Patent Application
20200089666
Aspects of the present invention generally relate of the fields of networked computerized industrial control, automation systems and networked computerized systems utilized to monitor, log, and display relevant manufacturing/production events and associated data, and supervisory level control and manufacturing information systems. Such systems generally execute above a regulatory control layer in a process control system to provide guidance to lower level control elements such as, by way of example, programmable logic controllers or distributed control systems (DCSs). Such systems are also employed to acquire and manage historical information relating to processes and their associated outputs. More particularly, aspects of the present invention relate to systems and methods for storing and preserving gathered data and ensuring that the stored data is accessible when necessary. “Historization” is a vital task in the industry as it enables analysis of past data to improve processes.
Typical industrial processes are extremely complex and receive substantially greater volumes of information than any human could possibly digest in its raw form. By way of example, it is not unheard of to have thousands of sensors and control elements (e.g., valve actuators) monitoring/controlling aspects of a multi-stage process within an industrial plant. These sensors are of varied type and report on varied characteristics of the process. Their outputs are similarly varied in the meaning of their measurements, in the amount of data sent for each measurement, and in the frequency of their measurements. As regards the latter, for accuracy and to enable quick response, some of these sensors/control elements take one or more measurements every second. Multiplying a single sensor/control element by thousands of sensors/control elements (a typical industrial control environment) results in an overwhelming volume of data flowing into the manufacturing information and process control system. Sophisticated data management techniques have been developed to store and maintain the large volumes of data generated by such system. These issues are multiplied in a system which stores data from multiple tenants at once in such a way that each tenant's data is secure from access by others. It is a difficult but vital task to ensure that the process is running efficiently.
Aspects of the present invention permit storing data from multiple tenants and enabling access to the data in multiple locations and forms. Moreover, aspects of the invention improve the process of securely storing raw data and metadata of multiple tenants in a centralized location such as a historian.
In one form, a historian system stores data values and associated metadata. The system has a historian data server, a metadata server, and one or more data collector devices. The one or more data collector devices collect data values from a set of one or more connected hardware devices. The collected data values are sent from the one or more data collector devices to the historian data server. The one or more data collector devices also create tag metadata associated with the collected data values. The created tag metadata is sent to the metadata server. The historian data server receives the collected data values and stores the collected data values in a memory storage device. The metadata server receives the tag metadata and stores the tag metadata in a memory storage device.
In another form, a historian system retrieves stored data values and associated metadata and provides it to a requesting user. The system has a historian data server, a metadata server, and one or more user devices. A user device of the one or more user devices receives a request for data from a user. The user device requests data values from the historian data server and tag metadata from the metadata server according to the received user request. The historian data server receives the request from the user device. The requested data values are retrieved from a memory storage device by the historian data server and sent to the user device. The metadata server receives the request for tag metadata from the user device. The requested tag metadata is retrieved from a memory storage device by the metadata server and sent to the user device.
In another form, a method for storing data values and metadata is provided.
In yet another form, a method for retrieving data values and metadata is provided.
Other features will be in part apparent and in part pointed out hereinafter.
Corresponding reference characters indicate corresponding parts throughout the drawings.
Referring to
In an embodiment, historian system 100 stores a variety of types of information in storage accounts 108. This information includes configuration data 110, raw time-series binary data 112, tag metadata 114, and diagnostic log data 116. The storage accounts 108 may be organized to use table storage or other configuration, such as page blobs.
In an embodiment, historian system 100 is accessed via web role instances. As shown, configurators 102 access configurator web role instances 124. And data collectors 104 access client access point web role instances 118. Online web role instances 120 are accessed by the user devices 106. The configurators 102 share configuration data and registration information with the configurator web role instances 124. The configuration data and registration information is stored in the storage accounts 108 as configuration data 110. The data collectors 104 share tag metadata and raw time-series data with the client access point web role instances 118. The raw time-series data is shared with storage worker role instances 126 and then stored as raw time-series binary data 112 in the storage accounts 108. The tag metadata is shared with metadata server worker role instances 128 and stored as tag metadata 114 in the storage accounts 108. The storage worker role instances 126 and metadata server worker role instances 128 send raw time-series data and tag metadata to retrieval worker role instances 130. The raw time-series data and tag metadata is converted into time-series data and sent to the online web role instances 120 via data retrieval web role instances 122. Users using the user devices 106 receive the time-series data from the online web role instances 120.
When historizing 226, the data may be sent to a historian that is on premises 204 or a historian that stores data in the cloud 206 (step 228). The HCAL 202 treats each type of historian in the same way. However, the types of historians may store the data in different ways. In an embodiment, the on-premises historian 204 historizes the data by storing the data as files in history blocks 230. The cloud historian 206 historizes the data by storing the data in page blobs 232, which enable optimized random read and write operations.
In the event that the connection between HCAL 202 and the historian 204 or 206 is not working properly, the flushed data from the active buffer 210 is sent to a store forward module 220 on the client (step 218). The data is stored 222 in the store forward module 220 in the form of snapshots written to store forward blocks 224 until the connection to the historian is functional again and the data can be properly transmitted. The store forward module 220 may also dispose of data after a certain period of time or when it is full. In those cases, it will send an error to the system to indicate that data is not being retained.
The HCAL 306 connects to the store forward process 308 through a storage engine used to control the store forward process. The Storage Engine enables the HCAL 306 to store and retrieve snapshots and metadata 310 of the data being collected and sent to the historian. In an embodiment, the store forward process 308 on the application server computer 302 is a child Storage Engine process 308 related to a main Storage Engine process 316 running on the historian computer 304.
In addition, HCAL 306 provides functions to connect to the historian computer 304 either synchronously or asynchronously. On successful call of the connection function, a connection handle is returned to client. The connection handle can then be used for other subsequent function calls related to this connection. The HCAL 306 allows its client to connect to multiple historians. In an embodiment, an “OpenConnection” function is called for each historian. Each call returns different connection handle associated with the connection. The HCAL 306 is responsible for establishing and maintaining the connection to the historian computer 304. While connected, HCAL 306 pings the historian computer 304 periodically to keep the connection alive. If the connection is broken, HCAL 306 will also try to restore the connection periodically.
In an embodiment, HCAL 306 connects to the historian computer 304 synchronously. The HCAL 306 returns a valid connection handle for a synchronous connection only when the historian computer 304 is accessible and other requirements such as authentication are met.
In an embodiment, HCAL 306 connects to the historian computer 304 asynchronously. Asynchronous connection requests are configured to return a valid connection handle even when the historian 304 is not accessible. Tags and data can be sent immediately after the connection handle is obtained. When disconnected from the historian computer 304, they will be stored in the HCAL's local cache while HCAL 306 tries to establish the connection.
In an embodiment, multiple clients connect to the same historian computer 304 through one instance of HCAL 306. An application engine has a historian primitive sending data to the historian computer 304 while an object script can use the historian software development kit (SDK) to communicate with the same historian 304. Both are accessing the same HCAL 306 instance in the application engine process. These client connections are linked to the same server object. HCAL Parameters common to the destination historian, such as those for store forward, are shared among these connections. To avoid conflicts, certain rules have to be followed.
In the order of connections made, the first connection is treated as the primary connection and connections formed after the first are secondary connections. Parameters set by the primary connection will be in effect until all connections are closed. User credentials of secondary connections have to match with those of the primary connection or the connection will fail. Store Forward parameters can only be set in the primary connection. Parameters set by secondary connections will be ignored and errors returned. Communication parameters such as compression can only be set by the primary connection. Buffer memory size can only be set by the primary connection.
The HCAL 306 provides an option called store/forward to allow data be sent to local storage when it is unable to send to the historian. The data will be saved to a designated local folder and later forwarded to the historian.
The client 302 enables store/forward right after a connection handle is obtained from the HCAL 306. The store/forward setting is enabled by calling a HCAL 306 function with store/forward parameters such as the local folder name.
The Storage Engine 308 handles store/forward according to an embodiment of the invention. Once store/forward is enabled, a Storage Engine process 316 will be launched for a target historian 304. The HCAL 306 keeps Storage Engine 308 alive by pinging it periodically. When data is added to local cache memory it is also added to Storage Engine 308. A streamed data buffer will be sent to Storage Engine 308 only when the HCAL 306 detects that it cannot send to the historian 304.
If store/forward is not enabled, streamed data values cannot be accepted by the HCAL 306 unless the tag associated with the data value has already been added to the historian 304. All values will be accumulated in the buffer and sent to the historian 304. If connection to the historian 304 is lost, values will be accepted until all buffers are full. Errors will be returned when further values are sent to the HCAL 306.
The HCAL 306 can be used by OLEDB or SDK applications for data retrieval. The client issues a retrieval request by calling the HCAL 306 with specific information about the query, such as the names of tags for which to retrieve data, start and end time, retrieval mode, and resolution. The HCAL 306 passes the request on to the historian 304, which starts the process of retrieving the results. The client repeatedly calls the HCAL 306 to obtain the next row in the results set until informed that no more data is available. Internally, the HCAL 306 receives compressed buffers containing multiple row sets from the historian 304, which it decompresses, unpacks and feeds back to the user one row at a time. Advantageously, network round trips are kept to a minimum. The HCAL 306 supports all modes of retrieval exposed by the historian.
In addition to the HSAL 426, the runtime layer 404 includes a component for event storage 418, a storage component 420, a metadata server 422, and a retrieval component 424.
In an embodiment, for tenants and data sources, the repositories 414 serve as interfaces that will read and write data using either page blob table storage or an SQL Server database. For tags, process values and events, the repositories 414 act as thin wrappers around the client proxy 416. In operation, the client proxy 416 uses the correct communication channel and messages to send data to the runtime engine 404. The historian storage abstraction layer 426 is an interface that mimics an I/O interface for reading and writing byte arrays. The implementation is configurable to either write to disk or page blob storage as described above.
In an embodiment, the historian system stores metadata in the form of tag objects. Every historian tag object is a metadata instance, which contains tag properties such as tag name, tag type, value range, and storage type. Moreover, the tag object is uniquely defined by a tag ID, which is a 16-byte globally unique identifier (GUID). The stored metadata includes values that determine how the associated data values are stored. This includes metadata that indicates whether the associated data value is a floating point value, an integer value, or the like. In an embodiment, the metadata includes an engineering unit range which indicates a range in which the associated data value must reside for the particular engineering units being used. In an embodiment, the historian system makes use of the engineering unit range to scale the raw data value when storing it on the data server. For instance, data values may be scaled to values between 0.0 and 1.0 based on the engineering unit range included in the metadata. Because the metadata contains the engineering unit range, the scaled value stored by the historian can be converted back to the raw data value with the added engineering units for presentation to user. For example, if the data value is of a data type known to only return values between −10 and 30, a data value of 30 is scaled to 1.0 and a data value of −10 is scaled to 0.0. A data value of 10 is scaled to 0.5. As a result, the scaled data values as stored on the data server cannot be interpreted correctly without knowing the related metadata in order to convert from scaled value to true value with the appropriate units.
The concept of tags is different from the concept of tag metadata instances. A tag is identified by a tag name, while a metadata instance is identified by tag ID. So for the same tag the system can have several metadata instances sharing the same name, but having different tag IDs. For example, the same tag could be reconfigured several times along the way. It could be created first as 16-bit unsigned integer, collect some 16-bit data, then reconfigured to be 32-bit unsigned integer, collect some 32-bit data, then reconfigured to 32-bit float. In this example, it comprises a single tag but has three different tag metadata instances identified by tag ID. A tag metadata instance can also be called a tag version. Tracking tag metadata is essential for data processing and, advantageously, the historian tracks what is stored in the raw binary data chunks. The historian stores tag versions in two places: A tag table (and its dependent tables) of a runtime database stores the most recent tag metadata called the current version, and the history blocks, where, for instance, tag metadata for classic tags is stored in files tags.dat, and for the other tags in files taginfo.dat.
When a tag is reconfigured over time, the runtime database maintains the current version. All previous versions can be found in the history blocks where previous versions are stored.
A Metadata Server (MDS) according to aspects of the invention is a module responsible for tag metadata storage and retrieval.
A diagram 600 of
If a tag is requested to be deleted, it is moved from the runtime cache 606 to the history cache 608. A reverse process is called tag resurrection, causing the MDS 602 to search the history cache 608 to find a tag metadata instance with all the same properties and a tag ID which can be reused again. The runtime database 604 implements a similar logic. Instead of generating a brand new tag ID it tries to reuse the existing one from the tag history table 612 and move the corresponding tag record from the tag history table 612 to the tag table 610. Advantageously, the tag resurrection logic prevents generating an unlimited number of tag metadata instances in scenarios when the tag properties are periodically changed.
The Web Role instance 702 connects to a Data Retrieval Web Role module 708 to retrieve tag metadata and time-series data from the historian. In an embodiment, the Data Retrieval Web Role module 708 comprises an OData layer. The Data Retrieval Web Role module 708 connects to both a Metadata Server Worker Module 714 to retrieve tag metadata 720 and a Retrieval Worker module 716 to retrieve data by tag name.
The On-premise Data Collector 704 connects to a Client Access Point (CAP) module 710 in order to create tags and send time-series data to the historian for storage. The CAP module 710 also connects to the Metadata Server Worker module 714 to create and retrieve tag metadata 720 and the Retrieval Worker module 716 to retrieve data by tag name, and further connects to a Storage Worker module 718 to store raw time-series binary data 724.
The On-premise Collector Configurator 706 connects to a Configurator Web Role module 712 for registering on premise data collectors with the historian and other configuration tasks. The Configurator Web Role module 712 connects to the Storage Worker module 718 for reading and writing configuration data 726 to the database.
The Metadata Server Worker module 714 creates and retrieves tag metadata 720 in a memory storage device of the historian database. The Metadata Server Worker module 714 retrieves metadata and provides it to the Data Retrieval Web Role module 708, the CAP module 710, and the Retrieval Worker module 716. The CAP module 710 also provides new tag metadata to the Metadata Server Worker module 714 to write into the tag metadata 720 in the database. Additionally, the Metadata Server Worker module 714 writes diagnostics log data 722 to the database as necessary.
The Retrieval Worker module 716 of
The Storage Worker module 718 reads and writes raw time-series binary data 724 in a memory storage device of the database and provides requested raw time-series binary data 724 to the Retrieval Worker module 716. Raw time-series binary data is received from the CAP module 710 and stored in the database. The Storage Worker module 718 receives configuration data 726 from the Configurator Web Role module 712 and writes it to the database, while also retrieving configuration data 726 from the database and providing it to the Configurator Web Role module 712. Additionally, the Storage Worker module 718 stores diagnostics log data 722 on the database as necessary.
In an embodiment, the historian system maintains data for multiple tenants such as different companies and the like. The data from different tenants should be securely isolated so as to prevent access of one tenant's data by another tenant. The historian system provides secure data isolation by making use of the described tag IDs and tenant specific namespaces. Each tenant namespace is made up of uniquely identified tag names within the namespace itself, and that tag names are associated with tag IDs as described above. In an embodiment, the tag IDs are unique identifiers such as universally unique identifiers (UUID) or globally unique identifiers (GUID).
The tag IDs are used to identify tag names and also tag types, raw data formats, storage encoding rules, retrieval rules, and other metadata. A combination of tag metadata properties uniquely identified by a tag ID is called a tag metadata instance, as described above.
In an embodiment, the historian system uses the divide between raw data and metadata to enforce access security of multiple tenants to the raw data. Storage of the data in the historian system occurs through a series of steps as described by the flowchart in
Retrieval of data from the historian system is executed as described in the flowchart in
In an embodiment, all tag metadata instances for a particular tenant are stored in a separate database which is only accessible by the particular tenant. This database may be located at the tenant's location or within the historian infrastructure. In this way, the tenant's metadata is secure. Because the metadata is necessary to properly interpret the encoded raw data, the encoded raw data is secure while being stored in a single, efficient historian database along with encoded raw data from other tenants. Encoding of the data can include scaling of the data values according to metadata of the values as described above, or other similar encoding schemes based on the associated metadata. Because the raw data of multiple tenants is stored together, a malicious party who gains access to the raw data database will not necessarily know which tag IDs belong to which tenant. This makes it very difficult for the malicious party to determine what kind of data they are accessing and which tenant's metadata will decode the data.
In an embodiment, the data security is further enforced by a protected account scheme. The protected account scheme comprises separate storage account keys for each tenant. Each tenant has at least one storage account key for accessing metadata instances in the tenant's metadata storage account and at least one storage account key for accessing the data values in the tenant's data storage account. The accounts cannot be accessed without the associated storage account key. In this way, obtaining a single storage account key for the metadata instances for a tenant yields no real information without the storage account key corresponding to the associated data values. Likewise, obtaining a storage account key for data values of a tenant yields no real information without the storage account key corresponding to the associated metadata instances. Storage account key data for tenants is also maintained in a protected form requiring the use of a tenant certificate for access.
The Abstract and Summary are provided to help the reader quickly ascertain the nature of the technical disclosure. They are submitted with the understanding that they will not be used to interpret or limit the scope or meaning of the claims. The Summary is provided to introduce a selection of concepts in simplified form that are further described in the Detailed Description. The Summary is not intended to identify key features or essential features of the claimed subject matter, nor is it intended to be used as an aid in determining the claimed subject matter.
For purposes of illustration, programs and other executable program components, such as the operating system, are illustrated herein as discrete blocks. It is recognized, however, that such programs and components reside at various times in different storage components of a computing device, and are executed by a data processor(s) of the device.
Although described in connection with an exemplary computing system environment, embodiments of the aspects of the invention are operational with numerous other general purpose or special purpose computing system environments or configurations. The computing system environment is not intended to suggest any limitation as to the scope of use or functionality of any aspect of the invention. Moreover, the computing system environment should not be interpreted as having any dependency or requirement relating to any one or combination of components illustrated in the exemplary operating environment. Examples of well-known computing systems, environments, and/or configurations that may be suitable for use with aspects of the invention include, but are not limited to, personal computers, server computers, hand-held or laptop devices, multiprocessor systems, microprocessor-based systems, set top boxes, programmable consumer electronics, mobile telephones, network PCs, minicomputers, mainframe computers, distributed computing environments that include any of the above systems or devices, and the like.
Embodiments of the aspects of the invention may be described in the general context of data and/or processor-executable instructions, such as program modules, stored one or more tangible, non-transitory storage media and executed by one or more processors or other devices. Generally, program modules include, but are not limited to, routines, programs, objects, components, and data structures that perform particular tasks or implement particular abstract data types. Aspects of the invention may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote storage media including memory storage devices.
In operation, processors, computers and/or servers may execute the processor-executable instructions (e.g., software, firmware, and/or hardware) such as those illustrated herein to implement aspects of the invention.
Embodiments of the aspects of the invention may be implemented with processor-executable instructions. The processor-executable instructions may be organized into one or more processor-executable components or modules on a tangible processor readable storage medium. Aspects of the invention may be implemented with any number and organization of such components or modules. For example, aspects of the invention are not limited to the specific processor-executable instructions or the specific components or modules illustrated in the figures and described herein. Other embodiments of the aspects of the invention may include different processor-executable instructions or components having more or less functionality than illustrated and described herein.
The order of execution or performance of the operations in embodiments of the aspects of the invention illustrated and described herein is not essential, unless otherwise specified. That is, the operations may be performed in any order, unless otherwise specified, and embodiments of the aspects of the invention may include additional or fewer operations than those disclosed herein. For example, it is contemplated that executing or performing a particular operation before, contemporaneously with, or after another operation is within the scope of aspects of the invention.
When introducing elements of aspects of the invention or the embodiments thereof, the articles “a,” “an,” “the,” and “said” are intended to mean that there are one or more of the elements. The terms “comprising,” “including,” and “having” are intended to be inclusive and mean that there may be additional elements other than the listed elements.
In view of the above, it will be seen that several advantages of the aspects of the invention are achieved and other advantageous results attained.
Not all of the depicted components illustrated or described may be required. In addition, some implementations and embodiments may include additional components. Variations in the arrangement and type of the components may be made without departing from the spirit or scope of the claims as set forth herein. Additional, different or fewer components may be provided and components may be combined. Alternatively or in addition, a component may be implemented by several components.
The above description illustrates the aspects of the invention by way of example and not by way of limitation. This description enables one skilled in the art to make and use the aspects of the invention, and describes several embodiments, adaptations, variations, alternatives and uses of the aspects of the invention, including what is presently believed to be the best mode of carrying out the aspects of the invention. Additionally, it is to be understood that the aspects of the invention is not limited in its application to the details of construction and the arrangement of components set forth in the following description or illustrated in the drawings. The aspects of the invention are capable of other embodiments and of being practiced or carried out in various ways. Also, it will be understood that the phraseology and terminology used herein is for the purpose of description and should not be regarded as limiting.
Having described aspects of the invention in detail, it will be apparent that modifications and variations are possible without departing from the scope of aspects of the invention as defined in the appended claims. It is contemplated that various changes could be made in the above constructions, products, and process without departing from the scope of aspects of the invention. In the preceding specification, various preferred embodiments have been described with reference to the accompanying drawings. It will, however, be evident that various modifications and changes may be made thereto, and additional embodiments may be implemented, without departing from the broader scope of the aspects of the invention as set forth in the claims that follow. The specification and drawings are accordingly to be regarded in an illustrative rather than restrictive sense.
This application is a continuation-in-part of Lie et al., U.S. application Ser. No. 14/704,661 filed on May 5, 2015, entitled “Distributed Historization System,” which claims priority from Naryzhny et al., U.S. provisional application Ser. No. 61/988,731 filed on May 5, 2014, entitled “Distributed Historization System” and Madden et al., U.S. provisional application Ser. No. 62/092,051 filed on Dec. 15, 2014, entitled “Data Upload Security in a Historization System” and is a continuation-in-part of Bolotskikh et al., U.S. application Ser. No. 14/704,666 filed on May 5, 2015, entitled “Storing Data to Multiple Storage Location Types in a Distributed Historization System,” which claims priority from Naryzhny et al., U.S. provisional application Ser. No. 61/988,731 filed on May 5, 2014, entitled “Distributed Historization System.” The entire contents of the above identified applications are expressly incorporated herein by reference, including the contents and teachings of any references contained therein.
| Number | Date | Country | |
|---|---|---|---|
| 62092051 | Dec 2014 | US | |
| 61988731 | May 2014 | US |
| Number | Date | Country | |
|---|---|---|---|
| Parent | 14789654 | Jul 2015 | US |
| Child | 16686649 | US |
| Number | Date | Country | |
|---|---|---|---|
| Parent | 14704661 | May 2015 | US |
| Child | 14789654 | US | |
| Parent | 14704666 | May 2015 | US |
| Child | 14704661 | US |
