ROLL industrial requirements P Thubert IETF 72 Terms

ROLL industrial requirements P Thubert IETF 72

Terms and acronyms • Closed Loop Control – A process whereby a device controller controls an actuator based on information sensed by one or more field devices. • Open Loop Control – A process whereby a plant operator manually manipulates an actuator over the network where the decision is influenced by information sensed by field devices • OD – Office Domain. The office Network vs. PCD Process Control Domain • Field Device – physical devices placed in the plant's operating environment (both RF and environmental). Field devices include sensors and actuators as well as network routing devices and L 2 N access points in the plant. • HART: – "Highway Addressable Remote Transducer", a group of specifications for industrial process and control devices administered by the HART Foundation (see [HART]). The latest version for the specifications is HART 7 which includes the additions for Wireless. HART. Wi. HART has no Support for IP(v 6) to date • ISA: – "International Society of Automation". ISA is an ANSI accredited standards-making society. ISA 100 is an ISA committee whose charter includes defining a family of standards for industrial automation. [ISA 100. 11 a] is a working group within ISA 100 that is working on a standard for monitoring and non-critical process control applications. It includes and extends 6 Lo. WPAN.

2 well-defined segments • “process" or "process control" – the product is typically a fluid – eg. oil&gas, chemical industry • "discrete manufacturing" or "factory automation" – the products are individual elements – eg. screws, cars, dolls – Usually tighter tolerance

Past: high cost of ownership • Analog (~4 Hz 4 -20 m. A) • Point to point • Dedicated wires • Dumb transducers • Hard wired, inflexible

Present lower cost of ownership • • Modulated Digital Ethernet Field buses IP/UDP networks Proprietary, dedicated • Distributed intelligence

Potential Future • • • IP and Wireless Converged network Scalable Plug & Play High Availability VLANs and VRF Open Standards lower, scalable and shared cost of ownership (COTS) Þ Plant / building / home network

Physical topology ROLL Backbone Router ROLL Low Power Lossy Network ROLL Gateway (ALG) ROLL Plant network ROLL System Manager Security Manager

ISA 100. 11 a sensor classes ISA-SP 100 Sensor Classes Definition Role Class 0 Emergency action This class includes safety-related actions that are critical to personnel and plant. For instance safety-interlock, emergency shutdown, and fire control) Class 1 Closed-loop, regulatory control This class includes motor and axis control as well as primary flow and pressure control Class 2 Closed-loop, supervisory control This class of closed-loop control usually has long time constants, with timeliness of communications measured in seconds to minutes Class 3 Open-loop control This class includes actions where an operator, rather than a machine, ‘closes the loop’ between input and output. Such actions could include taking a unit offline when conditions so indicate. Timeliness for this class of action is human scale, measured in seconds to minutes. Class 4 Monitoring with shortterm operational consequences This class includes high-limit and low-limit alarms and other information that might instigate further checking or dispatch of a maintenance technician Monitoring without immediate operational consequences. This class includes items without strong timeliness requirements. Some, like sequence-of-events logs, require high reliability; others, like reports of slowly changing information of low economic value, need not be so reliable, since loss of a few consecutive samples may be unimportant Class 5

Service requirements 1. Periodic data (aka buffered) Data that is generated periodically and has a well understood data bandwidth requirement, both deterministic and predictable. Timely delivery of such data is often the core function of a wireless sensor network and permanent resources are assigned to ensure that the required bandwidth stays available. Buffered data usually exhibits a short time to live, and the newer reading obsoletes the previous. In some cases, alarms are low priority information that gets repeated over and over. The end -to-end latency of this data is not as important as the regularity with which the data is presented to the plant application. 2. Event data This category includes alarms and aperiodic data reports with bursty data bandwidth requirements. In certain cases, alarms are critical and require a priority service from the network. 3. Client/Server Many industrial applications are based on a client/server model and implement a command response protocol. The data bandwidth required is often bursty. The acceptable round-trip latency for some legacy systems was based on the time to send tens of bytes over a 1200 baud link. Hundreds of milliseconds is typical. This type of request is statistically multiplexed over the L 2 N and cost-based fair-share best-effort service is usually expected. 4. Bulk transfers involve the transmission of blocks of data in multiple packets where temporary resources are assigned to meet a transaction time constraint. Transient resources are assigned for a limited period of time (related to file size and data rate) to meet the bulk transfers service requirements.

Service parameters 1. Data bandwidth the bandwidth might be allocated permanently or for a period of time to a specific flow that usually exhibits well defined properties of burstiness and throughput. Some bandwidth will also be statistically shared between flows in a best effort fashion. 2. Latency the time taken for the data to transit the network from the source to the destination. This may be expressed in terms of a deadline for delivery. Most monitoring latencies will be in seconds to minutes. 3. Transmission phase process applications can be synchronized to wall clock time and require coordinated transmissions. A common coordination frequency is 4 Hz (250 ms). 4. Service contract type - revocation priority L 2 Ns have limited network resources that can vary with time. This means the system can become fully subscribed or even over subscribed. System policies determine how resources are allocated when resources are over subscribed. The choices are blocking and graceful degradation. 5. Transmission priority the means by which limited resources within field devices are allocated across multiple services. For transmissions, a device has to select which packet in its queue will be sent at the next transmission opportunity. Packet priority is used as one criterion for selecting the next packet. For reception, a device has to decide how to store a received packet. The field devices are memory constrained and receive buffers may become full. Packet priority is used to select which packets are stored or discarded.

Reliability criteria 1. 2. 3. 4. Availability of source to sink connectivity when the application needs it, expressed in #fail / #success Availability of source to sink connectivity when the application might need it, expressed in #potential fail / available bandwidth, Probability of failure on demand, How well a network (serving many applications) achieves end-to- end delivery of packets within a bounded latency Þ Ability, expressed in #failures divided by #successes to get data delivered from source to sink within a capped time

Routing Requirements • Source – sink – General traffic from / to the backbone router – Exceptions, eg. constrained control loop routes • Node constrained Routing – Preserving energy, peak power. – Forwarding Buffer capacity – Routing table capacity • Device Lifetime vs. mission criticality – Route establishment time – Listening vs. sleeping, sample period • Mobility – PDA (mobile worker)

Routing requirements Backbone Routers Assume the bulk of the traffic Backbone Router ROLL Low Power Lossy Network ROLL Gateway (ALG) ROLL Specific Route (Reactive) for Control loop Generic Route (Proactive) for General Purpose Plant network

Multicast Usages 1. Delivery of alerts to multiple similar servers in an automation control room. Alerts are multicast to a group address based on the part of the automation process where the alerts arose (e. g. , the multicast address "all-nodes-interestedin-alerts-for- process-unit-X"). This is always a restricted-scope multicast, not a broadcast 2. Delivery of common packets to multiple routers over a backbone where the packets results in each receiving router initiating multicast (sometimes as a full broadcast) within the LLN. This is byproduct of having potentially physically separated backbone routers that can inject messages into different portions of the same larger LLN. 3. Publication of measurement data to more than one subscriber. This feature is useful in some peer to peer control applications. For example, level position may be useful to a controller that operates the flow valve and also to the overfill alarm indicator. Both controller and alarm indicator would receive the same publication sent as a multicast by the level gauge.

Caveat: Reluctance to IP technology • Today: – Sensors are wired point to point / busses to the application – High expectations in terms of security, reliability, latency, jitter Management, maintenance are under PC/operation people – Tight constraints for reactivity to problems than IT support – Verticals may define their own standards (eg. ISA) – Still many Proprietary solution (eg. Profibus, FF and HART) • Converged Network – – – PC depends on IT. Flow isolation: Potential interferences on Shared media Security : New attacks from the IP world? Qo. S: acceptable quality for Process Control classes Availability: react timely on connectivity problem

Please read • • Draft-ietf-roll-indus-routing-reqs Draft-ietf-roll-xxx-routing-reqs draft-thubert-6 lowpan-backbone-router Also visit ISA 100 – http: //www. isa. org/MSTemplate. cfm? Microsite ID=1134&Committee. ID=6891

? ? ? Questions ? ? ? - Draft stability ? - Comments ? Please use the list!