Containerized Firmware for Edge Control in OT Networks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Industrial automation systems face limitations in control operations and bandwidth usage within operational technology (OT) networks, particularly when communicating with information technology (IT) networks, leading to inefficiencies in data transmission and processing.

Innovation Solution

Implementing software containers within industrial automation devices to execute control operations, receive data, and determine control actions, thereby reducing latency and expanding device capabilities, including data analysis, without modifying existing hardware.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of information

If data is transmitted between OT network and IT network for analysis, then data analysis capability is improved, but bandwidth usage increases

Engineering Contradiction:
Improvedata analysis capabilityVSAvoidbandwidth usage
Core Design Contradiction:
Loss of informationVSQuantity of substance

Solution Approach 1:

A gateway device is introduced as an intermediary between the OT network and IT network. The gateway executes firmware as a service that performs data analysis locally at the network edge, eliminating the need to transmit large volumes of raw data to remote IT systems while still providing analytical capabilities.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent moves data processing from the traditional centralized IT network dimension to the distributed OT network edge dimension. By implementing firmware as a service directly in the OT network environment, the system provides analytical capabilities locally without requiring extensive data transmission across network boundaries.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Adaptability or versatility

If firmware is updated traditionally, then device functionality is improved, but device complexity increases

Engineering Contradiction:
Improvedevice functionalityVSAvoidfirmware update complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The gateway device is designed to execute multiple different firmware images dynamically, allowing a single device to perform multiple functions. The gateway can load and execute firmware for different protocols, devices, or functionalities as needed, rather than requiring separate dedicated devices for each function.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The firmware update mechanism is made dynamic through the use of containers. Firmware is packaged in container formats that can be easily deployed, updated, and removed. The gateway can dynamically load new firmware containers without requiring complex reconfiguration or system reboots, enabling flexible and rapid functionality changes.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentEP4343463A1Automation device firmware as a service via a container implementation
Publication Date: 2024.03.27 ROCKWELL AUTOMATION TECH INC
  • EP4343463A1 patent drawingFigure 1
  • EP4343463A1 patent drawingFigure 2
  • EP4343463A1 patent drawingFigure 3

AI summary

An industrial automation device includes processing circuitry and a non-transitory computer-readable medium that includes instructions that, when executed by the processing circuitry of the industrial automation device, cause the processing circuitry to execute a software container and receive, at the software container, data from one or more industrial automation devices communicatively coupled to the industrial automation device. The instructions, when executed, also cause the processor to determine, using the software container, one or more control operations for the industrial automation device or the one or more industrial automation devices based on the data. Furthermore, the instructions, when executed, cause the processor to cause the industrial automation device to perform the one or more control operations or send the one or more control operations to the one or more industrial automation devices.