mbconnect24 The Remote Service Platform for remote maintenance, data collection and M2M communication

Transcription

1 mbconnect24 The Remote Service Platform for remote maintenance, data collection and M2M communication 11/2016

2 1 mbconnect24 THE ECOSYSTEM Remote Service Portal worldwide accessibility via internet serves as central connector between user, units and plant components secure, encrypted connections to the machines and to the users as basis for secure remote maintenance, data collection, M2M-communication and networking via internet Server Management simple management via web interface project based management of your machines and devices role based user management with highly scalable access authorizations (also on IP- or Port-level) comprehensive functions for reporting, task management and messaging various server solutions, public and private Maximum Security encrypted SSL/TLS-connections 2-factor authentication Secure Remote Password Protocol (SRP) IP Black/Whitelisting certifi ed and audited security Security-by-Design

3 mbconnect24 2 Your options IP transparent access (mbdialup) 99Diagnosis, confi guration and programming via internet 99Use of existing engineering tools such as Siemens Step7, TIA, RSlogix or Codesys, as if you were on the spot 99Direct MPI/PROFIBUS interface and driver for SIMATIC software 99Remote diagnosis with program- and fi rmware-updates 99Several users can access the router at the same time Your machines and equipment Remote access Web based access (mbweb2go) 99Supports webserver, RDP and VNC directly in standard browsers 99Optimized for smartphones and tablets 99No client- or additional software required Web based visualization 99Easy link of indicating and operating element with process data (drag&drop) 99Reading and writing of system- and process-data via standard browser 99Editor for Dashboards and widgets 99Access to visualization pages via external static links Data logging and alarming Data management 99Comprehensive reports (manual or time-controlled) 99Data export as PDF, CSV or HTML 99Connection to enterprise systems (ERP, SCADA) 99External data base connection (mysql) 99API-Access to live- and logging-data M2M-communication Registered Trademarks of Siemens: TIA Portal, S7-300, S7-400, S7-1200, S7-1500, SIMATIC, S7, STEP 7 Beckhoff : TWINCAT 3S-Smart Soft ware: CoDeSys

4 3 mbconnect24 The modular system functional principle For remote access, collect and display data, web-based visualization, monitoring and alarming, as well as M2M communication on a secure platform. Via webbrowser you can visualize equipment, read operating data or manage the process, look on the surveillance camera or on the webserver of the. The server with the remote service portal as central connecting component between users and machine and displays the management interface. You have access to webserver as well as VNC- and RDP-support via smartphone or tablet without specific software. HTTPS The service staff connects with the portal via client-software (mbdialup) to have a IP transparent access to all devices behind the router. TCP/UDP VPN SIEMENS, Rockwell, RSLogix, Beckhoff Twincat, Schneider Electric, Mitsubishi, Webbased access Functional Principle Terminalserver technologies, such as VNC or RDP, usually require a appropriate client on the user side, e.g. with Java or Flash. mbweb2go solves this via server-sided Proxy which translates the graphic outputs of VNC and RDP, so that access is possible directly via standard browser. The mbweb2go principle is based on a HTML5 web application and therefore doesn t need special plug-ins or additional installations. Through the minimum resource requirements it s ideal for smartphones and tablet computers. mbweb2go is a service in the remote-service-portal and acts as PROXY between RDP, VNC, webserver and browser HTTPS Browser HTTPS

5 mbconnect24 4 Motion RS-232/485 VPN MPI/Profibus USB Security through: Encrypted connections (SSL/TLS) Only outbound connections Regular security audits The router allows the IP transparent access to, HMI and other end devices. Additionally it serves as a firewall and collects data from control systems or sensors. Connection to end devices with serial interface, Ethernet, MPI/PROFIBUS and USB. Webbased Access (mbweb2go) 99Mobile and secure web access via HTTPS 99Works with every standard browser 99Access to web server and IP-cameras 99Supports RDP- and VNC-protocols without special clients or apps 99HTML5-capable standard browser is suffi cient 99Independent from operating system on the end device 99Allows the monitoring and visualization independent from stationary PCs Web Server HMI VNC Server RDP Server

6 5 mbconnect24 The Center Remote Service Portal Central switchboard Switchboard for users and devices (routers, data modems) All users and devices only connect to the server (so called outbound connections) Central management of all projects, users and machines Role-based user management Finely scalable access rights for participants behind the router Provides encrypted data connections between the locations Organizes devices and users in projects Provides effi cient workflow with integrated messaging system and task planer Varieties of the Remote Service Portal mbconnect24 Public Cloud Start with a free, ready to use environment Upgrade to higher scope of performance possible For small to medium sized projects (up to 250 units) mymbconnect24.mini Private Cloud Complete solution Serverhardware with installed Portal-Software Ready to use For small to medium sized projects (up to 100 units) mymbconnect24.virtual Private Cloud Hardware independent virtual machine Runs with your hardware (inhouse or hosted) Widely scalable in functionality and scope of performance

7 mbconnect24 6 Security at its maximum Thanks to the encrypting over the security protocol TLS/SSL The compliance with highest standards also allows the use in business critical applications. Because only outbound connections are being used, a smooth integration in the existing IT is guaranteed without security concerns. The existing security strategies remain untouched Therefore securing of the authentication, integrity and confi dentiality of the transferred information. 2-factor authentication (with SMS or Google-Auth) With Secure Remote Password (SRP) technology Regular tool-based and manual penetration test Top 10 Facts 1. Secure and transparent access to control systems, machines and units 2. Use of existing engineering tools, such as Siemens Step7, TIA-Portal, RSlogix or CoDeSys, as if you were on site 3. Direct MPI/PROFIBUS interface and driver for SIMATIC Software 4. WAN connection via Port 80,443 or 1194 and PROXY s, China Gateway, one clear IP-address per server 5. No specifi c IT-knowledge required 6. Several users can connect to a router at the same time and can access the IP network simultaneously (Limitation through licenses and bandwidth) 7. Fast commissioning through confi guration transfer via file (USB stick) 8. Offline confi guration management of the routers (central data management on the server). No confi guration on the router necessary 9. Personalized and limited access rights via project management on the portal 10. Scalable server solutions

8 7 mbconnect24 The Remote Service Portal in detail Characteristics Central management of all users, systems, projects and devices in one place Consistently web-based - all administration and management tasks are processed directly in the browser, no special software is required Central confi guration of the routers and data modems: Confi guration is stored on the portal and loaded automatically as soon as the devices connect to the portal For secure and transparent remote maintenance on control systems, machines and systems Visualize and operate process data of the controls directly from the portal Effi ciently monitor and store process data in long-term archives or export as a database Interesting Facts Machines and units will be equipped with an industrial router mbnet or a data modem mbspider, which register on the portal. Machines and units establish a VPN-connection to the portal: permanent with power supply, program-controlled if required or if required by key switch or at the push of a button, router with modem via SMS. The routers and data modems don t require a fix IP-address because the end devices always register themselves on the portal (also no SIM with fix IP). Access control for each device connected to the router. Connection of external devices, with which you connect your own OpenVPN-capable devices with the portal. Templates simplify the job with recurring confi gurations. Project Management Practical project structure in which the sites and Machinery is directly illustratable Project-related management and confi guration of the end devices A project is the highest authority all units (data modems and routers) are assigned to exactly one project As soon as a unit has been created in the project, the interfaces and connected components can be defi ned and managed. Project Device Interfaces HMI System MPI/Profibus USB Serial COM Motion HMI MPI/Profibus USB RS-232/485 RS-232/485

9 mbconnect24 8 Reports Connection reports which user was connected to which device at which time Reports for SMS dispatch, data consumption, configuration transmissions and process data View and export reports as PDF, CSV, HTML Scheduler Sending reports (connections, data points) Display all tasks in the dashboard Organize recurrent tasks Firmware updates and router administration Client and user administration The distinction between clients, users and user groups simplifies administration The client is the parent User or user groups are assigned to the client The user rights for several users can be easily managed by user groups Client 1 Client 1.1 Client 1.2 Client 2 Client n User group 1 User group 2 User group 3 User group n User 1 User 2 User 3 User 4 User 5 User 6 User 7 User n Role based access management for all users: grant access to data to different types auf users, like operators, service technicans or production engineers. Restrict access rights to individual ports or protocols Fine grading of rights, for example operators (general plant data), service technicians (programming access) and management (production figures) Task and message management Integrated mailing system, sending s internally and externally Alarm management with SMS and Sending messages to other users / project participants Delegate tasks to other users / project participants Customize Adapt the layout of the portal with your logo or company colors. Scalable up to individual front foil of router and data modem.

10 9 mbconnect24 Access possibilities for remote maintenance and data collection Transparent Access (mbdialup) VCOM, tunnels virtual COM- Ports on COM-interface of the mbnet RS-232 RS-485 RS-232/485 VCOM TCP/IP Ethernet-Protocols Beckhoff Wago, TCP/IP SEARCHoverIP, Multicast for common -programming environment TCP/IP SEARCHoverIP mbnet.s7 Adapter STEP7-Classic and TIA Portal for MPI/ PROFIBUS STEP 7 Classic TIA Portal MPI/Profibus mbnet-s7 USBoverIP, tunnels virtual USB-Port on USB-interface of mbnet Rockwell Schneider Electric USB USBoverIP Possibilities of connection for internet and site-sided: Internet Site ETH 3G 4G WIFI ETH serial S7-MPI/ PB USB Remote access Data collection mbnet in prep mbnet.mini mbspider

11 mbconnect24 10 Motion RS-232/485 HMI Motion Serial RS-232/485 Ethernet MPI/Profibus MPI/Profibus Ethernet USB Ethernet Serial RS-232/485 USB Data sources for the data collection S7 Ethernet S7-MPI/ PB Modbus TCP Modbus RTU Rockwell EthernetIP KNX OnBoard I/O s mbnet mbnet.mini mbspider -

12 11 mbconnect24 Web-based visualization Use the web browser to control the operating data of your system - directly from your smartphone or tablet. Thanks to the barrier-free access to the remote service platform, you can directly look at your system by smartphone - they do not need either an app or a special client - their preferred browser is suffi cient. Characteristics 99Works according to the HTML5 standard, works on Windows, ios, Android 99Graphical representation of data and states via freely confi gurable dashboards (instrument panel) 99Visualization of the data of individual machines and system or location-spanning 99Data is collected by mbnet or mbspider in the fi eld and transferred to the dashboards on the portal 99Data points from the or measured values from energy meters 99You can set your own pictures (JPG, PNG) for the background 99Display of live parameters via system images 99To view simple registration by user ID and password 99Own display pages (dashboards) with information from systems and machines (all possible within a project) 99Corresponding display and input elements such as pointer instruments and bargraphs are provided as a library 99The display pages are confi gurable for project, client and device specifi c purposes 99Visualizations can be created as templates and reused Data collection MPI/Profibus RS-232/485 Database see page 10 Create your own visualization surfaces Scaling Display element Display in Dashboard O max : +30 Database Raw value I max : 10 I min : 0 18 O min : -30

13 mbconnect24 12 Data collection and visualization Data collection contains 99Monitoring process values 99Alarm when limits are exceeded 99Archiving, evaluating and analyzing data 99Provision for further processing (CSV, PDF, SQL) Create data report... Data collection and evaluation 99Display process data directly in dashboards with widget and position them freely 99Analysis and evaluation via standard browser 99Creation of evaluations in export format PDF or CSV (Also for Excel) 99Store the data in an external database (customer system) or internally on the portal mbconnect24 99Depending on the mbspider or mbnet variant, various interfaces and protocols are available for field devices (See data sources on page 10) 99Pre-made templates for common confi gurations as PDF Examples Data management Provides access to all the data in the portal in order to process it in its own IT environment (SAP, Excel,...) Basis for customer-specific applications such as reporting, long-term archives or detailed evaluation Retrieval of fault messages and alarm history Enables individual web visualization for end users Example for widget positions in a browser Example for freely positionable widgets in a browser. The background image can be freely selected for this purpose. Example of the display of logged data. These display elements can be individually configured

14 13 mbconnect24 Alarming and monitoring In the event of material shortages, faults or other events, please notify the appropriate personnel by SMS or . mbconnect24 can monitor everything you have as an external signal or as a value in a control system for example, the temperature in a cold store, the output of a production plant, the operating condition of a heating system, the level of a silo, the temperature of hydraulic oil, the level settings of rivers or the pressure in the water supply. Characteristics Alarm visualization 99Alarms for certain events or exceeding thresholds 99Easy entry and monitoring of limit values 99Events and alarms, summary of various attachments on a dashboard 99Send via SMS, and / or via the integrated message system 99Message profiles can be set by means of calendar functions, so that the dispatch of the message is time-dependent and can be controlled according to needs 99The alarm history is shown in the dashboard 99Alarms can be differentially prioritized and thus can be selectively reported to users 99Active alarms are displayed in the form of a list or as a graphical map Create your own alarm Scaling Condition Display in Dashboard Database Raw value I max : 10 I min : 0 O max : If Temperatur > 10 C yes Alarm no O min : -30

15 mbconnect24 14 M2M communication M2M communication Characteristics Automated data exchange between machines or between terminals and a central control center Networking of plants and machines among each other All devices within a project are connected transparently Permanent coupling of networks 99The communication relations are organized in the project structure in the portal. Each device within the project can communicate with each other 99Remote control units (HMI) can communicate directly with the s in the network network via the M2M network 99Within the M2M network each participant is addressed with a unique IP address 2 1 HMI HMI Application example for a permanent virtual network infrastructure: The SCADA system has permanent IP access to all subscribers () Each has permanent IP access to the SCADA system Each has permanent IP access to the other 's Remote maintenance to the s can be carried out at any time Machine 1 Machine 2 SCADA company network WAN VPN DMZ Internet REMOTE MAINTENANCE Machine 3

16 MB connect line GmbH offers universal solutions for worldwide remote maintenance of machines and equipment. The specialists at MB connect line can draw on years of experience and extensive know-how. MB connect line GmbH Winnettener Str Dinkelsbühl Germany Tel. +49 (0) / Fax +49 (0) / MB connect line Inc Winfield Road, Suite 200 Warrenville, IL USA Tel center.usa@mbconnectline.com info@mbconnectline.com Follow us: EN: facebook.com/mbconnectlineinc DE: facebook.com/mbconnectline EN: twitter.com/mbconnectlineen DE: twitter.com/mbconnectline 2016 MB Connect Line GmbH. All rights reserved Text and photo credits: MB Connect Line GmbH, fotolia, shutterstock, Siemens AG mbconnectline_en_11_16_o Layout: H1QN.de