Patent Application
20050027376
The present invention relates generally to process plants and, more particularly, to security related to configuring a process plant and viewing the operation of the process plant.
Distributed process control systems, like those used in chemical, petroleum or other processes, typically include one or more process controllers communicatively coupled to one or more field devices via analog, digital or combined analog/digital buses. The field devices, which may be, for example, valves, valve positioners, switches and transmitters (e.g., temperature, pressure, level and flow rate sensors), are located within the process environment and perform process functions such as opening or closing valves, measuring process parameters, etc. Smart field devices, such as the field devices conforming to the well known Fieldbus protocol may also perform control calculations, alarming functions, and other control functions commonly implemented within the controller. The process controllers, which are also typically located within the plant environment, receive signals indicative of process measurements made by the field devices and/or other information pertaining to the field devices and execute a controller application that runs, for example, different control modules which make process control decisions, generate control signals based on the received information and coordinate with the control modules or blocks being performed in the field devices, such as HART and Fieldbus field devices. The control modules in the controller send the control signals over the communication lines to the field devices to thereby control the operation of the process plant.
Information from the field devices and the controller is usually made available over a data highway to one or more other hardware devices, such as operator workstations, personal computers, data historians, report generators, centralized databases, etc., typically placed in control rooms or other locations away from the harsher plant environment. These hardware devices run applications that may, for example, enable an operator to perform functions with respect to the process, such as changing settings of the process control routine, modifying the operation of the control modules within the controllers or the field devices, viewing the current state of the process, viewing alarms generated by field devices and controllers, simulating the operation of the process for the purpose of training personnel or testing the process control software, keeping and updating a configuration database, etc.
As an example, the DeltaV™ control system, sold by Fisher Rosemount Systems, Inc. includes multiple applications stored within and executed by different devices located at diverse places within a process plant. A configuration application, which resides in one or more operator workstations, enables users to create or change process control modules and download these process control modules via a data highway to dedicated distributed controllers. Typically, these control modules are made up of communicatively interconnected function blocks, which are objects in an object oriented programming protocol that perform functions within the control scheme based on inputs thereto and that provide outputs to other function blocks within the control scheme. The configuration application may also allow a configuration designer to create or change operator interfaces which are used by a viewing application to display data to an operator and to enable the operator to change settings, such as set points, within the process control routines. Each dedicated controller and, in some cases, field devices, stores and executes a controller application that runs the control modules assigned and downloaded thereto to implement actual process control functionality. The viewing applications, which may be run on one or more operator workstations, receive data from the controller application via the data highway and display this data to process control system designers, operators, or users using the user interfaces, and may provide any of a number of different views, such as an operator's view, an engineer's view, a technician's view, etc. A data historian application is typically stored in and executed by a data historian device that collects and stores some or all of the data provided across the data highway while a configuration database application may run in a still further computer attached to the data highway to store the current process control routine configuration and data associated therewith. Alternatively, the configuration database may be located in the same workstation as the configuration application.
Presently, configuration applications may include a library of template objects, such as function block template objects and, in some cases, control module template objects. These configuration applications are used to configure a control strategy for a process plant. The template objects all have default properties, settings and methods associated therewith and the engineer using the configuration application can select these template objects and essentially place copies of the selected template objects into a configuration screen to develop a control module. During the process of selecting and placing the template objects into the configuration screen, the engineer interconnects the inputs and outputs of these objects and changes their parameters, names, tags and other properties to create a specific control module for a specific use in the process plant. After creating one or more such control modules, the engineer can then instantiate the control module and download it to the appropriate controller or controllers and field devices for execution during operation of the process plant.
Thereafter, the engineer generally creates one or more displays for operators, maintenance personnel, etc. within the process plant by selecting and building display objects in a display creation application. These displays are typically implemented on a system wide basis in one or more of the workstations and provide preconfigured displays to the operator or maintenance persons regarding the operating state of the control system or the devices within the plant. Typically, these displays take the form of alarming displays that receive and display alarms generated by controllers or devices within the process plant, control displays indicating the operating state of the controllers and other devices within the process plant, maintenance displays indicating the functioning state of the devices within the process plant, etc. These displays are generally preconfigured to display, in known manners, information or data received from the process control modules or the devices within the process plant. In some known systems, displays are created through the use of objects that have a graphic associated with a physical or logical element and that is communicatively tied to the physical or logical element to receive data about the physical or logical element. The object may change the graphic on the display screen based on the received data to illustrate, for example, that a tank is half full, to illustrate the flow measured by a flow sensor, etc.
Similar to the control configuration application, a display creation application has template graphical display items, such as tanks, valves, sensors, operator control buttons like slide bars, on/off switches, etc. which may be placed on a screen in any desired configuration to create an operator display, maintenance display and the like. When placed onto the screen, individual graphic items may be interconnected on the screen in a manner that provides some information or display of the inner-workings of the process plant to different users. However, to animate the graphic display, the display creator must manually tie each of the graphical items to data generated within the process plant, such as data measured by sensors or indicative of valve positions, etc. by specifying a communication link between the graphic item and the relevant data source within the process plant. This process is tedious, time consuming and maybe fraught with error.
While the control template objects within the control configuration application and the display items within the display creation application are convenient because they can be copied and used to create many different control modules and graphical displays, there is often a need to create numerous of the same control module and graphical display for different equipment within the process plant. For example, many medium to large sized process plants have numerous instances of the same or similar equipment that can be controlled and viewed using the same basic general control module and display. To create these numerous control modules and displays, however, a general control module or display module is created and this general control or display module is then copied for each of the different pieces of equipment for which it is applicable. Of course, after being copied, each of the new control or display modules must be manually altered in the configuration application to specify the particular equipment to which it is attached and all of these control and display modules must then be instantiated and downloaded to the process control system.
Unfortunately, the control modules and displays items discussed above are not modular in any manner. Thus, after being copied, each of the control modules and displays must be manually and individually altered using the appropriate configuration application to specify the equipment within the plant to which they are to be associated. In a plant having many copies of the same type of equipment (i.e., replicated equipment), this process is tedious, time consuming and fraught with operator introduced errors. Still further, once programmed, these different control modules and displays are not aware of each other. Therefore, to make a change to the control modules once created, the engineer or operator must manually make the same change to each of the different control modules for the different replicated equipment which, again, is time consuming and tedious. The same problem applies for the graphical views created for the different sets of replicated equipment within the plant. In other words, once a specific control module or a specific graphical view is created (individually or by being copied from a template object) and is then tied to a particular set of equipment within the plant, this control module or graphical view exists as a separate entity or object within the system without any automatic awareness of the other control modules or graphical displays that are the same or similar to it. As a result, changes applicable to every one of the control modules and graphical displays of a particular type must be made individually on those modules and displays.
Still further, because each control module and display is an individual object, it must be open, in the sense that all of its internal parameters, views, function blocks, and other elements must be made available to any user to be changed, viewed, etc. Currently, there is no manner of controlling what certain operators or other users may see or have access to in these control modules and displays and, thus, there is no ability to hide certain elements of these control modules and displays, such as proprietary software and methods, alarming activities, etc. from the user of the control modules and displays.
A configuration system uses process plant items that may represent, or be capable of representing, entities in a process plant to assist in configuring, organizing, and changing the control and display activities within the process plant. Access to the items may be controlled by associating access control data with the items. The configuration system may also use objects that represent, or may be capable of representing, one or more steps to be performed by entities in the process plant. Access to these objects may be controlled by associating access control data with the objects. The access control data may indicate whether users or certain users may be able to, for example, view or modify all or some data associated with the process plant items or the objects. The process plant items may comprise, for example, module class objects which may be capable of generically representing process entities of the process plant, module objects which may be capable of specifically representing process entities of the process plant, composite templates, module templates, etc. The objects that represent, or may be capable of representing, one or more steps to be performed by entities in the process plant may comprise, for example, phase classes or unit phases.
Configuration systems, viewing systems, debugging systems, run-time monitoring systems, asset management systems, etc., may examine the access control data associated with an item, group of items, object, group of objects, etc., to determine if access to data associated with the item or object is to be limited. Also, protected data could be, for example, encrypted to prevent a configuration system, a viewing system, a debugging system, a run-time monitoring system, an asset management system, etc., from viewing the protected data.
Referring now to
Each of the workstations 14 includes a memory 20 for storing applications, such as configuration design applications and display or viewing applications, and for storing data, such as configuration data pertaining to the configuration of the process plant 10. Each of the workstations 14 also includes a processor 21 that executes the applications to enable a configuration engineer to design process control routines and other routines and to download these process control routines to the controllers 12 or to other computers or to collect and display information to a user during operation of the process plant 10.
Still further, each of the controllers 12 includes a memory 22 that stores control and communication applications and a processor 24 that executes the control and communication applications in any known manner. In one case, each of the controllers 12 stores and executes a controller application that implements a control strategy using a number of different, independently executed, control modules or blocks 19. The control modules 19 may each be made up of what are commonly referred to as function blocks wherein each function block is a part or a subroutine of an overall control routine and operates in conjunction with other function blocks (via communications called links) to implement process control loops within the process plant 10. As is well known, function blocks, which may be objects in an object oriented programming protocol, typically perform one of an input function, such as that associated with a transmitter, a sensor or other process parameter measurement device, a control function, such as that associated with a control routine that performs PID, fuzzy logic, etc. control, or an output function which controls the operation of some device, such as a valve, to perform some physical function within the process plant 10. Of course hybrid and other types of complex function blocks exist such as model predictive controllers (MPCs), optimizers, etc. While the Fieldbus protocol and the DeltaV™ system protocol use control modules and function blocks designed and implemented in an object oriented programming protocol, the control modules could be designed using any desired control programming scheme including, for example, sequential function block, ladder logic, etc. and are not limited to being designed using function block or any other particular programming technique.
The workstations 14 may provide a graphical depiction of the process control routines 19 within the controllers 12 to a user via a display screen illustrating the control elements within the process control routines 19 and the manner in which these control elements are configured to provide control of the process plant 10. In the system of
In the process plant 10 illustrated in
Similarly, Reactor—02 includes a reactor vessel 200, three input valve systems 201, 202 and 203, an outlet valve system 204 and a level sensor 205 while Reactor—03 includes a reactor vessel 300, three input valve systems 301, 302 and 303, an outlet valve system 304 and a level sensor 305. In the example of
The controller 12a is communicatively coupled to the valve systems 101-104, 110, 201-204 and 301-304 and to the sensors 105, 205 and 305 via the bus 18 to control the operation of these elements to perform one or more operations with respect to the reactor units, Reactor-01, Reactor—02 and Reactor—03. Such operations, generally called phases, may include, for example, filling the reactor vessels 100, 200, 300, heating the material within the reactor vessels 100, 200, 300, dumping the reactor vessels 100, 200, 300, cleaning the reactor vessels 100, 200, 300, etc.
The valves, sensors and other equipment illustrated in
Generally speaking, the process plant 10 of
As will also be understood, the same phases or steps of a batch process can be implemented on each of the different reactor units of
As will be understood from
Similarly, the outlet valve system 104 is another piece of replicated equipment including three valves. As best illustrated in
In the past, to produce a control routine for controlling the different equipment associated with the reactors Reactor—01, Reactor—02 and Reactor—03 of
Also, in these systems, configuration had to be performed at a control module level, meaning that a separate control module had to be created for each of the different pieces of equipment or loops within the process plant. At the control module level, there are typically numerous different types of control modules which must be created for and bound to each of the process entities within the process plant. As a result, the configuration engineer spent a great deal of time simply copying and binding individual control modules to individual pieces of equipment within the plant. For example, a configuration engineer may have had to create and copy dozens of control modules for a reactor unit in the plant and then bind each of these control modules to particular equipment within that reactor unit. When the reactor unit was replicated in the plant, the configuration engineer's task became much more tedious because the configuration engineer had to perform this copying and binding process for dozens of control modules for each of the replicated equipment, which was time consuming and fraught with human introduced errors.
While, in the past, a configuration engineer could develop a unit module, these unit modules were merely containers for the phases that could be run on a unit and did not include equipment indications associated with the unit or control schemes used to control basic operations of the equipment within the units. Also, while templates could be created for control elements used to control different equipment, there were no packages of control modules that could be used to indicate higher level replicated entities within the plant, such as equipment and unit entities. In other words, to create control routines for different replicated entities within the process plant 10, the configuration engineer had to copy control modules for each of the replicated pieces of equipment at the lowest level of control and tailor each one of these control modules to a specific or particular piece of equipment or other entity within the process plant 10. In large plants with a lot of replicated equipment, this task could be time consuming and fraught with configuration errors. Still further, changes to a control module associated with replicated equipment had to be made manually to each of the different control modules for the different equipment, which was also tedious, time consuming and fraught with operator introduced errors. Likewise, displays for the operator had to be created separate and apart from the control modules and, similar to the control modules, the displays had to be individually created, modified and tied to the equipment within the process plant.
To make the creation and changing of a process configuration easier and less time consuming, a configuration application 50 stored in one of the workstations 14 of
The module class objects 52, which are essentially generic versions of process entities and are not tied to any particular process entity, can have lower-level objects or instances 53, 54, 55 and 56 (referred to herein as module objects or module blocks) associated therewith. Each module object is created from a module class object and inherits the same structure and properties as the module class object from which it was created. However, each module object is tied to a particular entity within the process plant 10. Thus, a single module class object 52 may be created to represent a particular type of reactor unit (no matter how many of those reactor units are present within the plant 10), while a different module object 53 may exist or be created for each of the different reactor units of that type actually present within the plant 10.
The module objects created from a module class object are associated with and owned by the module class object. As a result, changes made to the module class object can be automatically reflected in or propagated to each of the module objects associated with that module class object. Therefore, when a number of module objects have been created from a particular module class object, with each of the different module objects tied to different process entities, each of the different module objects can be changed by simply changing the module class object and having the changes automatically propagated down to the associated module objects.
Similarly, once the module objects have been created from a module class object, these module objects can be bound to particular equipment within the process plant 10 using a bulk editing method. In particular, because the module objects of a particular module class object are all coupled to or owned by the same module class object, they may all be configured together using, for example, a spreadsheet type application, which makes specification of the particular relationships between the module objects and the particular equipment in the plant 10 associated with those module objects easier and less time consuming.
The module class objects 52 of
Basically, each module class object is a configuration container including a generic definition of a process entity in the form of all of the different control and/or display applications or routines that are applicable to that entity to be used by the controllers 12 to control that entity or by the workstations 14 to perform display activities with respect to that entity. The module class object may represent a process entity of any nature, such as a unit, a piece of equipment, a control entity, a display application, etc. During the configuration of the process plant 10, the module class object may be used to create configuration instances of the process entity for any number of different process entities that conform to the definition provided by the module class object, with each configuration instance (the module object created from the module class object) being associated with or tied to a different actual process entity. These different module objects include, among other things, control routines and/or display routines bound to particular process entities as disposed within the process plant 10, with these control routines being able to be downloaded and used within the controllers 12 of
Different types of module class objects may reflect process entities of different scopes and, therefore, contain control and/or display routines configured to operate on or with respect to process entities of different scope. The larger the scope of the process entity, such as a unit, the more control and/or display routines will typically be associated with the module class object and the easier it is to configure sections of the plant using those module class objects. However, the larger the scope=of the process entity associated with a module class object, the less likely that the process will include replicated equipment at that scope and, thus, the less likely the module class object is to be useful on a large scale. Conversely, the lower the scope of the process entity associated with a module class object, the more likely the module class object is able to be used in various different locations of the plant, but the less amount of configuration is performed when using that module class object in any particular instance. In any event, the module class objects enable configuration to be performed for different replicated equipment at higher levels of abstraction than at the control module level, which makes configuring a process plant with replicated units and other equipment easier and less time consuming when using module class objects, especially module class objects of a large scope, such as at the unit level.
In one example, when configuring a process control system, a configuration engineer may create a single module class object for the different elements replicated within the process plant, such as for the different reactors of
While there are many different possible types of module class objects that can be created or used within a process plant to perform configuration activities within the process plant, four specific types discussed herein as examples include unit module class objects, equipment module class objects, control module class objects and display module class objects. Generally speaking, each different type of module class object is designed or intended for a different scope of control or use within the process plant 10. A unit module class object is intended to be used to represent (and to configure) control activities for a broad scope of equipment within a process plant. In particular, a unit module class object is intended to model or be used to configure an inter-related set of equipment (typically replicated equipment) such as, for example, the reactors of
An equipment module class object is intended to be used to represent (and to configure) control activities for a less broad scope of physical equipment within the process plant. The equipment associated with an equipment module class object is generally one or more physical entities, such as valves, flow meters, etc. that make up a subsystem of a unit and the equipment module class object may include one or more commands or algorithms, which may be command driven algorithms (CDAs), state driven algorithms (SDAs), sequential flow chart (SFC) algorithms, function block diagram (FBD) algorithms, phase algorithms, etc., to be performed on the piece of equipment. Thus, an equipment module class object is aimed at configuring the control of multiple low level components or entities within a unit to provide a basic set of functions on that equipment as used within the unit. As is known, a command driven algorithm (command driven control logic) is used when the low level components must be coordinated through multiple steps to accomplish a function. For example, a valve may need to be opened for a particular amount of time and then closed while another valve is opened and then closed. The totalizer 101 of
A control module class object is intended to be used to represent (and to configure) individual control elements or control modules within the process plant. A control module class object provides or specifies a particular type of control to be performed on a plant entity, such as a valve, meter, etc., a piece of equipment or even on a unit. Generally speaking, a control module class object provides a particular type of control programming, such as a set of communicatively interconnected function blocks defining some control module to be executed in a controller, useful to perform replicated control activities within a process plant. In most cases, a control module class object may provide a generic control strategy to manipulate a single device or a related set of devices.
A display module class object is intended to be used to represent (and to configure) display activities to be viewed by a user, such as to a control operator, during operation of the process plant 10. Thus, a display module class object may specify the programming needed to generate a display of a certain type within an operator workstation 14 of
Referring to
Similarly, there may be many different equipment module class objects used to represent, model and configure different types of equipment within the process plant 10. Examples illustrated in
Each module class object may have sub-objects associated therewith or owned thereby. These sub-objects may be module class objects in themselves or, as illustrated in
In the graph of
Each of the module class objects of
As part of a module class definition, a module class object may indicate or define other module class objects to be incorporated or used therein. When this is the case, the module objects created from that module class object will incorporate, refer to or include other module objects created from other module class objects according to the relationships defined at the module class level. Although not strictly necessary, unit module class objects may incorporate other unit module class objects, equipment module class objects, control module class objects and display module class objects, while equipment module class objects may incorporate other equipment module class objects, control module class objects and display module class objects. Control module class objects may incorporate or refer to other control module class objects and display module class objects. However, if desired, other module class object interrelationships may be used as well. These incorporation relationships are illustrated by the large arrows at the bottom of the graph of
It will also be understood that, when a first module class object incorporates or uses a second module class object, any module object created from or as an instance of the first module class object will incorporate or use a module object created from or as an instance of the second module class object. Thus, when the reactor unit module class object 410 uses a totalizer module class object 416 as an element or part thereof, the Reactor—01 module object will use or include one of the totalizer module objects, such as the Acid1 module object, as an element or part thereof. Similarly, if a totalizer equipment module class object incorporates or includes an outlet valve equipment module class object, a module object created from the totalizer equipment module class object, which will be uniquely named as, for example, Totalizer—1, will include a module object created from the outlet valve equipment module class object and uniquely named, for example, Outlet_Valve—2. In this manner, the relationships between the module class objects as defined at the module class object level are reflected in the module objects developed or created from these module class objects. This interconnection or referencing between module class objects (and therefore module objects) enables great variability and high transferability of objects during configuration activities so that, after a set of primitive module class objects, such as control and equipment module class objects, are created, more complex module class objects, such as unit module class objects, may be easily created by referencing the primitive module class objects. Of course, while module class objects can reference or use other module class objects, they can also or instead define or use simple objects or process entities, such as valves, sensors, etc. which have no associated module class object. These simple objects will be fully defined in terms of the control routines used therefore, within the module class object itself.
An example reactor unit module class object 410 is illustrated in
The unit module class object 410 also includes two example display module class objects called a reactor viewing display 520 and a reactor alarm display 522 which are references to the viewing display module class object 434 and the alarm display module class object 432 of
Moreover, the unit module class object 410 may include a memory or section 526 that stores references to the module class objects which are created by the configuration application 50 (
The unit module class object 410 also includes a set of methods 530 that can be performed by the unit module class object 410 either during or after the configuration activities. The methods 530 may include a change management method or application that automatically propagates changes made to the unit module class object 410 to each of the module objects 526 owned by the unit module class object 410. Other methods may include security control methods which perform security or access control with respect to the unit module class object 410 and/or with respect to any of the unit module objects 526 owned thereby or methods that enable a user or configuration engineer to specify change parameters and/or security parameters for the module class object or any module objects created therefrom. Of course different methods 530 may perform any other procedure on or with respect to the unit module class object 410.
If desired, the unit module class object 410 may control the manner in which changes made to the module class object 410 are propagated to the unit module objects 526 as well as the manner in which security access is set up in the unit module objects 526. One manner of providing this functionality is to set one or more flags or parameters within the unit module class object 410 to specify the manner in which changes are to be propagated to and security is to be handled in the unit module objects 526. In particular, one or more change propagation parameters may be set to specify whether or not changes made to the unit module class object 410 are to be automatically propagated to the one or more of the unit module objects 526. These change propagation parameters may be stored in the unit module objects 526 and may specify for the entire unit module object, or on a sub-element by sub-element basis, whether changes made to the unit module class object are to be reflected in the unit module object. For example, the unit module class object 410 may include a global change parameter 534 (marked “C”) which may be set in each unit module object created from the unit module class object 410 to enable or disable changes made to the unit module class object 410 from being automatically reflected in the unit module object. Likewise, each sub-element or block, such as the blocks 501-505, 510, 520 and 522 may include a change parameter 536 specifying, for that block only, whether changes made to that block in the unit module class object 410 are to be reflected in the unit module object. Of course, the different blocks of a unit module object may be set differently so that, for example, changes made to the Acid block 501 of the unit module class object 410 will be propagated to the corresponding Acid block of a particular one of the module objects 526 but so that changes made to the Alkali block 502 of the unit module class object 410 will not be propagated to the Alkali block of the particular one of the unit module objects. Furthermore, the different unit module objects created from a unit module class object may have the change parameters set differently from one another so that changes to the Alkali block 502 within the unit module class object 410 are propagated to the corresponding Alkali block of a first one of the unit module objects 526 but not to the corresponding Alkali block of a second one of the unit module objects 526. Of course, the change management method of the unit module class object 410 may access and use the change parameters of the unit module objects 526 to make or not make a change within those objects when the change is made in the unit module class object 410.
In a similar manner, the unit module class object 410 may include one or more security parameters which specify the manner in which security or access is controlled in each of the unit module objects 526. The unit module class object 410 may include a global security parameter 538 (marked “S”) which may provide any desired level of security to the entire reactor unit module object created from the reactor unit module class object 410 and/or may include a different security parameter 540 for each sub-element of the unit module class object 410, such as for each of the blocks 501-505, 510, 520, 522, etc. which specifies a level of security for each of those blocks on a block by block basis. The global security parameter 538 may be a locking parameter that locks the unit module class object to all users except those having a preauthorized security access level. Of course, the security parameters 538 and 540 may specify any one of a number of different levels of security, such as no access, limited access, access to particular types or identities of users, etc., and the security levels may be set to be different in the different blocks and in the different unit module objects created from the same unit module class object. If desired, part of the security measures may include providing encryption on one or more methods or algorithms associated with the unit module class object.
It will be understood that the change and security parameters of the unit module class object 410 may be set to a default value, and that the corresponding change and security parameters of each unit module objects 526 created from the unit module class object 410 may take on this default value when created. However, the default change and security parameters may also be individually changed (by a user with proper security access) in the unit module objects 526 after these unit module objects are created. While the change and security parameters are discussed herein with respect to a reactor unit module class object, similar change and security parameters may be provided in other types of unit module class objects as well as in any desired types of equipment module class objects, control module class objects, display module class objects, etc.
If desired, the unit module class object 410 may include references, such as URLs or other references, to documentation stored for or associated with the unit class module object, including documentation associated with the unit or any sub-elements of the unit associated with the unit module class object 410. Such references are illustrated in
For the sake of a further example of a module class object, a totalizer equipment module class object 416 is illustrated in
The totalizer equipment module class object 416 also includes a list or memory that stores indications (and if necessary communication paths to) a set of owned equipment module objects 566 named Acid1, Acid2, Alkali1, Alkali2, Water_Hdr1, etc. created from the equipment module class object 416. The totalizer equipment module class object 416 likewise includes a set of methods 570 including a>change management method that can be used in conjunction with the global change parameter 572 and/or the object based change parameters 574 to control the propagation of changes to the equipment module objects 566. The totalizer equipment module class object 416 also includes a global security parameter 580 as well as object based security parameters 582. The change and security parameters 572, 574, 580 and 582 operate generally as described with respect to the change and security parameters of the unit module class object 410 of
If desired, the equipment module class object 416 may include references, such as URLs or other references, to documentation stored for or associated with the equipment module class object, including documentation associated with the equipment or any sub-elements of the equipment associated with the equipment module class object 416. Such references are illustrated in
To configure the process plant 10, a configuration engineer creates the unit, equipment, control and display module class objects as necessary within a library associated with the configuration application 50 (
After creating one or more module objects from a module class object, the configuration engineer may bind the module objects (including the sub-objects or referenced objects) to the specific equipment within the plant. Because the unit module objects are associated with a single unit module class object, the alias names, parameters, and other variables for the different unit module objects can be specified together using, for example, a bulk processing application such as a spreadsheet application. Of course, by binding the module objects to particular equipment, the configuration engineer is actually specifying the control variables and communication path names used by control routines or control modules within the controllers 12 to perform control activities during operation of the process plant 10 or display variables used by display routines in, for example, the workstations 14, during operation of the process plant 10. After the binding activities are completed, the configuration engineer may then download the bound control routines to the controllers 12 and the bound display routines to the workstations 14.
In
Still further, the equipment module class library 606 includes a totalizer equipment module class object 614 (which may correspond to totalizer equipment module class object 416 of
Because the Dose phase class is written independently of the reactor, it uses alias names to refer to equipment which will be specified either at or before runtime but which, of course, cannot be specified in the reactor unit module class object. However, the references to actual devices or other process elements used within the control algorithm 648 are to those devices as located within the same unit module class object, in this case the reactor unit module class object. In the control routine 648, alias names are delineated by the # symbol so that the #WATER_IN# is an alias name for the water_in control module within the same module, i.e., the unit module class object 610. Likewise, the #WATER#, the #ACID#, and the #ALKALI# designations refer to the Water, Acid and Alkali totalizer module blocks within the Reactor unit module class object 610. Of course, it will be understood that the totalizer and reactor outlet equipment module class objects and the on/off valve control module class objects are associated to the reactor unit module class object through corresponding totalizer and reactor equipment module objects (named, for example, Alkali1, Acid1, etc.) and on/off control module objects (named, for example, Coarse_Valve1, Fine_Valve1, Outlet1, etc.) and so, become a logical part of that unit class object.
Of course if desired, these and similar screens as the screens 9-12 may be used by a configuration engineer to create and specify control algorithms within the Dose or other phase classes, or for any of the other modules, such as unit module class objects, equipment module class objects, and display module class objects to thereby create any desired module class object.
After creating one or more module class objects as described above, the configuration engineer may then use these module class objects to configure elements within the process plant 10.
To configure the salt manufacturing section of the plant 10, the configuration engineer may select the reactor unit module class object 610 within the unit module class library 604 of
As will be understood from the discussion with respect to the Reactor unit module class object 610, the Water_HDR1 is a shared water header (corresponding to the water inlet valve system 110 of
Of course, any of the equipment or control modules could be designated within a unit module class object as a shared or a non-shared module object. A non-shared module object is completely owned by the higher level module object in which the non-shared module object is created. A shared module object is owned or associated with more than one higher level module object. The shared or non-shared nature of a module object influences the depiction of a module object in the explorer view. In particular, a non-shared module object designation results in a module object being depicted only under the higher level object within the control strategy, while a shared module object designation results in the shared module block or module object being depicted under each of the higher level module objects which share that element as well as a stand-alone module object in the explorer hierarchy.
As will be understood, the configuration engineer is able to create a control strategy within the control strategies section 664 of the configuration system for an entire reactor by simply copying a reactor unit module class object 610 and creating an instance thereof (the reactor unit module object 668) having all of the elements specified within the reactor unit module class object 610. However, the individual units and in particular, the control elements, of the reactor unit module object 668 are able to be tied or bound to particular entities within the process plant 10 using input/output designations that vary from module object to module object and using a configuration dialog box which may be created to enable a configuration engineer to specify the manner in which module objects are to be bound in the process plant. Also, as indicated above, the created reactor module object 668 is still connected to and owned by the reactor unit module class object 610 so that changes made within the reactor unit module class object 610 can be automatically propagated to and reflected within the Reactor—1 module object 668, if so desired. In any case, the configuration engineer may change or individually tailor the created module objects, such as the Reactor—1 unit module object 668, to accept or reject changes from the parent module class object either on a global (object wide) basis or on an element by element basis.
The right hand portion 672 of the screen 660 illustrates or lists the parameters, alarms, etc. associated with all of the elements in the Reactor—1 module object 668 (as that is the element selected in the section 661) and the values, filtering and other information associated therewith. Of course, the configuration engineer may change or specify this data for each of the elements of the Reactor—1 module object 668 as desired to thereby tailor individual module objects created from the module class object in any desired manner.
A pop-up screen 686 provides information about the sub-module objects associated with the Acid1 equipment module object, as well as module class from which these sub-module objects originated or were created. In particular, the Acid1 equipment module object belongs to the totalizer equipment module class object, the Coarse_Valve1 and the Fine_Valve1 module objects belong to the On_Off Valve control module class object from the library section 608 of
The tabbed displays of the Acid1 configuration pop-up screen 686 also includes parameters, IO (input/output), alarms and Fieldbus designations. The parameters tab may be used to specify or fill in the parameters of each of the elements of the Acid1 totalizer of the Reactor—1 module object 668. The 10 tab may be used to specify the input/output connections between each of the elements of the Acid1 totalizer module object 682 of the Reactor—1 module object 668 to thereby bind those individual elements to actual equipment within the process plant 10. If desired, these bindings may be specified using a spread sheet algorithm or program such as that illustrated in
Referring again to
It will be understood that, in a similar manner, the configuration engineer may use any other unit module class objects, equipment module class objects and control module class objects as well as display module class objects to create configuration elements for units, equipment, control elements and display elements within the process control environment according to the principles described therein. It will also be understood that the use of these module class objects, which can be quite detailed in nature, provides the configuration engineer with great advantages in creating a configuration because the engineer does not have to create each individual control element separately or copy each individual control element separately from a control template but, instead, can use module class objects which are provided at higher and higher levels or scopes to create larger and larger bulk configuration items for use in configuring the process plant 10.
Still further, the configuration engineer may make changes to the elements of the configuration of different process entities on a global basis by changing one or more of the unit module class objects and having those changes propagated to each of the module objects created from and associated with those unit module class objects. This feature makes changes within the configuration easier and less time consuming to make after a configuration has already been created. Moreover, the configuration engineer may specify an access level to different elements or components of module objects within the configuration system by setting security parameters within the module class objects. As noted above, the configuration engineer may specify a security on a module by module basis at any level, such as at the unit module level, the equipment module level, the control module level and the display module level. In this manner, some elements of a unit module object may be viewable while others may not be viewable.
Of course, once the configuration system is complete and the module objects are bound to the individual process entities within the process plant 10, the control and display modules or elements associated with these modules may be downloaded to the proper controllers 12 and workstations 14 of
At a block 702, a user input is received that indicates that access to the process plant item is to be controlled (i.e., data associated with the process plant item are to be protected). For example, a person configuring the item may check a box, select a button, select a menu item, etc., that indicates that data associated with the item is to be protected. The user input may optionally also indicate which data associated with the item are to be protected. For example, the user may select to protect some data while leaving other data unprotected.
Alternatively, the user may not be allowed to select which data will be detected. For example, the user may be only able to choose between protection or no protection for an item. In one example, if a user selects to protect data associated with a module object or module class object, a set of the data associated with the module object or module class object may be protected whereas data not in the set is not protected. For example, function blocks that make up a module object or module class object and their interconnections will be protected, but parameters of the module object or module class object will not be protected.
In the screen display 720, the DYN_FULL composite template 726 has not been configured as protected and thus the function blocks 730 are depicted in the right-hand side 728 of the screen display 720. In contrast,
Referring again to
At a block 708, an indication of the data associated with the process plant item that is to be protected may be stored and associated with the item. For example, if the item is an object, the indication may be stored as part of that object. As another example, the indication could be stored separate from the object and a link to the indication could be stored as part of the object. As yet another example, if the process plant item is an item created from a module class object, the indication could be stored as part of the module class object. If the user is not permitted to select which data is to be protected, the block 708 may be omitted.
At a block 710, the password received at the block 706 may be stored and associated with the item. For example, if the item is an object, the password may be stored as part of that object. As another example, the password could be stored separate from the object and a link to the password could be stored as part of the object. As yet another example, if the process plant item is an item created from a module class object, the password could be stored as part of the module class object.
Optionally, the data to be protected and/or the password may be encrypted. In these implementations, the blocks 708 and 710 may comprise storing and associating the encrypted data and/or the encrypted password. Further, if the process plant item is an item created from a module class object the protected data or the encrypted data could be stored as part of the module class object.
If the item is a module class object, the indication of data to be protected and the password may be propagated to items created from the module class object.
A routine similar to the routine 700 could be used to “unprotect” the process plant item or particular data associated with the item. Namely, user input that indicating that data associated with a protected process plant item is to be unprotected could be received. Then, the user could be prompted for a password. If the received password matches the password stored and associated with the protected process plant item at the block 710 of the routine 700, the user could be prompted as to which (or whether all) of the protected data is to be unprotected. Then, the indication stored and associated with the item at the block 708 of the routine 700 could be modified to indicate that some or all of the data is not to be protected.
At a block 752, a user input is received that indicates that access to the group of items is to be controlled (i.e., the group of process plant items are to be protected). For example, access to data associated with each item in the group may be protected. Additionally, the addition of items to the group or the deletion of items from the group may not be permitted. The group of items may comprise, for example, a library of items, a folder of items, a class of items, a category of items, etc.
A person configuring the group of items may first select the group by, for example, highlighting the group of items, selecting a library name, a folder name, a class name, a category name, etc. Referring to
Referring again to
At a block 758, an indication that the group of items is to be protected may be stored and associated with the group of items. For example, if the group is a category of items, the indication that the category is to be protected may be stored and that indication may be associated with that category so that if an attempt is subsequently made to modify the category it may be determined that the category is protected. In addition, an indication may be associated with each item in the group. For example, if the items are objects, an indication that the item is in a protected group may be stored as part of each object. Also, the indication may be stored separate from each object and a link to the indication may be stored as part of each object.
At a block 760, the password received at the block 756 may be stored and associated with the group of items. For example, if the group is a category of items, the password may be stored and that password may be associated with the category. In addition, the password may be associated with each item in the group. For example, if the items are objects, the password may be stored as part of each object. Also, the password may be stored separate from each object and a link to the password may be stored as part of each object.
As with the routine 700 of
At a block 772, a request to view data associated with a process plant item may be received. For example, a user may select an item in an explorer view, attempt to “drill down” into a module to see components of the module, etc. Referring to
At a block 774, it is determined whether any data associated with the item is protected. For example, it may be determined whether there is an indication associated with the item, such as the indication stored at the block 708 in
If data associated with the item is not protected, the flow may proceed to a block 776 at which data associated with the item is displayed. For instance, if the user had selected the item in an explorer view, sub-elements of that item may be displayed in a portion of a display screen. Referring to
If it is determined at the block 774 that data associated with the item is protected, the flow may proceed to a block 786, at which protected data associated with the item is not displayed while unprotected data may be displayed.
Optionally, if it is determined at the block 774 that data associated with the item is protected, the flow may proceed to a block 778. At the block 778, the user may be prompted, using, for example, a window, a display screen, an audio prompt, etc., to enter a password. At a block 780, the password entered by the user may be received. For example, the password may be entered via a keyboard, keypad, touch screen, light pen, mouse, etc., of a computing system. At a block 782, the password received at the block 780 may be compared to a password stored and associated with the item. For example, the received password may be compared to the password stored at the block 710 of
At a block 784, it may be determined if the password received at the block 780 matches the password stored and associated with the item. If the passwords match, data associated with the item may be displayed at the block 776. If the passwords do not match, protected data associated with the item is not displayed while unprotected data may be displayed at the block 786. Referring to
It is to be understood that the blocks 778, 780, 782, and 784 are optional and may be omitted. In this case, as discussed above, if it is determined at the block 774 that data is protected, the flow may proceed to the block 786.
At a block 802, a request to modify a process plant item or a group of process plant items may be received. For example, a user may select an item in an explorer view for modification, select a component of an item for modification, etc. As another example, the user may attempt to delete an item from a group of items, add a new item to a group of items, etc.
At a block 804, it is determined whether the item or the group of items is protected. For example, it may be determined whether there is an indication associated with the item, such as the indication stored at the block 708 in
If data associated with the item or group of items is not protected, the flow may proceed to a block 806 at which modification is permitted. If, however, it is determined at the block 804 that the item or group of items is protected, the flow may proceed to a block 808. At the block 808, a notification (e.g., a window, display screen, audio prompt, etc.) may be generated that indicates that the item or group of items that the user is attempting to modify is protected. Optionally, the block 808 may be omitted. In this case, the item or group of items may be displayed in such a way as to indicate to the user that the item or group of items is protected. For example, a depiction of the item or group of items on a display screen may be “grayed,” include a symbol, etc., that indicates that the item or group is protected. In another example, there may be no indication to the user that the item or group is protected. In this case, the user may simply be unable to modify the item or group. After the block 808, or if the block 808 is omitted, the routine may end.
Optionally, the flow may proceed to a block 810. At the block 810, the user may be prompted, using, for example, a window, a display screen, an audio prompt, etc., to enter a password. At a block 812, the password entered by the user may be received. For example, the password may be entered via a keyboard, keypad, touch screen, light pen, mouse, etc., of a computing system. At a block 814, the password received at the block 812 may be compared to a password stored and associated with the item or group of items. For example, the received password may be compared to the password stored at the block 710 of
At a block 816, it may be determined if the password received at the block 812 matches the password stored and associated with the item or group of items. If the passwords match, the modification may be permitted at the block 806. If the passwords do not match, a notification may be generated at the block 818 that the modification is not permitted. Alternatively, or in addition, the notification may indicate that the password received at the block 812 was not the correct password.
As discussed above, blocks 810, 812, 814, 816, and 818 are optional and may be omitted. In this case, the routine may end after the block 808. Also, the block 808 is optional and may be omitted. In this case the routine may end or may proceed to the option block 810 if it is determined at the block 804 that the item or group is protected.
Although in
Referring to
At a block 832, a request to export a process plant item may be received. For example, a user may select an item in an explorer view for export. As another example, the user may select a group of process plant items for export, and the routine 830 may be implemented for each item in the group.
At a block 834, it is determined whether any data associated with the item is protected. For example, it may be determined whether there is an indication associated with the item, such as the indication stored at the block 708 in
If, however, it is determined at the block 834 that data associated with the item is protected, the flow may proceed to a block 838. At the block 838, the protected data may be protected. Then, at a block 840, a password associated with the item may be encrypted. For example, the password received at the block 706 of
At a block 842, the item may be exported but with the protected data replaced by the encrypted protected data and the password replaced by the encrypted password. If the process plant item is an item created from a module class object the encrypted data and/or the encrypted password could be exported as part of the module class object or the item, for example.
The configuration system 900 comprises a user interface 904 which, for example, may be generated on a display device of the workstation 14 (
The version control database 910 may include configuration history data indicative of any number of prior versions of each item utilized in the process configuration. Taken together, the history data for all of the items may be used to reconstruct past configurations of the process. More particularly, for each item in the configuration database 912 (as well as those no longer in the configuration database 912), data representative of the configuration of that item is stored for a plurality of versions. For example, an item may have been modified on three occasions since it was created. The version control database 910 would therefore have data indicative of the configuration of the item at the point of creation, which may be referred to as “Version 1,” as well as data indicative of the configuration of the item after each of the three modifications, which would correspond with “Version 2,” “Version 3,” and “Version 4.”
The configuration history data may thus include data representative of all of the modifications made to module objects and module class objects. The modifications may, but need not, be made using the configuration applications 906. Any or all of the user interface 904, the configuration applications 906, and the VCAT system 908 could be combined into a single, integrated system. For ease of explanation, however, tasks will be described herein as being attributed to the user interface 904, the configuration applications 906, and the VCAT system 908 separately.
The VCAT system 908 may be implemented using one or more computing device, such as the workstation 14 (
The data in one or both of the databases 910, 912 may be stored in a computer-readable medium physically located anywhere within the process plant 10, such as, for example, a volatile memory or a magnetic or optical storage medium associated with the workstations 14. Alternatively, one or both of the databases 910, 912 may be stored in a remote location such that a computing device such as the workstation 14 accesses the data stored therein over a network such as an intranet, the Internet, or any other communication medium. Furthermore, the data stored in each database 910, 912 need not be stored in the same computer-readable medium, such that any portion of either database 910, 912 may be stored in a memory device or medium which is distinct from devices or media storing other portions.
In
At a block 932, a modification of a process plant item may be detected. For example, a user may try to add a new item to the process configuration using the configuration applications 906. As another example, the user may request to save an item to the configuration database 912 after having modified the item. As yet another example, the user may request to “check-in” an item to the configuration database 912 after having modified the item. U.S. Pat. No. 6,449,624 describes techniques related to “check-in” and “check-out” procedures that may be used.
At a block 934, it may be determined which, if any, module class objects were used to create the modified item. For example, a first module class object could have been used to create a second module class object, which in turn was used to create the item. If one or more module class objects were used to create the modified item, at the block 936 the version of each module class object used may be determined.
At a block 938, a version identifier for the modified item is generated. The version identifier may comprise numbers, letters, symbols, etc. The version identifier is indicative of the version that reflects the modification detected at the block 932. For example, if the modification detected at the block 932 was the creation of the item, the version identifier may be indicative of an initial version. As another example, if the modification detected at the block 932 was a modification of a first version of the item, the version identifier may be indicative of a second version.
At a block 940, the version identifier generated at the block 938 may be stored and associated with the modified item. For example, if the item is an object, the version identifier may be stored as part of that object. As another example, the version identifier could be stored separate from the object and a link to the version identifier could be stored as part of the object.
At a block 942, the version identifier(s) of the one or more module class object from which the item was created, if any, determined at the block 936 may be stored and associated with the modified item. For example, if the item is an object, the version identifier(s) may be stored as part of that object. As another example, the version identifier(s) could be stored separate from the object and a link or links to the version identifier(s) could be stored as part of the object. In yet another example, the version identifier generated at the block 938 could be generated using the version identifiers determined at the block 936. For instance, the version identifiers determined at the block 936 could be encoded within the version identifier generated at the block 938. In this case, the block 940 could comprise the block 942.
At a block 950, it may be determined whether a new version of a module class object has been created. For example, it could be detected when a new version module class object has been “checked in.” At a block 952, process plant items that were created using the module class object may be determined. Referring to
At a block 954, the new version of the module class object, or the changes made to the module class object, may be propagated to the items determined at the block 952. Then, at a block 958, the version identifier of the new version of the module class object may be stored and associated with the items determined at the block 952. In one example, the version identifiers of the items determined at the block 952 are not updated to reflect new versions of the items. Optionally, in another example, the version identifiers of the items determined at the block 952 are updated at a block 959. Then, the new version identifiers of the items may be stored and associated with the items.
The version identifiers stored at the blocks 940 and 942 of
At a block 962, it may be determined which, if any, module class objects were used to create the item. For example, a first module class object could have been used to create a second module class object, which in turn was used to create the item. If one or more module class objects were used to create the item, at the block 964 a current version of each of those module class objects may be determined. At a block 966, the version of each the module class objects used to create the item may be determined. For example, the version identifiers stored and associated with the item at the block 942 of
At a block 968, it may be determined, for each of the module class objects used to create the item, if the current version of the module class object is different than the version of the module class object used to create the item. If there are no differences, the routine may end. If, however, one or more differences are detected, a notification may be generated at the block 970. The notification generally may indicate that a new version of a module class object used to create the item is available. The notification may comprise text, symbols, colors, an audio prompt, etc. For example, a text box or window may be displayed next to, or overlapping with, a graphical representation of the item on a configuration display screen. As another example, a symbol may be displayed on or near the item representation. As yet another example, the color, brightness, etc., of the item representation may be changed. The notification itself may indicate which module class object(s) have a new version available. Alternatively, the notification may not notify the user which module class object(s) have a new version available, but the user can perform additional steps to determine that information by, for example, selecting a menu item, “double-clicking” on a symbol, “drilling down” into the item, etc.
Optionally, the user may then be provided with a user interface mechanism for initiating a process to modify the process plant item by updating the item using the new versions of the module class objects. For example, the user may be provided with a button, for example, to start the process. As another example, the user may be provided with a user interface mechanism to select which of possibly several module class objects having new versions are to be used to update the process plant item. For example, the user may be able to check boxes, highlight graphical representations, etc., corresponding to the module class objects having new versions that are to be used to update the process plant item.
At a block 982, it may be determined whether a new version of a module class object has been created. For example, it could be detected when a new version module class object has been “checked in.” At a block 984, process plant items that were created using the module class object may be determined. Referring to
At a block 986, the user could be prompted as to whether the changes to the module class objects should be propagated to one or more of the process plant items identified at the block 984. For example, a text box, window, display screen, audio prompt, etc. may be used to prompt the user.
Optionally, the user may be provided with a user interface mechanism to select particular process plant items identified at the block 984 to which changes are to be propagated. For example, the user may be able to check boxes, highlight graphical representations, etc., corresponding to the process plant items to which changes are to be propagated.
At a block 988, a user response to the prompt generated by the block 986 is received. At a block 990, it may be determined if the user response indicates that the changes are to be propagated. If the changes are not to be propagated, the routine may end. If the changes are to propagates, at a block 992, the changes are propagated to the process plant items identified at the block 984. Optionally, the changes may be propagated to selected ones of the process plant items identified at the block 984.
Although FIGS. 17, 19-22, and 24-27 were described with respect to process plant items, similar routines may be used for limiting access to, tracking changes made to, propagating changes with respect to sequences of control steps to be performed by process plant items. For example, routines similar to those of FIGS. 17, 19-22, and 24-27 may be used to limit access to, track changes made to, propagate changes with respect to phase classes, unit phases, and/or groups of phase classes or unit phases.
It will be understood by those of ordinary skill in the art that various modifications of the techniques described herein may be employed. For example, the orders of blocks may be changed, blocks may be omitted, new blocks may be added, etc. Further, various techniques described herein could be combined. For example, a routine similar to the routine 700 of
When implemented, any of the software described herein may be stored in any computer readable memory such as on a magnetic disk, a laser disk, or other storage medium, in a RAM or ROM of a computer or processor, etc. Likewise, this software may be delivered to a user, a process plant or an operator workstation using any known or desired delivery method including, for example, on a computer readable disk or other transportable computer storage mechanism or over a communication channel such as a telephone line, the Internet, the World Wide Web, any other local area network or wide area network, etc. (which delivery is viewed as being the same as or interchangeable with providing such software via a transportable storage medium). Furthermore, this software may be provided directly without modulation or encryption or may be modulated and/or encrypted using any suitable modulation carrier wave and/or encryption technique before being transmitted over a communication channel.
While the present invention has been described with reference to specific examples, which are intended to be illustrative only and not to be limiting of the invention, it will be apparent to those of ordinary skill in the art that changes, additions or deletions may be made to the disclosed embodiments without departing from the spirit and scope of the invention.
The present application is a continuation-in-part of U.S. patent application Ser. No. 10/368,151, entitled “MODULE CLASS OBJECTS IN A PROCESS PLANT CONFIGURATION SYSTEM,” filed on Feb. 18, 2003, which is hereby incorporated by reference herein in its entirety for all purposes. The present application is related to copending U.S. patent application Ser. No. ______, (Attorney Docket No. 06005/40129) entitled “VERSION CONTROL FOR OBJECTS IN A PROCESS PLANT CONFIGURATION SYSTEM,” filed on same day as the present application, which is hereby incorporated by reference herein in its entirety for all purposes.
| Number | Date | Country | |
|---|---|---|---|
| Parent | 10368151 | Feb 2003 | US |
| Child | 10853655 | May 2004 | US |
