Abstract: To secure communications from a process plant across a unidirectional data diode to a remote system, a sending device at the plant end publishes data across the diode to a receiving device at the remote end. The publication of various data is respectively in accordance with context information (e.g., identification of data sources, respective expected rate of data generation/arrival, etc.) that is descriptive of data sources of the plant and that is recurrently provided by the sending device across the diode. A recurrence interval may be based on a tolerance for lost data or another characteristic of an application, service, or consumer of data at the remote system. The publishing may leverage an industrial communication protocol (e.g., HART-IP) and/or a suitable general-purpose communication protocol (e.g., JSON).

Abstract: To secure communications from a process plant across a unidirectional data diode to a remote system, a sending device at the plant end publishes data across the diode to a receiving device at the remote end. The publication of various data is respectively in accordance with context information (e.g., identification of data sources, respective expected rate of data generation/arrival, etc.) that is descriptive of data sources of the plant and that is recurrently provided by the sending device across the diode. A recurrence interval may be based on a tolerance for lost data or another characteristic of an application, service, or consumer of data at the remote system. The publishing may leverage an industrial communication protocol (e.g., HART-IP) and/or a suitable general-purpose communication protocol (e.g., JSON).

Abstract: To secure communications from a process plant across a unidirectional data diode to a remote system, a sending device at the plant end publishes data across the diode to a receiving device at the remote end. The publication of various data is respectively in accordance with context information (e.g., identification of data sources, respective expected rate of data generation/arrival, etc.) that is descriptive of data sources of the plant and that is recurrently provided by the sending device across the diode. A recurrence interval may be based on a tolerance for lost data or another characteristic of an application, service, or consumer of data at the remote system. The publishing may leverage an industrial communication protocol (e.g., HART-IP) and/or a suitable general-purpose communication protocol (e.g., JSON).

Abstract: Securing communications from a process plant to a remote system includes a data diode disposed there between that allows data to egress from the plant but prevents ingress of data into the plant and its associated systems. Process plant data from the secure communications is then analyzed to detect conditions occurring at process plant entities in the process plant using various machine learning techniques. When the process plant entity is a valve, the mode of operation for the valve is determined and a different analysis is applied for each mode in which a valve operates. Additionally, the process plant data for each valve is compared to other valves in the same process plant, enterprise, industry, etc. Accordingly, the health of each of the valves is ranked relative to each other and the process plant data for each valve is displayed in a side-by-side comparison.

Abstract: To secure communications from a process plant across a unidirectional data diode to a remote system, a sending device at the plant end publishes data across the diode to a receiving device at the remote end. The publication of various data is respectively in accordance with context information (e.g., identification of data sources, respective expected rate of data generation/arrival, etc.) that is descriptive of data sources of the plant and that is recurrently provided by the sending device across the diode. A recurrence interval may be based on a tolerance for lost data or another characteristic of an application, service, or consumer of data at the remote system. The publishing may leverage an industrial communication protocol (e.g., HART-IP) and/or a suitable general-purpose communication protocol (e.g., JSON).

Abstract: To secure communications from a process plant across a unidirectional data diode to a remote system, a sending device at the plant end publishes data across the diode to a receiving device at the remote end. The publication of various data is respectively in accordance with context information (e.g., identification of data sources, respective expected rate of data generation/arrival, etc.) that is descriptive of data sources of the plant and that is recurrently provided by the sending device across the diode. A recurrence interval may be based on a tolerance for lost data or another characteristic of an application, service, or consumer of data at the remote system. The publishing may leverage an industrial communication protocol (e.g., HART-IP) and/or a suitable general-purpose communication protocol (e.g., JSON).

Abstract: Securely transporting data across a unidirectional data diode interconnecting a process plant to a remote system includes provisioning, using join key material, a sending device at the plant end of the diode with a receiving device at the remote end. The join key material is used to securely share network key material that is used to encrypt/decrypt messages or packets that are transported across the diode and whose payload includes plant—updated or re-set generated data. The shared network key material is recurrently using the join key material, and the recurrence interval may be based on a tolerance for lost data or other characteristic of an application, service, or consumer of plant data at the remote system.

Abstract: Securing communications from a process plant to a remote system includes a data diode disposed therebetween that allows data to egress from the plant but prevents ingress of data into the plant and its associated systems. Data is secured across the data diode by securely provisioning a sending device at the plant end of the diode to a receiving device at the remote system end. The sending and receiving devices share secret key material that is recurrently updated. To ensure fidelity of communications across the unidirectional data diode, the sending device recurrently provides context information that is descriptive of data sources of the plant. Additionally, data transmitted from plant data sources to the sending device of the data diode may be secured using a respective security mechanism/technique, and data transmitted from the receiving device of the data diode to the remote system may be secured using a respective security mechanism/technique.

Abstract: Systems, methods, and articles of manufacture to provide a search service to users of a process control system are disclosed. An example system includes a search database to store a set of searchable items associated with a process control system and to store a search profile associated with a selected query result, a publisher to collect information associated with the searchable items from the process control system and to publish the collected information to the search database, and a searcher to receive a request including the search profile and a query of the searchable items in the database, to search the searchable items based on the query, and to return at least a portion of the collected information based on the search profile.

Abstract: Securely transporting data across a unidirectional data diode interconnecting a process plant to a remote system includes provisioning, using join key material, a sending device at the plant end of the diode with a receiving device at the remote end. The join key material is used to securely share network key material that is used to encrypt/decrypt messages or packets that are transported across the diode and whose payload includes plant—updated or re-set generated data. The shared network key material is recurrently using the join key material, and the recurrence interval may be based on a tolerance for lost data or other characteristic of an application, service, or consumer of plant data at the remote system.

Abstract: Securing communications from a process plant to a remote system includes a data diode disposed therebetween that allows data to egress from the plant but prevents ingress of data into the plant and its associated systems. Data is secured across the data diode by securely provisioning a sending device at the plant end of the diode to a receiving device at the remote system end. The sending and receiving devices share secret key material that is recurrently updated. To ensure fidelity of communications across the unidirectional data diode, the sending device recurrently provides context information that is descriptive of data sources of the plant. Additionally, data transmitted from plant data sources to the sending device of the data diode may be secured using a respective security mechanism/technique, and data transmitted from the receiving device of the data diode to the remote system may be secured using a respective security mechanism/technique.

Abstract: To secure communications from a process plant across a unidirectional data diode to a remote system, a sending device at the plant end publishes data across the diode to a receiving device at the remote end. The publication of various data is respectively in accordance with context information (e.g., identification of data sources, respective expected rate of data generation/arrival, etc.) that is descriptive of data sources of the plant and that is recurrently provided by the sending device across the diode. A recurrence interval may be based on a tolerance for lost data or another characteristic of an application, service, or consumer of data at the remote system. The publishing may leverage an industrial communication protocol (e.g., HART-IP) and/or a suitable general-purpose communication protocol (e.g., JSON).

Abstract: Securing communications from a process plant to a remote system includes a data diode disposed there between that allows data to egress from the plant but prevents ingress of data into the plant and its associated systems. Process plant data from the secure communications is then analyzed to detect conditions occurring at process plant entities in the process plant using various machine learning techniques. When the process plant entity is a valve, the mode of operation for the valve is determined and a different analysis is applied for each mode in which a valve operates. Additionally, the process plant data for each valve is compared to other valves in the same process plant, enterprise, industry, etc. Accordingly, the health of each of the valves is ranked relative to each other and the process plant data for each valve is displayed in a side-by-side comparison.

Abstract: A communication method operates to seamlessly transmit internet protocol (IP) data frames, such as IPv6 data frames, over a communication network that uses a non-IP network routing protocol, i.e., a communication network that implements a network routing protocol other than, or that is incompatible with an IP network routing protocol, such as the WirelessHART protocol. This communication method enables, for example, field devices or other intelligent devices within a process plant network that uses a non-IP communication network to perform messaging of IP data frames generated at or to be received by internet protocol enabled devices either within the process plant network or outside of the process plant network.

Abstract: A first node sends a first message to a second node. The second node sends a second message to the first node. A first elapsed time is measured from the beginning of the transmission of the first message to the beginning of receipt of the second message. A second elapsed time is measured from the beginning of the receipt of the first message to the beginning of the transmission of the second message. The second node sends a third message to the first node containing the second elapsed time. The distance between the first and second node is calculated based on these elapsed times and a calibration count multiplier contained in the second or third message. A node may be moved within a wireless mesh network. Positional information about the node and distances to its neighbors is determined and transmitted to the network manager where it is stored.

Abstract: A communication method operates to seamlessly transmit internet protocol (IP) data frames, such as IPv6 data frames, over a communication network that uses a non-IP network routing protocol, i.e., a communication network that implements a network routing protocol other than, or that is incompatible with an IP network routing protocol, such as the WirelessHART protocol. This communication method enables, for example, field devices or other intelligent devices within a process plant network that uses a non-IP communication network to perform messaging of IP data frames generated at or to be received by internet protocol enabled devices either within the process plant network or outside of the process plant network.

Abstract: Systems, methods, and articles of manufacture to provide a search service to users of a process control system are disclosed. An example system includes a search database to store a set of searchable items associated with a process control system and to store a search profile associated with a selected query result, a publisher to collect information associated with the searchable items from the process control system and to publish the collected information to the search database, and a searcher to receive a request including the search profile and a query of the searchable items in the database, to search the searchable items based on the query, and to return at least a portion of the collected information based on the search profile.

Abstract: A first node sends a first message to a second node. The second node sends a second message to the first node. A first elapsed time is measured from the beginning of the transmission of the first message to the beginning of receipt of the second message. A second elapsed time is measured from the beginning of the receipt of the first message to the beginning of the transmission of the second message. The second node sends a third message to the first node containing the second elapsed time. The distance between the first and second node is calculated based on these elapsed times and a calibration count multiplier contained in the second or third message. A node may be moved within a wireless mesh network. Positional information about the node and distances to its neighbors is determined and transmitted to the network manager where it is stored.

Abstract: An interface module for use in a process monitoring and control system has an Ethernet port, a controller, and at least one segment I/O module. The Ethernet port is adapted to send and receive signals in an Ethernet protocol over a cable comprising a plurality of wires and to receive a voltage potential from at least one pair of the plurality of wires. The controller is coupled to the Ethernet port and powered from the received voltage potential. The at least one segment I/O module is coupled to the controller and is adapted to couple to an associated field device segment with at least one attached field device. The at least one segment I/O module is adapted to interact with the at least one attached field device on the associated field device segment.

Abstract: A distributed control and/or monitoring system and method includes a local application and a remote application separated from the local application. The local application includes a host computer. The remote application includes a plurality of field devices and a communication bus connected to the plurality of field devices. Packet messages are wirelessly communicated between the local application and the remote application such that the host computer and field devices can communicate with each other as if they were directly connected to the same communication bus.