practical-guide-to-opcua.pdf practical-guide-to-opcua.pdf

1. Practical Guide to OPC UA
All about Data Connectivity Solutions
황 철 상 (주)브릿지웨어 대표
March 2021

2. www.opchub.com
ISA 95 Model by International Society for Automation
Level 0
Sensors and Actuators
Level 1
Controllers (PLCs and Devices)
Level 2
SCADA and HMI
Level 3
Manufacturing Execution Systems
Level 4
Enterprise Resource Planning
Slide 2 O
P
C
U
A

3. www.opchub.com
Sensors & Actuators
- Signal Outputs: 4-20mA, 1-5V, 0-24V
PLC (Programmable Logic Controller)
– Siemens, ABB, Schneider Electric
– Rockwell Automation, GE
– Mitsubishi, Omron
– LS산전
DCS (Distributed Control System)
– Honeywell, Emerson, Yokogawa
– GE, Siemens
IED (Intelligent Electronic Device)
PAC (Programmable Automation Controller)
DDC (Direct Digital Control)
Real-time Manufacturing Data
– Producers (L0 & L1: Sensors, PLCs & I/O Devices)
Slide 3

4. www.opchub.com
Real-time Manufacturing Data
– Consumers (L2, L3 & L4)
HMI/SCADA (Human Machine Interface / Supervisory Control And Data Acquisition)
– Aveva (Wondoerware) InTouch
– WinCC (Siemens)
– FactoryTalk View (Rockwell Automation)
– iFIX (GE)
– Cimon
Historians
– OSI PI System, dataPARC
– Honeywell PHD, Aspen InfoPlus.21
– Aveva Historian, GE Historian
– Kepware Historian, ibaPDA
Databases
– MS SQL Server, MS Access, PostgreSQL
– Oracle, MySQL, Tibero
MES (Manufacturing Execution System)
IoT & Big Data Platforms (ThingWorx, MS Azure, SAP, Splunk, GE Predix, Siemens MindSphere, etc.)
Slide 4

5. www.opchub.com
OPC Server is the Middle-man
Slide 5
Data Producing Devices
OPC Server:
Software application for
Interoperability & Data
Exchange.
(“the Middle-man”)
Data Consuming Applications

6. www.opchub.com
OPC Basics & Trends
Slide 6

7. www.opchub.com
OPC Server
OPC Server – a simple diagram
Slide 7
OPC Interface
Classic (DA, HDA, A&E)
UA (DA, HA, AC)
Communication Drivers for
Devices

8. www.opchub.com
OPC and Automation Protocols
Slide 8
Standards Purpose
OPC Classic DA Application-to-Application Comm.
OPC UA
Application-to-Application Comm.
Device-to-Application Comm.
UA over TSN
(Time Sensitive Network)
Device-to-Device Communication
Device-to-Application Comm.
Fieldbus
(Profibus, DeviceNet, CCLink, HART,
Ethernet/IP, etc.)
Device-to-Device Communication

9. www.opchub.com
Data Flow: Sensor to OPC Server
Temperature Sensor
Analog
Input
4-20mA
Register
43250
72.5
Read Request in
“Protocol X” for Register
43250
Register 43250 Value:
72.5
CPU
Memory
Slide 9

10. www.opchub.com
Data Flow: OPC to Applications
2 '%& 2 3&
'$
8$ 2 3
+'$
61 0 3
5(670 4 77
%L
J
'DW
D$QDO
W
L
FV
Slide 10
OPC Server

11. www.opchub.com
OPC Specifications
OPC Classic
–Data Access (DA)
–Alarms Events (AE)
–Historical Data Access (HDA)
OPC Unified Architecture (UA)
–OS Independent
–Firewall Friendly
–Combine the “classic” specifications into a single interface.
Slide 11

12. www.opchub.com
OPC UA (Unified Architecture)
OPC Unified Architecture (IEC 62541)
– Functional equivalence: all COM OPC Classic specifications are mapped to UA
– Platform independence: from an embedded micro-controller to cloud-based
infrastructure
– Secure: encryption (RSA standards), authentication (x.509 standards),
and auditing
– Extensible: ability to add new features without affecting existing applications
– Comprehensive information modeling: for defining complex information
OPC UA Base Services
Vendor Information Model
DA AC HA Prog
Industry Standards Information Models
Slide 12

13. www.opchub.com
OPC UA Target Applications
Slide 13

14. www.opchub.com
OPC UA Connectivity
OPC UA
Endpoint communication
Data encryption to RSA standards and
authentication based on the x.509
Certificate standard.
This is the same encryption e-commerce
uses.
opc.tcp://10.10.110.10:49320
Slide 14

15. www.opchub.com
UA Security
One of the most important considerations in choosing a technology is security. OPC UA is
firewall-friendly while addressing security concerns by providing a suite of controls:
Transport: numerous protocols are defined providing options such as the ultra-fast OPC-
binary transport or the more universally compatible JSON over Websockets, for example
Session Encryption: messages are transmitted securely at various encryption levels
Message Signing: with message signing the recipient can verify the origin and integrity of
received messages
Sequenced Packets: exposure to message replay attacks is eliminated with sequencing
Authentication: each UA client and server is identified through X509 certificates providing
control over which applications and systems are permitted to connect with each other
User Control: applications can require users to authenticate (login credentials, certificate,
web token etc.) and can further restrict and enhance their capabilities with access rights
and address-space “views”
Auditing: activities by user and/or system are logged providing an access audit trail
Slide 15
Source:
OPC Foundation

16. www.opchub.com
UA Discovery with(out) LDS
Slide 16
Server’s Public Key
Client’s Public Key / Sign Encryption
Sign Encryption

17. www.opchub.com
UA Security - Server Endpoint Certificate
Slide 17

18. www.opchub.com
UA Security - Data Encryption
RSA 표준 (Sha256) 에 따라 데이터 암호화
“None” with(out) Password – 권장하지 않으나 현장에서 많이 채택
Slide 18

19. www.opchub.com
OPC DA Connectivity

20. www.opchub.com
DCOM Tunnelling
Slide 20
• No DCOM Configuration
• Firewall friendly
• NAT (Network Address Translation) 환경 지원
• One-way or Bi-directional (incoming port closed or open)

21. www.opchub.com
Unidirectional OPC Monitoring
Slide 21
Source: WA technology home page

22. www.opchub.com
Software based Uni(bi-)directional OPC Comm.
DataHub Transfer Protocol (DHTP) protocol to make
- outbound-only connections from plant or process.
- with all inbound firewall ports closed.
- supports DMZs and forward proxies, and requires no VPNs - to
provide secure OT to IT data flow.
Slide 22

23. www.opchub.com
OPC UA Publish/Subscribe
Slide 23

24. www.opchub.com
The evolution of OPC into the OSI Reference Model
Slide 24

25. www.opchub.com
Embedded UA Servers
BR Automation showcases
OPC UA over TSN Beckhoff TwinCAT PLC
Slide 25

26. www.opchub.com
UA Support from major Vendors
Slide 26
Emerson Machinery Health
Protection System (CSI 6500 ATG)
With native UA Support
• Siemens S7-1500 PLC
• Siemens S7-400 controller with OPC
UA Server (CP 443-1 OPC UA )
• Sinumerik CNC systems
SINUMERIK 828D
SINUMERIK 840D sl
• Simatic Net OPC Server
• Simatic WinCC Open Architecture
• Simatic HMI Comfort Panels
• SIOCODE pro Motor Management
System
• Simatic RF600 RFID Reader
Rockwell CompactLogix 5480

27. www.opchub.com
UA Support from major Vendors
Slide 27
Item Name RD81OPC96
Supported Model iQ-R Series
RCPU, LCPU, QCPU (Q
mode)
Connectable Ethernet
port
CH1
# Tags 10,000

28. www.opchub.com
OPC UA, IoT
Big Data Systems
Slide 28

29. www.opchub.com Slide 29
Edge or Cloud

30. www.opchub.com Slide 30
OPC UA Cloud
• IoT Cloud Platforms
– ThingWorx Industrial IoT
Platform
– Microsoft Azure
– AWS IoT Core
– SAP
– GE Predix
– Siemens MindSphere more
• KepserverEX IoT Gateway
– MQTT, REST, Thingworx

31. www.opchub.com
PTC ThingWorx Industrial IoT Platform
Slide 31
011010
Kepware Integration into ThingWorx
- ThingWorx Kepware Server
- ThingWorx Kepware Edge
- Auto-registration of things
based on imported models

32. www.opchub.com
Microsoft Azure UA Connectivity
Slide 32

33. www.opchub.com
AWS UA Connectivity
Slide 33

34. www.opchub.com
OPC UA
OPC Classic
SAP
Connector
MQTT
ODBC,
OLEDB…
SAP
Plant Connectivity (Pco)
SAP HANA Cloud, DB
RFC
BAPI
IDOC
HANA
SAP ERP Connectivity
OPC UA
OPC Classic

35. www.opchub.com Slide 35
GE Predix Edge Connectivity
OPC UA
Modbus

36. www.opchub.com Slide 36
Siemens MindSphere

37. www.opchub.com
KepServerEX
The Ultimate Industrial Connectivity Platform
Slide 37

38. www.opchub.com
KepServerEX Industrial Connectivity Platform
Slide 38
• Drivers
– Communication Drivers
– 140 more
• Plug-Ins
– Historian
– Data Logger
– IoT Gateway
Advanced Tags more
• Factory License
– 1 license for single factory (L,M,S)
– 5~40 times Activation
– All driver plug-Ins included
– Subscription only

39. 39
39
DEVICE CONNECTIVITY
• ABB Totalflow Serial
• Advanced Simulator
• Allen-Bradley 1609 UPS
• Allen-Bradley Bulletin 900
• Allen-Bradley ControlLogix
Ethernet
• Allen-Bradley ControlLogix
Unsolicited
• Allen-Bradley Data Highway Plus
• Allen-Bradley DF1
• Allen-Bradley Ethernet
• Allen-Bradley Micro800 Ethernet
• Allen-Bradley Micro800 Serial
• Allen-Bradley Unsolicited Ethernet
• Alstom Redundant Ethernet
• Analog Devices
• Aromat Ethernet
• Aromat Serial
• AutomationDirect DirectNET
• AutomationDirect EBC
• AutomationDirect ECOM
• AutomationDirect K Sequence
• AutomationDirect Productivity
Series Ethernet
• BACnet/IP
• Beckhoff TwinCAT I/O
• Bristol/IP
• BUSWARE Ethernet
• CODESYS Ethernet
• Contrex M-Series
• Contrex Serial
• Custom Interface Driver
• Cutler-Hammer D50/D300
• Cutler-Hammer ELC Ethernet
• Cutler-Hammer ELC Serial
• Dataforth isoLynx
• DDE Client Driver
• DNP3 Master Ethernet
• DNP3 Master Serial
• Enron Modbus
• EUROMAP 63
• Fanuc Focas Ethernet
• Fanuc Focas HSSB
• Fisher ROC Ethernet
• Fisher ROC Plus Ethernet
• Fisher ROC Plus Serial
• Fisher ROC Serial
• Fuji Flex
• GE CCM
• GE EGD
• GE Ethernet
• GE SNP
• GE SNPX
• Hilscher Universal
• Honeywell HC900 Ethernet
• Honeywell UDC Ethernet
• Honeywell UDC Serial
• IDEC Serial
• IEC 60870-5-101 Master
• IEC 60870-5-104 Master
• IEC 61850
• Intelligent Actuator (IA) Super SEL
• InTouch Client Driver
• IoT Gateway
• IOtech PointScan 100
• Keyence KV Ethernet
• Krauss Maffei MC4 Ethernet
• Lufkin Modbus Serial
• Memory Based
• Mettler Toledo
• Micro-DCI
• Mitsubishi CNC Ethernet
• Mitsubishi Ethernet
• Mitsubishi FX
• Mitsubishi FX Net
• Mitsubishi Serial
• Modbus ASCII
• Modbus Ethernet
• Modbus Plus
• Modbus Serial
• Modbus Unsolicited Serial
• MQTT Client
• MTConnect
• ODBC Client
• OMNI Flow Computer
• Omron FINS Ethernet
• Omron FINS Serial
• Omron Host Link
• Omron NJ Ethernet
• Omron Process Suite
• Omron Toolbus
• OPC DA Client
• OPC UA Client
• OPC XML-DA Client
• Optimation OptiLogic
• Opto 22 Ethernet
• Partlow ASCII
• Philips P8/PC20
• Ping
• SattBus Ethernet
• SattBus Serial
• Scanivalve Ethernet
• Siemens S5
• Siemens S5 3964R
• Siemens S7 MPI
• Siemens S7-200
• Siemens TCP/IP Ethernet
• Siemens TCP/IP Unsolicited
Ethernet
• Simatic/TI 505 Ethernet
• Simatic/TI 505 Serial
• SIXNET EtherTRAK
• SIXNET UDR
• SNMP
• SquareD
• System Monitor
• Telemecanique Uni-Telway
• Thermo Westronics Ethernet
• Thermo Westronics Serial
• Tiway Host Adapter
• Torque Tool Driver
• Toshiba Ethernet
• Toshiba Serial
• Toyopuc PC3/PC2 Ethernet
• Toyopuc Serial
• Triconex Ethernet
• User Configurable (U-CON)
• WAGO Ethernet
• Weatherford 8500
• WITS Level 0 Active
• WITS Level 0 Passive
• Yaskawa Memobus Plus
• Yaskawa MP Series Ethernet
• Yaskawa MP Series Serial
• Yokogawa Controller
• Yokogawa CX
• Yokogawa Darwin Ethernet
• Yokogawa Darwin Serial
• Yokogawa DX Ethernet
• Yokogawa DX Serial
• Yokogawa DXP
• Yokogawa HR
• Yokogawa MW
• Yokogawa MX
• Yokogawa YS100
• …and more each year

40. www.opchub.com
Major PLCs
Allen-Bradley
- ControlLogix, CompactLogix, MicroLogix, PLC5, SLC500, Data Highway(Plus)
Mitsubishi
- iQ-R Series, Q Series, A-Q Series, A Series
Omron
- NX, NJ, CJ, CS, CP, CV Series
Siemens
- S7-200, 300, 400, 1200, 1500, 828D, 840D
LS Electric
- Embedded UA Server for XGT
- BridgeWare OPC for XGT Series, XGB, Glofa GM Series, Master K Series
- Ethernet Serial
- UA Wrapper 포함
Slide 40

41. www.opchub.com
CNC Robot Controllers
Fanuc CNC
- 0i, 15i ~ 32i, Open Addressing
- Kepware Focas Suite
- Reads Parameters
- with Focas Library (Fanuc part number A02B-0207-K737)
FANUC Robot Controller
- R-30iB Plus / R-30iB Mate Plus
- Kepware GE Ethernet Driver GE OPEN model
- with HMI Device (SNPX) (part number RTL-R553-HT)
Heidenhain CNC
- inray OPC Router Haidenhain plug-in
- with Kepware Simulation Suite
Siemens CNC
- OPC UA Server 2.1 is included in SINUMERIK software V 4.8 SP3 or higher

42. www.opchub.com
Legacy System 통합 (1)
Slide 42
PLC
(Master-K)
HMI
RS 232C
PLC
(Master-K)
Nport
Network Switch
RS 232C
HMI
UA Server
with Master-K
Serial driver
RS 232C over LAN
Virtual Com port Virtual Com port
port1 ~ port 128

43. www.opchub.com
Legacy System 통합 (2)
Slide 43
PLC
Siemens S5/S7
HMI
MPI 통신
PLC
Siemens S5/S7
IBH/NETLink
Network Switch
HMI
UA Server
with Siemens
Ethernet driver
MPI 통신

44. www.opchub.com
Unique Values of KepServerEX
Slide 44

45. www.opchub.com
OPC Aggregator Organizer
OPC Classic 서버 통합
- 현장의 90% 이상은 여전히 Classic DA Server 사용 중
Migration to UA
- Classic DA 통합
- 기존 HMI, DCS 통합
- Non-OPC 시스템 통합
- Cloud connectivity 확보
UA Aggregator의 조건
- Windows Platform 지원의 중요성 (여전히 90% 이상의 data는 Windows 상에 존재)
- 계층적 연결 (Site Plant Line OPC Instance Tag Group Tag)의 중요성
- Customized Tag Naming의 중요성  Data 량 감소  비용 감소
- Wrapper의 한계에 갇히지 말고, New UA Server Instance 로 동작해야

46. www.opchub.com Slide 46
OPC Gateway
Slide 46
Classic DA Server
DA Client Driver
UA Server Interface
UA Clients
DA-to-UA Converter
OPC UA Server
UA Client Driver
DA Server Interface
DA Clients
UA-to-DA Converter

47. www.opchub.com
Tunnelling – Conventional approach
Slide 47

48. www.opchub.com
Tunnelling – UA Tunnelling by KepServerEX
Slide 48

49. www.opchub.com
OPC DA
Client
HMI 1
(HVAC)
HMI 2
(VMS)
Alarm 1, Off
Alarm 2, Off
Alarm 3, Off
Alarm 1, On
Alarm 2, Off
Alarm 3, Off
Modbus
Slave
Vessel Monitoring
Serial Modbus/RTU
Advanced Tags:
Derived Tag: First,
create a Facility Level
Alarm. If Alarm 1, 2
or 3 is active, then
Facility Level Alarm is
active.
Link Tag: Second,
create Modbus/RTU
slave tag items and
link to the derived
tags.
Facility 1
Facility 2
Facility 1
Alarm Inactive
Facility 2
Alarm Active
Modbus
KEPServerEX
Protocol Converter
3 Components required:
a Protocol Master
a Protocol Slave
a Converter
RS-422
Slide 49

50. www.opchub.com
DataLogger: OPC-to-Database
OPC Data to RDBs:
SQL Server, Access
Oracle, MySQL
PostgreSQL, Tibero
Any ODBC Databases
Drag Drop Configuration
Automatic table creation
Narrow Wide formats
Trigger Conditions:
Data Change
Time
User Expression

51. www.opchub.com
Local Historian – on the Edge
Local Data Store
–Store up to 10K+ tags
–10ms resolution of data
–Archive and transport
–Deadband to compress stored
Collect at source to reduce data loss
Easily configure both static and dynamic tags
Viewer for raw tag data
Access historical data using OPC HDA enabled clients
–Trending, analysis and reporting solutions
Scalable tags: 500, 10000, Unlimited
Easy, Flexible, High Speed, Cost Effective
Slide 51

52. www.opchub.com
IoT Gateway: OPC-to-Cloud
Protocols Supported
RESTful Client
RESTful Server
MQTT Client
ThingWorx
Seamlessly streams
real-time control data
into IT or IoT applications
Modeling
MQTT
Client
REST
Server
REST
Client
Thing
Worx
Analytics
Scheduling
IoT API
APIs
(Microsoft)
Big Data
Connectivity
Slide 52

53. www.opchub.com Slide 53
www.bridgeware.kr
www.opchub.com
Contact Us
THANK YOU !