The OPC Unified Architecture (OPC UA) defines a platform-independent, service-oriented architecture for secure and reliable data exchange in industrial automation systems. The architectural concepts of OPC UA are standardized in the IEC 62541 series, which specifies the communication models, information modeling framework, services, and security mechanisms used to implement interoperable industrial communication systems.
Unlike legacy OPC specifications that depended on Microsoft COM/DCOM technology, OPC UA introduces a multi-layer architecture designed to support distributed industrial systems, embedded devices, cloud platforms, and Industrial Internet of Things (IIoT) infrastructures.
The architecture enables interoperable communication between heterogeneous industrial systems, including PLCs, SCADA systems, historians, MES platforms, and enterprise applications.
Table of Contents
Architectural Design Principles
The OPC UA architecture was designed according to several fundamental engineering principles:
Platform Independence
The architecture is independent of specific operating systems or hardware platforms. OPC UA implementations can run on:
- embedded devices
- industrial controllers
- Windows and Linux servers
- cloud infrastructure
Service-Oriented Architecture
OPC UA is built around a service-oriented architecture (SOA) where functionality is exposed as services that can be invoked by clients.
This approach allows systems to interact through standardized service interfaces rather than proprietary communication protocols.
Information Modeling
A key innovation of OPC UA is the integration of information modeling within the communication architecture. Instead of exchanging only raw data values, OPC UA provides semantic structures that describe industrial systems and their relationships.
Security by Design
Security mechanisms are integrated into every architectural layer, including:
- authentication
- encryption
- message signing
- certificate management
These mechanisms ensure that communication remains secure even in distributed and cloud-connected environments.
OPC UA Layered Architecture
The OPC UA architecture is organized into several functional layers that separate application logic from communication mechanisms.
The primary architectural layers include:
- Application Layer
- Service Layer
- Information Model Layer
- Communication Stack
- Transport Layer
Each layer provides specific functionality while maintaining abstraction from lower-level implementation details.
Application Layer
The Application Layer represents the industrial software components that implement OPC UA functionality.
Examples include:
- SCADA systems
- Human Machine Interfaces (HMI)
- PLC gateways
- Industrial data historians
- Industrial IoT platforms
Applications may operate as either:
- OPC UA Clients, which request data and services
- OPC UA Servers, which expose data and capabilities to clients
In many industrial systems, applications may implement both client and server roles simultaneously.
OPC UA Service Layer
Communication in OPC UA is performed through services defined in the OPC UA service model, which is specified in IEC 62541-4.
Services define the standardized operations that clients can invoke on servers.
Major service groups include:
Discovery Services
Discovery services allow clients to locate OPC UA servers available on a network.
Examples include:
- FindServers
- GetEndpoints
Session Services
Session services establish and manage communication sessions between clients and servers.
Functions include:
- session creation
- authentication
- session termination
Attribute Services
Attribute services allow clients to read or write node attributes in the server address space.
Examples include:
- Read
- Write
Subscription Services
Subscription services allow clients to receive asynchronous notifications when monitored values change.
This mechanism enables efficient real-time monitoring without continuous polling.
OPC UA Information Model Layer
The Information Model Layer defines how industrial data and device structures are represented.
The OPC UA information model is defined in IEC 62541-5.
The information model introduces a semantic representation of industrial systems using structured objects and relationships.
Key features include:
- object-oriented modeling
- inheritance
- extensibility
- standardized data types
The information model allows industrial equipment to be described using self-describing data structures, enabling interoperability between systems from different vendors.
OPC UA Address Space
The information model is implemented within the OPC UA Address Space, which defines a graph-based representation of system data.
The Address Space Model is specified in IEC 62541-3.
The address space consists of interconnected nodes that represent industrial entities.
Node classes include:
- Objects
- Variables
- Methods
- ObjectTypes
- VariableTypes
- DataTypes
- ReferenceTypes
- Views
Nodes are connected through references, forming a network of relationships that describe the structure and behavior of the system.
This graph-based representation enables OPC UA servers to represent complex industrial systems such as production lines, machines, and control devices.
OPC UA Communication Stack
The OPC UA communication stack defines how messages are encoded, transported, and processed between applications.
The communication stack consists of several layers:
Encoding Layer
Messages can be encoded using:
- OPC UA Binary encoding
- XML encoding
- JSON encoding (in modern implementations)
Binary encoding is the most commonly used format due to its efficiency in industrial environments.
Secure Channel Layer
The secure channel layer provides message security through:
- encryption
- message signing
- integrity validation
Secure channels ensure that communication remains confidential and tamper-proof.
Session Layer
The session layer manages application sessions between clients and servers.
Sessions maintain state information and allow secure communication across multiple service requests.
Transport Layer
The transport layer defines how OPC UA messages are transmitted over networks.
Communication mappings are defined in IEC 62541-6.
Supported transport protocols include:
- OPC UA TCP
- HTTPS
- WebSockets
Modern OPC UA implementations may also support publish–subscribe communication over:
- UDP
- MQTT
- AMQP
These transport mechanisms allow OPC UA to operate across both local industrial networks and wide-area internet-based infrastructures.
OPC UA Security Architecture
Security is integrated into the OPC UA architecture to protect industrial communication systems.
The security model includes several mechanisms:
Application Authentication
Applications authenticate using X.509 digital certificates.
Secure Channels
Secure channels protect message confidentiality and integrity.
User Authentication
OPC UA supports multiple user authentication methods including:
- username/password
- certificate authentication
- Kerberos
This multi-layer security architecture ensures secure communication even in distributed industrial environments.
Client–Server Architecture
The traditional OPC UA communication model is based on a client–server architecture.
In this model:
- the server exposes industrial data
- the client accesses the data through standardized services
Typical industrial architecture:
PLC → OPC UA Server
SCADA → OPC UA Client
MES → OPC UA ClientClients may read values, write control commands, invoke methods, or subscribe to events.
Publish–Subscribe Architecture
To support large-scale distributed systems, OPC UA also defines a publish–subscribe (PubSub) architecture.
In this model:
- publishers transmit data messages
- subscribers receive messages without direct client-server connections
PubSub communication supports:
- high scalability
- real-time data distribution
- efficient multicast communication
This architecture is particularly useful for Industrial IoT applications and large sensor networks.
Conclusion
The OPC UA architecture defined in the IEC 62541 standard series provides a comprehensive framework for interoperable industrial communication systems.
By combining:
- service-oriented communication
- semantic information modeling
- secure communication mechanisms
- scalable network architectures
OPC UA enables seamless integration of industrial devices, control systems, and enterprise applications.
As Industry 4.0 and Industrial IoT technologies continue to evolve, OPC UA architecture serves as a foundational technology enabling secure, standardized, and scalable industrial data exchange.