Industrial Wireless Systems Peter L Fuhr Ph D

Industrial Wireless Systems Peter L. Fuhr, Ph. D. 17 OCT 06 Standards Certification Education & Training Publishing Conferences & Exhibits Contact info: peter. fuhr@apprion. com

Industrial Wireless Presenter Background • Dr. Peter L. Fuhr, Chief Technology Officer, Apprion, Inc. • 600+ publications/presentations • Research sponsors: Do. D, NSF, NASA, DHS, DOT/FHWA, – NIST, IBM, Du. Pont, Boeing, GEC Marconi, etc numerous companies • Activities: Chair SP 100 Interop, SP 100 RFID/RTLS, WINA, etc. • Recent Related Wireless/SCADA/DCS Presentations/Panels: • Security Threats and Counter Measures in Process Industries with Wireless Sensor Networks, IFPAC, Washington, Feb 2006 • Special Forum: Sensors & Wireless in Homeland Security - Implications for the Industrial Sector, ISA Expo, Houston, Oct 2004 • Special Forum on Industrial Security: Is It Secure? Security Aspects of Hybrid Wireless and Wired Deployments in Industrial Settings, ISA Expo, Chicago, Oct 2005 • Industrial Networking and Control Systems Security, ISA Auto West, Long Beach, May 2006 • Next Gen Embedded Control Systems, an NSF/DHS/NSA workshop, Washington DC, March 2006 2

Industrial Facilities may have LOTS of Wireless This facility has: 802. 15. 4, 802. 11, 802. 16, RFID, 2. 4 GHz video, walkie-talkies, etc … 4 sq. miles in size. 3

Flavors of Wireless: Wi. Fi + Cellular Wi. Fi map, June 2005 Standards Certification Wireless devices circa 1930 Education & Training Publishing Conferences & Exhibits Cellular Map, Feb 2006

This is The Wireless Landscape Lots of Choices 5

Wireless - IEEE Numbers & Letters 6

E(t) = A(t) cos[wt + f(t)] Just a few of the tech topics… $ 7

Industrial Network Topology SP 100 End User View Scalable Reliable Predictable Secure GW 8

Industrial Network Topology SP 100 End User View 9

Demonstrated Integration & Coexistence with multiple Wireless Applications at the facility “On the Process Side…” a real facility has a host of RF. does it all get along? 10

Plant Wide Network Architecture Process Applications Standards Certification Education & Training Publishing Conferences & Exhibits

Federal View: DHS/INL Wireless Field Devices 12

Industrial Network Topology Integration with the Infrastructure 13

SP 100 The Standard for Industrial Wireless Plant Wide Network Architecture - Non. Process Applications Standards Certification Education & Training Publishing Conferences & Exhibits

Industrial Network Topology RFID in the Plant 15

Industrial Network Topology The Plant’s Enterprise Network Infrastructure 16

Industrial Network Topology Infrastructure Segments of the Plant’s Process Network 17

Industrial Network Topology Enterprise and Process SP 100 CI needs to define the firewall and data flow methods between the 2 Network segments 18

Industrial Wireless A few details such as frequency, etc Standards Certification Education & Training Publishing Conferences & Exhibits

Legal Frequencies • • The FCC assigned frequencies www. fcc. gov 20

Wireless - Worldwide Cellular Frequencies 960 806 ITU 1710 2025 2110 IMT-2000 3 G/AWS/IMT-2000 TDMA, GSM, MXM PCS * * Americas A 824 849 869 894 1710 1755/70 R-GSM 900 D B 870 890 915 1710 935 PDC? – or AMPS & IS-95? 2170 2200 UMTS FDD IMT 1785 1805 2110 TDD 845 1980 2010 GSM 1800/IMT-2000 MSS 1880 1900 1920 TDD GSM 900 1785 1805 2155/70 UMTS FDD MSS 1710 921 2110 1990 GSM 1800 IMT 825 F C E TDD DECT China, (Australia) D 1910 1930 B TDD CDMA A C DECT 915 E F 1850 Europe 876 2200 1880 1900 1920 1980 2010 Korean PCS 2110 2170 UMTS FDD Korea 824 849 869 894 PDC 800 & others ** 843 845 898 900 1750 1780 1840 1439 -1443 888 cdma. One ** * 2110 2130 1920 1940 1487 -1491 The re-auction of the C & F block licenses (1890 -1910 & 1970 -1990 MHz, 40 MHz) started on 2000 -12 -12. A, B, C are 2 x 15 MHz; D, E, F are 2 x 5 MHz. ** In Japan, both PDC 800 & cdma. One have UL at upper frequency band. MSS 887 960 2170 KDDI 833 915 925 MSS 832 860 870 885 KDDI 830 2110 W-CDMA PHS 810 1980 “ 1. 5 G” Japan DL & UL is Switched! 1920 1870 cdma 2000 UL DL Combined DL/UL 21

Which Frequency is Best? Real World: Standards Certification Education & Training Publishing Conferences & Exhibits

RFID is in Industrial Facilities - It’s Frequencies 120, 125, 134 k. Hz 13. 56 MHz 6. 78 MHz 10 k. Hz 100 k. Hz 1 MHz RFID: Access Control Animal ID Low Freq. EAS Data Modem 10 k. Hz 10 MHz 100 k. Hz 862 -928 MHz 5. 8 GHz 433 MHz 100 MHz AM 1 MHz CB 10 MHz 1 GHz RFID: Toll Roads & Item Management RFID: Smart Cards Mid. Freq. EAS Radio Toys 2. 45 GHz Data Terminal TV Garage FM Door 100 MHz 10 GHz RFID: Item Management Cell Phone 1000 MHz 2. 45 GHz Microwave EAS 300 GHz 23

Low Data Rate Wireless Personal Area Networking. The 802. 15. 4 Frequency Bands BAND COVERAGE DATA RATE CHANNELS 2. 4 GHz ISM Worldwide 250 kbps 16 915 MHz ISM Americas 40 kbps 10 868 MHz Europe 20 kbps 868 MHz/ 915 MHz PHY Channel 0 Channels 1 -10 2. 4 GHz PHY 868. 3 MHz 902 MHz 1 2. 4 GHz Channels 11 -26 2 MHz 928 MHz 5 MHz 2. 4835 GHz 24

Its Just an Electromagnetic Field E(t) = A(t) cos[wt + f(t)] Modulation defines how the signal is manipulated to encode the data Amplitude Modulation (AM) info is in A(t) Frequency Modulation (FM) info is in w Phase Modulation (PM) info is in f(t) 25

Direct-Sequence Spread-Spectrum Signals PN Clock Local PN Clock PN Sequence Generator Carrier ± 1 Data Local Carrier PN Sequence Generator Wide BP Filter ± 1 Narrow BP Filter Phase Demod ± 1 Power Spectral Density fc Narrow spectrum at output of modulator before spreading Frequency Data Clock Power Spectral Density “Spread” RFI Frequency Data fc Frequency fc Original narrowband, high Spectrum has wider bandwidth power density spectrum is restored if local PN sequence and lower power density after is same as and lined up with spreading with PN sequence (PN Rate >> Data Rate) received PN sequence 26

Review - We’ve just covered the Design of a Wireless Sensor Node Repeat after me: “Every bit transmitted brings me closer to death* *in a battery powered system 27

Industrial Wireless A few details this is not just old school RF Standards Certification Education & Training Publishing Conferences & Exhibits IT is in the house (ok, the plant)

Network Topologies – Most Common? • Most Reliable • Least Reliable • Cheapest • Oldest • Wireless Friendly • Lowest Latency • Highest Latency 29

Layered Communications (cont’d) Header, and additional other information, are added to the transmission packet. 30

OSI Model 31

More on the OSI Model 32

All of this RF can lead to coexistence “issues” l A Word on Congestion Management (what do you do when the Wireless Process Sensor Networks have Used up the available RF Spectrum? ) hint: Currently vendors do Nothing. Can such congestion happen? RF Measurements taken at ISA Expo, Chicago, Oct 2005 900 MHz ISM Noise floor Saturated 2400 MHz ISM (saturated) Measurements by: Peter Fuhr, Apprion Hesh Kagan, Invensys Rob Conant, Dust Networks Wayne Manges, Oak Ridge National Lab Jose Gutierrez, Emerson 33 Pssst: we’re conducting similar studies right here, right now

Industrial Wireless A few details quick compare of a few RF technologies Standards Certification Education & Training Publishing Conferences & Exhibits

Data rate 100 Mbit/sec 100 kbits/sec UWB 802. 11 g 802. 11 b 3 G 802. 11 a Bluetooth Zig. Bee 10 kbits/sec UWB 0 GHz 1 GHz 2 GHz 3 GHz 4 GHz 5 GHz 6 GHz

Range 10 km 3 G 1 km 100 m 10 m 802. 11 a 802. 11 b, g Zig. Bee UWB Bluetooth Zig. Bee UWB 1 m 0 GHz 1 GHz 2 GHz 3 GHz 4 GHz 5 GHz 6 GHz

Cost (projections) $1000 $100 3 G 802. 11 b, g $10 $1 Zig. Bee UWB 802. 11 a UWB Bluetooth Zig. Bee $. 10 0 GHz 1 GHz 2 GHz 3 GHz 4 GHz 5 GHz 6 GHz

Infrastructure cost 3 G $1000 $100 802. 11 b, g $10 $1 $. 10 0 GHz 802. 11 a Zig. Bee UWB Bluetooth Zig. Bee UWB 1 GHz 2 GHz 3 GHz 4 GHz 5 GHz 6 GHz

Industrial Wireless: A Network of Networks Coresident Wireless Systems

Industrial Wireless Systems* It’s much more than simply Wireless I/O * It’s much more than simply Wi. Fi * It’s much more than simply wireless field transmitters. ** It IS an integrated wired+wireless community ** Standards Certification Education & Training Publishing Conferences & Exhibits See the book, on shelves soon.

Other Related Resources from ISA • IC 85 C Overview of Wireless Technologies • SP 25 Wireless Sensor Networking • For more information: www. isa. org/shop. ISA or (919) 549 -8411 41