Digital Twin Code Servicing for Secure Asset Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Service technicians in industrial automation systems often lack secure access to critical asset-related data, such as code and firmware, which hinders effective servicing and error resolution.
Innovation Solution
Implementing a system that utilizes Digital Twins and a common data pipeline for secure access to asset-related data, enabling remote monitoring, control, and maintenance through connected microservices for enhanced data security and analysis.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If service technicians are granted access to asset-related data and code, then effective servicing and error resolution is enabled, but data security and confidentiality are compromised
Solution Approach 1:
The patent implements a data pipeline with intermediary components including a data publisher, data pipeline, and data subscriber that enable controlled data flow. Service technicians access asset data through this intermediary pipeline rather than direct access, allowing security policies to be enforced at each stage while maintaining data confidentiality and integrity
Solution Approach 2:
The system segments data access into different levels and types through the data pipeline architecture. Different subscribers can access different portions of data based on their service needs, while the publisher controls what data is made available. This segmentation enables selective access that balances service requirements with security constraints
2Productivity
If code is optimized using simulations and virtual instances, then code performance and efficiency are improved, but system complexity and computational resources increase
Solution Approach 1:
The patent creates virtual instances and digital twins as copies of physical assets to run simulations. These virtual copies allow code optimization to be performed in a simulated environment without affecting the actual asset, enabling performance improvements while isolating the complexity of simulation infrastructure from production systems
Solution Approach 2:
The system performs code optimization through simulations before deploying code to actual assets. By conducting preliminary optimization in virtual instances, the system improves code efficiency in advance, reducing the need for complex real-time adjustments and minimizing the computational burden during actual asset operation
3Productivity
If remote access to asset data is enabled, then service operations efficiency is improved, but data transmission security and network vulnerability increase
Solution Approach 1:
The data pipeline acts as a secure intermediary between remote service systems and asset data. All data transmissions pass through this controlled pipeline with built-in security measures including authentication, authorization, and data encryption, enabling efficient remote access while mitigating network vulnerabilities
Solution Approach 2:
The system creates a secure, isolated data transmission environment through the data pipeline that protects against external network threats. The pipeline establishes a controlled communication channel that shields asset data from network vulnerabilities and harmful factors while still enabling remote service operations
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
A non-transitory computer-readable medium includes instructions that, when executed, cause one or more processors to perform operations. The operations include receiving a first request to access a digital representation that is assigned to an asset of an industrial automation system and includes code specific to operating, maintaining, or diagnosing the asset. The operations also include verifying a security access for the first request, providing the computing device access to the digital representation, receiving an input to modify the code from the computing device and, performing one or more simulations based on the modified code by utilizing the digital representation. Additionally, the operations include sending one or more simulation results to the computing device, receiving, from the computing device, a second request for pushing the modified code to the asset, and in response to receiving the second request, causing the modified code to be sent to the asset