PLC Cloud VM Provisioning for Secure Industrial Plant Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing methods for creating and configuring a virtual machine in a cloud server connected to industrial systems with programmable logic controllers are complex and error-prone, especially when multiple systems are networked across different locations worldwide, requiring manual intervention and lacking automation.

Innovation Solution

A method where a software module, integrated into the programmable logic controller, automatically creates and configures a virtual machine on the cloud server, obtaining and storing an access token to enable secure access and data transmission, thereby simplifying the process and eliminating manual steps.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual creation and configuration of virtual machines is performed, then access control and security can be managed, but the process becomes complex and error-prone

Engineering Contradiction:
Improveaccess control securityVSAvoidvirtual machine creation process
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The PLC automatically performs self-registration with the cloud server, generating and managing its own access tokens without manual intervention. The system serves itself by autonomously completing the virtual machine creation and configuration process, eliminating the need for manual setup while maintaining security through automated authentication mechanisms.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The access token is generated and stored in advance during the automatic registration process, before the PLC needs to access the virtual machine. This preliminary authentication setup ensures that security credentials are ready and validated before any data transmission or control operations occur.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If manual creation and configuration of virtual machines is performed, then security management is possible, but time consumption increases

Engineering Contradiction:
Improveaccess control securityVSAvoidvirtual machine setup time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The PLC autonomously completes the entire virtual machine creation and configuration process without requiring manual intervention. The system automatically registers with the cloud server, generates access tokens, and configures communication parameters, dramatically reducing setup time while maintaining security through automated authentication.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

All authentication and configuration steps are performed in advance during the automatic registration process. The access token is generated and stored before the PLC begins operational data transmission, ensuring that security is established upfront without delaying subsequent operations.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If manual configuration is used for multiple industrial plants, then individual control is possible, but the process becomes impractical across worldwide locations

Engineering Contradiction:
Improveindividual plant controlVSAvoidmulti-location deployment
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

Each PLC automatically performs self-registration with the cloud server using its unique identification, enabling individual plant control without centralized manual configuration. The system autonomously establishes its own connection and authentication credentials, making multi-location deployment practical by eliminating the need for manual setup at each site.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The automatic registration and configuration process provides a universal solution that works across multiple industrial plants worldwide. The same automated mechanism handles PLCs from different locations, maintaining individual plant control through unique identification while enabling scalable deployment across diverse geographical locations.

Inventive Principle:
Principle #6Universality (Multi-functionality)

4Productivity

If automatic virtual machine creation is implemented, then process efficiency improves, but automation complexity increases

Engineering Contradiction:
Improvevirtual machine creation efficiencyVSAvoidautomation system structure
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The PLC performs automatic self-registration and virtual machine creation without external intervention. The system autonomously generates access tokens, configures communication parameters, and establishes connections with the cloud server, greatly improving deployment efficiency while keeping the automation logic contained within the PLC's existing IEC 61131-3 programming environment.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The automatic virtual machine creation process is merged with the PLC's existing operational workflow. The registration and configuration functions are integrated into the PLC's standard communication and control routines, improving productivity without requiring separate complex automation systems.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentEP4235324A1Method for controlling an industrial installation
Publication Date: 2023.08.30 SCHNEIDER ELECTRIC IND SAS
  • EP4235324A1 patent drawingFigure 1
  • EP4235324A1 patent drawing
  • EP4235324A1 patent drawing

AI summary

A method is used to control an industrial plant with a programmable logic controller (PLC). In this method, the PLC establishes a connection to a cloud server, executes a software module that creates and/or configures a virtual machine on the cloud server, receives and stores an access token, the PLC uses the access token to access the virtual machine, and the PLC interacts with the virtual machine to send process data to the virtual machine and/or support the control of the industrial plant.