IoT Solution
00
ITS PLATFORM MODULE OVERVIEW

ITS platform modules — one system, many functional layers.

From data collection and supervision, through automation and visualisation, to replication and analytical modules — below is a description of the individual modules that make up the ITS platform and of the way they work together.

Contents

Twelve modules across four layers plus the platform's system environment.

The ITS modules are grouped by subject: from management and supervision, through data collection and flow, to automation, visualisation and analytics. The system environment is described separately, meaning the way data is made available to tools running outside the platform.

Analytical modules

System environment and onward integration

01 · Management and supervision
Platform module

Administrator panel — central configuration of modules and access rights.

The administrator panel is where the ITS platform modules and their configuration are managed. It is used to set the main operating parameters of the instance, the network settings, the configuration of individual modules and the access settings: users, roles and permission levels.

Module configuration is maintained in one place and propagates from there to the platform modules.

Administrator panel configuration and access Data monitoring Dashboard MQTT Automation Traceability Other modules
MODULE CONFIGURATION
The main operating settings of each platform module, managed from a single panel.
NETWORK SETTINGS
The instance's communication parameters: addressing, ports and connections to external systems.
ACCESS SETTINGS
Users, roles and permission levels defined centrally for the platform modules.

Configuration of the platform modules and their main settings.

Network settings and the instance's communication parameters.

Management of users, roles and access levels.

An audit trail of configuration changes at instance level.

Where it proves useful

The administrator panel is the point at which maintaining an instance stops being spread across several separate tools.

It proves useful where several people with different areas of responsibility have a say in the installation, and the configuration has to be kept in order and documented.

Maintenance teams

Permissions separated between operators, technicians and administrators, instead of one shared account for the whole shift.

Multi-site installations

Consistent network settings and module configuration managed from a single panel, even when there are several instances.

Audits and reviews

A history of configuration changes, useful during internal reviews and when restoring a known state after a failure.

Contents
02 · Management and supervision
Platform module

System monitoring — supervision of the instance's own health.

System monitoring watches the technical condition of the ITS instance: the use of computing resources, memory and disk space, along with the status of the running platform services. This is a diagnostic tool for the platform itself rather than for the measurement layer; the quality and completeness of readings is handled by Data monitoring.

A live view of system health makes it possible to react to rising load or dwindling resources before this affects the platform's operation. The module does not keep a full history of system operation; it maintains a list of recent events, meaning the moments at which the technical state departed from normal: service restarts, resource usage thresholds being exceeded, and lost connections.

ITS instance CPU · RAM · disk System monitoring comparison against the norm Normal state Deviation from the norm
MONITORED RESOURCES
CPU, memory, disk space and the status of the platform services.
REAL TIME
Deviations from the norm are visible immediately, before they affect how the platform runs.
RECENT EVENTS
A list of system events from the recent period: service restarts, resource usage thresholds being exceeded, and lost connections.

Real-time monitoring of the instance's resources.

Signalling of deviations from the technical norm.

A history of recent system events.

Supervision of several instances at once.

Where it proves useful

System monitoring answers the question of whether the platform itself is running correctly.

This is a diagnostic tool for the ITS instance. It proves useful where an installation runs without permanent technical staff on site, and a problem on the platform side has to be noticed before its consequences are.

Instance diagnostics

A stopped service, rising load or dwindling disk space, all visible in one place.

Edge deployments

Supervision of instances running at sites without technical staff, where nobody will check the device in person.

Maintenance planning

Events from the recent period as a basis for expanding resources or scheduling a service call.

Contents
03 · Management and supervision
Platform module

Data monitoring — thresholds, alarms and deviations in the data.

Data monitoring watches the measurements arriving at the platform and compares them against defined thresholds. Six threshold levels are available per metric — three on the low side and three on the high side — which makes it possible to distinguish a mild deviation from a state that calls for immediate action.

The levels are labelled 3Low, LowLow and Low on the low side, and Hi, HiHi and 3Hi on the high side. Low and Hi mark the edge of the normal operating range, LowLow and HiHi correspond to a deviation that needs attention, and 3Low and 3Hi to a critical excursion. The levels are defined separately for each metric, so temperature and pressure need not share the same scale.

Graded thresholds have a practical purpose: they let notifications be separated. Entering the Low or Hi band can go no further than the operator's dashboard, LowLow and HiHi can trigger a message to the maintenance team, and 3Low and 3Hi a top-priority alarm. Recipients are therefore not buried under low-significance events.

When a value crosses a defined threshold, the module records an alarm event, which the dashboard module can visualise and the automation module can use to trigger a further response.

An alarm event is not a single point in time. If the value reaches the next threshold while the event is open, the module records a change of significance — a move from Hi to HiHi, for instance — without closing the event and opening a new one. A trace that shifts level several times produces one entry, not a series of unrelated alarms.

Two pieces of information about significance are stored: the level at which the alarm began, and the highest level reached over the whole duration of the alarm state. That distinction matters during analysis, because it shows both the moment the process started leaving its range and how far it drifted before returning.

For each metric, the alarm history therefore holds the moment of the first excursion together with its level, the highest level recorded, the moment of return to range, and the total duration of the alarm state.

Data stream Data monitoring 3Hi HiHi Hi Low LowLow 3Low Dashboard Automation
SIX LEVELS
3Low, LowLow and Low on the low side, Hi, HiHi and 3Hi on the high side, defined separately for each metric.
ALARM EVENTS
Recorded the moment a threshold is crossed, with full context.
A threshold excursion in real time
3Hi HiHi Hi Low LowLow 3Low 10:00 10:15 10:30 10:45 11:00 temperature [°C] alarm — Hi escalation — HiHi return to range peak 85.0 °C alarm state — 27 min Metric state within range ALARM · Hi Hi threshold crossed ALARM · HiHi level escalation EVENT HISTORY first level Hi · 10:23 highest level HiHi · 10:31 peak value 85.0 °C duration 27 min
THE MOMENT OF THE EVENT
Crossing the Hi threshold opens the alarm state and changes the metric's state.
LEVEL ESCALATION
Reaching the next threshold is recorded as a change of significance — from Hi to HiHi — without closing the open event.
FIRST AND HIGHEST LEVEL
Both the significance at which the alarm began and the highest reached during it are stored.
PEAK VALUE
The highest reading of the metric during the event is recorded, regardless of which threshold it stopped at.
DURATION
Falling back below the threshold closes the event; the history keeps the opening moment, the closing moment and the total time.

Thresholds are not a configuration detached from the data. The thresholds in force at the moment of writing are attached to the metric's history records, so the configuration of a given period stays in the history alongside the readings.

A change of thresholds takes effect from the moment it is made, for current data and subsequent events. The history nevertheless stays readable: entries from before the change show the thresholds that applied then. That makes it possible to reconstruct why a given reading raised an alarm, or why it did not, even though the same value would be judged differently today.

This matters for retrospective analysis and for audits. Without stored thresholds, judging an event from several months ago would mean remembering which configuration applied at the time, and with several hundred metrics that is not feasible.

Threshold history — reconstructing alarm conditions
20.02 01.03 12.03 21.03 30.03 temperature [°C] thresholds changed · 12 Mar HiHi 80 °C Hi 72 °C HiHi 76 °C Hi 68 °C 23 Feb · 70.4 °C · within range 18 Mar · 70.4 °C · ALARM Hi the same 70.4 °C reading judged differently — what decides is the threshold configuration stored with the record
THRESHOLDS WITH THE RECORD
A metric record carries the threshold values that applied when it was created.
EFFECTIVE FROM THE MOMENT OF CHANGE
A new configuration applies to current data and subsequent events; it does not re-judge earlier entries.
RECONSTRUCTING AN EVENT
For a past entry it is visible which thresholds it was created under, even when different ones apply today.

Six threshold levels defined separately for each metric.

Thresholds stored alongside the metric's history records.

A register of alarm events over time.

Integration with the dashboard module and with automation.

Where it proves useful

Data monitoring turns a stream of readings into a specific event that can be acted upon.

It proves useful where a parameter has to stay within range and an excursion carries a real cost, whether in quality, energy or compliance.

Holding process parameters

Graded thresholds on temperature, pressure or humidity, with notification before the process leaves specification.

Machine supervision

A signal that operation has departed from normal, as an early warning of failure and unplanned downtime.

Quality requirements

Documented excursions and their timing, useful during complaints and quality audits.

Contents
04 · Data collection, flow and replication
Platform module

IDC — Data collector — time-series data together with ready-made aggregates.

IDC collects data from many sources across the installation — sensors, controllers, meters and measuring devices — and stores it as time-series data. Measurements arrive continuously: temperature, humidity, pH, energy consumption and other quantities recorded on site.

Beyond recording the readings themselves, IDC calculates aggregates for them: minimum, maximum and mean values, standard deviation and the sum of increments. The sum of increments matters particularly for monotonic, meter-type values, because it yields consumption over 15-minute, hourly, daily and monthly windows.

Aggregates are produced automatically inside the module, with no separate queries or recalculation on the consumer's side. They are immediately available to dashboards, BI reports, analyses and the other platform modules, for both current and historical data. The stored time-series data stays in the IDC database, so readings from weeks or months ago can be revisited and compared with the current state of the installation.

IDC also watches for values that stop changing. For a repeating reading, the module measures how long the same value persists and how many measurements were stored with it. That is useful in two directions: it can confirm that the process is running steadily, or indicate that a sensor has frozen and keeps reporting the same figure.

Measurements can be identified either by the IDC database timestamp or by a timestamp coming from the source. A trusted timestamp can be enabled per metric, in which case the time reported by the measuring device is stored — which matters where the moment of measurement counts rather than the moment it was written to the database.

IDC also defines metrics by data type — floating-point, integer and text values — so that readings arriving at the collector are described and stored consistently from the outset.

Sensor PLC Gateway IDC time-series data metric typing Aggregates min · max · mean standard deviation sum of increments 15 min · 1 h · day · month Dashboards Reports and BI ITS modules
CONTINUOUS MODE
Measurements arrive continuously and are stored as time-series data: temperature, humidity, pH, energy and other quantities.
AUTOMATIC AGGREGATES
Minimum, maximum, mean, standard deviation and the sum of increments, all calculated in the module with no recalculation by the consumer.
SUM OF INCREMENTS
For meter-type values this yields consumption over 15-minute, hourly, daily and monthly windows.
HISTORICAL DATA
Stored time-series data and calculated aggregates remain available for analysis and comparison with the current state.
UNCHANGING VALUE
How long a repeating reading persists and how many such measurements there were — a sign of either a steady process or a frozen sensor.
TIMESTAMP
The IDC database time, or a trusted timestamp supplied by the measuring device, enabled per metric.
METRIC TYPING
Metrics described by data type — floating-point, integer and text values — already at the collector's input.

An energy meter shows this best. The reading from such a device is the meter total, that is, consumption accumulated since commissioning — the reading alone says how much energy was drawn in total, but nothing about consumption at a given moment. Only the difference between the totals at the start and end of a time interval gives consumption within that interval, and that is exactly what the sum of increments calculates.

IDC divides the timeline into windows and calculates the increment within each one. Below is the same measurement in two views: on the left the raw meter total rising over time, on the right the same reading broken down into consumption in 15-minute windows. The highlighted area on both charts is one and the same 08:45–09:00 window.

Energy meter — meter total accumulating value [kWh] 12 400 12 420 12 440 12 460 08:00 08:15 08:30 08:45 09:00 09:15 09:30 09:45 10:00 15-minute window kWh IDC aggregation — consumption per window increment per 15-minute window [kWh] 0 2 4 6 8 10 08:00 08:15 08:30 08:45 09:00 09:15 09:30 09:45 15-minute window kWh / 15 min
RAW READING
The meter total rises monotonically. A single reading carries no information about consumption at a given moment.
AGGREGATION WINDOW
The highlighted 08:45–09:00 interval defines one window. The difference in meter total at its ends is the consumption within that window.
SUM OF INCREMENTS
The bar on the right corresponds to one window from the chart on the left — the bar chart is built from increments, not from absolute values.
THE OTHER WINDOWS
The same operation is performed for hourly, daily and monthly windows, and the results are stored alongside the raw data.

Data in IDC is organised around the pairing of a device and a metric. A metric stored in the module has a device assigned to it, and without that assignment it does not reach the database. Many devices are registered in the module, and many metrics sit under a single device. The device plus metric pair is unique in the IDC architecture, so a reading can be attributed unambiguously to a specific measurement point.

Groups are built on top of this structure, separately for devices and for metrics. If a dozen or so sensors recording temperature and humidity are running in the installation, the devices from one area can be collected into a device group, and the temperature metrics themselves into a metric group named something like “Temperatures — hall A”. This makes the data easier to reach where it is used: in the dashboard module, in reports and in analyses.

Device 01 Device 02 Device N Device + metric pairs the pair is unique Device 01 · temperature Device 01 · humidity Device 02 · temperature Device 02 · humidity Device N · … Device group sensors from one area Metric group “Temperatures — hall A”
DEVICE AND METRIC
A metric has a device assigned to it; many metrics are registered under a single device.
A UNIQUE PAIR
The device plus metric combination identifies a measurement point in the IDC database unambiguously.
GROUPS
Devices and metrics organised into groups, available later in the dashboard module and in reports.

Continuous recording of measurements as time-series data.

Aggregates calculated automatically: min, max, mean, standard deviation, sum of increments.

Consumption over 15-minute, hourly, daily and monthly windows.

Access to historical data alongside current data.

The duration of an unchanging reading and the number of repeated measurements.

Trusted timestamp — the time supplied by the measuring device.

Metrics defined by data type, numeric and text.

Device groups and metric groups organising the data structure.

Where it proves useful

IDC is the layer on which all further work with the data rests.

It proves useful in installations where measurements arrive without interruption and where billing, reporting and analysis depend on them, not only a live view.

Utility billing

Consumption of electricity, water, compressed air or gas calculated over 15-minute, hourly and daily windows.

Environmental monitoring

Temperature, humidity, pH or water quality recorded continuously, with ready-made aggregates for analysis.

Reporting and BI

Data and calculated aggregates made available to reporting tools without recalculation on the consumer's side.

Contents
05 · Data collection, flow and replication
Platform module

Replication — replication of the full state between instances.

The replication module is responsible for moving data between ITS platform instances. The full state is replicated: telemetry, alarms, thresholds and events, not only raw readings.

The direction of replication is not imposed. A source instance can pass data to many target instances, but the reverse arrangement is equally possible: many local instances replicating to a single upstream instance. That second model is the basis of consolidation, bringing scattered plants, facilities or sites into one picture without building a separate integration for each of them.

A replicated entry carries metadata about its origin: a unique identifier, an exact timestamp and information about the source instance. Data from many sites can therefore be combined into one coherent picture while retaining the full history of where it came from.

One-to-many model — data distribution
ITS instance Origin Replica 1 Replica 2 Replica N Entry metadata IDunique identifier TStimestamp HOSTsource instance
THE FULL STATE
Telemetry, alarms, thresholds and events, not only raw readings.
ONE-TO-MANY MODEL
A single source instance can replicate data to many target instances.
A SHARED MECHANISM
Other platform modules use Replication, Traceability among them.
Many-to-one model — data consolidation
Instance — Plant A Instance — Plant B Instance — Plant N Replication many → one Upstream instance a picture from many sites
MANY TO ONE
Local instances replicate data to an upstream instance, which gathers it in one place.
SOURCES REMAIN DISTINGUISHABLE
Source-instance metadata stays with the entries, so data from individual sites can still be separated.
NO SEPARATE INTEGRATIONS
Consolidation happens through a platform mechanism rather than by building a connection for each site.

Replication is not limited to one kind of data. It covers the platform modules that gather information about the installation, from infrastructure status through measurements and alarms to traceability and production indicators. The scope of replication depends on which modules are running in the source instance.

Scope of replication — data from ITS modules
System monitoring Data monitoring IDC Traceability OEE Replication the modules' full state Target instance data from the source modules
INSTANCE STATUS
System monitoring — service availability, resource load, connection status.
ALARMS AND THRESHOLDS
Data monitoring — events together with the metric, the threshold and the time of occurrence.
SERIES AND AGGREGATES
IDC — readings plus calculated aggregates and sums of increments.
TRACEABILITY
Traceability — the links between batches, products and process parameters.
INDICATORS
OEE — availability, performance, quality and downtime events.
System monitoring

Information about the health of the instance and the infrastructure is replicated: service availability, resource load, connection status. The upstream instance sees the state of distributed installations in one place, without logging in to each site.

Data monitoring

Thresholds, alarms and events are replicated. An alarm raised locally appears in the upstream instance together with its context — the metric, the threshold value and the time of occurrence — so it does not have to be reconstructed from raw data.

IDC

Time-series data is replicated together with the calculated aggregates. The target instance receives not only the readings but also minimum, maximum and mean values, standard deviation and sums of increments, with no need to recalculate them on its own side.

Traceability

Traceability records are replicated, including the links between batches, products and process parameters. Production history from several plants can therefore be brought into a single view while retaining information about where each record was created.

OEE

Availability, performance and quality indicators are replicated along with downtime events. Lines and plants can then be compared on a common scale instead of collating reports prepared separately at each site.

Replication brings a separate question with it: the single point of failure, or SPOF. This is an element of the architecture whose stoppage interrupts either data collection or access to the data. In measurement systems that has a consequence which is hard to make good: a measurement that was not written during the outage does not exist and cannot be reconstructed later.

In an arrangement where one instance collects data from the whole installation, that instance is the point in question. A stopped service, a host failure or a broken link to the site means a gap in the time-series data for the entire duration of the interruption. The risk grows with the number of facilities connected to the same instance.

Replication redistributes that risk. Recording is carried out by a local instance placed close to the source, on an ITS Edge Box at the site or on a separate virtual machine. The data is created and stays on site, so a failure of the upstream instance or of the link does not stop recording. Once the connection returns, the outstanding records are replicated upward and the consolidated picture fills in the period of the interruption.

The single point of failure in a data architecture
Collection at a single point the whole path runs through one instance One instance collects and stores ! an interruption = a gap in the data a measurement not written during an outage cannot be reconstructed Distributed collection with replication recording carried out close to the data source Instance A Instance B Instance N Upstream instance consolidation ! a failure upstream does not stop local recording data filled in once connectivity returns
CENTRALISED ARRANGEMENT
An instance collecting data from the whole installation is the point on which continuity of recording depends.
DISTRIBUTED ARRANGEMENT
Recording happens locally, so an interruption upstream affects the consolidated view rather than the recording itself.
FILLING IN AFTER AN INTERRUPTION
Outstanding entries are replicated once connectivity is regained, with their original timestamps.
WHAT REMAINS TO BE DESIGNED
Local retention, meaning how long an instance holds data without replication, plus power supply and links at the site.
The upstream instance does not drop out of the risk calculation. It remains the element on which the consolidated picture of the data depends: an interruption there means the loss of the overall view, though not the loss of the data itself. That risk can be limited by replicating in the one-to-many model, since there can be more than one target instance and the picture can then be rebuilt from the second copy. Choosing this arrangement is a design decision, taken together with local retention and availability requirements.

Replication in both the one-to-many and many-to-one models.

Consolidation of data from distributed sites in an upstream instance.

A scope covering System monitoring, Data monitoring, IDC, Traceability and OEE.

Origin metadata attached to replicated entries.

Where it proves useful

Replication solves the problem that appears with the second site and every one after it.

It proves useful in distributed organisations where data is created locally but decisions are taken higher up, and where nobody wants to build an integration for each individual facility.

Groups of plants

Several local instances brought into one picture at company level, with source information retained.

Geographically dispersed facilities

Pumping stations, treatment plants, heat substations or measurement points reporting to a central location.

Data continuity

A copy of the state in a second instance, useful during service work and when restoring data.

Contents
06 · Data collection, flow and replication
Platform module

Consolidator — one coherent picture of a distributed installation.

The Consolidator aggregates data from many ITS platform instances in one place. Source instances send their data through the Replication mechanism to the instance acting as consolidator, which combines it while retaining complete information about where it came from.

This makes it possible to build a single, higher-level picture of the process out of many scattered points in the installation — separate machines, lines or sites — accessible from one instance.

Instance A Instance B Instance C Consolidator ITS Standalone
AGGREGATION
Data from many instances combined in one higher-level place.
ORIGIN RETAINED
Each element retains information about the instance it came from.

Consolidation relies on data delivered by replication, so it is subject to the same dependencies as the underlying mechanism, including the single point of failure discussed in the section on the Replication module. An interruption in the consolidating instance suspends updates to the combined view, but does not interrupt the recording carried out in the local instances.

Aggregation of data from many ITS instances in one place.

Retention of information about the origin of the data.

A higher-level picture of a distributed installation.

A basis for reporting at the level of the whole installation.

Where it proves useful

The Consolidator brings order to data that comes from different sources and is not aligned.

It proves useful where the overall picture has to be assembled from pieces that differ in structure, frequency and naming.

Multi-plant reporting

Shared indicators calculated from data across several installations, despite differences in how each one is configured.

Periodic reporting

A single source for monthly and quarterly reports, instead of assembling spreadsheets by hand.

Migrations and expansion

Folding data from a later installation into a picture built earlier.

Contents
07 · Data collection, flow and replication
Platform module

MQTT broker — several brokers within a single instance.

The module makes it possible to create and manage several independent MQTT brokers within a single ITS instance. The brokers operate in isolation from one another, which allows data traffic to be separated by application, by customer or by part of the installation.

Users and their access permissions are managed separately for each broker, as are its listeners, meaning the IP address and port on which the broker accepts incoming connections. A broker can run with or without TLS encryption. This makes it possible to build mutually isolated communication channels within one platform.

Brokers and user accounts are defined for the whole infrastructure from the platform level. That gives full control over the communication passing through the system: it is clear who connects, over which channel and with which permissions.

ITS instance Broker A TLS encryption users: 3 listening on 10.0.0.5 : 8883 Broker B no encryption users: 7 listening on 0.0.0.0 : 1883 Broker N TLS encryption users: — listening —
SEVERAL BROKERS
Independent MQTT brokers created within a single ITS instance.
USERS PER BROKER
Separate accounts and access permissions for each broker.
LISTENERS
The listening IP address and port are set separately for each broker.
ENCRYPTION
A broker can run with or without TLS encryption, depending on what the installation requires.

Several independent brokers within a single instance.

Management of users and permissions per broker.

Listeners — the listening IP address and port are set per broker.

Isolation of data traffic between brokers.

Where it proves useful

The MQTT broker decides who talks to the platform, and over which channel.

It proves useful in installations where devices and systems from different suppliers share one communication infrastructure.

Many sources on one network

Separate brokers and accounts for different areas of the installation, with no mixing of traffic between them.

Security requirements

Control over who connects, through which listener and with which permissions, which matters for an approach aligned with NIS2.

Integrations with suppliers' systems

A dedicated channel for an external supplier, limited to an agreed scope of data.

Contents
08 · Data collection, flow and replication
Platform module

LoRaWAN Network Server (LNS) — a LoRaWAN network server integrated into the platform.

LNS is LoRaWAN infrastructure support built into the ITS platform. It allows wireless solutions to be integrated where running cable is expensive or practically impossible: in production halls, warehouses, technical facilities and installations spread across a large area.

LoRaWAN gateways send data from end devices to LNS, which receives it and passes it on to the data collection layer, from where it reaches the other platform modules exactly as data from any other source does. LoRaWAN is one of the routes by which data enters ITS, alongside wired measurements, controllers and higher-level systems.

The data path — from device to platform
Device Device Device N LoRaWAN gateway ITS platform modules of a single instance LNS LoRaWAN network server IDC data collection
NO ADDITIONAL INFRASTRUCTURE
LoRaWAN device support built into the platform, with no separate network server standing beside it.
LNS AS AN ITS MODULE
The network server and the data collection layer run in the same instance, so there is no external connection between them.
A CONSISTENT DATA PATH
Readings reach IDC in the same way as data from any other source.

Receiving data from a LoRaWAN network does not end with storing it. LNS is integrated with the platform modules, so readings from wireless devices can feed IDC and, through it, Traceability and OEE as well, with no intermediary connection on the customer's side and no separate integration layer to build. The scope depends on which modules are running in the instance.

LNS integration with the ITS modules
LNS LoRaWAN network server IDC time-series data and aggregates Traceability traceability records OEE indicators and downtime ITS platform a shared picture of the data
IDC
Readings from LoRaWAN devices stored as time-series data, with calculated aggregates and sums of increments.
TRACEABILITY
Wireless measurements enter traceability records together with process parameters.
OEE
Data from wireless sensors can contribute to availability, performance and quality indicators.
NO INTERMEDIATE LAYER
Data from LNS reaches the modules inside the platform, so there is no additional connection between systems to build.

LNS can run in two arrangements, depending on the scale and character of the installation. Beyond measurements taken locally, ITS suits a wide range of measurement applications where data is gathered at the edge of the network and then replicated upward. Both variants are shown below.

Edge variant — LORAWAN NETWORK SERVER (LNS) on ITS Edge Box
Device Device Device N LoRaWAN gateway ITS Edge Box LNS locally IDC locally smaller-scale measurement installations Replication to the upstream instance
DATA AT THE EDGE
The network server and data collection run at the site, on the same device.
AUTONOMOUS OPERATION
Readings are stored locally even when the link to the central location is temporarily unavailable.
ONWARD REPLICATION
The gathered data can be replicated to an upstream instance in the many-to-one model.
Central variant — LORAWAN NETWORK SERVER (LNS) on ITS VM
Site A · 12 gateways Site B · 8 gateways Site N · … ITS VM — LNS network management networks counted in thousands of devices ITS modules IDC · Traceability · OEE
MANY SITES
A single instance serves gateways distributed across different facilities and sites.
NETWORK SCALE
An arrangement intended for networks counted in thousands of devices, and in larger deployments in tens of thousands.
DEVICE LIFECYCLE
Registration, keys, gateway assignment and connectivity monitoring, all managed from one place.
LNS on ITS Edge Box

The edge variant. The LoRaWAN network server and IDC run directly on the device at the site, so data is gathered locally even when the link to the central location is temporarily unavailable. It suits smaller-scale measurement installations: a single hall, a technical facility, an isolated measurement point. The gathered data can then be replicated to an upstream instance.

LNS on ITS VM

The central variant. The network server runs in a virtual instance and serves gateways from many sites at once. This arrangement is intended for managing extensive LoRaWAN networks — counted in thousands of devices, and in larger deployments in tens of thousands — along with their lifecycle: registration, keys, gateway assignment and connectivity monitoring.

The figures and configurations shown in the diagrams are examples, not limits. Extending the installation with further devices, gateways and sites is anticipated in this architecture and does not require rebuilding the data collection layer.

LoRaWAN infrastructure support built into the platform.

Management of gateways, end devices and their lifecycle.

Feeding data to the IDC, Traceability and OEE modules with no intermediate layer.

Operation at the network edge or centrally, with onward replication of the data.

Where it proves useful

LNS opens an installation to measurement where cable cannot reach or cannot be justified economically.

It proves useful in existing buildings, across large sites and in places where running cable would mean rebuilding.

Halls and warehouses

Extending the measurement network in a working facility without laying new cable routes.

Smaller-scale installations

The edge variant, with local data collection and later replication to an upstream instance.

Large-scale networks

The central variant, serving gateways from many sites and networks counted in thousands of devices.

Contents
09 · Automation and visualisation
Platform module

Low-code automation and integrations — data flows without programming.

The module allows data flows and integrations between systems to be built visually, from ready-made blocks joined into a diagram. A flow brings together a data source, a transformation, a condition and a destination, and how it works is visible directly in the drawing.

Flows start automatically in response to events from the platform — an alarm recorded by the Data monitoring module or a new entry in Traceability, for instance — and can lead to actions in external systems.

The environment is not a closed configurator. Function blocks are programmed in JavaScript, so custom logic sits alongside the ready-made elements: converting and normalising values, filtering, merging several sources into one record, handling non-standard formats or exposing a custom API. A simple flow is built from blocks alone; where more is needed, code is written in the same place.

This approach makes it possible to build a custom application area within the platform: a set of flows implementing logic specific to a given installation, without standing a separate system next to ITS and without maintaining an extra integration between the two.

How a flow works
Event Condition Action Integration
VISUAL BLOCKS
A flow built from ready-made elements, without writing code.
RESPONSE TO EVENTS
Automatic execution in response to events from other modules.

A broad set of ready-made communication blocks is available. It covers protocols found in industrial automation, standard network protocols, file and database exchange, notifications, and blocks connecting a flow directly to the platform modules — writing to IDC or registering an entry in Traceability takes a single element, with no intermediate layer to build.

Controllers and automation
Modbus TCP
Modbus RTU
S7 / Siemens
MELSEC / Mitsubishi
CODESYS
OPC UA
OPC DA
This is a selection of the available blocks. Beyond those listed, the environment offers components for further protocols found in automation and building infrastructure, among them EtherNet/IP, BACnet, KNX, M-Bus, SNMP and the CAN bus. If a protocol outside this list is running in the installation, in most cases a ready-made block exists for it, or it can be handled with a custom function.
Network, transport and data exchange
MQTT
HTTP / HTTPS
TCP / IP
UDP
WebSocket
CSV / JSON files
SQL databases
Email
ITS platform modules
Write to IDC
Read from IDC
Traceability
OEE
Data monitoring
Replication

The scale of this catalogue is far greater than the lists above suggest. The public component library for this environment holds over five thousand blocks and ready-made flows contributed by the community, from industrial protocols through cloud services and databases to helper tools. The lists above indicate what is most often used in industrial installations, not the limit of what is possible.

A large and active community stands behind the environment. Extensive documentation, forums, courses and thousands of ready-made flows are available online to download and adapt, so solutions to typical problems have usually already been written up. That genuinely shortens the time needed to build a flow and lowers the barrier for someone who does not program day to day.

AI models help here too. Because function blocks are written in JavaScript and the flows themselves are stored as JSON, language models handle the preparation of function code fragments, data transformations or the skeleton of a whole flow well. The resulting code only needs pasting into a block and adjusting to your own metric names, which is one reason why building integrations in this module is within reach of teams without a development background.

Below are several typical areas of use, shown as flow diagrams. Input blocks are marked in cyan, ITS module blocks in indigo, while transformation and action blocks remain neutral.

Acquiring data from a controller
Modbus TCP client / cyclic polling JS function conversion and mapping IDC writing metrics
CYCLIC POLLING
A Modbus TCP client block reads the controller's registers at a set interval.
TRANSFORMATION
A JavaScript function converts raw values into physical units and maps them onto metrics.
WRITING TO IDC
The data goes straight to the data collection module, from where the other modules use it.
Production events into Traceability
OPC UA variable subscription JS function assembling the batch record Traceability traceability record Email notification
OPC UA SUBSCRIPTION
The flow listens for changes in selected variables instead of polling them cyclically.
ASSEMBLING THE RECORD
A function merges several values into a single traceability entry: batch, product, process parameters.
BRANCHING
The same flow writes the record and sends the notification, with no second integration to build.
A custom API over the platform's data
HTTP endpoint request from the customer's system Read from IDC metrics and aggregates JS function assembling the response JSON response HTTPS
A CUSTOM ENDPOINT
The flow exposes an HTTPS address to which the customer's system sends its request.
READING FROM THE PLATFORM
An IDC module block fetches metrics and calculated aggregates for the requested range.
RESPONSE FORMAT
The structure of the response is defined in the function code, so it can be matched to the recipient's requirements.
Responding to a threshold excursion
MQTT in topic subscription Condition threshold crossed Email recipient list HTTP request external system
MQTT INPUT
The flow subscribes to a topic and reacts to a message as soon as it arrives.
CONDITION
A condition block splits the onward path depending on the value or on whether a threshold has been crossed.
TWO ACTIONS AT ONCE
An email notification and a request to an external system both issue from a single event.

The flows shown are examples of arrangements, not a closed list. The order of blocks follows the logic of the process and can be arranged freely, and once built, a flow can be copied and reused in the next installation.

Flows built visually, from ready-made blocks.

Custom logic in JavaScript inside function blocks.

Communication blocks for automation and network protocols.

A direct connection to IDC, Traceability and the other modules.

Where it proves useful

The low-code environment is where the platform adapts to the installation rather than the other way round.

It proves useful where the standard data path is not enough, because the protocol is unusual, the format needs converting, or custom logic is required.

Integrating older installations

Reading from controllers and devices that communicate over protocols outside the platform's standard path.

Exchange with the customer's systems

A custom API over the platform's data, matched to the requirements of the system on the other side.

Automating responses

Notifications, records and requests to external systems, all triggered by a single event.

Contents
10 · Automation and visualisation
Platform module

Dashboard module — data as views and reports.

The dashboard module presents platform data as configurable panels — charts, tables and indicators — matched to the needs of a particular audience: an operator, a production manager or the board.

Panels draw on the platform's shared data source — information gathered by IDC and processed by Data monitoring, Traceability or OEE — and are reachable from a browser, with nothing to install on the user's side.

The module is based on an open-source component installed in the ITS instance and integrated internally with the other platform modules. IoT Solution handles installation, integration and maintenance; building the views is what remains on the customer's side. As a result, the rich catalogue of visualisation types that such a component provides as standard is connected to the installation's data from the outset.

Building a view means choosing a data source, a panel type and a time range, without writing code. More advanced layouts come from composing panels into a single dashboard, adding filters and variables, and setting colour thresholds.

Data in the panels — where it comes from
Data monitoring Traceability OEE Dashboard module Operator panel Production manager panel Management panel
A SHARED DATA SOURCE
Panels use the same data as the other platform modules.
VIEWS FOR DIFFERENT AUDIENCES
Configurable panels matched to the role and needs of the audience.

Below is an overview of the visualisation types available in the module. Which panel to choose depends on the question the view is meant to answer: a trend over time is shown one way, a current state another, and a distribution or the structure of an installation yet another.

Time-series data and trends
Line chart

How a value moves over time. Several metrics on one panel, a shared time axis, area fill, thresholds and event annotations.

Bar chart

Comparing values between time intervals or between assets. The natural way to show consumption in 15-minute or daily windows.

Histogram

The distribution of a measured value. It shows the range in which the process most often runs and how widely the readings are spread.

XY chart

How one quantity depends on another, such as temperature against load or consumption against line output.

Current values and indicators
Current value

A single reading in large format, with a trend behind it and a colour that changes once a threshold is crossed.

Gauge

A value against its operating range, with thresholds marked. Readable from a distance, so it works well on screens in the hall.

Bar gauges

A set of horizontal or vertical bars. Convenient when a dozen or so measurement points need comparing at once.

Trend with thresholds

A trend set against an acceptable band and a threshold line, which shows at a glance when the process leaves its intended range.

Tabulations and detailed data
Table

Data in rows and columns, with sorting, filtering, cell colouring and columns calculated from the others.

Pie chart

The share each component takes of the whole, such as how energy use divides between areas or the make-up of downtime causes.

Log view

A stream of text entries with filtering and search. Useful for events, messages and text data.

Heatmap

Values as colour intensity across a grid of time. It reveals recurring patterns that a line chart does not show.

States, space and diagrams
State timeline

Bands showing which state an asset was in across successive intervals: running, stopped, failed, changeover.

Map

Measurement points placed on a geographic background, with values and thresholds. Useful for geographically dispersed installations.

Custom diagram

Your own drawing of the installation with values embedded at chosen points: a diagram of a substation, a line, a switchboard or a tank.

Node graph

Assets and the relations between them as a graph. It makes the structure of an installation and the dependencies within it easier to show.

Panels are composed into dashboards, and those are grouped into folders and assigned to roles. A view can be narrowed with variables — selecting a line, an area, a device or a metric group — without creating a separate dashboard for each case. The time range is shared across the whole view, with predefined intervals ready to use and the option of refreshing in the background. Dashboards can be shown full screen on monitors in the hall, exported to a file and embedded in other tools.

A broad catalogue of panel types available as standard in the module.

Building views from a browser, without writing code.

Variables, filters and colour thresholds shared across a whole dashboard.

Views matched to the role: operator, manager, board.

Where it proves useful

The dashboard module is what the consumer of the data sees day to day.

It proves useful wherever the same data has to reach people with different needs, from the operator at the machine to the board.

Screens on the shop floor

Views readable from a distance, shown full screen on monitors in the hall.

Supervising the indicators

Periodic tabulations and comparisons between areas for production and maintenance management.

Distributed installations

Measurement points placed on a map or on your own diagram of the installation.

Contents
11 · Analytical modules
Platform module

Traceability — the full history of the process, set within the structure of the installation.

Traceability records data tied to specific objects in the installation: products, their sub-assemblies, measurement points, test results and so on. Object types are defined, along with the individual objects of each type, and the module records the values assigned to them together with an exact timestamp.

For more complex uses the module offers Custom Data Blocks: the ability to record a multi-value set of data of differing types under one shared timestamp, shaped to the structure of a given installation. A whole set of measurements gathered while a particular part was being made — a temperature trace, a pressure trace or that of another process parameter — can therefore be attached to it. The traceability history then holds not only an information record with property values, but also the corresponding body of measurement data. Traceability uses the platform's Replication mechanism, so the full history of the process is available on several ITS instances at once, with information about the origin of the entries retained.

The descriptive structure is built on object properties, prop for short. The object type determines which properties objects of that kind have: their names and data types, for instance text for a serial number, a number for a measurement result, a boolean for a test outcome. An individual object holds the values of those properties.

A property can be written once, like a serial number assigned when the object is created, or recorded repeatedly when the value changes at successive stages of the process. In both cases the record carries an exact timestamp, so not only the object's current state is visible but also the path by which it got there.

The descriptive structure — type, properties, values
Object type defines the properties serial no. batch no. variant test result Object property values SN-10482 LOT A-118 DN50/PN16 OK Record information record timestamp prop values links operator Custom Data Block set of measurements temperature pressure sample time data series
OBJECT TYPE
Defines the set of properties shared by objects of that kind: their names and data types.
PROPERTIES (PROP)
The individual fields describing an object: serial number, batch number, build variant, test result.
OBJECT
An individual item with property values assigned to it.
RECORD
An information record with property values, a timestamp and links to other records.
CUSTOM DATA BLOCK
A set of measurements gathered during manufacture is attached to the record: a temperature trace, a pressure trace or that of another process parameter.
The traceability register and replication of records
Object type Properties (prop) Object Custom Data Block Traceability register + replication Instance · Replica 1 Instance · Replica 2 Perspectives
OBJECT STRUCTURE
Object type → object → data, mirroring the real installation.
CUSTOM DATA BLOCKS
Complex, multi-value sets of data under a single timestamp.
REPLICATION AND ACCESS
The full history available on several instances, presented through perspectives.

Traceability rarely stops at one workstation. In practice the record is created where the operation happens — at a production cell, on a line, at a particular site — while the overall picture is needed a level up. Traceability in ITS is built so that these two levels can be joined without moving data by hand.

At workstation level the recording is done by a local instance, most often on an ITS Edge Box. The data is created and stays at the place of production, so recording works even when the link to the central location is temporarily unavailable. The records are then replicated upward, to an upstream instance such as an ITS VM, where the Consolidator module brings them into one picture. Origin metadata stays with the entries, so at system level it is still clear which cell and which instance each record came from.

The traceability network — from cell to system level
Cell A elbow ITS Edge Box local trace Cell B tee ITS Edge Box local trace Cell C assembly ITS Edge Box local trace Replication trace replication ITS VM consolidation System trace genealogy
RECORDING AT THE OPERATION
The trace is created at the workstation, in a local instance running on an ITS Edge Box.
AUTONOMOUS OPERATION
Recording works reliably even during a temporary loss of the link to the central location.
REPLICATION
Records are passed upward together with source-instance metadata and a timestamp.
CONSOLIDATION
The upstream instance brings records from the cells into a single system trace, with origin retained.

The second dimension of this structure is product genealogy. A traceability record is not a flat list of events; it can refer to other records. When an assembled product is made from two components, the new trace holds references to the records of the parts it was built from.

An example follows. An elbow is produced at one cell and its trace is created there; a tee is produced at another with a record of its own. Both arrive at the assembly station, where a new product number is created along with a new record, and that record contains references to both component records. From the finished product this leads back to the specific batches of components and the conditions under which they were made. From the component's side, it leads forward to the products in which it was used.

This structure has as many levels as needed. An assembled product can itself be a component of the next product, and its trace then becomes a subordinate record one level up. Traceability therefore runs from a single component all the way to a shipping batch, even when successive stages take place at different cells or different sites.

Product genealogy — joining component records
Elbow PN-4021 · LOT A-118 trace — Cell A Tee PN-4088 · LOT B-092 trace — Cell B Assembly Cell C New product trace PN-7750 · LOT C-034 contains LOT A-118 contains LOT B-092
COMPONENT RECORDS
Components have records of their own, created at the cells where they were made.
THE JOINING OPERATION
Assembly creates a new product number and a new traceability record.
REFERENCES TO THE PARTS
The new trace holds pointers to the records of the components the product was made from.
IN BOTH DIRECTIONS
From the product to the component batches, and from a component to the products it was used in.

Object types with a definition of their properties (prop).

Property values stored with a timestamp.

Custom Data Blocks for complex sets of data.

The full history available on several instances thanks to Replication.

Where it proves useful

Traceability answers the question of what exactly happened with a particular batch or a particular product.

It proves useful where the history of the process carries formal weight: in complaints, in audits and against customer requirements.

Production traceability

Linking a batch and a product to the process parameters under which it was made.

Audits and complaints

Reconstructing the conditions of a particular day and shift, without trawling through raw data.

Multi-stage processes

Recording complex sets of data from successive stages under one shared identifier.

Contents
12 · Analytical modules
Platform module

OEE — machine utilisation effectiveness in a single indicator.

OEE calculates the overall equipment effectiveness indicator from data recorded by the platform: running time, downtime and production results tied to specific assets.

The final figure is broken down into three components — availability, performance and quality — which makes it possible to pinpoint which part of the process has the greatest bearing on the result, for a chosen period and a chosen asset.

Running time Downtime Production results OEE engine Availability Performance Quality
THREE COMPONENTS
Availability, performance and quality — calculated separately and combined into the final figure.
TIED TO AN ASSET
The indicator is calculated for a specific machine, line or production shift.

Automatic calculation of the OEE indicator.

A breakdown into availability, performance and quality.

A history of the indicators over a chosen period.

A link to specific assets and production shifts.

Where it proves useful

OEE turns scattered information about machine operation into an indicator that can actually be compared.

It proves useful where you need to know not only how much was produced, but also how much capacity went unused, and why.

Supervision of production lines

Availability, performance and quality calculated from installation data rather than from manual spreadsheets.

Downtime analysis

Downtime events with their duration and cause, as a basis for corrective action.

Comparisons between plants

A common scale for lines and assets, even when the data comes from separate instances.

Contents
13 · System environment and onward integration
A platform capability

ITS is the starting point, not the endpoint.

This is not another module of the platform but a property of it. Data gathered by ITS is not locked inside one system; the platform makes it available onward, to tools already running at the plant or elsewhere in the organisation.

Both the raw readings and what the platform has made of them are available: time-series data, calculated aggregates, traceability records, OEE indicators, alarms and information about the state of the installation. The exchange channel is an API, a database connection, MQTT or OPC UA, chosen to suit the IT environment on the other side.

ITS platform ITS Edge · VM · Cloud raw data time-series data aggregates traceability OEE alarms thresholds system status API · SQL · MQTT · OPC UA SCADA MES ERP SQL / databases MS Excel Power BI
WHAT IS MADE AVAILABLE
Raw readings, time-series data, aggregates, traceability records, OEE indicators, alarms and thresholds, and system status.
EXCHANGE CHANNELS
An API, a database connection, MQTT or OPC UA, chosen to match what the receiving system can handle.
NO NEED TO REPLACE TOOLS
The systems running at the plant stay where they are and receive data in a format they can accept.

The set above is an example, not a closed list. ITS also integrates with other third-party systems, chosen to suit the particular IT environment on the customer's side.

Security of integration connections

Making data available externally does not come at the cost of security. Access to an ITS instance's data is encrypted, covering both the transmission and the authentication itself. The safeguards are designed around the requirements of the NIS2 directive: network segmentation, access control and local data processing.

Permissions rest on two elements: accounts with passwords, and keys and certificates. The account settles who is connecting and which range of data they may reach. The key and certificate secure the connection itself and confirm the identity of the system at the other end; without them, a correct password is not enough to gain access.

Certificates are issued by the ITS instance itself, and access goes to the system the administrator generated them for. Permissions are therefore tied to a specific recipient rather than to a general channel, so revoking a certificate cuts off one connection without disturbing the others.

This has a concrete consequence on the far side of the integration: the tool receiving the data must be able to handle both elements, the login credentials and the certificate and key issued by the instance. The certificate has to be imported, stored and presented when the connection is established.

This is worth checking while the integration is still being planned. SCADA, MES and ERP systems usually have such support, but older tools and simple connectors are sometimes limited to password authentication alone, with no way to load a certificate. The answer then is to interpose a flow in the low-code module, which accepts the certificate-secured connection and passes the data on in a form the target tool can accept.

ITS instance accounts, keys and certificates account + certificate channel encrypted in both directions External system must support certificates
ACCOUNT AND CERTIFICATE
Access requires an account with a password and a certificate issued by the instance, both at once.
ENCRYPTION IN BOTH DIRECTIONS
Transmission and authentication are protected along the whole path between the platform and the receiving system.
A REQUIREMENT ON THE TOOL'S SIDE
The external system must support login credentials and the import of a certificate and key; that is the condition for connecting.
WHEN THE TOOL CANNOT
A flow in the low-code module takes the intermediary role, adapting the form of access to what the recipient can manage.
Encryption of transmission and access
Data protected both in transit and when the platform is accessed.
Accounts, keys and certificates
Access granted on the basis of an account with a password and a certificate issued by the instance administrator.
Architecture supporting NIS2 requirements
Local processing and network segmentation make risk-management requirements easier to meet.
Where it proves useful

Integration matters where systems are already running and there is no reason to replace them.

ITS then comes in as a layer for collecting and organising data, while the tools the customer knows stay where they were, with the difference that they now receive data they did not have before.

Existing higher-level systems

SCADA and MES receive measurements from areas that were previously out of their reach.

Reporting and analytics

BI tools and spreadsheets work on data and aggregates calculated on the platform's side.

Management systems

An ERP fed with production data and utility consumption without manual re-entry.

Contents