Location dependent control access in a process control system

• US 9,244,455 B2
• Filed: 09/05/2008
• Issued: 01/26/2016
• Est. Priority Date: 09/10/2007
• Status: Active Grant

• Current Assignee: Fisher-Rosemount Systems Incorporated (Emerson Electric Company)
• Original Assignee: Fisher-Rosemount Systems Incorporated (Emerson Electric Company)
• Inventors: Peterson, Neil J., Schleiss, Trevor D.
• Primary Examiner(s): KELLY, RAFFERTY D
• Application Number:
  US12/205,457
• Publication Number:
  US 20090065578A1
• Time in Patent Office: 2,699 Days
• Field of Search: 235/382
• US Class Current: 1/1
• CPC Class Codes: G05B 19/048 Monitoring; Safety
• CPC Class Codes: G05B 19/409 characterised by using manual data input [MDI] or by using control panel, e.g. controlling functions with the panel; characterised by control panel details or by setting parameters G05B19/408, G05B19/4093 take precedence
• CPC Class Codes: G05B 19/4185 characterised by the network communication
• CPC Class Codes: G05B 2219/24024 Safety, surveillance
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: Y02P 90/02 Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]

Abstract

A method of accessing an element in a process control environment using a portable communicator includes defining a plurality of control areas within the process control environment, determining a position of a user operating a portable communicator with respect to one or more of the control areas, establishing an identity of the user, and selectively allowing the user to access an element within the process control environment via the portable communicator depending on the determined position of the user with respect to the one or more control areas and on the identity of the user.

Claims

1. A method of accessing an element in a process control environment using a portable communicator, comprising:

defining, by one or more processors, one or more control areas within the process control environment, each of the one or more control areas being associated with one or more respective elements within a process control environment, the process control environment including a plurality of elements;

determining, by one or more processors, a position of a user operating a portable communicator with respect to the one or more of the control areas;

establishing, by one or more processors, an identity of the user and an organizational role of the user based on information entered via the portable communicator; and

selectively allowing, by one or more processors, the user to access an element from among the plurality of elements within the process control environment via the portable communicator depending on (i) the determined position of the user with respect to the one or more control areas and (ii) the identity and the organizational role of the user,

wherein a boundary of at least one of the one or more control areas is adjusted dynamically without user intervention according to conditions in the process control environment that are detected by a computing device, and

wherein the dynamic adjustment results in a change in an association of one or more elements with at least one control area while the number of the plurality of elements in the process control environment remains unchanged.

2. The method of claim 1, wherein determining the position of a user operating the portable communicator includes associating the position of the user with a position of the portable communicator and determining the position of the portable communicator.

3. The method of claim 1, wherein determining the position of the user operating the portable communicator includes associating the position of the user with a position of an electronic tag carried by the user and determining the position of the electronic tag.

4. The method of claim 3, wherein determining the position of the electronic tag includes applying a technique consistent with a Real Time Location Systems (RTLS) standard to determine a real time position of the electronic tag.

5. The method of claim 3, wherein determining the position of the electronic tag includes activating a circuit within the electronic tag by means of a signal transmitted by a stationary element.

6. The method of claim 1, wherein selectively allowing the user to access an element within the process control environment includes selectively allowing the user to access data pertaining to the element but stored outside of the element depending on the determined position of the user with respect to the one or more control areas.

7. The method of claim 1, wherein selectively allowing the user to access an element within the process control environment includes selectively allowing the user to access configuration data pertaining to the element depending on the determined position of the user with respect to the one or more control areas.

8. The method of claim 7, wherein selectively allowing the user to access configuration data pertaining to the element includes allowing the user to change the configuration data.

9. The method of claim 1, wherein allowing the user to access an element within the process control environment includes selectively allowing the user to access data within the element when the user is determined to be within the same control area as the element.

10. The method of claim 1, wherein defining a plurality of control areas comprises associating each control area with a geographic area defined by a plurality of geographic coordinates.

11. The method of claim 10, wherein said geographic coordinates are Global Positioning Service coordinates.

12. The method of claim 1, wherein defining a one or more control areas comprises associating each of the one or more control areas with at least one area communicator and defining each of the one or more control areas as a geographic area in which a portable communicator may establish wireless communication with the at least one area communicator associated with the control area.

13. The method of claim 12, wherein defining each of the one or more control areas includes defining each of the one or more control areas as a geographical area in which a portable communicator may establish wireless communication with the at least one area communicator by detecting a search signal at or above a predetermined signal level, and

wherein the search signal is emitted from one of the portable communicator or the area communicator and detected by the other one of the portable communicator and the area communicator.

14. The method of claim 12, wherein associating each of the one or more control areas with the at least one area communicator includes assigning a radio frequency identification tag to the at least one area communicator.

15. The method of claim 12, wherein associating each of the one or more control areas with at least one area communicator includes using one of a wireless transmitter, a wireless receiver, or a wireless transceiver as the area communicator.

16. The method of claim 1, wherein determining the position of a user operating a portable communicator with respect to one or more of the control areas includes associating the position of the user with the position of the portable communicator, obtaining coordinates associated with a current location of the portable communicator, and determining whether the obtained coordinates are associated with one of the one or more control areas.

17. The method of claim 1, wherein determining the position of the user with respect to one or more of the control areas includes associating the position of the user with the position of the portable communicator and detecting, by the portable communicator, a search signal from each of one or more transceivers and measuring the strength of each of the received search signals.

18. The method of claim 1, wherein defining the one or more control areas within the process control environment includes placing at least one barcode tag within each of the one or more control areas, and

wherein determining the position of the user with respect to the one or more control areas includes associating the position of the user with a position of the portable communicator and scanning the barcode tag by the portable communicator.

19. The method of claim 1, wherein selectively allowing the user to access an element within the process control environment includes selectively allowing the user to access data regarding one of a field device, a controller, or a control loop within a process control system of the process control environment.

20. The method of claim 1, wherein allowing the user to access an element within the process control environment includes establishing a direct communication link between the portable communicator and the element.

21. The method of claim 1, wherein allowing the user to access an element within the process control environment includes establishing a communication link between the portable communicator and the element through a wireless network operatively coupled to the process control system.

22. The method of claim 1, wherein establishing an identity of the user includes obtaining identification information via the portable communicator, retrieving a record having data associated with the identification information of the user and permission levels of the user corresponding to one or more elements of the process control environment, and limiting access of the portable communicator to the element based on the data within the retrieved record.

23. The method of claim 1, further comprising:

selectively notifying, by one or more processors, the user via the portable communicator of an event associated with the element within the process control environment depending on the determined position of the user with respect to the one or more control areas, and

wherein the event includes data indicative of the element reporting one of an abnormal function, an abnormal measurement, or an emergency condition.

24. The method of claim 1, further comprising:

providing, by one or more processors, a notification via the portable communicator of an event associated with the element when the position of the user is determined to be within at least one of the control areas with which the event is associated, and not providing a notification to the user of an event associated with the element when the position of the user is determined to be outside of the one of the control areas with which the event is associated.

25. The method of claim 24, wherein the event includes data indicative of the element reporting one of an abnormal function, an abnormal measurement, or an emergency condition.

26. The method of claim 1, wherein establishing an identity of the user includes authorizing the user by obtaining a personal identification and a shared secret information from the user via the portable communicator.

27. The method of claim 1, wherein establishing an identity of the user includes obtaining personal identification data from the user using the portable communicator and reporting the position of the user and the personal identification data to a host disposed in a network associated with the process control environment, and

wherein the host is configured to display the position of the portable communicator and the identity of the user.

28. The method of claim 1, wherein selectively allowing the user to access an element within the process control environment further comprises:

obtaining an override key from via the portable communicator, determining whether the override key is valid in the process control environment, and granting access to the element irrespective of the determined position of the user if the override key is valid.

29. The method of claim 1, further comprising:

conditionally associating, by one or more processors, the position of the user with the position of the portable communicator, including;

associating the position of the user with a position of an electronic tag carried by the user;

establishing a wireless link between the electronic tag and the portable communicator having a signal strength; and

disassociating the position of the user with the position of the portable communicator if the signal strength drops below a threshold value.

30. The method of claim 1, further comprising:

generating, by one or more processors, a log entry indicative of at least the determined position of the user and the identity of the user; and

storing, by one or more processors, the log entry in a persistent memory.

31. The method of claim 30, wherein selectively allowing the user to access an element within the process control environment includes selectively allowing the user to update configuration data pertaining to the element depending on the determined position of the user with respect to the one or more control areas, and

wherein generating the log entry includes generating the log entry further indicative of the update.

32. An access control system for use in a process control environment, the access control system comprising:

a computer readable medium; and

a first routine stored on the computer readable medium which, when executed by a processor, determines the geographic position of an authorized user operating a portable communicator within the process control environment based on data received from one of the portable communicator or electronic location device carried by the authorized user;

a second routine stored on the computer readable medium which, when executed by a processor, limits access of the authorized user to data within the process control environment based on the determined geographic position of the portable communicator with respect to a plurality of control areas within the process control environment, each of the plurality of control areas being associated with one or more respective elements within the process control environment, the process control environment including a plurality of elements,

wherein the boundary of at least one of the plurality of control areas is adjusted dynamically without user intervention according to conditions in the process plant that are detected by a computing device, the dynamic adjustment resulting in a change in an association of one or more elements with at least one control area while the number of the plurality of elements in the process control environment remains unchanged; and

a third routine stored on the computer readable medium which, when executed by a processor, receives via the portable communicator, data indicative of information an identity of the user and an organizational role of the user and selectively allows the user to access an element from among the plurality of elements within the process control environment via the portable communicator depending on the identity and the organizational role of the user.

33. The access control system of claim 32, further comprising:

a fourth routine stored on the computer readable medium which, when executed by a processor, stores data indicative of the plurality of control areas.

34. The access control system of claim 33, wherein the third routine is stored in the portable communicator, and

wherein the fourth routine is stored on a computer host communicatively coupled to a wireless communication network within the process control environment.

35. The access control system of claim 33, wherein the second routine and the fourth routine are stored on a computer host communicatively coupled to a wireless communication network within the process control environment.

36. The access control system of claim 33, wherein the fourth routine retrieves a user record from a database and further limits access of the authorized user to data within the process environment according to the user record and according to the data received by the fifth routine, and

wherein the user record includes data associated with authorization information corresponding to the user and a permission level corresponding to the user to the element in the process control environment.

37. The access control system of claim 32, further including a fifth routine stored on the computer readable medium which, when executed by a processor, selectively notifies the portable communicator of an event associated with an element within the process control environment depending on the position of the portable communicator with respect to the plurality of control areas.

38. The access control system of claim 32, wherein the set of data received from the portable communicator includes a set of Global Positioning Service coordinates or data indicative of a search signal transmitted from a transceiver within the process environment.

39. The access control system of claim 32, further including a fifth routine stored on the computer readable medium which, when executed by a processor, records a time when the second routine determines the position of the user and the determined position of the user in a registry.

40. A method of accessing an element in a process control environment using a portable communicator, comprising:

defining a plurality of control areas within the process control environment;

determining a position of a user operating a portable communicator with respect to one or more of the control areas;

establishing an identity of the user and an organizational role of the user with information entered by the user via the portable communicator;

selectively allowing the user to access an element within the process control environment via the portable communicator depending on the determined position of the user with respect to the one or more control areas and on the identity of the user;

identifying whether the user is a target recipient of a notification of an event associated with the element within the process control environment according to the determined position of the user with respect to the one or more control areas, the identity of the user, and the organizational role of the user; and

selectively pushing the notification to the portable communicator when the user is a target recipient and otherwise not pushing the notification to the portable communicator.

41. The method of claim 40, wherein defining a plurality of control areas comprises associating each of the plurality of control areas with at least one area communicator, and defining each control area as a geographic area in which the portable communicator may establish wireless communication with the at least one area communicator associated with the control area.

42. The method of claim 40, wherein determining the position of a user operating the portable communicator with respect to one or more of the control areas includes associating the position of the user with the position of the portable communicator, obtaining coordinates associated with a current location of the portable communicator, and determining whether the obtained coordinates are associated with one of the plurality of control areas.

43. The method of claim 40, wherein selectively allowing the user to access an element within the process control environment includes selectively allowing the user to access data regarding one of a field device, a controller or a control loop within a process control system of the process control environment.

44. The method of claim 40, wherein establishing an identity of the user includes obtaining identification information from the user using the portable communicator, retrieving a record having data associated with the identification information of the user and permission levels of the user to one or more elements of the process control environment, and limiting access of the portable communicator to the element based on the data within the retrieved record.

45. The method of claim 40, further comprising providing a notification to the user, via the portable communicator, of an event associated with the element when the position of the user is determined to be within at least one of the control areas with which the event is associated and not providing a notification to the user of an event associated with the element when the position of the user is determined to be outside of the one of the control areas with which the event is associated.

46. The method of claim 40, further comprising:

conditionally associating the position of the user with the position of the portable communicator, including;

associating the position of the user with a position of an electronic tag carried by the user;

establishing a wireless link between the electronic tag and the portable communicator having a signal strength; and

disassociating the position of the user with the position of the portable communicator if the signal strength drops below a threshold value.

47. The method of claim 40, further comprising:

generating a log entry indicative of at least the determined position of the user and the identity of the user; and

storing the log entry in a persistent memory.

48. An access control system for use in a process control environment, the access control system comprising:

a computer readable medium; and

a first routine stored on the computer readable medium which, when executed by a processor, determines the geographic position of an authorized user operating a portable communicator within the process control environment based on data received from one of the portable communicator or electronic location device carried by the authorized user;

a second routine stored on the computer readable medium which, when executed by a processor, limits access of the authorized user to data within the process control environment based on the determined geographic position of the portable communicator with respect to the plurality of control areas;

a third routine stored on the computer readable medium which, when executed by a processor, receives from a user of a portable communicator data indicative of an identity of the user and an organizational role of the user; and

a fourth routine stored on the computer readable medium which, when executed by a processor, identifies whether the portable communicator is a target recipient of a notification of an event associated with an element within the process control environment according to the position of the portable communicator with respect to the one or more control areas, the identity of the user and the organizational role of the user; and

a fifth routine stored on the computer readable medium which, when executed by a processor, selectively pushes the notification to the portable communicator when the portable communicator is a target recipient and otherwise does not push the notification to the portable communicator.

49. The access control system of claim 48, further comprising:

a sixth routine stored on the computer readable medium which, when executed by a processor, stores data indicative of a plurality of control areas.

50. The access control system of claim 49, wherein the sixth routine is stored in a portable communicator and the third routine is stored on a computer host communicatively coupled to a wireless communication network within the process control environment.

51. The access control system of claim 49, wherein the second routine and the sixth routine are stored on a computer host communicatively coupled to a wireless communication network within the process control environment.

52. The access control system of claim 48, wherein the second routine retrieves a user record from a database and further limits access of the authorized user to data within the process control environment according to the user record and to the data received by the second routine, and

wherein the user record includes data associated with an authorization information of the user and a permission level of the user to the element in the process control system.

53. The access control system of claim 48, wherein the set of data received from the portable communicator includes a set of Global Positioning Service coordinates or a data indicative of a search signal transmitted from a transceiver within the process control environment.

54. The access control system of claim 48, further including a sixth routine stored on the computer readable medium which, when executed by a processor, records in a registry (i) a time when the first routine determines the position of the user, and (ii) the determined position of the user.