Isolated Network Data Replication via Gateway Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
SCADA systems in isolated networks face challenges in data replication due to cybersecurity restrictions, limiting access to critical data for users outside the network, and existing replication tools lack flexibility in data selection, mapping, and timing, which hinders efficient data sharing across corporate networks.
Innovation Solution
A computer-implemented method using .NET console applications to map PI tags, read and concatenate data from an isolated network, generate a replicated data package, and transmit it through a firewall to a corporate network, allowing for flexible data replication, customization, and scheduling without altering network security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If data replication is enabled from isolated network to corporate network, then data accessibility for users is improved, but network security is compromised
Solution Approach 1:
A gateway server is introduced as an intermediary between the isolated process control network and the corporate network. The gateway receives data from the isolated network, stores it locally, and makes it accessible to corporate network users without requiring direct network connections. This mediator approach enables data sharing while maintaining network security boundaries.
2Productivity
If conventional replication tools are used, then data replication is achieved, but flexibility in data selection and mapping is limited
Solution Approach 1:
The system employs dynamic configuration capabilities where users can flexibly select which data elements to replicate, customize data mapping relationships, and adjust replication timing and frequency. The gateway server adapts to different data types and corporate network requirements, allowing the replication process to be dynamically tailored to specific business needs rather than following rigid preset configurations.
3Loss of information
If manual data transfer methods are used, then data can be accessed outside isolated network, but human errors and interactions increase
Solution Approach 1:
The gateway server operates as an automated system that independently performs data collection, storage, and distribution tasks. Once configured, the system automatically replicates data from the isolated network to the corporate network without requiring manual intervention for each data transfer operation. This automation eliminates human errors associated with manual data copying and reduces the need for continuous human monitoring and interaction.
Data Source
AI summary
Systems and methods include a computer-implemented method: A number of process information (PI) tags are mapped to data elements of a local PI server of an isolated network. At a first time, a first application is executed at the isolated network to read and concatenate data on the isolated network corresponding to the tags and to replicate the data elements corresponding to temporary storage on the local PI server. A replicated data package is generated by the first application using the temporary storage. The replicated data package is transmissible through a firewall of a corporate network different from the isolated network. At a second time after the first time, a second application is executed at the corporate network to read data elements from the replicated data package corresponding to counterpart tags of the tags and to replicate the data elements according to instructions in the counterpart tags.