Patent Application
20230400840
The instant application claims priority to European Patent Application No. 22178696.5, filed Jun. 13, 2022, which is incorporated herein in its entirety by reference.
The present disclosure generally relates to the configuration of field devices for industrial plants in which an asset management system (AMS) for field devices is in place.
Industrial plants for executing industrial processes comprise a plurality of field devices that are connected to a distributed control system, DCS, via a network of the industrial plant. Field devices need to be configured before they can perform their intended function in the industrial plant. WO 2021/249 655 A1 discloses a method to configure a field device based on an OPC UA server of an already configured field device of the same type.
In larger industrial plants, an asset management system is in place to manage and configure field devices. In particular, such an AMS maintains values of field device parameters that are written to field devices. Changes to the field device parameters are to be entered into the AMS and then propagated to the field devices.
However, field device parameters can also be changed on the field device itself, via a keypad or touchscreen on the field device or via a handheld programming device. Such changes need to be entered manually into the AMS, so that they are not overwritten the next time the AMS sends field device parameter values to the field device.
In an embodiment, the present disclosure describes a system or method for improving the co-existence of an asset management system on the one hand, and the possibility to change field device parameters on the field device itself on the other hand.
The disclosure describes a computer-implemented method for operating at least one field device that is managed by an asset management system, AMS. For example, a Field Information Manager, FIM, may configure field devices via communication protocols such as HART; Fieldbus Foundation, Profibus or ProfiNet, based on Electronic Device Descriptions, EDD, or FDI Device Packages.
In the course of the method, an initial alignment between a set of values of field device parameters maintained by the AMS and values of these parameters on the field device is established. At a later time, it is checked whether the configuration of the field device has changed since the initial alignment. If this is the case, the alignment between the set of values of field device parameters maintained by the AMS and the values of these parameters on the field device is re-established. For example, this may entail propagating values from the AMS to the field device, and/or propagating values from the field device to the AMS.
The field device parameters may comprise any parameters that govern the operation of the field device. For example, the field device parameters may comprise states of switches or valves that the field device is to enact in an industrial process in which it is participating, and/or a set-point of at least one quantity (such as a temperature or a pressure). For example, it may be the job of the field device to act on the industrial process in a manner that said at least one quantity is kept near its set-point value.
By the proposed method, the advantages of the management by the AMS may be combined with the advantages of the possibility to change field device parameters directly on the field device itself, e.g., via a keypad or a touchscreen of the field device, or with a handheld device that is in short-range radio or optical communication with the field device.
The centralized management saves time when managing very many field devices. In particular, existing sets of parameters may be re-used at least partially when a new field device is to be integrated into the industrial plant, and/or when an old field device is to be exchanged for a new one.
On the other hand, there are legitimate reasons why one should want to change field device parameters on the field device itself. For example, it may be desirable to directly observe the effect that the changing of a field device parameter has on the plant when troubleshooting a problem in the industrial plant. Therefore, the solution is not to simply lock the possibility to change parameters on the field device itself.
Automatically re-establishing the alignment between the set of values of field device parameters maintained by the AMS and the values of these parameters on the field device can be used to ensure that legitimate changes to field device parameters entered on the field device itself are made known to the AMS, such that they may be properly documented, and are also available for being written to a new field device in case of a device exchange; unintentional or unauthorized changes can be reversed, such that the field device works as it is expected to work given the values of the field device parameters maintained by the AMS; and conflicts between different proposals for one and the same field device parameter are resolved.
According to block 114, when establishing the initial alignment, the AMS 2 may receive from the field device 3, a value 2b of a configuration version identifier, and/or a hash value, that identifies the configuration of the field device 3. In step 120, it is checked whether the configuration of the field device 3 has changed since the initial alignment. According to block 121, the AMS may receive a new value 3b of the configuration version identifier, and/or a new hash value, from the field device 3. This new value 3b may then, according to block 122, be compared to the corresponding value 2b obtained at the time of initial alignment.
According to block 123, for each field device parameter 2a maintained by the AMS 2, the AMS 2 may receive a current value 3a from the field device 3. According to block 124, this current value 3a may then be compared to the value 2a maintained by the AMS 2. The result of the checking step 120 is binary. If the configuration of the field device 3 has not changed since the initial alignment (truth value 0), the checking step 120 is repeated when triggered again by a schedule, by an event or manually.
If the configuration of the field device 3 has changed since the initial agreement (truth value 1), in step 130, alignment between the set of values 2a of field device parameters maintained by the AMS 2 and the values 3a of these parameters on the field device 3 is re-established by synchronizing values of field device parameters between the AMS 2 and the field device 3.
In particular, according to block 131, it may be determined for each value 2a of a field device parameter maintained by the AMS 2 whether this value 2a differs from the value 3a of this field device parameter on the field device 3. If this is the case (truth value 1), according to block 132, it may be determined, based on a ruleset 4, whether to update, according to block 133, at least one value 2a of a field device parameter maintained by the AMS 2 with a value 3a received from the field device 3, or set, according to block 134, the at least one field device parameter on the field device 3 to the value 2a maintained by the AMS 2.
In the example shown in
The field device 3 maintains a value 3b of a configuration version identifier that is incremented whenever a change is made to the values 3a of field device parameters on the field device 3. The AMS 2 comprises a “digital twin” of the configuration of the field device 3 that is exemplarily shown in
At the time of establishing the initial alignment between the values 2a of field device parameters maintained by the AMS 2 on the one hand, and the values 3a of these field device parameters on the field device 3 on the other hand, the value 3b of the configuration version identifier (such as a counter) received from the field device 3 is stored as value 2b in the AMS 2.
According to blocks 121 and 122 of the method 100, it may later be checked whether the current value 3b of the configuration version identifier 3b is still equal to the corresponding value 2b stored in the AMS 2 at the time of the initial alignment. If there is no more alignment, the alignment is re-established by updating, according to block 133, the values 2a maintained in the AMS 2 of field device parameters belonging to the first subset A with current values 3a received from the field device 3, and setting, according to block 134, the values 3a of field device parameters on the field device 3 belonging to the second subset B to the values 2a maintained by the AMS 2.
In particular, updating values of field device parameters maintained by the AMS with changed values from the field device avoids that the AMS unexpectedly overwrites these changed values with the values maintained by the AMS, which would in turn cause an unexpected behavior of the field device in the industrial process in which it is participating.
In a particularly advantageous embodiment, the establishing of the initial alignment comprises: generating and/or accepting, by the AMS, at least one value of at least one field device parameter of the at least one field device as a value maintained by the AMS; and setting, by the AMS, the at least one field device parameter on the field device to this value.
That is, the AMS is the source for parameter values, and the field device is the sink. In particular, an initial configuration for a field device that is just being integrated into the industrial plant may be obtained from the AMS very quickly, as much of the needed information is likely to be known in connection with other field devices.
Alternatively or in combination, the establishing of the initial alignment may comprise downloading at least one value of at least one parameter from the field device to the AMS. In particular, in this manner, a snapshot of an existing configuration of the field device may be created.
Both sources for parameter values may be combined. For example, the set of field device parameters may comprise a first subset of parameters that may be set from the AMS, and a second subset of parameters that may need fine-tuning on the field device itself. The AMS can then keep the parameter values for parameters from the first subset and download the parameter values for parameters from the second subset.
In a further particularly advantageous embodiment, the establishing of the initial alignment further comprises receiving, by the AMS, from the field device, a value of a configuration version identifier, and/or a hash value, that identifies the configuration of the field device. The checking whether the configuration of the field device has changed then comprises receiving, by the AMS, from the field device, a new value of the configuration version identifier, and/or a new hash value; and comparing this new value of the configuration version identifier, and/or this new hash value, to the corresponding value obtained at the time of initial alignment.
For example, as a de-facto standard, many field devices keep a configuration change counter that is incremented whenever a parameter of the field device is changed, whether this happens in response to a command from the AMS or in response to direct entry of the changed values on the field device itself. If the value of such a counter as configuration version identifier is stored at the time where the initial alignment is established, and the field device still returns the same counter value later, it can be reasonably assumed that the configuration of the field device has not changed. Communication protocols for attaching field devices to industrial plants have standard commands for querying the counter value.
Hash values are an even better way than counters to guarantee that the configuration of the field device is still the same as at the time of the initial alignment. Since every field device can calculate its hash value on its own, there is no additional burden for the calculation on the AMS.
Comparing “fingerprints” of the field device configuration in the form of counter values and/or hash values may be performed faster than comparing all individual values maintained by the AMS with their corresponding values on the field device. In particular, the volume of data that needs to be transferred from the field device to the AMS is a lot less than the volume of the complete set of field device parameters. A single field device may have up to about 1000 parameters. Therefore, at least for the case where the configuration of the field device has not been changed, transmission of a lot of data may be saved.
Alternatively or in combination to this, the checking whether the configuration of the field device has changed may comprise receiving, by the AMS, from the field device, for each field device parameter maintained by the AMS, a current value; and comparing the current value to the value maintained by the AMS.
Compared with the configuration version identifier and/or hash code, this is a lot more data to convey from the field device to the AMS. But if it turns out that there is at least one difference between a field device parameter value on the field device and the corresponding value in the AMS, then all current values will have to be downloaded from the field device to the AMS anyway to check whether there are more differences.
The checking whether the configuration of the field device has changed since the initial agreement may be triggered automatically according to any suitable schedule. Alternatively or in combination to this, the checking may be performed as a random spot check. For example, a list of all available field devices may be permutated into a random or pseudorandom order, and the field devices are checked one by one in the order in which they appear on this list, according to a periodic schedule. This uses less communication bandwidth on a network between the AMS and the field devices than checking the configurations of all field devices at the same time. Checks may also be triggered manually, and/or in response to detecting a predetermined event in the industrial plant.
In addition to re-establishing the alignment between the set of values of field device parameters maintained by the AMS and the values of these parameters on the field device, a detected change in parameters on the field device may be reported in any suitable manner to an operator of the AMS and/or of the industrial plant, such as by e-mail.
In a particularly advantageous embodiment, the re-establishing of the alignment comprises: updating at least one value of a field device parameter maintained by the AMS with a value received from the field device; and/or setting at least one field device parameter on the field device to a value maintained by the AMS.
That is, both the AMS and the field device may share information in both directions, such that, in the end, they both have the same mixture of parameters that originated in the AMS and parameters that were set directly on the field device itself.
The decision whether, for a particular field device parameter, the value currently present on the field device or the value or the value maintained by the AMS shall prevail may be made according to any suitable method, algorithm or scheme. Also, wherever there is a conflict between a value maintained by the AMS and a value currently present on the field device, an operator of the AMS, and/or of the industrial plant, may be prompted for a decision.
In particular, in response to determining that a value of a field device parameter maintained by the AMS differs from the value of this field device parameter on the field device, it may be determined, based on a ruleset, whether to update the value maintained by the AMS or to set the parameter on the field device to the value maintained by the AMS. For example, according to this ruleset, the decision whether to keep the parameter value from the AMS or the parameter value from the field device may be based at least in part on how likely it is that the parameter value will have to be legitimately set on the field device itself.
In a further particularly advantageous embodiment, out of a set of field device parameters for which a value is maintained by the AMS, the ruleset designates at least one “AMS-first” subset of field device parameters whose values are to be updated in the AMS, and/or at least one “device-first” subset of field device parameters that are to be set on the field device to the values maintained by the AMS.
For example, field device parameters that mainly pertain to the configuration of the user interface on the field device itself, such as the font size or brightness of a touch screen of the field device, may be allocated to the “device-first” subset. On the other hand, field device parameters that require an intimate knowledge of the industrial process as a whole to set properly and may cause device or plant damage when set to incorrect values, may be allocated to the “AMS-first” subset. Allocation of field devices to either of the two subsets is a decision that is, to some extent, plant specific.
Alternatively or in combination to this, the ruleset may stipulate that at least one value of a field device parameter is to be updated in the AMS if a changed value on the field device is approved by an authorized user and set on the field device to the value maintained by the AMS if a changed value on the field device is not approved by an authorized user.
In this manner, legitimate changes to field device parameters may be entered by an authorized and qualified user on the field device itself. But accidental or even malicious changes (tampering) will not persist. If a user is not authorized to change values on the field device itself, one option is to authorize him to change the values in the AMS instead. The AMS may provide more functionality for plausibility checks of the inputted changes, so that, e.g., a lesser-experienced user may be prevented from making certain mistakes. E.g., while a dial for a field device parameter on a user interface may admit any value that the field device supports on its own, the composition of the industrial plant as a whole may impose boundary conditions on that field device parameter, so that only a certain interval of values is in fact available.
In a further particularly advantageous embodiment, the updating of a value of a field device parameter is logged to an audit trail. In certain regulated industries, all events that are material to the production process must be logged, so as to have a gap-less “chain of custody” regarding product quality, and/or use of certain controlled substances. For example, when processing radioactive materials or narcotics, every milligram must be accounted for. Previously, only configuration changes initiated by the AMS were logged, whereas configuration changes initiated on the field device itself manually were not accounted for. Now that those changes can be propagated from the field device into the AMS, they can be logged as well, so that the audit trail becomes more complete.
In a further advantageous embodiment, at least one field device parameter is referenced by a semantic identifier in the AMS. In the context of the method proposed here, the semantic identifier facilitates the establishing of rules for the ruleset as to whether a value maintained by the AMS or a value on the field device shall prevail if there is any difference or conflict regarding a particular field device parameter.
In a further particularly advantageous embodiment, a field device that physically interacts with an industrial process for the manufacture of a food, a beverage, or a medicament is chosen. In these industries, it is also particularly important to keep an audit trail for any events that are material to product quality.
Because it is computer-implemented, the present method may be embodied in the form of a software. The invention therefore also relates to a computer program with machine-readable instructions that, when executed by one or more computers and/or compute instances, cause the one or more computers and/or compute instances to perform the method described above. Examples for compute instances include virtual machines, containers or serverless execution environments in a cloud. The invention also relates to a machine-readable data carrier and/or a download product with the computer program. A download product is a digital product with the computer program that may, e.g., be sold in an online shop for immediate fulfilment and download to one or more computers. The invention also relates to one or more compute instances with the computer program, and/or with the machine-readable data carrier and/or download product.
All references, including publications, patent applications, and patents, cited herein are hereby incorporated by reference to the same extent as if each reference were individually and specifically indicated to be incorporated by reference and were set forth in its entirety herein.
The use of the terms “a” and “an” and “the” and “at least one” and similar referents in the context of describing the invention (especially in the context of the following claims) are to be construed to cover both the singular and the plural, unless otherwise indicated herein or clearly contradicted by context. The use of the term “at least one” followed by a list of one or more items (for example, “at least one of A and B”) is to be construed to mean one item selected from the listed items (A or B) or any combination of two or more of the listed items (A and B), unless otherwise indicated herein or clearly contradicted by context. The terms “comprising,” “having,” “including,” and “containing” are to be construed as open-ended terms (i.e., meaning “including, but not limited to,”) unless otherwise noted. Recitation of ranges of values herein are merely intended to serve as a shorthand method of referring individually to each separate value falling within the range, unless otherwise indicated herein, and each separate value is incorporated into the specification as if it were individually recited herein. All methods described herein can be performed in any suitable order unless otherwise indicated herein or otherwise clearly contradicted by context. The use of any and all examples, or exemplary language (e.g., “such as”) provided herein, is intended merely to better illuminate the invention and does not pose a limitation on the scope of the invention unless otherwise claimed. No language in the specification should be construed as indicating any non-claimed element as essential to the practice of the invention.
Preferred embodiments of this invention are described herein, including the best mode known to the inventors for carrying out the invention. Variations of those preferred embodiments may become apparent to those of ordinary skill in the art upon reading the foregoing description. The inventors expect skilled artisans to employ such variations as appropriate, and the inventors intend for the invention to be practiced otherwise than as specifically described herein. Accordingly, this invention includes all modifications and equivalents of the subject matter recited in the claims appended hereto as permitted by applicable law. Moreover, any combination of the above-described elements in all possible variations thereof is encompassed by the invention unless otherwise indicated herein or otherwise clearly contradicted by context.
| Number | Date | Country | Kind |
|---|---|---|---|
| 22178696.5 | Jun 2022 | EP | regional |
