Plug and produce universal automation.

Schneider Electric's EcoStruxure Automation Expert universal automation solution can now seamlessly deploy to Phoenix Contact’s PLCnext Technology, a key milestone in the industrial world’s transformation to open, software-defined automation. Both share the same runtime technology, giving industrial operators new levels of engineering and maintenance efficiency due to simple application portability and interoperability.

Developed and managed by UniversalAutomation.org, an independent, non-for-profit association, the shared runtime execution engine, based on the IEC 61499 standard, enables an ecosystem of automation plug and produce software applications that are completely independent from the hardware on which they execute. This new software-defined automation means industrial companies can mix and match automation solutions and no longer be held back by closed and proprietary automation platforms, a problem the industry has been struggling with for a while.

EcoStruxure Automation Expert, a fully open and interoperable software-centric system was designed to decouple automation software from hardware and seamlessly integrate offers from different automation vendors, providing unprecedented freedom for industrial enterprises, and advanced agility and simplicity for industrial automation system integrators and OEMs. Industrial companies can now unlock Phoenix Contact PLCnext controllers with UniversalAutomation.org runtime so users can then develop and deploy applications to one or more PLCnext controllers using EcoStruxure Automation Expert.

Software-defined universal automation.
A confluence of significant market trends are making the shift to software-defined automation inevitable, according to industry analyst IDC in its recent perspective Software-Defined Industrial Automation: An Update.

“We've talked about this idea of software-defined automation for a few years," said Jonathan Lang, Research Director, Worldwide IT/OT Convergence Strategies at IDC. "We are now starting to see general availability of some of this technology, which means we have to speak more practically and prescriptively about the impact to organisations and how to best prepare for it."

“Collaborating with Schneider Electric has demonstrated the flexible and open nature of the PLCnext Technology,” said Andrew Vanderpool, Senior Project Engineer at Phoenix Contract and Co-Chair of the OPAF Technical Working Group. “We are excited to see how we can continue to collaborate and ‘enhance the automation thinking’ between universal automation and PLCnext Technology.”

“This deployment shows that automation solutions that work well across different systems are viable, providing greater flexibility in our fast-changing digital world,” said Fabrice Jadot, Senior Vice President, Next Generation Automation Solution Incubator at Schneider Electric. “No company can achieve the promise of Industry 4.0 alone. Today’s announcement shows that an extended ecosystem of partners working together with open architectures can positively impact industrial operations.”

---

@SchneiderElec @PhoenixContact @PhoenixContactU  @Join_UAO @teamlewisglobal #PAuto 

Miniature photoelectric sensor family.

Improvment on current models with a standardized ASIC design, delivering faster responses and better detection.

The SA2E general-purpose photoelectric (PE) sensor family, in five major models, each which improve on or replace proven SA1E products has been introduced by IDC Corporation. A new ASIC, common to the entire offering, provides a significantly improved price/performance ratio, while delivering better response times and more capable detection.

SA2E PE sensors are offered in five major variations:

• T: Through-beam, for detecting objects passing between emitter/receiver pairs.
• P: Polarized retro-reflective, for detecting objects passing between the receiver and a reflector, even in difficult lighting conditions.
• D: Diffused-reflective, for detecting targets by the light reflected from the target.
• B: Background suppression reflective, for improved and reliable detection of a wide variety of targets by the light reflected by the target.
• N: Small beam reflective, for close detection of small targets.

The SA2E sensors generally improve response times to 0.5ms, compared with 1.0ms for previous generation models, for better detection of smaller and faster moving objects. Sensors are switchable between “light-on” and “dark-on” operating modes, and applicable models have an on-board sensitivity or range adjustment potentiometer. Depending on the model, sensing distances can range up to 20m for through-beam, up to 5m for retro-reflective, and between 10mm and 1000mm for other reflective models. Tighter beams and more adjustability help designers deploy the sensors in a greater variety of applications.

Electrically, the control output is connectable as NPN/PNP open collector with output reverse-polarity protection. The devices consume very low current on the order of 20mA to 35mA, at supply voltages of 12VDC to 24VDC, with the ability to switch up to 100mA maximum. Designers can choose models with cables, or on-board M8 connectors for use with straight and right-angle cables.

The sensors are extremely compact at 10.8x19.5x31.5mm, and various mounting brackets are available. Sensors are built to operate in a wide range of temperatures from -30 to +55DegC, and an optional air blower allows stable detection, even in dusty or misty environments.

They provide a superior price/performance detection option for OEM machinery, material handling equipment, freight elevators, automated guided vehicles, robotics, pick-and-place systems, packaging machines, and many other types of applications.

@IDECUSA #PAuto 

OT/IT - reducing network security concerns.

With increasing demand to integrate Operational Technology and Information Technology (OT/IT), data security is at the forefront of concerns. In fact, according to an IDC survey, security is regarded the number one barrier to OT/IT integration today.

This Article by Liam Cheng, Product Manager, Moxa

When integrating OT and IT systems from traditionally closed to open data systems, problems arise when unwanted access is given to an organization’s private operation data. To safely integrate unconnected legacy systems, these 10 tips from Moxa should help to reduce network security concerns.

Tip 1: Change default passwords for networking devices
Because legacy systems are connected through networking devices, the first thing to do is replace default passwords. The security strength of default passwords is usually low and easy to find in a public user manual. Don’t take this risk when you can easily prevent it.

Tip 2: Disable unused yet connected ports and services
When deploying a networking device, some unused ports or unnecessary services may open the door to cyberthreats in an application. Disable these ports and services to block the available paths to unwanted access.

Tip 3: Verify firmware source before update
When networking devices require firmware update, make sure there is a mechanism to verify the firmware source. Checking the CRC code is one way to ensure the firmware comes from the original source. Another way to verify the firmware source is through secure boot design. It’s a feature that ensures the integrity of firmware running on a platform.

Tip 4: Use secure communication protocols
It’s important to use a secure protocol (i.e., TLS 1.2 support in HTTPS and SNMPv3) for connected legacy systems. It can reduce the chances of unwanted access while managing networking devices, and it can enhance data integrity while transmitting data. Also, when deploying networking devices, disable unsecure protocols to minimize the chances of a manual error.

Tip 5: Only allow authorized users to access devices and network
Prioritize critical assets and validate network segmentation so there is a clearer picture about what authority can be granted to what specific segment. Furthermore, deploy trust-listing, such as listing only permitted IP addresses, to keep unwanted access out of legacy systems. Other advanced functions are also available to limit unwanted access. For example, define a specific protocol format or command that can access devices and network.

Tip 6: Encrypt critical data before transmissions
In OT environments, critical data leakage can cause operation downtime, thus impacting operational efficiency. For connected legacy systems, encrypt critical data during transmissions to enhance data confidentiality and reduce the chances of negatively impacting daily operation.

Tip 7: Constantly monitor if networking devices are at the desired security level
When the legacy systems are connected, define the security measures based on the application’s demands so that networking devices can easily be monitored and managed. When the system networks are up and running, constantly monitor whether the security status of devices meets the requirements defined from the onset.

Tip 8: Periodically scan vulnerabilities for potential threats
It’s essential to know what potential threats legacy systems are facing. Scheduling a vulnerability scan periodically gives a better idea of the security status of the overall system, helping users take necessary actions when needed.

Tip 9: Perform security patches for networking devices to reduce vulnerabilities
We all know that security patching is important. However, it is not always easy in field sites. From a business perspective, it can lead to tremendous costs when operations are paused to test and perform patches. On the other hand, risks and costs are also involved by doing nothing about it. A more sustainable approach is finding a balance midway by performing acceptable batches of security patching for critical field systems.

Tip 10: Use virtual patching for known vulnerability of legacy systems
In certain situations, security patching is not an option. Furthermore, some legacy systems are not able to perform patching. For these type of situations, virtual patching is an efficient alternative. Deploy the virtual patch in the network connected to legacy systems to eliminate known vulnerabilities and protect the devices against certain exploits. Virtual patching is also a good way to reserve a buffer time while the system is waiting for the next maintenance period to get patched.

@MoxaInc @OConnellPR #PAuto #Manufacturing 

Question behind the Question (QBQ).

Cybersecurity has suddenly become a matter of urgency in the OT world—one that needs to be resolved as soon as possible! 

 

Since the start of the COVID-19 pandemic, the pace of digital transformation has accelerated tremendously. Meanwhile, companies have also become increasingly aware that the next leaders in this new digital arena will be those who control and manage their onsite Operational Technology (OT) data. Thus, companies that want to stay ahead in the game first need to achieve successful collaboration between their Information Technology (IT) and OT departments to gain better control of their OT data. Inevitably, IT/OT integration has become one of the key indicators of a company's potential future growth. However, despite its importance, IT/OT integration remains inconceivable to many companies due to one main obstacle: cybersecurity.

According to a survey by International Data Information (IDC), companies tread very lightly around IT/OT integration because they are wary about its impact on cybersecurity. For starters, talking about the importance of cybersecurity may sound by now like a broken record. However, upon further inspection, one realizes that while cybersecurity has been prioritized by IT, the same cannot be said of OT. In recent years, industrial digital transformation (Industrial DX) has pushed OT out of their small ponds of individual intranets into the wider ocean of the Internet. With the abundance of threats lurking behind Internet connections, cybersecurity has suddenly become a matter of urgency in the OT world—one that needs to be resolved as soon as possible. Nevertheless, to safely navigate through this sea of predators, Moxa has identified the fundamental issues needed to address when strengthening your control systems for cybersecurity purposes.

Here, Moxa addresses these issues through three Frequently Asked Questions (FAQ) that are pitted against counter-questions, which the like to call a Question Behind the Question (QBQ), to help bolster cybersecurity strategy.

FAQ 1 vs. QBQ 1 

"Who’s responsible for this cybersecurity project?" vs. "Where is the weakest link in my cybersecurity strategy?" From an organizational standpoint, it is easy to get distracted by the question of who should take charge of a project that now falls under OT but involves a traditionally IT-centric task. While OT staff may argue that they do not have the proper training and experience to deal with cybersecurity, IT staff may argue along the same line that their inexperience with OT equipment may affect overall operation. In this case, both have a point since neither departments have full knowledge of both cybersecurity and OT operations, hence the dilemma. Trying to delineate responsibility by experience alone seems like a dead end. Thus, we advise clients to employ the “locate the issue first” approach instead. So rather than asking “who has the experiences to be responsible?”, the conversation now starts with a risk and vulnerability assessment. This assessment identifies potential risks from an objective viewpoint, such as unlisted or high-risk OT equipment, outdated software or services, management loopholes posed by human errors, etc. These objective evaluations are a good starting point to set a clear list of goals for both OT and IT departments to better collaborate and resolve the problems at hand.

FAQ 2 vs. QBQ 2

"What is the return on Investment (ROI)?" vs. "What is the cost of Inaction (COI)?" In OT, ROI is the key indicator when considering investment in new equipment. However, if ROI is used to measure the cost and benefits of cybersecurity, the outcome (i.e., investment from higher ups) is often disappointing. This is due to the nature of cybersecurity. Its main concern is to reduce risk, so it should not be measured as a growth-centric “investment.” Hence, the real question should be: "If we don't do it now, what is the worst that can happen?", also known as COI. The risk of inaction when it comes to cybersecurity is often much larger than foreseen. Therefore, COI can help businesses evaluate the impact of potential cybersecurity risks from a more practical perspective and, furthermore, speed up the decision-making process regarding a project through prioritization.

FAQ 3 vs. QBQ 3

"What is the safest solution?" vs. "What is the most suitable solution?" After dealing with the abovementioned questions, which not only identify and prioritize cybersecurity vulnerabilities, you will have to evaluate your plan, process, system, or tools. As most of the existing cybersecurity methods, tools, or services are designed from an IT perspective, they may not be necessarily suitable for OT implementation. For example, a customer of ours in Southeast Asia has received suggestions from its IT department to enable a screen protection lock function on both computers and onsite human machine interfaces (HMI) to prevent equipment from being hacked. However, while this is a suitable solution for IT environments, it does not consider the need for a machine to immediately respond to anomalies in an OT environment. For example, if an abnormality occurs at a site, the response time to regain control of the system may need to be within milliseconds or it could cause huge losses. If too much time is spent on waiting for the operator to enter the correct password, the delay could have colossal financial or life consequences. Therefore, when choosing a cybersecurity solution, it is not the most expensive or the most acknowledged solution that is the best. Choosing the right solution for your specific needs is what counts.

Cybersecurity is not only a technical issue, but a business one as well. As evidenced by the numerous cybersecurity attacks in the industrial environment lately, it’s not hard to see why cybersecurity is a prime concern for many business owners. By transforming the regular FAQs to QBQs, a stronger foundation can be built to establish the right cybersecurity strategy for each operation.

@MoxaInc @IDC @OConnell_PR #PAuto #Cybersecurity

Safety devices for hazardous areas.

IDEC Corporation has released the EU2B family of safety devices including pushbuttons, pilot lights, selector switches and ammeters. These devices comply with ATEX, C-UL, IEC and UL/NEC safety standards for use in hazardous areas. All the devices are fully sealed to prevent the release of sufficient electrical energy which could ignite explosive gases or particles in the environment for which they are rated for use.

The devices are UL/c-UL approved for use in Class I Zone 1 applications, and are rated AEx de IIC T6 Gb for use in explosive gas atmoshpheres. The devices are rated IP65 and Type 4X for protection against water, and are available with exposed or finger-safe IP20 screw terminals.

The pushbuttons are available in flush, extended and mushroom styles. Pushbutton colors include black, green, red, blue, white and yellow. These pushbuttons and all the selector switches contain up to three sealed contact blocks, each rated up to 10A, and are available in normally open or normally closed configurations.

Emergency stop pushbuttons feature push-to-lock and turn-to-reset operation, and are supplied with a yellow body and a standard red mushroom head. Multiple contact configurations are available.

The pilot lights are available in amber, green, pure white, red, blue, white and yellow. Models can operate from a 110Vac, 220Vac or 24Vdc power source.

Selector switches are available with two or three selector positions, and with a variety of spring return options and circuit configurations. A key-operated selector switch is also available.

AC ammeters, DC ammeters and DC voltmeters are available with a wide choice of measuring ranges.

Business growth through IT!

‘How companies can succeed in the face of global competition’ is the subject of a recent White Paper sponsored by Rittal. International market research company IDC examined the influence that data centres have on the economic success of small and medium-sized businesses.

This research has shown that IT is an important factor in achieving business goals and that companies are willing to invest in technologies such as cloud, Big Data, or mobile computing, but are concerned over the potential risks.

Findings, at a glance, indicate that if a company was commercially successful last year, this has a direct impact on the IT budget and there is a direct correlation between IT spending and revenue growth.
Energy efficiency offers the potential to cut costs. 57% of respondents report PUE (power usage effectiveness) values exceeding 2.0. The closer the PUE value gets to one, the more efficient the data centre.

IT managers surveyed indicated they operate their data centres at an average of temperature of 15.5°C. Instead of cooling entire rooms, it is more efficient to work with direct cooling within the rack or in the individual aisles.

Existing redundancy concepts are often out-of-date and not sufficiently reliable to ensure the high level of availability that customers expect, therefore greater reliability is needed.

There is an investment backlog in the data centre. The participants surveyed reported that their data centres were, on average, 7 years old.