© 2008 Cisco Systems, Inc. All rights reserved.C25-451582-00 1 Cisco Confidential Secure Wireless Plant ETSI Hells Kitchen. June 2008 Patrick Wetterwald

© 2008 Cisco Systems, Inc. All rights reserved.C25-451582-00 1Cisco Confidential

Secure Wireless Plant

ETSI Hell’s Kitchen. June 2008

Patrick Wetterwald Innovation Engineering Manager

[email protected]

2© 2008 Cisco Systems, Inc. All rights reserved.C25-451582-00 Cisco Confidential

Sensor Networks are everywhere …with an endless scope of applications

Enable New Knowledge

Improve Productivity

Healthcare

Improve Food & H20

Energy Saving (I2E)

Predictive maintenance

Enhance Safety & Security

Health

Smart Home

Defense

High-Confidence Transport and assets tracking

Intelligent Building


Internet / Intranet

L2N

L2N

TrueMesh

Wireless HART

ISA SP100.11a

Xmesh

Znet

MintRoute

MultiHop LQI

CENS Route

Smartmesh

TinyAODV

Honeywell

So far … WAS (Wait And See) - The current Trend

gateway

gateway

gateway

gateway

gateway

gateway

gateway

gatewaygateway

gateway

gateway

gateway

gateway

gateway


Early opportunities will be in Industrial, Transport and Retail; Consumer apps will come later

Time (Years Out)

#/S

cale

of

Co

nn

ecte

d

Dev

ices

1 32

L

H

M

Third WaveSecond WaveFirst Wave of Adopters …..

Transport

BuildingsRetail

HealthcareIndustrial

Residential

Source: Harbor Research

Power


Industrial Applications

ProcessControl

Maintenance &Operations

Safety & Security

• Pressure• Process temperature• Chemical composition• Energy usage

• Perimeter security• Emergency lighting

• Machine health• Tank level• Equipment status• Calibration• Energy usage

• Poison gas concentration• Emergency showers


Savings of a 5-node installation: 700’ conduit3000’ wire2 guys, 2 full days of laborno trenching or surveying for buried cable

“Wireless truly is faster and cheaper.““It just worked!”

Oil and Gas“…this wireless technology enabled us to do things we simply could not do before, either because of cost or physical wiring obstacles. Through the trials, we found that Emerson's wireless approach is flexible, easy to use, reliable, and makes a step-change reduction in installed costs."

Dave LaffertyBP

Brandon RobinsonEnCana


Emerson Industrial Monitoring

Emerson Process Management uses Dust Networks SmartMesh-XT products for their family of SmartWireless® products, which includes sensors that measure temperature, pressure, and fluid level and a gateway to connect to legacy process control systems

John BerraPresident

Emerson Process Management

"Wireless promises to enable us to put more monitoring in the plant at one-tenth the cost of wired technology."


Wireless means interferences


Industrial Facilities may have LOTS of Wireless

This facility has: 802.15.4, 802.11, 802.16, RFID, 2.4 GHz video, walkie-talkies, etc … 4 sq. miles in size.


A Secure Infrastructure for Multiple Applications


Wireless Architecture

Process Network

Control Network

Security Network

Plant Network

Wireless Field

Devices

802.15.4 Self-Organizing Mesh– TSMP– WirelessHart

Emerson Controller

Cisco Outdoor Industrial Mesh:Self-Organizing 802.11 Mesh


IEEE802.11 b/g

Physical layer14 channels, 5 Mhz channel spacing, 22 Mhz channel width

Only 3 non-overlapping channels1, 6 and 11 in North America

1, 7 and 13 in Europe

802.11a (5 GHz band) not considered here

Cisco 802.11 white paper:http://wwwin-eng.cisco.com/Eng/TME/TSE/Mobility/Airespace_RF_Design_documentv0.1.doc


IEEE802.15.4 DSSS

Physical layer16 channels, 5 Mhz channel spacing, 2 MHz channel width

250 kb/s data rate

Physical channel usageChannel hopping permitted but not required

Coordinated channel use permitted

Dust uses both Channel hopping and coordination (between 802.15.4 channels)

Xbow uses only one static 802.15.4 channel


WLAN and 802.15.4 in the 2.4 Ghz band

-25

-20

-15

-5

0

5

10

15

2025

2400 2412 2437 2483.5

802.11 (US)

802.15.4

-10

Frequency [Mhz]

Tra

nsm

itter

pow

er [

dBm

]

2462

Channel 1 Channel 11Channel 6

11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26


Radio co-existence issues

802.11 radiated power is 100 fold higher than 802.15.4

WLAN side-slopes always impact 802.15.4

802.15.4 channels falling in the guard band between 802.11 channels (in purple) are also impacted

15, 20, 25 and 26 in North America

15, 16, 21 and 22 in Europe


Interferences simulations

Annex E.4.3 in 802.15.4-2006 standard

Results for non-coordinated/non hopping systems show that:

The 802.11 and 802.15.4 radios can not be mounted in the same rack (distance < 2m) even with large frequency offset

Low frequency offset requires 10’s of meters separation

Simulation results validated by Zensys study:http://www.z-wavealliance.org/modules/iaCM-DocMan/?docId=53&mode=DE


Interference simulations


ISA100.11a


Alarms - Any class (human or automated action)

Wireless worker - Classes 3 – 5 (access is usually proxied)For security, logging/accountability, and cache consistency, wireless worker access is proxied through the central control

system

Exceptions may occur during commissioning and emergencies when local access may be required

Usage classes of wireless data networks

Safety Class 0 : Emergency action (always critical)

Control

Class 1: Closed loop regulatory control (often critical)

Class 2: Closed loop supervisory control (usually non-critical)

Class 3: Open loop control (human in the loop)

NOTE: Batch levels* 3 & 4 could be class 2, class 1 or even class 0, depending on function

*Batch levels as defined by ISA S88; where L3 = "unit" and L4 = "process cell"

Monitoring

Class 4: Flagging

Short-term operational consequence (e.g., event-based maintenance)

Class 5: Logging & downloading/uploading

No immediate operational consequence (e.g., history collection, SOE, preventive maintenance)

Im

po

rtan

ce o

f

mes

sag

e ti

mel

ines

s in

crea

ses

Customer Requirements – SP100 Usage Classes


Industrial monitoring and control

Today:

Competing standards,

Mostly wired fieldbuses

Ethernet/IP presence

CIP / EtherNet

Modbus/TCP

Foundation Fieldbus HSE

PROFInet

Invensys/Foxboro FOXnet

Wireless coming up

WiHART

One-wireless

ISA100.11a


ISA

Instrumentation, Systems, and Automation Society is a non-profit technical society for engineers, technicians, businessmen, educators and students, who work, study or are interested in industrial automation.

It was originally known as the Instrument Society of America.

ISA provides leadership and education in the instrumentation and automation industries, assisting engineers, technicians, and research scientists, as well as many others, in keeping pace with the rapidly changing industry.


ISA100.11a Working Group Charter

This project addresses:

low energy consumption devices, with the ability to scale to address large installations

wireless infrastructure, interfaces to legacy infrastructure and applications, security, and network management requirements in a functionally scalable manner

robustness in the presence of interference found in harsh industrial environments and with legacy systems

coexistence with other wireless devices anticipated in the industrial work space

interoperability of ISA100 devices


ISA100.11a key features

Hybrid FHSS DSSS reused from TSMP/WiHART

Interference mitigation

IPv6 and backboneScalability, Scope

Open protocols, COTS

Network Convergence

ExtensibleNew PHYs (802.11LP, 802.15.4a CSS)

New app layers (WiHART)


ISA100.11a, IP technology and IETF

ISA 100.11a endorsed 6LoWPANIPv6 packets but not stack (ND, ICMP)

And the transit link is not covered yet

Really need draft-hui for better compression

Backbone Router draft @ 6LoWPANProposing an IPv6 based best practice

To promote full IPv6 in ISA100.11a

And WSN in general by contagion

Have chairs and partners support

Also I-D on fragment recovery6LowPAN sends up to 25 fragments

Over multihop lossy radio

=> Need Flow Control and recovery


IP Networking Technology for Industrial Automation


IP core Technology applies: The network as a standardized open “system”

Architecture Framework

Connectivity802.11, 802.15.4, 802.3, 802.3af, 802.16

Provisioning and ConfigurationDevice Identification, Location and Personalities

Data PlaneNetwork Forwarding Path - Filtering, QoS, Traffic Engineering

Management PlaneDiscovery, Diagnostics, Inventory, Fault Isolation

Device SecurityAuthentication, Rogue Detection, Encryption

Network SecurityVirus Protection, Intrusion Detection, Attack Mgmt

Application NetworkingEventing, Location, Data Replication and Virtualization

Intellig

ence in

the N

etwo

rkIn

telligen

ce in th

e Netw

ork

Sc

alab

ility, A

vailab

ilityS

cala

bility

, Ava

ilability


Virtualization neededVirtualization: 1 to Many or Many to 1

One network supports many virtual networks

Virtual

Office Domain

Actual Campus LAN

Process Control Network

Virtual Virtual

Plant Control Domain


IP to the Sensors New services and applications

M2M, remote management

New Markets

Process Control for factories

Control and Automation

for home, building, cities

Larger Core Market

Open standards to the sensor

Lower cost

More connected devices and new applications

A wider Internet

Shaping the future

Internet of things

Think of VoIP as a model…

…but for a great many…

…of tiny devices, everywhere.


The golden path Vision

Sensors and actuators using Internet technology

That’s Billions of devices in the next 10 years

Enabling new services and applications

StepsForming an alliance: IPSO (IP for Smart Objects)

IP for automation open standards (ISA100.11a)

Introduce sensors at IETF (6LoWPAN and ROLL)

Apply standards where needed (home, building, power grid)

ProgressROLL requirement WG docs

6LoWPAN RFC 4944 now rechartering for ND

ISA100.11a targeted YE’08


IPSO (IP for Smart Objects)

Objectives of the Alliance

Promote the use of IP in Smart Objects by publishing white papers, case studies, issuing technology press releases, providing updates on standards progress and other supporting marketing activities

Organize focused interoperability testing events

But - the Alliance will NOT work on protocol specifications, algorithms, etc. – those activities will be done at the IETF and other standard organizations… !



What is the HART protocol?(Highway Addressable Remote Transducer Protocol)

Early implementation of Fieldbus. One of the most popular today.

Uses 1200 baud Frequency Shift keying (FSK) based on the Bell 202 standard to superimpose digital information on the conventional 4-to-2OmA analogue signal.

Maintained by an independent organization, the HART Communication Foundation, the HART protocol is an industry standard developed to define the communications protocol between intelligent field devices and a control system.

HART is the most widely used digital communication protocol in the process industries, with over eight million HART field instruments installed in over 100,000 plants worldwide.

HART is supported by all of the major vendors of process field instruments

HART preserves present control strategies by allowing traditional 4-to-2OmA signals to co-exist with digital communication on existing two-wire loops.


HART


WirelessHART™ Specification Released for Approval

New technology establishes wireless communication standard for process industry applications

(Austin TX USA – 17 April 2007) - The HART Communication Foundation (HCF) announces the completion of draft specifications for Wireless HART™ Communication and their release to HCF member companies for review and approval.

Wireless HART is the first open and interoperable wireless communication standard designed to address the critical needs of the process industry for reliable, robust and secure wireless communication in real world industrial plant applications.

“The combination of HART plus wireless is a major step for the industry. Wireless HART provides new capabilities for users to get information on process parameters and to monitor the performance of plant assets in areas that have previously been technically or cost-effectively difficult to achieve,” says Ron Helson, HCF Executive Director. “Wireless HART ushers in the next major technology life cycle and makes possible the next generation of HART-enabled productivity solutions.”

Documents

© 2008 Cisco Systems, Inc. All rights reserved.C25-451582-00 1 Cisco Confidential Secure Wireless Plant ETSI Hells Kitchen. June 2008 Patrick Wetterwald