The document outlines 7 steps to Industry 4.0: 1) connect machines and devices using IoT security gateways, 2) securely and remotely access all devices through edge and platform tiers, 3) centrally orchestrate and manage users, devices, and processes, 4) collect data from machines and devices, 5) monitor infrastructure through defined rules and alerts, 6) analyze collected data through dashboards for predictive maintenance and decision making, 7) integrate edge computing and develop innovative business models to welcome Industry 4.0.

1. Secure. Monitor. Analyze.
7 STEPS TO INDUSTRY 4.0
Francesco La Spina

2. WHO AM I
• Born in Bolzano
• Software Engineer at Endian
Francesco La Spina

3. THE DIGITALIZATION CHALLENGE
• We want to collect data from
“things” (machines, ICS, devices, etc.)
• We need to connect “things”, people,
applications without compromising IT
security and production processes
• Heterogeneous environments

4. • connect machines and devices
• secure and remotely access all devices
• orchestrate and manage devices, users, and processes
• collect data from machines and devices
• monitor your infrastructure
• analyze the collected data
• Welcome to Industry 4.0!
1
2
3
4
5
6
7
A SMART FACTORY IN 7 STEPS

5. CONNECT MACHINES AND DEVICES
How?
IoT security gateways (ruggedized industrial VPN routers):
• Power supply: (redundant) 24V support
• Connections: Ethernet, Wi-Fi, 3G/4G/5G,
Serial (Modbus over serial)
• Digital I/O
• Security features: VPN, Firewall (DPI),
IDSIPS (next step)
• Support of industrial communication
protocols
• Containerization support (Docker):
data collectors, edge computing (last steps)
• DIN rail
1
2
3
4
5
6
7

6. SECURE AND REMOTELY ACCESS ALL DEVICES
Edge tier
• Security best practices (change default
passwords! :P)
• Implement network segmentation
through gateways
• Encryption through VPN tunnels
(OpenVPN)
• IDS IPS
Platform (core) tier
• Authentication/Authorization/
Accounting (AAA)
• Multi-factor authentication
• Secure remote access (Apache
Guacamole)
• Network Access Control (NAC)
Internet
Internet
1
2
3
4
5
6
7

7. CENTRALLY ORCHESTRATE AND MANAGE
USERS, DEVICES, AND PROCESSES
How?
• Manage gateways and endpoints
• Define users’ role and permissions
(who is able to access what, how,
and when ?)
• Define API ACLs
• Manage lifecycle of gateways:
updates, configuration profile
provisioning, and applications
(edge computing)
Endpoints
Field/Support Staff
IT Staff
Automation Staff
Roles /
Permissions
Applications
Machine Settings
Administration
Access to Data
Secure Connectivity
(Core)
4i Edge
Industrial Equipment
OEM Machinery
IoT Cloud
4i Edge
Gateways
(Edge)
1
2
3
4
5
6
7

8. COLLECT DATA FROM MACHINES
AND DEVICES
How?
• Collect data through gateway
collectors (ex: EdgeX Foundry or
custom)
• Securely stream collected data
through MQTT to a central broker
(ex: EMQ)
• Store data (ex: Telegraf and InfluxDB
open source time series db)
Internet
1
2
3
4
5
6
7

9. Gain visibility
At this step we are collecting data
from machines, ICS, gateways,
switches, IDS, etc.
• Monitor both OT and IT devices
• Define monitoring rules and
alerts (ex: Kapacitor real time
streaming processing engine)
MONITOR
Internet
Remote Plants Remote SiteAlerts
WWW
1
2
3
4
5
6
7

10. • Visualize data: build custom real-time
dashboards (ex: Grafana or Kibana)
• Embrace predictive maintenance
• Support management decision making
ANALYZE DATA
1
2
3
4
5
6
7

11. • Integrate Edge Computing
• Develop innovative, data-driven
business models for Industry 4.0
• Engage additional partners
WELCOME TO INDUSTRY 4.0
1
2
3
4
5
6
7

12. QUESTIONS?
Francesco La Spina
f.laspina@endian.com
Thanks!