Safe OPC Tunnelling to Connect OT to IT

  Enquiry / contact me

Protocols used to connect industrial equipment don’t work well over a network, making it difficult to connect Operations Technology (OT) to Information Technology (IT) through a reliable a secure connection

Industry 4.0

Safe OPC Tunnelling to Connect OT to IT
Safe OPC Tunnelling to Connect OT to IT

There is hidden treasure in data. Companies that adopt Industrie 4.0 and the technologies of IoT (Internet of Things) are discovering this. Among other things, they derive value from getting data from their plants into their corporate offices in real time. Connecting OT (Operations Technology) to IT (Information Technology), though, must be both reliable and secure. 

Sharing data through secure connection

When control engineers at ABB working on a secure power plant in Italy wanted to share data between the plant and the corporate office, they needed a highly reliable and secure connection. “Customers are very sensitive about security these days since they need to exchange information on the Internet,” said the project manager. “We had OPC DA servers on our equipment, but found that using DCOM for networking was too risky. It required us to open too many ports in our firewalls. We had to find a way to avoid using DCOM.”

The OPC DA protocol is used to connect industrial equipment, but it does not work well over a network. OPC DA uses DCOM, which is difficult to configure, and not secure because it requires opening several firewall ports. To solve this problem, the ABB team implemented OPC tunnelling using the Cogent DataHub from Skkynet.

Tunnel connection configured

The engineering team connected a Cogent DataHub to the OPC server running on the plant, and configured a tunnel connection out to another DataHub running in the office, which was connected to the corporate LAN. The DataHub tunnel provides an SSL-encrypted TCP connection, as well as a way to make an outbound connection from the plant, keeping all firewall ports closed. The two DataHubs mirror the data, so that every data change received by the DataHub on the plant LAN is immediately sent to the DataHub on the corporate LAN, and from there to the central data-handling system. The data connection is bidirectional, so that supervisory commands can be sent from the office system to the plant, if necessary.

The protocol for the tunnel itself is DHTP (DataHub Transfer Protocol), which is designed for data connectivity and communication for Industrial IoT applications. It consumes minimal bandwidth at the lowest possible latency, and can support hundreds of interconnected data sources and users. It adds virtually no latency to the data transmission, and guarantees consistency of data, preserved through multiple interconnections. 

Seamless connection

By seamlessly integrating OPC and DHTP, the DataHub tunnel allows the OPC server and client to remain connected, even when the network connection drops, and immediately updates the data when the connection is restored. This combination of security and reliability is why the ABB team chose the DataHub for their OT to IT connection.

“For us, this OPC tunnel is very good, because we only need to open one port on the IT side, and we are secure from DCOM hassles and break-ins,” said the project manager. “We are considering installing this same solution in our top plants.”
 

Posted on June 30, 2019 - (707 views)
Skkynet Cloud Systems Inc.
2233 Argentia Road Suite 306
L5N 2X7 Mississauga - Canada
+1 905-702-7851
View full company profile
Location

Safe OPC Tunnelling to Connect OT to IT

Protocols used to connect industrial equipment don’t work well over a network, making it difficult to connect Operations Technology (OT) to Information Technology (IT) through a reliable a secure connection

More products from this supplier
Related articles
''Agility is the Key of IIoT Innovation,'' Advantech Says at Global IIoT Summit
PAC RADAR Acknowledges Eurotech as Best in Class in “IoT platforms based on Open Source”
Mouser's Digital AI Conference is now Available On-Demand
How the Digital Thread Puts an End to Digital Threats
Advantech to Unveil the Latest in AI and IIoT at its Global IIoT Virtual Summit
“5G Private Networks can Become a New Communication Backbone
for Industrial Automation”
Wireless Kits - Wi-Fi5/BT5.0 and LTE Cat.16
New International SPECTARIS Standard for Laboratory Equipment Communication
Real-time Data: How to Take Advantage of 5G Opportunities?
Eco-friendly Augmented RFID Solution
Open Standards Platforms
Co-creating the Future of the IoT World
Co-creating the Future of the IoT World
Procentec: Industry 4.Human
Robot Tools RFID Identifications
Co-creating the Future of the IoT World
Hannover Messe: Home of Industrial Pioneers
Procentec Diagnostic Tools
Embedded Solutions for IoT Applications
Advantech Co-creates the Future
Wireless Kits - Wi-Fi5/BT5.0 and LTE Cat.16
Eco-friendly Augmented RFID Solution
Compact & Configurable Rugged Industrial Computers
IO-Link Position Sensors
Ultra-low Power Radio Module
Compact Pressure and Vacuum Switch
Autonomous Transport System
Deutsche Messe Launches Hannover Messe Digital Days to be Held from 14 to 15 July 2020
Rugged COM Express Type 6 Module
Permanent Magnet Synchronous Reluctance Motor
Mouser's Digital AI Conference is now Available On-Demand
Post-Corona Recovery: High demand for “Robotics Skills”
Ultra-low Power Radio Module
Autonomous Transport System
Permanent Magnet Synchronous Reluctance Motor
Easy-to-use Security Routers and Firewall
Flexibly Scalable Edge Cloud Data Center
Software for Product Data Management
Data Extraction with AI-powered Anomaly Detection
Label Printer with Industry 4.0 Connectivity