Abstract: The present technology relates to artificial intelligence assisted device troubleshooting. In an implementation, an interface service of a human machine interface application trains a machine learning model on the content of an embeddings database. The interface service then receives an input comprising a context of an automation system design. The interface service generates a prompt that includes an instruction for the ML model to identify an anomaly type associated with the context of the automation system design and to generate a solution that addresses the anomaly type. The interface service transmits the prompt to the ML model and receives a response from the ML model that includes the anomaly type and the requested solution. After receiving a response, the interface service may modify the automation system design based on the content of the response and surface a graphical user interface that includes the modified design.

Abstract: Systems and methods described herein may enable operations including receiving, from an industrial automation device associated with an industrial automation system, process-related data. The operations may include generating a subset of processed data based on processing the process-related data according to a rule. Based on the processing, the operations may include generating context data that includes an indication of the rule. By doing so, less than a whole set of industrial process-related data may be transmitted for further processing, such as to a cloud-computing system for further processing.

Abstract: Disclosed herein are methods and systems for automated anomaly detection and resolution for industrial device function. Where anomalies are detected, anomaly information is collected, including an anomaly description, an anomaly context, and a code block source of the anomaly. Anomaly information is used in generating prompts to be sent to a generative large language model (LLM) trained on anomaly data. The LLM is configured to accept a prompt containing anomaly information and return a reference anomaly solution selected for its similarity to the target anomaly. The reference anomaly solution, containing control logic that governs industrial device function, is tailored for the target anomaly. The tailored reference anomaly solution, now acting as the target anomaly solution, is deployed to the industrial controller associated with the industrial device experiencing anomalous function. The control logic of the target anomaly solution replaces existing control logic, thereby eliminating the anomaly.

Abstract: A system includes processing circuitry and a memory, accessible by the processing circuitry, storing instructions that, when executed by the processing circuitry, cause the processing circuitry to receive discovery data including one or more characteristics of an industrial automation device of an industrial automation system configured to perform an industrial automation process, wherein the industrial automation device is communicatively coupled to an operational technology (OT) network, request, from a database, catalog data for the industrial automation device, and generate, based on the discovery data and the catalog data, a device twin for the industrial automation device, wherein the device twin comprises an interface by which one or more applications may interact with the industrial automation device.

Abstract: A system includes processing circuitry and a memory, accessible by the processing circuitry, storing instructions that, when executed by the processing circuitry, cause the processing circuitry to receive data from a device twin representative of an industrial automation device of an industrial automation system configured to perform an industrial automation process, wherein the industrial automation device is communicatively coupled to an operational technology (OT) network, wherein the device twin includes an interface by which one or more applications may interact with the industrial automation device, determine that the industrial automation device is accessible via a plurality of edge devices, apply one or more policies to select a particular edge device of the plurality of edge devices, and transmit the data to the particular edge device for transmission to the industrial automation device.

Abstract: A system includes processing circuitry and a memory, accessible by the processing circuitry, storing instructions that, when executed by the processing circuitry, cause the processing circuitry to receive data collected during operation of an industrial automation device of an industrial automation system configured to perform an industrial automation process, process the received data, including applying one or more rules to filter the received data, prioritize the received data, or both, and transmit the processed received data to a device twin for the industrial automation device, wherein the device twin includes an interface by which one or more applications may interact with the industrial automation device, wherein the device twin runs in a cloud environment.

Abstract: A system includes processing circuitry and a memory, accessible by the processing circuitry, storing instructions that, when executed by the processing circuitry, cause the processing circuitry to deploy a first device twin in a first computing environment, wherein the first device twin includes a first interface by which a first application interacts with an industrial automation device of an industrial automation system configured to perform an industrial automation process wherein the industrial automation device is communicatively coupled to an operational technology (OT) network, deploy a second device twin in a second computing environment, wherein the second device twin includes a second interface by which a second application interacts with the industrial automation device, receive updated data corresponding to the industrial automation device, and update the first and second device twins based on the received updated data.

Abstract: A method includes generating, via a containerized control application executing in a container running on computing infrastructure, a command that defines at least one characteristic of an operation of an industrial automation device in performance of an industrial automation process, transmitting the command from the containerized control application to an input/output (I/O) proxy, wherein the I/O proxy is configured to interface between the containerized control application and a physical I/O, transmitting the command from the I/O proxy to the physical I/O, wherein the physical I/O is configured to receive data from the industrial automation device and provide commands to the industrial automation device, transmitting the command from the physical I/O to the industrial automation device, and implementing, via the industrial automation device, the command.

Abstract: The present technology relates to artificial intelligence assisted device configuration. In an implementation, an interface service of a device design application receives an input comprising an association between a device and a controller of an automation system design. The interface service then generates a first prompt requesting an application type associated with the device. The interface service next transmits the first prompt to a large language model and receives a first response to the first prompt from the large language model, wherein the first response includes the application type. The interface service then generates a second prompt requesting configuration settings for the device based on the system information and the application type. The interface service next transmits the second prompt to the large language model and receives a second response to the second prompt that includes configuration settings for the device. The interface service then displays the second response.

Abstract: Technology disclosed herein includes a prompt engineering service that integrates artificial intelligence with the programming systems of an industrial automation environment to design a system of the industrial automation environment. The interface service leverages the capabilities of a large language model (LLM) trained on industrial automation workflows to provide accurate and relevant system design information. For example, the interface service receives system configuration data and generates a first prompt requesting a category associated with the system configuration data. The interface service uses the first prompt to generate a response from the LLM. The interface service generates a second prompt requesting a user interface message for offering assistance to configure the system based on the category. The interface service uses the second prompt to generate the user interface message and displays the message in a user interface.

Abstract: The present technology relates to artificial intelligence assisted device troubleshooting. In an implementation, an interface service of a human machine interface application trains a machine learning model on the content of an embeddings database. The interface service then receives an input comprising a context of an automation system design. The interface service generates a prompt that includes an instruction for the ML model to identify an anomaly type associated with the context of the automation system design and to generate a solution that addresses the anomaly type. The interface service transmits the prompt to the ML model and receives a response from the ML model that includes the anomaly type and the requested solution. After receiving a response, the interface service may modify the automation system design based on the content of the response and surface a graphical user interface that includes the modified design.

Abstract: An industrial topology discovery system autonomously discovers and documents industrial automation system topologies using orchestrated discovery agents of various types. The topology discovery system can reside on a cloud platform or another high level network and deploy discovery agents on plant networks and devices within an industrial facility. These discovery agents can implement different strategies for discovering system information, and can include agents configured to monitor and report on communication traffic across respective types of networks, agents configured to probe respective device types for identity and configuration information, and other types of agents.

Abstract: A centralized industrial catalog system aggregates product information from disparate sources and globally synchronizes updated catalog information to local versions of the product catalog at customer sites. The catalog system can execute as a service on a cloud platform accessible to end user applications or local catalogs. The catalog system serves as a scalable global authority for known product information for either a single product vendor or for multiple vendors. The industrial catalog system can ensure that local versions of product catalog content is synchronized with high-level sources.

Abstract: Techniques to facilitate protecting control programs used in an industrial automation environment are disclosed herein. In at least one implementation, control system content provided by a primary entity is received along with a primary security authority provided by the primary entity, wherein the primary security authority defines primary usage rights for the control system content granted to a secondary entity. A secondary security authority provided by the secondary entity is received, wherein the secondary security authority defines secondary usage rights for the control system content that further restrict the primary usage rights. A request is received from a user associated with the secondary entity to perform an action associated with the control system content, and the request is processed with the secondary security authority to determine if the user is authorized to perform the action associated with the control system content based on the secondary usage rights.

Abstract: Techniques to facilitate temporary escalation of access privileges for a control program associated with a machine system in an industrial automation environment are disclosed. In at least one implementation, a request is received from a user for a temporary access level increase to utilize protected functions of the control program. An encrypted string is generated comprising a temporary password authorized to access the protected functions of the control program. The encrypted string is provided to the user, wherein the user provides the encrypted string to an administrator and the administrator authenticates the user for the temporary access level increase, decrypts the temporary password, and provides the temporary password to the user. A login request is received from the user with the temporary password, and the temporary access level increase is responsively granted to allow the user to utilize the protected functions of the control program.

Abstract: Techniques to facilitate controlling access to objects associated with an industrial automation environment are disclosed. In at least one implementation, a policy set associated with an object type is created, wherein the policy set defines one or more actions that are allowed for at least one user group to perform with respect to the object type. An object of the object type is identified for security configuration, and a selection of the policy set associated with the object type to apply to the object is received. In response to the selection of the policy set, security is configured for the object by applying the policy set associated with the object type to the object.

Abstract: According to various embodiments, an interdependency modeling method for controlling a batch process with an industrial automation system includes evaluating an input parameter expression residing in a level of a supervisory system of the industrial automation system to determine a value, transferring the value of the input parameter expression to a level of an equipment control system of the industrial automation system, transferring data from the level of the equipment control system to the level of the supervisory system, and evaluating an output parameter expression residing in the level of the supervisory system based on the data from the level of the equipment control system.

Abstract: Techniques to facilitate protecting control programs used in an industrial automation environment are disclosed herein. In at least one implementation, control system content provided by a primary entity is received along with a primary security authority provided by the primary entity, wherein the primary security authority defines primary usage rights for the control system content granted to a secondary entity. A secondary security authority provided by the secondary entity is received, wherein the secondary security authority defines secondary usage rights for the control system content that further restrict the primary usage rights. A request is received from a user associated with the secondary entity to perform an action associated with the control system content, and the request is processed with the secondary security authority to determine if the user is authorized to perform the action associated with the control system content based on the secondary usage rights.

Abstract: Techniques to facilitate protecting control programs used in an industrial automation environment are disclosed herein. In at least one implementation, control system content provided by a primary entity is received along with a primary security authority provided by the primary entity, wherein the primary security authority defines primary usage rights for the control system content granted to a secondary entity. A secondary security authority provided by the secondary entity is received, wherein the secondary security authority defines secondary usage rights for the control system content that further restrict the primary usage rights. A request is received from a user associated with the secondary entity to perform an action associated with the control system content, and the request is processed with the secondary security authority to determine if the user is authorized to perform the action associated with the control system content based on the secondary usage rights.

Abstract: Techniques to facilitate temporary escalation of access privileges for a control program associated with a machine system in an industrial automation environment are disclosed. In at least one implementation, a request is received from a user for a temporary access level increase to utilize protected functions of the control program. An encrypted string is generated comprising a temporary password authorized to access the protected functions of the control program. The encrypted string is provided to the user, wherein the user provides the encrypted string to an administrator and the administrator authenticates the user for the temporary access level increase, decrypts the temporary password, and provides the temporary password to the user. A login request is received from the user with the temporary password, and the temporary access level increase is responsively granted to allow the user to utilize the protected functions of the control program.