Service Description
Vessel Insight Connect

OVERVIEW OF THE SERVICE

Vessel Insight enables customers to:

• Capture quality sensor data from vessels, using purpose built Vessel Insight Edge hardware and software
• Securely transport the data from vessel to the Vessel Insight cloud storage
• Get quick insight into fleet and vessel status by using standard dashboards
• Analyze and export vessel data
• Access to a broad range of value adding application in the Kognifai Maritime Ecosystem

The service consists of both software and hardware which is installed on board the vessel.

SOFTWARE

Vessel Insight dashboards and applications are provided as Software as a Service (SAAS) and are accessible via a web browser. Users will be able to start all applications from .kognif.ai. The applications are built using modern technology and run on the Kognifai Platform. The Kognifai Platform is a digital platform consisting of a set of technology components – managed as a common entity – on which digital products and services can be built and managed. The platform backend and cloud infrastructure are based on Microsoft Azure.

HARDWARE

Vessel Insight uses maritime approved hardware. The hardware provided as part of the service for installation on board the vessel includes:

• Vessel Insight Edge Computer. A maritime approved PC which serves as a gateway and captures, aggregates, and encrypts data from the vessel control system and sensors before transport.
• Vessel Insight Edge router. A 24-port router connected to the vessel control systems/sensors and the Global Secure Network (GSN). The Global Secure network ensures secure and reliable transfer of data to cloud.

SYSTEM REQUIREMENTS

A summary of the requirements for using the service is stated below.

Upon onboarding the hardware components of the service, a “Network information request form” will be provided to capture details and necessary information to configure the components.

INTERNET CONNECTIVITY

• Internet connectivity over wired Ethernet (RJ45-CAT5) must be provided at the location where the Vessel Insight Edge router will be installed

NETWORK AND PORT REQUIREMENTS

Below is an overview, describing the necessary network and port configurations required for the service.

ON VESSEL

The following openings are required in the ship firewall:

Also, if DHCP cannot be provided, static IP Information for the WAN link must be provided, like Host IP address, Network mask, and Default Gateway.

CUSTOMER OFFICE LOCATIONS

Accessing Vessel Insight

• Port 443 must be open for outbound connections
• The following internet URL endpoints must be accessible: *.kognif.ai, login.microsoftonline.com, graph.microsoft.com, account.activedirectory.windowsazure.com, secure.aadcdn.microsoftonline-p.com, api.amplitude.com, bam.nr-data.net, *.statuspage.io, aadcdn.msauth.net, js-agent.newrelic.com

PHYSICAL REQUIREMENTS

• Vessel Insight Edge Hardware must be mounted according to the Mounting Specification which will be supplied when subscribing to the service. Wired Ethernet connection (RJ45-CAT5) to the Vessel Insight Edge router is required
• Vessel Insight Edge router must be mounted according to the Mounting Specification which will be supplied when subscribing to the service
• [Optional] Malware Protection Service PC must be mounted according to the Mounting Specification which will be supplied when subscribing to the service

CONNECTOR PROTOCOL SUPPORT

• The communication between the Vessel Insight Edge Router and the source system(s) on the vessel must be open for the chosen protocols. Configuration and necessary work to achieve this will be the customer’s responsibility.

DATA STORAGE

The Kognifai Platform is built on top of the public cloud solution as offered by Microsoft Azure. Azure data centers are used for processing and storage of data. The datacenters are operated to conform with industry standards for physical security, compliance, reliability and audited for compliance with ISO27001 and ISO 27018 standards on a yearly basis.

Location for customer data is on Azure European datacenters.

If there is a need for terminating the use of the service, data export and data cleanup can be initiated by submitting a ticket to Kongsberg support.

ACCESS TO THE SERVICE

Access to the service is provided through kognif.ai over the open internet. The URL will be https://*.kognif.ai where the subdomain address (*) will be assigned to the customer when subscribing to the service.

Vessel Insight supports the following browsers:

• Microsoft Edge, Google Chrome, Safari, Mozilla Firefox (latest versions)

SECURITY

Cybersecurity is a key aspect of the Kognifai Platform. Access to the service is limited to authenticated and authorized end users. Vessel Insight uses Kognifai ID for providing user authentication through federation with Microsoft Azure Active Directory (Azure AD) for single sign -on scenarios. Azure AD is a broadly used and highly secure framework for authenticating users, which provides configurable controls for accessing the service, e.g. Multi-Factor Authentication.

Further details on Cyber Security and Kognifai Platform are available in the Trust Center. Questions and concerns regarding security and privacy can be directed to trust@kongsbergdigital.com

CUSTOMER SPECIFIC SERVICES

The Vessel Insight service is delivered with a pre-defined set of features, providing instant value and short time-to-market. However, if customizations are needed beyond the standard service, Kongsberg Digital can offer a highly professional team to accommodate the needs. Onboarding to this offer is subject to be agreed upon in a case-by-case manner.

VESSEL INSIGHT FEATURES

An overview of the various functions and features of the service:

The feature details are explained in Appendix A – Feature set descriptions.

The “Included” column show details for the feature.

• “Yes”: Included in the service
• “Option”: The feature can be added at an added cost

“On roadmap”: The feature is planned for release in the future and might incur added cost.