Cloud-Fog Automation: The New Paradigm towards Autonomous Industrial Cyber-Physical Systems

TL;DR

This work advocates Cloud-Fog Automation as a new paradigm for realizing autonomous industrial cyber-physical systems by tightly integrating communication, computing, and control (3C co-design). It centers on three core domains—goal-oriented communication, virtualization-empowered computing, and QoS-aware control—and treats cyber-physical security as a cross-cutting requirement. A Cloud-Fog prototype with four industrial use cases demonstrates practical 3C co-design, while sections survey state-of-the-art and future directions in each domain, including TSN/uRLLC-enabled networks, containerized and microservice-based computing, SDN/NFV/VNE for network virtualization, and latency- and event-driven control strategies. The paper outlines a research roadmap addressing practical infrastructure, theoretical foundations, and security challenges to move toward fully autonomous ICPS with scalable, resilient, and secure cloud-fog orchestration.

Abstract

Autonomous Industrial Cyber-Physical Systems (ICPS) represent a future vision where industrial systems achieve full autonomy, integrating physical processes seamlessly with communication, computing and control technologies while holistically embedding intelligence. Cloud-Fog Automation is a new digitalized industrial automation reference architecture that has been recently proposed. This architecture is a fundamental paradigm shift from the traditional International Society of Automation (ISA)-95 model to accelerate the convergence and synergy of communication, computing, and control towards a fully autonomous ICPS. With the deployment of new wireless technologies to enable almost-deterministic ultra-reliable low-latency communications, a joint design of optimal control and computing has become increasingly important in modern ICPS. It is also imperative that system-wide cyber-physical security are critically enforced. Despite recent advancements in the field, there are still significant research gaps and open technical challenges. Therefore, a deliberate rethink in co-designing and synergizing communications, computing, and control (which we term "3C co-design") is required. In this paper, we position Cloud-Fog Automation with 3C co-design as the new paradigm to realize the vision of autonomous ICPS. We articulate the state-of-the-art and future directions in the field, and specifically discuss how goal-oriented communication, virtualization-empowered computing, and Quality of Service (QoS)-aware control can drive Cloud-Fog Automation towards a fully autonomous ICPS, while accounting for system-wide cyber-physical security.

Figures (5)

• Figure 1: Architectural overview of our Cloud-Fog Automation prototype with four representative use cases (adapted from lyu10558844): (1) regulatory control; (2) remote operation; (3) safety coordination; and (4) mobile navigation. The central pyramid figure illustrates the crucial role of 3C co-design in closing the gap between the current/emerging new-generation digital infrastructure and the vision of autonomous ICPS. Cyber-physical security cuts across the 3C domains.
• Figure 2: Converged network architecture in TSN-based new-generation digital infrastructure.
• Figure 3: System model for goal-oriented communication (adapted from niu2022semshift and getu2023semgoalsurvey).
• Figure 4: Virtualized-empowered computing across application, communication, and hardware layers for executing control logics within autonomous ICPS.
• Figure 5: An industrial control system representing the convergence of its cyber and physical layers. The state of the well-being of the IT system $x$ and the state of the OT system $\theta$ are interdependent. They are exposed to a broad attack surface, including DDoS attacks, ransomware, malware, jamming, MitM attacks, and human vulnerabilities. Security and resilience mechanisms must be designed at each layer to account for the cross-layer interactions and inter-dependencies. A co-design approach is essential to improve the cyber-physical security of the IT and OT-convergent ICPS.