IIoT: Bringing OT & IT Together

Why IIoT Must Be Built from the Ground Up

63 min video  /  51 minute read
 

About this Webinar

Until fairly recently, there was a clear delineation between information technology (IT) and operational technology (OT). IT was mainly used by management and worked from the top down, while OT was used on the plant floor and built from the ground up. These two fields developed within well-defined roles and were kept separate – and that was that.

Now, disruptive technologies including the IIoT and Big Data have set off a new industrial revolution that challenges the old notions that kept IT and OT separate. Industrial organizations are starting to see the value of uniting the factory floor with the executive offices, but should IT or OT lead in the effort to connect the entire enterprise?

In this webinar, Don Pearson and Travis Cox of Inductive Automation join Arlen Nipper, President of Cirrus Link Solutions and Co-Inventor of MQTT, to discuss the changes taking place in manufacturing and the best way to go forward.

What you will learn:

  • Why IT-led, top-down approaches to IIoT are complex and time-consuming
  • Why OT/SCADA knowledge is critical to obtaining the data that leads to better decision-making
  • Why MQTT is the IIoT protocol best suited to the controls business
  • How the Ignition industrial application platform bring IT and controls together
  • And more

Webinar Transcript

0:00
Don: Well, good morning, everyone, and welcome to today's webinar. IIoT: Bringing OT and IT together. My name is Don Pearson. I serve as our Chief Strategy Officer here at Inductive Automation, and I'll be the moderator for today's webinar. I think we have some great panelists who I'll introduce in just a few minutes to really facilitate our discussion. On the agenda, we'll start by briefly introducing our company and the Ignition Industrial application platform, then we'll talk about OT-IT convergence, implementing IIoT from the ground up, the new Ignition IIoT solution end, the MQTT protocol. Today's webinar is a little bit of a follow-up from what we did last month, when we introduced the Cirrus Link Solutions modules, MQTT for Ignition, and a lot of interest from many of you to step back a little bit and take a look at what's going on in the industry and where things are going and what the trends are. And maybe put Ignition and MQTT in the context of some of these broader trends. And so that's what we're gonna be doing today. Please feel free to go anywhere you want with the questions and we will cover as much ground as we possibly can with the time we have.

01:17
Don: Just a little bit of background on Inductive Automation. We were founded in 2003, that means 13 years in the industry for us, and really since day one, we've been an independent company with no outside investors. The company's been growing at an extremely rapid rate. We're very pleased with the response that our software has gotten from industrial organizations around the world. We serve HMI, SCADA and MES needs of enterprises now in over 90 countries. We got over 1,400 integrators working with Ignition across those countries. If you want more in-depth information on us or anything about our company, just go to our website and go to the About Us section, and I think we cover quite a bit about our organization, our management, our background and things at that location.

02:05
Don: Ignition actually is, it's trusted by thousands of companies, including 40 of the Fortune 100 companies. They're used virtually in every industry from, you name it, oil and gas, water and wastewater, food and beverage, government, transportation, packaging, and... Honestly, the list just goes on and on. It's a platform that has the capability of serving just about any industry need you can imagine. There's a lot of reasons for that. I'm just gonna name six. Ignition, really, it's the first database-centric cross-platform web-deployed industrial application platform that's perfectly used for HMI SCADA and IIoT. It's often used for SCADA, no doubt, but it's really totally unique from what are considered traditional SCADA solutions, so SCADA and as we say a whole lot more. It's web-based deployment, unlimited licensing, lets you have as many tags, clients, connections, devices, concurrent designers as you want, which really opens up the capability for innovation with the platform. Offers security and stability. It's easily expandable because of the modular architecture and really facilitates rapid development and deployment, and real-time control and monitoring. So there's a lot of strengths, I think, that those of you who are familiar with the platform understand if you're not, of course, you can become familiar by downloading and taking a look at it yourself.

03:30
Don: Now to introduce our panelists. Arlen Nipper is President of Cirrus Link Solutions. Arlen has 37 plus years of SCADA experience, including designing and manufacturing complete SCADA system infrastructure implementations for Fortune 100 oil and gas companies. Is co-inventor of Message Queuing Telemetry Transport, MQTT, which is a SCADA message transport which he created in conjunction with IBM. So Arlen, that's a brief introduction from me, but I'd like you to take a little bit more time and tell us about yourself and Cirrus Link.

04:04
Arlen: Thanks, Don. As you said, with 37 years in the industry, I may not know a lot but I've been around a long time. Really, Cirrus Link came about... We've been around for about four years. We are privately-owned and doing quite well. It was the outcome of my experience in both embedded computer industry and then applying these embedded computer boxes to solutions in the field. Having worked with IBM and having been able to use MQTT for the last 17 years, and that's one thing I wanna point out is that, although MQTT seemingly has emerged just here recently as a "Internet of Things" transport, it's actually been around in the SCADA industry for the last 17 years. But I felt like there was space in the industry for a company like Cirrus Link to come in and provide the enablement and the solutions for where I believe MQTT can really go. So that is what Cirrus Link puts together, and over the course of this, we were very fortunate in finally finding a platform that actually leveraged all the advantages of MQTT, I.e, Ignition.

05:29
Don: Thanks Arlen. And Emery, thanks for taking time to join us here today. Travis Scott is Co-Director of Sales Engineering at Inductive Automation. He's also here to assist and partake in our discussion today. Travis, could you tell us a little bit about yourself and your background here at Inductive Automation?

05:47
Travis: Yeah, thanks. Don. So as Don said, I'm the Co-Director of Sales Engineering. I've actually been with the company since the beginning... Since 2003. So I'm going into my 13th year. So I've had a part of developing the software. I trained thousands of people on Ignition, I've done numerous projects in helping customers with Ignition. So, I'm an expert there. Currently in Sales Engineering. Our division is a solutions division, basically we're the technical people that offer architect discussions and knowledge about the product with end-users and integrators. So I'm here today to answer any technical questions that you may have.

06:26
Don: Great, thanks. And I'm pleased at having both Arlen and Travis here. We've got, I think, deep expertise, both in the MQTT, as you can tell from Arlen's introduction and in the Ignition platform in the role that both play in IIoT solutions and from Travis's background. Today we're gonna be discussing the convergence that's unfolding between OT and IT. It wasn't that long ago there was a clear divide between OT and IT, but really all of that has changed. And I think it's important to understand why this change is happening and to talk a little bit about the best way to navigate through it for you, you as integrators working with your customers or as industrial organizations within the challenges you're facing, automation and enterprise deployments. So, it really has been for decades that OT and IT were seen as two distinct technology areas, and they were developed and maintained and supported pretty much separately. IT encompassed the whole range of technologies, for information processing, including software, hardware, communications technologies and related services. And in general, IT was used to generate data for the enterprise or facilitate communication in some way within the enterprise. It's been primarily used as the management level.

07:44
Don: And it is based as sort of top of the organization and extends down into some areas in a more of a top down way, centralized in the organization. IT personnel are very adept at all of these modern communications technologies. They understand SQL jobs and all the IT technologies that they deal with on a regular basis. By a little bit of comparison, OT has really been for the machinery and the other physical equipment, for monitoring and control systems such as SCADA. Operational technologies, developed, implemented, supported separately from IT sort of in an independent world of their own. OT is built ground up from the plant floor from the field up. So, OT and controls personnel are very adept with technologies like the PLCs, the HMI SCADA and all those plant floor field knowledge skill sets. So, just with that quick context there, maybe I'll start with you Travis, then go to Arlen. What are your general thoughts and all the experience you've had with the projects you've done on the different environments or cultures you went into with OT and IT and this evolution we're talking about and how the two groups view each other? Travis?

08:57
Travis: Yeah, so I mean, this, OT and IT, the rift, if you will has been there for a long time. And I think it's really because on the operations side, you have things that are typically proprietary, things that you have to have a real deep knowledge of, especially with how they work. That includes PLCs and of course, SCADA systems as well. On the IT side, you have things that are more open, more standards-based and things that are more open source that they're using as well. And so with that, they are just completely two different worlds. And the operations world, well, it has to be very... It's high risk, has to be secured, has to be typically isolated because you don't want things accessing your machinery on the plant floor. And the IT side, a lot of their systems are in the cloud. So things are just more secured through normal means there. So I think just in that, IT clearly doesn't really understand all of the things that OT has and vice versa. OT doesn't really leverage some of the things that IT has. So I think, as we talk here today, really the convergence of OT and IT, really there's a lot of benefits around that, and we'll see a lot of those here.

10:10
Don: That's great. I think that really puts it in a good context. Arlen, you've been dealing with this and even talking about your experience, obviously tons of field experience, but you've also dealt with folks in the IT level or in the last 17 years certainly and maybe longer. Your comments in this OT, IT world?

10:26
Arlen: Well, again, it's everything that Travis said, plus I think with OT at this... Up until now, you couldn't move as fast. I just got off a project here the last few months and we did due diligence, and we're finding Modicon 484 PLCs that were installed in 1978. So, IT had the luxury of moving faster. They can adopt more things. They don't have to worry about, in most cases, don't have to worry about something that was deployed in 1978. Again, it's a physical world of knowing how equipment works and knowing proprietary protocols like Allen Bradley and DF-1 and DNP 3.0, which are very niche technologies to be able to understand. So, the way I look at it is, when I started with in 1979, I didn't even know IT existed up until working with companies trying to deploy MQTT, setting in meetings where the OT guys are on the west side of the conference room table and the IT guys are on the right side, and I think they're all trying to say the same things, but the vernaculars just completely mismatch. And I think that's a lot of our... What we're trying to do here in the seminar is get on a common level to where OT can leverage these really cool IT technologies that we should be looking at, but on the other hand, IT understands where the mission criticality, scalability and redundancy of operations really comes into play.

12:17
Don: No, that's actually great. I actually think between what Travis said and you said, it really sets the table very well for today's discussion because we're really talking about these worlds colliding if you will, hopefully integrating in a smooth fashion, but there are some challenges. And this quote from GE's Blog I think puts it pretty well, where they say, "It worked from the top down, deploying and maintaining data-driven infrastructure largely to the management side of the business, OT built from the ground up, starting with machinery equipment and assets and moving up to monitoring and control systems. For a long time these two divisions kept to their own turf and found their own effective solutions to problems. Then came smart machines, Big Data and the industrial internet and the world of IT and OT suddenly collided".

13:07
Don: I think the blog post called Converge and Conquer sets the table pretty well too. And it's really true, these disruptive technologies are changing the industrial sector. It's really an inflection point, I think, as Andy Grove once said when he was with Intel is, "It's a change so fundamental that it basically changes the way we do business. So all of these disruptive technologies, they have something in common. They all increase the amount and the accessibility of data in order to connect people, organizations, and technologies. Manufacturing companies are heading into a world where data is increasingly infused into every aspect of business and where these smart devices are everywhere, and are connecting and they're talking to each other."

13:56
Don: Yeah, the increase, it's called the three Vs, the volume, the variety, and velocity of data, where the three Vs is changing everything and I think companies are gonna continue to say, "We've got to get to the fourth V. We've got to get to the value of data." And they're investing in data like never before. Even major companies like GE and Siemens are leading in what Smart Industry Magazine has termed "ongoing digitization and datafication of industry." Just one example, consider GE's move. They've made a lot of moves in the last few months and quite a few in the last few years. But one Jeff Immelt did a few years ago when he realized GE could no longer just build big machines, while they would continue to have big iron like the locomotives and jet engines, they also needed to create intelligence within those machines to be able to collect and parse that data.

14:51
Don: So when they realized big iron needed to get smart, they made a serious commitment to it. They actually invested a billion dollars at that time rebuilding the company's software and analytics approach. They hired a software executive, I think Bill Ruh from Cisco at that time, set up offices in Silicon Valley, gave him a budget of a billion dollars and told him to hire a thousand software engineers and get busy, and they changed their entire approach. That's how they were thinking about the importance and the value of data. And even just one example, this goes across all of their big iron, but if you just take this GE's Evolution Series locomotive, 220 tons, 6.7 miles of wiring, 250 sensors, 9 million data points per hour. And this is an example of, basically, GE is rolling out a suite of industrial internet tools for freight rail haulers in the US that'll improve efficiency.

15:43
Don: Take the average speed of a freight hauler locomotive which is 25 miles an hour and that's not because it can't go faster, it's 'cause they can't get all the logistics, the data, and the information there to have it safely able to move faster. So you think about that and what GE's Immelt calls the incredible power of incrementalization where incrementally, you get benefit and it starts adding up to huge, huge changes from utilizing that data. So if you have software that could increase the average velocity of a locomotive by 15% or 20%, that's just tens of millions of dollars in fuel costs alone and GE sees these efforts, predicting 2.8 billion in annual savings to their customers. And the 1% improvement, just 1% across all of the activities like that, adds up to productivity in the hundreds of billions of dollars. So we're talking about a serious shift in the way business is done. Gartner's put a lot more focus on it recently and it's not just GE. Many organizations are moving in a similar direction. In fact, this new survey by Gartner finds that the number of organizations adopting IIoT will reach 43% overall this year and that includes huge numbers, large numbers of industrial organizations.

17:03
Don: So when you think about manufacturers and industrial organizations, the worlds of OT and IT are intersecting like the overlapping section of a Venn diagram, if you will, within the larger phenomenon of the IIoT world. So industrial organizations, they gotta shift. They gotta have new ways of thinking. Keeping OT and IT separate is old, Industry 3.0 or pre-IIoT mindset. In the world of IIoT and the world of Industry 4.0, we gotta work on aligning or integrating the OT and IT sides to the enterprise so we can not only get at the data, the real-time data, the platform field data, but we also can do something with it. Gartner defines it this way. They say they've researched the convergence of OT and IT, done it for years, and they define it as "the end state sought by organizations, most commonly, asset-intensive organizations, where instead of a separation of IT and OT as technology areas with different areas of authority and responsibility, there is integrated process and information flow."

18:15
Don: So there's a lot of benefits, tons of benefits. One of the biggest benefits is that you can get more and better information for better decision-making. If OT isn't connected to the IT network, then the other parts of the enterprise, they just miss out on this useful real-time data and operational intelligence. In fact, many companies leave 80% or more of their operational data stuck in field devices. There's other benefits that'd go right along with it, reduced cost, lower risks, optimizing business processes, saving time through shorter timelines for your project development and integration. The whole... There's a lot that allows the enterprise to standardize their communication and controls when you bring OT and IT together. Arlen, you've talked about this in relation to this 80% or more of data that's getting left in the field, could you make just some comments on the benefits that can come and the change of the current organizations with an OT/IT convergence?

19:14
Arlen: Sure, Don. I like the example of the locomotive. I was just sitting here thinking, although that's impressive, think of some of the larger SCADA systems, say, Fortune 100 oil and gas pipelines. No, those are 12-13,000 miles of pipeline with 2,000 to 3,000 PLCs. So, instead of six miles of wiring, you have tens of thousands of miles of wiring and thousands of devices. And typically what I see when we go out and do due diligence with customers is that, right now from an operational standpoint, they're just reaching that what I call tier one data. That data that their SCADA system has to have to properly and safely operate the system that they're monitoring. But there's all of this other intelligence out in the field. And to your point of the 80% is that we're starting to look at some of the smart transmitters that are already out there. They're already deployed. Most of them use heart protocol, but being able to effectively put together a solution that feeds all of the real-time data that we need into the operation side of the business, but also allow some of the other information like when was the transmitter last calibrated?

20:45
Arlen: The operation shows that the transmitter has a fault, so what other information can we get? Maybe to cut down on windshield time of driving out there when it could be fixed locally. There's other things, for example, the real-time flow rate from a flow computer is valuable from an operation standpoint. But if I look at it from a business standpoint, wouldn't it be cool to be able to get the audit trails into batch tickets, the delivery tickets from this intelligence that's already out in the field? So I think this isn't new. We're going out... It's not like we're asking customers to re-equip their SCADA systems. It's really putting together an infrastructure where we can bring in more data that more of the line of business can access without impacting the SCADA system. So what we're talking about here is, instead of taking a SCADA system and trying to make it a really bad message oriented middleware component, let's just go ahead and adopt the fact that we really should be using message-ware and middleware-based SCADA, and then let the SCADA clients be very valuable, but yet not the only data consumer.

22:05
Don: I totally got that. I think that when you start thinking differently about it, it opens a whole world of ways to get information into the hands of the people that need it, wherever they are in the organization. Travis, you come with a lot of IT background. You've now taken up a lot of field experience. Can you make a comment on just your experience of what happens and the benefits that come when you actually do begin to bring together and converge OT and IT parts for an organization?

22:31
Travis: Yeah, there's two things that I'll talk about here. The first is being able to leverage technologies and data on both sides. So, the OT, the operations has a lot of data, has a lot of information that is important and vital to the business, and IT as well has information that would be really important for the OT layer to have, such as information from ERP systems or front office type systems. So, being able to leverage those and being able to connect to those together, so if your OT and IT can work together and can integrate these systems, you get a lot more value out of the overall system. And if you look at just a lot of mission critical systems on the OT side, IT has technologies that can help as far as virtualization and clustering and just with the physical infrastructure to help them with that, rather than having a desktop or a server on the plant floor that nobody sees and is not supported and it dies, nobody knows what to do with, especially from the IT level.

23:31
Travis: Really, anything you purchased on the OT side should go through IT so that there's a management there. They can help with managing it, backing it up, all that good stuff. So, not just a really simple, big benefit there, just having them understand each other allows them to leverage both sides. And when you really connect... When you connect all the... Integrate all the systems together, like Arlen was saying with message middleware type systems, you can get data into more applications, more lines of business applications, you get data in more people's hands. And rather than thinking of these as siloed different things, you now have a completely connected enterprise and there's... I can't tell you about the amount of the value you can get out of something like that.

24:18
Travis: And one more thing to mention that, just on the OT side, it sometimes can... They usually have completely dedicated networks. And that landscape is changing because data needs to go up into the IT or the information level, and so they can't just have isolated networks. Now you've gotta have security. You have to think about security. You have to think about how we can move that data around and all of that. And there are... IT has a lot of these technologies and with middleware, it really helps with this as well. So we'll see more of that here today, but that's the biggest benefit. I mean you see other benefits here, but the landscape is changing. More data we get and the more that enterprise has to be connected, the more that you cannot have these separations.

25:05
Don: Sure. It just isn't practical. I'm gonna give an example, but then I'm gonna ask each of you to maybe give an example of a concrete use case, if you will, where you've seen something of these things, higher quality and quantity of information, better decision-making, or just the lower cost, faster development and integration time. There's a... I mean, there could be... We have many use cases, but just to set the table here a little bit, an example of how benefits of OT-IT alignment can play out in the real world. Just take an example of the water industry, rain forecasts and wastewater network design information, which is IT. It could be used with current network status as reported by SCADA and other sensors, which is OT. And then you optimize the settings on the pumps and the valves, which is IT and OT together. And you minimize the impact of rain on the wastewater networks, such as preventing combined shore overflows. So I guess maybe I'll start with you, Travis, and see if you could just share a use case or something you did with a customer that shows a little of this benefit and the customer really saw value from this bringing together.

26:11
Travis: I think the example I'll give... I won't name any actual names to your customers, but the example I'll give is really the combining of data. It talks about how systems are integrated and how if you can add context to your data, now that rapidly turns this raw information as raw data into actual information that we can make decisions on. And so, in my example of manufacturing in a production line where we're actually producing, we're getting product or making cases of product. In that case, if you look at weather potentially a season of the year, you'd bring in things like who's the operators, as well as supervisors, you bring in information from other stunts like ERP, and the more... There's also labor, like in this case it was Kronos bringing in who's on the line, who was in there, you start looking at the production line as more than just as "Was I running or not?", "Is the machine on or off?", or "what's the temperature?" or whatever, into how does this translate into actual money? And you can get into your example of 1% improvement. In this case, they found... You find this data and you can start correlating it together and it actually amounted to pallets of products over just one... The course of one week. Which by just improving by 1%, the amount of savings and things that customers get is actually, is very... Is huge. And that just goes into having all the systems work together rather than trying to make it completely isolated.

27:45
Don: Sure. Arlen, how about some use cases, for example, from you, of one of these benefits?

27:51
Arlen: Okay, Don. Well, I guess I'll start with the actual genesis of why we put MQTT together. The opportunity that was there to actually work with Andy Stanford Clark at IBM on this. It actually was for a project for Phillips 66, and they wanted to get... There were several goals there. One was to reduce latency from one minute to 45 seconds down to getting all of their operational data in under 10 seconds from their entire pipeline. But then kind of the tangent to that was, like I was saying before, their flow computers weren't connected to the network, they were bringing in the real-time flow rates. They wanted to get their financial transactions once a batch of wool was delivered from the 30 days, which was typical, down to under 15 seconds. And so by putting this together, that was actually a very good example where IT and the electronic flow measurements group worked with OT to say, "You know, look, we have all this equipment out there. Operations definitely needs this subset of information from the flow computers. The financial department needs this other subset. So why don't we just publish all of the information in? And then the valuable data consumers can subscribe to that again, a one-to-many data relationship." And so where OT and IT came together was mapping out the available data that they had, and then being able to wrap that to the right places.

29:35
Arlen: And I'm seeing that again in things like monitoring their cathartic protection systems, their tank storage systems, where we can actually reach behind the PLC and start picking up some intelligence from the tank transmitters that tell us the actual volume. So now I can start putting together very interesting over-insured projects that tell me my total volume balance of the pipeline of an overall system. So it's almost like... Again, when you think of PLCs, RTUs, flow computers, chromatographs, barcode readers, all of these devices intimately connected to a SCADA application, then innovation is very slow because you've gotta go talk to that Operations Manager that says, "Gee, Joe, I would like to add a couple more polls to your Modbus poll, because I need your application to get this piece of data." Whereas if you wanna... I call it the serendipitous nature of data where I should be able to have an idea, within permissions and bounds of safety, but I should be able to have an idea, be able to go in and put together an application to try an idea in a line of business that might improve profitability.

30:58
Arlen: And with the architects that we're talking about, I can come in, subscribe to a subset of data, try something, I haven't impacted the critical nature operations and "Oh, well, it didn't work." So I just spent out my subscription and you know, no harm done. But on the other hand, it lets me go in and say, "Well, wow, this is a valuable relationship with this data, and we're going to see some of those benefits that you pointed out on the GE scene."

31:28
Don: Sure. That's great. Thanks, Arlen, I appreciate you. Both of you guys are expounding a little bit on... There's amazing benefit to be had here. Travis, you mentioned in passing the changes that come when you bring networks together, one of them being security as an issue. There are a lot of challenges, and the biggest may be the security one to some people. Reality is that when you start having proliferation of these sensors and other smart connected devices, it's brought along with that an increase in security vulnerabilities. So OT and IT have historically had differing security needs, although they've become more similar, obviously, as time's gone on. OT systems used proprietary technologies that made them less likely targets for attacks, maybe security bound, security or whatever it's called. OT systems have also been fairly self-contained with few connections to other systems. On the other hand, IT and enterprise systems, frequently under attack, have a higher level acceptable security risk because IT usually has a higher tolerance for downtime than OT. So comments, maybe first you Arlen, and then Travis on just security challenges as we begin to bridge OT and IT across the enterprise.

32:42
Arlen: Okay, Don. Well, again, let's look at a little bit of a history here. If I look at SCADA or telemetry from a historical point of view, in the late '70s or early '80s, basically the world all ran on multi-drop phone lines from AT&T. Now, if we had a 300 baud or a 1200 baud modem, we could hang that on to our four-wire dedicated circuit, and we could start putting together our SCADA system. Then in the mid-'90s, the break-up of AT&T, the proliferation of VSAT, people starting to put in their own microwave, and now to where we're at today with basically, even though we're trying to encapsulate old polling protocols, we're all running TCP/IP networks. I know very, very few companies that aren't running their SCADA system on a TCP/IP network, albeit with all kinds of adapters and terminal servers and protocol translation. So let's just kind of put it out there that we are all on TCP/IP networks. So the challenges are, how do we actually say, Okay, now we're gonna bring in some mature... And call it OT or IT technologies, to add to the level of security that we need.

34:12
Arlen: Now, if we talk about it in terms of leveraging messaging middleware, one of the things that MQTT does is really does a 180 on just the connectivity, because MQTT clients are a remote originated connection, so if you can imagine, now instead of having hundreds of connections out of your SCADA host, through all kinds of firewall rules and over all kinds of networks, now your SCADA host becomes very quiescent and basically sets within the DMZ where you have a single point of control for all access on devices connecting and publishing your data. So I think, as we move forward, as we start getting the technology and the edge of network devices and the native devices using MQTT, security will become much easier to accomplish over the entire network.

35:13
Don: That's great, thanks Arlen. Travis, your thoughts on the security world?

35:17
Travis: Yeah, I got a couple of things I can mention on this front. I think Arlen's mentioning how middleware can help flip the picture around as far as SCADA, pushing data up rather than having systems connect and pull and having to open up ports and things in the firewalls. I think it's important that both sides really, especially IT, you have to understand what the landscape is, what PLCs are doing and how they're mostly open. There's not really security in there, how we really have to make that part protected, but we still want to, you know, that data has to be moved around, we still wanna get that, you know, the value of that data. So, like Arlen said, middleware really helps transport that information around. So I think understanding it is really key, so that we can do the right things. And I think also leveraging IT systems like Active Directory or just firewalls in general, potentially leveraging cloud systems securely, VPNs and all that are really important, because now it's not just that one panel view that's next to the machine on a plant floor that's controlling it, now somebody at home on their smartphone or over a VPN connection can be looking at it.

36:38
Travis: So you've gotta have a system where I think the biggest challenge is what kind of privileges are you gonna allow people to do from different parts of the world when you have the valid, you know, the ability to connect up to it. I also think that we're gonna start seeing leveraging smart cards and certificates and things where you actually have to have two phases, Smartfire and a PIN, to be able to access systems, so that that gives even a higher level of security there. So I think there's a lot of things to look at, there's some challenges, but understanding it and being able to put the appropriate infrastructure in place to handle it is really key.

37:18
Don: Thanks Travis and Arlen. Let's just take a look at least briefly at a couple other challenges, because you hear different things about the evolution of OT/IT, one is the demand, obviously, for ROI. A newer Gartner survey cited earlier also says, "The big challenge now is demonstrating return on investment." Executives need to validate the contribution that IIoT can make in order to justify large scale rollouts. Then, of course, there's the fact of edge network devices tend to use different protocols for sending and receiving data, and the subject of the overall issue of interoperability and how we make all these different kinds of devices all connect to each other. So I know we'll dig in a little deeper when we talk about MQTT in a minute here, but if you could just maybe comment, Travis first and then Arlen, on the challenges from ROI and different protocols and interoperability that are faced when you're bringing these together and executives are scrutinizing some significant rollouts. Arlen, you wanna go ahead, comment on that?

38:19
Arlen: Well, first of all Don, every single customer that we have is wanting to get to a common infrastructure. You can call it... Call it what you want. Call it SOA, Service Oriented Architecture or Enterprise Service Bus, ESB. But again, we're going back to this notion of this legacy of yes, we have MQTT, we have some other competing IIoT Technologies. But man, if you jump into the SCADA world, there are hundreds of proprietary protocols. I enjoy the... Well gee, we use Modbus. Well, which one of the 14 flavors of Modbus do you use? So, being able to compartmentalize this and get to a common message transport layer, I think is the key thing here, even to the point of even if operations don't want to work with IT at the beginning. And a lot of times I understand that, but at least we're putting in place the tools so that that migration can start happening. And we can start that integration process.

39:34
Don: Great. Thanks Arlen. I appreciate that. So, let's move on and take a look at just a little bit more on the case for the ground up, building from the ground up. It's in the title of today's webinar. There's a lot of alliances. There's a lot of consortia. They've put forth a notion that IIoT should be... A lot of them are just building from the top-down, IT-driven methodologies. The so-called experts if you will, may have it backwards. I mean, SCADA's already been doing IIoT for years before there was even a term called IIoT. So, about 30 years now. Industries like, "Whatever." You mentioned a couple in the oil and gas world, chemicals, pharmaceuticals, manufacturing overall. They've been using sensors to improve their processes. Those industries capture huge amounts of data from PLCs and pass them to SCADA systems as real-time data, which is displayed in store.

40:24
Don: Basically they're integrating large amounts of data to enable better decision-making. If that's not what IIoT is about, I don't know what it is. It's just what it's about. From the perspective of IIoT, it isn't so much a new thing as it is really a re-definition of what operations people are already doing and extending that out to the enterprise. That makes a strong case that OT should drive the implementation of IIoT and not do it the other way around. So, I think there's a lot of players out in the space today, and people who don't necessarily understand the operational side. And by trying to implement IIoT without first understanding OT, it's kind of like not knowing what you don't know. If you try to put out... So, IT-centered top-down solutions, they aren't amenable to teams that work on the plant floor or out in the field.

41:19
Don: It's just not gonna work. So, if you're gonna make IIoT work in an industrial environment, really, it seems there's only one way to do it and that's build it from the plant floor level, from the field level up. Arlen, you may have covered this quite a bit, but anything you wanna comment on, why is it so important for IIoT solutions to work in the field and plant floor and move up through the enterprise?

41:42
Arlen: Well Don, like I said, for the 17 years that I've been trying to get this technology out into the world, again, I guess my mistake, a lot of times I was looking at it as IT driven. And we got so wrapped around the axle from an IT perspective of implementation, we forgot what the goal was. There's not one project that I've gone into where if you can't prove to the SCADA manager, to the operations manager, to the plant manager, that what you're putting in place, isn't better from a safety critical redundancy, availability, scalability than what he's got today, then he can stop that project dead in its tracks. So, from my standpoint now, the way I look at it is, you've got to show for whatever your IIoT solution is, you've got to show operational excellence before you can move forward and go to the enterprise level of actually integrating IT and OT together.

42:56
Don: Thanks Arlen. And I think really it's emphasized here that you're basically... You gotta move from the knowledge of the plant floor up if you're gonna connect the enterprise and end up making better decisions. So, in essence, what's needed is practical, fully functional IIoT solutions that actually combine those proven operation technologies with the information technologies. And that's the way to bridge the sort of long-standing gap between IT and the OT sides of the house. And that actually is what Ignition does. It's all about Ignition's IIoT solution. It's quite different from other solutions that have so far been talked about or offered so far. Ignition, really has been since its inception at the epicenter of IIoT, and that's before that was even a term.

43:46
Don: That was the concept that our CEO and founder, Steve Hechtman had, was to build this hub if you will, this applications platform that would save exponential amounts of time and would actually allow you to de-couple intelligent device protocols from applications in order to make data available throughout the whole enterprise. So, it actually... We build it from the ground up, from the OT level, connecting up to the IT level. In addition to that, just a couple other points, it has all these other features that make it really effective as a universal industrial automation platform from HMI/SCADA, IIoT, MES across the boards. We already mentioned these features at different times. So, Travis, as someone who's worked on countless projects in new ball industries, I think you're the best person to actually answer really is, is why is the Ignition industrial application platform positioned as the standard platform or as the hub if you will, for the evolution of IIoT?

44:44
Travis: It's a great question. And Ignition is just perfectly suited for this because of the marriage of IT and OT that we've had from the beginning. So if you really look at Inductive Automation's Ignition product, it was a culmination of an integration company who had 25 years of experience with IT professionals like myself adding our expertise into it, and how we can merge... Put the two together in such a way that's gonna leverage both sides. And that was just making it standardized and obviously using standards like OPC and others are really important to allow it to talk to a lot of different things. But working with this natural database is keeping things open, not proprietary, and having it be server-based where it's one place to manage them back up and license, and easy to get people for deployment, easy to develop and deploy applications extremely fast. I think that is one really big part that can't be understated when you look at companies, especially now, with IIoT, where things have to change very quickly.

45:48
Travis: And when you have things that need to change quickly you've gotta be able to have a platform where you can make the change and to be able to deploy that change and not have to rely on a huge rollout or personnel to do this. So, the other thing is, when you look at the amount of data, the amount of data is gonna increase. And we'll talk more here, but with MQTT and middleware, that enables Ignition to auto-discover all the information that just starts popping into the network. And so when you all discover that and then you could actually deploy that information to people and start turning that raw data into information, now we can start making decisions. So, Ignition's... Its philosophy of being server-based standards, simple licensing, unlimited, and being able to be scalable is really what allows it to deploy very nicely in this space.

46:37
Don: Thanks, Travis. I think you covered it really well. Really, it was created to be able to bridge this gap between OT and IT. But let's move on to the next question which is, what protocol to use? There's a number of different communications protocols clearly out there, and currently in use. The Message Queuing Telemetry Transporter, MQTT Transport protocol, it's pretty quickly emerging as the standard for IIoT. It's coming to dominate things developed for oil and gas as Arlen talked about as a co-inventor of it. It's 1999 and it has quickly risen to become one of the most dominant messaging transports for IIoT. It's used to spread of course beyond those beginnings. It's used in Facebook Messenger and Amazon. I think with Echo. You've seen it in a lot of different places. MQTT is now an ISO standard and an OASIS standard. So, as you look at this Publish and Subscribe protocol, that's a really important aspect of MQTT. When you have legacy protocols and they're used, about 80% of that valuable data just gets left behind in field devices. And even though that data could be used by business applications to make a whole lot of better decisions, it's not available.

47:52
Don: So, because the Ignition IIoT solution uses MQTT, it can decouple intelligent devices from the applications. So it ends up creating this single super efficient data pipeline to which data is pushed from thousands of devices into a central location where it can be accessed by your industrial and business applications as they need it. MQTT has several features that make it really effective for remote sensing and control IT reports by exception, and all sorts of big benefits. But I think it's... And when I think about this Arlen, here's some things about it, the stateful awareness, but you're the... My gosh, you're a co-inventor of it, so why don't I turn it over to you, sort of when you put stateful awareness by directional ability and security in MQTT, tell us a little bit how it ties in with what's going on right now, and bring us up to currently as to why is... A really correct protocol for IIoT evolution.

48:55
Arlen: Okay, Don. I'll try to be real quick here and hit the high points. Again, the advantage we had is, we had 25 years of doing protocol conversion and SCADA infrastructure that literally got packed into MQTT. At the same time, Andy and the IBM team had all this knowledge of messaging middleware, "Why do you use it?" And I think the one thing I wanna point out is that, yes, it's very lightweight. I noted before, it runs quite well on 300 baud circuits. But the best thing is that we understood that if you don't have state and people forget about this because they look at messageware and middleware and they say, "Oh well, that's published and subscribe. I'll just publish my data and then I'll publish a valve open." But you cannot do that in SCADA unless you have a stateful session.

49:56
Arlen: And so, one of the very unique things to take away from this discussion is that MQTT, when applied to SCADA, works on the notion of having a stateful MQTT session I.e, if I look at a pipeline system and it's got 1400 MQTT clients publishing real-time information, I know within the keep alive time of the state of all 1400 of those clients in real-time. And so that gives me that hook that I need when I actually apply MQTT to real-time SCADA systems. Again, there's other aspects of security since it's built on top of TCP/IP, it's also very important as well. But the best thing is, the fact that it's got state, the fact that it's super efficient and the fact that it's running on top of TCP/IP.

50:54
Don: Arlen, thank you very much. I'm gonna interject a question from our audience now. I know we're moving towards the end here and I wanna get into our Q&A, but I'm gonna interject one right now from a member who says, "Are you seeing protocols other than MQTT playing on this OT, IT convergence? Is DDS, CoAP, RESTful/HTTP, etcetera players in this world? Are there other players?" Can you maybe just give a brief comment on some of the other protocols and how you see that playing?

51:24
Arlen: Well, indeed. You brought up a lot of them there. I think when you look at REST or HTTP, those play very well into this overall notion I guess of IIoT. The problem though, when we try to apply HTTP or REST or CoAP even into SCADA, none of those protocols really give you state. So if I told a SCADA engineer that I was gonna control his 5000 horse motor with HTTP, but I really didn't have state, I would just kind of send something out there and it may start or it may not. Either I'm gonna spend a lot of time polling, which now doesn't do any good, or I have something like MQTT that gives me state. There are other protocols like DES, AMQP, those tend to be heavier on the wire, they have additional levels of quality of service that work well in IT, that really don't work so well in, well, at least wide area SCADA, because you have networks that come and go, so you have to have something that's very lightweight and usable on VSAT or cellular networks.

52:46
Don: Thanks. I really appreciate that. Thanks, Arlen, for that. I'm gonna say a couple more things about MQTT, and then I'm gonna let you talk a little bit about the modules and the functionality that you're bringing together with that. In our discussions earlier, just as a passing point here, the graying of technology, the retirement of the baby boomers, if you will, there's engineers with deep knowledge of legacy technologies, but they also happen to be retiring and there's a new generation of engineers coming out of that, but who really understand more, the technologies like JavaScript and Python, MQTT. So I think you have to look at this in the context also, what's happening to the workforce and what evolution is going to occur in industry in that capacity.

53:29
Don: And just an emphasis here, decoupling device protocols from applications is a critical component when you... Enables use of message oriented middleware, which Arlan has talked about, those technologies that decouple device protocols and applications and allow you to subscribe to the data you want, and it's published by exception, so it's a more efficient information distribution and it has amazing scalability and much shorter... Much, much shorter development times. And also, decoupling this, it brings in much more data, more quickly, projects can be done in days or weeks, instead of months or years. And maybe you can just make a quick comment on this last bullet point here, because you gave an example of a three-month timeline that came down to get the entire infrastructure modding in a day. Can you comment on that, Arlen?

54:20
Arlen: Well, yes, Don, real quick. Again we... Since this is convergence, we tended to get wrapped up in the complexities of putting in these message oriented middleware systems and what was my enterprise service bus definition going to be, and all of my data templates, when... Let's look at that from an operational MQTT enablement. And so now, with the components that we've got within Ignition with distributor injector and MQTT engine, we were putting together a proof of infrastructure for a customer, where if they would have looked at an on-premise, set everything up, it was looking like a lot more than three man months, it was looking like in man years, they wanted to get an infrastructure up to test with, called us 8:00 o'clock in the morning, said, "We're ready to get going," we spun up the entire infrastructure and had the entire pipeline simulated with more than 900 booster stations, 1400 PLCs by 2:00 o'clock that afternoon.

55:32
Don: So I'll move to the next slide here, because you talked about these... Can you briefly then say these three new modules you created for Ignition and the empowerment that they're causing, and then we're gonna move into a little bit of Q&A. 'Cause we've got a whole stream of questions here, we wanna use our remaining time. But give us a definition of these.

55:50
Arlen: Okay, real quick. MQTT engine is the core component, that's the MQTT client that makes Ignition a native MQTT citizen. So it knows about the topic name space, knows about this MQTT session, the session awareness that I talked about a while ago, where you have state, so that's what it does on the MQTT side, connecting into your messaging middleware. On the Ignition side, it also knows about all the Ignition, how the tags work, how the history works, and so the engine module is kind of that core piece that once you install that into Ignition, that's your MQTT bridge, if you will. Then, what we discovered is that we needed to make this easy, so the MQTT distributor module is actually a MQTT compliant MQTT server that actually... A very small one, it is limited to 50 clients, but it runs as a module in Ignition, so you can get started very, very quickly.

57:00
Arlen: And then the other thing that we found out is, Injector was originally a simulator that would simulate many, many, hundreds or thousands of PLCs to basically see how this thing works, but what we found on that, it was actually became a very important design validation tool as well, as people started putting together these MQTT-centric systems. So you've got the engine module, which enables Ignition, you've got the distributor, which gives you a small MQTT server to get started with, and you've got the Injector to build up full-blown simulations of what you're trying to put together.

57:41
Don: Thanks, I totally appreciate you giving a quick summary of that. And I'll just say, as we wrap up and move to Q&A, the... This came up... If you didn't get a chance to watch the release of those modules last month, it's archived on our site. You can see, I think it was a 1000 PCs that you spun up there using the injector. I mean it's an amazing demo. Many people who are on this webinar, wanted us to go deeper into some of what is the whole evolution going on here, but that demo is still available on our site. I think that the takeaway I'd like to leave you is that Ignition IIoT empowers... It just empowers your enterprise to realize the full power of your data, and it's operational today. It's built on the power of the industrial application platform of Ignition, and the unlimited licensing, unlimited possibilities... The unlimited nature makes it possible to actually scale without squelching the innovation that you're trying to come up with. Streamlines the data pipeline, increases data availability, improves throughput, and instantly creates tags as Travis was talking about too. It fills that fundamental need that we're trying to get out with IIoT, that we can access more data in order to make better decisions.

58:50
Don: If you want to learn more, just go to our site and you can log on there to inductiveautomation.com, and click Ignition IIoT. So, as we move into Q&A, with a few minutes we could still have left here, I think... Let me just ask the first question here for Arlen. What if I want to combine a client server, say HTTP and a publish subscribe protocol such as MQTT? Will Ignition support that type of architecture? Edward has this question.

59:24
Arlen: I believe so, actually Travis might be able to comment on that better than I can, but since the tags are coming in MQTT... Once they're in Ignition, then you've got all of the web services availability to be able to use REST or HTTP to access those tags once they've been put into Ignition.

59:44
Travis: Yeah, and to expand on that, certainly MQTT will be the driver to get the data into Ignition, and then as far as Ignition, it's client server-based. The clients are web-launched, so you just run them anywhere on your network, and they could see all that information on the screens that you develop in it. So, that HTTP is fundamental HTTPS, fundamental to Ignition and MQTT enables the actual data.

1:00:09
Don: Great, thanks Travis. Any thoughts... Is this one for, okay... Any thoughts about Exxon's initiative to standardize protocols, oh excuse, standardize process control hardware and move away from proprietary solutions? I know this was released in the work they're doing with Lockheed Martin at the ARC Conference, you were there... We were there last month... So, comments on that Arlen?

1:00:35
Arlen: That's been put out there. I know that there's a company we're working with, Magnetrol, that makes smart heart transmitters. They're using MQTT edge of network devices to bring that data in. I know Exxon was very interested in that. I think there's a lot of availability, and I just want to mention that one of the driving factors is that with all of the open source and information that's out there on MQTT... So, if you go to the Eclipse Foundation and look, or you Google for the PAHO Project, you'll see that there is a ton of information out there on MQTT. One of the points that I wanted to make, that I'll make real quick... As Don mentioned the greying of technology, and I just got to thinking that, if you look at the graduating class of computer science majors in 2016... You get them all in a room, ask them how many are intimately familiar with Modbus or Allen-Bradley or OPC UA, but then ask them how many of them in their dorm room have Mosquitto running on their Raspberry Pi. And it's just that awareness of this technology and we as an industry should try to figure out how to leverage that.

1:02:00
Don: Arlen, I think, because we ran over our time a little bit, I think that answer is a good place for us to end off, but I want to say to... Well first, thanks to you, and thanks to Travis for taking time to just engage in this discussion today. And to all of our audience, we have a queue of questions, and so I'm certainly volunteering time from Arlen and Travis. We will get an answer to those questions that you had, as we always do, because we couldn't get to all of them today. But I thank you for your interest in joining today, I think this evolution to IIoT and the convergence of OT and IT is really critical to industry right now, and one that we're going to continue to try and bring solutions to. If you haven't seen the modules from Cirrus Link Solutions, you can go to our site and participate in the February 24th webinar that's archived there and listen to it. With that, we're at the conclusion of today, thanks everyone for your time and have a great day.

Posted on March 23, 2016