prEN IEC 62541-4:2024

SLOVENSKI STANDARD
01-marec-2024
Enotna arhitektura OPC - 4. del: Storitve
OPC unified architecture - Part 4: Services
OPC Unified Architecture - Teil 4: Dienste
Architecture unifiée OPC - Partie 4: Services
Ta slovenski standard je istoveten z: prEN IEC 62541-4:2024
ICS:
25.040.40 Merjenje in krmiljenje Industrial process
industrijskih postopkov measurement and control
35.240.50 Uporabniške rešitve IT v IT applications in industry
industriji
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

65E/1053/CDV
COMMITTEE DRAFT FOR VOTE (CDV)
PROJECT NUMBER:
IEC 62541-4 ED4
DATE OF CIRCULATION: CLOSING DATE FOR VOTING:
2024-01-26 2024-04-19
SUPERSEDES DOCUMENTS:
65E/976/RR
IEC SC 65E : DEVICES AND INTEGRATION IN ENTERPRISE SYSTEMS
SECRETARIAT: SECRETARY:
United States of America Mr Donald (Bob) Lattimer
OF INTEREST TO THE FOLLOWING COMMITTEES: PROPOSED HORIZONTAL STANDARD:

Other TC/SCs are requested to indicate their interest, if any,
in this CDV to the secretary.
FUNCTIONS CONCERNED:
EMC ENVIRONMENT QUALITY ASSURANCE SAFETY
SUBMITTED FOR CENELEC PARALLEL VOTING NOT SUBMITTED FOR CENELEC PARALLEL VOTING
Attention IEC-CENELEC parallel voting
The attention of IEC National Committees, members of
CENELEC, is drawn to the fact that this Committee Draft for
Vote (CDV) is submitted for parallel voting.
The CENELEC members are invited to vote through the
CENELEC online voting system.
This document is still under study and subject to change. It should not be used for reference purposes.
Recipients of this document are invited to submit, with their comments, notification of any relevant patent rights of which
they are aware and to provide supporting documentation.
Recipients of this document are invited to submit, with their comments, notification of any relevant “In Some Countries”
clauses to be included should this proposal proceed. Recipients are reminded that the CDV stage is the final stage for
submitting ISC clauses. (SEE AC/22/2007 OR NEW GUIDANCE DOC).

TITLE:
OPC Unified Architecture - Part 4: Services

PROPOSED STABILITY DATE: 2026
NOTE FROM TC/SC OFFICERS:
electronic file, to make a copy and to print out the content for the sole purpose of preparing National Committee positions.
You may not copy or "mirror" the file or printed version of the document, or any part of it, for any other purpose without
permission in writing from IEC.

IEC CDV 62541-4 © IEC 2023
1 CONTENTS
3 FIGURES . v
4 TABLES . vi
5 FOREWORD . xiii
6 1 Scope . 1
7 2 Normative references . 1
8 3 Terms, definitions, abbreviated terms and conventions . 1
9 3.1 Terms and definitions . 1
10 3.2 Abbreviated terms . 3
11 3.3 Conventions for Service definitions . 3
12 4 Overview . 4
13 4.1 Service Set model . 4
14 4.2 Request/response Service procedures . 7
15 5 Service Sets . 8
16 5.1 General . 8
17 5.2 Service request and response header . 8
18 5.3 Service results . 8
19 5.4 Discovery Service Set . 9
20 5.4.1 Overview . 9
21 5.4.2 FindServers . 11
22 5.4.3 FindServersOnNetwork . 12
23 5.4.4 GetEndpoints . 13
24 5.4.5 RegisterServer . 15
25 5.4.6 RegisterServer2 . 17
26 5.5 SecureChannel Service Set . 18
27 5.5.1 Overview . 18
28 5.5.2 OpenSecureChannel . 20
29 5.5.3 CloseSecureChannel . 22
30 5.6 Session Service Set . 23
31 5.6.1 Overview . 23
32 5.6.2 CreateSession . 23
33 5.6.3 ActivateSession . 27
34 5.6.4 CloseSession . 30
35 5.6.5 Cancel . 31
36 5.7 NodeManagement Service Set . 31
37 5.7.1 Overview . 31
38 5.7.2 AddNodes . 31
39 5.7.3 AddReferences . 33
40 5.7.4 DeleteNodes . 35
41 5.7.5 DeleteReferences . 36
42 5.8 View Service Set . 37
43 5.8.1 Overview . 37
44 5.8.2 Browse . 37
45 5.8.3 BrowseNext . 39
46 5.8.4 TranslateBrowsePathsToNodeIds . 41
47 5.8.5 RegisterNodes . 43

IEC CDV 62541-4 © IEC 2023 ii
48 5.8.6 UnregisterNodes . 44
49 5.9 Query Service Set . 44
50 5.9.1 Overview . 44
51 5.9.2 Querying Views . 45
52 5.9.3 QueryFirst . 45
53 5.9.4 QueryNext . 49
54 5.10 Attribute Service Set . 50
55 5.10.1 Overview . 50
56 5.10.2 Read . 50
57 5.10.3 HistoryRead . 52
58 5.10.4 Write . 55
59 5.10.5 HistoryUpdate . 57
60 5.11 Method Service Set . 58
61 5.11.1 Overview . 58
62 5.11.2 Call . 59
63 5.12 MonitoredItem Service Set . 62
64 5.12.1 MonitoredItem model . 62
65 5.12.2 CreateMonitoredItems . 67
66 5.12.3 ModifyMonitoredItems . 69
67 5.12.4 SetMonitoringMode . 71
68 5.12.5 SetTriggering . 72
69 5.12.6 DeleteMonitoredItems . 73
70 5.13 Subscription Service Set . 74
71 5.13.1 Subscription model . 74
72 5.13.2 CreateSubscription . 80
73 5.13.3 ModifySubscription . 82
74 5.13.4 SetPublishingMode . 83
75 5.13.5 Publish . 85
76 5.13.6 Republish . 87
77 5.13.7 TransferSubscriptions . 87
78 5.13.8 DeleteSubscriptions . 89
79 6 Service behaviours . 90
80 6.1 Security . 90
81 6.1.1 Overview . 90
82 6.1.2 Obtaining and installing an Application Instance Certificate . 90
83 6.1.3 Determining if a Certificate is trusted . 91
84 6.1.4 Creating a SecureChannel . 95
85 6.1.5 Creating a Session . 97
86 6.1.6 Impersonating a User . 97
87 6.1.7 Continuous security checks . 98
88 6.2 Authorization Services . 98
89 6.2.1 Overview . 98
90 6.2.2 Indirect handshake with an Identity Provider . 98
91 6.2.3 Direct handshake with an Identity Provider . 99
92 6.3 Session-less Service invocation . 100
93 6.3.1 Description . 100
94 6.3.2 Parameters . 101
95 6.3.3 Service results . 102
96 6.4 Software Certificates . 102

iii IEC CDV 62541-4 © IEC 2023

97 6.5 Auditing . 102
98 6.5.1 Overview . 102
99 6.5.2 General audit logs . 102
100 6.5.3 General audit Events. 102
101 6.5.4 Auditing for Discovery Service Set . 102
102 6.5.5 Auditing for SecureChannel Service Set . 102
103 6.5.6 Auditing for Session Service Set . 103
104 6.5.7 Auditing for NodeManagement Service Set . 103
105 6.5.8 Auditing for Attribute Service Set . 103
106 6.5.9 Auditing for Method Service Set . 104
107 6.5.10 Auditing for View, Query, MonitoredItem and Subscription Service Set . 104
108 6.6 Redundancy . 104
109 6.6.1 Redundancy overview . 104
110 6.6.2 Server Redundancy. 105
111 6.6.3 Client Redundancy . 115
112 6.6.4 Network Redundancy . 115
113 6.6.5 Manually Forcing Failover . 116
114 6.7 Re-establishing connections . 117
115 6.8 Durable Subscriptions . 118
116 7 Common parameter type definitions . 119
117 7.1 AdditionalParametersType . 119
118 7.2 ApplicationDescription . 120
119 7.3 ApplicationInstanceCertificate . 120
120 7.4 ApplicationType . 121
121 7.5 BrowseDirection . 121
122 7.6 BrowseResult . 121
123 7.7 ContentFilter . 122
124 7.7.1 ContentFilter structure . 122
125 7.7.2 ContentFilterResult . 122
126 7.7.3 FilterOperator . 123
127 7.7.4 FilterOperand parameters . 130
128 7.8 Counter . 131
129 7.9 ContinuationPoint . 132
130 7.10 DataChangeTrigger . 132
131 7.11 DataValue . 132
132 7.11.1 General . 132
133 7.11.2 PicoSeconds . 133
134 7.11.3 SourceTimestamp . 133
135 7.11.4 ServerTimestamp . 133
136 7.11.5 StatusCode assigned to a value . 134
137 7.12 DiagnosticInfo . 134
138 7.13 DiscoveryConfiguration parameters . 135
139 7.13.1 Overview . 135
140 7.13.2 MdnsDiscoveryConfiguration . 135
141 7.14 EndpointDescription . 136
142 7.15 EphemeralKeyType . 136
143 7.16 ExpandedNodeId . 137
144 7.17 ExtensibleParameter . 137
145 7.18 Index . 137

IEC CDV 62541-4 © IEC 2023 iv
146 7.19 IntegerId . 137
147 7.20 MessageSecurityMode . 138
148 7.21 MonitoringParameters . 138
149 7.22 MonitoringFilter parameters . 139
150 7.22.1 Overview . 139
151 7.22.2 DataChangeFilter . 140
152 7.22.3 EventFilter . 140
153 7.22.4 AggregateFilter . 142
154 7.23 MonitoringMode. 143
155 7.24 NodeAttributes parameters . 144
156 7.24.1 Overview . 144
157 7.24.2 ObjectAttributes parameter . 145
158 7.24.3 VariableAttributes parameter . 145
159 7.24.4 MethodAttributes parameter . 146
160 7.24.5 ObjectTypeAttributes parameter . 146
161 7.24.6 VariableTypeAttributes parameter . 146
162 7.24.7 ReferenceTypeAttributes parameter . 147
163 7.24.8 DataTypeAttributes parameter . 147
164 7.24.9 ViewAttributes parameter . 147
165 7.24.10 GenericAttributes parameter . 148
166 7.25 NotificationData parameters . 148
167 7.25.1 Overview . 148
168 7.25.2 DataChangeNotification parameter . 148
169 7.25.3 EventNotificationList parameter. 149
170 7.25.4 StatusChangeNotification parameter . 149
171 7.26 NotificationMessage . 150
172 7.27 NumericRange . 150
173 7.28 QueryDataSet . 151
174 7.29 ReadValueId . 151
175 7.30 ReferenceDescription . 152
176 7.31 RelativePath . 153
177 7.32 RegisteredServer . 154
178 7.33 RequestHeader . 154
179 7.34 ResponseHeader . 157
180 7.35 ServiceFault . 157
181 7.36 SessionAuthenticationToken . 157
182 7.37 SignatureData . 158
183 7.38 SignedSoftwareCertificate . 159
184 7.39 StatusCode . 159
185 7.39.1 General . 159
186 7.39.2 Common StatusCodes . 161
187 7.40 TimestampsToReturn . 163
188 7.41 UserIdentityToken parameters . 164
189 7.41.1 Overview . 164
190 7.41.2 Token Encryption and Proof of Possession . 164
191 7.41.3 AnonymousIdentityToken . 169
192 7.41.4 UserNameIdentityToken . 169
193 7.41.5 X509IdentityTokens . 170
194 7.41.6 IssuedIdentityToken . 171

v IEC CDV 62541-4 © IEC 2023
195 7.42 UserTokenPolicy . 171
196 7.43 UserTokenType . 172
197 7.44 VersionTime . 172
198 7.45 ViewDescription . 172
199 Annex A (informative) BNF definitions . 174
200 A.1 Overview over BNF . 174
201 A.2 BNF of RelativePath . 174
202 A.3 BNF of NumericRange . 175
203 Annex B (informative) ContentFilter and Query examples . 176
204 B.1 Simple ContentFilter examples . 176
205 B.1.1 Overview . 176
206 B.1.2 Example 1 . 176
207 B.1.3 Example 2 . 177
208 B.2 Complex Examples of Query Filters . 177
209 B.2.1 Overview . 177
210 B.2.2 Used type model . 178
211 B.2.3 Example Notes . 180
212 B.2.4 Example 1 . 181
213 B.2.5 Example 2 . 182
214 B.2.6 Example 3 . 183
215 B.2.7 Example 4 . 185
216 B.2.8 Example 5 . 186
217 B.2.9 Example 6 . 188
218 B.2.10 Example 7 . 189
219 B.2.11 Example 8 . 191
220 B.2.12 Example 9 . 192
222 FIGURES
224 Figure 1 – Discovery Service Set . 4
225 Figure 2 – SecureChannel Service Set . 5
226 Figure 3 – Session Service Set . 5
227 Figure 4 – NodeManagement Service Set . 5
228 Figure 5 – View Service Set . 6
229 Figure 6 – Attribute Service Set . 6
230 Figure 7 – Method Service Set . 7
231 Figure 8 – MonitoredItem and Subscription Service Sets . 7
232 Figure 9 – Discovery process . 10
233 Figure 10 – Using a Gateway Server . 15
234 Figure 11 – The Registration Process – Manually Launched Servers . 16
235 Figure 12 – The Registration Process – Automatically Launched Servers . 16
236 Figure 13 – SecureChannel and Session Services . 19
237 Figure 14 – Multiplexing users on a Session. 25
238 Figure 15 – MonitoredItem model . 62
239 Figure 16 – Typical delay in change detection . 64
240 Figure 17 – Queue overflow handling . 65

IEC CDV 62541-4 © IEC 2023 vi
241 Figure 18 – Triggering model . 66
242 Figure 19 – Obtaining and installing an Application Instance Certificate . 91
243 Figure 20 – Determining if an Application Instance Certificate is trusted . 95
244 Figure 21 – Establishing a SecureChannel . 96
245 Figure 22 – Establishing a Session . 97
246 Figure 23 – Impersonating a User . 98
247 Figure 24 – Indirect handshake with an Identity Provider . 99
248 Figure 25 – Direct handshake with an Identity Provider . 100
249 Figure 26 – Transparent Redundancy setup example . 106
250 Figure 27 – Non-Transparent Redundancy setup . 107
251 Figure 28 – Client Start-up steps . 110
252 Figure 29 – Cold Failover . 111
253 Figure 30 – Warm Failover . 112
254 Figure 31 – Hot Failover . 113
255 Figure 32 – HotAndMirrored Failover . 114
256 Figure 33 – Server proxy for Redundancy . 114
257 Figure 34 – Transparent network Redundancy . 115
258 Figure 35 – Non-transparent network Redundancy . 116
259 Figure 36 – Reconnect sequence . 117
260 Figure 37 – Logical layers of a Server . 158
261 Figure 38 – Obtaining a SessionAuthenticationToken . 158
262 Figure 39 – EncryptedSecret layout . 166
263 Figure B.1 – Filter logic tree example . 176
264 Figure B.2 – Filter logic tree example . 177
265 Figure B.3 – Example Type Nodes . 179
266 Figure B.4 – Example Instance Nodes . 180
267 Figure B.5 – Example 1 Filter . 181
268 Figure B.6 – Example 2 filter logic tree . 183
269 Figure B.7 – Example 3 filter logic tree . 184
270 Figure B.8 – Example 4 filter logic tree . 186
271 Figure B.9 – Example 5 filter logic tree . 187
272 Figure B.10 – Example 6 filter logic tree . 188
273 Figure B.11 – Example 7 filter logic tree . 190
274 Figure B.12 – Example 8 filter logic tree . 191
275 Figure B.13 – Example 9 filter logic tree . 193
277 TABLES
279 Table 1 – Service definition table . 3
280 Table 2 – Parameter Types defined in OPC 10000-3 . 4
281 Table 3 – FindServers Service Parameters. 12
282 Table 4 – FindServersOnNetwork Service Parameters . 13
283 Table 5 – GetEndpoints Service Parameters . 15

vii IEC CDV 62541-4 © IEC 2023

284 Table 6 – RegisterServer Service Parameters . 17
285 Table 7 – RegisterServer Service Result Codes . 17
286 Table 8 – RegisterServer2 . 18
287 Table 9 – RegisterServer2 Service Result Codes . 18
288 Table 10 – RegisterServer2 Operation Level Result Codes . 18
289 Table 11 – OpenSecureChannel Service Parameters . 21
290 Table 12 – OpenSecureChannel Service Result Codes . 22
291 Table 13 – CloseSecureChannel Service Parameters . 23
292 Table 14 – CloseSecureChannel Service Result Codes . 23
293 Table 15 – CreateSession Service Parameters . 26
294 Table 16 – CreateSession Service Result Codes . 27
295 Table 17 – ActivateSession Service Parameters . 29
296 Table 18 – ActivateSession Service Result Codes . 30
297 Table 19 – CloseSession Service Parameters . 30
298 Table 20 – CloseSession Service Result Codes . 30
299 Table 21 – Cancel Service Parameters . 31
300 Table 22 – AddNodes Service Parameters . 32
301 Table 23 – AddNodes Service Result Codes . 32
302 Table 24 – AddNodes Operation Level Result Codes . 33
303 Table 25 – AddReferences Service Parameters. 34
304 Table 26 – AddReferences Service Result Codes . 34
305 Table 27 – AddReferences Operation Level Result Codes . 34
306 Table 28 – DeleteNodes Service Parameters . 35
307 Table 29 – DeleteNodes Service Result Codes . 35
308 Table 30 – DeleteNodes Operation Level Result Codes . 36
309 Table 31 – DeleteReferences Service Parameters . 36
310 Table 32 – DeleteReferences Service Result Codes . 36
311 Table 33 – DeleteReferences Operation Level Result Codes . 37
312 Table 34 – Browse Service Parameters . 38
313 Table 35 – Browse Service Result Codes . 39
314 Table 36 – Browse Operation Level Result Codes . 39
315 Table 37 – BrowseNext Service Parameters . 40
316 Table 38 – BrowseNext Service Result Codes . 40
317 Table 39 – BrowseNext Operation Level Result Codes . 41
318 Table 40 – TranslateBrowsePathsToNodeIds Service Parameters . 42
319 Table 41 – TranslateBrowsePathsToNodeIds Service Result Codes . 42
320 Table 42 – TranslateBrowsePathsToNodeIds Operation Level Result Codes . 43
321 Table 43 – RegisterNodes Service Parameters . 43
322 Table 44 – RegisterNodes Service Result Codes. 44
323 Table 45 – UnregisterNodes Service Parameters . 44
324 Table 46 – UnregisterNodes Service Result Codes . 44
325 Table 47 – QueryFirst Request Parameters . 47
326 Table 48 – QueryFirst Response Parameters . 48

IEC CDV 62541-4 © IEC 2023 viii

327 Table 49 – QueryFirst Service Result Codes . 49
328 Table 50 – QueryFirst Operation Level Result Codes . 49
329 Table 51 – QueryNext Service Parameters . 50
330 Table 52 – QueryNext Service Result Codes . 50
331 Table 53 – Read Service Parameters . 51
332 Table 54 – Read Service Result Codes . 51
333 Table 55 – Read Operation Level Result Codes . 52
334 Table 56 – HistoryRead Service Parameters . 53
335 Table 57 – HistoryRead Service Result Codes . 55
336 Table 58 – HistoryRead Operation Level Result Codes . 55
337 Table 59 – Write Service Parameters . 56
338 Table 60 – Write Service Result Codes . 57
339 Table 61 – Write Operation Level Result Codes . 57
340 Table 62 – HistoryUpdate Service Parameters . 58
341 Table 63 – HistoryUpdate Service Result Codes . 58
342 Table 64 – HistoryUpdate Operation Level Result Codes . 58
343 Table 65 – Call Service Parameters .
...