Data transmission through a unidirectional gateway
Approaches for managing alarms and alarm system performance in an industrial system are described. The industrial system may include an operation technology network (OTN) which may be communicatively coupled to an information technology network (ITN) through a unidirectional gateway which allows data transfer from the OTN to ITN, but not vice versa. The approaches as described enable transmission of event data pertaining to events or operations that may be underway in the factory site where the industrial system is installed. In addition, the present approaches also enable collection and transmission of attribute data pertaining to one or more operational parameters of control systems (DCS, SIS, PLC's, SCADA), to the ITN. The event data and the attribute data may then be processed by any module(s) that may be implemented within the ITN to generate various event related insights and insights into metrics of the alarm management system or other systems present within the OTN.
1 . A system comprising:
a processor; and
a machine-readable storage medium comprising instructions executable by the processor to:
continuously obtain event data of a plurality of control systems in an operational technology network of an industrial system from a data collection unit, wherein the event data comprises data corresponding to events occurring in the operational technology network;
generate an event file based on the obtained event data, wherein the event files comprises the event data obtained from each of the plurality of control systems in a structured format;
collect from the data collection unit, attribute data pertaining to operational parameters of the plurality of control systems in the operational technology network of the industrial system;
store the collected attribute data as a batched attribute data;
generate an attribute file based on the batched attribute data, wherein the attribute file comprises the attribute data corresponding to each of the plurality of control system in a structured format; and
cause to transmit the event file and the attribute file through a unidirectional gateway to an information technology network, wherein the information technology network is coupled with the operational technology network through the unidirectional gateway, and wherein the unidirectional gateway is to permit transfer of data from the operational technology network to the information technology network and restricts transfer of the data from the information technology network to the operational technology network.
2 . The system as claimed in claim 1 , wherein the instructions are executable by the processor to further:
in response to determining that the stored attribute data conforms to a predefined condition, generate the attribute file based on the attribute data.
3 . The system as claimed in claim 1 , wherein the event file is generated at one of a predefined time instance and on obtaining a predefined volume of event data, or a combination thereof.
4 . The system as claimed in claim 2 , wherein the instructions are executable by the processor to further:
determine a tag associated with data corresponding to the plurality of control systems; and
based on the tag, identifying the data as one of the event data and the attribute data.
5 . The system as claimed in claim 1 , wherein the event data is collected using a communication protocol comprising OPC alarm & event (OPC AE), OPC unified architecture alarms and conditions (OPC UA AC), open database connectivity (ODBC), transmission control protocol/internet protocol (TCP/IP), serial communication protocol, and file transfer protocol.
6 . The system as claimed in claim 1 , wherein the event data is obtained from a plurality of field sensors deployed at a facility being managed by the industrial control system, wherein each of the plurality of field sensors are communicatively coupled with any of the plurality of control systems.
7 . The system as claimed in claim 1 , wherein the instructions are executable by the processor to generate a subsequent event file chronologically based on subsequent obtaining of the event data.
8 . The system as claimed in claim 1 , wherein the unidirectional gateway is a data diode allowing transfer of files from operational technology network to the information technology network only.