Applications & Use Cases · Study deck

OPC UA: Companion Models and Implementation

A secure OPC UA connection can exchange data, but two machines still need shared meanings for assets, states, and measurements.

Blueprint Bina is your guide for this deck.

iiot
Blueprint Bina, the module guide, in a scene from this chapter.
iotclass.org

After studying this chapter

Learning objectives

You will be able to:

  • Explain: Built-in Security: Unlike legacy protocols (Modbus, PROFIBUS) that have no native security, OPC-UA provides layered defense: application certificates, message signing and encryption, multiple user authentication methods, and audit logging that supports controlled operations.
  • Explain: Year 2-3: Lower annual maintenance can drive positive ROI if the model, gateway, and certificate lifecycle are actually easier to operate than the custom alternative.
  • Explain: Real-world factors not modeled: outage windows, validation effort, vendor support, license terms, cybersecurity review, and the cost of maintaining namespace and certificate ownership over time.
  • choose OPC UA companion specifications for a domain
iotclass.org

Major section

Implementation Considerations

Full feature support.

  • Publishing interval: How often server checks for changes (100 ms-5s typical).
  • Sampling interval: How often server reads underlying value (can be faster than publishing).
  • Queue size: How many changes to buffer between publications.
  • Lifetime count: How many publishing intervals before subscription expires.
iotclass.org

Major section

OPC-UA in Practice

Carry: ISA-95 Automation Pyramid with OPC-UA into typical deployment architecture; use: ERP, Business Planning as its limiting condition.

  • PLC runs embedded OPC-UA server.
  • Edge gateway subscribes to PLC data.
  • Gateway publishes to MQTT broker.
  • Cloud platform consumes MQTT messages.
OPC-UA often sits between real-time OT systems and operations or enterprise consumers, so each ISA-95 level needs an explicit interaction pattern and boundary rule.
OPC-UA often sits between real-time OT systems and operations or enterprise consumers, so each ISA-95 level needs an explicit interaction pattern and boundary rule.
iotclass.org

Major section

Understanding the ROI

Year 2-3: Lower annual maintenance can drive positive ROI if the model, gateway, and certificate lifecycle are actually easier to operate than the custom alternative.

  • Real-world factors not modeled: outage windows, validation effort, vendor support, license terms, cybersecurity review, and the cost of maintaining namespace and certificate ownership over time.
  • Scenario:: A beverage company operates a bottling line with native PROFINET PLCs, EtherCAT motion equipment, inspection cameras, and legacy Modbus RTU conveyor controllers.
  • Year 4-5: Savings may accelerate when standardized onboarding reduces the effort needed to add new equipment.
iotclass.org

Major section

Summary

OPC-UA has emerged as the definitive standard for industrial interoperability.

  • Built-in Security: Unlike legacy protocols (Modbus, PROFIBUS) that have no native security, OPC-UA provides layered defense: application certificates, message signing and encryption, multiple user authentication methods, and audit logging that supports controlled operations.
  • Dual Communication Patterns: Client-server mode supports traditional SCADA and HMI use cases requiring direct request-response interaction.
  • Pub-sub mode (over MQTT/AMQP) enables scalable, firewall-friendly cloud connectivity for analytics and monitoring.

Why it matters

Semantic Data Modeling: The self-describing, object-oriented information model (nodes, references, attributes) enables clients to discover and understand device capabilities with less vendor-specific mapping.

iotclass.org

Deck summary

Key takeaways

Full feature support.

  • Carry: ISA-95 Automation Pyramid with OPC-UA into typical deployment architecture; use: ERP, Business Planning as its limiting condition.
  • Year 2-3: Lower annual maintenance can drive positive ROI if the model, gateway, and certificate lifecycle are actually easier to operate than the custom alternative.
  • OPC-UA has emerged as the definitive standard for industrial interoperability.
iotclass.org

Retrieval practice

Recall check 1 of 3

Blueprint Bina says: answer from memory, then check your reasoning.

Q1A plant engineer notices that their OPC-UA historian is missing data points during peak production hours. The historian subscribes to 2,000 variables across 20 PLCs with a publishing interval of 100ms. What is the most likely cause and best optimization strategy?

AReplace all PLCs with faster controllers before checking subscription settings.
BIncrease subscription queues and add dead-band filtering for noisy variables.
CSwitch to raw Modbus TCP and lose subscriptions, security, and semantic context.
DReduce the publishing interval to 10ms and increase peak traffic further.
Show answer

Answer: B Correct!

iotclass.org

Retrieval practice

Recall check 2 of 3

Blueprint Bina says: answer from memory, then check your reasoning.

Q2A manufacturing company has 15-year-old Modbus RTU sensors, newer PROFINET PLCs, and wants to connect everything to a cloud analytics platform. Which OPC-UA integration pattern should they use?

AReplace all legacy equipment with native OPC-UA devices before adding analytics.
BUse gateways to expose Modbus and PROFINET in one OPC-UA namespace, then publish cloud streams over MQTT.
CBridge Modbus directly into MQTT and keep PROFINET separate from the analytics model.
DInstall full OPC-UA servers on each legacy serial sensor instead of using gateways.
Show answer

Answer: B Correct!

iotclass.org

Retrieval practice

Recall check 3 of 3

Blueprint Bina says: answer from memory, then check your reasoning.

Q3Place each OPC UA step where it lives so you can separate endpoint discovery, trust establishment, and information-model use.

ADiscover endpoints
BDead-band filter
CCompanion namespace
DAudit export
Show answer

Answer: A Follow discovery, trust, and information services so you can tell connection setup from authenticated session work and model access.

Q4Complete the OPC-UA route gate so bad-quality values and unapproved writes do not cross the integration boundary:

Aself.writable_nodes = set(writable_nodes)
Bself.writable_nodes = []
Cself.writable_nodes = None
Dself.writable_nodes = writable_nodes.pop()
Show answer

Answer: A The gate preserves OPC-UA evidence rules: poor-quality samples are held, writes require an approved node list, and cloud consumers receive read-only events instead of direct control access.

iotclass.org

Print reference

Answers

Answer key.

  1. B · Correct!
  2. B · Correct!
  3. A · Follow discovery, trust, and information services so you can tell connection setup from authenticated session work and model access.
  4. A · The gate preserves OPC-UA evidence rules: poor-quality samples are held, writes require an approved node list, and cloud consumers receive read-only events instead of direct control access.
iotclass.org