Multi-Layer OT Network Discovery via Probe Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Performing network discovery in multi-layer operational technology (OT) networks is challenging due to the complexity of industrial automation systems and limited communication between devices, making it difficult to identify all nodes and components across various layers.
Innovation Solution
A system that transmits discovery probes from multiple entry points within the OT network, receives and consolidates data sets identifying nodes across multiple layers, and generates a holistic discovery data set by identifying overlapping nodes, allowing for the creation of a visualization of the network topology.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If discovery probes are transmitted from multiple entry points into the OT network, then the completeness of node discovery is improved, but the complexity of data consolidation and processing increases
Solution Approach 1:
The patent segments the OT network into multiple discovery zones by transmitting probes from different entry points. Each entry point independently discovers nodes in its reachable zone, creating divided discovery data sets that are later consolidated. This segmentation allows comprehensive coverage without requiring a single complex discovery process.
Solution Approach 2:
The patent merges multiple discovery data sets from different entry points into a unified holistic view of the OT network. By combining results from multiple probe transmissions and eliminating duplicates, the system achieves complete node discovery while managing data consolidation complexity through systematic merging processes.
2Adaptability or versatility
If the OT network includes multiple network layers with industrial automation components, then the system's functionality and coverage are improved, but the difficulty of detecting and measuring all nodes increases
Solution Approach 1:
The patent addresses multi-layer network discovery by introducing multiple entry points as an additional dimension for probe transmission. Instead of attempting to discover all nodes from a single point across multiple layers, the system uses spatial distribution of entry points to systematically access nodes at different network layers, reducing detection difficulty.
Solution Approach 2:
The patent uses discovery probes as intermediaries to facilitate node detection across multiple network layers. These probes act as mediators that traverse layer boundaries and communicate node information back to the discovery system, enabling indirect detection of nodes that would be difficult to measure directly from any single entry point.
3Reliability
If communication between devices on the OT network is limited, then network security and stability are improved, but the ability to perform comprehensive network discovery deteriorates
Solution Approach 1:
The patent performs preliminary network discovery actions by transmitting discovery probes before normal operational communication restrictions fully apply. The system proactively gathers node information during designated discovery phases, ensuring complete node identification even though ongoing communication between devices remains limited for security and stability reasons.
Data Source
AI summary
Performing multi-layer network discovery of an operational technology (OT) network includes receiving a plurality of discovery data sets, each identifying a respective subset of a plurality of nodes within an OT network having a plurality of network layers, wherein the respective subset of the plurality of nodes for a first discovery data set are disposed within at least two network layers of the plurality of network layers, identifying a set of nodes within the OT network that appear in two or more of the plurality of discovery data sets, generating a holistic discovery data set for the OT network based on the plurality of discovery data sets and the identified set of nodes within the OT network that appear in the two or more of the plurality of discovery data sets, and generating a visualization of the plurality of nodes within the OT network based on the holistic discovery data set.