Design of a secure architecture for a distributed industrial data collection and storage system on the java platform

Abstract

In the context of industrial digitalization, ensuring the integrity, availability, and security of technological data in the mining industry has become highly relevant. Recent studies indicate that the Security-by-Design concept is a fundamental principle for building modern information systems, while microservices and event-driven architectures enhance scalability and flexibility. Particular attention is also paid to Industrial IoT security, IEC 62443 standards, cryptographic protocols such as TLS, and modern authorization mechanisms.

The aim of this study is to design a secure distributed architecture for industrial data collection and storage on the Java platform, ensuring reliable data acquisition, fault-tolerant storage, and controlled access.

The research methodology includes systems analysis, threat modeling, architectural design, and analysis of modern distributed system approaches. A microservices-based architecture is proposed, implementing Security-by-Design principles, zone segmentation in accordance with IEC 62443, and the Zero Trust concept. Secure communication is achieved using TLS 1.3 with mutual authentication (mTLS), while access control is implemented via RBAC. Data exchange is organized using an event-driven architecture. To ensure data reliability, a hybrid storage model (offline-first) with replication and synchronization based on Event Sourcing and Change Data Capture is applied.

The results demonstrate improved fault tolerance, elimination of single points of failure, and continuous system operation under partial failures. The proposed architecture enhances data transmission security, ensures strict access control, and enables comprehensive auditing. The conclusions confirm the effectiveness of the microservices approach and modern security mechanisms for upgrading industrial systems and integrating them into enterprise IT infrastructures in accordance with Industry 4.0 requirements.