DE102020128499A1 - Methods for improving the operation of a custody transfer system - Google Patents

Abstract

The invention includes a method for improving the operation of a custody transfer system (CTS), comprising: - transmission of the field devices (FG) detected physical measured variables and other data relating to the field devices (FG) to the programmable electronic unit (PE); - Aggregating the physical measured variables and the other data by the programmable electronics unit (PE); - Transmitting the aggregated physical measured variables and the other data to an evaluation unit (AE, AE'); - Analyzing the transmitted aggregated physical measured variables and the other data with regard to at least one of the criteria security, process quality and safety;- determining a status (ST, ST') as the result of the analysis with regard to at least one of the criteria security, process quality and safety by the evaluation unit (AE, AE');- transmitting the status (ST, ST') to the response unit (RE);- creating an action (MA, MA') based on the status (ST, ST') du rch the reaction unit (RE);- transmission of the measure (MA, MA') to at least one of the field devices (FG) and/or to the programmable arithmetic unit; and - the measure (MA, MA') being carried out by that component (FG, PE) to which the measure (MA, MA') was transmitted. and a custody transfer system.

Description

The invention relates to a method for improving the operation of a custody transfer system and said custody transfer system.

Automation components that are used in industrial plants are already known from the prior art. For example, field devices are used as automation components, which are used in process automation technology as well as in production automation technology. In principle, all devices that are used close to the process and that supply or process process-relevant information are referred to as field devices. Thus, field devices are used to record and/or influence process variables. Measuring devices or sensors are used to record process variables. These are used, for example, for pressure and temperature measurement, conductivity measurement, flow measurement, pH measurement, level measurement, etc. and record the corresponding process variables pressure, temperature, conductivity, pH value, level, flow rate, etc. Actuators are used to influence process variables. These are, for example, pumps or valves that can influence the flow of a liquid in a pipe or the fill level in a container. In addition to the field devices mentioned above, automation components are also understood to mean gateways, edge devices, remote I/Os, wireless adapters or devices in general that are arranged at the field level.

A large number of such field devices are produced and sold by the Endress+Hauser Group.

In modern industrial plants, field devices are usually connected to higher-level units via communication networks such as fieldbuses ( ^Profibus® , Foundation® ^Fieldbus , ^HART® , etc.). Normally, the superordinate units are control systems or control units, such as a PLC (programmable logic controller) or a PLC (programmable logic controller). The higher-level units are used, among other things, for process control, process visualization, process monitoring and for commissioning the field devices. The measured values recorded by the field devices, in particular by sensors, are transmitted via the respective bus system to one (or optionally several) higher-level unit(s). In addition, data transmission from the higher-level unit via the bus system to the field devices is also required, in particular for configuring and parameterizing field devices and for controlling actuators.

Custody transfer systems are used in the oil and gas industry, among others, and for transactions and the transport of physical substances between two operators - supplier and operator Receiver - used. Such a custody transfer system contains one or more automation components, which are used to record the quantity of a transported physical substance and to store the data of the transactions. A multitude of field devices, each with one or more sensor units, are present in a custody transfer system. The field devices record the physical measured variables of the physical substances, for example their temperature, their pressure, their mass flow and/or their density. The field devices feed the measured values to another component of the custody transfer system, the so-called flow computer. Based on the measured variables, this calculates specific information, such as the transmitted volume.

Today's custody transfer systems are based on older communication protocols such as 4-20mA, HART and Modbus. These protocols only have a low throughput. A secure digital transport of data is not possible with these protocols in a tamper-proof manner. Protection against manipulation is achieved in many applications with electrical, mechanical and software-technical means, for example mechanical seals.

After commissioning, an adjustment of the components of a custody transfer system is not planned. In the event of any malfunctions occurring in one or more of the components, external specialist personnel must be consulted. A predictive maintenance of the system is not foreseen.

The object of the invention is to maintain the operation of a custody transfer system and at the same time to ensure protection against manipulation at all times.

• - Übermitteln von durch die Feldgeräte erfassten physikalische Messgrößen und weiteren Daten bezüglich Feldgeräte an eine programmierbare Elektronikeinheit;
• - Aggregieren der physikalischen Messgrößen und der weiteren Daten durch die programmierbare Elektronikeinheit;
• - Übermitteln der aggregierten physikalischen Messgrößen und der weiteren Daten an die Auswerteeinheit;
• - Analysieren der übermittelten aggregierten physikalischen Messgrößen und der weiteren Daten hinsichtlich zumindest einer der Kriterien Security, Prozessqualität und Safety;
• - Ermitteln eines Status als Ergebnis der Analyse hinsichtlich zumindest eines der Kriterien Security, Prozessqualität und Safety durch die Auswerteeinheit;
• - Übermitteln des Status an die Reaktionseinheit;
• - Erstellen einer Maßnahme auf Basis des Status durch die Reaktionseinheit;
• - Übermitteln der Maßnahme an zumindest eines der Feldgeräte und/oder an die programmierbare Recheneinheit; und
• - Durchführen der Maßnahme durch diejenige Komponente, an welche die Maßnahme übermittelt wurde.

The object is achieved by a method for improving the operation of a custody transfer system, the custody transfer system having a large number of field devices, a programmable electronic unit, an evaluation unit and a reaction unit, wherein at least the field devices, the programmable electronic unit and the evaluation unit are connected to one another in a tamper-proof manner, with the method comprising the following method steps:

• - Transmission of physical measured variables and other data recorded by the field devices regarding field devices to a programmable electronics unit;
• - Aggregating the physical measured variables and the other data by the programmable electronics unit;
• - Transmission of the aggregated physical measured variables and the additional data to the evaluation unit;
• - Analyzing the transmitted aggregated physical measured variables and the other data with regard to at least one of the criteria of security, process quality and safety;
• - Determining a status as a result of the analysis with regard to at least one of the criteria security, process quality and safety by the evaluation unit;
• - communicating the status to the reaction unit;
• - creating an action based on the status by the response unit;
• - Transmission of the measure to at least one of the field devices and/or to the programmable computing unit; and
• - Execution of the measure by that component to which the measure was transmitted.

The method according to the invention makes it possible to identify and/or predict error states during operation and to react to them appropriately by means of corrective measures. This improves the operation of the custody transfer system and can be maintained at all times. The operation of a custody transfer system can also be optimized by such measures. In the ideal case, the system is completely self-regulating and requires no input from a user during operation.

For this purpose, the programmable unit continuously collects and aggregates the data generated by the field devices. The field devices transmit this data independently to the programmable unit or transmit it to the higher-level unit upon request. The aggregated data is then examined by an analysis unit for at least one of the criteria of security, process quality and safety.

The term "security" refers to the data security of the custody transfer system, for example whether there are attempts to manipulate the field devices.

The term "safety" refers to accident prevention in the custody transfer system. The field devices and other system components such as pipes, valves, etc. are checked for the current mechanical quality. For example, deposits in the pipes, abrasive processes, etc. are detected.

The term "process quality" refers to the quality of the physical substance flowing through the custody transfer system, e.g. whether air bubbles are present in the physical substance

If an unsafe state is detected with regard to one of these three criteria, the response unit creates an appropriate measure to improve and ideally eliminate the detected state of the custody transfer system.

Field devices that are mentioned in connection with the invention are already listed as examples in the introductory part of the description and can be designed as measuring devices and/or as actuators.

According to a first variant of the method according to the invention, it is provided that a recalibration or a parameterization of that component to which the measure was transmitted is carried out as a measure. For example, the measurement mode of a field device can be changed in part or in parts, or changed control values can be transmitted to field devices configured as actuators.

According to an advantageous embodiment of the first variant of the method according to the invention, it is provided that in the event that a parameterization is carried out as a measure, a parameter set for the corresponding component is created by the evaluation unit. For this purpose, there are a large number of lookup tables for the various field devices and/or a large number of cause-error tables on the evaluation unit. Alternatively, the appropriate measure can be determined using historical values, which also include experiences from third-party custody transfer systems, or using a KI algorithm.

According to a second variant of the method according to the invention, it is provided that the measure taken is to shut down that component to which the measure was transmitted. In particular, if there is a suspicion of manipulation or a hardware security problem, further danger can be prevented by shutting down.

According to an advantageous embodiment of the method according to the invention, it is provided that the further data relating to the field device internal sensor data or diagnostic data of the field device, in particular heartbeat data.

• - Mindestens eine Oszillationsfrequenz;
• - Mindestens eine Sensordämpfung;
• - Ein Index für Gasblasen im Messtoff, insbesondere Mikroblasen- und Inhomogenitätserkennung;
• - Ein Kalibrierfaktor;
• - Ein Sensor-Belagsindex, insbesondere für Belagsbildung und Verstopfung;
• - Eine Sensortemperatur;
• - Ein Sensor-Integritätsindex, insbesondere für Korrosion und Abrieb.

According to an advantageous embodiment of the method according to the invention, it is provided that the internal sensor data reflect the state of the sensor and contain information regarding at least one of the following:

• - At least one oscillation frequency;
• - At least one sensor damping;
• - An index for gas bubbles in the medium, in particular micro-bubble and inhomogeneity detection;
• - A calibration factor;
• - A sensor plaque index, specifically for plaque build-up and clogging;
• - A sensor temperature;
• - A sensor integrity index, particularly for corrosion and abrasion.

These terms are well known to those skilled in the art. Definitions of the terms are given in the relevant textbooks.

• - Ein mittlerer Inhomogenitätsindex, insbesondere für freies mitgeführtes Gas und Nassgas;
• - Ein mittlerer Schwebeblasenindex, insbesondere für suspendierte Mikroblasen;
• - Ein mittlerer Kaviationsindex;
• - Kavitation.

According to an advantageous embodiment of the method according to the invention, it is provided that the internal sensor data relate to data relating to the procedural process and contain information relating to at least one of the following:

• - A mean inhomogeneity index, particularly for free entrained gas and wet gas;
• - A medium suspension bubble index, especially for suspended microbubbles;
• - A medium cavitation index;
• - cavitation.

These terms are well known to those skilled in the art. Definitions of the terms are given in the relevant textbooks. For example, the term "cavitation" refers to the formation of cavities in the flowing physical substance.

According to an advantageous embodiment of the method according to the invention, it is provided that the evaluation unit uses a KI algorithm, in particular based on deep learning and/or a neural network, for the steps of analyzing and determining the status. The algorithm is trained in advance with training data that shows a causality between certain data from the field devices and a status.

Provision can also be made to provide the reaction unit with such a AI algorithm in order to be able to propose a suitable measure on the basis of the states determined.

According to an advantageous development of the method according to the invention, it is provided that the evaluation unit, the reaction unit and the field devices form a control loop in that the measure causes a configuration/parameter change in at least one of the field devices, the field device generates new data on the basis of the configuration/parameter change , the evaluation unit analyzes them with regard to one of the criteria security, process quality and safety and creates a status corresponding to an optimization of the respective criterion, these steps being repeated iteratively until the status corresponds to a predetermined quality level. In this way, optimal parameters for the field devices can be found, for example. The AI algorithm executed on the evaluation unit (and possibly on the reaction unit) can also be taught in further.

• - Ein Vielzahl von Feldgeräten mit jeweils mindestens einer Sensoreinheit zur Erfassung einer physikalischen Messgröße eines verfahrenstechnischen Prozesses;
• - Eine programmierbare Elektronikeinheit, wobei die Feldgeräte dazu ausgestaltet sind, die erfassten physikalischen Messgrößen und weitere Daten, insbesondere Statusdaten und/oder Daten bzgl. der Performance, an die programmierbare Elektronikeinheit zu übermitteln, die wobei die programmierbare Elektronikeinheit dazu ausgestaltet ist, die von den Feldgeräten übermittelten physikalischen Messgrößen und die weiteren Daten zu aggregieren;
• - Eine Auswerteeinheit, wobei die programmierbare Elektronikeinheit dazu ausgestaltet ist, die aggregierten physikalischen Messgrößen und weiteren Daten an die Auswerteeinheit zu übermitteln, wobei die Auswerteeinheit dazu ausgestaltet ist, auf Basis der übermittelten aggregierten physikalischen Messgrößen und weiteren Daten einen Status zu berechnen;
• - Eine Reaktionseinheit, wobei die Auswerteeinheit dazu ausgestaltet ist, den berechneten Status an die Auswerteeinheit zu übermitteln und wobei die Reaktionseinheit dazu ausgestaltet ist, den übermittelten Status zu analysieren und, eine Maßnahme als Reaktion auf den übermittelten Status zu erstellen und die Maßnahme an zumindest eines der Feldgeräte und/oder an die Auswerteeinheit zu übermitteln; und
• - Ein Kommunikationsnetzwerk mit einem manipulationssicheren Protokoll, welches zumindest die Vielzahl der Feldgeräte mit der programmierbaren Elektronikeinheit verbindet, so dass die physikalischen Messgrößen und die weiteren Daten über das OPC UA-basierte Kommunikationsnetzwerk übermittelt werden.

Furthermore, the task is solved by a custody transfer system, wherein the custody transfer system comprises at least the following components:

• - A multiplicity of field devices, each with at least one sensor unit for detecting a physical measured variable of a technical process;
• - A programmable electronics unit, wherein the field devices are designed to transmit the recorded physical measurement variables and other data, in particular status data and/or data regarding the performance, to the programmable electronics unit, which the programmable electronics unit is designed to transmit from the to aggregate physical measured variables transmitted to field devices and the other data;
• - An evaluation unit, wherein the programmable electronics unit is designed to transmit the aggregated physical measurement variables and other data to the evaluation unit, the evaluation unit being designed to calculate a status on the basis of the transmitted aggregated physical measurement variables and other data;
• - A reaction unit, wherein the evaluation unit is designed to transmit the calculated status to the evaluation unit and the reaction unit is designed to analyze the transmitted status and to create a measure in response to the transmitted status and the measure to transmit to at least one of the field devices and/or to the evaluation unit; and
• - A communication network with a tamper-proof protocol, which connects at least the multiplicity of field devices to the programmable electronics unit, so that the physical measured variables and the other data are transmitted via the OPC UA-based communication network.

In addition to the components mentioned, a custody transfer system also has mechanical components such as pipes, containers and hoses.

According to an advantageous embodiment of the custody transfer system according to the invention, it is provided that the programmable electronics unit and the evaluation unit and/or the evaluation unit and the multiplicity of field devices are connected to one another by means of the communication network.

According to an advantageous embodiment of the custody transfer system according to the invention, it is provided that the communication network is OPC UA-based. Using the OPC UA standard guarantees manipulation-free and incontestable transmission of all data exchanged between the components described above.

According to an advantageous embodiment of the custody transfer system according to the invention, it is provided that the evaluation unit is designed to execute a K1 algorithm for calculating the status.

According to an advantageous embodiment of the custody transfer system according to the invention, it is provided that the programmable electronics unit is designed as a flow computer. A standard flow computer can be used for this purpose, which is loaded with new firmware or new control software so that it can perform the relevant functionalities of collecting, aggregating and forwarding the data.

According to an advantageous embodiment of the custody transfer system according to the invention, it is provided that the evaluation unit is implemented on a cloud-based server. Alternatively, the evaluation unit is designed as a local device and is fitted inside the housing of the custody transfer system.

• 1: ein Ausführungsbeispiel eines erfindungsgemäßen Custody-Transfer-Systems. Dieses besteht aus einer Vielzahl von Feldgeräten FG. Aus Übersichtsgründen ist nur ein Feldgerät FG abgebildet. Dieses Feldgerät FG besitzt ein oder mehrere Sensoreinheiten SE1, SE2, mittels welcher das Feldgerät FG jeweils zumindest eine physikalische Messgröße hinsichtlich der physikalischen Substanz erhebt. Im vorliegenden Fall erhebt Sensoreinheit SE1 einen Massenfluss sowie eine Temperatur der physikalischen Substanz; Sensoreinheit SE2 erhebt die Dichte der physikalischen Substanz. Weitere Feldgeräte können aber auch als Aktoren ausgestaltet sein. Das Custody-Transfer-System CTS dient dem Übertragen einer physikalischen Substanz, bspw. Erdöl, zwischen zwei Einheiten und weist hierfür ferner eine Rohrleitung auf, welche von der physikalischen Substanz durchflossen wird.

The invention is explained in more detail with reference to the following figures. It shows

• 1 : an exemplary embodiment of a custody transfer system according to the invention. This consists of a large number of field devices FG. For reasons of clarity, only one field device FG is shown. This field device FG has one or more sensor units SE1, SE2, by means of which the field device FG records at least one physical measured variable with regard to the physical substance. In the present case, sensor unit SE1 records a mass flow and a temperature of the physical substance; Sensor unit SE2 measures the density of the physical substance. However, further field devices can also be configured as actuators. The custody transfer system CTS is used to transfer a physical substance, for example crude oil, between two units and for this purpose also has a pipeline through which the physical substance flows.

The custody transfer system CTS also has a programmable electronic unit PE in the form of a flow computer, an evaluation unit AE running on a cloud-based service platform SP and a reaction unit RE, for example in the form of another flow computer or a gateway.

During its intended operation, the field device FG transmits the physical measured variables collected by means of the sensor units SE1, SE2 to the programmable computing unit PE. The programmable computing unit PE is designed to query and further process the physical measured variables of all field devices FG located in the custody transfer system, for example to create an invoice in which the quantity and price of the physical substance transferred between two units is specified.

According to the invention, the programmable computing unit PE is configured in such a way that it is able to collect and aggregate all physical measured variables of all field devices FG of the custody transfer system, as well as other field device-related data, such as internal sensor data or diagnostic data. It can be provided that the programmable computing unit PE also adds its own diagnostic data.

This aggregated total of all data is transmitted to the evaluation unit AE via an OPC UA-based communication network, which guarantees manipulation-free transmission of the data. The evaluation unit then evaluates the data and classifies it into a status ST for the criteria of safety, security and process quality. For the analysis and creation of the Sta tus uses the evaluation unit, provided there is sufficient computing power, a Kl algorithm.

The status ST or the various status ST of the individual criteria are then transmitted to a reaction unit RE via an OPC UA-based communication network. This creates a suitable measure MA, MA' and transmits this to corresponding components FG, PE in order to improve the status. The evaluation unit AE can already transmit specific information or suggestions to the reaction unit RE. Alternatively, the reaction unit RE itself has a K1 algorithm in order to determine suitable measures MA, MA'.

Below are a number of examples of different criteria and corresponding appropriate measures:

Example 1 for safety criterion:

Internal sensor data of the sensor units SE1, SE2, for example “HBSI (“Heartbeat Sensor Integrity”) drift” for corrosion and abrasion are sent to the evaluation unit AE. This examines this data for known clusters, determines matches and concludes from this that the status ST is "Bad", since there are signs of corrosion or damage to the measuring tube. Alternatively, this status ST can be determined from event data. The status is transmitted to the reaction unit RE with a short description. As a measure, MA, MA', this sends commands to the components of the custody transfer system to shut down the system for maintenance.

Example 2 for safety criterion:

As in the first example, the HBSI drift parameters are examined. In this case, no concrete damage is detected, but the beginning of abrasion of the measuring tube is detected. This incipient abrasion does not yet justify shutting down the custody transfer system, but it should be checked. The KI algorithm can determine an approximate point in time when the abrasion could become concrete. As a measure MA, MA', the reaction unit RE sends a message to the operator that there is a problem which could become dangerous at the time x. The operator can thus plan maintenance of the measuring tube in advance.

Example of process quality criterion:

Internal sensor data of the sensor units SE1, SE2 such as an inhomogeneity index of the physical substance and/or an index for gas bubbles in the physical substance are examined by the evaluation unit AE, which has knowledge of the desired process quality. A status ST “Bad” is created because there are too many gas bubbles in the physical substance. In response, the reaction unit RE initiates the reactions "slow down the pump" or "extraction bubbles". Specifically, the reaction unit RE causes the field devices FG to be reparameterized or new control values to be sent to the actuators in order to improve the quality of the process state.

Example for criterion Securitv:

By analyzing internal sensor data of the sensor units SE1, SE, such as the sensor asymmetry index in combination with the physical measured values and historical values, the evaluation unit AE can detect possible attempts at manipulation through a changed sensor behavior. A warning message "Sensor behavior has changed, please check sensor units" can be sent to corresponding components (for example to the programmable unit or to a PC of the operator) as a reaction. In extreme cases, the reaction unit RE can cause the custody transfer system CTS to be shut down.

To generally improve the process quality, a control circuit RK can be set up between the programmable computing unit PE, the evaluation unit AE and the reaction unit RE. After a mediocre to poor status ST has been detected by the evaluation unit AE for one or more of the three criteria, the reaction unit RE initiates appropriate measures. To improve the process quality, for example, a reparameterization of one of the field devices FG can be initiated. After the reparameterization has taken place, the evaluation unit examines the new data of the field device FG according to the analyzes used previously and determines a new status ST. If this is not yet satisfactory, the parameter set of the field device FG is changed iteratively until a satisfactory status ST can be detected.

Alternatively, the evaluation unit AE can also be designed on site and can be located, for example, inside the housing of the custody transfer system CTS. Depending on the computing power, this can also use lookup tables and/or cause-error tables instead of a KI algorithm; the same applies to the reaction unit RE.

Reference List

AE, AE'

evaluation unit

CS

Cloud based server

CTS

Custody Transfer System

FG

field device

AI

Kl algorithm

MUMMY'

measures

PE

programmable electronic unit

RE

reaction unit

RK

SE1, SE2

sensor units

ST, ST'

status

Claims (15)

Method for improving the operation of a custody transfer system (CTS), the custody transfer system (CTS) one or more field devices (FG), a programmable electronic unit (PE), an evaluation unit (AE, AE ') and a Reaction unit (RE), wherein at least the field devices (FG), the programmable electronics unit (PE) and the evaluation unit (AE, AE') are connected to one another in a tamper-proof manner, the method comprising the following method steps: - Transmission of by the field devices (FG) recorded physical measurement variables and other data relating to the field devices (FG) to the programmable electronic unit (PE); - Aggregating the physical measured variables and the other data by the programmable electronic unit (PE); - Transmission of the aggregated physical measured variables and the additional data to an evaluation unit (AE, AE'); - Analyzing the transmitted aggregated physical measured variables and the other data with regard to at least one of the criteria of security, process quality and safety; - Determining a status (ST, ST') as a result of the analysis with regard to at least one of the criteria security, process quality and safety by the evaluation unit (AE, AE'); - Transmission of the status (ST, ST') to the reaction unit (RE); - creating an action (MA, MA') based on the status (ST, ST') by the response unit (RE); - Transmission of the measure (MA, MA') to at least one of the field devices (FG) and/or to the programmable arithmetic unit; and - Carrying out the measure (MA, MA') by that component (FG, PE) to which the measure (MA, MA') was transmitted. procedure after claim 1 , wherein the measure (MA, MA') is a recalibration or a parameterization of that component (FG, PE) to which the measure (MA, MA') was transmitted. procedure after claim 2 , In the event that a parameterization as a measure (MA, MA ') is made, a parameter set for the corresponding component of the evaluation unit (AE, AE') is created. procedure after claim 1 , wherein the measure (MA, MA') is a shutdown of that component (FG, PE) to which the measure (MA, MA') was transmitted. Method according to at least one of the preceding claims, in which the further data relating to the field device (FG) are internal sensor data or diagnostic data of the field device (FG), in particular heartbeat data. procedure after claim 5 , the internal sensor data reflecting the state of the sensor and containing at least one of the following information: - at least one oscillation frequency; - At least one sensor damping; - An index for gas bubbles in the physical substance, in particular microbubble and inhomogeneity detection; - A calibration factor; - A sensor plaque index, specifically for plaque build-up and clogging; - A sensor temperature; - A sensor integrity index, particularly for corrosion and abrasion. procedure after claim 5 , the internal sensor data relating to data relating to the chemical engineering process and containing information relating to at least one of the following: - an average inhomogeneity index, in particular for free entrained gas and wet gas; - A medium suspension bubble index, especially for suspended microbubbles; - A measure of cavitation, such as a mean cavitation index. Method according to at least one of the preceding claims, wherein the evaluation unit (AE, AE ') for the steps of analyzing and determining the status (ST, ST') a Kl algorithm (Kl), in particular based on deep learning and / or a neural network. Method according to at least one of the preceding claims, wherein the evaluation unit (AE, AE'), the reaction unit (RE) and the field devices (FG) form a control loop (RK) in which the measure (MA, MA') involves a configuration/parameter change at least one of the field devices (FG) causes the field device (FG) to generate new data based on the configuration/parameter change, the evaluation unit (AE, AE') to analyze these with regard to one of the criteria of security, process quality and safety, and a status (ST, ST') accordingly created by optimizing the respective criterion, these steps being repeated iteratively until the status (ST, ST') corresponds to a predetermined quality level. Custody Transfer System (CTS), comprising: - One or more field devices (FG), each with at least one sensor unit (SE1, SE) for detecting a physical measured variable of a technical process; - A programmable electronic unit (PE), the field devices (FG) being designed to transmit the recorded physical measured variables and other data, in particular status data and/or data regarding performance, to the programmable electronic unit (PE), the programmable electronics unit (PE) is designed to aggregate the physical measured variables transmitted by the field devices (FG) and the additional data; - An evaluation unit (AE, AE'), the programmable electronics unit (PE) being designed to transmit the aggregated physical measured variables and other data to the evaluation unit (AE, AE'), the evaluation unit (AE, AE') doing so is designed to calculate a status (ST, ST') on the basis of the transmitted aggregated physical measured variables and other data; - A reaction unit (RE), the evaluation unit (AE) being designed to transmit the calculated status (ST, ST') to the reaction unit (RE) and the reaction unit (RE) being designed to transmit the transmitted status (ST , ST') and to analyze a measure (MA, MA') in response to the transmitted status (ST, ST') and to create the measure (MA, MA') to at least one of the field devices (FG) and/or to transmit to the evaluation unit (AE, AE'); and - A communication network with a tamper-proof protocol that connects at least the large number of field devices (FG) to the programmable electronic unit (PE), so that the physical measured variables and other data are transmitted via the OPC UA-based communication network. Custody Transfer System (CTS). claim 10 , wherein the programmable electronic unit (PE) and the evaluation unit (AE, AE') and/or the evaluation unit (AE, AE') and the plurality of field devices (FG) are connected to one another by means of the communication network. Custody Transfer System (CTS) according to one of the Claims 10 or 11 , where the communication network is OPC UA based. Custody Transfer System (CTS) according to at least one of the Claims 10 until 12 , wherein the evaluation unit (AE, AE') is designed to execute a KI algorithm for calculating the status (ST, ST'). Custody Transfer System (CTS) according to at least one of the Claims 10 until 13 , wherein the programmable electronics unit (PE) is designed as a flow computer. Custody Transfer System (CTS) according to at least one of the Claims 10 until 14 , The evaluation unit (AE, AE') being implemented on a cloud-based server (CS).

Images