Proxy Log Forwarding Across Mixed Industrial Automation Networks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Industrial automation systems face challenges in sending log data across different networks and communication protocols to a Syslog collector, as devices may not be on the same network or support the same communication protocol, leading to inaccessible log data for security and control decisions.

Innovation Solution

Implementing event proxy servers and clients that convert and forward log data from devices using different protocols to a Syslog collector, enabling log data from diverse industrial automation components to be sent across unconverged networks and protocols, and generating system log messages interpretable by the collector.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If devices use different communication protocols and networks, then device diversity and flexibility are improved, but log data collection and accessibility deteriorate

Engineering Contradiction:
Improvedevice diversityVSAvoidlog data accessibility
Core Design Contradiction:
Adaptability or versatilityVSLoss of information

Solution Approach 1:

The patent introduces a gateway device as an intermediary between devices using different communication protocols and the Syslog collector. The gateway receives log data from devices using various protocols (Modbus, OPC, proprietary protocols), converts and standardizes the data format, then forwards it to the Syslog collector in a unified format. This mediator resolves the incompatibility between diverse device protocols and the collector's expected format, enabling log data collection from heterogeneous devices without requiring each device to support multiple protocols or the collector to adapt to each device's protocol.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If log data is collected from devices on different networks, then system coverage and monitoring scope are improved, but network complexity and data transmission difficulty worsen

Engineering Contradiction:
Improvesystem coverageVSAvoidnetwork complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent segments the log collection system into multiple independent gateway devices, each responsible for a specific network segment or group of devices. Instead of requiring a single collector to handle all networks directly, each gateway operates autonomously on its local network, collecting logs from connected devices and forwarding standardized log data to the central Syslog collector. This segmentation reduces network complexity by localizing protocol conversion and data standardization tasks, while still achieving comprehensive system coverage through the distributed gateway architecture.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentEP4113233A1Proxy system for system log messages
Publication Date: 2023.01.04 ROCKWELL AUTOMATION TECH INC
  • EP4113233A1 patent drawingFigure 1
  • EP4113233A1 patent drawingFigure 2~4
  • EP4113233A1 patent drawingFigure 5~6

AI summary

An industrial automation system includes a collector component communicatively coupled to a first network and configured to receive one or more event logs via a first communication protocol. The industrial automation system also includes a first industrial automation component communicatively coupled to the first network and the collector component. The first industrial automation component is configured to communicate via the first communication protocol. Additionally, the industrial automation system includes a second industrial automation component configured to communicate via a second communication protocol, generate a first event log representative of a property associated with the second industrial automation component, and send the first event log to the first industrial automation component. The first industrial automation component is configured to convert the first event log into second event log interpretable by the collector component and send the second event log to the collector component via the first network.