Distributed historization system
A system for historizing process control data. A configurator module registers a data source device with a historian server and indicates to the historian server to generate data source registration information for identifying the registered data source device. The historian server generates and stores the data source registration information. The historian server also generates a connection token comprising the data source registration information. The configurator module forwards the connection token to the data source device, which stores the token and sends it to the historian server with data. The historian server compares the connection token received from the data source device to the connection token stored by the historian server, wherein if they match, the historian server stores the data from data source device.
1. A system for providing access to a historian comprising:
a historian server; and
a data source device comprising a configurator module, a publisher module, and a non-transitory computer readable medium comprising instructions that when executed by a processor cause the data source device to:
communicate, by the configurator module, with the historian server and the publisher module;
accept, by the configurator module, a data source device registration request to register the data source device as a registered data source;
generate, by the configurator module, a data source ID and a data source secret in response to the data source device registration request;
send, by the configurator module, the data source ID and the data source secret to the historian server as a historian data source ID and a historian data source secret;
send, by the configurator module, the data source ID and the data source secret to the publisher module as a client data source ID and a client data source secret;
receive, by the publisher module, the client data source ID and the client data source secret from the configurator module;
encrypt, by the publisher module, the client data source ID and the client data source secret;
receive, by the configurator module, a request for a data upload from the data source device;
compare, by the configurator module, the client data source ID and the client data source secret to the historian data source ID and the historian data source secret, respectively, to check if they are a valid match;
store the data on the historian server if the match is valid; and
reject the data upload if the match is not valid;
wherein the data source ID and the data source secret uniquely identifies the registered data source;
wherein the configuration module is configured and arranged to allow automatic uploading from the registered data source to the historian regardless of whether a user is connected to the registered data source; and
wherein the system is configured to enforce security of communication with the historian at the data source device.
2. The system of claim 1 ,
wherein the client data source ID and the client data source secret are received together with the data for each data upload request from the registered data source.
3. The system of claim 2 ,
wherein the configurator module is configured and arranged to accept user information from the registered data source, the user information comprising user credentials.
4. The system of claim 3 ,
wherein the configurator module is configured and arranged to accept the data upload from the registered data source even when there are no user credentials to check.
5. The system of claim 4 ,
wherein one or more users registering the registered data source do not have access to the data source ID or the data source secret.
6. The system of claim 5 ,
further comprising the registered data source;
wherein the data source ID and the data source secret are encrypted; and
wherein the one or more users cannot copy the data source ID and data secret from the registered data source to another data source device.
7. The system of claim 6 ,
wherein the registered data source is configured and arranged to block one or more users and/or applications from accessing the data source ID and the data source secret.
8. A system for providing access to a historian comprising:
a historian server;
a data source device comprising a non-transitory computer readable medium comprising instructions that when executed by a processor implement:
a configuration module;
wherein the configuration module is configured and arranged to:
communicate with the historian server for providing uploaded data to the historian server;
accept a data source registration request to register the data source device as a registered data source;
generate a data source ID and a data source secret when the data source device registration is requested;
send the data source ID and the data source secret to the historian as a historian data source ID and a historian data source secret;
store the data source ID and the data source secret as a client data source ID and a client data source secret;
receive a request for a data upload;
compare the client data source ID and the client data source secret to the historian data source ID and the historian data source secret, respectively, to check if they are a valid match;
send the data to the historian server if the match is valid; and
reject the data upload if the match is not valid;
wherein the configuration module is configured and arranged to accept user information, the user information comprising user credentials;
wherein the configuration module is configured and arranged to accept the data from the registered data source even when there are no user credentials to check; and
wherein the system is configured to enforce security of communication with the historian server at the data source device.
9. The system of claim 8 ,
wherein one or more users registering the registered data source do not have access to the data source ID or the data source secret.
10. The system of claim 9 ,
wherein the one or more users and/or applications are blocked from accessing the data source ID and data secret.
11. The system of claim 8 ,
wherein the client data source ID and the client data source secret are received together with the uploaded data for each data upload request from the registered data source.
12. The system of claim 11 ,
wherein one or more users registering the registered data source do not have access to the data source ID or the data source secret.
13. The system of claim 12 ,
wherein the one or more users and/or one or more applications are blocked from accessing the data source ID and data secret.
14. The system of claim 13 ,
further comprising the registered data source;
wherein the client data source ID and the client data source secret are encrypted; and
wherein the one or more users cannot copy the client data source ID and/or the client data secret from the registered device to another data source device.
15. The system of claim 14 ,
wherein the registered data source is configured and arranged to block the one or more users and/or the one or more applications from accessing the data source ID and data secret.
16. A system for providing access to a historian comprising:
a historian server; and
a data source device comprising a non-transitory computer readable medium comprising instructions that when executed by a processor implement:
a configuration module;
wherein the configuration module is configured and arranged to:
communicate with the historian server;
accept a data source device registration request from a user to register the data source device as a registered data source;
generate a data source ID and a data source secret when the data source registration is requested;
store the data source ID and the data source secret in a historian token on the historian server;
store the data source ID and the data secret in a client token on the registered data source;
receive the client token from the registered data source;
receive a request for a data upload from the registered data source;
compare the historian token to the client token to check if they are a valid match;
store the data on the historian server if the match is valid; and
reject the data upload if the match is not valid;
wherein the data source ID and data source secret are received from the registered data source;
wherein one or more users registering the registered data source do not have access to the data source ID or the data source secret; and
wherein the system is configured to enforce security of communication with the historian at the data source device.
17. The system of claim 16 ,
wherein the configuration module is configured and arranged to accept user information from the registered data source, the user information comprising user credentials.
18. The system of claim 17 ,
wherein the configuration module is configured and arranged to automatically accept the data source upload from the registered data source even when there are no user credentials to check.
19. The system of claim 18 ,
further comprising the registered data source;
wherein the client data source ID and the client data source secret are encrypted when stored on the registered data source; and
wherein the user or a different user cannot copy the data source ID and data secret from the registered data source to another client.
20. The system of claim 19 ,
wherein the registered data source is configured and arranged to block the one or more users and/or one or more applications from accessing the data source ID and the data source secret.