Getting the data without opening a door into the plant
A plant’s control systems must keep running above all else. These are the principles Uptrol applies when designing and deploying monitoring.
- 01
Connect
Read the PLCs, meters, sensors and cameras you already have. Read-only.
- 02
Process at the edge
A gateway or AI computer at the machine filters, computes and buffers during outages.
- 03
Send securely
Outbound encrypted connection only. No ports opened into the plant.
- 04
Alert
The right person, at the right time, via Telegram, Zalo or email.
- 05
Report
Dashboards and shift, daily, monthly reports; PDF and Excel export.
Read-only
Monitoring uses read commands only. No writes to PLCs, no remote control of equipment, no changes to running programs.
Outbound only
Gateways connect out to the server over an encrypted channel. No ports are opened from the Internet into the plant network, and no remote-access software is installed on control computers.
Network separation
The gateway sits at the boundary between the control network and the office network or Internet. The control network is not routed directly outside. The layout follows the zones-and-conduits approach of ISA/IEC 62443.
A separate identity for each device
Every gateway has its own certificate. Losing or replacing one device means revoking only its certificate.
Data separated per customer
Each customer’s data is kept separate, with per-user permissions and a log of administrative actions.
Your data belongs to you
Customers can export their data and ask for deletion when the contract ends.
Controlled updates
Software on gateways and station computers is updated with signed packages and can roll back to the previous version.
Official monitoring data untouched
For automatic monitoring stations Uptrol reads a copy of the data only. Sealed dataloggers are never opened and the transmission to the authorities is never changed.
Does your group have its own security requirements? Send the list and Uptrol will answer each item.