KR100620108B1 - Method and System for Preventing Handling Mistake of Operator of Distributed Control System - Google Patents

Abstract

The present invention relates to a method for preventing misoperation of a distributed control system and a distributed control system using the same.

According to the present invention, when there is a stop command signal for a specific facility managed by the distributed control system, the operation output value for the specific facility is checked, and if the preset value is larger than the preset value, the control is performed so that the particular facility is not stopped and a false operation warning message. To prevent misoperation even when the operation reserve is not operating in a specific facility that requires an operation reserve and to output a misoperation warning message. to provide.

According to the present invention, it is possible to prevent device failure of the distributed control system due to misoperation of the driver, to reduce the burden on the driver and to improve the reliability of the equipment operation.

Decentralized control system, tamper proof, operating output, operating reserve, warning message

Description

Method for preventing misoperation of distributed control system and distributed control system using the same {Method and System for Preventing Handling Mistake of Operator of Distributed Control System}

1 is a block diagram showing a distributed control system according to a preferred embodiment of the present invention;

2 is a flowchart illustrating a method for preventing misoperation of a distributed control system according to a first embodiment of the present invention;

3 is a flowchart illustrating a method for preventing misoperation of a distributed control system according to a second embodiment of the present invention;

4 is a view showing a menu configuration for controlling the start and stop of the equipment to be controlled in the distributed control system of the present invention;

5 is an example screen for setting a misoperation prevention condition using a manipulation output value;

6 is an exemplary screen for setting a misoperation prevention condition using a driving reserve device;

7A is an example screen of an operation program before performing a misoperation prevention function using an operation output value;

7B is an example screen of an operation program for performing a misoperation prevention function using an operation output value;

8A is an example screen of an operation program before performing a misoperation prevention function using an operation reserve device;

8B is an exemplary screen of an operation program for performing a misoperation prevention function using an operation reserve device.

<Explanation of symbols for the main parts of the drawings>

100: distributed control system 110: central control unit

120: communication network 130: sub-station

140: control target equipment 400: start / stop status display box

410: field / remote selection box 420: start / stop selection box

430: start switch box 440: stop switch box

450: Close the operator screen box 460: Standby bypass box

The present invention relates to a method for preventing misoperation of a distributed control system and a distributed control system using the same. More specifically, when there is a stop command signal for a specific equipment managed by the distributed control system, the operation output value for the specific equipment is checked, and if the preset value is larger than the preset value, the control is performed so that the specific equipment is not stopped. A method for preventing misoperation of a distributed control system that outputs a message, controls a particular facility not to stop even when the operation reserve is not operated in a specific facility requiring an operation reserve, and outputs a warning message of misoperation, and a distributed control system using the same It is about.

As electronic and computer technologies are developed, various industrial fields are using control systems that can monitor and control specific tasks and processes using computers. In particular, in the backbone industries such as power plant equipment, petrochemical plants, and sewage treatment facilities, it is essential to check and control the components of the plant in order to operate normally, which requires a control system.

Early control system mainly used DDC (Direct Digital Control) system using one computer. The DDC system centralizes and manages input and output of process data and monitoring, operation, and control of a control target device all on one computer. However, the DDC system has a problem that all the control functions are concentrated on one computer, so that if the computer malfunctions, the entire process may become uncontrollable, and thus, the DDC system is not suitable for the control of equipment requiring high stability. .

Therefore, a Distributed Control System (DSC) has been proposed to compensate for the problems of the DDC system. The distributed control system is a control system that divides the central processing unit into several small central processing units, separates them by functions, and connects each computer having a small capacity central processing unit to a communication network. That is, the distributed control system divides a system applied to process control into unit subsystems suitable for each facility, and each subsystem performs an operation for each function, and is configured to enable communication between the subsystems.

By using a distributed control system, process control functions can be distributed to multiple computers to minimize the ripple effect even if a specific computer fails. In addition, it is possible to centralize the functions of managing distributed computers to a central main computer to facilitate data processing and operation management. The control program is installed in the computer of the distributed control system, and the control program is executed to monitor and adjust parameter values representing the operation status and performance of various equipments to be controlled, and to control the entire equipment to operate efficiently. Therefore, the driver can conveniently manage the control target equipment by using the control program in the management room where the control computer is installed.

However, even if an efficient distributed control system is constructed, the system is operated by the driver, so that if the driver repeats the same control operation using the control program, there is a possibility that a wrong operation may occur due to a driver's mistake or misunderstanding. This causes a problem that the equipment to be controlled may fail. For example, in a power plant installation that requires 24 hours of operation due to an operator's misoperation, certain parts may be shut down or incorrectly entered into control values.

Conventionally, a pop-up function is installed in a control program to prevent a driver's erroneous operation, and a method of informing the driver of a erroneous warning message through a pop-up window is applied. However, even if the pop-up window warns, if several pop-up windows appear during the driver's system control operation, the window may be closed without the driver's careless or habitual reading of the pop-up window. Because of this, there is a limit in preventing the erroneous operation of the driver. In addition, since the warning method using the pop-up window is to draw the attention of the driver, there is a problem that the malfunction of the control system can not be prevented if the driver performs an incorrect operation regardless of the warning contents.

In order to solve this problem, the present invention, when there is a stop command signal for a specific equipment managed by the distributed control system, checks the operation output value, if the control unit is larger than a predetermined set value, so that the particular equipment is not stopped and misoperation An object of the present invention is to provide a method for preventing misoperation of a distributed control system that outputs a warning message and a distributed control system using the same.

In addition, when there is a stop command signal for a specific facility managed by the distributed control system, it is checked whether the operation reserve device for the specific facility is in operation, and if the operation reserve device is not in operation, the specific facility is not stopped. It is an object of the present invention to provide a method for preventing misoperation of a distributed control system and a distributed control system using the same.

According to a first object of the present invention, a distributed control system including a central control unit (DOC), at least one sub station (DCU), and a communication network connecting the central control unit and the sub station (DCU) A method for preventing misoperation of a DCS: Distributed Control System, the method comprising: (a) checking whether a stop command signal for a specific facility managed by the distributed control system is present; (b) checking an operation output value (MV) for the specific facility when the stop command signal is present; (c) controlling not to stop the specific facility when the operation output value is larger than a predetermined set value; And (d) outputting an incorrect operation warning message for the stop command signal.

According to a second object of the present invention, there is provided a central control unit, at least one sub station and a communication network connecting the central control unit and the sub station, the method of preventing misoperation of a distributed control system, comprising: (a) in the distributed control system Checking whether there is a stop command signal for the specific facility to be managed; (b) checking whether the operation reserve device for the specific facility is in operation when the stop command signal is present; (c) if the operating reserve is not in operation, controlling not to stop the specific facility; And (d) outputting an incorrect operation warning message for the stop command signal.

According to a third object of the present invention, in a distributed control system having a misoperation prevention function for preventing a malfunction of a driver to prevent a malfunction of a control target equipment, the control target is analyzed by analyzing data inputted from the control target equipment. At least one sub station for calculating parameter values indicative of the operational status and performance of the facility and for controlling the operation of the controlled facility; And a control signal connected to the sub station through a communication network to receive the data and the parameter values and to transmit a control signal for controlling the operation of the controlled device to the sub station, and to stop the specific facility managed by the sub station. If there is a command signal, the operation output value (MV: Manipulation Value) for the specific equipment is checked or whether the operation reserve device for the specific equipment is operating, so that the operation output value is larger than the preset value or the operation. If the spare device is not in operation, the control unit does not stop the specific equipment and includes a central control unit (DOC) for outputting a misoperation warning message for the stop command signal. To troubleshoot the equipment under control Provide a distributed control system.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First of all, in adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are used as much as possible even if displayed on different drawings. In addition, in describing the present invention, when it is determined that the detailed description of the related well-known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted.

1 is a block diagram illustrating a distributed control system according to a preferred embodiment of the present invention.

As shown in FIG. 1, a distributed control system 100 according to a preferred embodiment of the present invention includes a central control unit (DOC) 110, a communication network 120, and a sub station (DCU: Distributed Control Unit). 120) and the like.

The central control unit 110 is connected to one or more sub stations 130 through the communication network 120 to collect and manage data transmitted from the sub station 130. The data transferred from the sub station 130 includes parameter values representing the operating state and the performance of the controlled equipment 140 as well as the data input from the controlled equipment 140. In addition, the central control unit 110 generates a control signal for controlling the operation of the control target facility 140 and transmits it to the sub station 130.

When the central control unit 110 receives the stop command signal for the control target facility 140 managed by the sub station 130, the central control unit 110 determines whether the stop command is caused by an incorrect operation of the driver according to a preset condition. If it is determined that the stop command is a stop command due to a misoperation of the driver, the central control unit 110 controls the control target facility 140 not to stop, and then outputs a misoperation warning message to prevent the misoperation of the driver. A process of preventing a driver's misoperation will be described later with reference to FIGS. 2 and 3.

The communication network 120 connects the central control unit 110 and the sub station 130 to provide a transmission path for data and control signals. The communication network 120 may include various wired and wireless communication networks such as a local area network (LAN), a public switched telephone network (PSTN), a mobile communication network, and the like. Transmission of data using the above-described communication network may include transmission by TCP / IP, transmission by X.25, and transmission by serial communication.

The sub station 130 analyzes data input from the control target facility 140, calculates parameter values representing the operating state and the performance of the control target facility 140, and transmits the parameter values to the central control unit 110. The sub station 130 receives the control signal from the central control unit 110 and controls the operation of the control target facility 140. In addition, the sub station 130 may generate a control signal to directly control the operation of the control target facility 140 managed by the sub station 130.

On the other hand, the central control unit 110 and the sub-station 130 are equipped with an operation program having a misoperation prevention function for operating the distributed control system 100, the MMI (Man Machine Interface) function through the operation program Will be provided. The operation program selects a specific control target facility 140 to which the misoperation prevention function is to be applied, sets a misoperation prevention condition, and performs a misoperation prevention function according to the set condition. The setting of the misoperation prevention condition will be described later in the description of FIGS. 5 and 6.

2 is a flowchart illustrating a method for preventing misoperation of the distributed control system according to the first embodiment of the present invention.

As shown in FIG. 2, the distributed control system 100 of the present invention checks whether there is a stop command signal for a specific facility among the control target facilities 140 to be managed (S200). If there is a stop command signal for a particular equipment, check the operation output value (MV: Manipulation Value) for the equipment (S202). When the operation output value is checked, it is determined whether the operation output value has a value larger than the preset value (S204).

When the operation output value is larger than the preset value, it is determined that the stop command signal of step S200 is caused by a misoperation of the driver. Therefore, the central control unit 110 transmits a control signal to the sub station 130 so as not to stop the specific facility (S206). After controlling not to stop the specific equipment, a misoperation warning message is output to prevent the misoperation of the driver (S208). For example, since the operation output value has exceeded the set value, a message for issuing a stop command can be output after confirming the operation output value.

In this case, when the control target facility 140 managed by the distributed control system 100 is normally stopped, the facility is stopped after the operation load of the facility is adjusted to the minimum. It is desirable to set the value to minimize the operating load.

On the other hand, if the operation output value is not greater than the predetermined set value, the stop command signal of the step S200 is determined to be a normal command signal and transmits a control signal to the sub-station 130 to stop the specific equipment (S210).

3 is a flowchart illustrating a method for preventing misoperation of a distributed control system according to a second exemplary embodiment of the present invention.

In the case of the equipment to be operated continuously among the control target equipment 140 managed by the distributed control system 100 of the present invention, since the load of the equipment cannot be adjusted, an operation spare device is provided to assist the operation of the equipment. Done. In the case of stopping the control target facility 140 having the operation reserve, it is preferable to stop the facility in the state in which the operation reserve is operated so as to ensure the continuity of the operation. The erroneous operation prevention process for the control target facility 140 having the operation reserve is as follows.

As shown in FIG. 3, the distributed control system 100 of the present invention checks whether there is a stop command signal for a specific facility among the control target facilities 140 including an operation reserve device (S300). If there is a stop command signal for a particular facility, it is determined whether the operation reserve for the particular facility is operating (S302).

When the driving reserve device is not operating, it is determined that the stop command signal of step S300 is caused by a misoperation of the driver. Therefore, the central control unit 110 transmits a control signal to the sub-station 130 so as not to stop the specific facility (S304), and outputs an incorrect operation warning message to prevent the driver's incorrect operation (S306). For example, a stop command may be issued after the operation reserve is operated, and a message may be output after the operation reserve is bypassed to bypass the operation reserve without operating the operation reserve.

On the other hand, when the operation reserve is operating, it is determined that the stop command signal of step S300 as a normal command signal and transmits a control signal to the sub-station 130 to stop the specific equipment (S308).

4 is a view showing a menu configuration for controlling the start and stop of the equipment to be controlled in the distributed control system of the present invention.

When the control target facility 140 to be controlled is selected by executing an operation program for operating the distributed control system 100 of the present invention, a menu window having a menu configuration as shown in FIG. 4 may be provided. The menu of FIG. 4 includes START / STOP Display Box 400, LOCAL / REMOTE Selector Box 410, and START / STOP Selector Box. 420, START Switch Box 430, STOP Switch Box 440, Control Dialog CLOSE Box 450, and STANDBY BY Box BYPASS Box) 470 and the like.

The start / stop state display box 400 distinguishes and displays the starting or stopping state of the equipment to be controlled 140 by color. In the field / remote selection box 410, a local mode or a remote mode is selected to control the controlled equipment 140 at the site or a remote location. In the start / stop selection box 420, the control target equipment 140 is started or stopped. Select start mode or stop mode for stop.

The start switch box 430 and the stop switch box 440 serve to start or stop the control target facility 140, respectively. When the start / stop selection box 420 is selected as the start mode and the start switch box 430 is selected, the control target equipment 140 is started. When the start / stop selection box 420 is selected as the stop mode and the stop switch box 440 is selected, the control target equipment 140 is stopped, and the erroneous operation prevention function of the present invention is applied. That is, when the stop switch box 440 is received and the stop command signal is received, it is determined whether the stop command is caused by a misoperation of the driver. Will print The manipulator screen closing box 450 serves to close a menu window controlling the facility to be controlled 140.

On the other hand, if the control target equipment 140 is provided with a driving reserve, the operation program provides a menu window having a menu configuration that includes a standby bypass box 460. In the description of FIG. 3, when an operation warning message is output because the operation reserve device is not operated, selecting the standby bypass box 460 and selecting the stop switch box 440 again does not operate the operation reserve device. The facility will be shut down.

5 is an exemplary screen for setting a misoperation prevention condition using a manipulation output value.

As described above with reference to FIG. 1, in order to confirm an operation output value of the control target facility 140 to provide a misoperation prevention function, a control operation on the control target facility 140 is performed after setting a misoperation prevention condition in advance. Should be done.

As shown in Fig. 5, the operation program can provide a dialog window for setting control conditions. A third condition among the conditions input to the dialog window corresponds to a misoperation prevention condition using the manipulation output value, and the misoperation prevention conditions shown in FIG. 5 may be shown in Table 1.

In Table 1, 2AO_EP018A is a tag ID for checking the operation output value of the control target facility 140, and 20 is a setting value for comparing with the operation output value of the control target facility 140. FIG. BFP1 is an ID indicating the equipment to be controlled 140, and BFP1_STOP.CSTO is a tag ID for the stop operation of BFP1. dsd is a control function for setting a tag ID value, and msg is a control function for displaying a message.

When the misoperation prevention condition of Table 1 is applied, when the operation output value of the control target facility 140 is 20 or less, a control operation to stop the control target facility 140 is performed, and when the operation output value is larger than 20, An incorrect operation warning message will be displayed to confirm the operation output value.

6 is an exemplary screen for setting a misoperation prevention condition using an operation reserve device.

As described above in the description of FIG. 1, even when the misoperation prevention function for the control target facility 140 having the operation reserve device is provided, the misoperation prevention conditions must be set in advance. The third condition among the conditions input to the dialog window shown in FIG. 6 corresponds to a misoperation prevention condition using an operation reserve device, and may be shown in Table 2 below.

In Table 2, both 2DI_CDP2_R and 1COP_BP.CSTO are tag IDs for checking the status of the operation reserve machine, CDP1 is an ID indicating the equipment to be controlled 140, and CDP1_STOP.CSTO is a tag ID for the CDP1 stop operation.

When the misoperation prevention condition shown in Table 2 is applied, when the operation reserve machine for the control target facility 140 is operating, a control operation for stopping the control target facility 140 is performed, and the operation reserve machine is not operating. If not, the operation reserve checks the state, but to stop the control target equipment 140 without the operation reserve reserves a misoperation warning message to stop the controlled equipment 140 after selecting the standby bypass.

FIG. 7A is an example screen of an operation program before performing an erroneous operation prevention function using an operation output value, and FIG. 7B is an example screen of an operation program that performs an erroneous operation prevention function using an operation output value.

FIG. 8A is an example screen of an operation program before performing a misoperation prevention function using an operation spare device, and FIG. 8B is an example screen of an operation program performing an incorrect operation operation function using an operation spare device.

When the control target facility 140 to be controlled by executing the operation program is selected, as shown in FIG. 7A or 8A, a service screen indicating an operation state and a performance of the facility is provided. The service screen includes the menu window described above with reference to FIG. 4, and selects a menu of the menu window to control the operation of the facility.

If the stop switch box 440 is selected in the menu of the menu window, the erroneous operation prevention function is applied before stopping the corresponding equipment. If it is determined that the stop command signal is caused by the driver's misoperation by the misoperation prevention function, the driver may output a misoperation warning message as shown in FIG. 7B or FIG. Will be prevented.

The above description is merely illustrative of the present invention, and those skilled in the art to which the present invention pertains may various modifications without departing from the essential characteristics of the present invention. Accordingly, the embodiments disclosed herein are not intended to limit the present invention but to describe the present invention, and the spirit and scope of the present invention are not limited by these embodiments. It is intended that the scope of the invention be interpreted by the following claims, and that all descriptions within the scope equivalent thereto shall be construed as being included in the scope of the present invention.

As described above, the present invention, when there is a misoperation of the driver for the equipment managed by the distributed control system, controls not to perform the operation by the misoperation and outputs a misoperation warning message to prevent the misoperation of the driver. There is an effect that can be done.

In addition, it is possible to prevent the device failure of the distributed control system due to the wrong operation of the driver, to reduce the burden on the driver and improve the reliability of the operation of the equipment.

Claims (19)

Preventing misoperation of a Distributed Control System (DCS) including a Central Operate Console (DOC), one or more sub-stations (DCUs) and a communication network connecting the central control unit and the sub-stations In the method, (a) checking whether there is a stop command signal for a specific facility managed by the distributed control system; (b) checking an operation output value (MV) for the specific facility when the stop command signal is present; (c) controlling not to stop the specific facility when the operation output value is larger than a predetermined set value; And (d) outputting an incorrect operation warning message for the stop command signal; Method for preventing false operation of the distributed control system comprising a. The method of claim 1, The distributed control system includes an operation program having a misoperation prevention function for performing the steps (a) to (d). The method of claim 2, And said operation program provides a menu window composed of menus for controlling the starting and stopping of said specific facility. The method of claim 3, wherein The menu includes a START / STOP Display Box, a LOCAL / REMOTE Selector Box, a START / STOP Selector Box, and a START Switch Box. ), A stop switch box and a control dialog closing box (Control Dialog CLOSE Box). The method of claim 4, wherein The stop command signal of step (a) is generated by selecting the stop switch box, and the operation program applies the misoperation prevention function to the specific facility when the stop switch box is selected. How to prevent tampering with the system. The method of claim 2, The operation program selects the specific facility for applying the misoperation prevention function, inputs the setting value of step (c), and compares the operation output value with the setting value of step (c) to determine whether there is an incorrect operation. And a function for setting a misoperation prevention condition. The method of claim 1, The preset setting value of step (c) is set to a value that minimizes the operating load of the particular equipment. Preventing misoperation of a Distributed Control System (DCS) including a Central Operate Console (DOC), one or more sub-stations (DCUs) and a communication network connecting the central control unit and the sub-stations In the method, (a) checking whether there is a stop command signal for a specific facility managed by the distributed control system; (b) checking whether the operation reserve device for the specific facility is in operation when the stop command signal is present; (c) if the operating reserve is not in operation, controlling not to stop the specific facility; And (d) outputting an incorrect operation warning message for the stop command signal; Method for preventing false operation of the distributed control system comprising a. The method of claim 8, The distributed control system includes an operation program having a misoperation prevention function for performing the steps (a) to (d). The method of claim 9, And said operation program provides a menu window composed of menus for controlling the starting and stopping of said specific facility. The method of claim 10, The menu includes a START / STOP Display Box, a LOCAL / REMOTE Selector Box, a START / STOP Selector Box, and a START Switch Box. ), A STOP Switch Box, a Control Dialog CLOSE Box, and a STAND-BY BYPASS Box. The method of claim 11, The stop command signal of step (a) is generated by selecting the stop switch box, and the operation program applies the misoperation prevention function to the specific facility when the stop switch box is selected. How to prevent tampering with the system. The method of claim 9, The operation program may include a function of selecting a specific facility for applying the misoperation prevention function, setting a misoperation prevention condition for confirming whether the operation preliminary operation is performed, and determining whether misoperation is performed. How to prevent misoperation in distributed control systems. In a distributed control system having a misoperation prevention function for preventing a malfunction of an operator to prevent malfunction of a driver, One or more sub-stations (DCU: Distributed Control Unit) for analyzing the data input from the control target facility to calculate parameter values representing the operation state and performance of the control target facility and to control the operation of the control target facility; And Connected to the sub station through a communication network to receive the data and the parameter values and to transmit a control signal for controlling the operation of the controlled equipment to the sub station, and to stop a specific facility managed by the sub station. If there is a command signal, the operation output value (MV: Manipulation Value) for the specific equipment is checked or whether the operation reserve device for the specific equipment is operating, so that the operation output value is larger than the preset value or the operation. A central control unit (DOC: Distributed Operate Console) which controls not to stop the specific equipment when the spare device is not in operation and outputs an operation warning message for the stop command signal. Decentralized control system for preventing a malfunction of the control target equipment by preventing a wrong operation of the driver, characterized in that it comprises a. The method of claim 14, When there is a stop command signal for the specific facility, the distributed control system checks the operation output value for the specific facility or checks whether the operation reserve device for the specific facility is in operation, and thus the operation output value is preliminary. And an operation program having the misoperation prevention function that controls not to stop the specific equipment when the operation reserve is greater than a set value or the operation reserve device is not operated, and outputs the misoperation warning message for the stop command signal. Distributed control system that prevents malfunction of the control equipment by preventing the erroneous operation of the driver. The method of claim 15, The operation program is distributed control system for preventing a malfunction of the control target equipment by preventing a erroneous operation of the driver, characterized in that for providing a menu window consisting of a menu for controlling the start and stop of the specific equipment. The method of claim 16, The menu includes a START / STOP Display Box, a LOCAL / REMOTE Selector Box, a START / STOP Selector Box, and a START Switch Box. ), A STOP Switch Box, a Control Dialog CLOSE Box, and a STAND-BY BYPASS Box to prevent erroneous operation of the driver, thereby controlling equipment to be controlled. Distributed control system to prevent faults. The method of claim 17, The stop command signal is generated by selecting the stop switch box, and the operation program prevents the erroneous operation of the driver, wherein the erroneous operation prevention function is applied to the specific facility when the stop switch box is selected. Distributed control system to prevent failure of the equipment under control. The method of claim 14, The manipulation program selects the specific facility for applying the misoperation prevention function and compares the manipulation output value with the preset setting value or checks whether the operation reserve device is operated to determine whether misoperation is performed. A distributed control system for preventing a malfunction of a controlled equipment by preventing a erroneous operation of a driver, characterized by including a function of setting a condition.

Images