Control Container Security for Software-Defined Process Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current industrial process control systems are inflexible and hardware-centric, leading to increased costs and complexity in initial engineering and change management, as well as cost overruns and supply-chain delays due to dependence on purpose-built hardware.
Innovation Solution
A software-defined process control system (SDCS) that decouples software and hardware, implementing business logic as logical abstractions on top of computer resources and dynamically managing resources through a hyper-converged infrastructure, including a software-defined networking layer, application layer, and storage layer, to support dynamic demands and conditions in real-time.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If purpose-built hardware is used in traditional process control systems, then system reliability is improved, but device complexity and cost increase
Solution Approach 1:
The patent creates virtual copies of control functions through software-defined networking (SDN) controllers that replicate hardware-based control logic in virtualized environments. Virtual network functions (VNFs) and virtual machine instances serve as software copies of traditional hardware controllers, enabling the same control operations to be performed in both hardware and virtualized forms, thus maintaining reliability while reducing hardware complexity.
Solution Approach 2:
The patent replaces physical hardware controllers with software-based virtualized control systems. The SDN controller and virtual machine instances substitute for traditional hardware-based process controllers, eliminating the need for dedicated hardware while maintaining control functionality through software implementations that can be dynamically managed and deployed.
2Stability of the object's composition
If purpose-built hardware is used in traditional process control systems, then system stability is improved, but adaptability deteriorates
Solution Approach 1:
The patent implements dynamic adaptability through virtualized control systems that can be reconfigured in real-time. The SDN controller dynamically manages virtual machine instances and network functions, allowing the system to adapt to changing process requirements by spawning, migrating, or terminating virtual control functions as needed, while the underlying hardware remains stable and unchanged.
Solution Approach 2:
The patent creates a universal control platform where a single hardware infrastructure supports multiple control functions through virtualization. The same physical servers and network equipment can host different virtual machine instances running various control algorithms and protocols, making the system universally applicable to different process control scenarios without requiring dedicated hardware for each function.
3Manufacturing precision
If manual intervention is required for system changes, then control precision is improved, but productivity deteriorates
Solution Approach 1:
The patent implements self-service automation through the SDN controller that automatically manages the lifecycle of virtual control functions. The system autonomously handles configuration, deployment, monitoring, and fault recovery of virtual machine instances without requiring manual operator intervention, thereby maintaining control precision through automated validation while dramatically improving productivity through rapid provisioning and reconfiguration capabilities.
4Measurement precision
If hardware-centric architecture is used, then measurement precision is improved, but ease of operation deteriorates
Solution Approach 1:
The patent introduces a software intermediary layer (SDN controller and virtualization platform) between the hardware infrastructure and control functions. This intermediary maintains precise measurement capabilities through virtualized sensor interfaces and data collection, while simultaneously improving ease of operation by providing centralized management, automated configuration, and simplified access to control functions through software interfaces rather than direct hardware manipulation.
Data Source
AI summary
A software defined (SD) process control system (SDCS) includes a control container having contents which are executable during run-time of the process plant to control at least a portion of an industrial process. The SDCS also includes a security service associated with the control container and including contents which define one or more security conditions. The security service executes via a container on a compute node of the SDCS to control access to and/or data flow from the control container based on the contents of the security container.