Chemical Plant Data Layering for Secure Cloud Integration

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Chemical production plants face challenges in leveraging data for increased efficiency due to high security standards that restrict migration to cloud computing systems, necessitating a scalable and secure infrastructure for data handling and integration with external systems.

Innovation Solution

A system with multiple processing layers, including a secure first layer for data generation and a second layer for contextualization and integration with an external layer, using transfer tags to manage data flow and ensure security, allowing seamless integration with external systems while maintaining high security standards.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If cloud computing systems are used for data processing, then data handling efficiency and scalability are improved, but security standards are compromised

Engineering Contradiction:

Improvedata handling efficiencyVSAvoidsecurity standards

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The system is divided into multiple processing layers (first processing layer for data generation, second processing layer for contextualization, external processing layer for advanced analytics). Each layer operates with appropriate security clearances, allowing cloud-based processing in external layers while keeping sensitive data generation and control in secure internal layers.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A second processing layer acts as an intermediary between the secure first processing layer and the external third processing layer. This intermediary layer contextualizes data and manages transfer tags, enabling secure communication between isolated systems and external cloud resources without direct exposure.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If embedded control systems are migrated to cloud computing, then scalability is improved, but latency and availability are worsened

Engineering Contradiction:

ImprovescalabilityVSAvoidlatency

Core Design Contradiction:

Adaptability or versatilityVSSpeed

Solution Approach 1:

Control functions are segmented between edge devices (first processing layer) that handle real-time control with low latency, and cloud-based external processing layers that provide scalable analytics and long-term data processing. This segmentation allows each layer to operate at optimal speeds for its specific function.

Inventive Principle:

Principle #1Segmentation

3Reliability

If restrictive access control is implemented, then security is improved, but system integration flexibility is worsened

Engineering Contradiction:

ImprovesecurityVSAvoidintegration flexibility

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system uses transfer tags with configurable security parameters (confidentiality settings, third-party transfer settings) that can be dynamically adjusted. This allows the same data structure to be used across different security contexts, maintaining integration flexibility while enforcing appropriate security controls through parameter-based access management.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS20250258482A1Manufacturing system for monitoring and/or controlling one or more chemical plant(s)

Publication Date: 2025.08.14 BASF SE

AI summary

A system (10) for monitoring and/or controlling one or more chemical plant(s) (12) including at least one processing layer (14, 16, 32, 34), wherein the at least one processing layer (14, 16, 32, 34) is associated with a secure network (20) and communicatively coupled to an interface (26) for providing process or asset specific data or process applications to an external processing layer (30), wherein the at least one processing layer (14, 16, 32, 34) is configured to add a transfer tag to the process or asset specific data or to the process application and to provide the process or asset specific data or the process application based on the transfer tag.