The disclosure relates to a method for configuring a control device of an automation system, comprising: detecting a local access token via an interface of the control device; and modifying at least one parameter of the control device, which is designed to configure a data connection of the control device in response to the detection of the local access token.

An access control apparatus and method for controlling a configuration of an automation apparatus. The method includes: reading authentication information from an electronic tag; transmitting the authentication information to a networked service; receiving access rights from the networked service; and controlling the configuration of the automation apparatus according to the access rights.

A Multi-Purpose Dynamic Simulation and run-time Control platform includes a virtual process environment coupled to a physical process environment, where components/nodes of the virtual and physical process environments cooperate to dynamically perform run-time process control of an industrial process plant and/or simulations thereof. Virtual components may include virtual run-time nodes and/or simulated nodes. The MPDSC includes an I/O Switch which delivers I/O data between virtual and/or physical nodes, e.g., by using publish/subscribe mechanisms, thereby virtualizing physical I/O process data delivery. Nodes serviced by the I/O Switch may include respective component behavior modules that are unaware as to whether or not they are being utilized on a virtual or physical node. Simulations may be performed in real-time and even in conjunction with run-time operations of the plant, and/or simulations may be manipulated as desired (speed, values, administration, etc.). The platform simultaneously supports simulation and run-time operations and interactions/intersections therebetween.

In an industrial control system (ICS), latent vectors are generated to represent identity or behaviors of host devices coupled to the ICS. A computing system captures communications transmitted by a host device across a network associated with the ICS. A set of values are extracted from one or more respective fields in the communication, then applied to a trained neural network. Values of a first set of fields are applied at an input layer of the trained neural network, while values of a second set of fields are applied at an output layer of the neural network. Based on the application of the neural network to the values extracted from the communication, the computing system generates a latent vector.

This invention describes a method for detecting a misconfiguration of a machine function of a first industrial machine (M1). A set (N) of second industrial machines (MS) from said several other industrial machines (MO) is created by identifying a predetermined feature of the first industrial machine (M1) in several other industrial machines (MO). A first configuration value is created, which relates to the machine function of the first industrial machine (M1), and a second configuration value is created which relates to the machine function of the second industrial machines (MS). Depending on a relation of the first configuration value to the second configuration value a deviation value is determined by a configuration anomaly detection module (CADM). For detecting the misconfiguration of the first industrial machine (M1) the deviation value is compared with a predetermined threshold value.

Computer-implemented methods for configuring an Industrial Internet of Things (IIoT) edge node in an IIoT network to perform one or more functions, comprising: performing a situation analysis to determine a required change in one or more of an analytical model, a runtime component, and a functional block of the IIoT edge node based on a change in the one or more functions; and automatically provisioning a new or updated functional module to the IIoT edge node, based on the situation analysis, the new or updated functional module including one or more components, wherein each component includes at least one of a rules set, a complex domain expression with respect to a process industry, an analytical model, and a protocol decoder.

System and method for secure time synchronization in an industrial facility, wherein a synchronization request of a facility component is transmitted to a registration service of a certificate management of the facility and the synchronization request is examined by the registration service, where the synchronization request includes a signature of the requesting facility component, and where depending on an outcome of the examination, a synchronization response is then transmitted to the requesting facility component a system time of the facility component is matched to a system time of the registration service based on the synchronization response.

Sensors detect states of units of a plant for producing and/or treating a rolled product made of metal and transmit them to an automation system. The state signals (Z) are, in part, dimensional signals. The automation system determines, by taking into account the state signals (Z), control signal signals (S) for actuators associated with the units and actuates the actuators accordingly. The automation system includes at least one model-based system which models the behavior of the system and/or of the rolled product in real time. The automation system transmits the state signals (Z), the control signals (S) and/or signals derived therefrom at least in part via an open data network to a human-machine interface arranged at an operating location. The transmitted signals comprise at least one of the dimensional signals. The automation system takes specifications (V) from the human-machine interface in determining the control signals (S).

Various embodiments of the teachings herein include a control device for controlling one or more field devices connected to the control device by data technology in the form of a communication network. The control device includes a wireless service interface. The communication network connects the control device to one or more tools. The wireless service interface can be activated by first tool via the communication network.

An industrial automation system includes a collector component communicatively coupled to a first network and configured to receive one or more event logs via a first communication protocol. The industrial automation system also includes a first industrial automation component communicatively coupled to the first network and the collector component. The first industrial automation component is configured to communicate via the first communication protocol. Additionally, the industrial automation system includes a second industrial automation component configured to communicate via a second communication protocol, generate a first event log representative of a property associated with the second industrial automation component, and send the first event log to the first industrial automation component. The first industrial automation component is configured to convert the first event log into second event log interpretable by the collector component and send the second event log to the collector component via the first network.