Abstract: A method for establishing a secure remote connection between a user device and a target device, wherein the target device has no direct internet connectivity. A first gateway receives a first connection request from the user device, the first connection request including an access token. The access token is validated in an identity and access management service, and, after successful validation, a first tunnel is established between the user device and the target device via one or more intermediate gateways. The target device receives a second connection request from the user device, the second connection request including the access token. A second tunnel is established between the target device and an identity and access management service via the one or more intermediate gateways, and the access token is validated in the identity and access management service via the second tunnel.

Abstract: A method for establishing a secure remote connection between a user device and a target device, wherein the target device has no direct internet connectivity. A first gateway receives a first connection request from the user device, the first connection request including an access token. The access token is validated in an identity and access management service, and, after successful validation, a first tunnel is established between the user device and the target device via one or more intermediate gateways. The target device receives a second connection request from the user device, the second connection request including the access token. A second tunnel is established between the target device and an identity and access management service via the one or more intermediate gateways, and the access token is validated in the identity and access management service via the second tunnel.

Abstract: For data flow traffic in an IoTSP system, for example, a gateway is provided with data flow rules, one or more of the data flow rules being a receiving rule defining at least what incoming data will be accepted and one or more of the data flow rules being a publishing rule defining at least what data to send to one or more other computing devices acting as gateways in the system. The one or more receiving rules are applied to incoming data, and the one or more publishing rules to stored and processed data to cause sending one or more pieces of the data in response to a condition in a publishing rule being fulfilled.

Abstract: A gateway or corresponding computing device acting as a gateway in an IoTSP system, for example, is provided with gateway configurations defining at least how to monitor functionality of the gateway. The gateway monitors its functionality according to the gateway configurations. The monitoring may relate to telemetry data, hardening, and/or external experience data.

Abstract: A gateway or corresponding computing device acting as a gateway in an IoTSP system, for example, is provided with gateway configurations defining at least how to monitor functionality of the gateway. The gateway monitors its functionality according to the gateway configurations. The monitoring may relate to telemetry data, hardening, and/or external experience data.

Abstract: For data flow traffic in an IoTSP system, for example, a gateway is provided with data flow rules, one or more of the data flow rules being a receiving rule defining at least what incoming data will be accepted and one or more of the data flow rules being a publishing rule defining at least what data to send to one or more other computing devices acting as gateways in the system. The one or more receiving rules are applied to incoming data, and the one or more publishing rules to stored and processed data to cause sending one or more pieces of the data in response to a condition in a publishing rule being fulfilled.

Abstract: The invention relates to a central data collection apparatus. The central data collection apparatus comprises an interface for receiving data relating to devices arranged at a plurality of different installation sites. A data storage stores the data received via the interface. A data distributor is configured to receive a request for data regarding a specific device identified in the request from a user equipment, to access the user credential storage for determining the access rights of the, to determine what, parts of the data regarding the identified device the user is authorized to receive and to allow the user equipment to access the part of the data the user is authorized to access.

Abstract: A method for replicating databases, in which method at least two databases are replicated, each database comprising of one or more tables, and each table having data and a unique tree index comprising index keys and hierarchical sums of cyclic redundancy check values calculated from the data on each tree index level. In the method logical consistency of the data between corresponding tables in the databases is maintained by comparing the sums of cyclic redundancy check values of the database tables; and if a difference between the sums of the cyclic redundancy check values is found, the tree indexes are logically divided into two sub tree indexes, and the sums of the cyclic redundancy check values of the sub tree indexes are compared to each other and the comparison and division is continued until the data causing the difference is found, and the inconsistent data is replicated between the databases.

Abstract: The invention relates to a central data collection apparatus. The central data collection apparatus comprises an interface for receiving data relating to devices arranged at a plurality of different installation sites. A data storage stores the data received via the interface. A data distributor is configured to receive a request for data regarding a specific device identified in the request from a user equipment, to access the user credential storage for determining the access rights of the, to determine what, parts of the data regarding the identified device the user is authorized to receive and to allow the user equipment to access the part of the data the user is authorized to access.

Abstract: A method for replicating databases, in which method at least two databases are replicated, each database comprising of one or more tables, and each table having data and a unique tree index comprising index keys and hierarchical sums of cyclic redundancy check values calculated from the data on each tree index level. In the method logical consistency of the data between corresponding tables in the databases is maintained by comparing the sums of cyclic redundancy check values of the database tables; and if a difference between the sums of the cyclic redundancy check values is found, the tree indexes are logically divided into two sub tree indexes, and the sums of the cyclic redundancy check values of the sub tree indexes are compared to each other and the comparison and division is continued until the data causing the difference is found, and the inconsistent data is replicated between the databases.

Abstract: A method for improving the operability of a production plant is invented. The production plant has at least one production process comprising at least one equipment, a system for obtaining equipment condition measuring data and a system for obtaining maintenance work data. The equipment condition measuring data and the maintenance work data is continuously acquired and stored to equipment reliability calculation system, and equipment reliability is calculated based on the equipment condition measuring data and the maintenance work data.