustment without being constrained by the elasticity or length of the shaft. It is possible to collect various signals, including vibration waveform signals. We can establish alarm circuits for operators and predictive notification circuits for engineers. Furthermore, integration with various analysis systems is possible. This can also be utilized for quality control in factories and for reducing manpower during on-site commissioning. In a world where electrification is advancing, the demand for rotating bodies is not decreasing but rather increasing. Please feel free to reach out to us. For inquiries, please contact us through the link to our company website below.

• Analytical Equipment and Devices
• Other measurement, recording and measuring instruments
• Other inspection equipment and devices

One-way communication restriction device data diode "OWCD" now supports "OPC UA communication"! OPC UA is highly flexible and platform-independent, allowing for seamless communication of various information, enabling connectivity benefits throughout the entire production process. By utilizing flags categorized by industry, unified information can be obtained even from different production equipment manufacturers, contributing to the improvement of production DX. It is expected to spread further towards the standardization of industrial communication technologies. While OPC UA can implement security measures such as encryption, connecting networks across segments can create security holes. This is where the "OWCD" comes into play. Even with firewalls and switches, maintenance can be cumbersome, and mistakes can occur, especially if outdated firmware prevents passage. The "OPC UA support" of OWCD does not require configuration for one-way communication. It is hassle-free and reliable. In the current environment where multi-layered defense against ransomware is essential, we respond to production equipment security needs such as micro-segmentation. There is an explanatory video at the related link below! Please also utilize the "Contact Us" option at the link.

• Other network tools
• Firewall and intrusion prevention
• Other information systems

It is said that "with zero trust in security measures, boundary control for intrusion prevention is outdated..." However, there are still vulnerabilities lurking somewhere in security, and intrusions occur from there. Zero trust is meant to prevent "lateral movement" and "authentication acquisition," and the protection of critical devices requires the premise of "not being connected." The physical data diode OWCD provides hassle-free "disconnected" boundary control. Did you know there are actually two ways to use it? One is to protect the core by "not allowing anything to intrude." The other is to prevent takeover damage by "not allowing anything to exit." Ransomware relies on remote communication with the outside. By shutting that down, it prevents leakage and encryption. By combining it with access authentication and virus detection mechanisms, we enhance the overall availability of your medical system and protect medical services. Not only in medical institutions, but government agencies and companies that skillfully combine OWCD to strengthen security while improving convenience are rapidly increasing. We encourage your company to utilize the physical data diode OWCD. Please refer to our website for more information. There are also video explanations! Check out the related links below, including contact information.

• Firewall and intrusion prevention
• filtering
• Other security

There are discussions about what AI is and what DX is. However, ideally, these changes should be implemented after deciding on the content of the reforms. You have been instructed to make IT changes first, and without knowing whether you can achieve useful improvements or whether it will benefit the business, you cannot just dive in blindly. Moreover, you don't even know how much it will cost. For those of you in such situations, we would like to introduce a simple mechanism to monitor the condition of your equipment. We cannot handle complicated matters or distinguish with high precision. But do your products and installed equipment really break in the same way repeatedly? You need to accurately identify any unusual occurrences; otherwise, progress will be difficult. In such cases, a good tool is "MTSystem." Please make use of "MTSystem," which can be developed into a better monitoring system. We offer sales of the software alone, as well as devices for edge and endpoint use. For inquiries, please visit our website below.

• Other contract services

Securing the manpower needed for the maintenance and management of production facilities and infrastructure is becoming increasingly difficult. While monitoring systems for conditions have become quite common, for those creating the systems, it is still not easy to start with AI if there is no data available, and it is unclear what methods to use and what preparations are necessary, not to mention whether the costs are justifiable for the business. Even though the goal is simply to reduce manpower, being urged to promote DX (Digital Transformation) only raises the hurdles. Moreover, even for a Proof of Concept (PoC), security measures are essential. Supporting everyone working to improve predictive monitoring and predictive maintenance operations is our company's "KinectEye Predictive Monitoring/Predictive Maintenance Smart Solution." In particular: - We excel in methods for securely handling and recording data. We can build systems with cyber resilience measures in place. - We support the measurement and utilization of waveform data such as vibration, acoustics, and current values. Based on the experience we have cultivated over the past 40 years, we will assist you in creating systems tailored to your needs throughout the entire process from the initial planning stage. For inquiries, please refer to the related links below.

• Other production management systems
• Other information systems
• Other contract services

Highly praised OWCD The communication is physically limited to one direction, and nothing can pass in the reverse direction. If the only requirement is to convey the operational status of production equipment to the office management system, there is no need for bidirectional communication. By properly implementing measures and closing off the incoming routes, we can prevent virus intrusion from the office. However, it is also true that the communication used in production equipment differs in standards and other aspects from that used in the office. We have prepared a 3“i” that integrates the functionality of one-way communication and decryption protocol processing, allowing for easy implementation. It supports mainstream CSV transfer via PLC and the future standard OPC UA. Furthermore, it collaborates with the IoT monitoring network within the factory, strongly supporting yield improvement, quality enhancement, and condition monitoring. The system physically blocks external signals while reliably delivering only internal information, facilitating the safe use of data from our customers' production equipment. As ransomware threats become more serious, it is possible to advance data visualization and achieve higher improvement activities while maintaining security, even within a completely independent production equipment network. There is an explanatory video at the related link below! Please feel free to contact us through the related link as well.

• Firewall and intrusion prevention

- Let's collect operational information from the PLC and visualize it. - Let's actively improve yield and quality, and monitor conditions using IoT for factory monitoring. - Let's connect medical devices, electronic medical record systems, and medical administrative systems to enhance the efficiency of expanding healthcare. However, there are high barriers to this: "Our devices are vulnerable from a security standpoint, so they must be completely isolated." This is the mindset across various industries. To securely protect IT critical assets that are potentially at risk of external intrusion, we should ensure that they remain completely independent from the outside while allowing information to be shared internally. That's where the data diode "OWCD" comes in. It physically shuts out signals from the outside! Zero trust is actually based on measures for horizontal expansion and upgrading authentication levels. Ransomware attacks ultimately break passwords; it's just a matter of time. The OWCD itself requires no setup work and can be used simply and clearly. Its strength is different from routers and firewalls. In Japan, as well as in the United States and Europe, one of the key measures for cybersecurity is the one-way communication restriction that can be achieved with "OWCD." This technology is patented by Mitsubishi Heavy Industries, Ltd. There is an explanatory video linked below! Feel free to contact us.

• Firewall and intrusion prevention

The most common entry points for malicious actions are email, social media, web browsers, VPN devices, and remote desktops. Remote access is necessary for various reasons, such as 24/7 system maintenance, but saying that it becomes an entry point makes remote maintenance impossible... Some people recommend ZTNA (Zero Trust Network Access) because VPNs are inadequate, but did you know that this alone does not meet the necessary requirements for today's cyber resilience measures? This is because zero trust assumes "connection is a prerequisite." For critical infrastructure, "isolation from the outside" is required. The solution to address these shortcomings is the "OWCD Remote Maintenance Security Enhancement Solution." It strictly separates IN/OUT signals, allowing only designated individuals to access them. By combining it with zero trust security, we can defend in layers, detect unauthorized signals, and implement countermeasures and eradication. While similar products have started to appear overseas, there are still none in Japan. Please make use of it. There is an explanatory video at the related link below! This technology is patented by Mitsubishi Heavy Industries, Ltd.

• Firewall and intrusion prevention

Current cyber attacks are targeting "operational shutdown" rather than "data leakage." OWCD physically disconnects communication in one direction, fundamentally cutting off either the entry or exit. It builds a "zero trust wall" in hardware that cannot be breached by software, eliminating opportunities for attackers. It is perfectly compatible with zero trust and is chosen as the "last bastion" of multi-layered defense. Infostealer malware can send information collected from the victim's computer to the attacker's computer in about a minute. Moreover, it cleverly bypasses communication monitoring. By the time you realize it, the attacker has already penetrated deep into the internal systems, allowing them to cause real damage at any time they choose. While humans are still making judgments, the attack quietly progresses, and the damage expands. If you allow reconnaissance activities by viruses, the next risk will be an immediate shutdown. Therefore, communication lines can be cut off. Critical infrastructure, production facilities, IoT, SYS-LOG lines—once breached, these areas jeopardize business continuity. It is also essential to have a mechanism to seal off the "exit" to the outside where information-stealing malware can send out extracted information. That’s OWCD. There is an explanatory video at the related link below! This technology is patented by Mitsubishi Heavy Industries, Ltd.

• Firewall and intrusion prevention

■Overview This device measures shaft vibrations of various rotating machinery, including turbines, and supports dynamic balancing adjustments. (It is applicable to turbo machinery such as steam turbines, gas turbines, blowers, pumps, as well as electric motors and generators.) It can also be utilized in operational condition monitoring systems. ■Features - Visualization of dynamic balance using modal circles (Nyquist diagrams) - Calculation of optimal balance weights based on measurement results, up to six surfaces - Compatible with long-term history management databases - Capable of incorporating anomaly detection algorithms [You can share and utilize the experiences you have cultivated!] - Push alarm transmission and integration with external systems such as cloud services are also possible ◇ The signal input circuit of the main product is equipped with an anti-aliasing filter compatible with velocity-type vibration sensors. ◇ A lineup ranging from operational management equipment using acceleration measurement to portable balancers, field balancers, and continuous monitoring is available. ◇ Applicable to low-speed/high-speed rotating machinery (export overseas: prior consultation required) ◇ Additional measurement items, various function additions, and modifications for installation specifications for manufacturing site quality control purposes are possible. ◇ There is also an anomaly detection model incorporating the Taguchi method. ◇ Torsional vibrations are also acceptable (marine applications are available). For inquiries, please contact us through the "Contact Us" link below.

• Vibration Monitoring
• Other measurement, recording and measuring instruments
• Other inspection equipment and devices

The future society "Society 5.0." However, for those creating the systems, even if AI is mentioned, it cannot begin without data, and it is not easy to understand what methods to use and what to prepare, not to mention whether the costs are justifiable for the business... it's not simple. Even if we gather information, measuring is not straightforward, and it's unclear what communication methods are suitable. Although cloud solutions are often mentioned, the hurdles can be surprisingly high. Security measures are also necessary. On top of that, we want to leverage our company's experience while keeping costs low and ensuring effective initiatives. Our "KinectEye IoT & AI Infrastructure Concierge Service" supports those aiming for a future society and engaging in digital transformation (DX) for business improvement and new business development. We assist in building monitoring and diagnostic systems. You can trust us with data collection for vibrations, acoustics, and images. We also provide support on-site and facilitate communication with remote locations, enabling you to achieve reliable innovation. In addition to IoT and AI, we are also involved in building maintenance DX businesses, leveraging the experience we have cultivated over 40 years. We will assist you throughout the entire process, from the initial planning stages of your project.

• Other information systems
• Other contract services
• Prototype Services

The "Predictive Monitoring Solution MTSystem," which prevents equipment and device failures by identifying unusual conditions, is utilized in DX as part of "next-generation maintenance" that monitors the state of operations. However, is it only production equipment that is "different from usual"? Our "MTSystem" applies DX to the monitoring of production processes to enhance true quality control. Since it is based on quality engineering's "Taguchi Method," it may be expected that factories that conduct QC rigorously can utilize it. However, the reality is whether a robust continuous monitoring system is in place... Ultimately, it often comes down to the results of sampling inspections conducted after production. It is anticipated that labor shortages will become more severe in the future. The scope that one person must manage will likely expand and become more complex. Monitoring is not just about using expensive inspection equipment and leveraging AI for pre-shipment inspections. Often, small improvements during the process can be beneficial for yield enhancement. We encourage you to consider utilizing it. For inquiries, please refer to the related links below.

• Other production management systems

Many AI products for preventing troubles have emerged. But do you really know if they are usable? SIers often don’t know what to do and end up completely relying on AI vendors, leading to a lack of alignment between users and vendors, resulting in many issues. In the first place, with the increasing number of "AIs," it is impossible to suddenly determine which one is optimal. In comparison, the "MT system" can be easily started without overthinking it. Many physical AIs do not require the preparation of necessary training data in this system. The same goes for the "MT system"; let's first collect normal data and try using the "MT system." Recently, coding has become relatively easier with the help of generative AI, but simplifying system construction is still quite challenging... By progressing from areas that you can easily tackle, you can fully understand and prevent your challenges from becoming chaotic or derailed. We are using it ourselves. We can provide broad support, including data collection, visualization systems, and server security measures. We will support you in solving each technical challenge that may cause you concern. Please contact us through the related links below.

• Other inspection equipment and devices
• Instrumentation and Control Systems
• others