Shared data center-based industrial automation system for one or more sites

Abstract

The present invention is entitled "Industrial Automation System Based on Shared Data Center for One or More Sites". The present disclosure provides a system comprising a shared data center having at least one data storage unit and at least one processing unit. The shared data center is configured to provide services for one, two or more industrial automation systems. For each of the one, two or more industrial automation systems, the shared data center is configured to receive process-related data associated with at least one local device in at least one local system, analyze the process-related data from the local device, and provide instructions to at least one client device associated with the local system.

Description

Technical Field

[0001] The present disclosure relates generally to computer systems, and more particularly to using shared data center computing in industrial process automation applications, and systems and methods related to using shared data center computing in industrial applications. Background Art

[0002] Shared data center computing allows applications, services, and data to be moved from field units and desktop computers back to facilities for networked computers, servers, and storage devices. Shared data centers can be on-site or off-site and can be implemented as a service. By relocating the execution of applications, the deployment of services, and the storage of data, shared data center computing provides a systematic approach to reducing capital expenses, reducing operating expenses, improving reliability and availability, centralizing information, enhancing robustness, and improving network security. The shared data center provides services to at least a first industrial automation system and at least a second industrial automation system. A single shared data center can operate across multiple industrial plant sites. These advantages can be achieved while allowing owners to use their own shared data centers, which provides greater oversight and less risk because the data does not leave the owner's domain. In addition, these advantages can still be achieved in the case where data is prohibited from crossing geographic boundaries. Summary of the invention

[0003] The present disclosure provides systems and methods for using shared data center computing in applications spanning one, two, or more industrial automation systems.

[0004] In a first embodiment, a system includes a shared data center, the shared data center including at least one data storage device and at least one processing device. The shared data center is configured to provide shared services to one, two or more industrial automation systems. For each of the one, two or more industrial automation systems, the shared data center is configured to receive process-related data from at least one local device in the local system, wherein the process-related data is associated with an industrial process; analyze the process-related data from the local device; and provide instructions to at least one client device associated with the local system. The system may also include physical security to limit access to the shared data center. The system may be further configured to implement system security updates.

[0005] In other embodiments, the system provides information related to the client device to the client device as needed. In other embodiments, the client device may be configured to be connected to the system via a local bus connection. In other embodiments, at least one data storage device and / or at least one computer processing device provide services for at least one, two or more industrial automation systems, and in other embodiments, at least one data storage device and / or at least one computer processing device are dedicated to providing services for the first industrial automation system, and at least the second data storage device and / or the second computer processing device are dedicated to providing services for the second industrial automation system. In another embodiment, the shared data center is further configured to match the management system for the management, audit, optimization or support of one, two or more industrial automation systems. In another embodiment, the computer processing device is a virtual machine, or the shared data center also includes at least one virtual machine. In another embodiment, the client device associated with the local system includes a controller, sensor or computer configured to control or collect data associated with the industrial device. In another embodiment, the shared data center is configured to expand at least one industrial control system in one, two or more industrial control systems.

[0006] In a second embodiment, a method includes: receiving, by a shared data center including at least one data storage device and at least one computer processing device, isolated data from at least one process device in each of one, two or more industrial processes, the isolated data being associated with a corresponding industrial automation system in a group of one, two or more industrial automation systems, wherein the shared data center is configured to provide a shared service to a group of one, two or more industrial automation systems; analyzing the isolated data from at least one process device in each of the one, two or more industrial processes; and indicating a first process client associated with the first industrial automation system based on the analysis of the data associated with the first industrial automation system, and indicating a process client associated with each corresponding industrial process and the corresponding industrial automation system based on the analysis of the isolated data. In another embodiment, the method may include updating the industrial automation system with a system security update. In another embodiment, the method may include limiting physical access to the shared data center. In another embodiment, the method may include managing the industrial automation system using a management system that matches the shared data center. In another embodiment, receiving isolated data from at least one process device in each of the one, two or more industrial processes using a secure connection, and indicating a process client associated with each corresponding industrial process and the corresponding industrial automation system based on the analysis of the isolated data. The secure connection may be a file transfer protocol secure connection.

[0007] In a third embodiment, an apparatus includes a shared data center computing apparatus, the apparatus including at least one network interface configured to provide a service bus connection supporting a service-oriented architecture (SOA) service; at least one data storage device configured to provide shared storage space to one, two or more industrial automation systems via a service bus connection; and at least one processing device configured to provide functional services to a corresponding industrial automation system in the one, two or more industrial automation systems via a service bus connection; wherein the apparatus is configured to provide functional services based on one or more specified standards.

[0008] Other technical features will be apparent to those skilled in the art from the following drawings, descriptions and claims. BRIEF DESCRIPTION OF THE DRAWINGS

[0009] For a more complete understanding of the present disclosure, reference is now made to the following description taken in conjunction with the accompanying drawings, in which:

[0010] Figure 1 An exemplary shared data center environment according to the present disclosure is shown.

[0011] Figure 2 An exemplary local system environment according to the present disclosure is shown.

[0012] Figure 3 Exemplary industrial automation systems and applications according to the present disclosure are shown.

[0013] Figure 4 An exemplary method of allocating processes and data according to the present disclosure is shown.

[0014] Figure 5 An exemplary computer system supporting shared data center computing according to the present disclosure is shown. DETAILED DESCRIPTION

[0015] Discussed below Figures 1 to 5 The various embodiments used to describe the principles of the present invention in this patent document are only by way of illustration and should not be interpreted as limiting the scope of the present invention in any way. Those skilled in the art will appreciate that the principles of the present invention can be implemented in any type of appropriately arranged device or system.

[0016] Figure 1 An exemplary system 100 according to the present disclosure is shown. Figure 1Clients 102, 104, and 106 are shown connected to a shared data center 108. Shared data center 108 includes a processing unit 110 and a data storage unit 112, both of which are accessible to clients 102, 104, and 106. Clients 102 and 104 are associated with a first industrial automation system. Client 106 is associated with a second industrial automation system. Additional industrial automation systems may also be included, but are not limited to the following. Figure 1 The shared data center 108 may also include security 114, which may include physical security or system security or both.

[0017] The shared data center 108 includes equipment for supporting one, two or more independent industrial automation systems. In one embodiment, the shared data center supports a single industrial automation system. In another embodiment, the shared data center supports two or more industrial automation systems. Figure 1 Two independent industrial automation systems are shown, but it should be understood that a single industrial automation system may be supported, or more than two independent industrial automation systems may be supported.

[0018] In the embodiment in which the shared data center supports two or more industrial automation systems, computing power can be shared between providing services for the industrial automation system and providing services for the second industrial automation system. Since the equipment supporting multiple different industrial automation systems is accommodated in a public facility, the shared data center supporting two or more industrial automation systems can have dedicated information technology personnel to support and maintain the system in the shared data center 108. Information technology personnel dedicated to supporting information technology equipment and systems in the shared data center may be responsible for monitoring, patching, troubleshooting, repairing, maintaining and refreshing the equipment and systems in the shared data center 108. Operators at industrial plant sites or shared data centers then relieve these responsibilities related to information technology, thereby allowing operators to focus on their main responsibilities, such as plant operations and manufacturing tasks. In addition, integrating two or more industrial automation systems into a shared data center allows a group of operators or a group of information technology personnel to support and manage multiple industrial automation systems. Multiple groups of operators or information technology personnel can be integrated into a shared data center. This improves efficiency and reduces operating expenses. The shared data center 108 can also eliminate the need for a physical control center at one or more industrial plant locations, thereby reducing infrastructure costs. Using a shared data center 108 can eliminate the need for network switches and cables.

[0019] In an embodiment where a shared data center supports a single industrial automation system, the data center is located at a location geographically remote from the industrial process. The ability to locate a data center remote from the industrial process has advantages. The remote location may be easier to access, have better security measures, be in a lower risk environment, have better environmental and utility controls, and the ability to expand in the future.

[0020] Physical and system security 114 is also improved by the shared data center 108. The shared data center 108 may be equipped with physical security measures such as fences, locks, access control card systems, security personnel, cameras, cages, biometric access control systems, thermal sensors, surveillance systems, sensors, identification systems and procedures, and other physical security measures indicated as 114. These physical security measures may be cost-prohibitive to provide an industrial automation system at each individual location (e.g., individual clients) where data is obtained. However, when combined with equipment that supports other industrial automation systems at a single location, the cost of physical security is saved and a greater degree of physical security of all systems in the shared data center can be achieved.

[0021] System security is also improved by the shared data center 108 because dedicated data center personnel can integrate the industrial automation supported devices of multiple systems in the shared data center 108 into routine security upgrades, updates, and patching operations applicable to all devices in the shared data center. Compared to security upgrades, updates, and patches at each individual location where data is obtained (such as, individual clients) or at a local control center limited to a single industrial automation system, the shared data center 108 facilitates easier and more frequent operations. System security can be applied to one or more industrial automation systems served by the shared data center 108. The shared data center can be configured to implement system security updates, including patches for industrial automation systems, on demand, at predetermined intervals, or both.

[0022] Additionally, in highly distributed systems, security can become challenging with a higher likelihood of compromise because more people are physically able to interact with the system. In a shared data center, the end user or owner of the shared data center is able to significantly reduce and control the number of people with physical access to the system, thereby enhancing the security of the system.

[0023] One, two or more industrial automation systems may be associated with an industrial process located at one or more separate locations away from a shared data center. In an embodiment in which a shared data center provides services for a single industrial automation system, the shared data center is located away from the industrial process. In another embodiment, the shared data center may be located at the same site where at least one industrial process is located, wherein at least one industrial automation system is at the same site as the industrial process. In another embodiment, the shared data center relates to an industrial automation system in which the industrial process is away from the shared data center, and an additional industrial automation process in which the industrial process is located at the same location as the shared data center. A specific example may be a situation in which there are offshore processes and onshore processes. The industrial automation system may relate to industrial processes of various risk levels. The industrial automation system may be applied to different industrial sectors.

[0024] Shared data centers provide efficiency and cost reduction while retaining the autonomy of each of the multiple industrial automation systems co-located in the shared data center. For example, the infrastructure used at the shared data center will have isolation so that in important cases, different industrial automation systems do not affect each other. It may be important that multiple industrial automation systems or any of the multiple industrial automation systems do not have common mode failures. Isolation will be used to prevent common mode failure conditions. The virtualized infrastructure that can be used in the shared data center facilitates the necessary isolation. For example, various functions are replicated when necessary so that in the event of a failure in one part of the infrastructure, the system can restart the function or use replication to take over the function.

[0025] Another way to isolate different parts of an industrial automation system is to utilize multiple host environments that can be used in the infrastructure. For example, half of a set of functions (e.g., controls, operator displays, data acquisition) are located in a first host environment, while the other half of the functions are located in a second host environment. In this way, if a failure occurs, the entire function will not be lost. The infrastructure and networking of industrial automation systems can be used to provide isolation to eliminate single points of failure. In a specific example, the operator interface is distributed in various host environments running the data center so that if one operator interface fails, the remaining operator interfaces will continue to run. Access to the failed operator interface may be temporarily suspended, but the entire function has not yet failed. In a shared data center, the number of infrastructure redundancies can be reduced compared to replicating the same infrastructure redundancy mode for each of a set of multiple field control rooms, thereby achieving a goal that was originally impossible to achieve due to high costs in the case of multiple different field control rooms.

[0026] To further eliminate potential common failure modes, the high availability redundant network of the field systems will now go into a shared data center, and the network itself should be distributed to remain available. The physical routing of the first network can be isolated from the other networks. In addition, it is advantageous to transmit or encapsulate the availability messages through a network tunnel between the local site and the shared data center. The network topology is designed to allow the messages to be routed or tunneled to the shared data center.

[0027] At the centralized operation level, each of the multiple industrial automation systems can be managed individually and have no common mode failures, but at a higher level, the overall common infrastructure and management and maintenance of the collection of multiple industrial automation systems can be handled together, and efficiency and cost savings can be achieved. Availability messaging in industrial automation systems can be improved through shared data centers because operators and systems only manage one primary operation instead of a large number of operations. Managing one system can be more efficient than managing many systems individually.

[0028] The shared data center 108 is a computing system capable of storing information and performing data functions on the information at the same time. The shared data center includes at least one processing unit or computer that can be accessed from a remote location. The computer processing device may be a virtual machine, or the shared data center may include at least one virtual machine. The shared data center 108 may include a plurality of storage devices, which will be collectively referred to as storage units 112, and a plurality of processing units, which will be collectively referred to as processing units 110. In one embodiment, the same processing unit 110 and data storage unit 112 are used to support the industrial automation system and one or more other company systems. In another embodiment, different dedicated processing units 110 and / or data storage units 112 may be used to support different systems. The data center 108 may include hardware that is too expensive to deploy and maintain at each client 102, 104, and 106. In the shared data center 108, when hardware is shared between multiple systems including the industrial automation system, the expansion of any system such as the industrial automation system can be achieved without acquiring additional hardware, thereby saving capital resources. In addition, the expansion can be easily and quickly completed using hardware that already exists in the shared data center 108.

[0029] In addition, shared data center 108 may include software that is too costly to install, deploy, and maintain at each client or even at each dedicated data center. Shared data center 108 may provide hardware and software via a secure or unsecured connection with clients 102, 104, and 106. In one embodiment, the secure connection employed is a file transfer protocol secure connection. Although Figure 1 One data center 108 is shown in FIG. 1 , but it should be expressly understood that multiple data centers may also be consistent with the present disclosure.

[0030] Clients 102 and 104 are local devices, controllers or computers of a first industrial automation system located at an industrial plant site or operating location, which communicate with a shared data center 108 and control the operation and services of the plant site. Client 106 is a device associated with a second industrial automation system. Clients 102 and 104 are able to access both a processing unit 110 and a storage unit 112 located in a shared data center 108. Clients 102 and 104 may include multiple industrial automation tools and sensors to monitor industrial process operations. These sensors may detect any operating conditions of an industrial process, including but not limited to temperature, pressure, vibration or other measurable operating parameters. Client 106 may be as described for clients 102 and 104, but is associated with a second industrial automation system provided by a shared data center 108. Following this same pattern, there may also be additional clients associated with additional industrial automation systems provided by a shared data center.

[0031] Clients 102, 104, and 106 communicate with shared data center 108 via any secure or non-secure method, including secure hypertext transfer protocol (HTTPS), secure remote network, or secure file transfer protocol (FTPS). It should be understood that secure methods may be preferred over non-secure methods, and the specific method selected will depend on the requirements of the functionality being accessed. The present disclosure should not be construed as limited to any particular protocol or method of transmitting data.

[0032] It should be understood that the communication between the clients 102-106 and the shared data center 108 can be one-way or two-way. The phrase "one-way communication" refers to communication in which data is sent in one direction by any number of devices. The term "two-way communication" refers to communication in which data is sent and received by any number of devices. In addition, the shared data center can be configured to provide trend displays, alarms, event summaries, and event archives to client devices based on process-related data. The transmitted data and instructions can be isolated so that data and instructions related to one industrial automation system are not provided to another industrial automation system.

[0033] In some embodiments, the shared data center 108 can utilize a service-oriented architecture (SOA) to abstract users of shared data center services from the location services themselves. When a shared data center user at a given client calls a function, the function can be redirected to a component running on a server in the shared data center 108. The redirection is performed by a service bus, which exposes a set of service endpoints to users interacting with these services, just as if the services were local. The service bus directs requests for these services to appropriate service providers in a local or data center according to the configured mapping. Mapping can be done on a per-service basis, allowing a mix of local services and data center-based services to be used. The service bus itself can be local relative to the factory or located in a data center. The system and method disclosed in the present invention can be designed for multi-tenants, so that many companies can share the same physical database resources, but keep their respective data completely private. Alternatively, the system and method disclosed in the present invention can be designed for a single tenant to better supervise and control the tenant's data. Avoid the risks associated with data that leaves the domain of the owner / operator. Even in the case of a single tenant, data from multiple factory locations of a tenant can be processed at the shared data center 108. Clients associated with the shared data center 108 may be selected to maintain all data within a defined geographic area in order to comply with local regulations.

[0034] The system allows for a very flexible architecture where all, some or none of the computer equipment or server equipment is located at the physical plant site of the industrial automation system served by a shared data center. Examples of suitable architecture types include service-oriented architecture, EXPERION Virtual Engineering Platform from Honeywell International, open virtual engineering platform, EXPERION DSA technology from Honeywell International, island mode remote auxiliary station, remote fault-tolerant Ethernet (FTE) process control network capabilities, robust / secure control communications, IO mesh architecture, and control mesh architecture.

[0035] With reference to industrial automation systems served by a shared data center, suitable topologies include situations where all computer nodes and server nodes are located at the plant site, such as the current distributed system architecture (DSA) system. A hybrid system may also be used in which some computer devices are located at a site at the physical plant, while the remaining computer and server devices and applications are located at the data center. For example, an operator console station may be located at a site at the physical plant, where the historian, data server, SCADA collector, domain controller, asset management software, and alarm management software are located in the data center. Another topology includes situations where all computer and server hardware and applications are located in a data center, where embedded nodes and thin client operator stations are at the same site as embedded distributed control system (DCS) controllers. Another suitable topology includes situations where all computer and server devices are located in a data center together with a virtual DCS controller, and the devices at the site at the physical plant are meshed IO hardware and devices. A single data center that supports multiple sites with different control systems may also be used with any combination of the above topologies. DSA can be used in a data center to integrate multiple servers together, each with its own engineering repository for each site.

[0036] Referring again to the industrial automation system served by the shared data center, a hybrid approach may be used when supervising control of a process at a remote industrial plant (including providing services or collecting data). The shared data center 108 may perform some features of the clients 102, 104, and / or 106 better than at the clients 102, 104, and / or 106. By determining which functions can be performed more efficiently in the shared data center 108 than at the local clients 102, 104, and / or 106, computing resources may be allocated in a manner that maximizes performance. It should be understood that this hybrid approach allows for a variety of applications, including but not limited to applications that facilitate operator advanced functions (alarm analysis and reconfiguration), batch execution, simulation, or other applications.

[0037] Figure 2 2 is an illustration 200 of an exemplary local system 202 at an industrial plant site. Each client 102 and 104 includes a local system 202. The local system 202 includes a local processing unit 208, a local data storage device 210, and a local data input / output 212. The local processing unit 208 may include both real-time functionality 204 and non-real-time functionality 206.

[0038] Real-time functions are those functions that instruct or control other equipment (including actual mechanical systems used in the plant) or provide data to personnel operating these mechanical systems. These real-time functions generally need to be available and can be designed to be non-resource intensive. Examples of these real-time functions may include programming a basic automation system to perform a specific function (e.g., drilling into a substance) within a specific time. The phrase "real-time" is intended to relate to the need to make the data created by the real-time functions available upon request from the actual mechanical system or the personnel operating the mechanical system.

[0039] Another advantage of the disclosed system and method is the ability to quickly deploy new services or features to multiple clients without requiring changes to the clients themselves. As new services become available (e.g., advanced analytics tools become available), the services can be provided to improve the manufacturing process at a given site without requiring reprogramming at the site. One or more industrial automation systems receive the deployment of new services or features, but not all industrial automation systems are required to be included.

[0040] Another advantage of the disclosed system and method is the use of a partition model within the shared data center 108. The partition model allows the shared data center to determine which data should be stored by the local system 202, which data should be stored by the shared data center 108, and which data should be stored by both the local system 202 and the shared data center 108. In addition, by understanding the location of data in the partition model, the reliability and consistency of the data can be maintained.

[0041] Figure 3 An industrial automation system and automation application 300 according to the present disclosure is shown. In this embodiment, 300 includes an industrial automation system 304 and an automation application 302, both of which are distributed across a shared data center 108 and local systems 202. The industrial automation system 304 and the automation application 302 may include multiple local systems 202 and multiple shared data centers 108. Both the industrial automation system 304 and the automation application 302 may use the techniques described in the present disclosure to support the use of shared data center computing in a more efficient manner.

[0042] Figure 4An exemplary method 400 for distributing processes and data between a local environment 202 and a shared data center 108 for both a first industrial automation system and a second industrial automation system in a block 402. In block 404, a process for the data center is set up, and data is stored in a shared data center for both the first industrial automation system and the second industrial automation system. In block 406, a process for the local environment is set up, and data is stored in a local environment for both the first industrial automation system and the second industrial automation system. In block 408, the shared data center 108 for both the first industrial automation system and the second industrial automation system is connected to the local environment 202. In block 410, the first industrial process and the second industrial process are performed using data and processes in both the shared data center 108 and the local environment 202.

[0043] Another advantage of the shared data center approach is that data from multiple local systems and potentially from multiple companies is stored in a single location, where it can be used for analysis such as performance benchmarking.

[0044] In one embodiment, local collectors and other devices will aggregate data in one or more systems, and these systems can be located in the same or different geographic regions. The shared data center service will then collect, analyze and inform based on this data.

[0045] Figure 5 An exemplary computer system 500 supporting shared data center computing according to the present disclosure is shown. The elements of the shared data center 108 and the local environment 202 described above can be implemented on any general purpose computer 500 with sufficient processing power, memory resources, and network throughput capabilities to handle the necessary workload imposed on it. A home personal computer networked to the shared data center 108 via a wide area network (such as the Internet) can be used in conjunction with the embodiments disclosed herein. The home personal computer can share some or all of the elements of the shared data center 108. Figure 5 A typical computer system suitable for implementing one or more embodiments disclosed herein is shown. General purpose computer 500 includes a processor 512 (which may be referred to as a central processing unit or CPU) that communicates with memory devices including secondary storage 502, read-only memory (ROM) 504, random access memory (RAM) 506, input / output (I / O) 508 devices, and network connection devices 510. The processor may be implemented as one or more CPU chips.

[0046] Secondary storage 502 is typically comprised of one or more disk drives or tape drives and is used for non-volatile storage of data and as an overflow data storage device in the event that RAM 506 is not large enough to hold all working data. Secondary storage 502 may be used to store programs that are loaded into RAM 506 when such programs are selected for execution. ROM 504 is used to store instructions and possibly data that is read during program execution. ROM 504 is a non-volatile memory device that typically has a small storage capacity relative to the larger storage capacity of secondary storage. RAM 506 is used to store volatile data and possibly instructions. Accessing both ROM 504 and RAM 506 is typically faster than accessing secondary storage 502.

[0047] The I / O 508 devices may include printers, video monitors, liquid crystal displays (LCDs), touch screen displays, keyboards, keypads, switches, dials, mice, trackballs, voice recognizers, card readers, paper tape readers, or other well-known input devices. The network connection device 510 may take the form of a modem, a modem bank, an Ethernet card, a universal serial bus (USB) interface card, a serial interface, a token ring card, a fiber distributed data interface (FDDI) card, a wireless local area network (WLAN) card, a radio transceiver card such as a code division multiple access (CDMA) and / or a global system for mobile communications (GSM) radio transceiver card, and other well-known network devices. These network connection devices 510 may enable the processor 512 to communicate with the Internet or one or more intranets. With such network connections, it is contemplated that in the process of performing the above functions, the processor 512 may receive information from the network or may output information to the network. Such information (which is typically represented as a sequence of instructions to be executed using the processor 512) may be received from the network and output to the network, for example, in the form of a computer data baseband signal or a computer data signal embodied in a carrier wave. The baseband signal or signal embodied in a carrier wave generated by the network connection device 510 may propagate in or on the surface of an electrical conductor, in a coaxial cable, in a waveguide, in an optical medium such as an optical fiber, or in the air or free space. The information contained in the baseband signal or signal embedded in the carrier wave may be ordered according to different sequences required to process or generate the information or to send or receive the information. The baseband signal or signal embedded in the carrier wave, or other types of signals currently used or later developed (referred to as "transmission media") may be generated according to several methods well known to those skilled in the art.

[0048] Such information (which may include data or instructions to be executed using, for example, processor 512) may be received from and output to the network, for example, in the form of a computer data baseband signal or a signal embodied in a carrier wave. The baseband signal generated by the network connection device 510 or the signal embodied in a carrier wave may propagate in or on the surface of an electrical conductor, in a coaxial cable, in a waveguide, in an optical medium such as an optical fiber, or in the air or free space. The information contained in the baseband signal or the signal embedded in the carrier wave may be sorted according to different orders required to process or generate information or to send or receive information. The baseband signal or the signal embedded in the carrier wave, or other types of signals currently used or later developed (referred to herein as transmission media) may be generated according to several methods well known to those skilled in the art.

[0049] The processor 512 executes instructions, codes, computer programs, scripts that it accesses from a hard disk, floppy disk, optical disk (these various disk-based systems may be considered secondary storage 502 ), ROM 504 , RAM 506 , or network connection device 510 .

[0050] Although the above figures show various details about the use of shared data center computing in industrial applications, various changes may be made to these figures. For example, the functional divisions shown in the different figures are for illustration only. Components in the device, system or environment may be combined, omitted or further subdivided, or other components may be added according to specific needs. Although shown as a series of steps, Figure 4 The steps in may overlap, occur in parallel, occur in a different order, or occur multiple times.

[0051] In some embodiments, the various functions described above are implemented or supported by a computer program, which is formed by a computer-readable program code and embodied in a computer-readable medium. The phrase "computer-readable program code" includes any type of computer code, including source code, object code, and executable code. The phrase "computer-readable medium" includes any type of medium that can be accessed by a computer, such as a read-only memory (ROM), a random access memory (RAM), a hard drive, a compact disc (CD), a digital video disc (DVD), or any other type of memory.

[0052] In one embodiment, the shared data center is further configured to provide shared services to non-industrial automation systems. In this embodiment, the shared data center 108 includes equipment for supporting industrial automation systems as described above, and also includes equipment for supporting at least one other general company function such as finance, accounting, taxation, law, procurement, sales, engineering, human resources, communication resources, etc. Computing power can be shared between providing services for industrial automation systems and providing services for non-industrial automation systems. The advantages of accommodating multiple systems in the above-mentioned public facilities are further extended to include supporting company function systems. In the case where the shared data center also provides services for non-industrial automation systems, the same personnel dedicated to supporting information technology equipment and systems in the shared data center supporting industrial automation systems may also be responsible for monitoring, patching, troubleshooting, repairing, maintaining and refreshing the equipment and systems in the shared data center 108 that are also used to support at least one non-industrial automation system. This improves efficiency and reduces operating expenses.

[0053] In this embodiment, a method will include receiving data related to the following by a shared data center including at least one data storage device and at least one computer processing device: (I) a first industrial automation system associated with at least a first process device, and (II) a second industrial automation system associated with at least a second process device, and (III) a non-industrial automation system associated with the device; wherein the shared data center is configured to provide shared services to at least the first industrial automation system, the second industrial automation system, and the non-industrial automation system. The method will continue to analyze data related to the first industrial automation system associated with the first process device; analyze data related to the second industrial automation system associated with the second process device; and analyze data related to the non-industrial automation system associated with the device. Finally, the method includes: based on the analysis of the data related to the first industrial automation system, indicating a first process client associated with the first industrial automation system; based on the analysis of the data related to the second industrial automation system, indicating a second process client associated with the second industrial automation system; and based on the analysis of the data related to the non-industrial automation system, indicating another client associated with the non-industrial automation system.

[0054] It may be advantageous to set forth the definitions of certain words and phrases used throughout this patent document. The term "coupling" and its derivatives refer to any direct or indirect communication between two or more elements, whether or not these elements are in physical contact with each other. The terms "transmit", "receive", "communication" and their derivatives cover both direct and indirect communication. The terms "include" and "comprise" and their derivatives mean including but not limited to this. The term "or" is inclusive, meaning and / or. The phrases "associated with..." and "associated with..." and their derivatives may mean including, included in, interconnected with, included in, connected to or connected with, coupled to or coupled with, communicable with, collaborate with, interlaced, juxtaposed, close to, coupled to or combined with, having, having the properties of, etc. The term "controller" means any device, system or part thereof that controls at least one operation. The controller may be implemented in hardware, firmware, software or some combination of at least two of them. Whether locally deployed or remotely deployed, the functions associated with any particular controller may be centralized or distributed.

[0055] Although the present disclosure has described certain embodiments and generally associated methods, changes and permutations of these embodiments and methods will be apparent to those skilled in the art. Therefore, the above description of the exemplary embodiments does not limit or restrict the present disclosure. Other changes, substitutions and variations are also possible without departing from the spirit and scope of the present disclosure as defined in the following claims.

Claims

1. A system comprising: Shared data center, including: (i) at least one data storage device and at least one computer processing device; (ii) wherein the shared data center is configured to provide shared services to one, two or more industrial automation systems; Wherein for each of the one, two or more industrial automation systems, the shared data center is configured as: a. receiving isolated data from at least one local device of a local system, wherein the isolated data is associated with an industrial process; b. analyzing the isolated data from the local device; c. allocating the isolated data between the local system and the shared data center for a first industrial automation system and a second industrial automation system in the one, two or more industrial automation systems using a partition model; d. Using the partition model to determine for the first industrial automation system and the second industrial automation system the location of the isolated data and the isolated data to be stored in at least one of: a local device of the local system or the shared data center, and both the local device and the shared data center; e. Linking the shared data center to the local system for both the first industrial automation system and the second industrial automation system; f. providing instructions to at least one client device associated with the local system based on the analysis of the isolated data; and g. Implementing system security updates and patching operations for devices associated with the first industrial automation system and the second industrial automation system located at separate remote locations at predetermined time intervals.

2. The system of claim 1 further comprising physical security that limits access to the shared data center.

3. The system of claim 1, wherein the shared data center is further configured to implement system security updates.

4. A system according to claim 1, wherein the at least one data storage device, the at least one computer processing device, or both provide services for at least two of the industrial automation systems, or wherein the at least one data storage device and / or the at least one computer processing device are dedicated to providing services for a first industrial automation system, and at least a second computer processing device is dedicated to providing services for a second industrial automation system.

5. The system of claim 1, wherein the shared data center is further configured to match a management system for management, auditing, optimization or support of at least one of the industrial automation systems.

6. The system of claim 1, wherein the shared data center is further configured to provide shared services to at least one non-industrial automation system.

7. A method comprising: receiving, by a shared data center including at least one data storage device and at least one computer processing device, isolated data from at least one process device of a local system in each of one, two or more industrial processes, the isolated data being associated with a corresponding industrial automation system in a group of one, two or more industrial automation systems, wherein the shared data center is configured to provide shared services to the group of one, two or more industrial automation systems; analyzing, by the shared data center, the isolated data from the at least one process device in each of the one, two or more industrial processes; allocating the isolated data between the local systems and the shared data center for a first industrial automation system and a second industrial automation system using a partition model within the shared data center; determining, using a partition model within the shared data center, for a first industrial automation system and a second industrial automation system, a location for the isolated data and the isolated data to be stored in at least one of: at least one local device of the local system or the shared data center, and both the at least one local device and the shared data center; For both the first industrial automation system and the second industrial automation system, linking the shared data center to a local system via the shared data center; indicating, by the shared data center, a process client associated with each corresponding industrial process and a corresponding industrial automation system based on the analysis of the isolated data; as well as System security updates and patch operations are implemented at predetermined time intervals for devices associated with the first industrial automation system and the second industrial automation system located at separate remote locations through the shared data center.

8. The method of claim 7, further comprising updating the industrial automation system with a system security update, restricting physical access to the shared data center, or both.

9. A method according to claim 7, wherein a secure connection is used to receive isolated data from at least one process device in each of the one, two or more industrial processes, and the process client associated with each corresponding industrial process and the corresponding industrial automation system is indicated based on the analysis of the isolated data.

10. A method according to claim 9, wherein the receiving isolated data also includes receiving data from a non-industrial automation system, the analyzing the isolated data also includes analyzing data related to the non-industrial automation system, and the indication also includes indicating a client associated with the non-industrial automation system based on the analysis of the data from the non-industrial automation system.

Images