Virtualized Compute Fabric for Secure Low-Latency Process Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current industrial control systems face challenges in achieving desired security levels due to complex infrastructure requirements and incompatibilities between operational technology (OT) and information technology (IT) networks, leading to insecure data transfer practices and increased latency when integrating cloud-based components, which complicates security and communication within the Purdue model.
Innovation Solution
A new process control and automation system architecture that implements a shared, virtualized compute fabric, allowing for robust and secure communication between physical devices and IT infrastructure, bypassing the traditional Purdue model by using containerized components and virtual private networks to manage and secure data transmission across different levels of the system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional Purdue model architecture is used with separate OT and IT networks, then security isolation is maintained, but system complexity and integration difficulty increase
Solution Approach 1:
The patent merges OT and IT networks into a unified network infrastructure, eliminating the need for separate network stacks and reducing system complexity while maintaining security through virtualization and software-defined networking approaches
2Adaptability or versatility
If cloud-based components are integrated into traditional control systems, then scalability and flexibility improve, but latency and security concerns increase
Solution Approach 1:
The patent introduces a new architectural dimension by implementing edge computing capabilities that process data locally near the control system, reducing latency while maintaining cloud connectivity for scalability and flexibility
Solution Approach 2:
The patent employs edge devices and local gateways as intermediaries between cloud-based components and the control system, enabling scalable cloud integration while minimizing latency through localized processing
3Adaptability or versatility
If cloud-based components are integrated into traditional control systems, then adaptability improves, but security complexity increases
Solution Approach 1:
The patent extracts security management functions from the complex distributed architecture and consolidates them into centralized security orchestration and policy management systems, simplifying the security architecture while maintaining flexibility
4Reliability
If dedicated process controllers are used in plant environment, then real-time control reliability is maintained, but system adaptability and remote management capability decrease
Solution Approach 1:
The patent replaces traditional hardware-based controllers with software-defined control systems that run on virtualized platforms, enabling real-time control performance while providing enhanced adaptability and remote management capabilities through software configuration and cloud connectivity
Data Source
AI summary
A process plant and industrial control system architecture includes a generalized compute fabric that is agnostic or indifferent to the physical location at which the compute fabric is implemented, includes one or more physical control or field devices located at one or more specific sites at which a product or process is being manufactured and further includes a transport network that securely provides communications between the compute fabric and the pool of physical devices. The compute fabric performs various control, monitoring, diagnostics, simulation, and configuration activities with respect to a plurality of devices at the one or more specific sites.