Data communications are enabled between a machine and a remote service application. When user-based credential data is valid, an authorization code is provided from an authorization service application to the machine. The authorization code and a request for a first access token are received and in response, the first access token is sent from the authorization service application to the first machine. The first machine responsively sends the first access token and an enrollment request to an enrollment service application. The enrollment service application sends machine credential data to the first machine to permit the first machine later access to cloud-based applications.

Disclosed is a computer-implemented method for generating a prediction model. The model can be for use in processing machine event data to predict behavior of a plurality of industrial machines under supervision. The prediction model can be configured to determine current and future states of the industrial machines. The method can include: extracting event features from event codes and structuring the event features into feature vectors; and generating the prediction model by clustering the feature vectors into a plurality of vector clusters, the vector clusters being assigned to respective machine states. The prediction model can be constructed based on event data from a first industrial machine and be applied to control an operating state of a second industrial machine.

The invention relates to a smart node for a distributed mesh network, each node allowing two-way communication with other nodes or a central platform, and each node comprising a Linux or Linux-compatible computer hardware architecture and a software stack having a small footprint and low consumption of resources, using an object-oriented programming language to implement, by execution on the hardware architecture, the deployment of multiple nodes by neighborhood and critical mass effect, each node being iso-functional and capable of communicating with its neighbor, storing and managing an object, and receiving an execute statement from a program of another node in the mesh, said program associating a node-specific identifier and a neighborhood identifier with the communication module of each node.

Systems and methods described herein are configured for managing industrial assets. In an example embodiment, information about industrial assets or their use conditions, such as gathered from sensors embedded at or near industrial machines or assets themselves, can be aggregated, analyzed, and processed in software residing locally or remotely from the assets. In an example embodiment, applications can be provided to optimize an industrial asset for operation in a business context. In an example embodiment, a cloud-based asset management platform can include development tools to facilitate development, by end-users, of applications for interfacing with and optimizing industrial assets, and for managing relationships between various industrial assets.

The purpose of the present invention is to achieve multilevel priority without preparing in advance the necessary amount of tasks for the priority levels. A control device according to the present invention performs a process on a processing request from a client for an industrial machine, said control device comprising: a priority analysis unit that, when receiving the processing request from the client, analyzes the priority which is set for the received processing request; and a priority change unit that changes the priority with respect to the received processing request on the basis of the result of the analysis by the priority analysis unit.

Data communications are enabled between a machine and a remote service application. When user-based credential data is valid, an authorization code is provided from an authorization service application to the machine. The authorization code and a request for a first access token are received and in response, the first access token is sent from the authorization service application to the first machine. The first machine responsively sends the first access token and an enrollment request to an enrollment service application. The enrollment service application sends machine credential data to the first machine to permit the first machine later access to cloud-based applications.

Approaches for using a device-based authentication certificate to obtain data access to a cloud-based destination application are provided. Using an edge manager device, a token and data access request is received from a machine. The edge manager device is configured to administer data access to one or more cloud-based applications.

In various example embodiments, systems and methods for administering machine access to a cloud service are presented. A first device or machine can access an enrollment service in a cloud environment using user-based credential data. The enrollment service can request registration of the first device with an authorization service. If the authorization service accepts the request, then the authorization service can provide credential data for the first device to use to access one or more cloud-based services. In an example embodiment, a third party application provides devices and an enrollment service with credential data that can be used to facilitate device enrollment with cloud services.

In various example embodiments, systems and methods for administering machine access to a cloud service are presented. An edge manager device in a cloud computing environment can establish a first client for a first application that is executed externally to the cloud computing environment. The edge manager device can provide a first request via a first network to an authorization service application to obtain client identification and client secret information for use by the first client. The edge manager device can receive the client identification and client secret information from the authorization service application via the first network. The client identification and client secret information can be selected by the authorization service application to permit later data access to the edge manager device by the first client. The edge manager device can provide the client identification and client secret information to the first client via a second network.

A cloud-aware smart device that facilitates automated configuration and integration of the device within an automation system is provided. Upon installation within the automation system, the smart device determines its geographical location, identifies other devices on the system, and determines its role within the system. The smart device then establishes communication with a cloud platform running one or more cloud-based applications or services and sends a device profile containing the gathered information to the cloud platform. The device profile can be used to automatically configure the device for operation within the system or to add the smart device to an existing cloud-based application.