There are several features and strategies that you can use to get live data without compromising on the security of your DCS system.
DBDOC has been designed so that remote users cannot use it to make changes to your DCS system.
Many DCS systems are isolated on a process network that cannot communicate with the outside world. However, there are strategies that you can use to get live data to the business network so that you can monitor your plant without having to connect to the process network.
Unfortunately, there is no way for DBDOC to work without any communication at all to the CIUMon that communicates with the CIU. DBDOC is designed so that you can get data for any block in your system, so CIUMon needs to know which blocks to request at any given time. Most systems have many thousands of blocks, so trying to request data for every block and then broadcast that data to the business network would not be viable.
Some historian systems do work with a data diode, but this is because they are configured to get data only for certain blocks which are defined and set up ahead of time. This approach would not work in DBDOC.
DBDOC ©1996 - 2019 G. Michaels Consulting Ltd., all rights reserved. All other trademarks and registered trademarks are the property of their respective holders. Website source largely available under the terms of the AGPLv3.