JP2012010229A - Instrument control apparatus, function restriction method for instrument control apparatus, and function restriction system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an instrument control apparatus, a function restriction method for the instrument control apparatus, and a function restriction system which can set a proper and safe function restriction level on the basis of the state of a field instrument related to process control.SOLUTION: An instrument control apparatus 200 that performs instrument control for a field instrument arranged in a system for performing process control and can perform function restriction for any of a plurality of control functions for executing the instrument control comprises: an acquisition means 210 for acquiring a state signal related to the process control out of the field instrument states; and a setting means 220 for setting a function restriction level on the basis of the state signal acquired by the acquisition means 210.

Description

  The present invention relates to a device control device, a function restriction method for a device control device, and a function restriction system, and in particular, implements safe function restriction.

  In a process control system such as a chemical plant, a device control device (hereinafter referred to as “equipment control”) that performs control (hereinafter referred to as “equipment control”) for field devices such as a pressure transmitter, a temperature transmitter, a flow meter and a valve positioner "Host") is used.

  The host includes a DCS (Distributed Control System), a PC (Personal Computer), a portable terminal, and the like. For example, the host is connected to a field device via a field bus and performs digital communication.

  In executing device control, there are a plurality of control functions such as a setting function and an adjustment function, and the host controls field devices by executing various control functions.

  In the fieldbus standard, there is a function restriction level called Class that defines which of a plurality of control functions is restricted. This function restriction level will be described with reference to FIG.

  FIG. 3 is a configuration diagram of the process control system, FIG. 3A is a configuration diagram in which a factory that performs process control is operating, and FIG. 3B is a configuration diagram before the factory is in operation.

  3A, the process control system 10a includes hosts 20a and 21a, field devices 30a, 31a, and 32a, and a field bus FB.

  The field devices 30a, 31a, and 32a are arranged in piping, tanks, valves (not shown) and the like in the process control system 10a in order to measure pressure and flow rate and adjust flow rate, and via the field bus FB. Connected to the hosts 20a and 21a.

  Here, the host 20a is set to the function restriction level Class 62, and the host 21a is set to the function restriction level Class 61.

  The function restriction level Class 62 cannot be executed because the setting function and the adjustment function are restricted, and can only read the adjustment value of the adjustment function. As a result, the host 20a, which is a portable terminal, cannot set or adjust the field device.

  On the other hand, Class 61 of the function restriction level has no function restriction and can execute all control functions. As a result, the host 21a, which is a DCS or PC, can set and adjust the field device.

  When comparing the function restriction levels Class 62 and Class 61, it can be said that Class 62 has a higher function restriction level than Class 61. Thereby, inadvertent setting changes and adjustments to the field device from the host 20a which is a portable terminal can be prevented.

  3B has the same configuration as FIG. 3A, and the process control system 10b is configured by the hosts 20b and 21b, the field devices 30b, 31b and 32b, and the field bus FB.

  Here, the difference from FIG. 3A is the function restriction level set in the hosts 20b and 21b. Specifically, the host 20b is set to the function restriction level Class 64, and the host 21b is set to the function restriction level Class 63.

  Basically, Class 64 has the same function restriction as Class 62, and Class 63 has the same function restriction as Class 61. However, Class 64 and Class 63 cannot be used in an operating factory. Class 62 and Class 61 can be used in an operating factory. Note that different function restriction levels may be set for the same host.

  Setting of the function restriction level in the host is automatically performed by checking the license information or the user account when the control function application software is installed in the host. Further, after installation, the user can change the function restriction level by using the license information or the user account.

  Patent Documents 1 and 2 describe electronic devices that perform function restriction control by license authentication, user authentication, or the occurrence of an event.

JP 2009-38584 A JP 2003-44798 A

  The function restriction level set for the host is based on the state of the field device related to process control, such as the type of field device to be controlled, the operating state, the type of alarm, the formation state of the control loop, or the location of the control device. Preferably it is determined.

  However, since these states are not reflected in the license information or the user account described above, an inappropriate function restriction level may be set for the host. In such a case, for example, the host can change the setting to a field device that should not be changed, which may cause a great adverse effect or damage to the factory. The same applies when the user changes the function restriction level by mistake.

  In addition, when an existing host with a function restriction level is moved to another location, if the user neglects to change to the appropriate function restriction level, the factory may be similarly adversely affected or damaged. .

  An object of the present invention is to provide a device control device, a device control device function restriction method, and a function restriction system that can set an appropriate and safe function restriction level based on the state of a field device related to process control.

In order to achieve such an object, the invention of claim 1
In a device control apparatus capable of performing device control on a field device arranged in a system that performs process control and capable of restricting any of a plurality of control functions for executing this device control,
An acquisition means for acquiring a state signal related to the process control among the states of the field device;
Setting means for setting the function restriction level based on the status signal acquired by the acquisition means;
It is provided with.
The invention of claim 2 is the invention of claim 1,
The acquisition means acquires the status signal corresponding to the type of the field device.
The invention of claim 3 is the invention of claim 2,
When the field device is a type of device that is active with respect to the process control amount, and the status signal corresponding to the type is acquired by the acquisition unit, the setting unit sets the function restriction level to a passive type. It is characterized by being set to a level higher than that of the device.
The invention of claim 4 is the invention of claim 3,
The active type device is a valve positioner or an electropneumatic converter.
The invention of claim 5 is the invention of claim 2,
When the field device is a type of device used for a specific application of the process control and a keyword representing this type is acquired by the acquisition unit as the status signal, the setting unit sets the function restriction level to the It is characterized in that it is set at a higher level than the type of equipment used for purposes other than the specific purpose.
The invention of claim 6 is the invention of claim 5,
The type of device used for the specific application is a device used for drainage control of a factory that performs the process control.
The invention of claim 7 is the invention of claim 1,
The acquisition unit acquires the state signal according to an operating state of the field device.
The invention of claim 8 is the invention of claim 7,
When the acquisition unit acquires the status signal indicating that the field device is operating, the setting unit sets the function restriction level to a level higher than that of the non-operating field device. It is characterized by.
The invention of claim 9 is the invention of claim 8,
When the field device operating as a fieldbus link master exists, the acquisition unit acquires the status signal indicating that the field device is operating.
The invention of claim 10 is the invention of claim 1,
The acquisition means acquires the status signal corresponding to the type of alarm generated by the field device.
The invention of claim 11 is the invention of claim 10,
When the acquisition unit acquires the status signal indicating that the device control is interrupted, the setting unit sets the function restriction level to a level higher than an alarm that does not stop the device control. It is characterized by that.
The invention of claim 12 is the invention of claim 1,
The acquisition unit acquires the state signal according to a formation state of a control loop of the process control by the field device.
The invention of claim 13 is the invention of claim 12,
When the acquisition unit acquires the state signal indicating that the control loop has been formed, the setting unit sets the function restriction level to a level higher than a state in which the control loop is not formed. It is characterized by that.
The invention of claim 14 is the invention of claim 1,
The acquisition means acquires the state signal corresponding to a position where the field device is arranged.
The invention of claim 15 is the invention of claim 14,
The position is obtained by GPS or wireless LAN,
When the acquisition means acquires the status signal indicating that the position is a dangerous area in the process control, the setting means sets the function restriction level from the field device arranged outside the dangerous area. Is also set to a high level.
The invention of claim 16 is the invention according to any one of claims 1 to 15,
The setting means may set the function restriction level to a custom level changed by a user.
The invention of claim 17
In the function restriction method of the device control apparatus capable of performing device control on a field device arranged in a system that performs process control and capable of restricting any of a plurality of control functions for executing the device control.
An acquisition step of acquiring a state signal related to the process control among the states of the field device;
A setting step for setting the function restriction level based on the status signal acquired by the acquisition step;
It is provided with.
The invention of claim 18 provides
Field devices arranged in a system for process control;
In the function restriction system having a device control device capable of performing device control on the field device and capable of restricting any of a plurality of control functions for executing the device control,
The device control device
An acquisition means for acquiring a state signal related to the process control among the states of the field device;
Setting means for setting the function restriction level based on the status signal acquired by the acquisition means;
It is provided with.

  According to the present invention, a state signal related to process control is acquired from the states of field devices, and a function restriction level is set based on the state signal. By performing device control based on the set function restriction level, the device control apparatus set to an appropriate and safe function restriction level can execute safe process control.

  Further, even when an existing device control apparatus in which the function restriction level is set is moved to another place, the device control apparatus can be changed to an appropriate and safe function restriction level.

It is an example of the block diagram of the function restriction | limiting system which consists of the apparatus control apparatus and field device to which this invention is applied. It is an example of the flowchart figure of the function restriction level setting process of the apparatus control apparatus to which this invention is applied. (A) is the system block diagram in which the factory which performs process control is operating, (b) is an example of the system block diagram before a factory operates.

  FIG. 1 is a configuration diagram of a function restriction system 100 including field devices 110 and 120, a host (device control apparatus) 200, and the like to which the present embodiment is applied. The configuration diagram of the process control system using these field devices and the host is the same as FIG.

  In FIG. 1, field devices 110 and 120 are connected to a host 200 via a field bus FB. Further, a GPS (global positioning sensor) 140 and a wireless LAN (local area network) sensor 150 that detect the positions of the field devices 110 and 120 are connected to the host 200.

  The host 200 includes an acquisition unit 210, a setting unit 220, and a user setting unit 250. The setting means 220 includes search modules 221 to 229, a fieldbus network connection module 230, and a class determination module (including a class determination item selection module) 240.

  Fieldbus FB, GPS 140 and wireless LAN sensor 150 are connected to acquisition means 210. The fieldbus network connection module 230 is connected to the acquisition unit 210 and the search modules 221 to 227. The GPS module 228 and the wireless LAN strength measurement module 229 are connected to the acquisition unit 210.

  The Class determination module 240 is connected to the search modules 221 to 229 and the user setting unit 250, and receives the user account 310 and the license information 300 as external input signals.

  Next, the operation of the host 200 will be further described with reference to FIG. FIG. 2 is a flowchart of the function restriction level (Class) setting process of the host 200.

  In step S100 in FIG. 2, after the control function application software is installed in the host 200, in step S110, the class determination module 240 receives the license information 300 or the user account 310, and once sets the class based thereon.

  Subsequently, in step S120, the host 200 starts the process control operation based on the class once set.

  Subsequently, in step S130, the acquisition unit 210 acquires a state signal of the field device related to the process control from the field devices 110 and 120, or from the GPS 140 and the wireless LAN sensor 150 via the field bus FB (acquisition step). ).

  Subsequently, in steps S140, S150, and S160 to S164, the setting unit 220 sets any one of the classes 61 to 64 based on the acquired state signal, or a custom level in which the class 61 to 64 is changed by the user. Can also be set (setting step). This setting means will be described in detail later.

  Note that the setting unit 220 can set the level more finely and appropriately by acquiring and setting the custom level from the user setting unit 250.

  Subsequently, in step S170, the host 200 controls the field devices 110 and 120 in accordance with the set function restriction level, and continues the process control operation.

  In step S180, the host 200 periodically repeats the acquisition step and the setting step after step S130 while continuing the process control operation.

  Next, the setting means described above will be described in detail. Some state signals are based on the type of field device, the operating state, the type of alarm, the formation state of the control loop, or the position where the control loop is formed. The setting means based on each state signal will be described with reference to FIG. .

<Types of field devices>
(1) Specified devices Among the types of field devices, specified devices such as valve positioners or electropneumatic converters control the flow rate through the valves. There is a fear.

  When the field device 110 connected to the field bus FB is a specific device such as a valve positioner or an electro-pneumatic converter, the specific device search module 221 uses the acquisition unit 210 and the field bus network connection module 230 from the field device 110. A signal representing a specific device is received. Note that the signal representing the specific device may be given in advance by the user.

  Then, the specific device search module 221 and the class determination module 240 set Class 62, Class 64, or a custom level with a high function restriction level.

  On the other hand, when the specific device does not exist on the fieldbus FB, Class 61, Class 63 or a custom level having a low function restriction level is set.

  As described above, when a specific device exists on the fieldbus FB, setting and adjustment cannot be performed by setting Class 62, Class 64 or a custom level having a high function restriction level in the host 200. It is possible to prevent great adverse effects and damages to the factory.

(2) Input / Output equipment The above-described valve positioner or electropneumatic converter controls the flow rate flowing through the valve, that is, operates and changes a process amount such as the flow rate. Also called.

  On the other hand, pressure transmitters, temperature transmitters, flow meters, and the like are used to measure pressure, temperature, flow rate, and the like, and therefore are called passive devices and input devices.

  Similarly to the above-described specific device, when the field device 110 is an output device (active device) such as a valve positioner or an electropneumatic converter, the input / output device search module 222 passes the field device via the acquisition unit 210. A signal representing the output device is received from 110. Note that the signal representing the output device may be given in advance by the user.

  Then, the Input / Output device search module 222 and the Class determination module 240 set Class 62, Class 64, or a custom level having a high function restriction level.

  On the other hand, when the Output device does not exist on the fieldbus FB, that is, only the Input device (passive device), Class 61, Class 63 or a custom level having a low function restriction level is set.

  As described above, when the output device exists on the fieldbus FB, setting and adjustment cannot be executed by setting the class 62, class 64, or custom level having a high function restriction level in the host 200. It is possible to prevent great adverse effects and damages to the factory.

(3) Equipment used for specific applications Field equipment used for specific applications such as drainage control in factories that perform process control may cause great adverse effects and damage to the factory due to misadjustment.

  When the field device 110 connected to the field bus FB is used for factory drainage control or the like, the special purpose search module 223 receives a signal representing a special purpose device from the field device 110 via the obtaining unit 210, for example, a specific device. Receive keywords. Note that a signal representing a device for a specific application may be given in advance by a user.

  Then, the special purpose search module 223 and the class determination module 240 set Class 62, Class 64, or a custom level having a high function restriction level when the received keyword and the keyword stored in advance are matched.

  On the other hand, when a field device used for a specific application does not exist on the fieldbus FB, Class 61, Class 63 or a custom level having a low function restriction level is set.

  As described above, when a field device used for a specific purpose exists on the fieldbus FB, setting and adjustment cannot be executed by setting a high function restriction level Class 62, Class 64, or a custom level in the host 200. It is possible to prevent great adverse effects and damages to the factory due to setting and misadjustment.

<Operation status of field devices>
(1) Block mode of field device
The Block Mode of the field device is set to “Auto” when the field device is in operation, and is set to “O / S” when the field device is not in operation. Note that Block Mode is defined by the fieldbus standard.

  The Actual Mode search module 224 receives Block Mode data from the field device 110 via the acquisition unit 210.

  Then, when the received data is “Auto”, the Actual Mode search module 224 and the Class determination module 240 set Class 61, Class 62, or a custom level.

  On the other hand, if the received data is “O / S”, Class 63, Class 64 or a custom level is set.

  Thus, an appropriate and safe function restriction level can be set according to the operating state of the field device.

(2) Link master When a field device that operates as a link master defined by the fieldbus standard exists, it is in operation, and when it does not exist, it is inactive.

  The link master search module 225 receives a signal indicating whether the link master search module 225 is operating as a link master from the field device 110 via the acquisition unit 210.

  Then, when the received signal indicates that the received signal is operating as a link master, the actual mode search module 224 and the class determination module 240 set Class 62, Class 64, or a custom level having a high function restriction level.

  On the other hand, when the received signal indicates that it is not operating as a link master, Class 61, Class 63 or a custom level having a low function restriction level is set.

  Thus, an appropriate and safe function restriction level can be set according to the operating state of the field device.

<Field device alarm types>
Field devices output multiple types of alarms. This type of alarm includes not only the adjustment of the field device but also the adjustment of the field device that must be performed quickly without stopping the adjustment.

  The alarm search module 226 receives a signal indicating the type of alarm generated from the field device 110 via the acquisition unit 210.

  Then, the alarm search module 226 and the class determination module 240 set Class 62, Class 64, or a custom level having a high function restriction level when the received signal indicates an alarm that stops adjustment.

  On the other hand, when the received signal indicates an alarm that does not stop the adjustment, Class 61, Class 63, or a custom level having a low function restriction level is set.

  Thus, an appropriate and safe function restriction level can be set according to the type of alarm generated by the field device.

<Field device control loop status>
It can be determined from the topology of the field device connected to the field bus FB whether or not a process control control loop is formed by the field device.

  The topology search module 227 receives a signal representing the topology from the field device 110 via the acquisition unit 210.

  When the topology search module 227 and the class determination module 240 determine that a control loop is formed from the received signal, the topology search module 227 and the class determination module 240 set Class 62, Class 64, or a custom level having a high function restriction level.

  On the other hand, when it is determined that the control loop is not formed from the received signal, Class 61, Class 63 or a custom level having a low function restriction level is set.

  Thus, an appropriate and safe function restriction level can be set according to the formation state of the process control control loop.

<Arrangement of field devices>
If the field device is located in a hazardous area such as an explosion-proof area in the factory where process control is performed, there is a risk that the factory may have a great adverse effect or damage due to incorrect settings or adjustments.

  When the position of the field device 110 is detected by the GPS 140, the acquisition unit 210 acquires the position signal of the field device 110 from the GPS 140. The GPS module 228 receives the position signal of the field device 110 from the acquisition unit 210.

  Then, the GPS module 228 and the Class determination module 240 set Class 62, Class 64, or a custom level having a high function restriction level when the position of the field device 110 is in the dangerous area.

  On the other hand, if it is not in the danger zone, Class 61, Class 63 or a custom level having a low function restriction level is set.

  When the field device 110 is placed indoors where the GPS 140 signal does not reach, the position of the field device 110 can be detected by measuring the received radio wave intensity signal of the wireless LAN sensor 150 communicating with the field device 110.

  The acquisition unit 210 can acquire the received radio wave intensity signal from the wireless LAN sensor 150. The wireless LAN intensity measurement module 229 and the class determination module 240 obtain a position signal from the received radio wave intensity signal, and can set a function restriction level using the position signal, as in the case of the GPS 140.

  As described above, when the position of the field device 110 is in the danger zone, setting and adjustment cannot be performed by setting Class 62, Class 64 or a custom level having a high function restriction level in the host 200. Can prevent a great adverse effect and damage to the factory.

  In addition, two or more state signals indicating the type of field device, the operating state, the type of alarm, the formation state of the control loop, and the arranged position are used, and the function restriction level is set based on the two or more state signals. It may be set.

  The acquisition unit 210 and the setting unit 220 may be executed by a processor according to a predetermined program or realized by a logic circuit.

  In addition, this invention is not limited to the above-mentioned Example, In the range which does not deviate from the essence, many change and deformation | transformation are included. Moreover, combinations other than the combination of each means mentioned above can be included.

100 Function restriction system 110, 120 Field device 140 GPS
150 Wireless LAN sensor 200 Host (device control device)
210 Acquisition means 220 Setting means 230 Fieldbus network connection module 240 Class determination module 250 User setting means

Claims (18)

In a device control apparatus capable of performing device control on a field device arranged in a system that performs process control and capable of restricting any of a plurality of control functions for executing this device control,
An acquisition means for acquiring a state signal related to the process control among the states of the field device;
Setting means for setting the function restriction level based on the status signal acquired by the acquisition means;
A device control apparatus comprising:   The device control apparatus according to claim 1, wherein the acquisition unit acquires the status signal corresponding to a type of the field device.   When the field device is a type of device that is active with respect to the process control amount, and the status signal corresponding to the type is acquired by the acquisition unit, the setting unit sets the function restriction level to a passive type. The device control apparatus according to claim 2, wherein the device control device is set to a level higher than that of the device.   The apparatus control apparatus according to claim 3, wherein the active type apparatus is a valve positioner or an electropneumatic converter.   When the field device is a type of device used for a specific application of the process control and a keyword representing this type is acquired by the acquisition unit as the status signal, the setting unit sets the function restriction level to the The device control apparatus according to claim 2, wherein the device control device is set to a level higher than that of a device of a type used for purposes other than the specific purpose.   6. The device control apparatus according to claim 5, wherein the type of device used for the specific application is a device used for drainage control of a factory that performs the process control.   The device control apparatus according to claim 1, wherein the acquisition unit acquires the state signal corresponding to an operating state of the field device.   When the acquisition unit acquires the status signal indicating that the field device is operating, the setting unit sets the function restriction level to a level higher than that of the non-operating field device. The apparatus control apparatus according to claim 7.   9. The device control according to claim 8, wherein when the field device that operates as a link master of a fieldbus exists, the acquisition unit acquires the status signal indicating that the field device is operating. apparatus.   The device control apparatus according to claim 1, wherein the acquisition unit acquires the state signal corresponding to a type of alarm generated by the field device.   When the acquisition unit acquires the status signal indicating that the device control is interrupted, the setting unit sets the function restriction level to a level higher than an alarm that does not stop the device control. The apparatus control apparatus according to claim 10.   The apparatus control apparatus according to claim 1, wherein the acquisition unit acquires the state signal according to a formation state of a control loop of the process control by the field device.   When the acquisition unit acquires the state signal indicating that the control loop has been formed, the setting unit sets the function restriction level to a level higher than a state in which the control loop is not formed. The apparatus control apparatus according to claim 12.   The device control apparatus according to claim 1, wherein the acquisition unit acquires the state signal corresponding to a position where the field device is arranged. The position is obtained by GPS or wireless LAN,
When the acquisition means acquires the status signal indicating that the position is a dangerous area in the process control, the setting means sets the function restriction level from the field device arranged outside the dangerous area. The device control apparatus according to claim 14, wherein the apparatus control device is set to a higher level.   16. The device control apparatus according to claim 1, wherein the setting unit can set the level of the function restriction to a custom level changed by a user. In the function restriction method of the device control apparatus capable of performing device control on a field device arranged in a system that performs process control and capable of restricting any of a plurality of control functions for executing the device control.
An acquisition step of acquiring a state signal related to the process control among the states of the field device;
A setting step for setting the function restriction level based on the status signal acquired by the acquisition step;
A function restriction method for a device control apparatus, comprising: Field devices arranged in a system for process control;
In the function restriction system having a device control device capable of performing device control on the field device and capable of restricting any of a plurality of control functions for executing the device control,
The device control device
An acquisition means for acquiring a state signal related to the process control among the states of the field device;
Setting means for setting the function restriction level based on the status signal acquired by the acquisition means;
A function restriction system characterized by comprising:

Images