Control Logging Architecture for Secure Factory Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current control devices in factory automation only monitor data communicated with instruments connected to the network and store it in a ring buffer, failing to provide a configuration for acquiring information related to the control of the monitoring operation, which is essential for secure communication logging and analysis.
Innovation Solution
A control device with a first logging unit for secure communication and a second logging unit for logging control operation information, along with a storage medium interface for external storage, allowing secure communication logs to be stored separately from control operation logs, enabling secure communication logging and control operation logging without interrupting the control process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If a single logging unit is used to monitor communication data, then the device complexity is reduced, but the ability to provide detailed analysis information including control operation context is insufficient
Solution Approach 1:
The patent divides the logging function into two separate logging units: a first logging unit that logs communication data and a second logging unit that logs control operation information. This segmentation allows each unit to specialize in specific types of information, ensuring comprehensive logging coverage while maintaining clear functional separation and reducing information loss.
2Productivity
If logging operations are performed using existing ring buffer configuration, then the implementation is simple, but the control process may be interrupted and detailed control operation context cannot be captured
Solution Approach 1:
The patent separates communication data logging from control operation logging into different units and storage locations. The first logging unit handles communication data while the second logging unit captures control operation information including timing and contextual details, allowing both to operate independently without interrupting the control process.
Solution Approach 2:
The control operation information logged by the second logging unit acts as an intermediary that provides contextual framework for analyzing communication data. This intermediary logging mechanism captures timing and operational context without interfering with the primary control process, enabling detailed analysis while maintaining continuity.
3Ease of operation
If all logged information is stored in a single storage location, then the storage management is simplified, but the ability to provide separate analysis of communication and control data is reduced
Solution Approach 1:
The patent implements separate storage locations for different types of logged information: communication data is stored by the first logging unit while control operation information is stored by the second logging unit. This segmentation enables independent retrieval and analysis of each data type while maintaining simplified storage management through clear organizational structure.
Data Source
AI summary
A control device performs logging of information related to communication with an instrument and logging of information related to control of the logging operation. The control device includes: a first connector that connects a first network to which a control target belongs; a second connector that connects a second network to which an external instrument belongs; a control arithmetic unit that executes control arithmetic processing using data related to the control target, a communication unit that exchanges the data with the external instrument by secure communication through the second network; a first logging unit that logs information related to the secure communication performed by the communication unit; and a second logging unit that logs information related to control of a logging operation of the first logging unit.