IoT Edge Appliance Architecture for Secure SCADA-Cloud Integration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current distributed systems architectures (DSAs) face challenges in efficiently integrating Internet of Things (IoT) edge appliances with industrial process control and automation systems, particularly in enabling secure and scalable communication between on-premise devices and cloud networks for SCADA and DCS systems over long distances.
Innovation Solution
The implementation of an IoT edge appliance with a distributed systems architecture (DSA) that facilitates communication between on-premise devices and an IoT cloud network, utilizing a platform-independent global data access scheme for periodic and asynchronous data access, alarms, and events, while ensuring data coherency and security through encryption and certificate-based authentication, allowing for the integration of big data storage and analytics.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a cloud gateway is used to collect and transform industrial data, then data can be sent to cloud platforms for analysis, but additional infrastructure and devices are required
Solution Approach 1:
The patent combines the cloud gateway functionality directly into the edge appliance, merging data collection, transformation, and cloud communication capabilities into a single integrated device. This eliminates the need for separate cloud gateway infrastructure while maintaining all necessary cloud connectivity functions.
Solution Approach 2:
The edge appliance is designed with multi-functional capabilities, serving as both an industrial control device and a cloud communication gateway. It can collect data from process control systems, transform the data, and communicate with cloud platforms, thereby performing multiple functions that previously required separate devices.
2Adaptability or versatility
If distributed systems architecture is implemented over long distances, then SCADA and DCS systems can be scaled out, but communication security and data coherency become challenging
Solution Approach 1:
The edge appliance acts as an intermediary device between the industrial control systems and the cloud network. It implements security protocols and data transformation functions that ensure secure communication and maintain data coherency across the distributed system, addressing security challenges while enabling system scalability.
3Ease of operation
If cloud-based data collection is implemented, then industrial systems can be monitored remotely, but communication disruptions can cause data loss
Solution Approach 1:
The edge appliance incorporates local storage capabilities that serve as a buffer or cushion against communication disruptions. Data can be stored locally at the edge appliance and later transmitted to the cloud when communication is restored, preventing data loss during network outages and ensuring data continuity.
4Adaptability or versatility
If multiple protocols are supported for device integration, then system compatibility improves, but processing complexity increases
Solution Approach 1:
The edge appliance serves as a protocol translation intermediary, converting between different industrial protocols and standardized cloud communication protocols. This intermediary function enables multi-protocol support while managing processing complexity within the edge appliance rather than requiring complex protocol handling across the entire distributed system.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An internet of things (IoT) edge appliance (160) is configured to perform a method that includes receiving (305) a configuration signal to configure the IoT edge appliance (160) to communicate with at least one of a first device (164) on the cloud network (162) or a second device (102a) on the industrial process control and automation system network (104). The method also includes configuring (310) a communication link with a cloud network (162) and an industrial process control and automation system network (104). The method further includes communicating (315) data with the at least one of the first device (164) on the cloud network (162) or the second device (102a) on the industrial process control and automation system network (104).