EP2517442A1

EP2517442A1 - Communication device and method for monitoring and controlling security systems

Info

Publication number: EP2517442A1
Application number: EP10810956A
Authority: EP
Inventors: Björn NIETHAMMER; Jens Lill; Axel Wörner
Original assignee: Minimax GmbH and Co KG
Current assignee: Minimax GmbH and Co KG
Priority date: 2009-12-22
Filing date: 2010-12-21
Publication date: 2012-10-31
Also published as: WO2011076184A1; DE102009060417A1; DE202009018171U1; DE102009060417B4

Abstract

The invention relates to a communication device for monitoring, controlling, and switching at least one security system (13), comprising a security system interface (22) for receiving and/or sending data and commands, at least one TCP/IP interface (24; 25; 26) for exchanging control commands and the stored data with an external user (4), wherein at least one TCP/IP interface (24; 25; 26) is designed as an HTTP interface (24) for interactive communication with the security system (13), with a coding and decoding device (27), and with a web server (21), a coding and decoding device (27), which is connected to a web server (21) and the security system interface (22) in a controllable manner by means of the HTTP interface (24) and which has a protocol for data transmission.

Description

Communication device and method for monitoring and controlling security systems

The invention relates to a communication and maintenance device and a method for monitoring, controlling and switching of security systems and in particular, but not only the monitoring of remote security systems, which are often, but not only, installed in hard to reach places.

Particularly in the case of plants that are difficult to access, there is the problem that the plants must operate largely autonomously. Short-term scheduled maintenance on the systems are not feasible or only with great difficulty. In particular, the intervention in case of incidents such as fire or other damage is virtually impossible. In the event of incidents, the plants must essentially react autonomously.

The security systems relating to the invention are used inter alia. the monitoring of protective objects such as Buildings, rooms, machinery and equipment such. B.

Power generation plants, selected plant parts such. Turbines, generators, switch cabinets, electrical and electronic components and systems as well as the monitoring of manufacturing processes. In addition to the surveillance serve

Safety systems optionally also for the initiation and triggering of protective measures such as alarms, initiation of switching operations such. Shutdowns or to trigger extinguishing systems.

The security system may include at least one control device which is connected to the control device of the entire protection object. In this way it is achieved that in the case of e.g. a fire extinguishing system is triggered and combats the fire automatically.

Of course, such an automatic fault resolution can only be a means to avert greater harm. After the accident, the system must pass through

Maintenance personnel will be returned to their original condition. Accordingly, the maintenance personnel of such a protective object of the occurred

Unscheduled situation on the ground to be informed early. For economic maintenance, it is also necessary to know which spare parts will be needed. In offshore installations in particular, the capacities on the ships and

Helicopters strongly limited. Apart from the on-site maintenance by the staff

CONFIRMATION COPY after major accidents, the possibility of remote maintenance is desirable. This requires, however, that a suitable data connection is available.

In the prior art, US Pat. No. 7,227,450 B2 discloses a remote monitoring device which communicates with monitoring systems locally via a communications network such as the Internet. The facility may have one or more selected ones

Interrogate monitoring systems and evaluate their reactions. The device may also transmit sensor-specific messages to a given alarm system for receiving data therefrom or for transmitting instructions or data thereto.

Despite the above suggestions for improvement, however, the problem remains in the prior art that the security systems must be designed from the outset to communicate with a higher-level monitoring device. The subsequent retrofitting of security systems for communication with the higher-level monitoring device is very complicated and expensive.

It is therefore an object of the present invention to provide a communication device and a method for monitoring and controlling security systems, so that a modular design is ensured by the retrofitting of existing systems is made possible without great effort and security-relevant features of the security system unaffected ,

This object is achieved by a communication device according to the features of claim 1 and a method according to the features of claim 9 for monitoring and controlling security systems at a remote location. preferred

Embodiments of the invention are the subject of the respective subclaims.

The invention is based on the recognition that a separate communication device is "pre-connected" to an existing security system so that the two initially operate independently of one another The security system is self-sufficient by the communication device and the communication device can also be added or activated as an independent element at a later time so that no changes to the actual security system become necessary

Field of application for the invention is their use on hard-to-reach protected objects, such as, but not limited to, wind turbines, especially if they are far from easily accessible, eg offshore. Basically, the communication device according to the invention thus comprises for

Monitoring at least one security system, in particular the one

Wind turbine

a security system interface for receiving data from the at least one security system,

a database for storing the data received from the security system and

at least one TCP / IP interface for exchanging control commands and the cached data with an external user.

In preferred embodiments of the communication device according to the invention are also realized as a further feature or, as far as technically possible and reasonable, as further features that

comprising at least one TCP / IP interface for interactive communication with the security system,

a web interface is provided by means of http and or https protocol, which is connected via a switching device to the security system interface;

- The at least one TCP / IP interface with FTP protocol for automatic transmission of log files is set up to the outside, the FTP protocol is connected via an FTP daemon to the database;

- The communication device as a module in the at least one

Security system is integrated, with supply and signal connections for the communication device of the at least one security system

to be provided;

- the supply and signal connections, a power supply connection, an internal communication connection and an external connection

Include communication;

- the internal connection can be a serial connection and in particular an RS232 connection;

- The external communication port may be an Ethernet port.

Accordingly, the method according to the invention for monitoring at least one security system, in particular a weather station, basically has the steps:

Receiving data from the at least one security system via a

Safety system interface,

Storing the data received from the security system in a database and Exchanging control commands and the stored data with an external user via at least one TCP / IP interface.

In addition, in preferred embodiments of the method according to the invention, as another feature (individually or in any combination) it is realized that

the replacement of the control commands and the stored data via the

at least one TCP / IP interface comprises interactive communication via an HTTP interface connected to the database via a web interface;

- the exchange of the stored data via the at least one TCP / IP interface comprises an automatic transmission of log files to an external user via an FTP protocol, which is connected via an FTP daemon to the database;

the exchange of control commands and cached data via an ISP server and the Internet through a secure connection, optionally

VPN, or via a Local Area Network.

An advantage of the invention is that due to the comprehensive

Communication capabilities of the communication device according to the invention access to hard to reach facilities, such as off-shore facilities, especially for remote monitoring and remote maintenance is possible. In addition, the

According to the invention, the communication device can be integrated into the respective environment without great additional effort, ie in particular in the respective security system; the existing system facilities do not have to be changed or only insignificantly changed. Furthermore, the current state of the remote security system can be queried independently of various computers and locations, whereby the monitoring of, for example, off-shore installations can be performed flexibly. Connected to this is a simplified implementation of remote maintenance procedures, in which the reaction of the security system to individual specifications of the user can be tested in a particularly convenient manner via a web connection. It is also easy to update the software on the security system via such a connection. By assigning multiple IP addresses, it is possible to monitor multiple security systems via one communication device, or levels of access in

Dependence on the respective safety relevance or respective priority

make. In principle, it is also possible to distinguish between externally accessible control parameters (control parameters not generated independently by the safety system) and only parameters that are to be controlled locally, ie control parameters generated autonomously only by the safety system. Examples of through local control too influencing parameters are the triggering of extinguishing agents and the closing of ventilation flaps. The switching on of auxiliary lights can be controlled both locally and externally. In addition, there is virtually no

Restrict more on the representability and evaluation of the security system's data on the user's side, so that relevant data can always be highlighted while long-term settings of the system can be moved into the background.

Furthermore, it can be ensured by the communication device according to the invention that the reaction of the safety system to incidents is not endangered by external interference, which is an essential safety aspect. In other words, with the communication device according to the invention, a "firewall" between the

Communication module and thus the security system and other control devices and control centers of the protected object are produced.

Further features and advantages of the invention will become apparent from the following description of preferred embodiments, wherein reference is made to the accompanying drawings. Fig. 1 shows schematically the interaction of elements of the protected object, the protection system and the communication device and the user connection.

Fig. 2 shows a block diagram with the essential elements of a system for a communication connection in an embodiment of the invention.

3 shows a flow diagram for the communication between the plant and the http server.

Fig. 4 shows a flow diagram for the communication between plant and ftp server. Fig. 5 shows a block diagram with the essential elements of a third

Embodiment of the communication connection according to the invention.

FIG. 6 shows a flow chart of the program flow of the interface 22 from FIG. 5. FIG. 7 shows a flow chart of the program flow of the switching device 27 from FIG. 5

FIG. 8 shows a flowchart of the program sequence of the data transmission by means of FTP server from FIGS. 3 and 5. FIG. 1 schematically shows a field of protective objects, for example off-shore installations, which has a plurality of individual protective objects 1, each having one or more

Control systems of the protected object 1 b and each with one or more

Security systems 13 includes. These are connected via a data connection 1a to an ISP (Internet Service Provider) server 2 on land. Via this ISP server 2, a connection to the Internet 3 is established, via which various users from their workstations 4 both e.g. in the control center of the protected object as well as any workplaces, e.g. also the service of the security system can access the data that has been stored in the communication device 17 and made available.

The data provided to users in this context may relate to the fire protection of the respective protected object 1. Their function and arrangement will be explained below.

In the protected object 1, a plurality of electrical and mechanical components are accommodated, which also comprise movable elements. In particular, the movable elements can become hot, for example by friction, so that there is a local overheating of a component with subsequent fire. Furthermore, a fire can occur in control cabinets of the protected object and / or in cable lines and on terminals. The fire must be combated immediately to avoid damage from the rest of the facility. For this purpose, a security system 13, in the form of a fire alarm system, an extinguishing control device and extinguishing system is provided in each protected object 1, which detects a fire hazard and, where appropriate, prepared and executes countermeasures. In particular, the security system 13 is provided with at least one fire alarm or a combination of fire detectors (optionally, e.g.

Rauchansaugsystem, heat, flames, smoke, gas detectors or spark detectors) and at least one extinguishing equipment connected. As soon as a fire is detected by the fire alarm, the security system 13 is a signal for switching off div.

System parts forwarded, if necessary, and it is activated the extinguishing system to introduce extinguishing agent in the areas to be deleted or to cool

Contribute heat sources. In addition, the control center on the

Communication device 17 informed. Further alarms are possible according to the alarm organization of the operator. It will be understood by those skilled in the art that other fire and accident control elements may be provided. Thus, in addition to fire detectors, an anemometer, a thermostat, a hygrostat or a

Ventilation control module be provided, the input variables for the assessment of the

Output state of the protected object. In order to enable monitoring of the protected object 1 via the purely local automatic control of fire sources, the security system 13 according to the invention is connected via an internal data connection to a communication device 17, which is likewise located in the protected object. This communication device 17 detects the signaling and control states of the security system 13 and prepares them for evaluation by a user.

Message and control states can be:

- automatic, automatic instant notification about

State change / messages

Monitoring the connection lines to the fire detectors and actuators,

Transmission paths / data lines and display

States of the sensors / fire detectors / maintenance status

- Test triggering of sensor points / fire detectors

- Information about operations (reset, shutdown, revision, etc.)

- Display of the state of the extinguishing system and the deletion process

Triggering of test routines

In detail, this means: The communication device 17 communicates via a proprietary protocol for the data transmission with the security system 13. In the communication device 7, the captured data of the security system 13 are processed and preferably issued in accordance with the TCP / IP protocol, so that an external user via an external data connection, a web browser interface is available if he wants to access the data of the security system 13.

On the user side, the invention is not limited to access via web browser. Further communication possibilities are shown in FIG. After the data from the

Security system 13 were transmitted to the communication device 17, they are provided after storage and pre-evaluation of the communication device 17 via the ISP server 2 in the Internet 3. In the server 2, the data of a plurality of communication devices 17 can arrive, as indicated by the two additional arrows to the server 2 and away from the server 2. This type of data distribution allows for different types of access. In particular, the data acquisition, data distribution and control of the security system 13 can be controlled via the web browser interface. Those users who communicate interactively with the communication device 17 access the device 17 via an http server 21. In addition, in a preferred embodiment of the invention at regular intervals, the current state of the weather station, for example, via the Internet to an ftp server 20 loaded, as a backup. Should an immediate response by maintenance personnel become necessary, the staff will be notified via an e-mail server 19.

The communication via the http server and the ftp server is summarized in FIGS. 3, 4 and 8. In the interactive communication via the http server, first, the data coming from the security system 13 from the

Communication device 17 received and stored. In a subsequent interactive communication between the user and the communication device, data from the database 23 are made available to the user, and control commands, insofar as they relate to the security system 13, are forwarded by the communication module to the latter. Of course, the interactive communication is composed of a plurality of such data and command transmissions.

In doing so, the user interface of the web browser can easily be integrated into a more general concept or web portal. By such a vote of the communication device 17 to the requirements of the environment of the security system to be monitored 13 so the access to hard-to-access (off-shore) facilities allows without user-side changes of any kind (new software, additional training of staff) are required , The

Communication device thus represents a web server of a security system 13 with particular suitability for fire detection and extinguishing systems in wind turbines and other hard to reach objects.

In the case of communication via the ftp server 20, as shown in FIG. 4, which is used predominantly for data backup, the communication is restricted to fewer events than the http communication. The data coming from the security system 13 are again received by the communication device 17 and buffered in an internal database 23. After a predetermined time, which is independent of the reception time and the reception frequency of the data, the data is transmitted "bundled" by the communication device 17 to the ftp server 20. That is, once a certain time has passed, the data in the database 23 may be transmitted again to the ftp server 20, etc. As an alternative to the timely transmission, the transmission of data to the ftp server 20 may be initiated whenever further data has been received by the communication device 17. This possibility is then similar to the notification the maintenance staff by an e-mail, if an accident is present, but here is not checked for a fault, but indiscriminately each parameter change triggers the transfer. The detailed structure of an embodiment of the invention

Communication device will be described below with reference to FIG.

On the input side, the communication device 17 is connected to the security system 13. The interface of communication device 17 and security system 13 is shown as block 22. The interface 22 is connected to the internal database 23, to which the data supplied by the security system 13 are forwarded. In the first TCP / IP interface 24, the data is prepared for communication with an external http server 21 of an ISP. The interface 24 is preferably one

Ethernet interface 24 for connection to a router or hub (not shown) or similar network components.

The individual program functions executed in the interface 22 are shown in greater detail in a flow chart of FIG.

The events transmitted from the communication device 17 to the user may include, but are not limited to: include: pre-alarm, fire, wire breakage, short-circuit fault, group switched off, group switched on, malfunction, power supply fault, central door open, fire from manual call point, alarm (general),

Controlled, test condition, event in test condition. It will be understood by those skilled in the art that the information is preferably protected when transmitted over the Internet, i. the website for accessing the security system 13 is password protected via the communication device 17. Furthermore, can

Changes to parameters can only be made with appropriate authorization. The privacy of communication is provided via an encrypted connection e.g. VPN channel or other appropriate measures ensured. For this purpose, the communication device 17 gets its own IP address and is integrated via link into the control software of the protected object 1. As memory for all events of the security system 13, the communication device 17 preferably has an internal memory (database 23) for all messages. Of the

Storage is readable via the operator's web page and can be downloaded as a (text) file. The selection of the messages can be restricted by suitable filters or selection parameters. The stored events can also be used as history stores for the analysis of event sequences. Notwithstanding the protection in the transmission of data of the security system and the restriction of access for the control only to authorized persons is the website

preferably configured to display a continuously updated event list. Thus the authorized user is always in possession of the current information and does not need to request the updates manually. To the required defined When the communication device 7 or the security system 13 is started, a status comparison is performed. This allows false alarms to be largely eliminated. A status comparison always takes place in order to detect a potential failure of one of the systems in good time.

Not only can data be queried via the interface 24, but commands can also be sent to the security system 13. Thus, the security system 13 can be controlled via the communication device 17. For safety reasons, the instruction set available for remote maintenance may be limited. Thus, as options for the execution of the safety system 13 may be provided as a fire detection and extinguishing system for remote maintenance: on, off, test state on, test state off, reset. If more detailed information is to be queried, then preferably

Sensors / fire detectors are selected according to group and detector number in a tree structure. Alternatively or additionally, the sensors / fire detectors can also after

Deletion areas sorted to be selected.

In order to be able to execute the commands, they are forwarded from the interface 24 directly to the security system 13. In this case, in a preferred embodiment of the invention, a switching device 27 (decoding and coding) is provided which conveys transmitted commands such as the switching on or off of a circuit for a fan or a ventilation flap in the protected object.

A flowchart for the execution of the program sequence in the switching device 27 is shown in FIG. 7. In addition, the security system 13 can also maintain the supply of power to the protected object in case of failure of an external power supply with a (not shown) emergency power device, which is turned on by the switching device 27. Incidentally, the commands are transmitted from the switching device 27 via the security system interface 22 to the security system 13.

In the embodiment shown in FIG. 5, the communication device 17 also has a second TCP / IP interface 25, with which the transfer of files to an external FTP server 20 can take place, which can also be integrated into the server of the ISP 2 ,

About the ftp interface 25 of the communication device 17 according to the invention are preferably continuously or at regular intervals data from the

Communication device 17 sent to the ftp server 20. For example, any event that occurs may be sent as a (text) file to the FTP server every 24 hours. This is particularly advantageous for a permanent monitoring of a protected object or a backup copy of the current state of the protected object. For example, the FTP client sends an event report to the operator's FTP server

Protective object sent. In this case, an FTP process (daemon) runs as server on the communication device 17, and an FTP process on the server 20 of the operator.

The individual program steps of the data transfer by means of FTP are shown in FIG. 8. The program is started by means of a CRONjob.

In order to carry out the data transmission event-dependent, another TCP / IP interface 26 is provided, which is set up for the transmission of e-mails. This third TCP / IP interface 26 is connected to an internal event filter (not shown) in the communication device 17, which constantly checks the incoming data from the security system 13. If an extraordinary incident occurs in the read and verified data, an internal alarm is triggered, which leads to the deposition of an e-mail to the e-mail server 19 of the operator of the protected object.

In this way, the signals of the security system 13 are simultaneously transported by the communication device 17 according to the invention via the first TCP / IP interface 24 into a Web browser-capable interface at the workstation of a user 4. In addition, backup copies of the data are sent via the second TCP / IP interface 25 to an ftp server, and finally via a third TCP / IP interface 26

Depending on the event, data is transmitted to a given Internet address in the form of an e-mail. In a preferred embodiment of the invention, the communication device 17 is constructed as a module which is designed for integration in the security system 13. Thus, the communication device 17 as a module in the existing

Safety system easier to install, their design is preferably standardized (for example DIN rail). This means that there are three types of supply connections to consider: power supply connections, internal communication connections, and external communication connections with non-local users

Protected object. In a particularly preferred embodiment of the communication device 17 according to the invention, module plug contacts on a bus system of the safety system 13 are used as a possible voltage supply. For the internal communication of the communication device 17 according to the invention with the security system 13, a bus, preferably based on a 9-pole sub-D RS 232 port, is used in a particularly preferred embodiment of the invention. For the external communication of the communication device 17 according to the invention, preferably an Ethernet connection is used, via which the connection to a (not shown) hub, R uter or switch is made. The Ethernet port is especially a RJ45 TP connector.

List of reference numbers used

1 protected object,

1 a data connection

1 b control device of the protected object

1 c control center of the protected object

2 ISP servers (Internet service providers)

3 Internet

4 user workstation

13 security system, z. B. Fire alarm and extinguishing system

17 Communication device / communication module

19 e-mail server

20 ftp server

21 http server, web server

22 Interface to security system

23 database

24 first TCP / IP interface

25 second TCP / IP interface

26 more TCP / IP interface

27 switching device for coding and decoding

Claims

claims

1 . Communication device for monitoring, controlling and switching at least one security system (13),

characterized in that

a security system interface (22) for receiving and / or transmitting data and commands,

at least one TCP / IP interface (24; 25; 26) for exchanging

Control commands and the stored data with an external user (4) wherein at least one TCP / IP interface (24; 25; 26) acts as an HTTP interface (24) for interactive communication with the security system (13), an encoding and Decoding device (27) and a web server (21) is formed,

an encoding and decoding device (27) controllably connected to a web server (21) and the security system interface (22) via the HTTP interface (24),

and has a protocol for data transmission,

includes.

2. Communication device according to claim 1,

characterized in that at least one TCP / IP interface (24; 25; 26) is set up with FTP protocol for an automatic transmission of log files to the outside, wherein the FTP protocol via an FTP daemon with the database (23 ) connected is.

3. Kommunikationsetnrichtung according to claim 1 or 2,

characterized in that

at least one TCP / IP interface (26) is arranged to transmit e-mails to the external e-mail server (19), the interface (26) being coupled to an internal event filter corresponding to the security system (3) ) incoming data is constantly checked. 4 communication device according to one of the preceding claims,

characterized in that

a switching device (27) for coding and decoding control commands is formed between the web server (21) connected via the TCP / IP interface (24) and the security system (13) connected via the interface (22), wherein the commands transmitted to the switching device (27) via the

Security system interface (22) to the security system (13) can be transmitted.

Communication device according to one of the preceding claims,

characterized in that

it is designed as a communication module (17), and in at least one

Security system (13) is integrated, wherein the supply and signal terminals a connection for the power supply, for internal communication and a connection for external communication with the participants outside the

Protective object (1) include.

Communication device according to one of the preceding claims

characterized in that

the design of the communication module (7) is designed standardized, with its supply and signal connections are provided by the security system (13) and the module plug contacts are used on a bus system of the security system (13).

Communication device according to one of the preceding claims,

characterized in that

the connection for internal communication with the security system (13) is designed as a serial connection and in particular as an RS 232 connection and the connection for external communication is designed as an Ethernet connection.

Communication device according to one of the preceding claims,

characterized in that

several security systems (13), each with different IP addresses simultaneously monitored and controllable by means of web server (21) via the TCP / IP interface (24), the switching device (27) and the security system interface (22).

Method for monitoring and controlling at least one safety system (13),

with a communication device (17) according to one or more of

previous claims,

characterized in that the data and states of the security system (3) through the

Communication device (17) via the security system interface (22) detected, pre-evaluated, optionally stored, as well as in the TCP / IP interface (24) for communication with an external web server (21) prepared with this

evaluated and output for an external user and the data can be filtered according to various freely selectable parameters, and vice versa via the TCP / IP interface (24) control commands directly and / or via the coding and decoding device (27) to the security system (13) for execution.

Method according to claim 9,

characterized in that

the communication between the web server (21) and the

Communication device (17), and the access of the web server (21) to the security system (13) is password protected and an encrypted

Connection takes place, wherein the communication device (17) is assigned its own IP address.

Method according to claim 9 or 10,

characterized in that

when exchanging the stored data via the at least one TCP / IP interface (24; 25; 26) an automatic transfer of data or log files to an external user via an FTP protocol, which via an FTP server (20 ) is connected to the database (23), wherein the security system (13) in the internal database (23) of the communication device (17)

Cached data bundled at certain intervals to the FTP server (20) or transmitted after further data input and thereby the FTP server (20) is mainly used for data storage.

Method according to one of the preceding claims 9 to 1,

characterized in that

the internal event filter coupled to the TCP / IC interface (26) constantly checks the status data received from the security system (13) and, in the event of an extraordinary event, triggers an internal alarm which triggers an e-mail to the e-mail server (19) of the operator. Method according to one of the preceding claims,

characterized in that

the exchange of control commands and stored data via an ISP server (2) and the Internet (3) takes place, wherein the data exchange via an ISP server (2) and the Internet (3) and the automatic, event-dependent sending an e-mail includes.