44  Real-Time and ISA-95

applications
iiot
real
time

44.1 Start With the Story

Begin with a control decision and ask how fast it must be made and who is allowed to make it. ISA-95 and real-time design tell the story of boundaries: field control, supervisory visibility, production execution, and business planning each operate on different timing promises.

Phoebe the physics guide

Phoebe’s Why

Every analog value entering a PLC survives two separate physics problems before it becomes a trustworthy number. First, Ohm’s law: a 4-20 mA current loop is deliberately current-based so cable resistance cannot corrupt the signal, but the ADC still needs a voltage, so a precision resistor converts current to voltage right at the input – \(V=IR\), nothing more exotic than that. Second, Nyquist: once that voltage is sampled at a fixed rate, any vibration or electrical noise energy above half the sample rate does not disappear, it folds back down and masquerades as a real low-frequency signal. An RC low-pass filter sitting between the shunt resistor and the ADC is the circuit that stops that folding, and its cutoff has to be chosen with the sampling rate in mind, not sized on its own.

The Derivation

Current-loop-to-voltage conversion, Ohm’s law:

\[V = I R_{\mathrm{shunt}}\]

RC low-pass time constant and cutoff frequency:

\[\tau = RC, \qquad f_c = \frac{1}{2\pi RC}\]

Anti-alias constraint tying the filter to the sampler:

\[f_c \ll \frac{f_s}{2}\]

Quantization step and SNR for the resulting digitized value, \(N\)-bit ADC over span \(V_{\mathrm{span}}\):

\[q = \frac{V_{\mathrm{span}}}{2^N}, \qquad \mathrm{SNR}_{\mathrm{dB}} = 6.02N + 1.76\]

Worked Numbers: The Level-1 Vibration Channel

  • 4-20 mA loop into a 250 \(\Omega\) precision shunt (catalog-typical): \(V = IR\) gives \(1.00\) V at 4 mA and \(5.00\) V at 20 mA, a \(4.00\) V span for the ADC
  • This chapter’s own sampling rate: 1 ms period \(\to f_s = 1000\) Hz \(\to\) Nyquist limit \(f_{\max} = 500\) Hz
  • Anti-alias cutoff, chosen safely below that limit: \(f_c = 400\) Hz, with a standard \(R = 1.00\) k\(\Omega\): \(C = 1/(2\pi Rf_c) = 1/(2\pi \times1000\times400) = 398\) nF (nearest standard film capacitor)
  • Self-check: \(\tau = RC = 1.00\text{k}\Omega\times398\text{nF} = 0.398\) ms \(\to f_c = 1/(2\pi\tau) = 400\) Hz – consistent
  • Quantization tie, 12-bit ADC over the 4.00 V span (catalog-typical PLC analog input): \(q = 4.00/4096 = 0.977\) mV; \(\mathrm{SNR} = 6.02(12)+1.76 = 74.0\) dB – the shunt resistor, the anti-alias filter, and the ADC resolution form one signal chain, each stage sized against the same 1 kHz sampling decision
Chapter Roadmap

This chapter moves through the factory timing stack in five stops:

  1. First separate ISA-95 levels by deadline, owner, and failure consequence.
  2. Then classify each function as hard real-time, soft real-time, or best effort.
  3. Next map protocols and platforms to the level where their timing behavior belongs.
  4. After that test the rules on the assembly-line case and bandwidth calculator.
  5. Finally use the quizzes and pitfalls to check that no upper layer has quietly become the control owner.

Checkpoints recap the main design moves, and collapsed callouts are optional refreshers or deeper worked examples.

44.2 Learning Objectives

After completing this chapter, you will be able to:

  • Differentiate between ISA-95 automation levels and their timing constraints
  • Distinguish hard real-time from soft real-time requirements and their engineering implications
  • Design real-time industrial control systems with appropriate latency requirements
  • Map technologies to appropriate automation levels
  • Apply the ISA-95 model to industrial IoT architectures

44.3 Prerequisites

Before diving into this chapter, you should be familiar with:

44.4 ISA-95 Timing Boundaries

ISA-95, published as IEC 62264, is useful because it prevents one architecture from treating every factory message as the same kind of message. A servo drive, PLC task, HMI alarm, MES work order, and ERP purchase plan all matter, but they live on different time scales and carry different consequences when they arrive late.

The lower levels are close to the physical process. Level 0 devices sense or actuate. Level 1 controllers run machine logic. Level 2 systems supervise and visualize. Level 3 systems coordinate production operations. Level 4 systems plan the enterprise. IoT designs fail when they move Level 0 or Level 1 control decisions into cloud services, dashboards, or business systems that were never built for deterministic deadlines.

The useful pattern is to separate control authority from information visibility. A cloud dashboard may show a motor-current trend, but it should not close a 1 ms torque loop. MES may issue a production order, but it should not bypass a PLC interlock. ERP may plan inventory, but it should not decide whether a robot can enter a safety zone. Each level can exchange data with the others, but the deadline and safety owner must stay attached to the function.

That separation also keeps industrial IoT projects honest. A machine event may need a local trip, a SCADA alarm, a historian sample, an MES quality hold, and an ERP maintenance cost update. Those are related records, not one identical message. The lower levels need deterministic response and fail-safe behavior; the upper levels need context, timestamps, ordering, reconciliation, and business meaning.

  • Hard real-time: Missing the deadline is a system failure, even if the answer eventually arrives.
  • Soft real-time: Delay degrades usefulness, but the system can usually continue safely.
  • Best effort: Correctness depends more on completeness, ordering, and reconciliation than on millisecond delivery.

Industry 4.0 stack showing field, control, SCADA, MES, and enterprise layers with progressively slower timing requirements.

Industry 4.0 stack showing field, control, SCADA, MES, and enterprise layers with progressively slower timing requirements.
Figure 44.1: Timing boundary: each layer has a different owner, deadline, failure mode, and acceptable integration technology.

44.5 Put Decisions at the Lowest Level

A practical ISA-95 design starts with the fastest unsafe or economically damaging event. Emergency stop, light curtain, torque limit, burner management, and motion synchronization belong near certified safety controllers, drives, PLCs, or dedicated real-time hardware. A dashboard can display their state, but it should not be the path that makes them safe.

As timing relaxes, the architecture can move upward. SCADA and HMI systems can supervise lines and alarms. Historians can sample process values for trends. MES can handle work orders, batch phases, genealogy, quality checks, and OEE. ERP can plan demand, inventory, purchasing, and finance. Edge gateways and OPC UA servers often bridge the lower levels to these higher consumers without collapsing the timing boundaries.

For each function, write a timing row before selecting protocols. A packaging line may need a 4 ms registration correction, a 50 ms reject confirmation, a 500 ms HMI alarm update, a 5 second quality-hold decision, and a nightly ERP production reconciliation. These numbers point to different owners and paths. Putting them in one table exposes whether a proposed MQTT, REST, OPC UA, PROFINET, EtherCAT, or database path is being used at the right ISA-95 level.

Use gateways as translators, not as hidden control owners. An OPC UA server can expose PLC tags with semantic names and quality codes; a historian can compress and retain process values; an MES connector can attach work-order, batch, operator, and material context. None of those bridges should silently become the only place where a local stop, interlock, or critical fallback is decided.

  1. Write the deadline. Capture cycle time, maximum latency, jitter tolerance, timeout behavior, and safe fallback for each function.
  2. Name the owner. Decide whether the function is owned by a sensor/actuator, drive, PLC, safety controller, SCADA, MES, historian, gateway, cloud service, or ERP.
  3. Choose the path. Use deterministic paths such as PLC scan cycles, EtherCAT distributed clocks, PROFINET IRT, or CIP Sync where deadlines demand them; use OPC UA, MQTT, REST, or database interfaces only where timing allows.
  4. Define stale-data behavior. Specify when a value becomes stale, who may act on it, and which local action wins if the network or cloud link is unavailable.

44.6 Deadlines Beyond Network Speed

A real-time guarantee includes sensing delay, input filtering, PLC scan time, task priority, network scheduling, controller execution, output update, actuator response, and mechanical settling. A fast Ethernet link does not fix a slow scan cycle, overloaded gateway, nondeterministic task scheduler, or cloud round trip. That is why control engineers measure end-to-end response, not just bandwidth.

Clocking and scheduling matter. Motion systems may use EtherCAT distributed clocks, PROFINET IRT time slots, CIP Sync with IEEE 1588 PTP, or TSN mechanisms such as IEEE 802.1AS time synchronization and 802.1Qbv time-aware shaping. Safety functions may rely on certified PLCs, safety relays, safety-rated drives, PROFIsafe, CIP Safety, or IEC 61508/IEC 61511 engineering practices rather than ordinary application code.

Higher levels have their own correctness rules. MES transactions need sequence, genealogy, batch state, operator action, and quality disposition. Historians need timestamp source, compression, exception/deviation rules, and data quality. ERP integrations need reconciliation and retry. These concerns are different from sub-millisecond determinism, but they are still part of a reliable industrial IoT architecture.

Determinism is normally engineered by bounding every queue and scheduler in the path. A PLC task with a fixed scan period, a drive with synchronized clocks, a switched industrial Ethernet segment with reserved time slots, and a local fail-safe output can be analyzed for worst-case behavior. A Wi-Fi channel, TCP retransmission, broker queue, cloud function, or shared database can still be valuable, but it belongs on a telemetry or coordination path where late data degrades usefulness instead of breaking the machine.

When data crosses levels, preserve both time and authority. A value should carry timestamp source, quality code, equipment mode, work-order or batch context, and source system so that SCADA, historian, MES, and ERP consumers do not mistake an old value for a live control signal. This is why ISA-95 integration is not only a network diagram; it is a contract between real-time behavior, operational semantics, and business records.

  • Measure latency budget: Include sensor, controller, network, compute, output, and mechanical response.
  • Separate authority: Keep certified control and safety functions local; let upper layers request, supervise, or record unless engineered for direct control.
  • Preserve context: Carry timestamp, quality code, equipment state, recipe or work-order context, and source system with data that crosses ISA-95 levels.

44.7 Introduction

Industrial systems have strict timing requirements that vary by automation level. A motor control loop that misses its 1ms deadline can cause equipment damage, while an enterprise report delivered a few seconds late has no operational impact. Understanding these timing requirements is fundamental to designing effective industrial IoT systems.

Real-Time and ISA-95 Basics

Core Concept: The ISA-95 standard defines a five-level automation pyramid that maps industrial systems from field devices (sub-millisecond response) up to enterprise planning (hours-to-days). Each level has distinct timing requirements, and choosing the wrong technology for a given level can cause equipment damage, safety incidents, or wasted resources.

Why It Matters: A missed deadline in a servo, safety, or interlock path can damage equipment, create a safety hazard, or interrupt production. Conversely, using hard real-time hardware for enterprise reporting wastes budget. ISA-95 gives engineers a systematic framework for matching timing requirements to technology choices, keeping safety-critical functions on bounded local paths while business functions use ordinary IT infrastructure.

Key Takeaway: Always design from the bottom up – identify the hardest real-time constraint first (usually Level 0-1 safety or motion control), select deterministic protocols and RTOS platforms for those functions, then relax requirements as you move up the pyramid toward enterprise integration. Never attempt to use cloud or IT technologies for hard real-time control.

Hey there, young engineer! Sammy the Sensor has discovered that factories have speed limits – just like roads!

The Factory Speed Pyramid: Imagine a factory is like a tall building with 5 floors:

  • Basement (Level 0): This is where the actual machines live – robot arms, conveyor belts, temperature sensors. They need to react SUPER fast – like catching a ball that is thrown at you! (Less than 1 millisecond – that is 1/1000th of a second!)
  • Floor 1 (Level 1): The “brain boxes” (PLCs) that tell machines what to do. They need to be fast too – like a goalkeeper saving a penalty! (1-10 milliseconds)
  • Floor 2 (Level 2): The big screens where humans watch everything happening. Humans are slower than machines, so updates every second are fine – like checking the scoreboard during a game!
  • Floor 3 (Level 3): The factory managers planning what to make next. They work in minutes and hours – like a coach planning the next play.
  • Floor 4 (Level 4): The big bosses deciding what products to build next month. They work in days and weeks – like planning what sport to play next season!

Why Speed Matters: Imagine if the brain box (PLC) told a robot arm to STOP, but the message took 5 whole seconds to arrive. The robot would have already crashed into something! That is why faster floors need special “express delivery” networks, while the upper floors can use regular internet – just like how an ambulance needs a siren to go fast, but a mail truck can take the regular road.

Sensor Squad Memory Trick:

  • Level 0-1 = Lightning fast (machines talking to machines)
  • Level 2 = Human speed (people watching screens)
  • Level 3-4 = Planning speed (thinking and deciding)
  • Hard real-time = MUST arrive on time, or something breaks!
  • Soft real-time = Should be fast, but a tiny delay is OK

44.8 ISA-95 Automation Pyramid

Time: ~10 min | Difficulty: Intermediate | Unit: P03.C06.U05

The first pass above named the boundary problem. Now we turn that boundary into the standard five-level pyramid used to place real factory systems.

Key Concepts

  • ISA-95 Level 0: Physical process layer containing sensors, actuators, drives, valves, and the machine state they measure or change.
  • ISA-95 Level 1: Basic control layer where PLCs, PACs, DCS controllers, safety controllers, and drives execute local control logic.
  • ISA-95 Level 2: Supervisory layer containing SCADA, HMI, alarms, recipes, and historians used by operators and engineers.
  • ISA-95 Level 3: Operations-management layer where MES, batch, genealogy, OEE, quality, and production-dispatch systems coordinate work.
  • ISA-95 Level 4: Enterprise-planning layer where ERP, finance, procurement, demand planning, and supply-chain systems make business decisions.
  • Hard Real-Time: A deadline class where a late result is a failure, not merely an inconvenience.
  • Jitter: Variation in timing from cycle to cycle; for synchronized motion, bounded jitter can matter more than average latency.

The ISA-95 standard (also known as IEC 62264) defines the interface between enterprise and control systems:

ISA-95 automation pyramid showing physical process and control layers below SCADA, MES, and ERP business planning, with control-system commands separated from IT and OT data flows.

ISA-95 Automation Pyramid
Figure 44.2: ISA-95 separates physical process, control, supervisory, operations, and business-planning responsibilities so timing and authority are not collapsed into one path.

44.9 Timing Requirements by Level

44.9.1 Level 0: Field Devices (Sub-millisecond)

The physical interface with the manufacturing process:

  • Sensors sample physical processes
  • Actuators respond to control signals
  • Examples: Thermocouples (1-100ms), high-speed encoders (50μs), servo drives (62.5μs)

Characteristics:

  • Direct connection to physical process
  • Continuous or very fast periodic operation
  • Simple devices with minimal processing
  • Often intrinsically safe for hazardous areas

44.9.2 Level 1: Basic Control (1-10ms)

Automated control of manufacturing processes:

  • PLCs execute control logic
  • PID loops maintain setpoints
  • Safety systems must guarantee response times
  • Examples: Motion control (1ms), discrete I/O (10ms), process control (100ms)

Characteristics:

  • Deterministic execution cycles
  • Real-time operating systems
  • Redundancy for critical functions
  • Direct I/O to Level 0 devices

44.9.3 Level 2: Supervisory (100ms-1s)

Monitoring and supervision of production processes:

  • SCADA systems collect data from multiple PLCs
  • HMIs display process status to operators
  • Alarm systems notify of abnormal conditions
  • Examples: Data logging (1s), trend displays (5s), alarm response (500ms)

Characteristics:

  • Soft real-time requirements
  • Human interaction interfaces
  • Historical data storage (historians)
  • Recipe and batch management

44.9.4 Level 3: Operations (Seconds to Minutes)

Manufacturing operations and workflow management:

  • MES manages production schedules
  • Tracks work orders, genealogy, and quality
  • Batch control coordinates recipes
  • Examples: Batch phase transitions (10s), reporting (1min), scheduling (hours)

Characteristics:

  • Integration with enterprise systems
  • Production workflow coordination
  • Quality management and traceability
  • Resource allocation and tracking

44.9.5 Level 4: Enterprise (Hours to Days)

Business planning and logistics:

  • ERP handles business planning
  • Supply chain management coordinates materials
  • Customer relationship management
  • Examples: Daily production planning, weekly demand forecasting, monthly financial closing

Characteristics:

  • Business process integration
  • Long-term planning horizons
  • Financial and customer data
  • Corporate-wide visibility
AdaCheckpoint: Timing Ladder

You now know:

  • Level 0 field devices can operate below 1ms, while Level 1 control commonly sits in the 1-10ms range.
  • Level 2 supervision moves at 100ms-1s, Level 3 operations moves in seconds to minutes, and Level 4 enterprise work moves in hours-days.
  • A single machine event can create a local trip, SCADA alarm, historian sample, MES quality hold, and ERP cost update without giving each record the same deadline.

44.10 Real-Time Requirements Calculator

Try it: Adjust the system type and number of devices to see how timing requirements and bandwidth change across ISA-95 levels. Notice how motion control requires orders of magnitude faster response times than enterprise planning.

44.11 Determinism vs. Throughput

With the level timing ladder in place, the next question is what kind of promise each deadline needs. Some deadlines are hard failures; others are quality-of-service targets.

Industrial systems distinguish between different real-time guarantees:

Hard real-time and soft real-time timeline comparison showing bounded deterministic intervals for hard real-time and variable intervals for soft real-time.

Hard real-time versus soft real-time timing
Figure 44.3: Hard real-time paths are engineered around bounded worst-case behavior; soft real-time paths are judged by usefulness under expected delay and jitter.
Hard vs Soft Real-Time Summary
  • Hard real-time: Response time is bounded and predictable. Missing a deadline is a system failure.
  • Soft real-time: Response time varies, and occasional delays degrade quality but do not stop the system.
  • WCET guarantee: Hard real-time systems must prove worst-case execution time stays within the deadline.
  • Statistical QoS: Soft real-time systems optimize average performance and tolerate some jitter.

44.11.1 Hard Real-Time (Deterministic)

Definition: Must respond within guaranteed time; missing deadline is system failure.

Characteristics:

  • Worst-case execution time (WCET) must be bounded
  • Jitter must be minimal (<1μs for synchronized motion)
  • Preemptive, priority-based scheduling
  • Often requires specialized hardware

Examples:

  • Safety systems (emergency stop)
  • Motion control (coordinated axes)
  • Process control (exothermic reactions)

Implementation approaches:

  • Dedicated real-time networks (EtherCAT, PROFINET IRT)
  • Real-time operating systems (VxWorks, QNX, RTAI)
  • FPGA-based control
  • Time-triggered architectures

44.11.2 Soft Real-Time

Definition: Should respond quickly but occasional delays acceptable; results in degraded performance, not failure.

Characteristics:

  • Average response time matters more than worst-case
  • Some deadline misses tolerable
  • Standard operating systems acceptable
  • Statistical quality of service

Examples:

  • HMI updates
  • Data logging
  • Trend analysis
  • Operator notifications

44.11.3 Best Effort

Definition: No timing guarantees; response when resources available.

Examples:

  • Historical data analysis
  • Business reporting
  • Email notifications
  • Non-critical analytics
AdaCheckpoint: Deadline Classes

You now know:

  • Hard real-time means a missed deadline is a failure, which is why safety systems and coordinated motion need bounded worst-case execution time.
  • Soft real-time fits HMI updates, data logging, trend analysis, and operator notifications where delay degrades usefulness.
  • Best-effort paths belong to historical analysis, business reporting, email notifications, and other work where completeness matters more than millisecond delivery.

44.12 Jitter and Synchronization

For coordinated motion and distributed control, jitter (timing variation) is often more critical than absolute latency:

Jitter requirements by application:

Application Cycle Time Max Jitter Nodes
Simple I/O 10ms 1ms 10-100
Process control 100ms 10ms 100-1000
Packaging machinery 1ms 100μs 10-50
Printing press 125μs 1μs 20-100
Semiconductor handling 62.5μs 100ns 10-30
  • Simple I/O: 10ms cycle time, 1ms max jitter, 10-100 nodes
  • Process control: 100ms cycle time, 10ms max jitter, 100-1000 nodes
  • Packaging machinery: 1ms cycle time, 100μs max jitter, 10-50 nodes
  • Printing press: 125μs cycle time, 1μs max jitter, 20-100 nodes
  • Semiconductor handling: 62.5μs cycle time, 100ns max jitter, 10-30 nodes

Synchronization mechanisms:

  1. IEEE 1588 (PTP): Precision Time Protocol for sub-microsecond sync
  2. Distributed clocks: EtherCAT’s hardware-based synchronization
  3. Time-triggered protocols: Deterministic message scheduling
  4. GPS timing: Absolute time reference for wide-area systems

The chapter now has two timing ideas on the table: response time and consistency. The jitter calculator isolates the second one so you can see why a smaller average delay is not enough for synchronized axes.

44.13 Jitter Impact Calculator

Try it: Adjust the actual jitter value to see how different applications tolerate timing variation. Notice that printing presses and semiconductor handling require sub-microsecond precision, while simple I/O can tolerate milliseconds of jitter.

Knowledge Check: Real-Time Requirements

Question 1: A printing press requires a cycle time of 125 microseconds with maximum jitter of 1 microsecond. Which type of real-time guarantee does this require?

  1. Best effort
  2. Soft real-time
  3. Hard real-time
  4. Near real-time
Answer

c) Hard real-time – A printing press with a 125 microsecond cycle time and 1 microsecond maximum jitter tolerance is a classic hard real-time application. Missing a deadline would cause visible print defects (color misregistration, smearing). Hard real-time requires guaranteed worst-case execution time (WCET) and minimal jitter, typically implemented with specialized hardware like EtherCAT with distributed clocks.

Question 2: At which ISA-95 level would you place a SCADA system that displays alarm conditions to plant operators?

  1. Level 0 – Field Devices
  2. Level 1 – Basic Control
  3. Level 2 – Supervisory
  4. Level 3 – Operations
Answer

c) Level 2 – Supervisory – SCADA (Supervisory Control and Data Acquisition) systems operate at ISA-95 Level 2, which handles monitoring and supervision of production processes. Level 2 includes HMI displays, alarm management, historical data logging, and recipe management. The timing requirement is soft real-time (100ms-1s), which is appropriate for human-operator interfaces.

Question 3: Why is jitter often more critical than absolute latency for synchronized motion control?

  1. Jitter is easier to measure than latency
  2. Coordinated axes need to arrive at positions at exactly the same time, so timing consistency matters more than speed
  3. Jitter only affects wireless networks
  4. Lower jitter always means lower latency
Answer

b) Coordinated axes need to arrive at positions at exactly the same time, so timing consistency matters more than speed – In a multi-axis robot, all servo motors must receive their position commands at precisely the same instant. If one axis is consistently 5ms late but all axes have the same 5ms delay, the motion is perfectly coordinated. But if one axis varies randomly between 1ms and 9ms (high jitter), the axes become unsynchronized, causing mechanical stress, poor surface finish, or collisions.

44.14 Technology Mapping

The following diagram shows how protocols, platforms, and network architectures align with ISA-95 levels:

ISA-95 technology mapping showing physical process and control levels with PLC/RTOS and deterministic protocols, supervisory levels with SCADA and industrial PCs, operations levels with OPC UA and servers, and enterprise levels with REST or MQTT and cloud platforms.

ISA-95 technology mapping by level
Figure 44.4: Technology choices should follow the level’s deadline, authority, and failure consequence rather than a single preferred protocol.
Technology Mapping Summary
  • Level 0-1: EtherCAT or PROFINET IRT on PLCs/RTOS for sub-millisecond hard real-time control
  • Level 2: PROFINET or EtherNet/IP on industrial PCs for supervisory monitoring and HMI workloads
  • Level 3: OPC-UA or Modbus TCP on servers for MES, historians, and batch coordination
  • Level 4: REST APIs or MQTT on cloud and enterprise platforms for planning and analytics

44.14.1 Protocol Selection by Level

Level Typical Protocols Latency Determinism
0-1 EtherCAT, PROFINET IRT <100μs Hard real-time
1-2 PROFINET, EtherNet/IP 1-10ms Soft real-time
2-3 OPC-UA, Modbus TCP 10-100ms Best effort
3-4 REST APIs, MQTT 100ms-1s Best effort
  • Level 0-1: EtherCAT or PROFINET IRT, <100μs latency, hard real-time
  • Level 1-2: PROFINET or EtherNet/IP, 1-10ms latency, soft real-time
  • Level 2-3: OPC-UA or Modbus TCP, 10-100ms latency, best effort
  • Level 3-4: REST APIs or MQTT, 100ms-1s latency, best effort

44.14.2 Computing Platform by Level

Level Platform OS Processing
0-1 PLC, PAC, IPC RTOS, bare metal Deterministic scan cycle
2 Industrial PC Windows, Linux Standard scheduling
3 Server Windows Server, Linux Virtualization OK
4 Cloud/Enterprise Any Containerization, serverless
  • Level 0-1: PLC, PAC, or IPC running RTOS or bare metal for deterministic scan cycles
  • Level 2: Industrial PC running Windows or Linux for standard supervisory scheduling
  • Level 3: Server hardware running Windows Server or Linux with virtualization
  • Level 4: Cloud or enterprise platforms using containerized or serverless workloads

44.14.3 Network Architecture by Level

Level Network Redundancy Segmentation
0-1 Dedicated industrial Ring, dual-port Air-gapped from IT
2 Industrial Ethernet RSTP, PRP/HSR VLAN separated
3 Converged IT/OT Standard HA DMZ between zones
4 Corporate/cloud Internet standards Firewall protected
  • Level 0-1: Dedicated industrial networks with ring or dual-port redundancy and air gaps from IT
  • Level 2: Industrial Ethernet with RSTP or PRP/HSR and VLAN separation
  • Level 3: Converged IT/OT networks with standard high availability and DMZ zoning
  • Level 4: Corporate or cloud networks using internet standards and firewall protection
AdaCheckpoint: Technology Placement

You now know:

  • Level 0-1 control can need EtherCAT or PROFINET IRT below 100μs, while Level 1-2 traffic can often use PROFINET or EtherNet/IP in the 1-10ms range.
  • OPC-UA fits the Level 2-3 boundary because MES and historian consumers need semantic context, not drive-cycle ownership.
  • REST APIs and MQTT belong at Level 3-4 integration when the path is planning, analytics, or dashboards rather than machine control.

44.15 ISA-95 Level Selector Tool

Try it: Adjust the response time requirement and safety criticality to see how the recommended ISA-95 level changes. The tool applies the decision framework to match your requirements to the appropriate automation level.

Knowledge Check: Technology Mapping

Question 4: An engineer needs to connect 100 PLCs to a Manufacturing Execution System (MES) for production scheduling. Which protocol and ISA-95 level boundary does this cross?

  1. EtherCAT at Level 0-1 boundary
  2. OPC-UA at Level 2-3 boundary
  3. PROFINET IRT at Level 1-2 boundary
  4. MQTT at Level 3-4 boundary
Answer

b) OPC-UA at Level 2-3 boundary – Connecting PLCs (Level 1-2) to an MES (Level 3) crosses the Level 2-3 boundary, which is exactly where OPC-UA excels. OPC-UA provides the semantic data modeling needed for MES integration (production orders, quality data, genealogy), built-in security for the IT/OT boundary, and platform-independent communication.

Question 5: A factory floor network uses air-gapped segmentation. Which ISA-95 level does this practice primarily protect?

  1. Level 4 – Enterprise systems need air gaps from the internet
  2. Level 0-1 – Critical control networks must be physically isolated from IT networks
  3. Level 3 – MES systems require air gaps from SCADA
  4. All levels equally use air-gapped segmentation
Answer

b) Level 0-1 – Critical control networks must be physically isolated from IT networks – Air-gapped segmentation is primarily used at Level 0-1, where dedicated industrial networks (EtherCAT, PROFINET IRT) carry safety-critical and hard real-time control traffic. These networks must be physically isolated from IT networks to prevent cyberattacks from reaching PLCs, safety controllers, and field devices. A compromised Level 0-1 network could cause physical damage, equipment destruction, or endanger human life.

44.16 Assembly Line Design Case

The next scenario puts the timing rules into one design record. Treat each subsystem as a separate row before choosing a protocol.

You are designing the control system for an automotive assembly line with:

  • 100 robotic arms: Each with 6 axes (600 servo motors total)
  • 1,000 quality inspection sensors: Vision systems, force sensors, laser scanners
  • 50 AGVs: Automated guided vehicles delivering parts
  • 10 operator stations: HMIs for monitoring and manual intervention

Requirements:

  • All robots must be synchronized within 1ms
  • Quality data must be logged for 10-year traceability
  • AGVs must avoid collisions with <100ms response time
  • Operators need real-time production status
  • Enterprise ERP system needs hourly production counts
  • Predictive maintenance for all critical assets

44.16.1 Solution: Latency Requirements

Robotic motion control: <1ms hard real-time, <1μs jitter for synchronization

  • Justification: 6-axis coordinated motion requires deterministic timing
  • ISA-95 Level 1 (Basic Control)

Quality sensors: <100ms soft real-time

  • Vision processing and data logging can tolerate slight delays
  • ISA-95 Level 2 (Supervisory)

AGV collision avoidance: <100ms hard real-time

  • Safety-critical, must respond to obstacles deterministically
  • ISA-95 Level 1 with safety rating

Operator HMIs: <1s soft real-time

  • Human perception doesn’t require sub-second updates
  • ISA-95 Level 2 (Supervisory)

ERP production counts: Hourly batch updates

  • No real-time requirement
  • ISA-95 Level 4 (Enterprise)

44.16.2 Solution: Protocol Selection

For robot control: EtherCAT or comparable deterministic motion network

  • Sub-millisecond cycle-time capability can support a 1 ms motion requirement when the drive, controller, topology, and load test all meet the timing budget.
  • Tight jitter control enables coordinated multi-axis motion when clocks, task scheduling, and diagnostics are validated.
  • The release record should include measured cycle time, jitter, fault response, and replacement-device behavior, not only the protocol name.

For quality sensors: PROFINET or EtherNet/IP

  • Less stringent timing requirements
  • Standard industrial Ethernet sufficient

For AGV coordination: local safety plus supervised fleet coordination

  • Obstacle detection and stop behavior should remain local to the vehicle, safety scanner, controller, or certified safety system.
  • Wi-Fi, private 5G, OPC-UA, MQTT, or REST can carry fleet state, dispatch, and telemetry only where bounded local safety behavior is preserved.

For IT/OT integration: OPC-UA

  • Bridges PLCs to MES/ERP
  • Provides semantic data model for quality traceability

44.16.3 Solution: Data Integration Strategy

ISA-95 Level 0 physical process layer showing sensors, field devices, actuators, and the Level 1 basic control PLC or DCS boundary.

ISA-95 Level 0 physical process layer
Figure 44.5: Level 0 values and commands are closest to the physical process, so stale data and misplaced authority can change machine behavior directly.
Mobile Figure Summary: Level 0 Data Flow
  • Sensors: Temperature, pressure, flow, and level devices send fast process measurements upward.
  • Field devices: Signal conditioners, transmitters, smart I/O, and safety systems normalize and route the data.
  • Actuators: Valves, motors, pumps, and heaters receive deterministic control commands from Level 1.
  • Control boundary: Level 1 PLC/DCS systems close the loop using sub-millisecond updates between measurements and commands.

44.17 Bandwidth Calculator for Case Study

Try it: Adjust the number of motors, signals per motor, sampling rate, feature-reduction factor, and illustrative transfer price to see how bandwidth assumptions change. Treat the output as a planning comparison, not a current cloud-price quote.

Key architectural decisions:

  • Edge processing: FFT, statistical features, and event extraction at Level 2 reduce the data published beyond the control zone.
  • Time-series storage: A historian or time-series database handles high-rate process values with timestamp, compression, and quality rules.
  • OPC-UA server: Provides a governed namespace for selected values and context.
  • Data lake: Raw or summarized data retention follows quality, compliance, and cost requirements.
  • Security: Network segmentation, OPC-UA encryption, VLANs separate control and IT networks

Bandwidth calculation:

  • 600 motors × 10 signals × 1ms sampling = 6 million samples/second
  • At 4 bytes/sample = 24 MB/second raw data
  • After edge processing: 1 Hz features = 6 KB/second to cloud
  • Reduction factor: 4,000×

AdaCheckpoint: Assembly-Line Evidence

You now know:

  • The case has 100 robotic arms, 600 servo motors, 1,000 quality sensors, 50 AGVs, and 10 operator stations, so one shared timing path would be unsafe.
  • Robot synchronization is under 1ms with less than 1μs jitter, while ERP production counts are hourly batch updates.
  • Streaming 600 motors x 10 signals every 1ms creates 6 million samples/second, so edge reduction keeps raw control-loop data out of enterprise analytics.

An automotive assembly line with 600 servo motors, each reporting 10 signals (position, velocity, current, temperature, etc.) at 1ms intervals generates massive data volumes:

\[\text{Sample rate} = 600 \times 10 \times \frac{1,000 \text{ samples}}{\text{second}} = 6,000,000 \text{ samples/sec}\]

At 4 bytes per sample (32-bit float):

\[\text{Raw bandwidth} = 6,000,000 \times 4 = 24 \text{ MB/sec} = 2.07 \text{ TB/day}\]

Edge processing performs FFT and extracts 10 features per motor per second:

\[\text{Processed bandwidth} = 600 \times 10 \times 4 = 24 \text{ KB/sec} = 2.07 \text{ GB/day}\]

The reduction illustrates why raw control-loop data is usually not streamed unchanged to enterprise analytics. The exact cost depends on retention, compression, network path, cloud region, contract terms, and whether the data is stored, transferred, or queried.

What is “real-time”? It means the system must respond within a specific time limit. Think of it like a deadline:

  • Hard real-time: Like a goalkeeper – you MUST save the ball in time, or it is a goal. Missing the deadline is a failure (e.g., emergency stop must activate within 10ms).
  • Soft real-time: Like a bus schedule – being 2 minutes late is annoying but acceptable. Missing the deadline degrades quality but does not cause failure.
  • Best effort: Like postal mail – it arrives when it arrives, with no guaranteed delivery time.

What is ISA-95? It is a standard that organizes a factory into 5 floors (levels), each with different speed requirements. The bottom floors need lightning-fast responses (controlling machines), while the top floors handle slow business decisions (planning what to build next month).

The key rule: Always use the right tool for the right floor. You would not use a racing car to deliver furniture (too expensive), and you would not use a delivery truck to race in Formula 1 (too slow). Similarly, do not use cloud computing to control a robot arm, and do not use a PLC to run your ERP system.

When designing industrial IoT systems, the biggest mistake is using the wrong technology for the wrong level. This decision framework helps you match computing platforms, protocols, and architectures to automation levels.

Level Timing Example Application Right Technology Wrong Technology (Why)
0-1 <1ms Servo motor control PLC + EtherCAT Cloud API (200ms latency – motor crashes before alert)
1-2 1-10ms Discrete I/O, safety PLC + PROFINET Wi-Fi + MQTT (packet loss breaks safety)
2 100ms-1s HMI displays Industrial PC + SCADA Consumer laptop (not rated for factory floor)
3 Seconds MES batch tracking On-prem server + OPC-UA Edge gateway (insufficient compute for MES)
4 Minutes-hours ERP planning Enterprise cloud PLC (PLCs don’t run SAP)

Decision Tree:

Q1: Does a missed deadline cause physical damage or safety risk?

  • Yes → Hard real-time (Levels 0-1) → Use PLC/PAC with deterministic network (EtherCAT, PROFINET IRT)
  • No → Proceed to Q2

Q2: Is response time under 100ms required?

  • Yes → Soft real-time (Level 1-2) → Use PLC with standard industrial Ethernet (PROFINET IO, EtherNet/IP)
  • No → Proceed to Q3

Q3: Does it involve human interaction or visualization?

  • Yes → Level 2 (SCADA/HMI) → Industrial PC with SCADA software (Ignition, WinCC)
  • No → Proceed to Q4

Q4: Does it coordinate production workflows or track quality?

  • Yes → Level 3 (MES) → Server-grade hardware with MES software (Siemens Opcenter, Rockwell FactoryTalk)
  • No → Proceed to Q5

Q5: Is it business planning, finance, or supply chain?

  • Yes → Level 4 (ERP) → Enterprise cloud or data center (SAP, Oracle)

Real Example – Assembly Line Robot:

  • Level 0-1: Servo drives (EtherCAT, <100μs cycle) – controls arm position
  • Level 1: Safety PLC (PROFINET IRT, 1ms) – emergency stop circuit
  • Level 2: HMI touchscreen (Ethernet/IP, 100ms) – operator sees cycle count
  • Level 3: MES server (OPC-UA, 10s) – tracks which product variant is running
  • Level 4: ERP cloud (REST API, 1 hour) – orders more parts when inventory low

Key Principle: Never use higher-level (slower) tech for lower-level (faster) requirements. The opposite is OK but wasteful – using EtherCAT for HMI updates works but costs 10× more than needed.

Real-Time and ISA-95 Links
  • Hard Real-Time → EtherCAT/PROFINET IRT: Deterministic protocols guarantee sub-millisecond response for Level 0-1 safety and motion control.
  • ISA-95 Levels → Technology Selection: Each level has distinct timing requirements: Field (μs), Control (ms), Supervisory (100ms), Operations (seconds), Enterprise (hours).
  • Jitter → Multi-Axis Synchronization: Timing variation between coordinated axes is more critical than absolute latency for precision motion.
  • OPC-UA → Level 2-3 Boundary: Bridges real-time control (PLCs) to business systems (MES/ERP) with semantic data models and security.

Cross-module connection: Industrial Protocols explains how EtherCAT achieves <100μs cycle times with <1μs jitter using time-triggered communication and distributed clocks for Level 0-1 hard real-time control.

Interactive Quiz: Match ISA-95 Concepts

Quiz: ISA-95 Design Sequence

Common Pitfalls

A historian sample, an HMI alarm, an MES work-order update, and a drive command do not have the same deadline or authority. Classify each message by level, owner, deadline, stale-data behavior, and consequence before choosing a protocol.

MES, ERP, dashboards, and analytics systems may request, schedule, or record, but they should not bypass PLC, safety, or cell-level authority. Any write path from Level 3 or Level 4 into Level 0-1 needs explicit ownership, authorization, interlock, and rollback rules.

A real-time claim must include sensor delay, filtering, scan time, task priority, queueing, switch behavior, output update, actuator response, and safe fallback. A fast link can still miss a machine deadline if any queue or scheduler in the path is unbounded.

Label the Diagram

44.18 Code Challenge

44.19 Summary

Real-time requirements and ISA-95 levels provide a systematic framework for industrial system design:

ISA-95 pyramid: Five levels from field devices (sub-millisecond) to enterprise (hours-days) with distinct timing requirements and technologies appropriate to each level. The standard (IEC 62264) provides the definitive interface model between enterprise and control systems.

Determinism matters: Hard real-time systems require guaranteed worst-case timing with bounded jitter; soft real-time tolerates occasional delays with statistical QoS; best-effort has no timing guarantees. Choosing the wrong class can cause safety incidents (under-specifying) or wasted budget (over-specifying).

Jitter vs latency: For synchronized motion control, consistent timing (low jitter) is often more critical than absolute speed. IEEE 1588 PTP and EtherCAT distributed clocks provide sub-microsecond synchronization for multi-axis coordination.

Technology mapping: Protocol, computing platform, and network architecture choices must align with the timing requirements of each ISA-95 level. Use EtherCAT/PROFINET IRT for Level 0-1, PROFINET/EtherNet/IP for Level 1-2, OPC-UA for Level 2-3 bridging, and REST/MQTT for Level 3-4 cloud integration.

Design principle: Never use higher-level (slower) technologies for lower-level (faster) requirements. Cloud cannot control motors; PLCs should not run ERP. Design from the bottom up – secure the hardest real-time constraint first, then relax requirements as you ascend the pyramid.

44.20 See Also

  • Industrial Protocols — Comparison of EtherCAT, PROFINET IRT, EtherNet/IP with latency and jitter specifications for each ISA-95 level
  • Real-Time Operating Systems — VxWorks, QNX, RTAI architecture for guaranteed worst-case execution time (WCET) at Level 0-1
  • Time-Sensitive Networking — IEEE 802.1 TSN extensions for deterministic Ethernet suitable for industrial control
  • OPC-UA Standard — Level 2-3 integration protocol that bridges real-time control to business systems with semantic data models
In 60 Seconds

This chapter covers real-time & isa-95, explaining the core concepts, practical design decisions, and common pitfalls that IoT practitioners need to build effective, reliable connected systems.

44.21 Knowledge Check

Quiz: Real-Time ISA-95

44.22 What’s Next

Direction Chapter Description
Next Predictive Maintenance Condition monitoring and ML-based failure prediction
Related OPC-UA Standard The unifying standard for industrial interoperability
Related Industrial Protocols Protocol selection for different applications
Index Industry 4.0 Fundamentals Overview of all IIoT topics