Information Technology for Automation Professionals

Background and Theory

1.0

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.1 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover texts, and with no Back-Cover Texts. A copy of the license is included in the section entitled Appendix A, GNU Free Documentation licence.

This manual includes material from the Wikipedia which is authored by an international group of volunteers who offer their contributions at no cost under the strict provisions of the GFDL. Please consult the Chapter 8, Bibliography for the individual author contributions in the print history of each section.

Disclaimer

With respect to information contained in this manual neither the author nor Consultants-Online, makes any warranty, express or implied, including the warranties of merchantability and fitness for a particular purpose, or assumes any legal liability or responsibility for the accuracy, completeness, or usefulness of any information, apparatus, product, or process disclosed, or represents that its use would not infringe privately owned rights

Trademarks

Any of the trademarks, service marks, collective marks, design rights, personality rights or similar rights that are mentioned, used or cited in this manual are the property of their respective owners. Their use here does not imply that you may use them for any other purpose other than for the same or a similar informational use as contemplated by the original authors of this manual under the GFDL licensing scheme. Unless otherwise stated Consultants-Online are neither endorsed nor affiliated with any of the holders of any such rights and as such Consultants-Online cannot grant any rights to use any otherwise protected materials. Your use of any such or similar incorporeal property is at your own risk.


Consultants-Online

Consultants-Online is an Internet based support service for consulting professionals. We offer services tailored to the needs of engineers, architects, technologists and technicians to support them in the execution of their daily work.

Amongst the services we offer are specialized training workshops conducted by professionals who are specialists in their fields of expertise. Our workshops are tailored to our clients needs and our on-line support system is available for continuous assistance.

We conduct on-site training workshops on request.

Table of Contents

1. Introduction
Introduction
Information Technology and Industrial Control
OSI model, standards and interoperability
OSI model
Description of the OSI layers
Standards and interoperability
List of international standard organizations
Client/server computer networks
Industrial Control System architecture
SCADA
MES and ERP
2. Computer hardware
Introduction
Workstations
Workstations and Personal Computers
Servers
Server hardware
Equipment racks
Data storage : RAID
SCSI and Storage Area Network
Embedded systems
Operating Systems : VMS and UNIX
VMS
Unix
Operating Systems : DOS and Microsoft Windows
DOS
Microsoft Windows
Operating Systems : Mac OS X, Linux and FreeBSD
Mac OS X
Linux
FreeBSD
Computer clusters and virtualization
3. Serial bus systems
Introduction
PC serial port
RS 232
RS 485
Modbus protocol
DNP3 protocol
4. Networks
Introduction
Ethernet LAN
Fast Ethernet
gigabit Ethernet
10 gigabit Ethernet
Power Over Ethernet (POE)
LAN switches
Spanning tree and redundancy
GBIC interfaces
VLAN
Cables
Copper cables
Fibre optic cables
Wireless LAN
WAN
Leased lines
Telephone modems with dail-up
ISDN/ADSL
WiMAX
Cellular broadband
Trunked radio systems
Fixed microwave and satellite
Routers and level 3 switches
5. TCP/IP protocol
Introduction
TCP/IP protocol in automation systems
Internet Protocol
Subnetting and CIDR
ICMP
ARP
Transport layer protocols
TCP
TCP ports and Internet sockets
TCP over wireless
Debugging TCP/IP
UDP
Application layer protocols
Telnet and FTP
SMTP/POP3/IMAP4
HTTP
DHCP
DNS
RIP/OSPF
SNMP
CORBA and DCOM
Protocol encryption
TLS/SSL
SSH and SFTP
HTTPS
Industrial Control protocols on TCP/IP
Modbus over TCP/IP
DNP3 over TCP/IP
OPC and OPC UA
Industrial Ethernet
6. Applications
Introduction
IT applications in automation systems
Markup languages
HTML
XML
Application server architecture
Web applications
J2EE architecture
Microsoft .NET architecture
LAMP architecture
SOA and web services
SOAP
ReST
Databases and SQL
Relational databases
Database Management Systems
Structured Query Language
7. Security
Introduction
IT security in automation systems
Vulnerabilities and threats
Security versus reliability
Risk analyses and attack vectors
Hardening the Control System
Monitoring and managing security
Common IT security measures
Firewalls
Intrusion detection
Patching
Antivirus
Encryption and authentication techniques
IPsec
PKI
VPN
Wireless network security
Glossary
8. Bibliography
Introduction
Computer hardware
Serial bus systems
Networks
TCP/IP protocol
Applications
Security
A. GNU Free Documentation licence
Free Documentation Licence

List of Figures

1.1. OSI reference model
1.2. SCADA system
1.3. SCADA client server architecture
1.4. SCADA software architecture
1.5. ERP vendors
2.1. The modern personal computer
2.2. Motherboard form factors
2.3. Dual core microprocessor
2.4. 19 inch equipment rack
2.5. RAID 5
2.6. Windows 2000 system architecture
2.7. Unix history
3.1. RS-232 pinouts
3.2. RS-485 bus
3.3. RS-485 pinout
3.4. RS-485 signals
3.5. Modbus network
3.6. Modbus application layer
3.7. Modbus client/server
3.8. Modbus Protocol Data Units
3.9. Modbus function codes
3.10. Modbus error codes
3.11. Modbus data types
3.12. Modbus device mapping
3.13. Modbus read coil
3.14. Modbus read input
3.15. Modbus read input example
3.16. Modbus read holding register
3.17. Modbus read input register
3.18. Modbus write single coil
3.19. Modbus write single coil example
3.20. Modbus write single register
3.21. DNP3 protocol stack
3.22. DNP3 architecture
3.23. DNP3 data frame
4.1. Local Area Network
4.2. Ethernet type 2 frame
4.3. Ethernet type 2 frame with VLAN tag
4.4. MAC address
4.5. Fast Ethernet RJ-45 wiring
4.6. Gigabit Ethernet RJ-45 wiring
4.7. Redundant switches
4.8. Redundant network card OPC driver
4.9. VLAN
4.10. UTP cable
4.11. STP cable
4.12. S/STP cable
4.13. FTP cable
4.14. T568A/B RJ45 Wiring
4.15. Multi-mode optical fiber
4.16. Single-mode optical fiber
4.17. Optical fiber connectors
4.18. Wireless LAN
4.19. 802.11 protocols
4.20. Wide Area Network (WAN)
4.21. ISDN connection
4.22. ADSL frequency bands
4.23. Mobile phone and data standards
4.24. Trunk radio system
4.25. Router
5.1. The TCP/IP protocol stack
5.2. Encapsulation of user data inside an IP packet
5.3. Reserved IP blocks
5.4. Private IP network addresses
5.5. IP header
5.6. Subnet addressing
5.7. CIDR prefixes
5.8. CIDR prefixes
5.9. Classfull subnets
5.10. Classless subnets
5.11. ARP packet
5.12. Transport protocol comparison table
5.13. TCP state diagram
5.14. TCP window flow control
5.15. TCP header
5.16. UDP header
5.17. Application layer protocols
5.18. Domain names
5.19. Domain resolution
5.20. CORBA architecture
5.21. Public key generation
5.22. Encryption with a public key
5.23. Signing a message with a public key
5.24. Public/private key combination
5.25. Modbus TCP/IP architecture
5.26. Modbus TCP/IP ADU
5.27. Modbus TCP/IP MBAP header
5.28. MODBUS Messaging Service Architecture
5.29. DNP3 encapsulated in TCP/IP
5.30. OPC objects and interfaces
5.31. OPC Unified Architecture
5.32. OPC TCP tunneling
5.33. OPC UA specification
5.34. OPC UA application layers
5.35. OPC UA application layers
5.36. Summary of Industrial Ethernet protocols
6.1. SCADA software architecture
6.2. Microsoft COM objects
6.3. Example of HTML markup
6.4. Application server architecture
6.5. Java platform
6.6. SCADA middleware on J2EE
6.7. Consolidating SCADA on J2EE
6.8. Microsoft .NET framework
6.9. LAMP application stack
6.10. Service Orientated Architecture
6.11. SOAP request
6.12. SOAP reply
6.13. ReST architecture
6.14. Entity-relationship Model
6.15. Example database
6.16. SQL data query statements
6.17. SQL data modification statements
6.18. SQL transaction statements
6.19. SQL table definition statements
7.1. Reliability fault tree
7.2. Firewall border manager
7.3. Data encryption and authentication
7.4. IPsec protocol header
7.5. IPsec Authentication Header
7.6. IPsec Encapsulating Security Payload
7.7. Wired Equivalent Privacy
7.8. 802.1x and RADIUS server