Unidirectional Gateway Alarm Data Transfer for Industrial Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Industrial control systems face challenges in managing and transmitting alarms and events data across unidirectional gateways, which restrict bidirectional communication, leading to complexities in data collection and reduced timely availability, especially in topologies using unidirectional gateways like data diodes.
Innovation Solution
Implementing a system that collects event data in real-time from field sensors within the operational technology network (OTN) and processes it to generate event files, which are then transmitted through a unidirectional gateway to the information technology network (ITN) for assessment, analysis, and diagnosis, while also collecting attribute data periodically to generate attribute files for insights into alarm system performance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If bidirectional communication is implemented across networks, then data exchange capability is improved, but security risks increase
Solution Approach 1:
The network communication is segmented into unidirectional channels: a first network interface receives data from the external network, while a second network interface transmits processed data to the industrial control system. This segmentation allows data exchange functionality while maintaining security isolation between networks, preventing bidirectional communication that would expose the industrial control system to security risks.
Solution Approach 2:
The gateway device acts as an intermediary between the external network and the industrial control system. It receives data packets from the external network, processes them according to predefined rules, and forwards only approved data to the industrial control system. This intermediary role enables data exchange while filtering out potentially harmful communications, thus improving versatility without compromising security.
2Productivity
If data transmission protocols are simplified, then communication efficiency is improved, but data processing capability deteriorates
Solution Approach 1:
The gateway device performs preliminary data processing and validation before forwarding data to the industrial control system. Data packets are pre-filtered, formatted, and validated according to the industrial communication protocol before transmission. This preliminary action simplifies the communication protocol used by the industrial control system while maintaining comprehensive data processing capability in the gateway, thus improving communication efficiency without sacrificing processing capability.
Solution Approach 2:
The gateway serves as an intermediary that handles complex data processing tasks externally. It translates and validates data according to industrial protocols before transmission, allowing the industrial control system to use simpler communication protocols while the gateway maintains full processing capability. This resolves the contradiction by externalizing complex processing while simplifying the embedded system's communication requirements.
3Reliability
If unidirectional gateway is used, then security is improved, but data collection timeliness deteriorates
Solution Approach 1:
The gateway device continuously receives, processes, and forwards data packets in real-time through its unidirectional communication channel. The continuous operation of the gateway ensures that data flows steadily from the external network to the industrial control system without interruption, maintaining security through the unidirectional design while ensuring timely data collection through continuous processing and forwarding of data packets.
Data Source
AI summary
Approaches for managing alarms and alarm system performance in an industrial system are described. The industrial system may include an operation technology network (OTN) which may be communicatively coupled to an information technology network (ITN) through a unidirectional gateway which allows data transfer from the OTN to ITN, but not vice versa. The approaches as described enable transmission of event data pertaining to events or operations that may be underway in the factory site where the industrial system is installed. In addition, the present approaches also enable collection and transmission of attribute data pertaining to one or more operational parameters of control systems (DCS, SIS, PLC's, SCADA), to the ITN. The event data and the attribute data may then be processed by any module(s) that may be implemented within the ITN to generate various event related insights and insights into metrics of the alarm management system or other systems present within the OTN.