Research libraryEdge to Dashboard
Chapter 05 of 14 · Part II · Draft web edition
The safest digital retrofit begins by observing equipment through its documented interfaces and proving that acquisition does not alter control timing, protective functions or maintainability.
The cloth is woven from this chapter's 5 exhibits: each weft is one exhibit's own data, normalised; each warp group is a section. The probe reads the exhibit's own value where it crosses. Procedural visualisation, not a measurement.
Read-out
Derived placement from S09 (Modbus request/reply polling), S10 (IO-Link cyclic and on-request separation), S11 (PROFINET deterministic control) and S25 (RFID denim WIP tracking). Horizontal axis scales timing determinism and control sensitivity (1 = slow polling or asynchronous read, 10 = sub-microsecond isochronous control). Vertical axis scales interface diagnostic and semantic structure (1 = raw address or tag ID, 10 = structured cyclic data with separate diagnostics).
Unit: derived engineering placement (1 to 10 scale). Status: derived. Sources: S09, S10, S11, S25.
Overture · 1 min
A brownfield textile or garment factory cannot afford a digital retrofit that degrades the machines it is meant to measure.[S17] In GFT's reference architecture, every machine interface begins as a read-only, electrically isolated and timing-bounded observation path that leaves local closed-loop control, protective safety and maintenance access intact.[S17][S23] Cameroon's inherited cotton-to-garment baseline, where approximately 95 percent of cotton fibre is exported raw and about 5 percent is processed locally against a national target of 50 percent local processing by 2030, means domestic mills and garment lines operate under tight capital and maintenance constraints.[R06][R07] Third-party reporting from July 2023 on the legacy public manufacturer CICAM illustrates the stakes on existing shop floors: reported capacity utilisation stood at 33.7 percent in Garoua, 48.9 percent at CICAM 1 and 10.83 percent at CICAM 2, with underutilisation estimated to have cost about CFAF 2 billion in 2020.[R12] When a plant is working to recover availability across looms, dyeing vats, stenters, cutting tables and sewing lines, an unverified gateway that stalls a controller scan, corrupts a serial bus or bypasses an interlock creates immediate production loss.[S09][S17][S23] This chapter specifies the method for auditing brownfield equipment, polling serial and Ethernet controllers, separating cyclic sensor telemetry from maintenance dialogue, isolating deterministic motion networks, validating secondary radio and optical sensors, and gating every connection on security and safety evidence.[S09][S10][S11][S19][S31]
5.1
Exhibit 187 paragraphs step it
Read-out
| Sewing bench | Clutch or servo motor; no open PLC port | Added optical stitch sensor or RFID bundle reader | Edge node counts pulses; distinguish power-on from active sewing | 24 V DC isolated tap; radio spectrum check; read-only |
|---|---|---|---|---|
| Fabric spreading and cutting | OEM motion controller with Ethernet and serial port | PLC knife-active state and cut-cycle completion register | Verify whether cycle counter resets at shift change or power loss | Do not poll motion bus; read via secondary port only |
| Dyeing and finishing stenter | Modular PLC with RS-485 Modbus RTU and local HMI | Exhaust temperature, fabric speed and batch state registers | Map function codes 0x03 and 0x04; log exception responses | Galvanic isolator on RS-485; keep burner safety independent |
| Rotary air compressor | Packaged OEM controller with Modbus TCP gateway option | Package kW, discharge pressure and loaded-hours counter | Separate PowerOnDuration from loaded OperationDuration | Conduit firewall rule blocking all write function codes |
| Process water meter | Pulse output or IO-Link smart flow transducer | Volumetric pulse totaliser and cyclic flow rate | Non-resettable lifetime totaliser; retain edge store during outage | Separate cyclic process data from on-request parameter writes |
Illustrative audit template for five representative textile and garment factory asset classes, derived from Modbus specification rules (S09), IO-Link interface separation (S10), NIST OT security guidance (S17), wireless sensor integrity constraints (S31) and OPC 40001-1 counter definitions (S0501). No vendor compatibility is assumed.
Unit: audit fields by asset class. Status: illustrative. Sources: S09, S10, S17, S31, S0501. Illustrative figures are teaching examples, not measured factory results.
Procurement mistakes in factory digitalisation often begin when an integration team orders a uniform batch of edge gateways before opening an electrical cabinet on the floor.[S17][S30] Survey evidence from West African manufacturing shows why an architecture cannot assume native digital readiness across an existing fleet: in the United Nations Industrial Development Organization 2020 report, almost 70 percent of surveyed manufacturing firms in Ghana fell into the analogue category as of the 2019 benchmark.[S35] That Ghanaian figure is an international comparator rather than a Cameroon survey, yet it reflects the physical reality that GFT's Cameroon programme addresses: a working plant combines electromechanical relays, cam-driven looms, older programmable logic controllers with serial ports, skid-mounted utilities, and manual benches with no controller at all.[S09][S17][S35]
Before specifying any adapter or sensor kit, GFT requires a machine-by-machine audit documenting physical electrical interfaces and logical register semantics.[S01][S09][S17] Within the ISA-95 and IEC 62264 hierarchy, this audit maps each work unit at Level 0 and Level 1 to the operational events required at Level 3, ensuring engineers do not extract diagnostic tags that serve no decision.[S01][S02][S08] The walkdown inspects cabinet drawings, backplanes, terminal blocks, firmware revisions and maintenance procedures, recording nameplate and interface metadata in a structure compatible with the Asset Administration Shell metamodel.[S07][S17]
The audit worksheet in Exhibit 18 shows why a bill of materials cannot be finalised from an asset register alone.[S09][S17] Each row forces engineers to verify the controller and port, the signal representing a cycle or flow, the counter reset rule, the isolation boundary, and any vendor lock.[S09][S10][S17][S0501] Because Exhibit 18 is an illustrative template rather than a survey of a specific Cameroonian mill, it cannot establish which controller brands exist on a site; those facts exist only after the walkdown is signed off by the maintenance lead.[S17][S30]
A frequent failure in brownfield projects occurs when an integrator binds an undocumented integer register labelled "hours" or "pieces" directly to an availability or throughput tile.[S08][S09] The OPC UA for Machinery companion specification (OPC 40001-1, Version 1.04.1) makes the required distinction explicit: PowerOnDuration records the duration an item has been powered with its processor running, OperationDuration records the duration it has been powered and performing an activity, and OperationCycleCounter counts transitions into active operation.[S0501] All three lifetime counters must only increase and must not reset on restart.[S0501]
In Cameroon, where the World Bank 2024 Enterprise Survey found that 93.3 percent of surveyed formal private firms experienced electrical outages with a typical-month frequency of 10.4 outages, counter behaviour across power loss is a primary design constraint.[S32][S0501] Many older controllers store shift counters in volatile memory that resets when the breaker drops, roll a 16-bit integer over at 65,535 cycles, or let an operator zero the counter mid-shift.[S09][S17][S32] The audit tests every candidate counter through a simulated power cycle, shift reset and emergency stop, recording whether the edge node must compute positive deltas from a lifetime register or maintain its own non-volatile accumulator.[S29][S32][S0501]
Furthermore, a raw machine state at Level 1 is rarely identical to a manufacturing operations time element at Level 3.[S02][S08] ISO 22400-2 defines manufacturing key performance indicators through explicit formulas, time and quantity elements, time behaviour and units.[S08] Annex C.2 of OPC 40001-1 shows that setting ISO 22400-2 time elements such as Actual Delay Time (ADET), Actual Down Time (ADOT) and Actual Preventive Maintenance Time (APMT) requires combining local MachineryItemState (Executing, NotExecuting, OutOfService, NotAvailable) and MachineryOperationMode (Processing, Setup, Maintenance) with a Higher Level System Condition State (HLS-ConditionState) indicating whether a production order is registered or whether the operation calendar schedules busy time.[S08][S0502] A dyeing vat in NotExecuting state is experiencing unplanned delay (ADET) if an order is active, but sits in planned idle time if no order is scheduled.[S08][S0502] The audit records which state bits the controller asserts truthfully on its own, and assigns order and calendar joins to the operations layer.[S01][S02][S0502]
5.4
Read-out
Illustrative transformation sequence showing how a physical controller signal is normalised, transported with session state, contextualised into a production event, exported as an EPCIS visibility event and aggregated into an ISO 22400 KPI (S04, S08, S15, S40).
Unit: . Status: illustrative. Sources: S04, S08, S15, S40. Illustrative figures are teaching examples, not measured factory results.
Read this exhibit in its chapter ↗5.4 · Introduction
When brownfield machines, chillers, boilers, compressors or sub-meters expose a digital interface, it is frequently a serial RS-485 or Ethernet port speaking MODBUS.
Exhibit 34, chapter 08: 1. Controller state (PLC or IO-Link)
5.5 · Read-only function codes and explicit register maps prevent unintended control writes
Because MODBUS function codes share the same framing for reading and writing, a misconfigured gateway or permissive firewall rule can turn a monitoring node into an unauthorised command source.
Exhibit 34, chapter 08: 1. Controller state (PLC or IO-Link)
5.6 · Polling schedules must respect serial timing, scan cycles and exception codes
On a two-wire RS-485 trunk connecting meters, temperature controllers or legacy programmable logic controllers, only one transaction can occupy the medium at any instant.
Exhibit 34, chapter 08: 2. OPC UA object (Type, unit, quality)
5.4 · the bodyThe film above follows these sub-steps.
When brownfield machines, chillers, boilers, compressors or sub-meters expose a digital interface, it is frequently a serial RS-485 or Ethernet port speaking MODBUS.[S09][S29] The MODBUS Application Protocol Specification (V1.1b3) defines MODBUS as a request/reply protocol offering services specified by function codes.[S09] Consequently, a MODBUS server inside a controller or meter does not spontaneously stream events when a seam finishes or a valve closes; the edge gateway acts as a client that transmits an explicit request frame, waits for the reply or exception frame, and attaches a receipt timestamp and quality state.[S09][S13][S40]
The MODBUS Application Protocol Specification (V1.1b3) defines MODBUS as a request/reply protocol offering services…
S09
Because MODBUS function codes share the same framing for reading and writing, a misconfigured gateway or permissive firewall rule can turn a monitoring node into an unauthorised command source.[S09][S17] Function codes 0x01 (Read Coils), 0x02 (Read Discrete Inputs), 0x03 (Read Holding Registers) and 0x04 (Read Input Registers) perform reads, whereas 0x05, 0x06, 0x0F and 0x10 modify controller coils or registers.[S09] Writing to an incorrect holding register on a stenter or sizing machine can alter temperature setpoints, speed ratios or tension limits without an operator prompt.[S09][S17][S23]
GFT enforces a read-only capture rule at two layers.[S09][S17][S19] First, the gateway driver profile permits only read function codes (0x01 through 0x04), with write functions disabled.[S09][S17] Second, where MODBUS TCP traverses a conduit under IEC 62443-3-2, the firewall inspects the MODBUS header and drops any frame carrying a write or reset function code.[S09][S19] Even when a controller stores read-only values inside holding registers (0x03), the register map must document every contiguous block, data type, endianness, scale, unit and valid range so the gateway never polls unmapped addresses.[S09][S17]
On a two-wire RS-485 trunk connecting meters, temperature controllers or legacy programmable logic controllers, only one transaction can occupy the medium at any instant.[S09] Polling dozens of non-contiguous registers every 50 milliseconds illustrative interval across multiple slaves at 9,600 or 19,200 bits per second saturates the line, multiplies timeouts, and forces the legacy microprocessor to spend excessive interrupt time servicing serial requests rather than executing its control scan.[S09][S17]
The MODBUS protocol specifies exception responses when a server cannot fulfil a request, returning an exception code such as 0x01 (Illegal Function), 0x02 (Illegal Data Address), 0x03 (Illegal Data Value), 0x04 (Server Device Failure), 0x05 (Acknowledge) or 0x06 (Server Device Busy).[S09] Firing immediate retries on a timeout or 0x06 Server Device Busy response worsens congestion while a controller executes a recipe transition.[S09][S17] GFT requires every MODBUS adapter to classify exceptions explicitly: an Illegal Data Address (0x02) halts polling of that register and raises an alert; a Server Device Busy (0x06) or timeout triggers exponential back-off; and when retries fail, the edge node marks the metric as stale in its local store and Sparkplug payload rather than repeating the last valid reading.[S09][S31][S40]
5.7
Where a brownfield machine lacks a controller register for a required variable, or where tapping into an obsolete programmable logic controller carries unacceptable risk, the cleanest option is to mount secondary smart sensors on the frame and wire them to an independent edge master.[S10][S17] Common retrofit points include photoelectric sensors counting fabric folds or cut bundles, pressure transducers tracking dye-bath or rinse-tank levels, optical tachometers measuring roller speed, and thermal flow sensors monitoring compressed-air or water use.[S27][S29] When those sensors use analogue 4 to 20 milliampere loops or discrete 24 volt switching wires, the factory obtains a raw signal but cannot remotely verify whether a lens is fouled with cotton lint or whether someone altered the switching threshold on the housing.[S10][S26]
The IO-Link Interface and System Specification (Version 1.1.4) solves this visibility gap through an explicit division in its communication stack: the Process Data Exchange unit cyclically transmits and receives Process Data without interference from the On-request Data (parameters, commands and Events).[S10] Over a standard three-wire unshielded sensor cable connected point-to-point between the sensor and an IO-Link master port, each cycle allocates a deterministic sub-slot for cyclic process data and a separate, non-interfering fragment for acyclic on-request service messages.[S10]
…Interface and System Specification (Version 1.1.4) solves this visibility gap through an explicit division…
S10
This guarantee has two practical consequences for GFT's architecture.[S10][S17] First, production telemetry (such as fabric-presence state, nip-roll pressure or water level) arrives at the IO-Link master on a predictable millisecond cycle regardless of whether an engineer or diagnostic service is simultaneously querying device health or contamination status.[S10][S27] Second, because IO-Link is a point-to-point link between each device and its master port rather than a shared serial bus, a severed cable or failed transducer on one stitch-station sensor or tank probe isolates the fault to that single port without corrupting neighbouring sensors.[S10][S17]
While IO-Link's on-request channel exposes device identification, teaching thresholds, operating hours and lens-fouling events, that same acyclic channel also supports writing new parameters and commands to the sensor.[S10] Unrestricted acyclic parameter writes from the operations network could allow an unauthorised script or accidental push to invert switching logic, change a hysteresis band or trigger a false calibration command during production.[S10][S17][S24]
GFT binds IO-Link's separation to the information-security management discipline of ISO/IEC 27001 and the operational-technology guidance of NIST SP 800-82 Rev. 3.[S10][S17][S24] Cyclic process data and read-only diagnostic events flow continuously from the IO-Link master's secondary Ethernet interface into the edge acquisition service, carrying sensor identity and port quality flags into the event envelope.[S10][S40] Conversely, on-request parameter writes and device-replacement configuration downloads are restricted to authenticated maintenance sessions under change control, logging operator identity, old value, new value and timestamp.[S10][S20][S24] Factory acceptance tests verify both sides of the contract: intensive acyclic diagnostic reads during a simulated run must cause zero dropped cyclic samples, and an unauthenticated parameter write from the monitoring conduit must be rejected.[S10][S17][S19]
Interlude · the cloth half-woven
Woven: sections 5.0 to 5.7Still to weave: 5.10 to 5.16
Read-out
GFT arithmetic from World Bank Enterprise Surveys Cameroon 2024 Country Profile (S32). Outage-incidence gap against Sub-Saharan Africa: 93.3 percent minus 69.7 percent equals 23.6 percentage points. Outage-incidence gap against lower-middle-income economies: 93.3 percent minus 55.0 percent equals 38.3 percentage points. Monthly frequency excess: 10.4 minus 6.9 equals 3.5 outages per typical month. Compares all surveyed firms, not textile factories.
Unit: percentage points and monthly events. Status: derived. Sources: S32.
Read this exhibit in its chapter ↗5.10
Modernised sections of a brownfield mill, such as automated bale-opening lines, multi-drive spinning frames, air-jet looms, rotary printers and computer-controlled cutters, frequently use industrial Ethernet fieldbuses inside the machine enclosure.[S11][S17] Because these networks use familiar RJ45 or M12 connectors and Category 5e or Category 6 cabling, IT-led teams sometimes assume they can plug a gateway directly into a spare port on the machine's internal switch to scrape tags or stream video.[S11][S17][S19] That assumption confuses physical connector compatibility with real-time network behaviour and violates both control determinism and zone segmentation.[S11][S19]
Because these networks use familiar RJ45 or M12 connectors and Category 5e or Category 6 cabling
S11, S17, S19
Read-out
| PROFINET (Isochronous Real-Time) | Jitter of less than 1 microsecond | High-precision closed-loop control tasks with deterministic and isochronous transmission of time-critical process data | Keep inside the certified machine control network; never bridge raw analytics or IT polling into the IRT domain |
|---|---|---|---|
| IEEE 1588-2019 (Precision Time Protocol) | Sub-microsecond synchronisation accuracy and precision | Networked measurement and control systems supporting the protocol with minimal network and local computing resources | Synchronise multi-axis or cross-device edge capture only where sub-millisecond event correlation is required |
| NTPv4 (IETF RFC 5905) | Potential accuracy to the tens of microseconds | Modern workstations and fast local area networks using NTPv4 mitigation and discipline algorithms | Default clock alignment for edge gateways, local historians, MQTT brokers and operational dashboards |
Sourced comparison of published timing capabilities from the PROFINET System Description (S11), IEEE 1588-2019 (S12) and IETF RFC 5905 for NTPv4 (S13). Each figure retains the specific technical conditions stated by its standard.
Unit: synchronisation and jitter capabilities by standard. Status: sourced. Sources: S11, S12, S13.
The comparison in Exhibit 19 explains why GFT treats deterministic machine networks as protected control domains.[S11][S12][S13] According to the PROFIBUS Nutzerorganisation system description for PROFINET, deterministic and isochronous transmission of time-critical process data with a jitter of less than 1 microsecond is possible for high-precision closed-loop control tasks.[S11] Achieving sub-microsecond jitter across synchronised drives requires reserved bandwidth and switch scheduling.[S11] Similarly, IEEE 1588-2019 specifies that Precision Time Protocol (PTP) supports sub-microsecond synchronisation accuracy and precision with minimal network and computing resources, whereas IETF RFC 5905 states that Network Time Protocol Version 4 (NTPv4) extends potential accuracy to the tens of microseconds with modern workstations and fast local area networks.[S12][S13]
…a jitter of less than 1 microsecond is possible for high-precision closed-loop control tasks
S11
The sourced figures in Exhibit 19 establish upper bounds under stated conditions, not automatic guarantees on an arbitrary LAN.[S11][S12][S13] Injecting bursty TCP/IP traffic, broadcast discovery packets, large OPC UA browse requests or video streams into an unsegmented machine network can exhaust switch buffers or disturb cyclic communication.[S04][S11][S17] If a sizing machine or cutter suffers a communication watchdog timeout because an external gateway flooded its network card, the machine trips to an immediate stop.[S11][S17][S23]
To capture operational evidence from deterministic networks without disturbing closed-loop timing, GFT enforces a boundary between the internal fieldbus and the edge acquisition zone.[S11][S17][S19] First, where the controller provides a separate communication processor or secondary Ethernet port isolated from the fieldbus backplane, it exposes a read-only OPC UA server or data-block mirror on that secondary port.[S04][S14][S17] Because OPC UA is layered to isolate its core design from computing technology and network transport, the machine can expose a structured object model on the secondary port while keeping drive exchange private on the machine network.[S04][S11][S0501]
Second, where a PROFINET network lacks a spare port, a certified network coupler copies a bounded array of cyclic and acyclic bytes between the machine network and the edge network without bridging Ethernet frames or broadcasts.[S11][S19] Third, where hardware-enforced one-way extraction is warranted, NIST SP 800-82 Rev. 3 defines a unidirectional gateway as hardware and software in which the hardware permits data to flow from one network to another but is physically unable to send any information back to the source network, while software replicates databases and emulates protocol servers.[S17][S0503] Whichever boundary is selected, W3C's Web of Things Architecture 1.1 captures the pattern: an industrial edge device collects selected controller data and makes it available to downstream monitoring or preventive-maintenance services.[S14]
The derived placement in Exhibit 20 synthesises why GFT rejects single-protocol mandates on brownfield floors.[S09][S10][S11][S25] MODBUS (S09) sits in the lower-left quadrant because it relies on client polling of raw register addresses; RFID capture (S25) operates as an asynchronous identification event at discrete read points; IO-Link (S10) provides cyclic process data alongside separated on-request diagnostics; and PROFINET Isochronous Real-Time (S11) occupies the high-determinism upper-right quadrant for closed-loop motion control.[S09][S10][S11][S25] Because the coordinates on the 0 to 10 axes in Exhibit 20 are GFT's derived ordinal translation of those four sources rather than laboratory measurements, the chart guides role assignment and is not a throughput benchmark.[S09][S10][S11][S25]
Because the coordinates on the 0 to 10 axes in Exhibit 20 are GFT’s…
S09, S10, S11, S25
5.13
Related · chapter 097 paragraphs step it
Read-out
Illustrative GFT historian store architecture informed by ISO 22400 KPI structure (S08), EPCIS visibility event sharing (S15), ISO/IEC 27001 change control (S24) and edge database persistence (S29).
Unit: . Status: illustrative. Sources: S08, S15, S24, S29. Illustrative figures are teaching examples, not measured factory results.
Read this exhibit in its chapter ↗Across spinning, weaving, wet processing and garment assembly, many legacy stations have no controller port from which to extract counts or batch identity.[S25][S35] On these stations, capture requires adding secondary hardware: radio-frequency identification (RFID) readers at bundle transfer points, optical or inductive sensors on shafts, current transformers on motor leads, or water-level probes on vats.[S25][S27][S29] Adding an external sensor avoids touching legacy firmware, but introduces physical, radio and process-interpretation failure modes that must be validated before use.[S25][S31]
An industrial sewing floor or dyehouse is a harsh electromagnetic environment filled with variable-frequency drives, contactor arcs, humid bales, metal tables and steel vats.[S25][S31] A review of IoT sensing applications and challenges using RFID and wireless sensor networks highlights that time synchronisation between nodes and spectrum-sharing techniques are essential to protect data integrity and avoid uncertainty in sensed data without exhausting radio resources.[S31]
Deploying ultra-high-frequency (UHF) RFID readers, Wi-Fi tablets and wireless sensor nodes across the same bay without a radio plan causes co-channel interference, multipath reflections and reader collisions.[S31] Furthermore, if wireless nodes or RFID gateways operate with unsynchronised clocks that drift by seconds or minutes, the event sequence can report that a bundle arrived at a downstream sewing station before departing the cutting table.[S13][S15][S31] GFT requires every wireless or RFID retrofit to enforce clock synchronisation via NTPv4 (or IEEE 1588 PTP where tighter correlation is required) and to publish diagnostic metrics for signal strength, retries, channel occupancy and synchronisation state alongside sensed values.[S12][S13][S31][S40]
In garment and denim manufacturing, RFID is widely proposed to bridge the visibility gap between cutting rooms and sewing benches.[S25][S28] Published research on an RFID-based tracking system for denim production found that radio-frequency identification could support the tracking and tracing of work in process in denim processes, while an RFID-enabled manufacturing execution study describes systematic shop-floor deployment to track objects and collect real-time production data.[S25][S28] Those studies confirm that RFID is a viable capture mechanism for textile work in process, without implying that bolting an antenna to a bench yields accurate completion counts automatically.[S25][S28]
Three ambiguities must be engineered out of every RFID or optical read point before its output populates an EPCIS visibility event or an ISO 22400 throughput calculation.[S08][S15][S25] First is stray and cross-lane reading: a UHF reader with excessive power at Workstation A will read bundles stacked at Workstation B two metres away, creating phantom arrivals.[S25][S31] Second is metal and liquid detuning: wet denim, zippers, rivets, steel presser feet and metal trolleys detune antennas and shadow tags unless tag placement, polarisation and read-zone geometry are tested with the actual product mix.[S25][S31] Third is semantic conflation between presence and completion: an RFID tag entering a reader's field proves only that the bundle was within radio range at that timestamp, not that the operator completed the sewing operation or passed quality checks.[S15][S25]
To resolve these ambiguities, GFT separates raw sensor acquisition from business-event assertion.[S15][S31] At the physical layer, engineers tune reader power, use near-field or shielded antennas for bench reads, and add chutes or operator trigger buttons so a read occurs only at a deliberate handoff.[S25][S31] At the edge software layer, a state-machine filter deduplicates repeated reads within a dwell window, flags out-of-route appearances as exceptions, and emits an EPCIS event record only when the read satisfies the station's process rule.[S15][S25][S28]
5.16
Operations and Historian Zone (Level 3)
Operations and Historian Zone (Level 3): MQTT/Sparkplug broker, Contextual event validation, Plant historian and KPI engine, Role-specific decision dashboards · illustrative
A brownfield capture project changes the connectivity profile of machines designed decades before industrial cybersecurity standards existed.
Edge Acquisition Conduit and Buffer (Level 2)
Edge Acquisition Conduit and Buffer (Level 2): Read-only protocol adapters, Local SQLite or time-series store-and-forward, NTPv4/PTP clock and quality stamping, Protocol filter blocking write function codes · illustrative
Physical and Logical Isolation Boundary
Physical and Logical Isolation Boundary: Galvanic RS-485/24 V isolators, PN/PN fieldbus coupler or secondary PLC port, Hardware unidirectional gateway where required, Lockable maintenance bypass and disconnect plug · illustrative
Machine Control Zone (Level 1 / Level 0)
Machine Control Zone (Level 1 / Level 0): Legacy or modern PLC scan loop, Isochronous servo and drive fieldbus, Local operator HMI and recipe execution, Field sensors, meters and actuators · illustrative
Independent Functional Safety Layer
Independent Functional Safety Layer: Hardwired emergency-stop chains, Mechanical guard and nip-roll interlocks, Safety relays and burner/pressure cutouts, Zero dependency on edge, network or dashboard · illustrative
Illustrative GFT brownfield boundary architecture informed by ISA-95 asset hierarchy (S01), PROFINET deterministic control scope (S11), IEC 62443-3-2 zones and conduits (S19), IEC functional safety independence (S23) and NIST unidirectional gateway definitions (S0503).
Unit: architectural zones and conduits from machine to operations. Status: illustrative. Sources: S01, S11, S19, S23, S0503. Illustrative figures are teaching examples, not measured factory results.
5.16 · the bodyExhibit 21 above; its figures are illustrative where marked.
A brownfield capture project changes the connectivity profile of machines designed decades before industrial cybersecurity standards existed.[S17][S19] Connecting twenty legacy programmable logic controllers and utility skids to a flat Ethernet switch without segmentation creates a lateral movement path whereby a compromised laptop, infected USB drive or misconfigured vendor modem can reach every controller on the floor.[S17][S19][S20] Equally, careless wiring inside a cabinet can compromise hardwired safety circuits protecting operators from mechanical, thermal and electrical hazards.[S17][S23]
The boundary model in Exhibit 21 applies IEC 62443-3-2, which makes security zones and conduits a key concept in system design.[S19] Rather than allowing gateways to straddle machine and enterprise networks, Exhibit 21 places each machine cell inside a Machine Control Zone, separates the Edge Acquisition Zone across an isolation boundary, and routes outbound telemetry to the Operations Zone through an authenticated conduit.[S01][S19][S40] Because Exhibit 21 is an illustrative reference architecture, it defines functional separation that must be instantiated onto specific VLANs, firewall rules, couplers and terminal blocks during site engineering.[S17][S19]
Remote maintenance paths receive strict control inside this model.[S19][S20] Under the Cybersecurity and Infrastructure Security Agency (CISA) Cybersecurity Performance Goals 2.0, multi-factor authentication (MFA) is enabled on all remotely accessible operational-technology accounts and systems, including vendor and maintenance accounts, workstations and HMIs when available.[S20] GFT prohibits unmonitored cellular modems or internet bridges inside machine cabinets; authorised remote maintenance must terminate in an industrial demilitarised zone with multi-factor authentication, time-bounded approval and session logging, and must never use the capture gateway as a backdoor into the controller.[S19][S20][S24]
Before any retrofit wire is landed or secondary port enabled, engineers must take a verified backup of existing PLC logic, motion parameters, HMI files and register maps, storing that backup in an isolated repository disconnected from network paths that could spread malware.[S21] NIST SP 800-34 Rev. 1 states that testing validates recovery capabilities, training prepares personnel for activation, and exercising the plan identifies gaps.[S22] Recovery validation means proving on the machine that technicians can unplug the gateway, restore baseline controller logic if needed, and verify standalone operation within the approved recovery time objective.[S17][S21][S22]
The bottom layer of Exhibit 21 enforces the core rule of this chapter: functional safety never depends on the edge gateway, network conduit or dashboard.[S19][S23] As the International Electrotechnical Commission states, within the overall safety of a system, functional safety refers to the aspect that provides automatic protection in response to errors.[S23] On textile machinery, protective functions include emergency-stop pushbuttons, pull-cord switches along spinning and weaving alleys, two-hand knife controls, light curtains on presses and cutters, interlocking guard doors over carding cylinders and nip rolls, and over-temperature or over-pressure cutouts on steam vessels and dryers.[S17][S23]
GFT enforces two prohibitions regarding protective safety during brownfield instrumentation.[S17][S23] First, no edge sensor, power supply or signal tap may be wired into a primary safety-relay circuit where it could bridge a contact, cause a ground fault or impede an emergency stop; safety state is read exclusively from an auxiliary dry contact on the safety relay or a read-only PLC bit after the hardwired trip executes.[S08][S17][S23] Second, no analytical rule, camera model or dashboard alert running on an edge node may ever be counted as a primary protective safety control.[S17][S23]
To turn these constraints into a repeatable routine, GFT gates every brownfield connection through the eight stages in Exhibit 22.[S17][S19][S22][S23][S30] Because Exhibit 22 is an illustrative workflow synthesised from standards and pilot guidance, it prescribes mandatory acceptance evidence rather than fixed calendar durations.[S17][S30]
0x01 to 0x04 in MODBUS) or cyclic inputs are active.[S09][S10][S17]By enforcing this eight-stage gate across sewing benches, looms, dyeing vats, cutters and meters, GFT turns brownfield heterogeneity into a disciplined engineering sequence.[S30][S35] Once physical signals are captured safely at the edge, the next chapter examines how local inference keeps quality and resource decisions on the line when remote links fail.[S14][S26][S29]
Check the record
Every knot is a source this chapter cites; select one to read its record, or filter the register by grade. Publication dates and inherited-source limits stay explicit. Read the paper's full evidence summary.
35 sources · 343 citation marks on this pageMost cited: S17, 54 times
Grade AGrade BGrade CKnot size: citations on this page
All 35 records shown
R06 · Grade C · inherited record
Inherited evidence R06
About 95 percent of cotton fibre exported raw against 5 percent processed locally; industrialisation target of 50 percent local processing.
Publication date unrecorded. Inherited source-text record. The original publication has not been independently reopened for this web edition.
R07 · Grade C · inherited record
Inherited evidence R07
SND30 restates the 50 percent local-processing target by 2030.
Publication date unrecorded. Inherited source-text record. The original publication has not been independently reopened for this web edition.
R12 · Grade C · inherited record
Inherited evidence R12
CICAM capacity utilisation, July 2023 report: Garoua 33.7 percent, CICAM 1 48.9 percent, CICAM 2 10.83 percent; underutilisation cost about CFAF 2 billion in 2020.
Publication date unrecorded. Inherited source-text record. The original publication has not been independently reopened for this web edition.
c05-S01 · Grade A
Update to ISA-95 Standard Addresses Integration of Enterprise and Manufacturing Control Systems
ANSI/ISA-95.00.01-2025, also known as ISA-95 Part 1, summarizes the scope of the manufacturing operations and control domain, discusses how physical assets of a manufacturing enterprise are organized, lists the functions associated with the interface between control functions and enterprise functions and describes the information shared among these functions.
2025-04-10. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S02 · Grade A
IEC 62264-1:2013: Enterprise-control system integration, Part 1: Models and terminology
IEC 62264-1:2013 describes the manufacturing operations management domain (Level 3) and its activities, and the interface content and associated transactions within Level 3 and between Level 3 and Level 4.
2013-05-22. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S04 · Grade A
OPC-10000-1: OPC Unified Architecture, Part 1: Overview and Concepts
The OPC UA is layered to isolate the core design from the underlying computing technology and network transport.
2025-10-22. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S07 · Grade A
Specification of the Asset Administration Shell Part 1: Metamodel, IDTA 01001-3-0-1
The aim of this document is to define selected specifications of the structure of the Administration Shell to enable the meaningful exchange of information about assets and I4.0 components between partners in a value creation network.
2024-06. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S08 · Grade A
ISO 22400-2:2014: Automation systems and integration, Key performance indicators for manufacturing operations management, Part 2: Definitions and descriptions
The KPIs are presented by means of their formula and corresponding elements, their time behaviour, their unit/dimension and other characteristics.
2014-01. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S09 · Grade A
MODBUS Application Protocol Specification V1.1b3
MODBUS is a request/reply protocol and offers services specified by function codes.
2012-04-26. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S10 · Grade A
IO-Link Interface and System Specification, Version 1.1.4
The Process Data Exchange unit cyclically transmits and receives Process Data without interference from the On-request Data (parameters, commands, and Events).
2024-06. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S11 · Grade A
PROFINET System Description: Technology and Application
For high-precision closed-loop control tasks, deterministic and isochronous transmission of time-critical process data with a jitter of less than 1 μs is possible.
2018-11. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S12 · Grade A
IEEE 1588-2019: IEEE Standard for a Precision Clock Synchronization Protocol for Networked Measurement and Control Systems
The protocol supports synchronization accuracy and precision in the sub-microsecond range with minimal network and local computing resources.
2020-06-16. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S13 · Grade A
Network Time Protocol Version 4: Protocol and Algorithms Specification
NTPv4 includes fundamental improvements in the mitigation and discipline algorithms that extend the potential accuracy to the tens of microseconds with modern workstations and fast LANs.
2010-06. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S14 · Grade A
Web of Things Architecture 1.1
An industrial edge device collects selected data from various controllers and makes it available to a cloud backend service, e.g., for remote monitoring via a dashboard or analyzes it for preventive maintenance.
2023-12-05. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S15 · Grade A
EPCIS Standard, Release 2.0
The goal of EPCIS is to enable disparate applications to create and share visibility event data, both within and across enterprises.
2022-06. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S17 · Grade A
NIST SP 800-82 Rev. 3: Guide to Operational Technology Security
This document provides guidance on how to secure operational technology (OT) while addressing their unique performance, reliability, and safety requirements.
2023-09. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S19 · Grade A
IEC 62443-3-2:2020: Security for industrial automation and control systems, Part 3-2: Security risk assessment for system design
A key concept in this document is the application of IACS security zones and conduits.
2020-06. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S20 · Grade A
Cybersecurity Performance Goals 2.0
OT: MFA is enabled on all accounts and systems that can be accessed remotely, including vendors/maintenance accounts, remotely accessible user and engineering workstations, and remotely accessible HMIs when available.
2025-12. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S21 · Grade A
Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure
Regularly test backup procedures and ensure that backups are isolated from network connections that could enable the spread of malware.
2022-05-09. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S22 · Grade A
NIST SP 800-34 Rev. 1: Contingency Planning Guide for Federal Information Systems
Testing validates recovery capabilities, whereas training prepares recovery personnel for plan activation and exercising the plan identifies planning gaps; combined, the activities improve plan effectiveness and overall organization preparedness.
2010-11-11. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S23 · Grade A
Ensuring safety in the workplace
Within the overall safety of a system, functional safety refers to the aspect that provides automatic protection in response to errors.
2022-04-28. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S24 · Grade A
ISO/IEC 27001:2022: Information security, cybersecurity and privacy protection, Information security management systems, Requirements
The ISO/IEC 27001 standard provides companies of any size and from all sectors of activity with guidance for establishing, implementing, maintaining and continually improving an information security management system.
2022-10. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S25 · Grade B
An RFID-based tracking system for denim production processes
The most striking result from the case study is that a radio frequency identification application could be successfully implemented to support the tracking and tracing of work in process in denim production processes, an area in which studies about radio frequency identification applications have not been done.
2016-09-05. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S26 · Grade B
Textile Defect Detection Using Artificial Intelligence and Computer Vision: A Preliminary Deep Learning Approach
Data acquired in complex industrial settings are highly susceptible to external variables such as lighting variations and background noise, which can significantly degrade the detection accuracy of machine learning (ML) models [14].
2025-09-18. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S27 · Grade B
Digital and Sustainable Transition in Textile Industry through Internet of Things Technologies: A Pakistani Case Study
Figure 8 illustrates changes in water level, depicting fluctuations that enable the industry to optimize water usage.
2024-06-21. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S28 · Grade B
RFID-enabled real-time manufacturing execution system for mass-customization production
RFID devices are deployed systematically on the shop-floor to track and trace manufacturing objects and collect real-time production data.
2013-04. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S29 · Grade B
Industrial IoT-Based Energy Monitoring System: Using Data Processing at Edge
Once the edge receives the meter's data, it stores the information in the database server, followed by the data processing method to find nine additional analytical parameters.
2024-09-28. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S30 · Grade B
Six-Sigma Reference Model for Industry 4.0 Implementations in Textile SMEs
The implementation of small pilot projects is recommended to test and validate the effectiveness of selected I4.0 technologies.
2023-08-19. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S31 · Grade B
A Review of IoT Sensing Applications and Challenges Using RFID and Wireless Sensor Networks
Also, time synchronization between the nodes and spectrum sharing techniques are of the utmost importance to ensure the integrity of the data or avoid uncertainty in the sensed data, without consuming all the radio resources [37].
2020-04-28. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S32 · Grade A
Enterprise Surveys: What Businesses Experience, Cameroon 2024 Country Profile
Figure 8 shows the extent to which firms face failures in the provision of electricity as measured by the percent of firms experiencing electrical outages and by the number of power outages.
2025. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S35 · Grade A
Industrial Development Report 2020: Industrializing in the digital age
In Ghana, for instance, almost 70 percent of firms surveyed for this report fall in the analog category.
2019. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S40 · Grade A
Sparkplug Specification 3.0.0
The intent and purpose of the Sparkplug Specification is to define an MQTT Topic Namespace, payload, and session-state management that can be applied generically to the overall IIoT market sector, but specifically meets the requirements of real-time SCADA/Control HMI solutions.
2022-11-16. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S0501 · Grade A
OPC 40001-1: OPC UA for Machinery, Part 1: Basic Building Blocks (v1.04.1), Section 14: Operation Counter
OperationDuration is the duration the MachineryItem has been powered and performing an activity. This counter is intended for machines and components where a distinction is made between switched on and in operation.
2026-01-01. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S0502 · Grade A
OPC 40001-1: OPC UA for Machinery, Part 1: Basic Building Blocks (v1.04.1), Annex C.2: Example interpretation for ISO 22400
Table 69 proposes how KPI time elements according to ISO 22400-2 can be set using the combinations of MachineryItemState, MachineryOperationMode and HLS-ConditionState. These ISO 22400-2 KPI time elements can be used to do KPI calculations.
2026-01-01. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗c05-S0503 · Grade A
CSRC Glossary: unidirectional gateway (from NIST SP 800-82 Rev. 3)
The hardware permits data to flow from one network to another but is physically unable to send any information at all back to the source network. The software replicates databases and emulates protocol servers and devices.
2023-09. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.
Open the recorded source ↗S17 National Institute of Standards and Technology. 2023-09.
S23 International Electrotechnical Commission. 2022-04-28.
R06 Cameroon Trade Hub. Publication date unrecorded; inherited source-text check.
R07 Ecofin Agency. Publication date unrecorded; inherited source-text check.
R12 Business in Cameroon. Publication date unrecorded; inherited source-text check.
S09 Modbus Organization. 2012-04-26.
S10 IO-Link Community. 2024-06.
S11 PROFIBUS Nutzerorganisation. 2018-11.
S19 International Electrotechnical Commission. 2020-06.
S31 MDPI, Sensors. 2020-04-28.
S30 MDPI, Sustainability. 2023-08-19.
S35 United Nations Industrial Development Organization. 2019.
S01 International Society of Automation. 2025-04-10.
S02 International Electrotechnical Commission. 2013-05-22.
S08 International Organization for Standardization. 2014-01.
S07 Industrial Digital Twin Association. 2024-06.
S0501 OPC Foundation and VDMA. 2026-01-01.
S32 World Bank Enterprise Surveys. 2025.
S29 MDPI, IoT. 2024-09-28.
S0502 OPC Foundation and VDMA. 2026-01-01.
S24 International Organization for Standardization and International Electrotechnical Commission. 2022-10.
S22 National Institute of Standards and Technology. 2010-11-11.
S13 Internet Engineering Task Force and RFC Editor. 2010-06.
S40 Eclipse Foundation. 2022-11-16.
S27 MDPI, Applied Sciences. 2024-06-21.
S26 MDPI, Electronics. 2025-09-18.
S20 Cybersecurity and Infrastructure Security Agency. 2025-12.
S12 IEEE Standards Association. 2020-06-16.
S04 OPC Foundation. 2025-10-22.
S14 World Wide Web Consortium. 2023-12-05.
S0503 National Institute of Standards and Technology. 2023-09.
S25 Springer Nature, International Journal of Advanced Manufacturing Technology. 2016-09-05.
S15 GS1 AISBL. 2022-06.
S28 Elsevier, Robotics and Computer-Integrated Manufacturing. 2013-04.
S21 CISA and joint international cybersecurity authorities. 2022-05-09.
Keep the thread · chapter 05 of 14
Move the shuttle along the rack to preview any chapter: its sections, exhibits and reading time. Draft web edition. This research is not investment, legal or tax advice; illustrative models are not measured factory results.
The paper's rack · 14 boltsBolt length: reading time
01Part I: Decisions before devices
GFT starts with the production decisions and infrastructure constraints that a connected architecture must serve, because visualisation alone cannot create trustworthy operating evidence.
02Part I: Decisions before devices
Each connected-factory use case needs an event, an owner, a permitted delay, a fallback and a measurable consequence before any sensor or platform is selected.
03Part I: Decisions before devices
A useful reference architecture assigns each function to a responsibility boundary and information contract before it assigns that function to a product.
04Part II: Capture at the production edge
A value becomes production evidence only when its asset, occurrence time, uncertainty and transformation history remain inspectable.
05Part II: Capture at the production edge
The safest digital retrofit begins by observing equipment through its documented interfaces and proving that acquisition does not alter control timing, protective functions or maintainability.
06Part II: Capture at the production edge
Local inspection earns its place when a valid image becomes a traceable quality decision before the fabric leaves the decision point. Acquisition, persistence and an approved fallback matter as much as inference speed.
07Part II: Capture at the production edge
The connected factory must lose remote services before it loses local evidence, and lose local evidence before it ever loses safe machine operation.
08Part III: One governed data spine
Two systems can exchange packets and still misunderstand production, so the architecture must define information, state, events and asset meaning separately.
09Part III: One governed data spine
The factory's data store is an evidence system, not a growing pile of values, so raw observations, contextual events, KPI results and corrections remain distinguishable and replayable.
10Part III: One governed data spine
The dashboard is a role-specific control surface whose freshness, definitions and next action are visible, not a gallery of independently calculated charts.
11Part III: One governed data spine
Applications should arrive as bounded, observable and reversible changes to a working production architecture, with ownership and rollback proven before scale.
12Part IV: Prove value and scale safely
This chapter specifies evidence capture rather than accounting or compliance methods: metres, denominators, allocations and life-cycle boundaries must make every displayed result reconstructable.
13Part IV: Prove value and scale safely
A connected factory is not accepted when its screens work on a normal day, but when its controls, fallbacks and recovery perform under adversarial and degraded conditions.
14Part IV: Prove value and scale safely
GFT recommends a four-phase build that earns each expansion through evidence quality, operating value, safe failure and recovery rather than device count.