Safety instrumented control apparatus and method thereof, and safety instrumented system

• US 10,395,516 B2
• Filed: 03/23/2018
• Issued: 08/27/2019
• Est. Priority Date: 04/14/2017
• Status: Active Grant

• Current Assignee: Yokogawa Electric Corporation
• Original Assignee: Yokogawa Electric Corporation
• Inventors: Morita, Yoshie
• Primary Examiner(s): Casillashernandez, Omar
• Application Number:
  US15/934,706
• Publication Number:
  US 20180301020A1
• Time in Patent Office: 522 Days
• Field of Search: 340628
• CPC Class Codes: G01N 33/00 Investigating or analysing materials by specific methods not covered by groups G01N1/00 - G01N31/00
• CPC Class Codes: G08B 17/10 Actuation by presence of smoke or gases , e.g. automatic alarm devices for analysing flowing fluid materials by the use of optical means
• CPC Class Codes: G08B 17/117 by using a detection device for specific gases, e.g. combustion products, produced by the fire G08B17/103, G08B17/11 take precedence
• CPC Class Codes: G08B 21/12 responsive to undesired emission of substances, e.g. pollution alarms
• CPC Class Codes: G08B 25/001 Alarm cancelling procedures or alarm forwarding decisions, e.g. based on absence of alarm confirmation
• CPC Class Codes: G08B 25/009 Signalling of the alarm condition to a substation whose identity is signalled to a central station, e.g. relaying alarm signals in order to extend communication range
• CPC Class Codes: G08B 25/10 using wireless transmission systems G08B25/009 takes precedence
• CPC Class Codes: G08B 29/126 of annunciator circuits
• CPC Class Codes: G08B 29/183 Single detectors using dual technologies G08B13/1672, G08B13/2448, G08B13/2494 take precedence

Abstract

A safety instrumented control apparatus includes: a message transmitter that transmits an alarm message to a display apparatus on the basis of an output from a field device that continues to output an alarm on the basis of detection of an abnormal condition until a reset operation is performed; a storage that stores a group ID for identifying a group of the field devices; a reset manager that counts on a timer until a predetermined amount of time passes after the reset operation; and a diagnoser that, during the count of the timer for any of the field devices belonging to the group ID, adds display suppression information to the alarm message related to the field device belonging to the group ID.

Claims

1. A safety instrumented control apparatus comprising:

a message transmitter that transmits an alarm message to a display apparatus based on an output from a field device that continues to output an alarm upon detecting an abnormal condition until a reset operation is performed;

a storage that stores a group ID for identifying a group of the field devices;

a reset circuit that counts on a timer until a predetermined amount of time passes after the reset operation;

a diagnosing circuit that, during the count of the timer for any of the field devices belonging to the group ID, adds display suppression information to the alarm message related to the field device belonging to the group ID;

a record storage where the alarm message is saved irrespective of the count of the timer; and

an activation state managing circuit that manages an activation state of the field device, wherein

when any one of the field devices has not returned to a normal state after the end of the count of the timer, the diagnosing circuit retransmits, to the display apparatus, the alarm message during the count of the timer saved in the record storage.

2. The safety instrumented control apparatus according to claim 1, wherein

the storage stores definition information where information on channels connected to the field devices in input/output modules connected to the safety instrumented control apparatus is associated with the group IDs, and

the diagnosing circuit refers to the definition information based on channel information of the input/output module that has received an output from the field device, and identifies the group ID to which the field device targeted for the reset operation belongs.

3. The safety instrumented control apparatus according to claim 1, wherein

the diagnosing circuit comprises a process alarm diagnosing circuit, and

the process alarm diagnosing circuit detects an abnormal condition in process control being a controlled target of the safety instrumented control apparatus based on an output value of the field device, and transmits a process alarm as the alarm message to be displayed on the display apparatus.

4. The safety instrumented control apparatus according to claim 2, wherein

the diagnosing circuit comprises a system diagnosing circuit, and

the system diagnosing circuit diagnoses at least any of states of the safety instrumented control apparatus, the input/output module, and the field device, and their connection states based on the output from the field device, detects an abnormal condition of a system, and transmits a system alarm as the alarm message to be displayed on the display apparatus.

5. The safety instrumented control apparatus according to claim 1, wherein

the display suppression information instructs the display apparatus to suppress the display of the alarm message, and

suppressing the display of the alarm message includes not displaying the alarm message, or displaying the alarm message in a form different from a normal form.

6. The safety instrumented control apparatus according to claim 1, wherein the diagnosing circuit suppresses the detection of the abnormal condition, or to suppress the transmission of the alarm message, during the count of the timer.

7. The safety instrumented control apparatus according to claim 2, wherein

the storage stores, as the definition information, information where reset identification information for identifying at least one or more field devices targeted for the reset operation is associated with the group ID, and

the reset circuit refers to the definition information based on the reset operation, identifies the group ID from the reset identification information, and starts counting on the timer for the group ID.

8. The safety instrumented control apparatus according to claim 7, further comprising

a resetting circuit that transmits a reset command to the input/output module, wherein

the resetting circuit identifies information on a channel connected to the field device based on the reset operation, the definition information, and the reset identification information, and transmits a reset command based on the identified channel information.

9. A safety instrumented system comprising:

the safety instrumented control apparatus according to claim 1; and

an engineering terminal that previously defines group IDs for identifying groups including the field devices predetermined as targets for suppressing the display of an alarm on the display apparatus and/or definition information where information on channels connected to the field devices in input/output modules connected to the safety instrumented control apparatus is associated with the group IDs, and downloads the group IDs and/or the definition information to the storage of the safety instrumented control apparatus.

10. The safety instrumented system according to claim 9, further comprising

a display apparatus that receives an alarm message transmitted from the safety instrumented control apparatus via a network, suppresses the display of the alarm message upon display suppression information having been added to the alarm message, and displays the alarm message upon the display suppression information having not been added to the alarm message.

11. A plant control method comprising:

transmitting an alarm message to a display apparatus based on an output from a field device that continues to output an alarm upon detection of an abnormal condition until a reset operation is performed;

storing a group ID for identifying a group of the field devices;

counting on a timer until a predetermined amount of time passes after the reset operation;

during the count of the timer for any of the field devices belonging to the group ID, adding display suppression information to the alarm message related to the field device belonging to the group ID;

saving the alarm message irrespective of the count of the timer;

managing an activation state of the field device; and

when any one of the field devices has not returned to a normal state after the end of the count of the timer, retransmitting, to the display apparatus, the alarm message during the count of the timer saved in the record storage.

12. The plant control method according to claim 11, further comprising:

storing definition information where information on channels connected to the field devices in input/output modules is associated with the group IDs; and

referring to the definition information based on the channel information of the input/output module that has received an output from the field device, and identifying the group ID to which a field device targeted for the reset operation belongs.

13. A safety instrumented control apparatus comprising:

a message transmitter that transmits an alarm message to a display apparatus based on an output from a field device that continues to output an alarm upon detecting an abnormal condition until a reset operation is performed;

a storage that stores, as definition information, information where a group ID for identifying a group of the field devices, a reset variable, and an ID of an input/output module connected to the safety instrumented control apparatus are associated with one another;

an application executing circuit that outputs, in response to the reset operation, a reset signal to the reset variable;

a resetting circuit that refers to the definition information and transmits a reset command to the input/output module corresponding to the reset variable;

a reset circuit that counts on a timer until a predetermined amount of time passes after the reset operation; and

a diagnosing circuit that, during the count of the timer for any of the field devices belonging to the group ID corresponding to the reset variable, adds display suppression information to the alarm message related to the field device belonging to the group ID.