Virtualized Industrial Control Interface for Secure CIP Data Integration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing industrial control systems face challenges in efficiently integrating data from remote monitoring operations back into the operational technology (OT) network, particularly due to network security concerns and the need to avoid reprogramming existing data exchange pathways.
Innovation Solution
The implementation of a system that includes an industrial network device with input terminals for receiving symbolic data, processing circuitry that provides a virtualized control system, and the ability to expose event notifications via a symbolic Common Industrial Protocol (CIP) namespace, allowing for seamless data transmission between the OT network and external systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data from remote monitoring operations is integrated into the OT network using traditional methods, then data exchange functionality is achieved, but network security is compromised and reprogramming of existing data pathways is required
Solution Approach 1:
The patent introduces a virtualized control system as an intermediary layer between the OT network and external monitoring systems. This virtualized system receives event notifications from external sources, processes them through a symbolic CIP namespace, and transmits only validated symbolic data to the OT network. This mediator approach enables data integration while maintaining network security boundaries, as the virtualized control system acts as a buffer that prevents direct access to the OT network infrastructure.
2Ease of manufacture
If traditional data exchange pathways are used, then existing system architecture is maintained, but extensive reprogramming is required to integrate remote monitoring data
Solution Approach 1:
The patent creates a virtualized copy of the control system that mirrors the functionality of the original OT network interface. This virtualized control system implements a symbolic CIP namespace that replicates the data exchange protocols, allowing remote monitoring data to be integrated without modifying the actual OT network pathways. The symbolic data structures serve as copies that can be processed independently and then transmitted to the original system, eliminating the need for extensive reprogramming of existing data pathways.
3Adaptability or versatility
If remote monitoring operations are performed externally, then monitoring flexibility is improved, but data transmission back to the OT network becomes complex
Solution Approach 1:
The patent transforms external monitoring data into symbolic data parameters that conform to the OT network's expected data structures. The virtualized control system receives raw event notifications from external monitoring operations, converts them into standardized symbolic CIP namespace parameters, and transmits these transformed parameters to the OT network. This parameter transformation approach simplifies data transmission by ensuring compatibility between external monitoring systems and the OT network, regardless of the diversity of monitoring operation formats.
Data Source
AI summary
Systems and methods described herein may involve an industrial network device that performs an operation based on symbolic data received via an input terminal. The systems and methods may involve processing circuitry coupled via an output terminal to the input terminal. The processing circuitry may provide a virtualized control system communicatively coupled to the industrial network device via the output terminal, receive an event notification from a first container provided by one or more computing devices external to the industrial automation system, operate the virtualized control system to expose the event notification via a symbolic common industrial protocol (CIP) namespace to provide the symbolic data to the input terminal based on the event notification, and transmit the symbolic data corresponding to the virtualized control system via the one or more input terminals to the industrial network device.