Centralized management of a software defined automation system

Patent metadata

Field	Value
Publication number	US-11079744-B2
Application number	US-201615767850-A
Country	US
Kind code	B2
Filing date	Oct 12, 2016
Priority date	Oct 13, 2015
Publication date	Aug 3, 2021
Grant date	Aug 3, 2021

Abstract

Embodiments of system and methods for providing centralized management of a software defined automation (“SDA”) system are disclosed. The SDA system comprises of a collection of controller nodes and logically centralized and yet physically distributed collection of compute nodes by monitoring activities of the compute nodes. In accordance with some embodiments, one or more components of the system monitor execution, network and security environments of the system to detect an event in a first environment. In response to the detected event, at least one component in the first environment is remediated, the remediation of the first environment creating a trigger to cause remediation of at least one component in each of a second and third environments.

First claim

What is claimed is:

1. A method of managing an automation system comprising:
monitoring physical and virtual components of an automation system, the physical components including one or more input/output devices and field devices, the virtual components including a first compute node, and a guest and associated virtual network running on the first compute node, the guest configured to control operation of the one or more input/output devices and field devices, the associated virtual network connecting the guest to other guests on the first compute node, the first compute node connected to and managed by a fog controller, the fog controller interconnected to other compute nodes in the automation system;
receiving an indication of an automation system related event associated with the first compute node, the automation system related event negatively impacting an ability of the guest to control operation of the one or more input/output devices and field devices;
responding to the automation system related event by:
selecting a second compute node from multiple compute nodes to take over execution of the guest running on the first compute node;
configuring the second compute node to execute the guest on the second compute node;
configuring a security of the guest in the second compute node in accordance with a security policy associated with the guest; and
configuring a network of the automation system to complete control transfer from the first compute node to the second compute node;
wherein the guest is one of an application, an application function, or a software implementation of a physical device, component, or functional unit.

2. The method of claim 1 , wherein the event is triggered in response to a signal from a system external to the automation system.

3. The method of claim 1 , wherein the guest runs on a first host on the first compute node and the guest runs on the same host or a new host on the second compute node.

4. The method of claim 1 , wherein the second compute node is one of a machine running a virtual machine, container or bare metal as a host or an industrial controller.

5. The method of claim 1 , wherein taking over of execution of the guest is via a bumpless transfer.

6. The method of claim 5 , wherein the bumpless transfer is facilitated by the second compute node being a clone of the first compute node.

7. The method of claim 1 , wherein configuring the second compute node to execute the guest includes retrieving logic and state data relating to the guest from a storage node and utilizing the logic and state data to configure the second compute node to execute the guest without a restart.

8. The method of claim 5 , wherein prior to detecting the event associated with the second compute node, the network is configured to propagate inputs from both the first and second compute nodes and output from only the first compute node.

9. The method of claim 1 , wherein configuring the network of the automation system to complete control transfer from the first compute node to the second compute node includes configuring at least one physical or virtual network switch to allow inbound and outbound traffic associated with a control of a process or machine from the second compute node.

10. The method of claim 9 , wherein configuring the network of the automation system to complete control transfer from the first compute node to the second compute node further includes configuring at least one physical or virtual network switch to block outbound traffic associated with the control of the process or machine from the first compute node.

11. The method of claim 1 , wherein the event associated with the first compute node being monitored includes a compute node fault event, a maintenance event, a process event, or an upgrade event.

12. The method of claim 1 , further comprising configuring the security for the guest of the automation system includes distributing at least one security policy to the second compute node for enforcement.

13. The method of claim 1 , wherein responding to the event is by user approval.

14. The method of claim 1 , wherein responding to the event is without user intervention.

15. A system of managing an automation system comprising:
at least one subsystem operable to monitor physical and virtual components of an automation system, the physical components including one or more input/output devices and field devices, the virtual components including a first compute node, and a guest and associated virtual network running on the first compute node, the guest configured to control operation of the one or more input/output devices and field devices, the associated virtual network connecting the guest to other guests on the first compute node, the first compute node connected to and managed by a fog controller, the fog controller interconnected to other compute nodes in the automation system;
at least one subsystem operable to receive an indication of an automation system related event associated with the first compute node, the automation system related event negatively impacting an ability of the guest to control operation of the one or more input/output devices and field devices;
in response to the automation system related event :
at least one subsystem operable to select a second compute node from multiple compute nodes to take over execution of the guest running on the first compute node;
at least one subsystem operable to configure the second compute node to execute the guest on the second compute node;
at least one subsystem operable to configure a security of the guest in the second compute node in accordance with a security policy associated with the guest; and
at least one subsystem operable to configure a network of the automation system to complete control transfer from the first compute node to the second compute node;
wherein the guest is one of an application, an application function, or a software implementation of a physical device, component, or functional unit.

16. The system of claim 15 , wherein the event is triggered in response to a signal from a system external to the automation system.

17. The system of claim 15 , wherein the guest runs on a first host on the first compute node and the guest runs on the same host or a new host on the second compute node.

18. The system of claim 15 , wherein the second compute node is one of a machine running a virtual machine, container or bare metal as a host or an industrial controller.

19. The system of claim 15 , wherein taking over of execution of the guest is via a bumpless transfer.

20. The system of claim 19 , wherein the bumpless transfer is facilitated by the second compute node being a clone of the first compute node.

21. The system of claim 15 , wherein configuring the second compute node to execute the guest includes retrieving logic and state data relating to the guest from a storage node and utilizing the logic and state data to configure the second compute node to execute the guest without a restart.

22. The system of claim 19 , wherein prior to detecting the event associated with the second compute node, the network is configured to propagate inputs from both the first and second compute nodes and output from only the first compute node.

23. The system of claim 15 , wherein configuring the network of the automation system to complete control transfer from the first compute node to the second compute node includes configuring at least one physical

Assignees

• Schneider Electric Ind Sas

Inventors

• Chauvet Antonio
• Wilhelm Philippe
• Harriman Merrill
• Alfano Eric
• Mehmedagic Alen
• Kling Andrew Lee David
• Doggett David
• Vallala Vijay

Classifications

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title

• H04L41/0806

  for initial configuration or provisioning, e.g. plug-and-play · CPC title

• H04L41/08

  Configuration management of networks or network elements (address allocation H04L61/50) · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• G06F2009/45595

  Network integration; Enabling network access in virtual machine instances · CPC title