Secure Remote Access Architecture for Virtualized Industrial Development

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Industrial automation systems face challenges in development and testing due to complexity and custom nature, leading to long development cycles, cost overruns, and difficulties in managing proprietary intellectual property and cybersecurity, especially with the lack of virtualization and simulation capabilities.

Innovation Solution

A cloud-based Industrial Development Hub (IDH) with enhanced storage and design tools supports development and testing, providing a repository for control project code, device configurations, and digital aspects, facilitating easy discovery, backup, restore, code conversion, and version management, along with secure remote access and virtualization capabilities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If industrial automation systems are developed and tested using traditional methods, then development and testing can be performed, but development cycles are long and costs overrun due to complexity and custom nature

Engineering Contradiction:
Improvedevelopment efficiencyVSAvoiddevelopment cycle time
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The patent uses virtual machine images to create virtual copies of industrial automation systems. These virtual images can be instantiated multiple times on cloud platforms, allowing parallel development and testing without requiring physical hardware copies. This copying approach enables simultaneous work on multiple system configurations, dramatically reducing development cycle time while maintaining full system functionality.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent transitions from physical hardware-based development to cloud-based virtualization. By moving the development environment to a cloud platform with virtual machine capabilities, the system adds a dimensional shift from tangible hardware to intangible virtual instances. This enables on-demand provisioning, rapid deployment, and easier management of development environments, improving productivity without extending development cycles.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Productivity

If traditional development methods are used for industrial automation systems, then systems can be developed, but cost overruns occur due to complexity and custom nature

Engineering Contradiction:
Improvedevelopment efficiencyVSAvoiddevelopment cost
Core Design Contradiction:
ProductivityVSLoss of energy

Solution Approach 1:

The patent creates universal virtual machine images that can serve multiple development and testing purposes. A single virtual image can be instantiated repeatedly for different projects, clients, or testing scenarios, eliminating the need to build separate physical development environments for each case. This multi-functionality reduces per-project costs while maintaining high development efficiency through standardized, reusable templates.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

By using virtual machine copying and instantiation, the patent eliminates the need for expensive physical hardware replication. Virtual images can be copied and deployed across multiple cloud instances at minimal cost, allowing the same development environment to serve multiple purposes simultaneously. This significantly reduces development costs while maintaining productivity through rapid environment provisioning.

Inventive Principle:
Principle #26Copying

3Reliability

If proprietary intellectual property is managed in traditional industrial automation systems, then IP can be protected, but cybersecurity challenges arise due to lack of virtualization and simulation capabilities

Engineering Contradiction:
ImprovecybersecurityVSAvoidsystem architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a cloud platform as an intermediary layer between the virtual machine images and the physical industrial automation systems. This intermediary provides isolation and security boundaries, allowing proprietary intellectual property to run in protected virtual environments. The cloud platform manages security, access control, and network isolation, enhancing cybersecurity without requiring complex security infrastructure at the device level.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent uses virtual machine images as secure copies of proprietary systems. These virtual copies can be instantiated in isolated cloud environments for development and testing, protecting the original proprietary intellectual property from direct exposure. The virtualization layer provides inherent security isolation, allowing IP protection while enabling secure remote access and collaboration without increasing device complexity.

Inventive Principle:
Principle #26Copying

4Productivity

If virtualization and simulation capabilities are added to industrial automation systems, then development efficiency improves, but device complexity increases

Engineering Contradiction:
Improvedevelopment efficiencyVSAvoidsystem architecture complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent implements self-service capabilities through automated virtual machine image instantiation and management. The cloud platform automatically provisions, configures, and manages virtual development environments without requiring manual intervention for complex setup tasks. This automation hides the underlying complexity while providing simple, efficient access to virtualization and simulation capabilities, improving productivity without burdening users with system complexity.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent uses universal virtual machine images that encapsulate complete development environments with built-in simulation capabilities. These multi-functional images can serve as development platforms, testing environments, and training systems simultaneously. By consolidating multiple functions into standardized virtual images, the system provides advanced capabilities without increasing perceived complexity for end users.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP4120113A1Digital engineering secure remote access
Publication Date: 2023.01.18 ROCKWELL AUTOMATION TECH INC
  • EP4120113A1 patent drawingFigure 1
  • EP4120113A1 patent drawingFigure 2
  • EP4120113A1 patent drawingFigure 3

AI summary

An industrial information hub (IIH) and an industrial development hub (IDH) serve as an industrial ecosystem platform where multiple participants can deliver repeatable and standardized services relevant to their core competencies. The IIH system is centered around the development of an ecosystem that creates and delivers value to users - including industrial enterprises, OEMs, system integrators, vendors, etc. - through the aggregation of digital content and domain expertise. The IIH system serves as a trusted information broker between the ecosystem and the OT environments of plant facilities, and provides a platform for connecting assets, contextualizing asset data and providing secure access to the ecosystem. As part of this ecosystem, the IIH system uses a secure remote access architecture to allow users to remotely access data on their plant floor assets via a virtual private network connection.