This document discusses industrial control systems and how they can be integrated with the Industrial Internet. It begins with an overview of what industrial controls are and examples of where they are used. It then covers the architecture for connecting industrial controls to the Industrial Internet, including a virtualization architecture, communications architecture, security architecture, and an architecture based on the ISA-95 control model. The document describes some prototype demos and then discusses ongoing challenges in device and cyber security, verification and validation, and systems of systems. It concludes with a summary of an industrial controls architecture that connects controls to the Industrial Internet through virtualization, time-sensitive networking, OPC UA for interoperability, and defense-in-depth security approaches.

1. IIA1: Industrial Control
Systems 101
Wes Skeffington, Senior Principal Engineer
GE Global Research

2. 2PREDIX TRANSFORM
Agenda
What are industrial controls?1
Architecture for integration w/Industrial Internet
Foundational technologies
Prototype demos
Ongoing challenges to address
2
3
4
5

3. What do I mean by industrial
controls?

4. 4PREDIX TRANSFORM
What and where are industrial controls?
• Level A Cert
• -55º to 125ºC
• 10K hr MTBF
• 20G shock
Aircraft Engines
• Level-A Cert
• -55º to 125ºC
• 200K hr MTBF
• 20G shock
Avionics
• 250K+ I/O points
• SONET Rings
• -40 to 80° C
• Wide-area control
Power T&D
• 30,000+ I/O
points
• Rad. Hard 0-
100 R/hr
• SIL III safety
Power Generation
Locomotives
• 20-year life
• 10G shock
• -50º to +130ºC
• Coal dust, silica, Salt
Fog, SO2, …

5. 5PREDIX TRANSFORM
What and where are industrial controls?
• 10,000 Nodes
• Wireless
• Mesh Network
• 500 Nodes/AP
Lighting • -20º to 200ºC
• 15K psi
• Up to 6G (30 min)
Downhole O&G
• -40º to 80ºC
• IEC60255-21-2 Class 1
shock & vibe
Marine Dynamic Positioning
• Hermetic
• 15 Kpsi
• 25-year life
• 3000m depth
Subsea O&G

6. 6PREDIX TRANSFORM
Control app characteristics
Control Characteristics
• Asset operation and
protection critical
• Hard real-time
• Deterministic
• High reliability and
predictable, even in failure
• Environmentally hardened
• Lifecycle of 10-20 years

7. 7PREDIX TRANSFORM
Internet app characteristics
Internet App Characteristics
• Time-to-market critical
• Soft or no real-time
• Non-deterministic or only human
detectable determinism
• Short life cycle/rapid upgrades with
customer beta testing
• Commercial-type platforms
• Lifecycle of 1-2 years

8. Architecture pattern &
foundational technologies

9. 9PREDIX TRANSFORM
Controls + Predix = connected controls

10. 10PREDIX TRANSFORM
Virtualization architecture
Traditional Real-Time
Illustrative
General Usage
Examples
Products
Sharing Resources Higher Determinism
Manageability Decoupling
Through-put Security/ Safety
Portability Portability
Security Lower Configuration
Attribute
Priority

11. 11PREDIX TRANSFORM
Communications architecture
Time Sensitive Network (TSN)
Industry Standard Protocols
Modbus EGD Profinet Ecat
Embedded Data Models
Devices that speak the same language Data architecture
Unified data highway
Ubiquitous data access
for device-to-device &
device-to-cloud
Hierarchal
Bus

12. 12PREDIX TRANSFORM
Security architecture
Physical and electronic perimeters
Future Solution
Regulations
Legacy Solution
1. Prevention: Defense in depth
2. Detection: Attestation
+

13. 13PREDIX TRANSFORM
ISA-95 control model architecture
Industrial
Internet
On-
Premises

14. 14PREDIX TRANSFORM
Today’s control systems
I/O
Unit
Control
Plant
Control
Supervisory
Control
Remote
Connectivity
RM&D
Characteristic
• HW-based hierarchy
• Segmented networks
• Static configuration
• Challenging data flows

15. 15PREDIX TRANSFORM
I/O
Unit Control
Supervisory &
Plant Control
Remote
Connectivity
Connected control systems
Characteristic
• SW-defined hierarchy
• TSN-based networks
• OPC UA interoperability
and data architecture
• Root-of-trust device to
cloud

16. Prototype demo(s)

17. 17PREDIX TRANSFORM
Demo: control platform security
Prevention: Defense in depth
Detection: Attestation
Predix
Machine
HW Root of Trust

18. 18PREDIX TRANSFORM
Demo: industrial control + Predix
Real-
Time
Control
Predix
Machine
VIRTUALIZATION

19. Challenges & summary

20. 20PREDIX TRANSFORM
Picture Here
Industrial controls challenges
Device & Cyber-Security
• Continuously evolving
threats
• Defense in depth with
detection to cloud
Verification & Validation
• Super-systems w/ many un-
tested states
• Tools & systems to drive
design productivity
Systems of systems
• New market & machine
interactions
• Drive to advisory &
autonomous systems

21. 21PREDIX TRANSFORM
Industrial controls architecture
Controls + Predix = Connected Controls
• Virtualized multi-core w/real-time hypervisor
• TSN for deterministic Ethernet backbone
• OPC UA for secure semantic interoperability
• Defense in depth w/ HW root-of-trust in TPM
• Increased security through connectivity
See industrial controls in GE demo area

22. General Electric reserves the right to make changes in specifications and features, or discontinue the product or service described at any time, without notice or obligation. These materials do not constitute a
representation, warranty or documentation regarding the product or service featured. Illustrations are provided for informational purposes, and your configuration may differ. This information does not
constitute legal, financial, coding, or regulatory advice in connection with your use of the product or service. Please consult your professional advisors for any such advice. GE, Predix and the GE Monogram are
trademarks of General Electric Company. ©2016 General Electric Company – All rights reserved.