How you can use IoT to power Industry 4.0 innovation

IoT is ushering in an exciting—and sometimes exasperating—time of innovation. Adoption isn’t easy, so it’s important to hold a vision of the promise of Industry 4.0 in mind as you get ready for this next wave of business.

IoT can serve as an onramp to continual transformation, providing companies with the ability to capitalize more fully on automation, AI, and machine learning. As companies harness the power of IoT, cloud services, robotics, and other emerging technologies, they’ll discover new ways of working, creating, and living. They’ll test and learn more swiftly, and scale results in the most promising areas. And this innovation will find form in smart buildings, more efficient factories, connected cities, fully autonomous vehicles, a healthier environment, and better lives.

Between now and that digital world, there are years of trial and error and dozens of applications ahead. But companies across the spectrum are embedding IoT to attain data and analytics mastery, optimize processes, create new services, and rethink products right now. Their leaders are positioning themselves and their companies to take advantage of the promise of digitization across industries.

This post is the fourth in a four-part series designed to help companies maximize their ROI on IoT. In the first post, we discussed how IoT can transform businesses. In the second, we shared insights on how to create a successful strategy that yields desired ROI. In the third post, we discussed how companies can fill capability gaps. Now let’s offer some fresh thinking on what innovation could look like for your company.

IoT innovation is not one size fits all. What it means for a process manufacturing firm is necessarily different than what it will mean for a healthcare company. To help you understand how you might apply IoT to your business—and learn from companies that have gone before you—here are four different innovation plays.

Push service optimization to new levels

With almost all companies competing on the customer experience, it makes sense to optimize service levels to trim cost, error, and delay from customer-facing processes. Better service can be a key differentiator in the marketplace. And when it’s paired with continual optimization enabled by IoT, your customers start seeing the benefit in their businesses.

Jabil is one of the world’s largest and most innovative providers of manufacturing, design engineering, and supply-chain-management technologies. Jabil was quick to recognize that keeping and increasing its competitive edge required the company to accelerate production cycles and personalize products. Its customers might order a product only once, meaning that they couldn’t afford the time delays and waste of traditional inspection processes. “We have many products that customers expect to [have] in their shops within a week,” says Matt Behringer, chief information officer for enterprise operations and quality systems at Jabil. “And that is including transit.”

Jabil used an IoT approach based on the Microsoft Azure Cortana Intelligence Suite to connect systems, gain predictive intelligence, and increase its flexibility and scalability. In a pilot project that connected an electronics manufacturing production line to the cloud, Jabil was able to anticipate and avoid more than half of circuit board failures at the second step in the process, and the remaining 45 percent at the sixth step. By using AI and machine learning, Jabil can correct board errors even earlier in the process, reducing scrapped materials, product failures, and warranty issues. Now, the IoT platform monitors all individual production lines and collects data from every Jabil factory and product worldwide. Jabil is pushing optimization further by using deep neural networks to refine its automated optical inspection process, increasing speed and accuracy to new levels.

“One of the things we’re able to do with predictive analytics in Azure is reduce waste, whether it’s from a process or design issue, or as a result of maintaining enough excess inventory to ensure we have enough for shipment. We’re confident we can produce a good-quality product all the way through the line,” says Behringer.

Leverage data from a digital ecosystem

As companies build IoT-enabled systems of intelligence, they’re creating ecosystems where partners work together seamlessly in a fluid and ever-changing digital supply chain. Participants gain access to a centralized view of real-time data they can use to fine-tune processes, and analytics to enable predictive decision-making. In addition, automation can help customers reduce sources of waste such as unnecessary resource use.

PCL Construction comprises a group of independent construction companies that perform work in the United States, the Caribbean, and Australia. Recognizing that smart buildings are the future of construction, PCL is partnering with Microsoft to drive smart building innovation and focus implementation efforts.

The company is using the full range of Azure solutions—Power BI, Azure IoT, advanced analytics, and AI—to develop smart building solutions for multiple use cases, including increasing construction efficiency and workplace safety, improving building efficiency by turning off power and heat in unused rooms, analyzing room utilization to create a more comfortable and productive work environment, and collecting usage information from multiple systems to optimize services at an enterprise level. PCL’s customers benefit with greater control, more efficient buildings, and lower energy consumption and costs.

However, the path forward wasn’t easy. “Cultural transformation was a necessary and a driving factor in PCL’s IoT journey. To drive product, P&L, and a change in approach to partnering, we had to first embrace this change as a leadership team,” says PCL manager of advanced technology services Chris Palmer.

Develop a managed-services business

Essen, Germany-based thyssenkrupp Elevator is one of the world’s leading providers of elevators, escalators, and other passenger transportation solutions. The company uses a wide range of Azure services to improve usage of its solutions and streamline maintenance at customers’ sites around the globe.

With business partner Willow, thyssenkrupp has used the Azure Digital Twin platform to create a virtual replica of its Innovation Test Tower, an 800-foot-tall test laboratory in Rottweill, Germany. The lab is also an active commercial building, with nearly 200,000 square feet of occupied space and IoT sensors that transmit data 24 hours a day. Willow and thyssenkrupp are using IoT to gain new insights into building operations and how space is used to refine products and services.

In addition, thyssenkrupp has developed MAX, a solution built on the Azure platform that uses IoT, AI, and machine learning to help service more than 120,000 elevators worldwide. Using MAX, building operators can reduce elevator downtime by half and cut the average length of service calls by up to four times, while improving user satisfaction.

The company’s MULTI system uses IoT and AI to make better decisions about where elevators go, providing faster travel times or even scheduling elevator arrival to align with routine passenger arrivals.

“We constantly reconfigure the space to test different usage scenarios and see what works best for the people in the [Innovation Test Tower] building. We don’t have to install massive new physical assets for testing because we do it all through the digital replica—with keystrokes rather than sledgehammers. We have this flexibility thanks to Willow Twin and its Azure infrastructure,” says professor Michael Cesarz, chief executive officer for MULTI at thyssenkrupp.

Rethink products and services for the digital era

Kohler, a leading manufacturer, is embedding IoT in its products to create smart kitchens and bathrooms, meeting consumer demand for personalization, convenience, and control. Built with the Microsoft Azure IoT platform, the platform responds to voice commands, hand motions, weather, and consumer preset options.

And Kohler innovated fast, using Azure to demo, develop, test, and scale the new solutions. “From zero to demo in two months is incredible. We easily cut our development cycle in half by using Azure platform services while also significantly lowering our startup investment,” says Fei Shen, associate director of IoT engineering at Kohler.

The smart bathroom and kitchen products can start a user’s shower, adjust the water temperature to a predetermined level, turn on mirror lights to preferred brightness and color, and share the day’s weather and traffic. They also warn users if water floods their kitchen and bathroom. The smart fixtures provide Kohler with critical insights into how consumers are using their products, which they can use to develop new products and fine-tune existing features.

Kohler is betting that consumer adoption of smart home technology will grow and is pivoting its business to meet new demand. “We’ve been making intelligent products for about 10 years, things like digital faucets and showers, but none have had IoT capability. We want to help people live more graciously, and digitally enabling our products is the next step in doing that,” said Jane Yun, Associate Marketing Manager in Smart Kitchens and Baths at Kohler.

As these examples show, the possibilities for IoT are boundless and success is different for every company. Some firms will leverage IoT only for internal processes, while others will use analytics and automation to empower all the partners in their digital ecosystems. Some companies will wrap data services around physical product offerings to optimize the customer experience and deepen relationships, while still others will rethink their products and services to tap emerging market demand and out-position competitors.

How will you apply IoT insights to transform your businesses and processes? Get help crafting your IoT strategy and maximizing your opportunities for ROI.

Download the Unlocking ROI white paper to learn how to get more value from the Internet of Things.
Quelle: Azure

Google Cloud networking in depth: Cloud Load Balancing deconstructed

Google has eight services that serve over one billion users every day. To offer the best availability and user experience for these services, we at Google engineered load-balancing infrastructure that scales on demand, utilizes resources efficiently, is secure and optimized for latency. This same load-balancing infrastructure is what we provide to you for your applications, in the form of the Google Cloud Load Balancing family. Unlike traditional load-balancing solutions, each of our load-balancing solutions are designed as large-scale distributed software-defined systems that scale-out and are highly resilient.In this blog we will cover our portfolio of load-balancing offerings. We will start with our internet-facing load balancers that deliver Google’s massive edge-as-a-service to you via Network Load Balancing and Global Load Balancing. We’ll present benefits of container-native load balancing and show you how to secure the edge and optimize for latency and cost. Since many of you have services that are internal to Google Cloud, we’ll then cover your Internal Load Balancing options. We will wrap up by showing you how we can help you grow your cloud footprint and manage multi-cloud and heterogeneous services with internal layer-7 load balancing and Traffic Director for global service mesh.Maglev for fast and reliable Network Load BalancingFor load-balancing external layer-4 TCP/UDP traffic, we offer Network Load Balancing built using our Maglevs. In production since 2008, Maglevs load balance all traffic that comes into our data centers, and distribute traffic to front-end engines at our network edges. The layer-4 traffic is distributed to a set of regional backend instances using a 5-tuple hash consisting of the source and destination IP address, protocol and source and destination port.Maglev was a break from traditional load balancers in that it is software-based and operates in an active-active scale-out architecture. With Maglev Consistent Hashing, Maglev-based load balancers evenly distribute traffic over hundreds of backends as well as minimize the negative impact of unexpected faults on connection-oriented protocols. Network Load Balancing is a great solution for lightweight L4-based load balancing where you want to preserve the client IP address all the way to the backend instance and also perform TLS termination on these instances.Global Load Balancing for a single VIP, global reachFor our global load-balancing solution, we pushed load balancing to the edge of Google’s global network to front end the global load-balancing capacity behind a single Anycast Virtual IPv4 or IPv6 address. You can deploy capacity in multiple regions without having to modify the DNS entries or add new load balancer front-end IP address (VIPs) for new regions. You don’t have to deal with the challenges of traditional DNS-based load balancers such as clients caching IP addresses or regional siloed resources resulting in sub-optimal load balancing and utilization of backends instances.With global load balancing, you get cross-region failover and overflow. Global LB’s traffic distribution algorithm automatically directs traffic to the next closest instance with available capacity in the event of failure of or lack of capacity for instances in the region closest to end user.  Global LB delivers first class support for both VMs and containers. For containers, we built an abstraction called Network Endpoint Groups (NEG), which is essentially a group of IP address and port pairs. NEGs enable you to directly specify a container endpoint as opposed to first directing traffic to the node on which it resides and then redirecting to the container using kube-proxy. As a result, you can deliver lower latency, greater throughput and higher fidelity health checks for your services using NEGs.Secure the edgeTo secure your service, we recommend taking a defense-in-depth approach. We also recommend that you deploy TLS for data privacy and integrity purposes. We do not charge extra for encrypted vs. unencrypted traffic. We offer HTTPSand SSL proxy in our global load-balancing family. We also offer Managed Certificatesto reduce the work of procuring certs and managing their lifecycle. With SSL policies you can specify the minimum TLS version and SSL features that you wish to enable on your HTTP(S) and SSL proxy load balancers. We also offer multiple pre-configured profiles, including a custom one that lets you allows specify the ciphers and SSL features you want to use.With Google’s global network and global load-balancing, Google is able to mitigate and dissipate layer-3 and layer-4 volumetric attacks. To protect against application layer attacks, we recommend using Cloud Armor attached to your Global HTTP(S) load balancer. Use this in concert with Identity Aware Proxy to authenticate users and authorize access to your backend services.Optimize for latency and costMake the web fasterWe spend a lot of time at Google working to make the web faster. QUIC is a UDP-based encrypted transport optimized for HTTPS and HTTP/2is foundational for gRPC support. Google cloud load balancing supports QUIC traffic to the load balancer and supports multiplexed streams of HTTP/2 to the load balancer, followed by load balancing these multiple HTTP/2 streams to the backend.Google Cloud CDN runs on our globally distributed edge points, so you can reduce network latency when serving website content, offload content origins and reduce serving costs. Just set up HTTP(S) Load Balancing and then enable CDN by clicking a single checkbox.Optimize for performance or cost with Network TiersWith Network Tiers, you can optimize your workload for performance with Premium Tier, which takes advantage of Google’s performant network, or optimize for cost with Standard Tier, where your return traffic travels over regular ISP networks like other public clouds but incurs lower egress costs.Internal Load Balancing for private servicesMany Google Cloud customers have private workloads that need to be protected from the public internet. Those services need to scale and grow behind a private VIP that is accessible only by internal instances. For such users we offer regional layer-4 Internal Load Balancing based on our Andromeda network virtualization stack. Similar to our HTTP(S) Load Balancer and Network Load Balancer, Internal L4 Load Balancing is neither a hardware appliance nor an instance-based solution, and can support as many connections per second as you need since there’s no load balancer in the path between your client and backend instances.What’s next?For business agility, many organizations are transitioning from monolithic applications to microservices, looking for a uniform way to create and manage heterogenous and multi-cloud services with security, observability and resiliency. This is where service mesh comes in, providing software-defined networking (SDN) for services, including load balancing. With service mesh, networking complexity is abstracted away to the service mesh’s data-plane, which is implemented as a service proxy such as Envoy, leaving you free to focus on building business logic. Envoy is a performant, feature-rich and open-source service mesh data plane that you can configure and manage via the service mesh’s control plane (such as Istio). Google is a key contributor to both the Envoy and Istio open-source initiatives.We recently launched Traffic Director, a GCP-managed traffic management control plane for service mesh. Traffic Director communicates with the service proxies in the data plane using open-source xDS APIs to enable global load balancing, scalable health checking, autoscaling, resiliency and policy-driven traffic steering.Learn moreTo learn more about Cloud Load Balancing, start with the Next ‘19 talks onGoogle Cloud Load Balancing Deep Dive and Best Practices, Traffic Director and Envoy-based ILB for Production Grade Service Mesh & Istio and read the documentation. We’d love your feedback on these features and what else you’d like to see from our load balancing portfolio. You  can reach us at gcp-networking@google.com.
Quelle: Google Cloud Platform

Cloud Audit Logs: Integrated audit transparency for GCP and G Suite

Google Groups is a critical tool to control access to your Google Cloud Platform (GCP) projects, and you’ve told us that having Google Group audit logs available in Cloud Audit Logs would help streamline security and access monitoring. We’ve been working to unify these audit logs so you don’t have to integrate with multiple APIs to get a complete audit inventory of your GCP environment, and now, you can access the Google Groups audit logs right from within Cloud Audit Logs. This is an opt-in feature that you can turn on through the Admin console’s Data Sharing section under the Legal & Compliance.Using Google Groups to manage your organization’s data accessGoogle Groups are the recommended way to grant access to GCP resources when using IAM policies. Groups help you centralize access control, reduce duplication, delegate access management and scale your GCP environments securely. This launch is one of many investments we’re making to simplify using Google Groups within GCP.Google Cloud Audit LogsCloud Audit Logs is a Stackdriver security offering that lets you answer the question “who did what, when and where?” for your GCP environment.  It contains audit trails of all administrative changes, and data accesses of cloud resources by users.At the nucleus of all security operations, Cloud Audit Logs makes it possible to identify patterns of threat via Event Threat Detection, alert on security abnormalities via Cloud Security Command Center, remediate incidents via Stackdriver Incident Response and Remediation, and satisfy compliance requirements such as the NIST 800-92 Guide to Computer Security Log Management.A view into the futureAs more customers adopt G Suite and GCP to modernize their collaboration tools and applications, you’ve asked us to provide a more unified and consistent management plane. That is why we are bringing  group management directly into the Google Cloud Console. This includes various streams of security logs, audit logs from Cloud Identity, and G Suite audit logs. For example, when a Cloud Identity or G Suite administrator adds a user, or turns on a G Suite service, an audit log appears in both the G Suite Admin Audit Log, as well as the GCP Admin Activity Audit Log. Likewise, when a user signs into your domain, it’s recorded in the G Suite Login Audit Log and GCP Cloud Audit Log.To learn more about using Google Groups to manage access control, check out our overview of Identity and Access Management to learn more.
Quelle: Google Cloud Platform