Historian & AVEVA Insight - california.wonderware.com€¦ · Model-based navigation...

Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.

Historian & AVEVA Insight

Mike Brost


Over 100,000

Licensed Systems

Only 2%

Storage Space vs.

Relational Databases

12 Petabytes

New Data Added

Each Year

Historian Scale


How Customers Use Historian

Multiple responses allowedSource: Tech Validate

19%

27%

29%

43%

46%

71%

0% 25% 50% 75%

Energy consumption

Production/cost accounting

Downtime tracking

Identifying improvement opportunities

Regulatory reporting

Diagnostics/troubleshooting


What Makes A Historian?

Presentation

Transformation

Preservation

Collection


Volume Challenge

1 tag5-second samples1-day

~17,000 samples

Storage can always scale

(at a cost)

How do you make use of it?


Periodic Statistics


Change-based Statistics

U3


Insight: On Premise & Cloud

Web Based Historian Dashboards

Additional charts available in online AVEVA Insight


PlantCorporateCustomers/

Suppliers

InTouchClear

SCADAInduSoft

(InTouch ME)Vijeo

Citect*Historian

SDKHistorian

(tier 1)OPC/OI Server

MQTT HTTP(CSV/JSON)


Historize Downtime ReasonString or integer tag

Accurately records micro-stops

State summary calculates

statistics

View As A ParetoIn Insight

Custom charts

Simple Utilization Charts

|

Backed Up

Electrical

Equipment Jam

Material Jam

Starved


Dashboard Comparison

All data is time-series

Super-simple, self service

Independent charts

Basic layout

Virtually any data

Leverages time-slicing engine

Expert user enables self-service

Enables chart interaction

Insight Intelligence


Excel 2016/365 Add-in

Both 32-bit & 64-bit

U3


Insight & Historian Data

Discrete(Boolean)

Analog(floating point,

integer)

String(512 characters)

Alarms(structured time series)

AaSummary

(Analog & State)

∑μ


Alarm History Options

WWALMDB

InTouch

Alarm DB Logger

7.11 - 2000

A2ALMDB

Application Server

HCAL

2014

WWALMDB

Application Server

1.0 - 2002

Application Server

Historian

2014 R2

Routine purge required

(SQL Server limitation)

Reliability could be better

Reliable forwarding

(HCAL)

Manageability


Block-Based Alarm History

Application Server

Historian

2014 R2

Performance

Significantly higher storage rates

Capacity limited by disk space, not

insertion rate

Easier To Manage

Archive/purge/restore using Windows

Explorer

No need to purge to sustain storage

HCAL


Alarms In Context

2017 U1


Alarms In Context

Only for block-based alarm history

Historian 2017 Update 1 Historian Client 2017 Update 2

U2U1


Which Alarms?

WWALMDB

InTouch

Historian

Application Server

Control System

U1


Which Alarms?

Historian

Application Server

Control System

Historian 2017 Update 3

InTouchWill require Remote IDAS here

Detected Here

Detected Here

U3


Which Alarms?


Application Server 2017 Update 3

Control System


InTouchWill require Remote IDAS here

Detected Here

Detected HereU3

Model-based navigation (“breadcrumbs”)

Grouped by Attribute, Tag, Object, Area

Q4online

?on-premises


Tiered Historians

9.0 - 2005

10.0 - 2010

Make it easy to manage

Make efficient use of

network


Scalability

2012 R2500K

20142 million


Cybersecurity Imperatives

▲ Only outbound ports

▲ No inbound connection

▲ Hardened operating system, SQL Server

▲ Least privilege

▲ No default passwords

▲ Encrypted communications

Control

Business

Firewall

Firewall

DMZ


▲ Do you use encryption?

▲ Can we use Windows Authentication?

▲ Do we have to open firewall ports?

Approach to Security

People Training Policies SOP’s and

Tools Technology

A Holistic Approach Is Much More Than Technology


Approach To Security

Certified 1 October 2016

First in industrial software


Windows SecurityOngoing Hardening

Release OS Admin Identity A2 UserRemote

SMCR-IDAS Comms

8.0 Admins System Admin DCOM DCOM/Admin Binary9.0 Admins System Admin DCOM Common Admin Binary

2014 R2 Admins System Admin DCOM Common Admin Binary2014 R2 SP1 Admins* System Admin DCOM Common Admin Binary

2017 InstallService Account

Admin* Disabled* TCP Binary

2017 U3 InstallService Account

Standard TLS/TCP TLS


SQL Server SecurityOngoing Hardening

Release Sysadmin Identity System Users Instance Ports Connections

8.0 Admins System SQL LoginSQL,Windows

Default Default TCP

9.0 Install SystemWindows Integrated

SQL,Windows

Default Default TCP

2014 R2 InstallNetwork Service

Windows Integrated

SQL,Windows

Default Default TCP

2014 R2 SP1 InstallNetwork Service

Windows Integrated

SQL,Windows

Default Default TCP

2017 InstallNetwork Service

Windows Integrated

SQL,Windows

Any Any TCP

2017 U3 InstallNetwork Service

Windows Integrated

SQL,Windows

Any Any TLS/TCP


Communications Security

SQL Server

HistorianClient

Insight Browser

HTTP*

Replication (HCAL)*

Historian(“tier 2”)

HCAL* SuiteLink

* advanced configuration required before 2017 U3

InTouchApplication Server

AVEVA Insight

HTTPS/TLS

HTTPS/TLS

Secure by default inWSP 2017 Update 3

Always secure by default

Historian (“tier 1”)


2010 20172011 2012 2013 2014 2015 2016 2018

SmartGlance HistorianOnline

(VM)

WonderwareOnline

Newsfeed UtilizationHybrid

First managed solution First managed HistorianFirst native cloud HistorianSearch-based selectionUnsupervised machine learning Integrated utilizationHybrid on-premise/online Historian

Online Maturity

Maps, Graphics

Visualization


Geolocation


SupervisedA human expert

guides/configures

Higher-value results

Example: PRiSMEngineer identifies evaporator as

high-value equipment

Finds related instruments

PRiSM reports anomalies

UnsupervisedAutomatically configured

May report insignificant

discoveries

Example: NewsfeedNo configuration required

Reports anomalies

Feedback part of training

Machine Learning

+


Anomaly Detection

Flatlined data

Change in value range

Change in cycle times

Change in distribution

Curator

Assigns significance “score” to each report

Filters reports based on user interests

Newsfeed Updates


Anomaly Detection ✔


Detect “Systems”

Interrelated tags

e.g. loops, boiler temp/pressure

Detect System Changes

Boiler leak

Clogged fuel

Broken impeller

Multiple Tag Anomalies


Paired Data Centers In North America, Europe & Australia

https://connect.aveva.com/insight

https://online.wonderware.eu


Search Changes

Q4


New Asset Page

Q4

Auto-generatedCustom Graphic


Insight Publishing

Control

Firewall

▲ Single outbound-only port (443)


▲ All traffic encrypted (TLS)


Insight Publishing

Control

Business

Proxy

Firewall

Firewall




▲ Anonymous HTTP proxy


Insight Publishing

Control

Business

Firewall

Proxy

Firewall

Firewall

DMZ





▲ DMZ


Insight Publishing

Control

Business

Firewall

Proxy

Firewall

Firewall

DMZ





▲ DMZ

▲ Can be chained together


Crossing The DMZ

Technical Details▲ Captive, Application-specific Web Proxy

▲ Can’t be used to access other sites

▲ Whitelist▲ Managed (managed by Insight)

▲ Signed (can’t be user-edited)

▲ Can be chained together

▲ Deployment▲ Downloaded from Insight

▲ When connections fail, Publisher recommends it

Q4


Limited Internet Access

Historian & AVEVA Insight - california.wonderware.com€¦ · Model-based navigation...

Documents

Transcript of Historian & AVEVA Insight - california.wonderware.com€¦ · Model-based navigation...