OPC UA Inside Out Part 3 - Edge Devices

© Utthunga Technologies Pvt. Ltd. 2020
OPC UA Inside Out
Part 3 – Edge Devices
Presented by:
Utthunga OPC Services Division
Utthunga for OPC

Company Overview
500+
PROFESSIONALS
12
Germany
USA
Japan
HQ & Development Centre:
Bangalore India
SERVICES SOLUTIONS
Product FOCUS
Engineering IIoT, Cloud & Big
Data Analytics
Embedded
Software
& Hardware
Digital
Services
Solutions
Quality
Engineering
Application
Software
Engineering
Process
& Factory
Power &
Utilities
Data
Connectivity
& Integration
Solutions
Custom
Solutions
Utthunga OPC Services

Industry Associations
 Part of various Special Interest Groups
(Technical Specifications, Architecture, Test
& Certification and Marketing)
 Involved in reference Application
Architecture, Design and Development
 Technology Outsourcing Partner
 PROFIBUS and PROFINET Competency
Center
 FDT Test & Certification Center
 Part of Global Expert/Certified Community
https://opcfoundation.org/about/opc-foundation/experts/
https://www.profibus.com/pi-organization/certified-people/

Speakers for today
About Speaker
 20 years of Industry Experience
 Experience in Product and Solution engineering for Lifesciences, Power, Mobility and
Industrial domains
 At Utthunga, he provides leadership in the area of digital transformation where he is
responsible for defining the strategy, solutions, partnership and implementation
road-map.
 He is very adept in leveraging both mainstream and emerging technologies, enabling
Utthunga to provide value added solutions & services to its customers in process,
discrete and power domains.
 He closely works with various business functions at Utthunga to understand customer
and market requirements in order to translate them into digital products and
services.
Rushendra Babu Guntur

Speakers for today
Chatrapathi
About Speaker
 15+ years of Industry Experience
 Listed as Expert by OPC Foundation
 Participates and contributes in OPC UA Specification working group activities.
 Member of OPC Foundation and ODVA Joint Specification Working Group.
 Wrote and presented White papers at ODVA Industrial Conference and IEEE.
 Familiar with different OPC UA stacks, DDS stacks, application development around
OPC UA especially embedded devices, Information models, performance
optimization, etc.,
 Familiar with different Industrial automation protocols like EtherNet/IP, Modbus,
BACnet etc.,
 Authored a whitepaper titled ”Mapping EtherNet/IP (CIP) object to OPC UA
Information Model” based on the research done at Utthunga and presented the
paper at ODVA 2020 Industry Conference & 20th Annual Meeting, March 4, 2020,
Palm Harbor, Florida, USA.

4. Security
3. OPC UA for unified communications
2. Edge, Fog and Cloud
1. OPC in IIoT & Industry 4.0 transformation
5. Use Cases
Agenda

Typical Plant Elements
All images are copyright to their respective owners

Distributed Systems
Gateway
Operations and Maintenance
Gateway

Transformation
Sensors / Devices
Control Systems
Production
Management
Operations
Management
Business
Business
Operation
Management
Production
Management
Control Systems
Sensors / Devices
• Mass Customization
• Increased velocity of
Innovation and
Obsolesce
• Quick Time to Respond
• Threat Management
• Optimized Productivity
• Optimized Cost
• Regulatory Compliance
Changing Business Landscape
Hybrid , Flat Architecture
Hierarchical Architecture

Reference Architectures & OPC UA
RAMI
IIRA
NOA OPAS MTP

Data Considerations
Available
Actionable
Integrity
Confidentiality
Sovereignty
Data Rate
Data Volume
Connectivity
Cost
Storage Cost
Computer Cost
Connection
Reliability

Edge , Fog and Cloud
Edge 1
Edge 2
Edge 3
Fog 2
Fog 1
Sensors,
Devices,
Machines
Lines,
Plant
50KB/Sec
4.4 GB/Day
Plant,
Enterprise
High Data Rate,
Signal Analysis
Model
Executions
Model Building
and Optimizations
Sections,
Lines
Vibration 400 Bytes/Sec
34 MB/Day
Cloud

Data Vocabulary
Source : MT Connect Foundation

© Utthunga Technologies Pvt. Ltd. 2020 Physical Interface Communication Protocol Data Standard
CNC 1
CNC 2
Weld
CNC 1
CNC 2
Weld
Vocabulary 1
Vocabulary 2
Vocabulary 3
CNC 1
CNC 2
Weld
Ethernet , Serial , Proprietary
Edge
CNC 1
CNC 2
Weld
CNC 1
CNC 2
Weld
Vocabulary 1
Vocabulary 2
Vocabulary 3
CNC 1
CNC 2
Weld
Ethernet , Serial , Proprietary
App / Host
(PLC, SCADA,DCS,
Applications)
Monitoring,
Optimization,
Advisory
Business Process
Systems
Switch
Messaging
Web
services
Vocabulary
1
Vocabulary
2
Non Semantic Data , Multi Protocol Communication

CNC 1
CNC 2
Weld
OPC
Vocabulary 1
Vocabulary 2
Vocabulary 3
Ethernet
Physical Interface Communication Protocol Data Standard
Monitoring,
Optimization,
Advisory
Business Process
Systems
Switch
Vocabulary 1
Vocabulary 2
CNC 1
CNC 2
Weld
OPC
Vocabulary 1
Vocabulary 2
Vocabulary 3
Ethernet Edge
App / Host
(PLC, SCADA,DCS,
Applications)
Non Semantic Data , Unified Communication

Actionable / Semantic Data
Source : MT Connect Foundation

CNC 1
CNC 2
Weld
OPC
MT Connect
Vocabulary/
OPC
Companion
Specification
Ethernet
Physical Interface Communication Protocol Data Standard
Monitoring,
Optimization,
Advisory
Business Process
Systems
Switch
Standard
Vocabulary
CNC 1
CNC 2
Weld
OPC
MT Connect
Vocabulary/
OPC
Companion
Specification
Ethernet
App / Host
(PLC, SCADA,DCS, Edge,
Applications)
App / Host
(PLC, SCADA,DCS, Edge,
Applications)
Semantic Data , Unified Communication
• Reliability
• Security
• Interoperability
• Modular
• Reduced Single Vendor Dependency

OPC on Edge - Trends
• Ethernet based
• TSN
• SPE
• APL

OPC on Edge - Configurations
Device with
OPC
OPC
Client
North Bound
(Web services,
MQTT…)
1
OPC
Client
OPC
Server
South Bound
(Modbus,
MT Connect)
Device with
Other Protocol
2
OPC
Client
OPC
Server
Device with
Other Protocol
South Bound
(Modbus,
MT Connect)
OPC Client
Device with
OPC
3

OPC on Edge - Considerations
Vendor Neutral
Interoperable
Discoverable
Reliable
Scalable
Co-Existence, Complimentory
Recommended in Multiple Architecures
•Companion Specifications/Standards
•MTP, MT Connect
Ever Growing Eco System
Secure Long Term Investment
Security

Security
Image Source:- Renesas
Key requirements/goals for security
 Authentication
 Authorization
 Integrity
 Confidentiality
 Communication Security
 Availability
 Reliability
 Auditability
 Boot up Security
 Firmware Security

Security
Source:- OPC Foundation

Security
How OPC UA handles some of the key security requirements
 Authentication – User Name & Password, X509 Certificate, JWT etc.,
 Authorization – Provides mechanism to exchange credentials. Role based access is implementation
specific.
 Integrity – Secure Channel is responsible for Integrity. Symmetric and Asymmetric Signatures are used
to address Integrity.
 Confidentiality – Encryption and protection of local data is not in the scope of OPC UA.
 Communication Security- Symmetric and Asymmetric Encryption are used to protect Confidentiality
of the data that is being exchanged.
 Availability – By design of OPC UA and other recommendations.
 Auditability – Auditing services of OPC UA

Restricted Data Flow
Transport Integrity and
Application
Authentication
Transport
Confidentiality and
Application
Authentication
Information Model
Access Control
Role-based/ User-
based Access Control
Accounting Availability
Security Maintenance
and Incident Handling
Non- permanent
connectivity
Firewall
Network
segmentation
Secure- Channel with
SecurityMode
= “Sign”
Application
certificates
Trust list
Revocation list
Certified
authority
Secure- Channel with
SecurityMode
= “SignAnd Encrypt”
Application
certificates
Trust list
Revocation list
Least privilege (read,
write, browse) for
each node
Least privilege for
each role
Least privilege for
each user
No privilege for
deprecated
rolesandusers
Username/ password
authentication
Certificate- based
authentication
Two-way
authentication
Generateaudit events
for securityrelated
operations, like
…
(Un)authorized
connections, listing
devices, rouge
devices
Access violations
Read,write,
discover attempts
Delay processing of
OpenSecure-
Channel in case of
bad OpenSecure-
Channel requests
Alarm incidents
Global Discovery
Server (GDS) that
provides pull/push
management for …
Provisioning
certificates
Updating trust list
Updating revocation
list
Renewal of expired/
compromised
certificates
Security

Use Cases
Following functionalities cover most of the use cases of
Edge Gateway
 Connectivity to data sources
 Easy Cloud and/or local data base integration
 Request-Response and/or Data Streams
 Protocol Translation
 Configure and Manage
 Security
 Data storage and forward
 Threshold based notifications and Alarms
 Monitoring & diagnostics notifications
 Analytics
 Portability
Common use cases
 Predictive and prescriptive Maintenance
 Asset tracking
 Monitoring (Conditional, Health. Vibration, Quality etc.,)
 Digital Twin
 Quality Management
 Inputs and insights to Product Development and/or Product
Redesign
 Simulations (Training, Planning, Design, Integration etc.)
 Natural progression towards autonomy
 Replacement & Replication
 Remote Service or Service assistance with VR

Use Cases

Use Cases – Smart Factory
Functionalities covered in this use case
 Easy Cloud and/or local data base integration
 Request-Response and/or Data Streams
 Security
 Analytics
Image Source:- Analog Devices

Use Cases – Cargo fleet
 Cloud Integration
 Security
 Analytics

Use Cases
 Local data base integration
 Security
 Analytics

OPC UA Inside Out – Webinar Calendar
5 OPC UA Inside Out Part 5 - Cloud Connectivity – 25th June, 2020
4. OPC UA Inside Out Part 4 - Tunneller – 11th June, 2020
3. OPC UA Inside Out Part 3 – Edge Devices – 28th May, 2020
2. OPC UA Inside Out Part 2 - Embedded & Constrained Devices – 14th May, 2020
6. OPC UA Inside Out Part 6 - Green Field and Brown Field – 09th July, 2020
1. OPC UA Inside Out Part 1 - Introduction and Playing Field – 30th April, 2020

Utthunga Technologies Pvt. Ltd.
No. 8, 27th Cross, 2nd Stage,
Banashankari, Bangalore – 560 070
Phone: +91-80-68151900
Mail: contact@utthunga.com

OPC UA Inside Out Part 3 - Edge Devices

More Related Content

What's hot

Similar to OPC UA Inside Out Part 3 - Edge Devices

Recently uploaded

OPC UA Inside Out Part 3 - Edge Devices