appslinuxcp

IoTJointReferenceArchitecturefromIntelandSAPHowthejointreferencearchitectureappliestoconnectedassetsandlogisticsusecasesReferenceArchitectureExecutiveSummaryTheInternetofThings(IoT)helpsenterprisesgathergranular,machine-generateddataattheedgeandthensynthesizethatdataintoactionableinsightswhencombinedwithnear-real-timeoperationalandsupply-chaininformation.
IoTenablesnewcapabilitiesarounddatacollection,datastorage,analytics,anddigitalbusinessprocesses,whichinturncanhelpbusinessescombinereal-timeoperationstechnology(OT)datawithinformationtechnology(IT)businessprocesses.
Thesenewcapabilitiescanhelpredefinethewaycompaniesoperatebytransformingboththeirprocessesandtheirproducts.
IntelandSAPareworkingtogethertofulfillthepromiseofIoT.
BybringingtogethertheIntelIoTPlatformwithSAPLeonardoIoTcapabilitiesrunningonSAPCloudPlatform,enterprisescanenjoythewide-rangingbenefitsofIoTdatacollectionandanalysiswhileeasingtheburdenofIoTmanagement.
Thispaper,thefirstinaseriesthatshowcasesIoTinspecificverticalindustries,describesthebuildingblocksofacombinedIoTsolutionfromIntelandSAPwithinaconnectedassetsenvironmentinthemanufacturingindustry.
Italsodescribesanend-to-endjointIntelandSAPreferencearchitecturetohelpenterprisestransformtheircoreprocessesanddifferentiatethequalityoftheservicesandproductstheyproduce.
TheValueofanEnd-To-EndIoTSolutionAccordingtoresearchbyMcKinseyGlobalInstitute,thetotalvaluecreatedbydeployingIoTsolutionsisexpectedtoapproachapotentialcombinedUS$2trillionby2025.
1Tounlockthispotential,enterpriseswithintheseindustriesareprojectedtospend$55billionto$150billionin2025onvalue-addedapplicationsandhardware,includingsensorsthattargetassetmanagement,thesupplychain,andoperationalvisibilityandoptimization.
1DespitethepotentialofIoT,organizationsfacesignificantchallengesfordeployingIoTinfrastructuresanddiscoveringinsightsfromthevastamountsofdevice-generateddata.
IntelandSAPbringtogetherthebuildingblocksofanIoTsolutionthatprovidesthefunctionalityanddeploymentflexibilityneededtosupportandmonitorindividualassetsandexecuteautomatedcross-companytransactions.
Intel,aleaderininfrastructure-managementsoftware,providesthehardwarefoundationofanIoTsolution.
Thisfoundationletsenterprises:AcquireandmanagethedevicesthatcreatedataStrengthensecurityforthedatafromsensortogatewayExecutehands-freeonboardingofdevicesIngest,collect,store,andanalyzedataattheedgeSAP,aleaderinbusinessandenterpriseapplicationsandanalytics,providesthesoftwarecapabilitiestosynthesizesensordata,visualizethedatainmeaningfulways,andthencombinethedatawithoperationaldata,suchascustomerinformation,inventory,pricingandpromotions,demandmanagement,orderresponse,andintegratedbusinessplanning.
Inadditiontothesetraditionaldata-managementcapabilities,SAPprovidestheSAPLeonardodigitalinnovationsystem,aninnovativeplatformthatdeliverssoftwareandmicroservicesthatgiveenterprisesthecapabilitytotakeadvantageoftechnologiessuchasIoT,machinelearning,blockchain,analytics,andBigData.
Thispartnershipisuniqueinthatitbringstogethertwoindustryleadersthatcandeliveranend-to-endsolutionfromsensortothecloudandcanthenintegratethatsolutionintoanend-to-endenterprisebusinessprocessthatisrobust,flexible,andopenforfutureenhancementsdrivenbyeithernewtechnologiesorbusinessapplications.
ThejointIntelandSAPsolutioncanbemonitored,controlled,andoptimized,allowingforautonomousfunctionalityininteractionwithothersmartobjects.
Itsflexibilityallowsforcross-systemoptimizationacrossanecosystemofpartners,softwareservices,andsolutionsthatareintegratedinamoresecuredandmanageablewayanddrivenbyavarietyofusecasesandverticalindustries.
SolutionOverviewSolutionsfromIntelandSAPhelpenterprisesrealizethepotentialofIoTbymoresecurelymanagingnetworksofIoTdevices;collecting,managing,andanalyzingthedatageneratedbythosedevices;andthencombiningthatdatawiththebusinessintelligenceofSAPS/4HANAandSAPCloudPlatform.
ThistypeofIoTdeploymenthasthepotentialtoimpactbusinessesby:LoweringcostsIncreasinguptimeandefficiencyCreatingnewproductsorservicesOptimizingproductivityandproductioncapacityMinimizingwasteImprovingturnaroundEnablingnewbusinessmodels,suchasusage-basedpricingForexample,enterprisescanrealizethegreatestbenefitsbycombiningdevice-generateddataattheedgewithnear-real-timeoperationalandsupply-chaininformationtocreateactionableinsights.
Thesebusinessescandeploysecurity-enabledIoTdevicesacrossdisparatemanufacturinganddistributionsitestomonitorandanalyzedata.
Theycanthencombinethisoperationalsensordatawithtacticalinformation,suchascustomerdemand,inventory,supply-chaindata,pricing,andraw-materialflowtoimproveprocessesacrosstheorganization.
Dynamicpricingonpopularitemscanhelpboostrevenue,whilemachineswithinwarehousescancoordinatewitheachothertofulfillordersandmaintaininventorylevels.
WiththeadvanceddatagatheringandanalyticalcapabilitiesofajointIoTsolutionfromIntelandSAP,enterprisescangetaclearerviewoftheiroperations.
Figure1illustrateshowchangesordecisionsmadeinoneoperationalareacannowbeviewedReferenceArchitectureFigure1.
WithanIoTsolution,businessdecisionscanbeviewedacrossanenterprise'sentirenetworkofplants,warehouses,andsuppliersPhysicalworldDigitalworldMaintenancemanagement.
.
.
BusinesscontextDigitaltwinStatisticalandMLmodels,suchaspredictivemaintenancePhysics-basedmodels,suchasstructuralanalysis,CFDDesignandsimulationManufacturingPLMCAD/CAM/CAERolesBusinesspartnersContractsFinancialsEquipmentdetailsBOM/3DSparepartsInventorySerializationService,maintenance,repairProductEdgegatewayConditionmonitoringAssethistoryAugmentedrealityPerformanceandriskmanagementClaimsmanagement01011110101001001101ERPBusinesspartnerServicemanagementacrosstheentiremanufacturingplantornetworkofplantsandoptimizedeitherwithhumaninterventionorautonomouslyovertime.
Thebusinesscanbeviewedholistically,ratherthanasisolatedplants,warehouses,andsuppliers.
ReferenceArchitectureViewandFunctionalElementsThejointreferencearchitecture,includingIntelIoTPlatform,SAPLeonardoIoTEdge,andSAPCloudPlatform,depictsedgecomputing,network,andcloudcomponents,anditprovidestheframeworkfordeployingthehardwareandsoftware.
Itdepictsnotonlythefunctionalbuildingblocks,butalsothestepstoconnectthesensors,actuators,andotherendpointdevicestoSAPCloudPlatformandSAPS/4HANA.
Usingthisarchitecture,enterprisescan:HosttheirprivatecontainersattheedgeHostgatewayproxiesinthecloudMoresecurelyonboarddeviceswithminimalhumaninteractionRunimplementationsondifferentedgeconfigurationsEnterprisescandeploythejointsolutiontomeettheirownuniqueneeds—theactualdeploymentforanyspecificusecasemightusealloronlyasubsetofthecapabilities.
ThejointreferencearchitectureandthekeyfunctionalblocksusedbytheusecaseexaminedinthispaperareshowninFigure2.
ThearchitecturedemonstratesIoTusecasesacrossthedomainsofdevices,infrastructure,edgecomputing,cloud,andapplications,withthegoalofenablingrapiddeploymentofscalableIoTprojects.
ThecurrentreferencearchitecturefromIntelandSAPincludesthefollowingfeatures:Dataacquisitionanddevicecontrol:Thearchitectureallowsdataacquisitionandingestionfromvarioussources—suchasindustrialsensorsthatarepartoftheoperationaldomains—andprovidescontrolfromasingledashboard.
Datafromthesevarioussourcesisingestedintothecontrollingentitiesusingvariousprotocols.
Datasecurityfeaturesbetweensensors,gateways,andthecloud:Thearchitectureprovidessecurity-enabledcapabilitiesalongtheentiredatapathwithkey,certificate,andidentitymanagementusingIntelhardware–basedtechnologies,includingIntelPlatformTrustTechnology(IntelPTT),IntelTrustedExecutionEngine(IntelTXE),andIntelSoftwareGuardExtensions(IntelSGX),inadditiontoIntelEnhancedPrivacyID(IntelEPID).
Thesecurityfeaturesallowdevicestodifferentiatedataasprivateorshared.
Thesecurity-enabledflowcanallowdatatoreachonlythedeviceforwhichitisintended.
Moresecure,hands-freedeviceonboarding:Newdevices,suchasphysicalgatewaysandqualifiedsensors,canbeautomaticallyonboardedandprovisioned,eliminatingextradeploymenttaskswhileimprovingsecurityusingIntelSecureDeviceOnboard(IntelSDO).
Edge-datacollection,storage,andanalysis:EnterpriseIoTsolutionsneedanedgeplatformwithrobustofflinecapabilitiestocollect,store,andanalyzedata.
SAPLeonardoIoTEdgeprovidesdomain-specificinsights,real-timeeventsandactions,reliabledashboards,andlocalbusiness-processexecutionattheedge.
Figure2.
ThejointreferencearchitecturefromIntelandSAPSensorWindRiverHelixDeviceCloudagentincludestrustservicesagentIoTGatewayEdge(agent)SensorSensorActuatorSensorActuatorMCUSAPEdgeServicesEdgeGatewayCloudEdgeEndpointStandards:Wi-Fi*,Ethernet,Cellular,RFID,6LoWPAN,LoRaWANIntelHardwareCapabilitiesandSecurityAPIEdgeSoftwareandServicesSAP,Intel(UPM),orThird-PartyProtocolAdaptersWindRiverHelixDeviceCloudAPIsSoftware-DefinedEverything—WindRiverTitaniumEdgeI/O(UART,12C.
.
)Compute(IntelCoreProcessors/IntelXeonProcessors)Storage(SSD,3DXPoint)CP/APIBusinessHubGatewayODMIoTappsfromSAPBack-endsoftwarefromSAP(e.
g.
:SAPS/4HANA)PartnerloTAppsWindRiverTitaniumCloudWindRiverHelixDeviceCloudIntelSecureDeviceOnboardOn-premisesERPVM1VM2OperatingSystem2WRLinuxCP/APIManagementSAPCloudPlatformInternetofThingsloTAppl.
EnablementDB/PersistenceServicesDevicefirmwareandoperatingsystemupdatesMCUSAPCloudTrustCenterReferenceArchitectureReal-timebusinessintelligenceforoptimizeddecisionsupport,autonomousdecision-making,andoptimizedinteractionanddecision-makingacrossdevices:ThisfunctionalityisachievedusingIoTapplicationsfromSAP,SAPCloudPlatform,SAPLeonardoIoTcapabilities,andInteldevice-andsecurity-managementtechnologies,inadditiontootherIoTsolutions.
Thejointsolutionprovidesstreamlinedinfrastructuremanagementbysecurelyonboarding,configuring,andmonitoringIoTdevices.
Edge-platformflexibilityandscalability:Thearchitecturesupportsmultipleedgegatewayconfigurations,rangingfromsystemspoweredbyminimal-computeIntelAtomprocessorstothosepoweredbyhigh-computeIntelXeonprocessors,andrunningsoftwaresuitableforsmallandlargeenterprises.
Thejointsolutioncanbedeployedinthecloud,on-premises,orusinghybridscenarios,anditsupportscloud-to-cloudandcloud-to-on-premisesintegrations.
SolutionArchitectureDetailsThejointreferencearchitectureutilizesthefollowingcomponentsandsolutions.
IntelIoTPlatformTheIntelIoTPlatformisanend-to-endreferencemodelandfamilyofproductsfromIntelthatworkswiththird-partysolutionstoprovideafoundationforseamless,security-enabledconnectionofdevices.
Themodeldeliverstrusteddatatothecloudandongoingvaluethroughanalytics.
Itprovidesanend-to-endplatformthatallowsdatafrombillionsofdevices,sensors,anddatabasestobesecurelygathered,exchanged,stored,andanalyzed.
Ithelpsbringinnovationstomarketfaster,reducescomplexity,anddeliversactionableintelligencebyofferingadefined,repeatablefoundationforhowdeviceswillconnectanddelivertrusteddatatothecloud.
Theplatformincludes:EdgecomponentsProcessorsandacceleratorstargetingthe15-yearlifeofIoTenvironmentsAruggedizedplatformthatcanwithstandextremetemperaturesandvibrationCertificationsforembedded,industrial,andautomotivehardware-basedsecurity,inadditiontodeviceprovisioning,monitoring,andcontrolScalingthroughvirtualizationCarrier-gradereliabilityTheplatformincludesvirtualizationandsoftware-definedeverything(SDE).
ThisarchitectureintroducesvirtualizationattheedgethroughWindRiverTitaniumEdge,wheremultiplevirtualmachines(VMs)canbedeployedtodivideworkloadsfordifferentfunctionalareas,suchasoperations,assetmanagement,factoryfloor,andinventorymanagement.
Virtualizationcanprovideseveralbenefits:DecouplescomputeandstorageresourcesRedirectsandenablesdedicatedresourceswhenneededProvidestheabilitytoindependentlymanagebrownfieldmachines,whichenablesintegrationofdifferentclassesofequipmentEachVMcan,asrequired,runonadifferentoperatingsystemandcanstillconnectthroughasinglecloudconnector.
Aone-to-onesecurity-enabledserver-pairconfigurationcanbeusedtoincreasehighavailability,whichcanreachsix-ninesreliability,dependingontheconfiguration.
2EdgeComponentsThejointreferencearchitecture'sedgecomponentsusethefollowingInteltechnologies.
IntelProcessorsIntelXeonprocessorsprovidehighperformance,scalability,andartificial-intelligence(AI)inferencealgorithms.
Theseprocessorsareapplicableforindustriessuchasindustrialmanufacturingthatmustprocesssignificantamountsofdata.
Otheruses,suchasmonitoringrefrigeratorsinretailsettings,cantakeadvantageofotherIntelhardwareoptions,suchastheIntelAtomprocessorfamilyforlow-powersolutionsandIntelCoreprocessorsforworkloadconsolidation.
Software,accelerators,orfield-programmablegatearrays(FPGAs)workinginconjunctionwiththeprocessorofferadditionalperformancegains.
Selectingtheprocessorforanedgegatewaydevicedependsonseveralfactors:ThetypeofworkloadthegatewaywillberequiredtoaccommodateTheenvironmentthedevicewilloperatein,suchasharshindustrialareaswithsevereoperatingtemperatures,cleanrooms,andsoforthHardwarerequirements,suchaspower,core,andthreadcount,videotechnology,expansionoptions,memory,andnetworkingcapabilitiesTohandlealargeamountofdatageneratedattheedge,highcomputeprocessorsthatcanrunanalyticstoprocessthisdataandtakecorrectiveactionarerecommended—suchasIntelCoreprocessorsorIntelXeonprocessors.
SoftwaresolutionscertifiedbySAPtakeadvantageoftheIntelstrategicorder-document-management(ODM)ecosystemtoprovideappropriategateway-implementationdesigns.
IntelNext-GenerationStorageSolutionsIntelstoragesolutionscanprovidetargetedstorage,fromnon-volatilememorytoIntelSolidStateDrives(SSDs),bothattheedgeandinthecloud.
IntelOptanetechnologycanprovidehighperformanceandlowlatencyforBigDataprocessing,andIntel3DNANDTechnologycanprovidehighdensityatlowcost.
ReferenceArchitectureIntelHardware–BasedSecurityTechnologiesTocombatIoTthreats,Intelenablessecuritylayersatalllevels—dataingestion,datainuse,datainmotion,anddatainaction.
Securitystartsatthehardwarelevel,withsecurity-enabledbootandstorage,atrustedexecutionenvironment(TEE),andIntelEPID.
Whiletheoperatingsystemitselfutilizesmanyofthesebuilt-insecurityfeatures,developerscanfurtherutilizesomeofthesefeaturesbyemployingapplicationprogramminginterfaces(APIs)thattapintohardwarefeaturessuchasSecureBoot,TEE,ProtectedStorage,UnifiedExtensibleFirmwareInterface(UEFI),TrustedPlatformModule,IntelPTT,IntelSGX,IntelDynamicApplicationLoader(IntelDAL),andexplicitparallelinstructioncomputing.
UsingtheseAPIs,developerscanbetterensuresecurity-enabledconnections,data-andkey-protectionfeatures,security-enabledcredentialprovisioning,IP-protectionfeatures,andcode-privilegesseparationintheapplicationstheydevelop.
DeviceManagementComponentsThejointreferencearchitectureusesthefollowingcomponentstoonboardandmanageIoTdevices.
IntelSecureDeviceOnboard(IntelSDO)Thisfunctionisazero-touchonboardingservicethatacceleratestrustedonboardingofIntelEPIDtechnology–basedhardware.
Zero-touchonboardingisusedfordeviceonboardingattestation.
TheprocessusesIntelEPIDtechnologytoreduceoverheadbyeliminatingworkflowsondeviceinstallation.
WindRiverHelixDeviceCloudThisproductprovidesgatewayanddevice-managementcapabilities,inadditiontoamechanismforperformingoperatingsystemandfirmwareupgradesfromthecloud.
Devicemanagementinvolvesseveralsteps,asillustratedinFigure3.
Thesestepsincludedeployingdevices;monitoring,servicing,andmanagingdevicesagainstsecuritythreatsandfieldexpenses;ongoingoperatingsystemandfirmwareupgrades;andfinally,successfullydecommissioningdevicestoeliminateanysecuritythreatsinthecaseoftheft.
Oneofthemostimportantplatformfeaturesisthemanagementconsole.
BuiltusingRESTfulAPIs,theconsoleletscustomersmanageservicesremotelyfromasingleplatform,anditcanfilterdevicedatabymetadata,listorder,orothercriteria.
EdgeApplicationsandServicesThejointreferencearchitectureusesthefollowingedgeapplicationsandservicestodeliverhighreliabilityandsupportformultiplesensorprotocols.
WindRiverTitaniumEdgeTitaniumEdgeprovidesadual-serverconfigurationwithasmallfootprintthatenablesvirtualizingcomputeandstorageanddeliversthereliabilityandperformanceofvirtualclouds.
Becausenotallimplementationsneedvirtualization,TitaniumEdgeisanoptionallayer.
TitaniumEdgecontainsthreenodes:Thecontrolnode,whichcontainsthevirtualizationinfrastructuremanager(VIM)Thecomputenode,whichincludesacarrier-gradeacceleratedvSwitchandacarrier-gradeKernel-basedVirtualMachine(KVM)hypervisorThestoragenode,whichprovidesacarrier-gradestorageclusterSensorProtocolAdaptersThesearesouthboundprotocolsusedtoconnecttosensors,andtheyincludesensordatamanagement,communications,status,devicesecurity,devicediagnostics,devicemonitoring,andfunctionalsafety.
Thislayerincludespeerprotocolsandcanbeextendedwithsecurelysignedthird-partydriversandsoftwarelibraries.
IntelandSAPhaveseveralofferingsthataddresstheseprotocols.
AdditionalPackagesandLibrariesDependingontheusecase,customerscanselectfromseveralfirmwaresupportanddevelopmentpackages;communicationkitssuchasDataPlaneDevelopmentKit(DPDK);embeddedsystemdebuggers;anddevelopmentlibraries,analysislibraries,andkits.
Supportisavailableforvariousoperatingsystems,suchasLinux*distributionsandAndroid*.
Theplatformalsoprovidesvirtualizationsupport(withahypervisor)andcontainers(withacontainerengine),inadditiontostandardAPIinterfaces.
SAPSolutionsSAPhassupportedthedigitizationofbusinessprocessesformorethan45yearsthroughitsbusinessapplications.
Byutilizinglow-costsensors,affordablebandwidthfordatatransportation,theInternet,andtheabilitytomanageBigData,SAPsolutionscanmakeuseofreal-timedatacreatedbysmartproductsandassets.
SAPLeonardoIoTCapabilitiesSAPLeonardoIoTcapabilitiesareoneofthekeyelementsinenablingdigitaltransformation.
TheyconnecttheOTworldofphysicaldeviceswiththeITworldofsoftware.
Figure3.
WindRiverHelixDeviceCloudhelpsenterprisesmanagedevicesthroughouttheentiredevicelifecycleReferenceArchitectureDeployManageUpdateServiceMonitorDecommissionSAPLeonardoIoTcapabilitiesarebasedontechnologysolutionsfromSAP,includingSAPCloudPlatformandtheSAPDataHubsolution.
Thesesolutionsprovideaprovenandscalableofferingthatfocuseson:ConnectingandmanagingIoTdevicesviathecloudProcessingIoTstreamingdataattheedgeandinthecloudStoringdatainacost-efficientBigDatalakeAllowinginteractiveanddeepanalysisofthedatawithmachinelearningalgorithmsEnablingthedevelopmentofintegratedIoTapplicationsbasedonreusable,semanticallyrichmicroservicesSAPLeonardoIoTBridgeTheSAPLeonardoIoTBridgedigitaloperationscenteraddressescustomerexpectationsfordeeplyintegratedscenariosacrossIoT-connectedapplications,asshowninFigure4.
Itprovidesaholisticviewacrossinter-applicationscenarios,providingimmediateinsightsinthecaseofmachine-orplant-specificissues.
SAPLeonardoIoTBridgeusesSAPFioriuser-experience(UX)conceptsforauser-interface(UI)integrationwithSAPCloudPlatformtoeasilyconnecttovariousbusinesssystems.
Itisalsoopenforpartnersandcustomerstoextendandbuildcustomscenarios.
SolutionsRelatedtoSAPLeonardoSolutionofferingsrelatedtoSAPLeonardoandIoTtechnologyprovidevaluebyaddressingthespecificneedsofenterprisesandalsoprovideintegrationwithSAPbusinesssolutions,suchasSAPS/4HANA.
Examplesinclude:SAPConnectedGoodssoftwareSAPPredictiveMaintenanceandServicesolutionSAPAssetIntelligenceNetworkSAPVehicleInsightsapplicationSAPGlobalTrackandTracesolutionSAPLeonardoIoTFoundationSAPLeonardoIoTFoundationisbuiltonSAPCloudPlatformasamulti-cloudplatform-as-a-service(PaaS)solution.
ItincludesbothbusinessservicesthatenableuserstorapidlybuildIoTapplicationsandtechnicalservicesthatletbusinessesmanagedevicessecurelyandconnectthemusingawidevarietyofindustry-standardprotocols.
TosupporttherapiddevelopmentofapplicationsonSAPCloudPlatformbyeitherpartnersorcustomers,theSAPIoTApplicationEnablementtoolkitprovidesbusinessservicesanddeveloper-focusedtoolsthatprovideeasiertime-seriesdatahandling,rulesenablement,reusableUIcontrolsforSAPFioriapps,anddevelopmenttoolsembeddedintoSAPWebIDE.
SAPIoTApplicationEnablementalsosupportsthedigital-twinconcept,whichenablesmappingthephysicalworldofconnectedthingstotheirdigital"operational"or"business"representation.
Itsupportslifecyclemanagementformodeledentities(fromonboardingtodecommissioning),analyticalusecases,andprogrammingmodelsfordistributeddatamanagementandapplicationdevelopment.
TheSAPCloudPlatformIoTserviceprovidesintegrationcapabilitiesforconnectingandcommunicatingwithphysicaldeviceseitherdirectlyorthroughanedgegateway.
Itenablesbidirectional,securecommunicationbetweendevicesattheedgeandSAPCloudPlatform,whichprovidessecureandscalableentryintoSAPCloudPlatformwithsupportforthemostimportantIoT-relatedprotocols,likeMessageQueuingTelemetryTransport(MQTT).
Italsoprovidesadevicemodelthatdefinesthetechnicalviewontheincomingdata.
Figure4.
OverviewofSAPLeonardoIoTcapabilitiesSAPLeonardoIoTBridgedigitaloperationscenterConnectedproductsThingservicesEventprocessingUIcontentandeventservicesAdministrationservicesAnalyticservicesandAPIsConnectivitymanagementDevicemanagementDatamanagementLocationservicesRulesframeworkandmachinelearningConnectedmarketsConnectedpeopleSAPLeonardoIoTFoundationIoTbusinessservicesIoTtechnicalservicesSecurityMobileDevandopsCollaborationIntegrationUserexperienceDataandstorageAnalyticsAPIbusinesshubSAPCloudPlatformSAPLeonardoIoTEdgeSAPEdgeServicesDeviceadaptersConnectedassetsConnectedfleetConnectedinfrastructureReferenceArchitectureSAPLeonardoIoTEdgeAstheamountofdatageneratedbyIoTdevicescontinuestogrowexponentially,enterprisesincreasinglyrequiredataprocessingattheedge.
Forexample,inlarge-scalemanufacturingenvironments,itisoftenmoreeffectivetoconnectasinglemanufacturingdevicetoalocallyinstallededgegatewayratherthanconnectingthedevicedirectlytoacloudservice.
Thissetupallowsthegatewaytomanagethedata,whichreducesnetworktrafficandcost.
SAPLeonardoIoTEdge,asdescribedinTable1andFigure6,providesthefoundationforthistypeofscenario.
ItcombinesthecapabilitiesofferedbytheSAPCloudPlatformIoTservicewithadditionalSAPEdgeServicestopersistIoTdataforlocaldatastorage,inadditiontoprovidingrunrulesandstreaminganalyticsalgorithms.
SAPLeonardoIoTEdgeextendsbusinessfunctionsfromSAPsoftwaresystemstotheedgeandsupportsoperationsinintermittentlyconnectedenvironments.
Theseservicesarecentrallydefined,managed,anddistributedfromthecloudtothelocaledgenode.
Aflexibleplug-inconceptmanageslocalconnectionstodevicesandprovidessecuredatatransfertoandfromthecloud,inadditiontodirectprocessingofIoTdatastreams.
Theplug-inconceptalsoenablesavarietyofcommunicationprotocols,suchasMQTT,ConstrainedApplicationProtocol(CoAP),Modbus*,SimpleNetworkManagementProtocol(SNMP),andOPCUnifiedArchitecture(OPCUA*),whichenablesconnectiontomanytypesofdevicesontheedge.
SAPCloudPlatformSAPCloudPlatformprovidesafoundationforSAPLeonardoIoTofferingsandisbasedonCloudFoundry*,anopeninitiativetoprovideanindustry-recognizedplatformforthedevelopmentofmicroservices-basedsolutions.
Itsupportsamulti-cloudapproachthatprovidesanabstractionlayerforSAPapplications.
ThislayerallowsIoTapplicationstorunoneitherpubliccloudplatforms,suchasGoogleCloudPlatform*,AmazonWebServices*(AWS*),andMicrosoftAzure*,orinSAPdatacenters.
YourDataCenterSAPLeonardodigitalinnovationsystemSAPLeonardoIoTEdgeSAPEdgeServicesYourloTdataSwift*|Cassandra*|SAPHANAbusinessdataplatformCloudPlatformBDaaSYourloTapplicationPortalSAPFiorilaunchpadrunonInternetofThingsservice(loTGatewayEdge)SAPCloudPlatformINTERNETCloudFoundry*EnvironmentIoTgatewaycloudloTMessageManagementServiceloTcoreserviceloTserviceloTservicecockpitCloudintegrationAdminSAPandnon-SAPapplicationsandmore.
.
.
CloudPlatformPaaSsuchasSAPHANAbusinessdataplatform,ApacheKafka*,PostgreSQL*YourloTdataYourloTapplicationAnyCFbuildpackAppuserFigure5.
OverviewoftheSAPLeonardodigitalinnovationsystemarchitectureTable1.
OverviewofSAPLeonardoIoTEdgeFeatureDescriptionPersistenceservicesStoresdatalocallyonIoTgatewaysStreaminganalyticsAnalyzesIoTdatastreamsforexceptionsandpatternsandcreatesalertsandeventsbasedonpatternmatchingBusiness-essentialfunctionsProvidesbusinessprocessesattheedgeforbusinesscontinuitywhentheedgeisdisconnectedfromcoreservicesPredictivemodelingProvidespredictivemodelsforanalyzingIoTdata;thepredictivealgorithmistrainedinthecorebasedonallavailabledata,andtheresultingpredictivemodelisthenappliedtotheedgedevicesMachinelearningAppliesmachinelearningalgorithmsattheedgespecificallyforimageandvideoanalysisDeviceadaptersProvidesdata-formatconversionacrossamultitudeofIoTdeviceprotocols,andsecurelytransmitsdatatoandfromSAPCloudPlatformReferenceArchitectureSAPCloudPlatformprovidesalargesetoftechnicalplatformservicesthatsupportIoTanddigital-transformationscenarios,anditprovidesflexibleprocessintegrationbetweenvariousSAPandthird-partybusinesssystems.
ControlandDataFlowsThissectiondescribesthreestagesoftheIoTdevicelifecyclethatenterprisesmustsecurelymanagethroughoutanIoTdeployment.
OnboardingDevicesOnboardingisthephysicaldeploymentofIoTdevices—suchasgatewaysorsensors—intoanetwork.
Deviceonboardinghistoricallyhasbeenatime-consumingtaskbecauseitinvolvescoordinationbetweenITandoperationalteamsforproperinstallationandsecurity-enabledsetup.
ByusingIntelSDOzero-touch,deviceidentification,anddataprivacy,ownershipandcommunicationsetupfromtheedgetothecloudcanbebettersecured.
DevicesmusthaveIntelEPIDcapabilitiestobeenabledforIntelSDO.
Theprocessofconnectingdevices,integratingdata,andmanagingsoftwareupgradesisdisplayedinFigure7andsummarizedinthe"DeviceOnboarding"stepsbelow.
DeviceOnboardingSteps1through6,inadditiontostepS,describethedeviceonboardingprocess.
1.
Duringthemanufacturingphase,theIntelEPIDcredentialsareembeddedintheTEEoftheprocessor.
Thegatewaythencreatesagloballyuniqueidentifier(GUID)usinganInteltoolkit.
ThegatewayalsocreatesaURLthatthedeviceusestoconnecttotherendezvousserver,whichallowsthedevicetogetitsnewownerinformation.
2.
Thedeviceownerreceivesanownershipproxyforthedeviceoverthenetwork.
Thisinformationisthenimportedintothecloudserviceproviderandassociatesthedevicewiththedevice'sowner.
TheIntelcloudtrustbroker,orrendezvousserver,providestherendezvousserviceIPaddresstodirectthedevicetothenewowner—inthiscase,IoTservicesfromSAP—viatheSAPCloudTrustCentersite.
3.
Oncethedeviceispoweredon,it"phoneshome"totheIntelcloudtrustbrokertolocateitsnewowner.
ThebrokerprovidestheIPaddressandredirectsthedevicetoSAPCloudTrustCenter.
4.
SAPCloudTrustCenterisresponsibleforverifyingtheIntelEPIDsignatureandownershipofthedevice,andthenregisteringthedevice.
ItforwardstheconnectioncertificateforfurtherconfigurationandcommunicationtoWindRiverHelixDeviceCloud.
SAPCloudTrustCenterisalsoresponsibleformaintainingthelistofvaliddevices.
Figure6.
SAPLeonardoIoTEdgeprovidesdatapersistenceandprocessingcapabilitiesattheedgeSAPLeonardoIoTEdgePersistenceservicesStreaminganalyticsBusiness-essentialfunctionsPredictivemodelingMachinelearningSAPGatewaytechnologyloTGatewayHardwareSAPCloudPlatformReferenceArchitectureFigure7.
ThejointreferencearchitecturefromIntelandSAP;theindividualdataflowsaredescribedinthefollowingstepsSensorWindRiverHelixDeviceCloudagentincludestrustservicesagentIoTGatewayEdge(agent)SensorSensorActuatorSensorActuatorMCUSAPEdgeServicesEdgeGatewayCloudEdgeEndpointStandards:Wi-Fi*,Ethernet,Cellular,RFID,6LoWPAN,LoRaWANIntelHardwareCapabilitiesandSecurityAPIEdgeSoftwareandServicesSAP,Intel(UPM),orThird-PartyProtocolAdaptersWindRiverHelixDeviceCloudAPIsSoftware-DefinedEverything—WindRiverTitaniumEdgeI/O(UART,12C.
.
)Compute(IntelCoreProcessors/IntelXeonProcessors)Storage(SSD,3DXPoint)CP/APIBusinessHubGatewayODMIoTappsfromSAPBack-endsoftwarefromSAP(e.
g.
:SAPS/4HANA)PartnerloTAppsWindRiverTitaniumCloudWindRiverHelixDeviceCloudIntelSecureDeviceOnboardOn-premisesERPVM1VM2OperatingSystem2WRLinuxs71295111152101CP/APIManagementSAPCloudPlatformInternetofThings86loTAppl.
EnablementDB/PersistenceServicesDevicefirmwareandoperatingsystemupdates4MCUSAPCloudTrustCenter35.
OncetheconnectivitypathisestablishedbetweenthedeviceandWindRiverHelixDeviceCloud,thedevicecertificatesareforwardedbytheownerfollowedbythedeviceconfiguration,includingpublish-subscribetopicsubscriptionsonthegateway.
6.
SAPGatewaytechnologyprovidesasimplewaytoconnectdevices,environments,andplatformstoSAPsoftwarebasedonmarketstandards.
SAPGatewayauthenticatesusingthedevicecertificate,anditthenestablishesadatapathtothecloudprovider.
Atthisstage,thedeviceonboardingiscompleteanddatacontrolanddatapathflowshavebeenestablished.
Thedeviceiscapableofcollectingdataandprocessingitaccordingtodefinedbusinessrules.
Thecollectionandimplementationofdataislookedatinthefollowing"CollectingandIntegratingData"section.
SSensorsormicrocontrollersthatareIntelEPIDtechnology–enabledcanusesteps1through4foronboarding.
However,legacysensorsconnectedtothegatewaymightbedetectedandauthenticatedbyusingasimplesensordirectory.
CollectingandIntegratingDataSteps7through10describetheprocessofcollectingandintegratingdevicedata.
7.
Businessapplicationsonthegatewayacquiredatafromconnectedsensorsthroughanumberofsupportedprotocols.
Thedatafromregisteredsensorscandirectlyflowtothegateway,orthedatacanbeencryptedbytheedgedevicesandthensenttothegatewayiftheownersofthegatewayandsensorsaredifferent.
8.
SAPLeonardoIoTEdgesoftwaremodulesreceivemessagesfromdevicesandperformactionsonthem,ultimatelysendingmessagestothecloudgatewaytobedispatchedtocloudservices.
SAPLeonardoIoTEdgeinvokesthepersistenceserviceandstreaminganalyticstolocallystoreIoTdataonthegateways.
TheseanalyticsanalyzetheIoTdatastreamsforexceptionsandpatterns,andtheythencreateeventsandalertsinaccordancewiththespecificrulessetuptoreflectcustomindustrialusecasesandoperationalneeds.
Inaddition,business-essentialfunctionsrunbusinessprocessesattheedgetoprovidecontinuityforcriticalbusinessfunctions,evenwhentheedgeisdisconnectedfromthecore.
9.
Cloudservicesthendisseminatethedatatoenterprisecloudsoftwareforfurtherprocessing.
10.
Dataisalsoforwardedtoback-endapplicationsasnecessary.
ManagingDevicesandSoftwareUpdatesSteps11and12describethedevicemanagementandsoftwareupdateprocess.
11.
Applicationsoftwaremanagersmodifyadevice'saccessorcantriggerasoftwareupdatethroughtheprovisioningAPI.
12.
WindRiverHelixDeviceCloudpushesthenecessarysoftwarepackagestothegateway.
Thedevice-managementagentonthegatewaytakesappropriateactioneitherbyinstallingorupgradingexistingsoftware.
UseCase:ConnectedAssetsandLogisticsThisconnectedassetsandlogisticsusecasedemonstratesthevalueofapplyingportionsofthejointreferencearchitecturetoareal-worldexample.
ThisusecaseillustratesthesimplifiedviewofthecombinedphysicalanddigitalworldlinkedtothebusinessprocessesasshowninFigure1,wherebusinessdecisionscanbeviewedacrossanenterprise'snetworkofdistributors,warehouses,andsuppliers.
AlthoughthisusecasefocusesonanIoTdeploymentofconnectedassetsinadiscretemanufacturingenvironment,thejointreferencearchitecturecanbeappliedtootherindustrysectors,suchasretail,industrial,energy,biotech,pharmaceuticals,chemicals,orelectronics,wheredatafromphysicalmachineryordevicesisgeneratedandcanbecombinedwithbusinessdata,suchasinventory,production,andmaintenancescheduling,tocreateinsightsthatleadtobetterbusinessdecisions.
Inthisusecase,theexamplecompanyisaleadingmanufacturerofinnovativeprotectivepackagingmaterialsandsystemsformedium-to-largemanufacturersanddistributors.
Ratherthansellingmachines,thecompanyprovidesthemunderaconsignmentmodel.
Historically,inventoryreplenishmentforthemachineswasperformedbycompanytechniciansonabiweeklyschedulewherethemachineswerealsoinspectedandservicedasneeded.
Thecompanyislaunchinganew"smart"modelthatprovidesdatastreamsthatallowforinventoryreplenishment,management,conditionmonitoring,andperformanceoptimization.
Collectingandmonitoringthesedatastreamsacrossallofthemachinesdeployedwillallowthecompanyto:DecreasereplenishmentcostsforconsumablesOptimizeserviceroutingandschedulingbasedonactualusagepatternsandanalyticsImprovemachineuptimeanddecreasemachinedowntimealertsthroughremoteconditionmonitoringImproveoverallcustomersatisfactionReferenceArchitectureForotherindustries,asimilarsolutionmightrequireadifferentselectionofmodularcomponentsdescribedinthejointreferencearchitecturethanisshowninthisspecificusecase.
Storyline:DigitalTransformationtoProduct-as-a-ServiceThissectionfocusesonapplyingthejointreferencearchitecturetoasetofconnectedpackagingmachinesatafactorylocation.
Theusecaseincludesanexampleofthelogisticsinvolved.
ManufacturingPackagingMachineDigitization1.
Asmallautomotivepartsmanufacturerordersfive"smart"packagingmachinesfromthepackagingmachinecompany,withthefunctionalityshowninFigure8.
Becausethepackagingmachineswillbelocatedtogetheratoneplant,onepackagingmachinerequiresconnectivityandactsasagateway,andtheremainingfourcommunicatethroughit.
Themachinesareshippeddirectlytothemanufacturerandareinstalledbythepackagingmachinecompanytechnicians.
2.
Thepackagingmachinecompanypreconfiguresthegatewayonthemachineswithappropriatesecurityprofiles,certificates,languagepacks,andcommunicationsfunctionality.
3.
Thepackagingmachinecompanyprovidesatrackingnumberandnotifiesthemanufacturerofthescheduleddeliverydate,andthenprovidesupdatesusingSAPGlobalTrackandTrace.
Theseupdatesincludeproductionstart,completion,palletization,loading,customsclearance,delivery,andunloading,asshowninFigure9.
PackagingMachineInitialSetup1.
Aservicetechnicianunpacksandpowers-onthepackagingmachines.
2.
Thegatewayattachedtothemachineusesitson-boardsubscriberidentitymodule(SIM)toconnecttothecloudandregisteritslocation,availability,andcapability.
3.
Securitycertificatesandprofilesarevalidatedandappliedasnecessary.
Oncethegatewaypackagingmachineispoweredon,it"phoneshome"totheIntelcloudtrustbrokertolocateitsnewowner.
TheIntelcloudtrustbrokerprovidesanIPaddressandredirectsthedevicetoitsnewowner,SAPCloudTrustCenter.
SAPCloudTrustCenterverifiestheIntelEPIDsignatureandownershipofthedevice,anditthenregistersthedevice.
ItforwardstheconnectioncertificateforfurtherconfigurationandcommunicationtoWindRiverHelixDeviceCloud.
SupplierLSPCustomerSupplierLSPCustomerDeliveryASNAcknowledgementPickupDelayLoadingendLoadingbeginCarrierarrivalProofofpickupCustomsinArrivalDelayLoadingbeginProofofpickupArrivalDepartureClearcustomsUnloadingLoadingendDepartureReturnemptycontainerUnloadingDropshipmentShipmentexecutionshipmentsalesorderpurchaserequisitionpurchaseorderHubHub1.
Definenewtrackedprocessesbymakinguseofastandardtemplateorsettingthemupfromscratch2.
Customizeattributesofthetrackedprocess,events,andpropertiesSAPGlobalTrackandTracesolution—exampleusecasesFigure9.
SAPGlobalTrackandTraceobjecttrackingscenarioReferenceArchitectureFigure8.
Functionalityoverviewof"smart"packagingmachinesDetectvibration,sound,andtemperaturevariationsusingconditionmonitoringsensorsEnableachangefromperiodic-tocondition-basedmaintenanceReduceunplannedstoppagesEliminatemanualgatheringofdataIncreaseequipmentavailabilityandcustomersatisfactionEnablereal-timeinventoryandconsumptionmanagementOptimizeservicetechniciansschedulesandroutesVirtuallyeliminateout-of-stockconditionsforpackagingmaterial4.
Thepackagingmachinecanbeassignedtogroupsforeaseofadministration.
OncetheconnectivitypathisestablishedbetweenthedeviceandWindRiverHelixDeviceCloud,thedevicecertificatesareforwardedandthedeviceisconfigured,includingpublish-subscribetopicsubscriptions,onthegateway.
SAPLeonardoIoTEdgeandSAPCloudPlatformonthegatewayauthenticateSAPCloudPlatformusingthedevicecertificate,andtheythenestablishadatapathtothecloud.
Atthisstage,thedeviceonboardingiscomplete,andthedatacontrolanddatapathflowshavebeenestablished.
Thedeviceiscapableofcollectingandprocessingdata.
5.
Thepackagingmachineisinstalledandstockedwithpackingmaterial,anditisnowoperational.
PackagingMachineProduction1.
Real-timeinventorytracking:AnSAPbusinessapplicationonthegatewayacquiresdatafromconnectedsensorsthroughanumberofsupportedprotocols.
Thisdataisusedforreal-timeinventorytracking.
Thedatafromregisteredsensorsflowsdirectlytothegateway.
Ifthegatewayandsensorownersaredifferent,thedatacanfirstbeencryptedandthensenttothegateway.
2.
Productreplenishment:SAPLeonardoIoTEdgereceivesmessagesfromdevicesandperformsactionsonthem,ultimatelysendingmessagestothecloudgatewaytobedispatchedtocloudservices.
SAPLeonardoIoTEdgeinvokesthepersistencetoolsandstreaminganalyticstostoreandanalyzethedataonthegateway.
Real-timemonitoringofconsumablescombinedwithhistoricalconsumptionpatternsletthepackagingmachinecompanyoptimizeitsserviceschedulesandrouteswithinagivenmarketarea.
3.
Operationalmonitoring:Real-timeconditionmonitoringofthepackagingmachineallowsthepackagingmachinecompanytodynamicallyschedulemaintenancebaseduponthevisibleconditionofcriticalcomponents,ratherthandependonstaticallyscheduledmaintenancethathadbeenperformedinthepast.
Creatingahistoricalstoreofdataacrossallmachinesinoperationallowsthepackagingmachinecompanyto,overtime,refinethemodelingtechniquesusedtoquantifytheconditionofcriticalcomponentstoimproveequipmentavailability.
4.
Intermittentconnectivity:Business-essentialfunctionscanprovidebusinessprocessesattheedgetoenablecontinuityforcriticalbusinessfunctions,evenwhentheedgedeviceisdisconnectedfromthecore.
Onceconnectivityisreestablished,SAPCloudPlatformcanthenforwarddatatoenterprisecloudsoftwareforfurtherprocessing.
Dataisalsoforwardedtoback-endapplicationsasnecessary.
Whendevicemaintenance,performanceissues,orsecuritybreachesaredetected,orwhenoverallconfigurationupdatesarerequired,applicationsoftwaremanagerscanmodifyadevice'sconfigurationorcantriggerasoftwareupdatethroughtheprovisioningAPI.
Adevicecanbetakenoffline,or,incaseofasoftwareorfirmwareupgrade,WindRiverHelixDeviceCloudcanpushthenecessarysoftwarepackagestothegateway.
Thedevice-managementagentonthegatewaythentakesappropriateactioneitherbyinstallingorupgradingexistingsoftware.
Onceinstallationiscomplete,controlforthedeviceispassedtoSAPLeonardoIoTEdge.
ConclusionIntelandSAPhavecollaboratedtodevelopanend-to-endsolutionthathelpsmeetthedigitalbusiness-transformationneedsofenterprisesworldwide.
Withthisjointreferencearchitecture,enterprisescannowmakeuseofdatacollectionandanalysisattheedgewhilestillbenefitingfromthecorebusinessintelligenceandoverallperformanceofSAPS/4HANAandSAPCloudPlatform.
ThisjointreferencearchitecturebringstogetherIntelIoTPlatformperformance,SAPLeonardoIoTcapabilities,andSAPCloudPlatformtosecurelyonboardandmanageanetworkofdevices,collectandmanagemachinedata,andperformanalytics—andthencombinesthesefunctionswiththebusinessprocessesrunningonSAPS/4HANAtofullyenablethedigitaltransformationofabusiness.
Thispaperprovidesausecaseofconnectedassetsinamanufacturingenvironment,whichdemonstrateshowmachine-generateddataattheedgecanbesynthesizedintomanageableinsightsincombinationwiththenear-real-timeoperationalandinventoryinformationavailablefromwithinthebusiness.
Byusingthisdata,anenterprisecanoptimizeitsbusinessofconsigningamachineasaservicetodecreasecostwhileincreasingcustomersatisfaction.
Thejointreferencearchitecturecanalsosupportmultipleusecasesacrossavarietyofindustrieswithanend-to-endviewofthedatacollection,storage,andanalysisthatdrivesdigitalbusinesstransformation.
Formoreinformationaboutthejointreferencearchitecture,ortodiscussspecificuse-caseimplementations,pleasecontactyourIntelorSAPsalesrepresentative.
ReferenceArchitectureMcKinsey&Company.
"TheInternetofThings:MappingtheValueBeyondtheHype.
"June2015.
mckinsey.
com/~/media/McKinsey/Business%20Functions/McKinsey%20Digital/Our%20Insights/The%20Internet%20of%20Things%20The%20value%20of%20digitizing%20the%20physical%20world/The-Internet-of-things-Mapping-the-value-beyond-the-hype.
ashx.