Industrial Remote Access Hub Using VPN and Cloud Mediation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Industrial automation systems face challenges in managing complex OT-level systems, protecting proprietary intellectual property, and ensuring secure remote access to industrial assets, with long development cycles and increased costs due to the lack of virtualization and simulation capabilities.

Innovation Solution

A cloud-based Industrial Development Hub (IDH) system that provides enhanced storage, design tools, and secure remote access features, enabling easy development, testing, and management of industrial automation projects through virtual machine instances, digital twins, and secure remote access protocols.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional OT-level industrial automation systems are used, then system stability and reliability are maintained, but secure remote access capability is insufficient and development cycles are long

Engineering Contradiction:
Improvesystem stabilityVSAvoidsecure remote access capability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces a cloud platform as an intermediary between industrial assets and remote users. The cloud platform provides a web portal that enables secure remote access to industrial automation systems without directly connecting to the OT network, thus maintaining system stability while improving remote access capability

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system is segmented into distinct components: edge devices at the industrial facility, cloud platform services for remote access management, and web portal interfaces for users. This segmentation allows the OT system to remain stable while the IT/OT convergence components provide enhanced remote access functionality

Inventive Principle:
Principle #1Segmentation

2Productivity

If virtualization and simulation capabilities are added to industrial automation systems, then development speed and testing efficiency are improved, but system complexity and costs increase

Engineering Contradiction:
Improvedevelopment speedVSAvoidsystem complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent implements digital twin technology that creates virtual copies of physical industrial assets. These digital twins enable simulation and testing in a virtual environment, improving development speed and reducing the need for physical prototyping while managing complexity through software-based modeling

Inventive Principle:
Principle #26Copying

3Ease of operation

If cloud-based services are integrated with OT systems, then remote access and collaboration are enhanced, but security risks and vulnerability to cyber-attacks increase

Engineering Contradiction:
Improveremote accessVSAvoidcyber-attack vulnerability
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The cloud platform acts as a security intermediary that mediates all remote access requests. It implements authentication, authorization, and encryption protocols, allowing enhanced remote access while protecting the OT network from direct exposure to internet threats

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements preliminary security measures including authentication mechanisms, credential verification, and secure connection establishment before allowing remote access. This prevents unauthorized access and mitigates cyber-attack risks before they can affect the OT systems

Inventive Principle:
Principle #9Preliminary anti-action

Data Source

PatentEP4120627A1Industrial automation secure remote access
Publication Date: 2023.01.18 ROCKWELL AUTOMATION TECH INC
  • EP4120627A1 patent drawingFigure 1
  • EP4120627A1 patent drawingFigure 2
  • EP4120627A1 patent drawingFigure 3

AI summary

An industrial information hub (IIH) and an industrial development hub (IDH) serve as an industrial ecosystem platform where multiple participants can deliver repeatable and standardized services relevant to their core competencies. The IIH system is centered around the development of an ecosystem that creates and delivers value to users - including industrial enterprises, OEMs, system integrators, vendors, etc. - through the aggregation of digital content and domain expertise. The IIH system serves as a trusted information broker between the ecosystem and the OT environments of plant facilities, and provides a platform for connecting assets, contextualizing asset data and providing secure access to the ecosystem. As part of this ecosystem, the IIH system uses a secure remote access architecture to allow users to remotely access data on their plant floor assets via a virtual private network connection.