Fieldbus upgradable apparatus and method

• US 7,263,546 B1
• Filed: 05/30/2000
• Issued: 08/28/2007
• Est. Priority Date: 05/27/1999
• Status: Expired due to Term

• Current Assignee: Schneider Electric Systems USA, Inc. (Schneider Electric SE)
• Original Assignee: Invensys Systems Incorporated (Invensys PLC)
• Inventors: Kostadinov, Vladimir
• Primary Examiner(s): Cardone; Jason
• Assistant Examiner(s): Mirza; Adnan M.
• Application Number:
  US09/580,160
• Time in Patent Office: 2,646 Days
• Field of Search: 709/216, 707/10, 707/9, 711/152, 710/106, 710/128
• US Class Current: 709/216
• CPC Class Codes: G06F 8/656 while running
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A method and apparatus to modify control devices residing on a Fieldbus communications network, without interrupting the operation of the control devices. The control device updating may further be controlled and monitored by a remotely located host that also communicates on the Fieldbus network. The control device may comprise at least two distinct memory areas, wherein at least one memory area must be active, and at least one memory area must be inactive. Active memory areas provide the control device microprocessor operating system with executable instructions or data. The host downloads new executable instructions or data to inactive memory areas, with associated data entry points, during unscheduled communications periods wherein data input/output is not being performed between the control device and the host or another control device. Upon a full data transfer and proper verification of the new data, the host may issue an activation command that causes a selector device to activate the previously inactive memory area by directing the microprocessor to the entry points of the newly downloaded executable instructions or data. The memory activation must occur while the microprocessor is not performing application execution, application input/output, or application communications. By timing the memory activation in this manner, the microprocessor may be redirected to the newly downloaded executable instructions or data without microprocessor interruption.

Claims

1. A method for modifying processing on at least one control device controlling operation of process control equipment, the method comprising:

transferring data from a remote host device to the at least one control device during unscheduled communications periods and without interrupting operation of the at least one control device, the remote host device and the;

at least one control device being coupled through a Field bus communications network;

storing the transferred data to a respective inactive memory area;

monitoring at least one parameter; and

, communicating, when the parameter attains a specified value, a command to redirect at least one control device microprocessor, during an idle period of the at least one control device microprocessor, to execute the stored data in the inactive memory area to modify the processing on the at least once control device.

2. A method according to claim 1, further comprising verifying the stored data in the respective inactive memory area.

3. A method according to claim 1, wherein redirecting the at least one control device microprocessor comprises providing the at least one control device microprocessor with entry points to the stored data.

4. A method according to claim 1, wherein transferring data comprises transmitting entry points.

5. A method according to claim 1, wherein transferring data comprises transmitting executable instructions.

6. A method according to claim 1, wherein transferring data comprises synchronizing data transmissions between the host device and the at least one control device to avoid interference with scheduled communications.

7. A method according to claim 1, further comprising:

selecting a respective at least one active memory area; and

,

inactivating the respective selected active memory area such that the at least one control device microprocessor does not execute data in the respective selected active memory area.

8. A method according to claim 1, wherein redirecting the at least one control device microprocessor comprises issuing an upgrade request from the host device to the at least one control device.

9. A method according to claim 8, wherein issuing an upgrade request comprises coordinating at least one upgrade command from the host device to the at least one control device.

10. A system for modifying processing on at least one control device, the system comprising:

a remote host device coupled through a Field bus communications network to the at least one control device and configured to transfer data to the at least one control device during unscheduled communications periods between the at least one control device and control equipment of at least one process controlled by the at least one control device and without interrupting operation of the at least one control device;

at least one control device active memory area and at least one control device inactive memory area;

at least one control device microprocessor to execute instructions and data in the at least one active memory area; and

, a control device selector module to direct the at least one control device microprocessor to the at least one active memory area, the selector module further comprising a scheduling module to monitor at least one parameter and, when the parameter attains a specified value, to redirect the at least one control device microprocessor during microprocessor idle periods to modify the processing on the at least one control device.

11. A system according to claim 10, wherein the selector module comprises entry points to direct the at least one control device microprocessor.

12. A system according to claim 10, wherein the at least one control device microprocessor comprises a memory verification module.

13. A system according to claim 10, wherein:

the at least one active memory area comprises flash memory; and

,

the at least one inactive memory area comprises flash memory.

14. A system according to claim 10, wherein the remote host device comprises:

a Fieldbus communications module to access the Fieldbus communications network;

a control module to receive, transmit, and display commands and data between the Fieldbus communications network and a host device user; and

,

a control device communications module to transmit and receive commands and data between the host device and the at least one control device.

15. A system according to claim 14, wherein the control module further comprises a user interface.

16. A system according to claim 10, wherein the host device is a microprocessor-based device.

17. A system according to claim 10, wherein:

the active memory data comprises executable instructions and data; and

,

the inactive memory data comprises executable instructions and data.

18. A method of implementing a software upgrade for a control device, the method comprising:

transferring, without interrupting operation of the control, device, software upgrade data from a remote host device to the control device during unscheduled communications periods between the control device and control equipment of at least one process controlled by the control device, the remote, host device and the control device being coupled through a Field bus communications network;

storing the upgrade data to a respective inactive memory area;

monitoring at least one parameter; and

,

communicating, when the parameter attains a specified value, a command to redirect at least one microprocessor of the control device, during an idle period of the at least one microprocessor, to execute the stored upgrade data in, the inactive memory area to implement the software upgrade for a next active period of the microprocessor.

19. A method according to claim 18, wherein:

transferring upgrade data comprises transmitting executable instructions and entry points to the instructions; and

redirecting the at least one microprocessor comprises providing the at least one microprocessor with the entry points.

20. A method for modifying processing on at least one control device, the method comprising:

transferring data from a remote host device to the at least one control device without interrupting operation of the at least one control device and during unscheduled communications periods between the at least one control device and control equipment of at least one process controlled by the at least one control, device, the remote host device and the at least one control device being coupled through a Field bus communications network;

storing the transferred data to a respective inactive memory area;

monitoring at least one parameter; and

,

communicating, when the parameter attains a specified value, a command to redirect at least one control device microprocessor during an idle period to execute the stored data in the inactive memory area to modify the processing on the at least one control device, the idle period including a period when the microprocessor is not actively controlling the control equipment and when the microprocessor is not actively processing data from the control equipment, the microprocessor implementing the modified processing for a next active period of the microprocessor with respect to the control equipment.