35
OPC Day Belgium 2015 OPC Day Belgium 2015 Uwe Steinkrauss (Unified Automation)

OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

  • Upload
    others

  • View
    2

  • Download
    0

Embed Size (px)

Citation preview

Page 1: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium 2015

OPC Day Belgium 2015

Uwe Steinkrauss (Unified Automation)

Page 2: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

� OPC UA Introductiontechnical overview on the fundamental building blocks

� OPC UA Updateenhancements introduced with V1.02 and V1.03

� OPC UA Enhancementsfuture technologies coming soon

Page 3: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

� Data Access� Historical Data Access� Alarms & Events

PCPC

Driver A

Application

OPC Client

Application

OPC Server

Basic Service of Microsoft OS

Field Bus

Device

OPC

OPC

DCOMCOM

Driver B

OPC Server

Driver C

OPC Server

Page 4: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

Wide adoption of

OPC

OPC used as common system interface

Communication between distributed

systems

SecurityAccess control

InternetFirewalls

RobustnessFault tolerant

Platformindependent

Redundancy

Performance Scalability MESERP

Embeddeddevices

SCADA

Modeling Data

Common model for all

OPC data

Complex data

Method calls

Meta data

Base for otherstandard data

models

Type system

Page 5: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

� Definition 2003 – 2006� Verification and Implementation 2006 – 2008� Final OPC Foundation Release 2009� IEC 62541 Release 2010 – 2012

� OPC UA = established OPC features+ Platform independence+ Standard internet and IP based protocols+ Built in security features+ Generic object model+ Extensible type system+ Scalability through profiles

+ Migration path from Classic OPC

Page 6: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

OPC UA Object

Variables_________

Methods___()___()___()

Events

OPC DA and HDA OPC Commands

OPC A&E

Page 7: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

• Everything in the UA Address Space is a Node

• UA defines a none extensible list of 8 Node Classes

• Each Node Class has a defined set of Attributes

• Nodes are connected by References

Page 8: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

Object Type AnalogMeasurement

BaseObjectType

ObjectTypes

Organizes

AnalogMeasurement Measurement InstrumentRange

EURange

EngineeringUnits

H_Level

HH_Level

LL_Level

L_Level

SystemAlarm

LevelAlarm

ObjectType

Object

Variable

Page 9: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

Object Instance AnalogMeasurement

Object Type AnalogMeasurement

Objects

Preasure

H_Level

HH_Level

LL_Level

L_Level

BaseObjectType

ObjectTypes

Organizes

AnalogMeasurement Measurement InstrumentRange

EURange

EngineeringUnits

Measurement InstrumentRange

EURange

EngineeringUnits

SystemAlarm

LevelAlarm

H_Level

HH_Level

LL_Level

L_Level

SystemAlarm

LevelAlarm

Temperature_1

Temperature_2

Page 10: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

UA TCP

Message BasedSecurity

TCP/IP

UA Binary

HTTP

WS Secure Conversation

SOAP 1.2

UA Secure Conversation

UA XML

XML Web Services

Optimized OPC UA Binary

Page 11: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

Client Application

Client API

Transport

Secure Channel

Message Encoding

API Call

API Message Structure

Raw MessageAPI structure encoded as byte

array or XML document

Server Application

API Call

Secured MessageRaw message signed and

encrypted with security header

Server API

Transport

Secure Channel

Message Encoding

Wire Transport MessageSecured message with transport header

UA

Sta

ck

UA

Sta

ck

Implementations in- ANSI C / C++- .NET- JAVA

Page 12: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

� Protocol independent OPC UA API� Services to

◦ Discover Servers and Endpoints◦ Browse Server Address Space

� Instances

� Type System

◦ Read and Write current data◦ Read History of Data and Events◦ Call Methods◦ Subscribe for

� Data Changes

� Events

◦ Create / Delete Nodes and References

� Generic Services◦ No feature specific extensions◦ Features added through Information Models

Page 13: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

� Data Access◦ Representation of Process Variables◦ E.g. AnalogItemType with unit and range

� Alarms & Conditions◦ Representation of Process Alarm Systems◦ State machines for Alarm states◦ Events for state changes◦ Methods feedback like Acknowledge

� Historical Access◦ Information about historized data and events

� Programs◦ Representation of programs◦ Manipulate programs like start, stop◦ State of a program execution◦ Result data handling

Page 14: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

� Standard Information Models◦ Use case specific models◦ Industry specific models

� Definition based on◦ collaboration with other standards◦ special use cases and requirements

� Already available◦ Device Integration (DI) ◦ Analyzer Device Integration (ADI)◦ IEC 61131-3 (PLCopen)◦ Field Device Integration (FDI) ◦ Building Automation (BACnet)

� More ongoing◦ Oil&Gas Subsea (MDIS) ◦ Auto Identification (AIM)◦ AutomationML

◦ …

Page 15: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

� Product Internal Interfaces◦ Used for configuration and diagnostics◦ Used between applications from the same product or vendor◦ Can use information models optimized for use cases

� External Interfaces◦ Used between systems from different vendors◦ Should layer on top of standard information models◦ Types should be derived from standard types

Page 16: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

Utility Type Specification Parts

Part 13 - Aggregates

Part 12 - Discovery

Page 17: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

Profile

� Conformance Unit◦ Represents specific feature◦ Defines a list of test cases for the feature

� Profile◦ Named grouping of features◦ Full Featured

Combination of Profiles and Conformance Units that can be used stand alone

◦ FacetProfile that can be used only in combination with other Profiles

� Certification Test◦ Vendor defines list of supported Profiles◦ Certification Test executes test cases for the supported

Profiles◦ End users can rely on tested Profiles

Conformance Unit

Conformance Unit

TestCases

TestCases

Certification Test

Page 18: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

Standard UA Server

Address Space Data Access

Security Binary Protocol

Event SubscriptionServer Facet

Method Server Facet

Alarms & Conditions

His

toric

al A

cces

s

Com

plex

Dat

a

Red

unda

ncy

Dev

ice

Inte

grat

ion

PLC

open

Full Featured Profile

Facets building on top of Full Featured Profile

Page 19: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

Server

Standard UA Server

Address Space Data Access

Security Binary Protocol

Connect

Browse

Read

Subscribe

Page 20: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

Server

Standard UA Server

Address Space Data Access

Security Binary Protocol

Connect

Browse

Read

Subscribe

His

toric

al A

cces

s

HistoryRead

Page 21: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

http://www.opcfoundation.org/profilereporting

Page 22: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

OPC Unified Architecture stands for…

Generic object oriented modelingObjects with variables, methods and eventsExtensible type systemHistory for data and eventsState machines, programs, alarms & conditionComplex data

Data ModelingIntegrated security mechanismsHigh speed UA TCP protocolWeb services for internetPlatform independentBuilt in robustness and fault toleranceRedundancy

Communication

UA is IEC standardUA is base for other information models EDDL and FDTMIMOSAOMACPLCopen

Collaboration

Profiles for different use casesScalabilityIntegration in embedded systemsMES and ERP systemsSpecialized versions for different industries

New Applications and use cases

Page 23: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

� OPC UA Introductiontechnical overview on the fundamental building blocks

� OPC UA Updateenhancements introduced with V1.02 and V1.03

� OPC UA Enhancementsfuture technologies coming soon

Page 24: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

� Maintenance Release◦ Compliance and other clarifications

� Final Release Historical Access◦ OPC UA Part 11 – Historical Access◦ OPC UA Part 13 – Aggregates

� Feature Highlights◦ File Transfer trough FileType object◦ HTTPs based protocols◦ Standard XML schema for address space

� Offline browsing

� Address space import and export

� Machine readable format of information models

◦ Global Directory Service and ad-hoc discovery◦ Enhanced redundancy mode and network redundancy

Page 25: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

File Access Methods

Meta Data Properties

FileType

PropertyType:

Size

PropertyType:

Writable

PropertyType:

UserWritable

PropertyType:

OpenCount

Open

Close

Read

Write

GetPosition

SetPosition

FolderType:

MyFiles

FolderType:

Pictures

FolderType:

Documents

FileType:

Family.jpg

FileType:

OPC UA Part 4.pdf

FileType:

Fax template.doc

FileType:

Project calculation.xls

• File system represented with Folder and File Objects

• No limitation for file size• Synchronized access to files

Object Type representing File Interface Objects representing Files

Page 26: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

UA TCP

Only TransportSecurity

Message BasedSecurity

(preferred)

TCP/IP

UA Binary

HTTP

WS Secure Conversation

SOAP 1.2

UA Secure Conversation

UA XML

XML Web Services

Optimized OPC UA Binary

UA Binary

HTTPS

SOAP 1.2

UA XML

XML Web Services

Optimized OPC UA Binary

HTTPS

V 1.01 V 1.02

Page 27: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

OPC UA Server

ImportCreated as part of the

specification

OPC UA Server

ImportModel File

FormatOPC UA Modeling

Tools

Import of standard or application specific information models

Page 28: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

OPC UA Server

ImportExport

OPC UA Client

Import and export of OPC UA Address Space

OPC UA Server

Offline BrowsingExport

OPC UA Server

Page 29: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

PLC PC

OPC UA Client

OPC UA Client

OPC UA Client

OPC UA Server

OPC UA Server

LDSOPC UA Server

LDS

available today

Discovery with LDS:- Network nodes with OPC UA server must be known- Servers register with local LDS or have LDS included- LDS is running on defined port (4840)- LDS provides Server and Endpoint Discovery for

local network node- Manual security configuration

Register

Page 30: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

PLC PC

OPC UA Client

OPC UA Client

OPC UA Client

OPC UA Server

OPC UA Server

LDSOPC UA Server

LDS

prototype available

Features provided:- Host name resolution

without central DNS server- Find network nodes with

OPC UA in local network

Advantage:- No central infrastructure required

Limitation:- Works only in local subnet

Page 31: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

PLC PC

OPC UA Client

OPC UA Client

OPC UA Client

OPC UA Server

OPC UA Server

LDSOPC UA Server

LDS

Central Server

GDS (Port:4840)Pull / PushCertificates

CA

List of registered UA Servers

GDS Features:- Certificate creation / management- Certificate Authority (CA)- Management of Certificate

Revocation Lists (CRL)- Push / Pull of Certificates / CRL- Network wide server registry - Security Config

- Register Server

- Security Config- Find Servers

GE first on market

Page 32: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

� OPC UA Introductiontechnical overview on the fundamental building blocks

� OPC UA Updateenhancements introduced with V1.02 and V1.03

� OPC UA Enhancementsfuture technologies coming soon

Page 33: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

� Usecase driven: M2M� Extremely fast one-to-many communication � in local network (maybe Time Sensitive Network (TSN))

OPC UA Client

(Subscriber)

OPC UA Server

(Publisher)

Pub

Sub

OPC UA Client

(Subscriber)

Sub

OPC UA Client

(Subscriber)

Sub

upcoming

UDP Secure Multicast

Page 34: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

The Cloud

OPC UA Server

(Publisher)

Pub

� Usecase driven: IoT� many-to-one (the cloud) communication � in global network (optionally use Relay/Broker)

OPC UA Client

(Subscriber)

Sub

upcoming

AMQP (advanced message queuing protocol)

RelayBroker

(optional)OPC UA

Server(Publisher)

Pub

OPC UA Server

(Publisher)

Pub

Page 35: OPC Day Belgium 2015 - Agoria · 2015-10-22 · OPC Day Belgium, 2015 UA TCP Only Transport Security Message Based Security (preferred) TCP/IP UA Binary HTTP WS Secure Conversation

OPC Day Belgium, 2015

Uwe SteinkraussSales & Marketing

Unified Automation GmbHO’Brien Str. 2D-91126 SchwabachPhone [email protected]