Abstract: Performing multi-layer network discovery of an operational technology (OT) network includes receiving a plurality of discovery data sets, each identifying a respective subset of a plurality of nodes within an OT network having a plurality of network layers, wherein the respective subset of the plurality of nodes for a first discovery data set are disposed within at least two network layers of the plurality of network layers, identifying a set of nodes within the OT network that appear in two or more of the plurality of discovery data sets, generating a holistic discovery data set for the OT network based on the plurality of discovery data sets and the identified set of nodes within the OT network that appear in the two or more of the plurality of discovery data sets, and generating a visualization of the plurality of nodes within the OT network based on the holistic discovery data set.

Abstract: A method includes receiving, from an enterprise network, data associated with one or more industrial automation systems operated by an enterprise, wherein the data includes design artifacts of the one or more industrial automation systems, run time data collected from the one or more industrial automation systems, or both, inputting the data to a machine learning-based security policy development engine to generate a set of recommended security policies for the enterprise based on the data, receiving the set of recommended security policies for the one or more industrial automation systems output by the security policy development engine, wherein the set of recommended security policies define access, use, or both, of the one or more industrial automation systems operated by the enterprise; and transmitting the set of recommended security policies to the enterprise.

Abstract: Performing multi-layer network discovery of an operational technology (OT) network includes receiving a plurality of discovery data sets, each identifying a respective subset of a plurality of nodes within an OT network having a plurality of network layers, wherein the respective subset of the plurality of nodes for a first discovery data set are disposed within at least two network layers of the plurality of network layers, identifying a set of nodes within the OT network that appear in two or more of the plurality of discovery data sets, generating a holistic discovery data set for the OT network based on the plurality of discovery data sets and the identified set of nodes within the OT network that appear in the two or more of the plurality of discovery data sets, and generating a visualization of the plurality of nodes within the OT network based on the holistic discovery data set.

Abstract: A non-transitory, computer-readable medium, comprising instructions that when executed by one or more processors, cause the one or more processors to perform operations that include receiving a request to connect to the wireless access point from a computing device. The request includes a private key. The operations may also include comparing the private key to an index of public keys associated with respective users authorized to connect to the wireless access point, determining that the computing device is authorized to connect to the wireless access point based on the comparison, authorizing the computing device to connect to the wireless access point, encrypting maintenance data associated with one or more industrial automation devices, and transmitting the encrypted maintenance data to the computing device via the wireless access point.

Abstract: A non-transitory, computer-readable medium, comprising instructions that when executed by one or more processors, cause the one or more processors to perform operations that include receiving a request to connect to the wireless access point from a computing device. The request includes a private key. The operations may also include comparing the private key to an index of public keys associated with respective users authorized to connect to the wireless access point, determining that the computing device is authorized to connect to the wireless access point based on the comparison, authorizing the computing device to connect to the wireless access point, encrypting maintenance data associated with one or more industrial automation devices, and transmitting the encrypted maintenance data to the computing device via the wireless access point.

Abstract: A modular I/O device includes a terminal base with a terminal block that includes a plurality of wiring connectors. An auxiliary wiring device includes a plurality of auxiliary wiring connectors and is selectively physically connectable to the terminal base in an operative position and selectively physically removable from the terminal base. The terminal block includes a receiver and the auxiliary wiring device includes a body including at least one mounting tab that projects outwardly from the body and that is located in the receiver. The receiver includes a projecting lip about which the auxiliary wiring device is pivotable relative to the receiver on a pivot axis. The terminal base includes at least one catch and the auxiliary wiring device further includes at least one latch arm that is adapted to engage the catch when the auxiliary wiring device is physically connected to said terminal base in its operative position.

Abstract: An improved system for handling events in an industrial control system is disclosed. A module in an industrial controller is configured to generate an event responsive to a predefined signal or combination of signals occurring. The event is transferred to an event queue for subsequent execution. The event queue may also be configured to store a copy of the state of the module at the time the event is generated. The event queue may hold multiple events and each event is configured to trigger at least one event task. Subsequent events that occur during execution of the event task are stored in the event queue for later execution. An event, or combination of events, may trigger execution of an event task within the module, within the controller to which the module is connected, or within multiple controllers.

Abstract: An input module for an industrial controller includes configurable execution windows. The execution windows are defined by a first parameter and a second parameter stored within the input module. A third parameter defines a status bit which is compared against the execution window to set a window output signal within the input module. The execution window may define a range between the first and second parameters against which the status bit is compared. Alternately, the first and second parameters may define setpoints against which the status bit is compared. At one of the setpoints, the window output signal is set and at the other of the setpoints, the window output signal is reset.

Abstract: A modular I/O device includes a terminal base with a terminal block that includes a plurality of wiring connectors. An auxiliary wiring device includes a plurality of auxiliary wiring connectors and is selectively physically connectable to the terminal base in an operative position and selectively physically removable from the terminal base. The terminal block includes a receiver and the auxiliary wiring device includes a body including at least one mounting tab that projects outwardly from the body and that is located in the receiver. The receiver includes a projecting lip about which the auxiliary wiring device is pivotable relative to the receiver on a pivot axis. The terminal base includes at least one catch and the auxiliary wiring device further includes at least one latch arm that is adapted to engage the catch when the auxiliary wiring device is physically connected to said terminal base in its operative position.

Abstract: A modular I/O device includes a terminal base with a terminal block that includes a plurality of wiring connectors. An auxiliary wiring device includes a plurality of auxiliary wiring connectors and is selectively physically connectable to the terminal base in an operative position and selectively physically removable from the terminal base. The terminal block includes a receiver and the auxiliary wiring device includes a body including at least one mounting tab that projects outwardly from the body and that is located in the receiver. The receiver includes a projecting lip about which the auxiliary wiring device is pivotable relative to the receiver on a pivot axis. The terminal base includes at least one catch and the auxiliary wiring device further includes at least one latch arm that is adapted to engage the catch when the auxiliary wiring device is physically connected to said terminal base in its operative position.

Abstract: An input module for an industrial controller includes configurable execution windows. The execution windows are defined by a first parameter and a second parameter stored within the input module. A third parameter defines a status bit which is compared against the execution window to set a window output signal within the input module. The execution window may define a range between the first and second parameters against which the status bit is compared. Alternately, the first and second parameters may define setpoints against which the status bit is compared. At one of the setpoints, the window output signal is set and at the other of the setpoints, the window output signal is reset.

Abstract: An input module for an industrial controller is configurable to simplify setup and commissioning. The input module includes input terminals configurable, for example, as a counter input. Still other input terminals may be configured to trigger events as a function of the input signals present at the terminals. Time signals corresponding to transitions in state of the input terminals, triggering of events, or operation of the counters may be recorded. The input module is further configurable to transmit data back to the processor or to transmit data directly to another module in the industrial control network.

Abstract: An improved system for handling events in an industrial control system is disclosed. A module in an industrial controller is configured to generate an event responsive to a predefined signal or combination of signals occurring. The event is transferred to an event queue for subsequent execution. The event queue may also be configured to store a copy of the state of the module at the time the event is generated. The event queue may hold multiple events and each event is configured to trigger at least one event task. Subsequent events that occur during execution of the event task are stored in the event queue for later execution. An event, or combination of events, may trigger execution of an event task within the module, within the controller to which the module is connected, or within multiple controllers.

Abstract: An improved system for handling events in an industrial control system is disclosed. A module in an industrial controller is configured to generate an event responsive to a predefined signal or combination of signals occurring. The event is transferred to an event queue for subsequent execution. The event queue may also be configured to store a copy of the state of the module at the time the event is generated. The event queue may hold multiple events and each event is configured to trigger at least one event task. Subsequent events that occur during execution of the event task are stored in the event queue for later execution. An event, or combination of events, may trigger execution of an event task within the module, within the controller to which the module is connected, or within multiple controllers.

Abstract: An output module for an industrial controller configurable to simplify setup and commissioning is disclosed. The output module includes configurable PWM outputs that may be scheduled to start at different times within the PWM period, that may be configured to generate a fixed number of PWM pulses, and that may have an extendable PWM period. The output terminals are configurable to enter a first state upon generation of a fault and further configurable to enter a second state after a configurable time delay following the fault being generated. The output module may receive inputs signals directly from another module and set output signals at the terminals responsive to these signals.

Abstract: An industrial automation input/output (I/O) module includes a body defining an internal space including a plurality of slots. A module backplane connector is connected to the body, and a primary backplane interface circuit board is located in the space of the body. The primary backplane interface circuit board is electrically connected to the module backplane connector and includes electronic devices configured to transmit data and power to and from an associated backplane circuit through the module backplane connector. A plurality of individual I/O circuit boards are installed respectively in the plurality of slots of the body. Each of the I/O circuit boards includes electronic devices configured to provide a single-channel I/O circuit for input or output of data with respect to an associated field device.

Abstract: Systems and methods are provided for aligning status indicators on a terminal block of an I/O device by locating the status indicators directly adjacent to or integrated directly within their respective terminals on the terminal block. The status indicators are illuminated by LEDs or other light emitters disposed within a housing of the I/O device. Light from the LEDs are directed to the status indicators by light pipes disposed within the housing of the I/O device. LED activation circuitry disposed within the housing determines a manner in which to activate the LEDs to illuminate the status indicators based on inputs and outputs between the I/O device and a controlled process. In certain embodiments, the status indicators are disposed on a raised section of the I/O device, which may be part of a removable LED indication assembly including the LEDs, light pipes, and LED activation circuitry.

Abstract: An improved system for handling events in an industrial control system is disclosed. A module in an industrial controller is configured to generate an event responsive to a predefined signal or combination of signals occurring. The event is transferred to an event queue for subsequent execution. The event queue may also be configured to store a copy of the state of the module at the time the event is generated. The event queue may hold multiple events and each event is configured to trigger at least one event task. Subsequent events that occur during execution of the event task are stored in the event queue for later execution. An event, or combination of events, may trigger execution of an event task within the module, within the controller to which the module is connected, or within multiple controllers.

Abstract: An input module for an industrial controller is configurable to simplify setup and commissioning. The input module includes input terminals configurable, for example, as a counter input. Still other input terminals may be configured to trigger events as a function of the input signals present at the terminals. Time signals corresponding to transitions in state of the input terminals, triggering of events or operation of the counters may be recorded. The input module is further configurable to transmit data back to the processor or to transmit data directly to another module in the industrial control network.

Abstract: An input module for an industrial controller is configurable to simplify setup and commissioning. The input module includes input terminals configurable, for example, as a counter input. Still other input terminals may be configured to trigger events as a function of the input signals present at the terminals. Time signals corresponding to transitions in state of the input terminals, triggering of events, or operation of the counters may be recorded. The input module is further configurable to transmit data back to the processor or to transmit data directly to another module in the industrial control network.