Is Your Tank Gauge Truly Compliant? The ARUME Perspective
Regulations require tank gauges to be compliant in two key areas:
Hardware Certification: The tank gauge model itself needs to be certified by the appropriate authority.
Periodic Inspection: Certified technicians must inspect the physical gauge periodically (monthly, annually, or as mandated by your state).
The ARUME Factor: Unveiling a Compliance Gap
While these regulations are crucial, they ignore the threat of internet-connected tank gauges with thousands accessible over the internet. Traditional inspections assume the gauges are secure, with physical protection or password-protected panels.
However, ARUME brings to light a critical gap. When anyone can access a tank gauge over the internet and modify settings (leak testing, alarms, calibration), the entire inspection process becomes unreliable.
Two-Factor Authentication Challenge: Cybersecurity experts often recommend two-factor authentication (2FA) for added security. However, implementing 2FA on ATGs presents a unique challenge. These devices lack the capability to request codes, receive them via SMS, phone calls, or emails, and then enter them to complete the login process. As a result, traditional 2FA methods aren't currently feasible for ATGs.
Why This Matters: Consequences of Unsecured Gauges
Tampered Settings: Remote access allows malicious actors to manipulate settings, rendering the gauge's data questionable. Imagine a technician "chasing ghosts" trying to fix a gauge with its configuration being changed remotely every day or hour.
Missing Audit Trails: The lack of logs for configuration changes makes it impossible to track modifications or revert to previous settings.
Data Integrity at Risk: With compromised settings, the entire data generated by the tank gauge becomes suspect, jeopardizing its compliance with regulations.
The Importance of Secure Tank Gauges
ARUME highlights the need for a broader approach to tank gauge compliance:
Securing Your Tank Gauge: Connecting a tank gauge to the internet requires robust security measures to prevent unauthorized access and configuration changes.
Proper Identification: Tank gauges must be configured with proper site and tank identification to ensure the data collected accurately reflects the specific location. Imagine a speeding ticket without a car identification – it's meaningless.
ARUME: A Tool for Improved Compliance
ARUME's role goes beyond simply identifying vulnerable gauges. Regulatory agencies can use ARUME's data to identify non-compliant gas stations with vulnerable or poorly identified tank gauges, potentially issuing fines without needing on-site inspections.
A Catalyst for Change
Environmental Advocacy: While the raw leak test failures and alarms from vulnerable gauges wouldn't be entirely reliable, this data could still be valuable. It can highlight gas stations with potentially higher environmental risks, highlighting these stations and making them visible to authorities and environmental groups.
Incentivizing Security: By exposing non-compliant gauges, ARUME can encourage gas station owners to prioritize security measures to avoid fines, shutdowns, and potential negative publicity.
Conclusion: Beyond Traditional Inspections
Compliance goes beyond traditional inspections. ARUME emphasizes the critical role of internet security in ensuring the integrity of tank gauge data and overall environmental protection. The potential for fines, station shutdowns, and environmental group scrutiny can be a powerful incentive for station owners. Securing tank gauges and ensuring proper identification are key steps toward achieving true compliance in today's internet-connected world.