Method and system for controlling access of a process control station to a utility system

Abstract

The application discloses a kind of process control station access public system's permission control method, comprising: by adding permission analog quantity tag point in public system process control station controller, unit set information storage module is added in unit set information coding;Through the unit set information of process control station permission configuration module in second monitoring system, after permission verification module, the instruction output of public system is authenticated and interlocked control, realizes the operation permission control of unit set to public system process control station.The unit set information of the application is obtained in the permission configuration module of monitoring system, after permission verification module, the instruction output of public system is authenticated and interlocked control, guarantee the security and reliability of public system operation permission distribution.

Description

Technical Field

[0001] This invention relates to the field of power control system technology, and in particular to a method and system for access control of process control stations to a public system. Background Technology

[0002] In recent years, with the continuous maturation of DCS (Distributed Control System) technology, DCS is now commonly used in the thermal power plant control field to control various actuators according to the power plant's operating logic. Process control stations and monitoring systems from major domestic and international DCS manufacturers are usually sold as complementary products. The monitoring system uses the manufacturer's proprietary or dedicated communication protocols for data acquisition and command issuance, while the process control station typically includes dedicated monitoring screen operation function blocks to cooperate with the monitoring system. A single process control station usually does not support simultaneous access to two monitoring systems. However, in some application scenarios, it is necessary to use different monitoring systems to control the process control station simultaneously to save costs and space and facilitate flexible deployment. However, after connecting a second monitoring system, determining which unit has control authority over the common system requires intervention from the monitoring system. The power plant's unit structure typically consists of multiple independent unit units plus a common system section, with the unit units operating independently and without access to each other. Similarly, DCS typically adopts a structure where unit units and common systems are used in conjunction. The utility system provides control over the power supply systems for fuel, ash removal, and water treatment for each unit, ensuring the safe and stable operation of the unit. The utility system is crucial, as multiple units share a single system. If monitoring or control of the utility system is lost, all units using that system will shut down. Therefore, the utility system cannot be simply integrated into the unified control of a single unit; each unit using the utility system must be able to monitor it safely and reliably. Furthermore, without communication between multiple units, control command conflicts for the utility system equipment are likely to occur, causing frequent equipment actions and affecting the operation of the equipment and even the entire unit. Without the allocation and interlocking of control permissions between unit units and the utility system, there is a possibility that the current equipment could be operated and controlled by other units, leading to control command conflicts and affecting the stable and safe operation of the thermal power plant. Therefore, determining the control permissions of the utility system is particularly important, and the utility system urgently needs to have safe and reliable switching capabilities. Summary of the Invention

[0003] The purpose of this section is to outline some aspects of embodiments of the present invention and to briefly describe some preferred embodiments. Simplifications or omissions may be made in this section, as well as in the abstract and title of this application, to avoid obscuring the purpose of these documents; however, such simplifications or omissions should not be construed as limiting the scope of the invention.

[0004] In view of the aforementioned existing problems, the present invention is proposed.

[0005] Therefore, the present invention provides a method and system for controlling the access permissions of process control stations to public systems, and solves the problem of control command conflicts in existing public system equipment that cause frequent equipment operation.

[0006] To solve the above-mentioned technical problems, the present invention provides the following technical solution:

[0007] In a first aspect, the present invention provides a method for access control of process control stations to a public system, comprising:

[0008] By adding permission analog quantity tags to the controller of the public system process control station and adding unit information codes to the unit information storage module;

[0009] The second monitoring system obtains the unit information of the process control station permission configuration module. After passing through the permission verification module, the command output of the common system is authenticated and interlocked to realize the unit's operation permission control over the common system process control station.

[0010] As a preferred embodiment of the access control method for the process control station to the public system described in this invention, the process control station includes a data acquisition unit and a data processing unit. An analog quantity tag point UnitID is added to the process control station and input to UnitID.InCtl and output to UnitID.Out. It is connected to the second monitoring system through a dedicated communication protocol. The process control station also includes a second monitoring system communication module, a unit access request receiving module, an access verification module, an access allocation module, a communication status verification module, and an access release module.

[0011] As a preferred embodiment of the access control method for process control stations accessing public systems according to the present invention, the access verification module verifies whether the encoded value of the unit is consistent with the output value of the access analog tag point added to the process control station of the public system, and sends the access verification result to the access allocation module. If the verification is successful, the access verification result is the access verification success information of the unit's encoding; otherwise, it is the access verification failure information.

[0012] As a preferred embodiment of the access control method for process control stations accessing public systems according to the present invention, the access control module includes the following steps:

[0013] Query and obtain the unit code of the current unit. If the unit code value is 0 or empty, do not apply for the allocation of public system monitoring system operation permission for this permission.

[0014] If the unit code value is not 0 or empty, query and obtain the output value of the analog quantity tag point of the permission of all process control stations in the public system;

[0015] If the output value of the analog label point of the permission is 0 or empty, then the public system monitoring system operation permission will not be applied for for this permission;

[0016] If the output value of the permission analog quantity tag point is not 0 or empty, compare the output value of the permission analog quantity tag points of all process control stations in the public system with the unit code of the current unit to see if they are consistent.

[0017] If the output value of the permission analog tag point is inconsistent with the unit code of the current unit, the current unit code will be written into the input value of the permission analog tag point of all process control stations of the public system, and the control permission of the public system will be assigned to this unit. Other units will no longer have the operation permission of the public system monitoring system.

[0018] If the output value of the analog permission tag point is consistent with the unit code of the current unit, then save the current public system operation permission and exit the permission allocation module;

[0019] As a preferred embodiment of the access control method for process control stations accessing the public system described in this invention, the communication status verification module monitors the communication status of unit groups with operating permissions of the public system monitoring system, reads the output values ​​of the analog tag points of the permissions of all process control stations in the public system, and periodically sends heartbeat packets to unit groups with operating permissions to detect the communication status.

[0020] If no feedback is received from the unit with operation authority or the feedback times out, it is determined that the communication of the unit with operation authority is interrupted or there is a fault, and an authority release command is sent to the authority release module; otherwise, no operation is performed.

[0021] As a preferred embodiment of the access control method for process control stations accessing the public system described in this invention, the access release module, when the information code of the unit with access to the public system monitoring system is 0 or empty, ensures that all unit units have access to the public system, including the following methods: after receiving the access release instruction sent by the communication status verification module, the module clears the information of the unit with access to the public system monitoring system in the access allocation module and releases the access rights; after receiving the access release information actively sent by the unit with access to the public system monitoring system, the module clears the information of the monitoring system holding access to the public system in the access allocation module and releases the access rights.

[0022] As a preferred embodiment of the access control method for process control stations to access the public system described in this invention, the second monitoring system communication module enables communication between all process control stations in the distributed control system and the second monitoring system. It adopts a dedicated communication protocol, supports multiple connections, and breaks down communication barriers between the public system and the unit through the pipeline mechanism in the process control station.

[0023] Secondly, the present invention provides an access control system for process control stations to access a public system, comprising:

[0024] Add modules by adding permission analog quantity tag points to the public system process control station controller and adding unit information codes to the unit information storage module;

[0025] The control module obtains the unit information of the process control station permission configuration module through the second monitoring system. After passing through the permission verification module, it performs authentication and interlocking control on the command output of the common system, so as to realize the unit's operation permission control over the common system process control station.

[0026] Thirdly, the present invention provides a computing device, comprising:

[0027] Memory, used to store programs;

[0028] A processor is configured to execute the computer-executable instructions, which, when executed by the processor, implement the steps of the access control method for the process control station to access the public system.

[0029] Fourthly, the present invention provides a computer-readable storage medium, comprising the step of implementing the access control method for the process control station to access a public system when the program is executed by a processor.

[0030] The beneficial effects of this invention are as follows: By adding permission analog tag points to the controller of the public system process control station and adding unit information codes to the unit information storage module, this invention enables the control of unit operation permissions to the public system process control station through a second monitoring system. This invention requires no complex logic configuration, no additional hardware or software, and no complex programming implementation. Compared with existing technologies, the control system proposed in this invention has the characteristics of simple implementation, low cost, low resource consumption, and flexible application scenarios. Attached Figure Description

[0031] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort. Wherein:

[0032] Figure 1 This is a basic flowchart illustrating a method for controlling access to a public system by a process control station, as provided in one embodiment of the present invention.

[0033] Figure 2 This is a schematic diagram of the architecture of a method for controlling access to a public system by a process control station, provided in one embodiment of the present invention.

[0034] Figure 3 This is a schematic diagram of a method for controlling access to a public system by a process control station, provided in one embodiment of the present invention.

[0035] Figure 4 A flowchart of the permission allocation module of a permission control method for accessing a process control station to a public system, provided in one embodiment of the present invention; Detailed Implementation

[0036] To make the above-mentioned objects, features, and advantages of the present invention more apparent and understandable, specific embodiments of the present invention will be described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present invention, and not all of them. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the protection scope of the present invention.

[0037] Many specific details are set forth in the following description in order to provide a full understanding of the invention. However, the invention may also be practiced in other ways different from those described herein, and those skilled in the art can make similar extensions without departing from the spirit of the invention. Therefore, the invention is not limited to the specific embodiments disclosed below.

[0038] Secondly, the term "one embodiment" or "embodiment" as used herein refers to a specific feature, structure, or characteristic that may be included in at least one implementation of the present invention. The phrase "in one embodiment" appearing in different places in this specification does not necessarily refer to the same embodiment, nor is it a single or selective embodiment that is mutually exclusive with other embodiments.

[0039] This invention is described in detail with reference to the schematic diagrams. When detailing the embodiments of this invention, for ease of explanation, the cross-sectional views illustrating the device structure may be partially enlarged, not adhering to the usual scale. Furthermore, the schematic diagrams are merely examples and should not be construed as limiting the scope of protection of this invention. In actual fabrication, the three-dimensional spatial dimensions of length, width, and depth should be included.

[0040] Furthermore, in the description of this invention, it should be noted that the terms "upper," "lower," "inner," and "outer," etc., indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings. These terms are used solely for the convenience of describing the invention and for simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation. Therefore, they should not be construed as limitations on the invention. In addition, the terms "first," "second," or "third" are used for descriptive purposes only and should not be construed as indicating or implying relative importance.

[0041] Unless otherwise explicitly specified and limited, the terms "installation," "connection," and "joining" in this invention should be interpreted broadly. For example, they can refer to fixed connections, detachable connections, or integral connections; similarly, they can refer to mechanical connections, electrical connections, or direct connections, or indirect connections through an intermediate medium, or internal connections between two components. Those skilled in the art can understand the specific meaning of the above terms in this invention based on the specific circumstances.

[0042] Example 1

[0043] Reference Figure 1-4 As an embodiment of the present invention, a method for access control of process control stations to a public system is provided, such as... Figure 1 As shown, it includes:

[0044] S1: Add permission analog quantity tag points to the controller of the public system process control station and add unit information codes to the unit information storage module;

[0045] Furthermore, such as Figure 2 As shown, it involves a public system process control station, a first monitoring system, and a second monitoring system, wherein:

[0046] The process control station is equipped with a data acquisition unit and a data processing unit. An authorized analog quantity tag is added to each public system process control station, and its input and output are connected to the second monitoring system via a dedicated communication protocol, such as... Figure 3 As shown, the process control station also includes a second monitoring system communication module, a unit permission application receiving module, a permission verification module, a permission allocation module, a communication status verification module, and a permission release module;

[0047] Furthermore, the first monitoring system is directly connected to the data acquisition unit;

[0048] Furthermore, the second monitoring system is connected to the data acquisition unit through the communication module of the second monitoring system, and the unit code of the current unit is added to the information storage module of the second monitoring system.

[0049] Furthermore, the second monitoring system communication module is used for communication between all process control stations in the distributed control system and the second monitoring system. It adopts a dedicated communication protocol, supports multiple connections, and breaks down the communication barriers between the common system and the unit through the pipeline mechanism in the process control station, so as to realize the sharing of real-time data of the common system in multiple unit units and meet the requirements of real-time and reliability of data communication.

[0050] Furthermore, the permission request receiving module is used to receive permission request information from the monitoring system and send the permission request information and the local group information stored in the unit group to the permission verification module;

[0051] Furthermore, the permission verification module is used to verify the unit's coding information and the permission analog tag point information in the public system process control station (to verify whether the coding value of the unit is consistent with the output value of the permission analog tag point added in the public system process control station), and sends the permission verification result to the permission allocation module. If the verification is successful, the permission verification result is the unit's coding verification success information; otherwise, it is the permission verification failure information.

[0052] Furthermore, the communication status verification module is used to monitor the communication status of unit units with operating permissions in the public system monitoring system. It reads the output values ​​of the permission analog tag points of all process control stations in the public system, periodically sends heartbeat packets to the unit units with operating permissions, and checks the communication status. If no feedback is received from the unit units with operating permissions or the feedback times out, it is determined that the communication of the unit units with operating permissions is interrupted or there is a fault, and a permission release command is sent to the permission release module; otherwise, no operation is performed.

[0053] Furthermore, the permission release module is used to release operation permissions. When the information code of a unit with operation permissions for the public system monitoring system is 0 or empty, all units have operation permissions for the public system, including the following methods: after receiving the permission release instruction sent by the communication status verification module, the information of the unit with operation permissions for the public system monitoring system in the permission allocation module is cleared, and the operation permissions are released; after receiving the permission release information actively sent by the unit with operation permissions for the public system monitoring system, the information of the monitoring system holding operation permissions in the permission allocation module is cleared, and the operation permissions are released.

[0054] S2: The unit information of the process control station permission configuration module is obtained through the second monitoring system. After passing through the permission verification module, the instruction output of the common system is authenticated and interlocked to realize the unit's operation permission control over the common system process control station.

[0055] Furthermore, the permission allocation module is used to receive permission verification results and allocate operation permissions to the second monitoring system, such as... Figure 4 As shown, the specific allocation steps are as follows:

[0056] S21: Query and obtain the unit code of the current unit. If the unit code value is 0 or empty, proceed to step S26; otherwise, proceed to step S22.

[0057] S22: Query and obtain the output values ​​of the analog quantity tag points of the permissions of all process control stations in the public system. If the output value of the analog quantity tag points of the permissions is 0 or empty, proceed to step S26; otherwise, proceed to step S22.

[0058] S23: Compare the output values ​​of the analog quantity tag points of the permissions of all process control stations in the public system with the unit code of the current unit. If they match, proceed to step S24; otherwise, proceed to step S25.

[0059] S24: Save the current public system operation permissions and exit the permission allocation module;

[0060] S25: Write the current unit code into the input value of the analog tag point of the permission of all process control stations in the public system, and assign the public system control permission to this unit. Other units will no longer have the operation permission of the public system monitoring system.

[0061] S26: Do not request the allocation of public system monitoring system operation permissions for this permission;

[0062] This embodiment also provides an access control system for process control stations to access public systems, including:

[0063] Add modules by adding permission analog quantity tag points to the public system process control station controller and adding unit information codes to the unit information storage module;

[0064] The control module obtains the unit information of the process control station permission configuration module through the second monitoring system. After passing through the permission verification module, it performs authentication and interlock control on the command output of the public system, so as to realize the unit's operation permission control over the process control station of the public system.

[0065] Furthermore, this also includes:

[0066] Memory, used to store programs;

[0067] A processor is used to load the program to execute the access control method for the process control station to access the public system.

[0068] This embodiment also provides a computer-readable storage medium storing a program, which, when executed by a processor, implements the access control method for the process control station to access the public system.

[0069] The storage medium proposed in this embodiment and the access control method for process control stations to access public systems proposed in the above embodiments belong to the same inventive concept. Technical details not described in detail in this embodiment can be found in the above embodiments, and this embodiment has the same beneficial effects as the above embodiments.

[0070] Based on the above description of the implementation methods, those skilled in the art can clearly understand that the present invention can be implemented using software and necessary general-purpose hardware, and of course, it can also be implemented using hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as a computer floppy disk, read-only memory (ROM), random access memory (RAM), flash memory, hard disk, or optical disk, etc., including several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods of the various embodiments of the present invention.

[0071] Example 2

[0072] The following is an embodiment of the present invention, which provides a method for access control of process control stations to a public system. In order to verify its beneficial effects, it is scientifically demonstrated through specific implementation methods and implementation effects.

[0073] The specific details of this embodiment are as follows:

[0074] Taking Unit #1 as an example, add an access control button to the second monitoring screen. When the output value of the UnitID of the access analog label point of all process control stations of the common system is consistent with the UnitNo code of Unit #1, only Unit #1 has the operation permission of the common system, and the button will display "Unit #1 has the operation permission" (the display text can be customized). Other units cannot operate the common system. At this time, clicking the access control button on the monitoring screen of Unit #1 will have no effect.

[0075] Add an access control button to the second monitoring screen. When the output value of the UnitID of the access analog label point of all process control stations in the public system is inconsistent with the UnitNo code of Unit #1, Unit #1 does not have the operation permission of the public system, and the button will display "Unit #1 has no operation permission" (the display text can be customized). At this time, after clicking the access control button on the monitoring screen of Unit #1, the input value of the UnitID of the access analog label point of all process control stations in the public system will be set to the current unit code UnitNO value.

[0076] Taking Unit #1 and the common system as an example, if Unit #1 needs to obtain operating permissions for the common system, the following steps are required:

[0077] Step 1: Obtain the UnitNO value of the current unit in the information storage module of the second monitoring system. If the UnitNO value is 0 or empty, the message "All units have public system operation permissions - current unit code not configured" will be displayed and the process will proceed to step S6. If the UnitNO value is not 0 or empty, the process will proceed to step S2.

[0078] Step 2: Obtain the output value UnitID.Out of the analog tag point UnitID of all process control stations in the public system. If the value of UnitID.Out is 0 or empty, the message "All unit units have public system operation permissions - public system control station UnitID not configured" will be displayed and the process will proceed to step S6. If the value of UnitID.Out is not 0 or empty, the process will proceed to step S3.

[0079] Step 3: Compare the output value UnitID.Out of the analog quantity tag point UnitID of all process control stations in the public system with the UnitNO value of Unit #1. If they are consistent, it is determined that the current unit has the operation permission of the public system monitoring system and proceeds to step S4; otherwise, proceeds to step S5.

[0080] Step 4: Save the current public system operation permissions and exit the permission allocation module;

[0081] Step 5: Write the UnitNO value of Unit #1 into the input value UnitID.InCtl of the permission analog tag point UnitID of all process control stations in the public system, and proceed to step S3;

[0082] Step Six: Do not request the allocation of public system monitoring system operation permissions for this permission;

[0083] After Unit #1 completes the acquisition of public system control permissions, the communication status verification module monitors the communication status of Unit #1 units that have public system monitoring system operation permissions. It reads the UnitID.Out values ​​of analog tag points of all process control stations in the public system, periodically sends heartbeat packets to Unit #1 units to check the communication status. If no feedback is received from Unit #1 units or the feedback times out, it is determined that the communication of Unit #1 units is interrupted or there is a fault, and a permission release command is sent to the permission release module; otherwise, no operation is performed.

[0084] After Unit #1 completes the acquisition of common system control permissions, the permission release module will receive a permission release command from the communication status verification module if the communication status verification module does not receive feedback from Unit #1 or the feedback times out. At the same time, it will set the UnitID.InCtl value of the analog quantity tag point of all process control stations in the common system to 0, releasing the operation permission. At this time, all unit units have common system control permissions. After the permission release command is directly issued through the communication module of the second monitoring system on the second monitoring system screen, the UnitID.InCtl value of the analog quantity tag point of all process control stations in the common system will be set to 0, releasing the operation permission. At this time, all unit units have common system control permissions.

[0085] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit it. Although the present invention has been described in detail with reference to preferred embodiments, those skilled in the art should understand that modifications or equivalent substitutions can be made to the technical solutions of the present invention without departing from the spirit and scope of the technical solutions of the present invention, and all such modifications or substitutions should be covered within the scope of the claims of the present invention.

Claims

1. A method for access control of process control stations to a public system, characterized in that, include: By adding permission analog quantity tags to the controller of the public system process control station and adding unit information codes to the unit information storage module; The second monitoring system obtains the unit information from the process control station permission configuration module. After passing through the permission verification module, the command output of the common system is authenticated and interlocked to realize the unit's operation permission control over the common system process control station. The process control station is equipped with a data acquisition unit and a data processing unit. An analog quantity tag point UnitID is added to the process control station and input into UnitID.InCtl and output UnitID.Out. It is connected to the second monitoring system through a dedicated communication protocol. The process control station also involves a second monitoring system communication module, a unit permission application receiving module, a permission verification module, a permission allocation module, a communication status verification module, and a permission release module. The communication status verification module monitors the communication status of unit units with operating permissions in the public system monitoring system, reads the output values ​​of the analog tag points of the permissions of all process control stations in the public system, and periodically sends heartbeat packets to unit units with operating permissions to detect the communication status. If no feedback is received from the unit with operation authority or the feedback times out, it is determined that the communication of the unit with operation authority is interrupted or there is a fault, and an authority release command is sent to the authority release module; otherwise, no operation is performed. The second monitoring system communication module enables communication between all process control stations in the distributed control system and the second monitoring system. It adopts a dedicated communication protocol, supports multiple connections, and breaks down communication barriers between the public system and the unit through the pipeline mechanism in the process control station.

2. The access control method for process control stations accessing a public system as described in claim 1, characterized in that: The permission verification module verifies whether the output value of the analog tag point added in the public system process control station is consistent with the code value of the unit, and sends the permission verification result to the permission allocation module. If the verification is successful, the permission verification result is the unit code verification success information; otherwise, the permission verification failure information is the permission verification failure information.

3. The access control method for process control stations accessing a public system as described in claim 2, characterized in that: The permission allocation module includes the following steps: Query and obtain the unit code of the current unit. If the unit code value is 0 or empty, do not apply for the allocation of public system monitoring system operation permission for this permission. If the unit code value is not 0 or empty, query and obtain the output value of the analog quantity tag point of the permission of all process control stations in the public system; If the output value of the analog label point of the permission is 0 or empty, then the public system monitoring system operation permission will not be applied for for this permission; If the output value of the permission analog quantity tag point is not 0 or empty, compare the output value of the permission analog quantity tag points of all process control stations in the public system with the unit code of the current unit to see if they are consistent. If the output value of the permission analog tag point is inconsistent with the unit code of the current unit, the current unit code will be written into the input value of the permission analog tag point of all process control stations of the public system, and the control permission of the public system will be assigned to this unit. Other units will no longer have the operation permission of the public system monitoring system. If the output value of the analog permission tag point is consistent with the unit code of the current unit, then the current public system operation permission is saved and the permission allocation module is exited.

4. The access control method for process control stations accessing a public system as described in claim 3, characterized in that: When the information code of the unit with public system monitoring system operation permission is 0 or empty, the permission release module ensures that all unit groups have public system operation permission, including the following methods: after receiving the permission release instruction sent by the communication status verification module, the information of the unit group with public system monitoring system operation permission in the permission allocation module is cleared, and the operation permission is released. After receiving a permission release message from a unit with operation permissions for the public system monitoring system, the information holding operation permissions for the monitoring system in the permission allocation module is cleared, and the operation permissions are released.

5. A permission control system for process control stations to access a public system, characterized in that, The method of claim 1 is used, comprising: Add modules by adding permission analog quantity tag points to the public system process control station controller and adding unit information codes to the unit information storage module; The control module obtains the unit information of the process control station permission configuration module through the second monitoring system. After passing through the permission verification module, it performs authentication and interlocking control on the command output of the common system, so as to realize the unit's operation permission control over the common system process control station.

6. An electronic device, characterized in that, include: Memory, used to store programs; A processor is configured to load the program to execute the access control method for process control stations accessing a public system as described in any one of claims 1-4.

7. A computer-readable storage medium storing a program, characterized in that, When the program is executed by the processor, it implements the access control method for process control stations to access public systems as described in any one of claims 1-4.

Images