LU502487B1 - Method and operating device for exchanging data - Google Patents

Abstract

In order to close the communication gap between a cloud-based planning or configuration program and an operating program on an operating device for operating an automation system, the invention provides a method for exchanging data between a configuration application (160, 360) and at least one an electronic device (110) connected to an operating device (155), in which in particular an instance (160) of a configuration application running on the operating device (155) calls a web server application (180, 180') installed on the operating device (155). in order to exchange data between the instance (160) of the configuration application running on the operating device (155) and the at least one electronic device (110) via the web server application (180, 180'). The invention further provides an operating device (155) designed to carry out the method.

Description

: LU502487

Method and operating device for exchanging data

Description

The invention relates generally to industrial automation and more particularly

Method and an operating device for exchanging data with devices that have a

Operating device are connected for data exchange.

In industrial automation, field devices such as actuators and sensors are used, which nowadays usually have a digital communication protocol and with the help of gateways and remote I/Os, i.e. input/output devices close to the field device.

Output modules can be connected through networks or star architectures. The devices, i.e. both actuators and sensors, but also gateways and remote I/Os, have a large number of parameters that can only be operated with the help of specific software, which is typically installed on an operating device that is connected to the respective device connected via a communication link.

This comes as part of commissioning, maintenance and repair work

Software, also referred to as an operating program, is used in different, adapted forms and is then able to communicate directly with the respective device and thus read out current measurement, status data and configuration data, write configuration data and initiate internal processes.

There is one for the specific use of the devices in industrial automation

Variety of device types, each of which optimally supports specific applications. The selection of suitable devices and the design options are now so large that special software, also known as

Design program, called design program, is used to find the right devices for the respective financial purpose.

To start the planning process of a new automation system or a new

Completing an automation system is typically another type of

’LU502487

Software, also referred to as a configuration program, is used, which compiles all the individual parts of the automation system or the

Automation system permitted in terms of its mechanical, data technology and electrical requirements.

Often the configuration program and design program are rolled into one

Program, hereinafter referred to as planning program, summarized. In the

Everything can then be prepared using the planning program to order materials and set up the system. For commissioning, the devices must then be described with the parameter sets intended for them in order to set up the system to run.

With the advent of Internet technologies with their extensive web

Applications, including with the IoT and Industry 4.0 initiatives, are increasing

Need for web-based solutions that use cloud concepts to cover the entire

Planning a system can be made much easier and more user-friendly.

A method for planning and/or operating a technical system is known, for example, from EP 3 435 299 A1, whereby part of the system data provided in a cloud is released in such a way that it can be accessed by one or more external service providers. Furthermore, for example in EP 1 906 592 B1 and EP 1 906 274 A2 web-based solutions for

Automation systems described.

However, cloud-based planning programs have one major disadvantage: due to individual data security policies and measures within the executing companies

It is not easily possible for companies to combine planning programs and operating programs. The real advantage of cloud-based

Planning programs are largely lost as a result and usually lead to a data-related dead end.

; LU502487

The object of the invention can be seen as showing a way how

Communication gap between a cloud-based planning or

Configuration program and an operating program can be closed in a simple and / or improved manner, in particular without doing so

endangering data security.

This task is solved by the features of the independent claims.

Advantageous embodiments are the subject of the dependent claims, whereby the specified features and advantages can essentially apply to all independent claims.

A core idea of the invention can be seen in the fact that an operating device is designed to configure and/or parameterize electronic devices of industrial automation or interface technology

To provide a web server application by means of which communication between a planning or configuration application running on the operating device and an operating application running on the operating device is enabled in order to configure and/or parameterize an electronic device, in particular a device industrial automation or interface technology, which is connected to the operating device, with the web server

Functionality can be integrated into the operating application. In this way a

Configuring and / or parameterizing the electronic device based on data that the planning application retrieves from a server located in a public network.

According to a first aspect of the invention, a method for exchanging

Data between a configuration application and at least one with a

Electronic device connected to the operating device is provided, which has the following

Steps include: a) calling the configuration application by transmitting a call command from the operating device, which is connected to a secure network, to a server located in a public network,

! LU502487 b) Creating and executing an instance of the configuration application on the

HMI device in response to calling the configuration application, c) calling a web server application installed on the HMI device by the instance of the configuration application running on the HMI device, d) exchanging data between the instance of the HMI running on the HMI device

Configuration application and the at least one electronic device, which is connected to the operating device via the secure network, via the web server

Application.

The electronic device to be configured and/or parameterized can in principle be any device that can be used in the field of automation, which can be connected to an operating device wirelessly or by wire and is designed to exchange data with the operating device. Examples of electronic devices with which data can be exchanged using the method described are actuators, sensors, gateways, I/O modules, in particular I/O modules close to field devices.

Modules, also known as remote I/Os, as well as bus couplers or function modules.

The communication connection between the operating device and the device to be configured can in particular be carried out using interfaces and bus systems that are known per se, as are typically used in the field of industrial automation. The method can be advantageous, for example, for electronic

Devices are used that can be mounted on a mounting rail and are typically arranged in a control cabinet.

The configuration application is a software program with which a

Configuration of an automation system or individual components of such a system can be created and saved. The configuration application can advantageously be designed as a planning application or planning program and accordingly include functionalities of a design program.

The configuration application is advantageously designed as a web application and accordingly includes a web client application and a web server application.

The instance of the configuration created and executed on the operating device

) LU502487

Application is preferably the web client application, which is in one on the

The browser is executable on the operating device and is designed to transmit data with the

Exchange web server application that is running on the server located in the public network.

The instance of the configuration program running on the operating device advantageously calls

Application transmits data from the server located in the public network to the electronic device and/or retrieves data from the electronic device

device and transmits it to the server located in the public network.

Exchanging data in step d) is carried out on the operating device

Instance of the configuration application advantageously runs one on the

Operating application installed on the operating device.

The web server application installed on the operating device makes it particularly advantageous to run the operating application as a web application locally on the

operating device. For this purpose it is advantageous from the on the

Instance of the configuration application running on the operating device

Application is called by transmitting a call command to the web server application installed on the operating device, whereupon an instance of the operating application is preferably created in the form of a web client and within the on the

The instance of the configuration application running on the HMI device is executed.

It is advantageous to call up the web server installed on the operating device.

Application in step c) with the help of a protocol handler. The instance of the operating application is particularly advantageously provided by the local web server application in the form of a static website.

It can also be advantageous to provide the web server application on the

Operating device should only be installed if necessary or existing operating devices should be retrofitted accordingly.

Accordingly, the method can advantageously provide the following steps:

° LU502487 - Check whether the web server application is installed on the operating device - Requesting the user of the operating device to install the web server through the instance of the configuration application running on the operating device

Execute the application on the operating device if the check shows that the

Web server application is not installed on the operating device, and - installation of the web server application on the operating device by the user.

The secured network in which the operating device is arranged is preferably separated from the public network, which can be the Internet, for example, by at least one firewall. A so-called demilitarized zone (DMZ) can also be provided, which lies between the secured and the public

Network is arranged. The computers located in the DMZ are then typically from both the public network and the secured one

Network separated by a firewall.

A communication between the secured network and the public one

The network is therefore advantageously protected by at least one firewall. To protect against unauthorized access to the electronic devices connected to an operating device by a browser running on the operating device

Cloud-based web application is a communication between the operating device and a public server for this purpose through the at least one

Firewall prevented.

This block is circumvented by the method described, in particular in that only communication running locally on the operating device is required to actually exchange data with the device connected to the operating device.

According to a further aspect of the invention, an operating device is provided which is connected via a secure network to at least one electronic device, in particular an industrial automation technology device, on which

A web server application is installed on the operating device, and the operating device is designed to be used by transmitting a call command to a public one

Network arranged server to call a configuration application, whereby one

An instance of the configuration application is created and executed on the operating device, and the instance of the configuration application running on the operating device

Application is designed to use the web server installed on the operating device

Call up the application and exchange data with the at least one electronic device via the web server application.

The configuration instance running on the operating device is advantageous.

Application designed to be a version of one installed on the operating device

operating application. Furthermore, the one carried out on the operating device

Instance of the configuration application is advantageously designed to retrieve data from the server located in the public network and to use the operating

To transfer the application to the electronic device via the web server application and/or to retrieve data from the electronic device using the operating application via the web server application and to transmit it to the server arranged in the public network.

The features and advantages of the present invention also emerge from the

Embodiments, which are described below with reference to the enclosed

Drawings are explained in more detail. Show it

Fig. 1 is a schematic representation of one known from the prior art

Structure for planning and configuring an automation system,

Fig. 2 is a schematic representation of a structure for planning and configuring an automation system, which is a first preferred

Embodiment of an operating device and is designed to carry out a method according to the invention, and

Fig. 3 is a schematic representation of a structure for planning and configuring an automation system, which is a second preferred

Embodiment of an operating device and is designed to carry out a method according to the invention.

; LU502487

Fig. 1 shows a schematic representation of one known from the prior art

Structure for planning and configuring an automation system.

In the example shown, an operating device 150, also referred to as an operating station, is connected to an automation system, this usually being done directly or, as in the example shown, by means of an interface converter 130, whereby as

Interface converters, for example a USB-to-serial converter or a modem, can be used. Access then takes place either directly to an electronic device 110 or via network components such as gateways 120 to several devices 110. The operating station 150 itself is thus able to communicate with the devices 110 and read in current values as well as configurations and

Reading and writing parameterizations.

The operating device 150 and the devices of the automation system are arranged within a secured network 100, with the secured network 100 in the example shown being separated from a DMZ 200 by a firewall 210, which in turn is separated from a public network 300 by a further firewall 310.

A server 350 in the public network 300 offers a configuration application

In the form of a planning program, which can also be used by the operating station 150 via the

Firewalls 210 and 310 can be reached, although the operating station 150 is in the secured one

Network 100 is connected. This is possible because the configuration

Application behaves like a standard website and is therefore not blocked by firewalls 210 and 310.

With the help of the configuration application designed as a planning program, the user can now plan his system, select and configure the necessary devices 110 and use this to work out the required parameter set for the respective device 110. The data compiled in this way can then be stored in a central data storage 370 in the public network 100. In this process the

) LU502487

Users are supported by cloud-typical applications. An example is an AI-supported analysis of the data sets. The advantage of such a realization is the

Configuration application means that the user can use the application ad hoc without installing any software or making changes to their IT infrastructure.

The configuration application thus includes one executed in a browser 170

Web client application 160, which may take the form of a standard web page, and a web server application 360 running on the server 350, which is connected to the

Web client application 160 communicates, in particular via the Internet 320.

Even if the user now has data for his device 110 in the configuration

Application has been developed and this also in a server 350 or a central one

Data memory 370 has been stored, but according to the state of the art it is not possible to transfer this to the device 110 from the configuration application.

Even reading out current values, configuration and parameterization data is not easily possible according to the state of the art, since the firewalls 210 and/or 310 prevent any communication in this way as a potential attack.

Depending on the system, a person with local administration rights can either install additional software or open the firewall selectively, although opening the firewall poses a security risk.

If you work with modern automation technology devices 110, you usually need a program to edit the configuration and parameterization and to read out the current values and the status of the device 110. For those needed

In this case, software is referred to as the operating program or the operating

Application used. In the example shown, such an operating application 140 is installed on the operating station 150, but this is independent of the

Configuration application is working.

Fig. 2 shows a schematic representation of a structure for planning and

Configuration of an automation system, which is a first preferred

Embodiment of an operating device 155 and is designed to carry out a method according to the invention.

In the structure shown in FIG. 2, the operating application 145 is designed so that it itself includes or represents a web server application 180. The instance 160 of the

Configuration application on the operator station 155 can then establish a connection to the local server 180 and the application of the server 180, i.e. one of the

Server 180 provisioned instance of a web client in response to an invocation command

Application 185 then seamlessly integrate into its application, with the instance of

Web client application 185 is provided in particular in the form of a static website. The instance 185 of the operating program can then communicate with the instance 160 of the configuration application and exchange data. Data from the external server 350 or the data storage 370 can thus be sent to the am

Operating device 155 connected device 110 can be communicated.

The process of exchanging data with a device 110 is explained in more detail below by way of example. (1) The user opens the configuration application 360 on the external server 350. (2) A local instance 160 is created on the operating station 155, which has a

Protocol handler calls the server 180 on the local computer 155. (3) If the server 180 is not found on the local computer 155, the local

Instance 160 of the configuration application prompts the user to download and run an installation file. If the operating program 145 is already installed, continue with (5). (4) The user loads the installation file, for example from a server 400 accessible via the Internet 320, and installs it. The installation is particularly advantageously designed in such a way that it can be done without the user's administrator rights on the

Operating device 155 can be executed. After installation, the server will be 180 des

Operating program 145 is started and is now available to instance 185 of the operating program. (5) The local instance 160 of the configuration application now calls the

Application page 185 of the operating program from the server 180 of the operating program 145 and integrates it into its instance 160. The operating application can access this

Way in the operating station 155 can also be displayed directly in the browser 170, i.e. this is temporarily loaded as an instance 185 by the web server application 180 and in the

Browser 170 of the operating station 155 is executed, i.e. in particular an instance of the

Application page is loading. (6) The instance 160 of the configuration application can already be connected to the external

Server 350 exchange data. (7) The data exchange with the local application 145 and thus also with the local device 110 can also take place via the loaded instance 185 of the application page of the operating program.

The method described advantageously makes it possible to retrieve data from the data even when using an online version of a planning or configuration program

To be able to transfer instance data of the planning or configuration program to the devices 110 connected to the operating station 155 and then check the devices 110 for correct function.

In Fig. 3 a variant of the structure shown in Fig. 2 is shown. In this variant it is intended that the web server application 180° is not integrated into the operating application 145", but rather is installed as a separate application on the operating device 155, whereby the web server application 180° is designed to be equipped with an operating

Application 145° to communicate via a specified communication interface.

Claims (10)

Patent claims 1. Method for exchanging data between a configuration application (160, 360) and at least one electronic device (110) connected to an operating device (155), in particular an industrial automation technology device, comprising the steps: a) calling up the configuration Application by transmitting a call command from the operating device (155), which is connected to a secure network (100), to a server (350) arranged in a public network (300), b) generating and executing an instance (160) of the configuration -Application on the operating device (155) in response to calling up the configuration application, c) calling a web server application (180, 180°) installed on the operating device (155) by the instance (160) running on the operating device (155). ) the configuration application, d) exchanging data between the instance (160) of the configuration application running on the operating device (155) and the at least one electronic device (110) which is connected to the operating device (100) via the secure network (100). 155) is connected via the web server application (180, 180°). 2. The method according to claim 1, wherein the instance (160) of the configuration application running on the operating device (155) retrieves data from the server (350) arranged in the public network (300) and transmits it to the electronic device (110) and / or retrieves data from the electronic device (110) and transmits it to the server (350) located in the public network (300). 3. Method according to one of the preceding claims, comprising the steps: - Checking whether the web server application (180, 180 ') is installed on the operating device (155) - Prompting the user of the operating device (155) through the on the operating device ( 155) executed instance (160) of the configuration application to carry out an installation of the web server application (180, 180°) on the operating device (155), if the Checking shows that the web server application (180, 180°) is not installed on the operating device (155), and - installation of the web server application (180, 180°) on the operating device (155) by the user. 4. The method according to any one of the preceding claims, wherein for exchanging data in step d) the instance (160) of the configuration application running on the operating device (155) is an execution of an operating application (145) installed on the operating device (155). effects. 5. The method according to claim 1, wherein the web server application (180, 180°) installed on the operating device (155) is called in step c) with the aid of a protocol handler. 6. The method according to any one of the preceding claims, wherein the configuration application is designed as a web application (160) that can be executed in a browser (170). 7. The method according to any one of the preceding claims, wherein communication between the secured network (100) and the public network (300) is protected by at least one firewall (210, 310). 8. Operating device (155), which is connected via a secure network (100) to at least one electronic device (110), in particular an industrial automation technology device, a web server application (180, 180 °.) on the operating device (155). ) is installed, wherein the operating device (155) is designed to call a configuration application (160, 360) by transmitting a call command to a server (350) arranged in a public network (300), an instance (160) of the Configuration application (160, 360) is generated and executed on the operating device (155), and the instance (160) of the configuration application running on the operating device (155) is designed to be the web server installed on the operating device (155). - Call up the application (180, 180°) and exchange data with the at least one electronic device (110) via the web server application (180, 180°). 9. Operating device according to claim 8, wherein the instance (160) of the configuration application executed on the operating device (155) causes an operating application (145) installed on the operating device to be executed. 10. Operating device according to claim 9, wherein the instance (160) of the configuration application running on the operating device (155) is designed to retrieve data from the server (350) arranged in the public network (300) and by means of the operating application ( 145, 145°) via the web server application (180, 180°) to the electronic device (110) and/or by means of the operating application (145, 145°) via the web server application (180, 180°) Retrieve data from the electronic device (110) and transmit it to the server (350) located in the public network (300).