Network devices for connecting multiple industrial devices

Abstract

This disclosure describes a network device for connecting multiple industrial devices to a wireless communication network. The network device includes: a front-end radio interface capable of connecting to the multiple industrial devices via one or more wireless communication channels for transmitting and receiving data from the multiple industrial devices; a back-end network interface connected via a communication channel to a central network core associated with the wireless communication network; and one or more auxiliary network functions for managing the multiple connections to the industrial devices. The central network core includes one or more network functions for managing the wireless communication network. The one or more auxiliary network functions are configured based on the one or more network functions of the central network core.

Description

Technical Field

[0001] This disclosure relates to wireless communication networks in industrial automation environments, including substation automation and process automation, and more particularly to the network functions of wireless communication networks. Background Technology

[0002] With the advent of 4G EPC and 5G communication technologies, most cellular networks include a central network core, which comprises multiple software-based network functions that regulate and manage various aspects of the wireless communication network. These network functions are responsible for the operation of the user plane and control plane. Summary of the Invention

[0003] This disclosure relates to wireless communication networks in industrial facilities and industrial automation environments. Wireless communication networks deployed in such facilities typically require mission-critical applications such as fault location and service recovery, thus necessitating ultra-low latency communication. This is often difficult or challenging because the radio units of distributed base stations are frequently located several kilometers away from the central unit of the distributed base station and the central network core of the wireless communication network. Communication between terminal devices located in different locations typically requires a communication loop including the central network core.

[0004] For example, for a user equipment (UE) used to communicate with another UE, both UEs must undergo an authentication process. Typically, the first UE (responsible for sending messages to the second UE) initiates the authentication process, and once the first UE is authenticated, data messages are sent from the first UE to the second UE via the network core. The network core then calls the second UE and also initiates authentication on the terminating side. After the second UE is authenticated, the message is delivered to the second UE. Therefore, this communication can suffer from significant end-to-end latency. For example, the average latency for registration is typically around 168 ms, which does not meet the latency requirements of mission-critical use cases (typically around 10 ms). Therefore, a device and method are needed to address the aforementioned problem.

[0005] Therefore, this disclosure describes a network device according to claim 1 and a method according to claim 10 that solve the above problems.

[0006] This disclosure describes a network device for connecting multiple industrial devices to a wireless communication network. The network device includes: a front-end radio interface capable of connecting to the multiple industrial devices via one or more wireless communication channels for transmitting and receiving data from the multiple industrial devices; a back-end network interface connected via a communication channel to a central network core associated with the wireless communication network; and one or more auxiliary network functions for managing multiple connections to these industrial devices. The central network core includes one or more network functions for managing the wireless communication network. The one or more auxiliary network functions are configured based on the one or more network functions of the central network core.

[0007] Therefore, this disclosure describes a network device including one or more auxiliary network functions that manage communication aspects of user equipment connected to the network device. Consequently, the responsibility of the central network core relative to the user equipment connected to the network device is reduced, as these aspects are now managed by the auxiliary network functions. Therefore, communication related to the user equipment does not include the latency associated with communication with the central network core. Therefore, the total latency regarding communication associated with the user equipment is reduced.

[0008] In the example, one or more auxiliary network functions are configured to operate independently of the connection to the central network core. Therefore, the auxiliary network functions can continue to function even if the connection to the central network core is interrupted. This improves reliability within the wireless communication network. In the example, one or more network functions include application functions configured to transmit user information and network policies between the central core and network-public functions from one or more auxiliary network functions. The network core is customized to allow easy configuration of the auxiliary network functions of network devices.

[0009] In the example, one or more auxiliary network functions are associated with access control and authentication of industrial equipment, user plane management, and sessions related to connections associated with the industrial equipment. Therefore, these aspects of communication related to industrial equipment connected to the network device are managed by one or more auxiliary network functions, minimizing or eliminating intervention from the central network core. Thus, by eliminating the connection to the central network from the loop, latency associated with these aspects of communication is reduced. In the example, the network device is one of a cellular base station and a distributed unit of a distributed base station. Therefore, when implemented in a distributed unit of a distributed base station, this auxiliary network function can be used without involving the central unit of the distributed base station.

[0010] In the example, a network public function from one or more auxiliary network functions is configured to receive a network access request from a new industrial device, send the request to the central network core, and receive one or more network configurations associated with the one or more auxiliary network functions regarding the new industrial device. Therefore, the network public function from one or more auxiliary network functions can extract all the necessary network configurations related to the new industrial device, enabling the new industrial device to be managed by the auxiliary network functions without involving the central network core.

[0011] In another example, the network public function is also configured to communicate with a second network public function of the second network device to receive user information from a second industrial device, wherein the second industrial device is connected to the second network device. In this example, the network device is configured to send information from the first industrial device connected to the network device to the second industrial device via the second network device using a first user plane existing between the network device and the second network device. In one example, the first user plane is not connected to the central network core. Therefore, the network device is configured to communicate with the second network device without including the central network core. Consequently, communication between the two user devices connected to the two network devices has relatively low latency.

[0012] On the other hand, this disclosure describes a method for connecting new industrial equipment to a wireless communication network via the network device mentioned above. The method includes: receiving a network access request from the new industrial equipment for connecting the new industrial equipment to the wireless communication network using a front-end radio interface via a wireless communication channel from one or more wireless communication channels; sending the network access request to a central network core of the wireless communication network via a back-end network interface; receiving a first network configuration associated with the new industrial equipment from the central network core; and updating one or more auxiliary network functions based on the first network configuration. The connection between the new industrial equipment and the network device is managed via one or more auxiliary network functions according to the first network configuration. The advantages of the network device also apply to this method. See also Figures 1-4 Let's explain these aspects further. Attached Figure Description

[0013] Figure 1 An example portion of a wireless communication network is shown, which includes network devices with one or more auxiliary network functions.

[0014] Figure 2 An exemplary network device is shown, including one or more auxiliary network functions for managing one or more industrial devices connected to the exemplary network device; and

[0015] Figure 3An exemplary method for connecting new industrial equipment to a wireless communication network using an exemplary network device is shown; and

[0016] Figure 4 Two exemplary network devices are shown connected to each other via a user plane. Detailed Implementation

[0017] Figure 1 A portion 100 of a wireless communication network for connecting multiple industrial devices to each other in an industrial facility is shown. Here, "industrial facility" refers to any environment where one or more industrial processes (such as manufacturing, refining, smelting, or equipment assembly; power generation; transmission or distribution of electricity; transportation) may take place. This includes processing plants, oil refineries, automobile factories, power plants, smart grids, substations, warehouses, etc. Multiple industrial processes and operations can be performed within a production unit using multiple devices (such as control devices, field devices, mobile devices, etc.) that coexist with the corresponding production unit. Control devices include process controllers, programmable logic controllers, supervisory controllers, automated guided vehicles (AGVs), robots, operator equipment, etc. One or more control devices are connected to multiple field devices (not shown), such as actuators and sensor devices for monitoring and controlling various industrial processes in the industrial facility. These field devices may include flow meters, numerical actuators, temperature sensors, pressure sensors, etc. Furthermore, the industrial facility includes multiple mobile devices (also referred to as mobile network devices), including one or more robots for performing multiple operations (such as welding, component assembly); one or more AGVs for transporting and handling materials; and one or more assets with RFID tags on conveyors, etc., within the industrial facility. In addition, industrial facilities may include operator stations for displaying the status of the industrial facility to operators and allowing operators to define KPIs for controlling industrial processes within the facility. All industrial equipment can be connected to each other via a factory network (achieved through wired and wireless technologies).

[0018] Communication within the aforementioned factory network is conducted via wired and wireless methods or technologies. Therefore, industrial facilities utilize wireless communication networks to enable communication between various devices within the industrial facility. Wireless networks are based on cellular technology and include multiple gateway devices or network devices. A gateway device, as defined herein, refers to one or more devices capable of connecting user equipment to a wireless network. Examples of gateway devices include base stations, routers, switches, repeaters, access points, etc. Multiple gateway devices may include fixed gateway devices, which may be fixed to multiple locations within the industrial facility. Multiple industrial devices within the facility connect to one or more gateway devices to connect to the wireless network and for transmitting information with other devices and systems within the industrial facility. Industrial devices include one or more industrial applications capable of processing data from other industrial devices.

[0019] An exemplary gateway device is the distributed unit 150 shown in the figure. The distributed unit 150 is a distributed base station, which further includes a radio unit 130, the distributed unit 150, and a central unit 180. The distributed unit 150 is connected to multiple radio units. For example, the distributed unit 150 is connected to radio unit 130. The distributed unit 150 can be considered a gateway device. The functions / responsibilities of the central unit 180 and the distributed unit (150) depend on the slicing options used in the implementation of the distributed base station. Industrial devices 110 and 120 use the distributed base station to connect to a wireless communication network. Furthermore, the wireless communication network includes a central network core 190, which includes multiple network functions 195, such as User Plane Function (UPF), Authentication Server Function (AUSF), Access and Mobility Function (AMF), Session Management Function (SMF), Network Exposure Function (NEF), etc.

[0020] In this document, network functions refer to software modules or executable code responsible for implementation and management, as specific network aspects related to wireless communication networks. In 5G, network functions are software modules decoupled from hardware and can execute on any network node. Each virtual function can be deployed on a separate machine or even in the cloud. Network functions and their related functionalities are known in the prior art and have similar meanings to those generally known.

[0021] AUSF provides authentication services for devices connecting to wireless communication networks. Similarly, UPF (User Plane Function) supports packet routing and forwarding, packet inspection, QoS processing, etc. Similarly, Unified Data Management (UDM) network functions are responsible for credential generation, user identification, access authorization, and subscription management. Similarly, Access and Mobility Management (AMF) functions manage connectivity and mobility and include a globally unique AMF identifier (GUAMI) used to identify AMF instances within 5G networks.

[0022] In addition to the central network core, the distributed unit 150 includes one or more additional auxiliary network functions (155) that can coordinate with the network functions of the central network core 190 to manage industrial equipment connected to corresponding network devices. See further details. Figure 2 To explain.

[0023] Figure 2 An exemplary network device 200 is shown, which includes one or more auxiliary network functions 225 for managing one or more industrial devices (e.g., industrial device 110) connected to the exemplary network device 200. In one example, the network device 200 is a distributed unit of a cellular base station and a distributed base station.

[0024] An exemplary network device 200 includes a front-end network interface 210 for connecting the network device 200 to industrial equipment within its radio range. In one example where the network device 200 is a distributed unit 150, the front-end radio interface 210 includes or is configured to coordinate with radio unit 130 to connect to the industrial equipment. The front-end radio interface 210 includes a wireless protocol stack for communicating with the industrial equipment. The front-end radio interface 210 may also include a wired protocol stack for communicating with the radio unit. The network device 200 is configured to send and receive data from the industrial equipment using the front-end network interface 210. In this example, the front-end network interface 210 includes a 5G radio user data protocol stack based on MAC-radio link control layer, packet data convergence protocol, service data adaptation protocol, etc.

[0025] Furthermore, network device 200 includes a back-end network interface 230 for connecting to a central network core. The back-end network interface 230 includes one or more wired or wireless network interfaces for communicating with the central network core 190. In this example, the back-end network interface is based on a 5G GPRS tunneling protocol user plane for data communication between the CU and UPF of the network device. In the example where the network device is a distributed unit 150, communication with the central network core 190 is via a central unit 180. Therefore, network device 200 is configured to communicate with one or more network functions 195 of the central network core 190. Network device 200 is configured to receive various network configurations from the various network functions 195 of the central network core 190 for the operation of its network aspects and the operation of industrial equipment connected thereto.

[0026] In addition, network device 200 includes one or more auxiliary network functions 225 for managing multiple connections to industrial equipment. The one or more auxiliary network functions 225 are similar to one or more network functions 195 of the central network core 190. The one or more auxiliary network functions are associated with access control and authentication of industrial equipment, user plane management, and sessions related to connections associated with industrial equipment. The one or more network functions 195 of the central network core 190 are configured to forward network configuration and control information associated with one or more user devices connected to network device 200 to the one or more auxiliary network functions 225. Based on the received network configuration and control information associated with one or more user devices, the one or more auxiliary network functions are configured to manage the user devices. The auxiliary network functions are installed as software modules in network device 200 and manage the control plane and user plane between network device 200 and the one or more user devices connected to network device 200. Therefore, the auxiliary network functions are implemented by one or more processors 220.

[0027] In the example, one or more auxiliary network functions include Network Exposure Functions (NEF), Session Management Functions (SMF), Authentication Server Functions (AUSF), Unified Data Management Functions (UDM), User Plane Functions (UPF), etc. The NEF from one or more auxiliary functions acts as an interface between the central network core's network functions and other auxiliary network functions, configuring local core functions and reporting local information to the central network core. Similarly, dedicated Application Network Functions (AFs) are implemented in the central network core to coordinate with one or more auxiliary network functions. For example, to establish a PDU session between a network device and the central network core's User Plane Function, coordination is performed between the local SMF of one or more auxiliary network functions and the SMF of the central network core via the local NEF and application functions of one or more auxiliary network functions. Furthermore, the application network functions are responsible for transmitting user information, security information, and network configuration and policies between the central network core and one or more auxiliary network functions. The application network functions also retrieve performance and maintenance data from one or more auxiliary network functions.

[0028] Therefore, in this way, network devices include the necessary functions of the central network core via one or more auxiliary network functions, allowing the network devices to function as semi-independent micronetworks (along with the user equipment connected to them) without being fully dependent on the central network core. This allows for local management control and user data, as well as internal micronetwork communication, at the network device without involving the central core network. This helps reduce control plane latency, and inter-device communication under the network device will benefit from very short latency because admission control and user plane establishment also occur locally. For example, industrial devices 110 and 120 may be able to communicate with each other via network device 200 without forming a loop through the central network core 190. By reducing session establishment and authentication time, the latter can be performed every time data is transmitted, which corresponds to a significant increase in the level of wireless communication security. This coordination between one or more network functions and one or more auxiliary network functions is explained using an example as shown below regarding device authentication. Although the above method has been illustrated using a distributed unit that includes auxiliary functions, auxiliary functions can be implemented on both the distributed unit and the central unit. Therefore, network device 200 may include both a distributed unit and a central unit.

[0029] For example, independent of the identification method, all user equipment (UE) has a subscription identifier associated with the central network core, such as the International Mobile Subscriber Identity (IMSI). In this example, a UE is already provided at the central core and has not yet interfaced with a micronet associated with network device 200. When the UE connects to network device 200 and sends its first registration request (i.e., UE network access), the local AUSF function sends the request to the central network core's AUSF function via the local network public function and the central network core's application function. Thus, the local AUSF function acts as a proxy for the central network core's AUSF. The UE is authenticated via the central network core's AUSF. Then, the AF sends configuration data to network device 200, enabling local management of other UE access at network device 200. See below. Figure 3 This explains the configuration data and network access method.

[0030] Figure 3 A method 300 for connecting a new industrial device to a wireless communication network via a network device 200 is illustrated. In step 310, the network device 200 receives a network access request from the new industrial device to connect the new industrial device to the wireless communication network using a front-end radio interface 210 via a wireless communication channel from one or more wireless communication channels.

[0031] Then, in step 320, network device 200 sends a network access request to the central network core of the wireless communication network via backend network interface 230. Upon receiving this request, if the new industrial device has previously been authenticated by network device 200, the local AUSF function from one or more auxiliary network functions 225 performs an evaluation. Since the new industrial device has not yet joined the network, the local AUSF does not have a record of the new industrial device and accordingly sends a network access request to the central network core via the local network public function. The application function of the central network core receives the network access request and passes it to the AUSF function in one or more network functions of the central network core. The AUSF function authenticates the network access request. Once the new industrial device is authenticated, the relevant network configuration, including security policies and control information, is extracted by the application function from one or more network functions of the central network core and sent to the network public function of one or more auxiliary network functions. For example, the Subscription Permanent Identifier (SUFI), authentication key, security policy associated with the industrial device, maximum QoS associated with the industrial user equipment, and IP range associated with the industrial device are sent from the application function to the auxiliary network function.

[0032] Then, in step 330, network device 200 receives a first network configuration associated with the new industrial device from the central network core. As described above, the application functions of the central network core are configured to extract the network configuration associated with the industrial device from one or more network functions. The network configuration in this document refers to one or more network aspects associated with the industrial device and includes security policies, authentication keys, quality of service requirements associated with the industrial device (such as maximum and minimum bandwidth, IP range, etc.), redundancy policies, etc. Finally, in step 340, network device 200 updates one or more auxiliary network functions based on the first network configuration. Based on the first network configuration, one or more auxiliary network functions are updated with the network configuration of the industrial device. For example, the local AUSF of one or more auxiliary network functions is updated to store the authentication key and security policy associated with the industrial device. Therefore, the connection between the new industrial device and the network device is managed by one or more auxiliary network functions according to the first network configuration. For example, the QoS policy based on the first network configuration defines the bandwidth of the connection between the network device and the industrial device. Furthermore, after configuration, one or more auxiliary network functions are configured to operate independently of the connection with the central network core.

[0033] Although this disclosure has described a single network device with one or more auxiliary network functions, multiple such network devices can be used in industrial facilities. Therefore, such network devices, each with its own micronetwork, can communicate with each other without forming a loop through a central network core. This will combine... Figure 4 Further explanation is needed.

[0034] Figure 4 Two network devices 450 and 460 are shown connected to each other via a user plane 470. The user plane 470 is independent of the network core 190. Network device 450 is a distributed unit and is connected to industrial device 410 via radio unit 430. Similarly, network device 460 is a distributed unit and is connected to industrial device 420 via radio unit 440. The user plane 470 extends between industrial devices 410 and 420. Therefore, communication between industrial devices 410 and 420 occurs on the user plane 470. Because the user plane 470 is independent of the central network core 490, communication between industrial devices 410 and 420 has reduced latency, as the central network core does not form loops in the communication between industrial devices 410 and 420. Therefore, the establishment and management of the connection between industrial devices 410 and 420 are performed by the auxiliary network functions of network devices 450 and 460. Therefore, in order to establish a user plane, the user plane function of network device 450 is connected to the user plane function of network device 460 to send and receive data between industrial devices 410 and 420.

[0035] In the example, network devices 450 and 460 can support handover between devices. For example, industrial device 420 can move from the radio range of network device 460 to the radio range of network device 450. Therefore, the NEF of network device 450 is configured to communicate with the NEF of network device 460 to receive user information from the second industrial device. For example, the NEF of network device 460 is configured to extract authentication information from the AUSF of network device 460 and send that authentication information to the NEF of network device 450. Other such network configuration information can be transmitted from network device 460 to network device 450. Thus, the latency of this handover is improved by eliminating the overhead associated with communication with the central network core.

[0036] It should be noted that although the above disclosure has explained network devices, the methods described can be implemented in another device or multiple devices. For example, method 200 can be implemented in an edge server. Therefore, this disclosure can take the form of a computer program product comprising program modules accessible from a computer-usable or computer-readable medium storing program code used by or in connection with one or more computers, processing units, or instruction execution systems. Thus, the network device includes a memory module or non-transitory storage medium comprising instructions for implementing auxiliary network functions 225 using processor 220.

[0037] For the purposes of this specification, a computer-usable or computer-readable non-transitory storage medium can be any means that can contain, store, transmit, propagate, or deliver a program for use by or in conjunction with an instruction execution system, apparatus, or device. Such a medium can be electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system (or apparatus or device) or a propagation medium. Propagation media, including those in which the medium itself acts as a signal carrier, are not included in the definition of a physical computer-readable medium, which includes semiconductor or solid-state memory, magnetic tape, removable computer disks, random access memory (RAM), read-only memory (ROM), rigid disks, and optical disks (such as CD-ROM, optical disk read / write, and DVD). The processing units and program code used to implement each aspect of this technology can both be centralized or distributed (or a combination thereof), as known to those skilled in the art.

[0038] In view of this disclosure, many modifications and variations will appear to those skilled in the art without departing from the scope of the various embodiments of this disclosure as described herein. Therefore, the scope of this disclosure is defined by the appended claims, not by the foregoing description. All changes, modifications, and variations falling within the meaning and scope of equivalents of the claims are considered to be within their scope. All advantageous embodiments claimed in the method claims can also be applied to the device / non-transitory storage medium claims.

Claims

1. A network device (200) for connecting a plurality of industrial devices (110, 120) to a wireless communication network, the network device (200) comprising: a. a front-end radio interface (210) connectable to the plurality of industrial devices (110, 120) over one or more wireless communication channels for transmitting data to and receiving data from the plurality of industrial devices (110, 120); b. a back-end network interface (230) connected over a communication channel to a central network core associated with the wireless communication network, the central network core comprising one or more network functions for managing the wireless communication network; and c. one or more auxiliary network functions (225) for managing a plurality of connections with the industrial devices (110, 120); wherein the one or more auxiliary network functions (225) are configured based on the one or more network functions of the central network core, wherein the auxiliary network functions (225) are installed as software modules in the network device (200) and manage a control plane and a user plane between the network device (200) and the industrial devices connected to the network device (200), wherein a network exposure function from the one or more auxiliary network functions (225) is configured to receive an onboarding request from a new industrial device, to transmit the onboarding request to the central network core and to receive one or more network configurations associated with one or more auxiliary network functions (225) related to the new industrial device from the central network core, wherein once the new industrial device is authenticated, a first network configuration comprising security policies and control information is extracted by an application function from the one or more network functions of the central network core and transmitted to the network exposure function of the one or more auxiliary network functions, wherein the network exposure function is configured to receive the first network configuration associated with the new industrial device from the central network core and wherein the network device (200) is configured to update the one or more auxiliary network functions based on the first network configuration.

2. The network device (200) according to claim 1, wherein The one or more auxiliary network functions (225) are configured to operate independently from a connection to the central network core.

3. The network device (200) of claim 1, wherein, The one or more auxiliary network functions (225) are associated with an admission control and authentication of the industrial devices (110, 120), a management of a user plane and a session related to a connection associated with the industrial devices (110, 120).

4. The network device (200) of claim 1, wherein, The network device (200) is one of a cellular base station and a distributed unit of a distributed base station.

5. The network device (200) of claim 1, wherein, The network device (200) is configured to transmit information from a first industrial device connected to the network device (200) to a second industrial device via a second network device using a first user plane (470) existing between the network device (200) and the second network device (460).

6. The network device (200) according to claim 5, wherein The first user plane (470) is not connected to the central network core.

7. The network device (200) of claim 1, wherein, The network exposure function is further configured to communicate with a second network exposure function of a second network device (460) for receiving user information of a second industrial device, wherein the second industrial device is connected to the second network device (460).

8. A method (300) for connecting a new industrial device to a wireless communication network by a network device (200) comprising one or more auxiliary network functions (225), the method (300) comprising: a. receiving (310) an onboarding request from the new industrial device for connecting the new industrial device to the wireless communication network using a front-end radio interface (210) over a wireless communication channel from one or more wireless communication channels, wherein a network exposure function from the one or more auxiliary network functions (225) is configured to receive the onboarding request from the new industrial device; b. sending (320) the onboarding request to a central network core of the wireless communication network over a back-end network interface (230), the central network core comprising one or more network functions for managing the wireless communication network, wherein the network exposure function is configured to send the onboarding request to the central network core; c. receiving (330) a first network configuration associated with the new industrial device from the central network core, wherein the network exposure function is configured to receive one or more network configurations associated with one or more auxiliary network functions (225) related to the new industrial device; and d. updating (340) the one or more auxiliary network functions (225) based on the first network configuration, wherein the first network configuration comprising security policies and control information is extracted and sent to the network exposure function from the one or more network functions of the central network core by an application function once the new industrial device is authenticated, wherein the network exposure function is configured to receive the first network configuration associated with the new industrial device from the central network core and update the one or more auxiliary network functions based on the first network configuration; wherein the connection between the new industrial device and the network device (200) is managed by the one or more auxiliary network functions (225) according to the first network configuration.

9. The network device (200) of claim 8, wherein the network exposure function is further configured to: a. receive (410) a second network configuration associated with the new industrial device from the central network core, wherein the network exposure function is configured to receive one or more network configurations associated with one or more auxiliary network functions (225) related to the new industrial device; and b. update (420) the one or more auxiliary network functions (225) based on the second network configuration, wherein the second network configuration comprising security policies and control information is extracted and sent to the network exposure function from the one or more network functions of the central network core by an application function once the new industrial device is authenticated, wherein the network exposure function is configured to receive the second network configuration associated with the new industrial device from the central network core and update the one or more auxiliary network functions based on the second network configuration.

10. The network device (200) of claim 9, wherein the network exposure function is further configured to: a. receive (510) a third network configuration associated with the new industrial device from the central network core, wherein the network exposure function is configured to receive one or more network configurations associated with one or more auxiliary network functions (225) related to the new industrial device; and b. update (520) the one or more auxiliary network functions (225) based on the third network configuration, wherein the third network configuration comprising security policies and control information is extracted and sent to the network exposure function from the one or more network functions of the central network core by an application function once the new industrial device is authenticated, wherein the network exposure function is configured to receive the third network configuration associated with the new industrial device from the central network core and update the one or more auxiliary network functions based on the third network configuration.

Images