RISK ASSESSMENT FOR INDUSTRIAL SYSTEMS USING BIG DATA

• US 20140337086A1
• Filed: 11/22/2013
• Published: 11/13/2014
• Est. Priority Date: 05/09/2013
• Status: Active Grant

• Current Assignee: Rockwell Automation Technologies Incorporated (Rockwell Automation, Inc.)
• Original Assignee: Rockwell Automation Technologies Incorporated (Rockwell Automation, Inc.)
• Inventors: Asenjo, Juan L., Harkulich, Joseph A., Hessmer, Rainer, Strohmenger, John, Nawalaniec, Stephen Thomas, Hegrat, Bradford Henry, Korpela, Jessica Lin, Wright, Jenifer Rydberg, Dyck, John, Hill, Edward Alan, Conti, Salvatore T.
• Granted Patent: US 10,026,049 B2
• Time in Patent Office: Days
• US Class Current: 705/7.28
• CPC Class Codes: G06F 3/0635 by changing the path, e.g. traffic rerouting, path reconfiguration
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/0635 Risk analysis of enterprise or organisation activities
• CPC Class Codes: H04L 41/0896 Bandwidth or capacity management, i.e. automatically increasing or decreasing capacities flow or congestion control using dynamic resource allocation, e.g. in-call renegotiation, H04L47/76
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: Y02P 90/80 Management or planning

Abstract

A cloud-based risk assessment service collects industrial data from multiple relevant and connected sources for storage and analysis on a cloud platform. The service analyzes gathered data from internal and external sources and customers across different industries to identify operational trends as a function of industry type, application type, equipment in use, device configurations, and other such variables. Based on the analysis, the risk assessment service identifies risk factors inherent in a customer'"'"'s particular industrial enterprise. The cloud-based system generates a risk profile for the customer that identifies the determined risks and recommends risk aversion strategies based on the customer'"'"'s specific profile, compared to industry standards, product information, internal business expectations, external regulatory bodies, and/or past performance. Risk profiles are tailored for both plant-level users and business-level users to provide intelligent strategies to improve performance and prevent avoidable losses.

Claims

1. A system for performing risk assessment on an industrial enterprise, comprising:

a memory that stores computer-executable components;

a processor, operatively coupled to the memory, that executes computer-executable components, comprising;

a device interface component configured to collect industrial data from a set of devices comprising an industrial control system and store the data on a cloud platform; and

a risk assessment component configured to generate a risk profile identifying one or more risk factors for the industrial automation system based on analysis of the industrial data.

2. The system of claim 1, wherein the device interface component is further configured to store the industrial data on the cloud platform in association with a customer identifier associated with an owner of the industrial control system.

3. The system of claim 1, wherein the risk assessment component is further configured to generate one or more risk aversion strategies for mitigating at least one of the one or more risk factors based on analysis of the industrial data.

4. The system of claim 1, wherein the device interface component is further configured to classify the industrial data according to at least one of a device class, a process class, an asset class, or a system class.

5. The system of claim 1, wherein the device interface component is further configured to collect multi-enterprise data from a plurality of industrial systems and to store the multi-enterprise data on the cloud platform.

6. The system of claim 5, wherein the risk assessment component is further configured to perform analysis on the multi-enterprise data to identify an operational trend as a function of at least one of an industry type, an industrial application type, an industrial asset configuration, an equipment type, an industrial device configuration setting, a firmware version, or a software version.

7. The system of claim 6, wherein the risk assessment component is further configured to identify the one or more risk factors for the industrial control system based on a comparison of the industrial data for the industrial control system with the operational trend determined via analysis of the multi-enterprise data.

8. The system of claim 5, wherein the risk assessment component is further configured to generate an equipment compatibility matrix based on analysis of the multi-enterprise data, and identify the one or more risk factors based at least in part on a comparison of the industrial data with the equipment compatibility matrix.

9. The system of claim 5, further comprising a device management component configured to generate a data model of the industrial control system based on the industrial data, and to identify the one or more risk factors based on correlation of the data model with the multi-enterprise data.

10. The system of claim 1, wherein the one or more risk factors comprise at least one of a risk of device failure, a risk of degraded system performance, a risk of inventory shortage, a risk associated with loss of a network infrastructure device on a plant network, a risk of device incompatibility, or a risk of lost revenue opportunity.

11. A method for identifying risk factors in an industrial system, comprising:

collecting industrial data from devices of an industrial automation system;

storing the industrial data in cloud-based storage; and

determining at least one risk factor inherent in the industrial automation system based on an analysis of the industrial data.

12. The method of claim 11, wherein the storing comprises storing the industrial data in association with a customer profile associated with an owner of the industrial automation system.

13. The method of claim 11, further comprising:

determining at least one risk mitigation strategy predicted to reduce or eliminate the at least one risk factor; and

generating report data identifying the at least one risk factor and the at least one risk mitigation strategy.

14. The method of claim 11, wherein the determining the at least one risk factor comprises determining at least one of a risk of device failure, a risk of degraded system performance, a risk of inventory shortage, a risk associated with loss of a network infrastructure device on a plant network, a risk of device incompatibility, or a risk of lost revenue opportunity.

15. The method of claim 11, further comprising:

collecting multi-enterprise data from multiple industrial systems, and

analyzing the multi-enterprise data to identify an operational trend as a function of at least one of an industry type, a type of industrial application, a configuration of industrial assets, an equipment type, an industrial device configuration setting, a firmware version, or a software version.

16. The method of claim 15, further comprising determining the at least one risk factor for the industrial automation system based on a comparison of the industrial data for the industrial automation system with the operational trend determined via the analyzing of the multi-enterprise data.

17. The method of claim 15, further comprising:

generating an equipment compatibility matrix based on analysis of the multi-enterprise data, and

determining the at least one risk factor based at least in part on a comparison of the industrial data with the equipment compatibility matrix.

18. A computer-readable medium having stored thereon computer-executable instructions that, in response to execution, cause a computing system to perform operations, comprising

monitoring, via a cloud platform, industrial data from a first industrial asset associated with a first industrial enterprise;

correlating the industrial data with multi-enterprise data collected from one or more second industrial assets associated with respective one or more second industrial enterprises; and

identifying one or more risk factors associated with the first industrial asset based on a result of the correlating.

19. The computer-readable medium of claim 18, wherein the operations further comprise generating a risk assessment report that identifies the one or more risk factors and one or more risk aversion strategies for reducing or eliminating the one or more risk factors.

20. The computer-readable medium of claim 20, wherein the identifying the one or more risk factors comprises identifying at least one of a risk of device failure, a risk of degraded system performance, a risk of inventory shortage, a risk associated with loss of a network infrastructure device on a plant network, a risk of device incompatibility, or a risk of lost revenue opportunity.