Protection against communications crosstalk in a factory process control system

• US 5,917,840 A
• Filed: 03/13/1992
• Issued: 06/29/1999
• Est. Priority Date: 03/13/1992
• Status: Expired due to Term

• Current Assignee: Schneider Electric Systems USA, Inc. (Schneider Electric SE)
• Original Assignee: The Foxboro Company (Schneider Electric SE)
• Inventors: Tobol, Nathan H., Cheney, M. Charles, Slechta, William M., Korowitz, Simon
• Primary Examiner(s): Chung, Phung M.
• Application Number:
  US07/851,977
• Time in Patent Office: 2,664 Days
• Field of Search: 371/37.7, 371/53, 371/48, 371/37.1, 371/32, 371/33, 371/15.1, 371/20.1, 371/30, 371/68.2, 340/825.07, 370/13, 375/10, 395/575
• US Class Current: 714/807
• CPC Class Codes: H04L 1/0061 Error detection codes
• CPC Class Codes: H04L 1/0086 Unequal error protection H04L27/00 and H04L1/004 take precedence for layer 1/2 aspects, e.g. bit loading

Abstract

A method for transmitting messages between a communications controller and devices in a factory process control system, wherein each device has an associated identification number which is unique to that device. A message to be transmitted is compiled, and then based on the criticality of the message, one of a standard, secure, or critical message protocols is chosen for the message; each protocol being defined to generate a message checksum for the message in a manner different from the other protocols. The generated checksum is then included in the message. Using the secure and critical protocols, a message checksum is generated from the message to be transmitted and the identification number of the intended recipient device. In the secure protocol, the message checksum is included in the message, but the identification number is not included in the message; in the critical protocol, both the message checksum and the identification number are included in the message. A crosstalk query message may be sent from the controller to determine if a link of a factory process control system is susceptible to crosstalk. The controller sends to a link on which a particular device is known to reside a diagnostic message indicating the identification number of the particular device and requesting any other devices that unintentionally receive the message to transmit a response message to the communications controller.

Claims

1. A method for indicating an intended recipient device of a command message transmitted by a communications controller in a factory process control system comprising a plurality of devices linked together and each linked to the communications controller for command by the controller, each device being adapted for a sensing or actuating function related to the factory process and having an associated identification number which is unique to the device, the method comprising the steps of:

selecting a command code identifying a desired action to be taken by the intended recipient device,

generating a command checksum from said command code and from said identification number of the intended recipient device,

constructing a command message including said command code and said command checksum, said command message excluding said identification number, and

transmitting said command message from said communications controller.

2. The method of claim 1 further comprising the steps of:

receiving said command message at one of said plurality of linked devices,

generating a second command checksum from said transmitted command code and from said identification number of said one linked device receiving said command message,

comparing said second command checksum with said command checksum transmitted with said command message, and

accepting said transmitted command message only if said command checksum included in said transmitted command message matches said second command checksum, whereby said command message is accepted only by an intended device.

3. The method of claim 2 further comprising the steps of:

said intended recipient device transmitting a reply to said communications controller, by

compiling said reply,

generating a reply checksum from said reply and from said identification number of said intended recipient device, constructing a reply message including said reply and said reply checksum, said command message excluding said identification number, and

transmitting said reply message from said intended recipient device.

4. The method of claim 2 wherein said command checksum and said second command checksum comprise cyclic redundancy codes.

5. The method of claim 2 further comprising the steps of:

before said command checksum generation, generating an ID checksum from said identification number of said intended recipient device, and wherein said step of generating a command checksum comprises using said ID checksum as an initialization value for said command checksum, and

after said command message receipt at said one linked device, generating a recipient ID checksum from said identification number of said one linked device, and wherein

said step of generating a second command checksum comprises using said recipient ID checksum as an initialization value for said second command checksum.

6. The method of claim 5 wherein said ID checksum, said command checksum, said recipient ID checksum, and said second command checksum all comprise cyclic redundancy codes.

7. The method of claim 5 further comprising, before generating said ID checksum, a first step of sending a query message from said communications controller to said intended recipient device requesting said intended recipient device to transmit a message to said communications controller indicating the identification number of said intended recipient device for subsequent use by said communications controller in generating said ID checksum.

8. The method of claim 7 further comprising the steps of:

said intended recipient device transmitting said message to said communications controller indicating said identification number of said intended recipient device, and

said intended recipient device generating a recipient ID checksum from said identification number and storing said recipient ID checksum for subsequent use in generating said second command checksum.

9. The method of claim 2 further comprising the steps of:

determining if said command message comprises a critical command before transmitting said command message from said communications controller, and

including said identification number for said intended recipient device in said transmitted command message if said command message comprises a critical command.

10. The method of claim 9 wherein said critical command comprises a command to modify an operating mode or data base of said intended recipient device.

11. A method for transmitting messages between a communications controller and devices in a factory process control system, the factory process control system comprising a plurality of devices linked together and each linked to the communications controller for command by the communications controller, each device being adapted for a sensing or actuating function related to the factory process and having an associated identification number which is unique to the device, the method comprising the steps of:

compiling a message to be transmitted,

based on a degree of criticality of said message, invoking one of a plurality of available message protocols, each message protocol being defined to generate a message checksum for the message in a manner different from the other message protocols,

including said checksum in said message, and

transmitting said message.

12. The method of claim 11 wherein said plurality of message protocols comprises a standard protocol for use with noncritical messages and defined to generate a message checksum from said message, and a secure protocol for use with more critical messages and defined to generate a message checksum from said message and the identification number of a device for which the message is intended.

13. The method of claim 12 wherein said plurality of message protocols further comprises a critical protocol for use with most critical messages and defined to generate a message checksum from said message and the identification number of a device for which the message is intended, and further including the step of including said identification number in said transmitted message if said critical protocol is invoked.

14. The method of claim 13 wherein said message checksum comprises a cyclic redundancy code.

15. The method of claim 11 wherein said plurality of message protocols comprises a standard protocol for use with noncritical messages and defined to generate a message checksum from said message, and a critical protocol for use with more critical messages and defined to generate a message checksum from said message and the identification number of a device for which the message is intended, and further including the step of including said identification number in said transmitted message if said critical protocol is invoked.

16. The method of claim 11 wherein said plurality of message protocols comprises a secure protocol defined to generate a message checksum from said message and the identification number of a device for which the message is intended, and a critical protocol for use with more critical messages and defined to generate a message checksum from said message and the identification number of a device for which the message is intended, and further including the step of including said identification number in said transmitted message if said critical protocol is invoked.