Safety Data Writes

• US 20080005552A1
• Filed: 06/12/2007
• Published: 01/03/2008
• Est. Priority Date: 06/13/2006
• Status: Active Grant

• Current Assignee: Siemens Industry Incorporated (Siemens AG)
• Original Assignee: Siemens Industry Incorporated (Siemens AG)
• Inventors: James, Robert, Marks, David, Yozallinas, John, DiStefano, John, Klapper, John
• Granted Patent: US 8,380,975 B2
• Time in Patent Office: Days
• US Class Current: 713/2
• CPC Class Codes: G05B 19/0428 Safety, monitoring G05B19/0423 takes precedence
• CPC Class Codes: G05B 19/4186 by protocol, e.g. MAP, TOP
• CPC Class Codes: G05B 2219/25428 Field device
• CPC Class Codes: G05B 2219/31104 Remote configuration of parameters of controlled devices
• CPC Class Codes: G05B 2219/31121 Fielddevice, field controller, interface connected to fieldbus
• CPC Class Codes: G05B 2219/35285 Plausibility check for data, within permissible range
• CPC Class Codes: Y02P 90/02 Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]

Abstract

Systems and methods for safety data writes for process control networks are disclosed. The system may load changed parameters into a function block implemented by a process control server. The loaded changed parameters may be verified as being within safe limits and correctly entered. The verified changed parameters may be loaded into the field device controllers and the system restarted using the loaded changed parameters. The system may load parameters with an online system and use the loaded changed parameters during a warm restart.

Claims

1. A method for safe and secure communication of a process control network comprising the acts of:

loading changed parameters into a function block implemented by a process control server;

verifying that the changed parameters loaded into the function block are within safe limits;

loading the changed parameters into the field device controllers; and

restarting a warm process control system using the loaded changed parameters.

2. The method of claim 1 wherein the changed parameters are entered by an operator entering control parameters for an HMI object.

3. The method of claim 1 further comprising the acts of:

receiving a read back of the changed parameters loaded into the function block;

acknowledging the changed parameters loaded into the function block by an operator;

transmitting the changed parameters to field device controller.

4. The method of claim 1 further comprising the acts of:

verifying that the changed parameters loaded into the function block are within predetermined safety limits.

5. The method of claim 1 further comprising the acts of:

preventing transmission of the changed parameters to field device controller;

diagnosing reason changed parameters were not transmitted to field device controller; and

communicating to the operator a diagnosis from the act of diagnosing.

6. The method of claim 1 wherein the field controller device is a Programmable Logic Controller.

7. The method of claim 1 further comprising the acts of:

shutting down the process control system;

reloading the changed parameters into the field device controllers; and

restarting a warm process control system using the loaded changed parameters.

8. A method for safe and secure communication of a process control network comprising the acts of:

requesting a change of control parameters of the Human Machine Interface object by an operator;

receiving a read back of changed control parameters entered;

acknowledging the read back of changed control parameters; and

transmitting the changed control parameters to field device controller of the process control network.

9. The method of claim 8 wherein the changed parameters are entered by an operator entering control parameters for an HMI object.

10. The method of claim 8 further comprising the acts of:

verifying that the changed parameters loaded into the function block are within predetermined safety limits.

11. The method of claim 8 further comprising the acts of:

preventing transmission of the changed parameters to field device controller;

diagnosing reason changed parameters were not transmitted to field device controller; and

communicating to the operator a diagnosis from the act of diagnosing.

12. The method of claim 8 wherein the field controller device is a Programmable Logic Controller.

13. The method of claim 8 further comprising the acts of:

shutting down the process control system;

reloading the changed parameters in the field device controllers; and

restarting a warm process control system using the loaded changed parameters.

14. The method of claim 8 further comprising the acts of:

verifying a unique identifier associated with an operator of the human machine interface prior to the action of transmitting the changed control parameter.

15. A safety data writing system for process control network comprising:

one or more field device controllers and

a process control server monitoring loading startup parameters into a function block implemented by a process control server;

verifying that the changed parameters loaded into the function block are within safe limits;

loading the changed parameters in the field device controllers; and

restarting a warm process control system using the loaded changed parameters.

16. A safety data writing system of claim 15 further comprising:

a client computer acknowledging the changed parameters loaded into the function block by an operator wherein the process control server receives a read back of the changed parameters loaded into the function block and transmits the changed parameters to field device controller.

17. A safety data writing system of claim 15 wherein the process control server verifies that the changed parameters loaded into the function block are within predetermined safety limits.

18. A safety data writing system of claim 15 wherein the process control server prevents transmission of the changed parameters to field device controller;

diagnoses reason changed parameters were not transmitted to field device controller; and

communicates to the operator a diagnosis from the act of diagnosing.

19. A safety data writing system of claim 15 wherein the field controller devices are Programmable Logic Controllers.

20. A safety data writing system of claim 15 wherein the process control server verifies a unique identifier associated with an operator of a human machine interface prior to transmitting the changed control parameter to the field controller devices.