IOT Week 2017: Industrial IOT

Transcription

1 IOT Week 2017: Industrial IOT Patrick Wetterwald, CTAO IOT Standards and Architecture ETSI IP6 Vice Chairman, IEC SEG8 Chair, IPSO Alliance Past President June 6 th, 2017

2 BILLIONS OF DEVICES IoT Is Here Now and Growing! Billion Smart Objects Source: Cisco IBSG, Cisco and/or its affiliates. All rights reserved. Rapid Adoption Rate of Digital Infrastructure: 5X Faster Than 25 Electricity and Inflection The New Essential Infrastructure Telephony Point TIMELINE World Population 2

3 What Industries Are We Focused On? Manufacturing Mining Energy-Utility Oil and Gas Transportation City Defense SP/M2M REAL TIME SCALE BIG DATA/ANALYTICS SECURITY Cisco and/or its affiliates. All rights reserved. 3

4 In this decade, our industry will transform more than in the last century through new markets, new technologies and new business models Dr. Dieter Zetsche Chairman Daimler AG

5 This is about a business change, to make our manufacturing facilities more flexible, more agile and more lean Kirk Gutmann GM Global Information Officer, Manufacturing and Quality

6 The New Digital World Accelerate Business Processes, Introduce New Services Fanuc Robots Lower Downtime Maximize OEE Sub-zero Faster New Product Introduction Stanley Operations Reduce Defects Increased Productivity Continental Factory Automation Lower Inventory Del Papa Distribution Center Reduce Risk Increased Capacity Digital disruption will displace 40% of incumbent companies in the next 5 years.

7 Converge Control Networks to IP Make IP operations more efficient Emulating existing Industrial protocols Beyond Control and Automation Optimize processes (by 1%?) Leveraging IT, Live big data and Analytics Internet of (Every)thing

8 Digital Manufacturing For higher operational efficiencies, improved quality and reduced risks

9 Challenges and Trends Driving Change in Manufacturing Challenges Speed Simplicity Innovation Trends Supply Chain Right- Shoring Capacity Rationalization Bigger Regulation and compliance standards Demand Chain Mass Consumerization Fast Changing Consumer Trends New Digital business models

10 Connected Factory Solutions Factory Analytics and Big Data Factory Wireless Factory Virtualization Connected Assets Factory Network Connected Machines Factory Compute Factory Collaboration Factory Security

11 What If You Could Reduce downtime? Introduce new products faster? Achieve realtime visibility? Better manage global supply chain? Protect company from security threats?

12 Key Benefits Agility Visibility Operational Efficiency Safety and Security Reduced NPI cycle Improve quality Reduced downtime Real-time monitoring Flexible Production Better Production planning Better asset tracking Lower inventory Increased OEE New business models Reduce factory vulnerabilities Minimize Cyber theft Converge Multiple Proprietary Systems onto a Single IP Network

13 Adopting the Converged Industrial Network 70% of manufacturing executives are focusing on plant floor data initiatives to drive operational and business excellence Empowering Decision Makers Aberdeen Group IT Enterprise Reliability - Wired and Wireless - Lower Latency - QoS Real-Time - Analytics - Access to plant performance Manufacturing Floor Immediate Access to - IACS data (Historian) - Device, sensor and machine status Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13

14 Convergence Driving Adoption of The Internet of Things Sensors Real Time Analytics Personal Devices Robots Security Devices Sensors Everywhere Machine-to-Machine Pervasive Intelligence Automation Less Waste, More Efficiency, More Cost Savings Constant Improvements in Productivity Enhanced, Personalized Experiences Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14

15 Enabling Connectivity Building to the Factory of the Future Real Time Supply Chain Asset Utilization Accelerated NPI New Business Models Productivity Energy Management Flexible mfg Flexible controls Flexible networks Resiliency (REP) Integrated management Near Zero Downtime Distributed Compute Machine-as-a-Service Remote Asset Mgmt Mobility 2.4/5Ghz Clean air Machine energy visibility reporting and analytics Connected Factory Applications Factory Security Industrial Identity Services Industrial Deep Packet Inspection IP Cameras Video Surveillance Management Converged Network Platforms Ruggedized Wireless Access Points Industrial Routers and Switches Hardened Mobile M2M Gateway Ruggedized Optical transceivers Things Parts Robots Torque Sensors Asset Tags IP HD Camera Drives Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15

16 Real-Time Application Classes Process Automation Factory Automation Motion Control Function Information Integration, Slower Process Automation Time-critical Factory Automation Motion Control Comm. Technology.Net, DCOM, TCP/IP Industrial Protocols, CIP, etc. Hardware and Software solutions, e.g. CIP Motion, PTP Period 1 second or longer 10 ms to 100 ms <1 ms Industries Oil & gas, chemicals, energy, water Auto, food and bev, electrical assembly, semiconductor, metals, pharmaceutical Subset of factory automation Applications Source: ARC Advisory Group Pumps, compressors, mixers; monitoring of temperature, pressure, flow Material handling, filling, labeling, palletizing, packaging; welding, stamping, cutting, metal forming, soldering, sorting Synchronization of multiple axes: printing presses, wire drawing, web making, picking and placing Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16

17 Time Sensitive Networking

18 Cisco Connected Factory for Industrie 4.0 Time Sensitive Networking Cisco Industrial Network Director Connected Asset Manager for IoT Intelligence Securely Connect, Extract, and Manage Data for Improved Business Operations

19 Deterministic Ethernet Characteristics for Real time applications Low Latency & Packet Jitter Measured in microseconds Control traffic immune from impact of other traffic Automation & Control Rate Constrained Best Effort Guaranteed delivery & resiliency Time Synchronization Multiple Deliveries Measured in nanoseconds Cisco and/or its affiliates. All rights reserved. 19

20 Wind Turbines Oil and Gas Automotive (from 2016) Space Aerospace and Defence Cisco and/or its affiliates. All rights reserved. Safety certified control system (integrated approach to networking and control) Reduced total cost of ownership for end user from higher availability of system Process control system Expanded existing control system with determinism Cost-effective to operate, simple to upgrade and maintain Automotive in-vehicle network for control High performance, cost-effective, weight reducing from integrating safety and non-safety traffic on one network Spacecraft backbone Network, redundant fail- operational network Enabled robust network where maintenance is not an option Avionics Backbone network, simple redundant mechanisms that fulfill fail operational requirements Enabling highest performance 20

21 Deterministic Networks with TSN IEEE Key Advantages of TSN Secure Simple Secure Simple Intelligent Intelligent Guarantee delivery and bandwidth for critical data flow Guarantee latency for data delivery Converge networks save operating costs Increase data availability Leverage Ecosystem Expertise

22 Growing Ecosystem of TSN Vendors at IIC Secure Simple Intelligent Key Facts: 18 Vendors participating today 6 Plugfests conducted 2 Testbed facilities Demonstrations at 6 major shows Collaboration with multiple standards Schneider Electric National Instruments National Instruments Innovasic Belden/ Hirschmann Cisco Cisco TTTech TTTech Cisco National Instruments Innovasic B&R Automation Schneider Electric Rexroth/Bosch Group Innovasic

23 Moving the Control Loop out of the Cell Area expands the footprint of Determinism Move the Control Loop processing from here Implication: Deterministic Requirements may spread due to Virtualization of Control Loop To Here: Local DC Resources Hardened UCS Probably here first

24 Time Sensitive Networking and Wireless

25 Not Process Control but Missing Measurements Reliability and availability are important, which implies Scheduling and admission control Scalability 10 s of thousands of new devices Deployment cost factor is key For Emerson this is the second layer of automation: Typically missing are the measurements you need to monitor the condition of the equipment--temperature, pressure, flow and vibration readings you can use to improve site safety, prevent outages and product losses, and reduce maintenance costs of equipment such as pumps, heat exchangers, cooling towers, steam traps and relief valves.

26 Downtime Maintenance and operation represent 75% of the Total equipment cost Corrective maintenance Preventive Maintenance Predictive Maintenance Actionable Prescriptions Maintenance & operation COST Deployment of Wireless sensors is seen as an efficient solution Cisco and/or its affiliates. All rights reserved. 26

27 Wireless Connectivity New level of cost effectiveness Deploying wire is slow and costly Low incremental cost per device Reaching farther out New usages / types of devices Global Coverage from Near Field to Satellite via 3/4G BUT Lack of trust in Industrial vs. Wired Multiple Interferers, ISM band crowded Issues with IPv6 for scalability and Mobility

28 IEC IEC ISA100.11a IEC WIA-PA IEC based on HART 7.1. TDMA fixed time slots (10ms) Mesh only Shipped YE Vendor driven Emerson, E&H, ABB, Siemens IEC based on 2011 revision TDMA+CSMA Var. time slots Star, mesh and hybrid topology IPv6, 6LoWPAN, TCP-friendly Shipped mid-2010 Mostly user driven Honeywell, Yokogawa, Invensys Alternate from China Star, mesh and hybrid topology Standardization work started in 2006.

29 Single protocol vs. Converged Network and Control APPLI. ISA100 HART WIA-PA ISA100 HART WIA-PA MGT / CTRL. ISA100 WiHAR T WIA-PA Common Network Management and Control NETW. ISA100 Wireless HART Wia-PA 6TiSCH TRIPLE OPEX + interferences Better Co-Existence

30 Requirement for a new standard Industrial requires standard-based products Must support equivalent features as incumbent protocols Must provide added value to justify migration 6TiSCH value proposition Design for same time-sensitive MAC / PHY ( e TSCH) Direct IPv6 access to the device (common network mgt) Distributed routing & scheduling for scalability (for monitoring) Large scale IPv6 subnet for mobility (50K +)

31 6TiSCH within Open Standards Reference Model Application Layer Web Services, EXI, SOAP, RestFul,HTTPS/CoAP Metering IEC CIM, ANSI C12.22, DLMS/COSEM, SCADA IEC 61850, DNP3/IP, Modbus/TCP, DNS, NTP, IPfix/Netflow, SSH RADIUS, AAA, LDAP, SNMP, (RFC 6272 IP in Smart Grid) Transport Layer UDP/TCP Security (DTLS/TLS) Network Layer IPv6 RPL IPv6/IPv4 Addressing, Routing, Multicast, QoS, Security Data Link Layer Mgmt LLC M A C IEEE e TSCH IEEE x/EAP-TLS and IEEE i-Based Access Control 6LoWPAN (RFC 6282) IPv6 over Ethernet (RFC 2464) 6top IEEE Wi-Fi IEEE Ethernet IPv6 over PPP (RFC 5072) 2G, 3G, LTE Cellular IP or Ethernet Convergence SubL. IEEE WiMAX Physical Layer IEEE g 2.4GHz, 915, 68MHz DSSS, FSK, OFDM IEEE Wi-Fi 2.4, 5 GHz, Sub-GHz IEEE Ethernet UTP, FO 2G, 3G, LTE Cellular IEEE WiMAX 1.x, 3.xGHz Open Standards: At All Levels to Ensure Interoperability and Reduce Technology Risk for Utilities Future Proofing: Common Application Layer Services Over Various Wired/Wireless Communication Technologies Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31

32 Process Criticality Technologies for the Industrial Internet ISA100.11a WirelessHART 6TISCH / PCE Industrial Control Data Internet 6TISCH / RPL Business Data CG-Mesh LPWA WiFi Office Data Nb of Devices (order of magnitude)

33 Future Architecture Enterprise Plant Control Network Wi-Fi or Ethernet (RPL Domain or IPv6 ND) 6LoWPAN + RPL 6LoWPAN + RPL Plant Firewall Wireless Lan Controller Integrated Plant Security & Identity services - Wi-Fi Border Router - WiFi/6LoWPAN RPL Backbone Router - WiHart Backbone Router - ISA100 Backbone Router - WiFi Host - 6LoWPAN Host - WirelessHART Host - ISA100 Host

34 Securing Industrie 4.0 and the Industrial Internet of Things Challenges, Frameworks, Architecture and Device Considerations

35 Challenges and Trends Scale 50B connected things by 2020 IoT devices predicted to account for 83% of all Internet connections by 2020 Connected Smart Devices without system resources to run security Security-immature vendors Mirai botnet used hard-coded default credentials -> not sophisticated but devastating Convergence of IT and OT IT progressively being given responsibility for security in OT networks OT shops cannot ignore security due to regulations and/or proliferation of attacks

36 Cyber Physical Security Framework Core Functions Identify Protect Detect Respond Recover Risk Assessment Access Control Anomalies & Events Risk Management Strategy Asset Management Data Security Information Protection Awareness & Training Protective Technologies Security Continuous Monitoring Detection Process Response Planning Analysis Mitigation Improvements Recovery Planning Communications Improvements Source

37 Endpoint Security Access and Commissioning Cloud-based Security Services Data Analytic and Intelligence Define different security levels and profiles for IoT endpoints Hardware and software development strategy Business strategy Identify gaps in existing Network Access Security solutions Secure Network vs. Controlled Cloud Access Commissioning Security Asset Registration, Configuration Management, Context Service, and Configuration Management. Centralized Trust Management vs. Ownership Transfer Data collection and aggregation of IT and OT data Network behavior modeling and anomaly detection Rule-based security operations 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 37

38 Trustworthy Device Considerations... Product Assurance Trusted Execution Embedded Application Security Secure-By-Default & Trustworthy Solutions Hardware & Software Authenticity Counterfeit & Illegal Upgrade Protection Immutable Product Identity Boot-Time & Run-Time Integrity Cyber Resiliency & Tamper Resistance Strong Crypto & Certifiable Entropy Secure (Application) Key Storage Secure Crypto IP & DRM Protection Strong Device/Network Authentication Secure Communication (e.g. TLS, DTLS) Customer Visible Trustworthy Status

39 Security Architecture Plant monitoring Connected Machines Rapid Provisioning IT/OT Interface, security IoT Ready Network Manufacturing Plant Plant Network IoT Services green light, utilization, OEE streaming analytics IOT Platform Plant Systems Zero Down Time like Services Condition based Monitoring New OEM services models w/ SLA s Machine, Process, & Quality Optimization Advanced Analytics Cloud or Data Center Security Gateway MUD/ MASA Cloud Platforms Persistent Connection Transaction or Streaming IT/OT Security OEE & Utilization Machine Services Secure Pipe: Integrity Confidentiality Authenticity IOT SW Platform and and Cloud Cloud Connect Connect Analytics Secure identity, encryption, diagnostics Policy enforcement, segmentation, AAA Server, Asset Manager, Identity Manager, Policy Manager, Time services Remote Access, IOT Gateway PLANT PERIMETER FW DPI POLICY DC PERIMETER FW DPI POLICY IOT Connector ETL DATA STORE ANALYTICS VISUALIZATION

40 Network Considerations Visibility & Analysis Segmentation Remote Access Security Services Identify & authenticate devices, analyze potential dangerous behavior Segmented access control of both IT and OT environments Secure remote access into the OT network Prioritize critical areas of risk from lower risk Stealthwatch, NGFW-IPS, ISE, Umbrella, Cognitive Threat Analytics (CTA) NGFW, ISE/TS, Cognitive Threat Analytics (CTA) AnyConnect Risk Assessment, Operations/Incident Response This solution helps to build stronger protection across the IoT environment to reduce unplanned downtime and negative business impact

41 Secure Cisco Connected Factory for Industrie 4.0 Simple Intelligent Delivering Business Outcomes for Manufacturers Security Simplicity Intelligence Reduce risk Protect your IP Ensure production integrity Automated factory network deployment & Simple management Simple plug and play network deployment and replacement Easy to configure data visualization and exception reporting Manage data in the factory Transform data at machine cell edge for improved agility Bridge network silos

42 Thanks You

43