Digital Twin Containers for OT Firmware Switchover Without Downtime
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing industrial control systems in operational technology (OT) environments lack efficient methods for updating devices without causing downtime or disrupting operations, and there is a need for improved management tools to facilitate firmware updates and disaster recovery in OT networks.
Innovation Solution
Implementing parallel containers, one as a digital twin, to test firmware updates in a sandbox environment, ensuring smooth switchover and enabling disaster recovery by distributing workload functions across multiple containers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If firmware updates are applied directly to operational OT devices, then device functionality is improved, but device downtime and operational disruptions increase
Solution Approach 1:
The patent applies preliminary action by implementing a digital twin container that replicates the operational technology device before firmware updates are applied. The digital twin serves as a sandbox environment where firmware updates can be tested and validated in advance, allowing the system to prepare update sequences and verify compatibility without disrupting actual device operations. This preliminary testing phase eliminates the need for downtime during production updates.
Solution Approach 2:
The patent employs copying by creating a digital twin - a virtual replica of the operational technology device. This copy allows firmware updates to be tested and validated in an identical environment without affecting the actual device. The digital twin container mirrors the device's behavior and responses, enabling safe update verification before deployment to production systems, thereby eliminating operational disruptions.
2Reliability
If firmware updates are tested in production environment, then update reliability is improved, but operational disruptions increase
Solution Approach 1:
The patent introduces an intermediary - the digital twin container - that mediates between firmware development/testing and actual production deployment. This intermediary environment provides realistic operational conditions for testing update reliability while isolating production systems from disruptions. The digital twin acts as a buffer that validates firmware behavior without impacting actual device productivity or operational continuity.
3Reliability
If parallel containers are used for firmware testing, then update safety is improved, but system complexity increases
Solution Approach 1:
The patent applies universality by designing the digital twin container to serve multiple functions simultaneously: it replicates device behavior for testing, validates firmware updates, simulates operational responses, and provides a safe deployment environment. This multi-functional approach consolidates what would otherwise require multiple separate systems into a single versatile container, reducing overall system complexity while maintaining update safety.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
A method may include receiving an indication of an available updated container. The method may also involve identifying one or more compute surfaces comprising a first container and a second container that correspond to the available container, such that the first container may control one or more operations of an operational technology (OT) device. The method may also include scheduling a deployment of the updated container to replace the second container, receiving expected output data associated with a digital model associated with the OT device, and scheduling a switchover of control of the one or more operations to the second container based on the expected output data.