Transparent bridging and routing in an industrial automation environment
The subject disclosure pertains to transparent communications in an industrial automation environment amongst automation system components. PLC modules can be provided with unique network addresses such as IP addresses and accessed over a network using those addresses. The actual protocol and route employed to communicate with the PLC modules need not be known to a client system in order to access the PLC modules. Industrial control system configurations can be modified and expanded without affecting the client system ability to function in the environment.
1. An industrial control system comprising:
a network module component communicatively coupled to an industrial device the network module component further communicates to an internet, the industrial device has a globally unique network address that is self-assigned by the industrial device based upon at least one of a type or function of the industrial device, wherein at least a portion of the globally unique network address provides an indication of the at least one of a type or function of the industrial device; and
a security component that controls access to the industrial device through the network module.
2. The system of claim 1 , further comprising a directory component that discovers the globally unique network address and makes the globally unique network address available on the internet.
3. The system of claim 1 , the security component authenticates access privileges of a client.
4. The system of claim 3 , the security component blocks network traffic from an unauthorized client.
5. The system of claim 1 , the security component prevents access from clients outside a local area.
6. The system of claim 1 , the security component utilizes at least one of firewall techniques, network address translation techniques, and filtering techniques to hide at least one of the globally unique identifiers from view over the Internet.
7. The system of claim 1 , the security component is embedded within the network module or embedded within the industrial device.
8. A method of network access in an industrial controller environment comprising:
communicating with at least one industrial control device over a backplane, wherein the industrial control device has a globally unique identifier that is self-assigned by the industrial control device based upon at least one of a type or function of the industrial control device, wherein at least a portion of the globally unique network address provides an indication of the at least one of a type or function of the industrial control device;
communicating with a remote system via a TCP/IP network using the globally unique network identifier; and
authenticating communications between the remote system and the services on the industrial control device based upon the globally unique identifier.
9. The method of claim 8 , authenticating communications further comprises validating a username and password.
10. The method of claim 9 , further comprising verifying privileges of the remote system.
11. A computer readable medium having stored thereon computer executable instructions for carrying out the method of claim 8 .
12. An industrial control system comprising:
an industrial control device communicatively coupled to a backplane, wherein the industrial control device comprises a globally unique internet address that is self-assigned by the industrial control device based upon at least one of a type or function of the industrial control device, wherein at least a portion of the globally unique internet address provides an indication of the at least one of a type or function of the industrial control device; and
a network interface component communicatively coupled to the backplane, wherein the network interface communicates to the internet, the network interface routes message over the backplane from the internet to the industrial control device and from the industrial control device to the internet based upon the globally unique internet address.
13. The system of claim 1 , wherein the industrial device comprises a plurality of services, wherein each service has a globally unique network address on the internet, the network module component routes messages from the internet to the industrial device and from the industrial device to the internet based upon the globally unique network addresses of each service.