Method and system for verifying field device functions

Abstract

The invention relates to a method for verifying a field device function of a field device, in which the field device generates verification information, in particular a device state and / or a current measured value, by means of which verification information the field device function can be verified, in which a mobile terminal and the field device are coupled, a wireless data connection is established between the field device and the terminal device, verification information is transmitted from the field device via the data connection and a field device function of the field device is verified by means of the verification information, and when the terminal device enters a reception range of the field device, the connection is performed in a fully automatic manner. The verification information is transmitted from the field device in a fully automatic manner via a wireless data connection.

Description

Technical Field

[0001] The invention relates to a method, a system and a computer program product according to the preamble of claim 1.

[0002] The invention particularly preferably relates to process technology installations in the chemical industry, the food industry and production industries. However, the invention can also be used and advantageously in other areas in principle. Background Art

[0003] Installation safety requires that measuring devices used as field devices be regularly checked for correct function and that the function of the field devices be verified in this way. For this purpose, data and error messages can be read out and verification methods can be listed.

[0004] Typically, a large number of field devices are arranged in one facility. Since the field devices are preferably used continuously, it is usually provided that the normal field device function of the respective field devices is verified without disassembling the field devices.

[0005] In order to verify the function of the field device, verification information is generated by the field device. The verification information can have or be formed by the device status and / or the measured values ​​of the field device. For the verification, a connection is provided between a mobile terminal device (hereinafter also simply referred to as "terminal device") and the field device. A wireless data connection is established between the field device and the terminal device via the connection. The verification information is formed and transmitted in the field device, and after the verification information is transmitted, the field device function of the field device can be verified using or based on the verification information.

[0006] The known verification requires the user to move the terminal device to the vicinity of the field device and connect the terminal device to the field device through manual operation, i.e., selecting the desired field device and inputting the connection instruction (manual connection). To this end, the user has the knowledge of the field device determined by the verification requirements and controls the generation of verification information through the user interface of the terminal device. Overall, this method has proven to be time-consuming and therefore expensive.

[0007] The methods known from the prior art for verification are also disadvantageous in that manual execution by the user is incompatible with intensive verification due to the enormous expenditure and the binding of human resources. Summary of the invention

[0008] Against this background, the object of the present invention is to specify a method, a system and a computer program product by means of which the verification outlay can be reduced and improved operational reliability can be achieved.

[0009] This object is achieved by a method according to claim 1, by a system according to claim 14 or by a computer program product according to claim 15. Developments are subject matter of the dependent claims.

[0010] In the proposed method, when the terminal device enters the receiving range of the field device, the connection is fully automatically carried out (automatic pairing). Preferably, monitoring is carried out and the steps required for the connection are automatically started when a connectable field device or terminal device is detected.

[0011] Unlike foreground processes that require interaction and therefore occupy and use input and output resources, the steps implemented by the terminal device according to the proposed method are preferably initiated as background processes, i.e., without requiring interaction with the user and / or without occupying or using input and output resources.

[0012] Furthermore, the verification information is transmitted fully automatically from the field device via the wireless data connection (established during the connection). This transmission can be initiated by the terminal device or by the connection.

[0013] After verification has preferably taken place without or independently of user intervention, verification including automatic connection and transmission of verification information may also be referred to as passive verification.

[0014] The detection of the terminal being within the reception range of the field device triggers the start of the linking process, which advantageously causes the transmission of the linking and verification information to take place fully automatically, ie without any manual user intervention.

[0015] In particular, the connection and the further steps up to the verification with the aid of the verification information, preferably all steps, are one or more background activities. These background activities can be carried out autonomously when the screen is locked, when other operating elements of the terminal are locked, when other applications are running and displayed on the terminal and / or independently of any user intervention on the terminal.

[0016] The described automation of the connection and the transmission of the verification information advantageously allows the verification to be performed without user intervention in general. Thus, the mobile terminal only needs to be moved relative to the field device in the area of ​​the installation with one or more field devices without user intervention. Because, in this way, the mobile terminal gradually enters the receiving range of the field device and the field device can be verified fully automatically without user intervention, preferably more frequently than can be done with manual verification.

[0017] Preferably, the mobile terminal is carried by the worker or forms part of a vehicle and in this way accidentally enters the reception range of one or more field devices. This ensures that the (corresponding) field devices can always be checked statistically sufficiently frequently and in particular more frequently than is necessary or was previously customary, thereby ultimately significantly improving operational safety.

[0018] This enables intensive monitoring of field devices and prediction of failure probabilities and thus prediction of facility status. As a result, the risk of failure of facilities or facility components can be significantly reduced in a collaborative manner, which leads to better operational safety, while the demand for human resources for verification is even reduced compared to sparse manual verification.

[0019] It should be understood that regardless of the fully automatic method within the scope of the present invention, a manually triggered verification can be supplemented as needed. In particular, if the fully automatic connection and the transmission of the verification information are not carried out in a timely manner contrary to expectations, statistics are collected for the verification that has been carried out and a manual verification is initiated. For this purpose, a signal or instruction can be sent, for example, via a mobile terminal device. The mobile terminal device can be used to supplement the steps required for the verification manually through a user interface as needed, but the user interface is not used for the automatic verification.

[0020] The verification of the field device or the self-test as the basis for such verification can be carried out or supported at different levels. For example, the verification of the field device or the self-test as the basis for such verification can be carried out at the following different levels:

[0021] Level 0: Verification under continuous measurement without separating the measured value converter and sensor

[0022] Level 1: Verification without disconnecting the measured value converter and sensor, additional interruption of the measuring process by simulating the measured value

[0023] Level 2: With separate sensor and measured value converter / verification by physically feeding in the measuring signal

[0024] In other words, the connection between the measured value converter and the sensor of the field device is preferably not interrupted during the verification. The verification is preferably carried out under continuous measurement without separating the measured value converter and the sensor. The verification under this premise is also referred to as "level 0" verification from now on. Alternatively or additionally, the verification can also be carried out without separating the measured value converter and the sensor, but the measurement work can be interrupted and the measured values ​​can be simulated or replaced in other ways during this period if necessary. The verification under this premise is also referred to as "level 1" verification from now on. The control of one or more levels or different levels can be carried out (fully) automatically by the field device and / or by the terminal device.

[0025] In principle, it is alternatively or additionally possible to operate the system or the installation temporarily with the measurement transducer removed, for example by physically feeding in the measurement signal in order to check the function of the measurement transducer separately and to use the result as the basis for verifying the function of the field device. Preferably, however, physical changes to the field device or the installation are avoided for verifying the function of the field device, in particular, that is, the connection of the measurement transducer to the sensor of the field device is maintained.

[0026] The present invention is explained below with the aid of field devices and terminal devices and can in principle also be implemented using only field devices or only terminal devices. However, it should be understood that the present invention can be expanded. In particular, it is particularly advantageous to use the same or different terminal devices to carry out the verification according to the proposal for multiple field devices in sequence. Alternatively or additionally, it may be particularly advantageous to use the same or different terminal devices to carry out the verification according to the proposal for multiple field devices at the same time. Therefore, in order to verify simultaneously, it can be provided that the same terminal device is connected to multiple field devices at the same time or can be connected at the same time. The features explained in the present invention for one terminal device and one field device can also be applied to multiple field devices, terminal devices and connections accordingly and are particularly advantageous here, especially because these advantages are particularly evident when associated with facilities with multiple field devices.

[0027] Another aspect of the invention relates to a system for carrying out the proposed method, the system comprising a plurality of field devices and at least one mobile terminal device and being designed to fully automatically establish a connection between the terminal device and the field device when the terminal device enters the reception range of the field device and to fully automatically transmit verification information from the field device via a wireless data connection.

[0028] The proposed system is particularly suitable for process-related installations with a large number of field devices and at least one mobile terminal, preferably a plurality of mobile terminals. The movement of one or more terminals through or along the installation advantageously allows a reduction in the verification effort and an increase in operational safety. This is because the proposed system allows verification to be carried out statistically sufficiently frequently and in practice much more frequently than is strictly necessary.

[0029] Another aspect of the invention, which can also be implemented independently, relates to a computer program or a computer program product having a program code or a program code segment, in particular a program code stored on a non-volatile storage medium, which enables the execution of the proposed method when the program code is executed on a processor of a field device or a terminal device.

[0030] The computer program or computer program product offers the advantage that it is simple to implement and can, if necessary, be retrofitted to existing process engineering installations and systems in order to carry out the proposed method.

[0031] A field device within the meaning of the invention is preferably a measuring device or an arrangement having a measuring device, which is intended for preferably permanent and / or stationary use in facilities such as the chemical industry, the food industry and / or the production industry.

[0032] Particularly preferably, the field device in the sense of the present invention is a measuring device for instrumentation, such as a flow measuring device, a flow control device, a level measuring device, a temperature measuring device, a pressure measuring device, a process analysis device, etc.

[0033] Alternatively or additionally, a field device in the sense of the invention is an actuator which preferably has a corresponding measuring device, which can be used in particular for the purpose of self-testing, self-monitoring and / or diagnostics.

[0034] The function of a field device in the sense of the present invention is (always first of all) to measure or to have a measurement or measurement capability, in particular to measure according to specifications. Preferably, the function of the field device comprises measuring one or more measurement results corresponding to the corresponding field device type. For this purpose, the measurement result can be measured using a sensor of the field device. The measurement result can be a parameter or have a parameter. The measurement result particularly shows a flow, a liquid level, a temperature, a pressure, an analysis result, etc. Alternatively or additionally, the function of the field device can also be the operation of an actuator or have the operation of an actuator.

[0035] However, in addition to the measurement, the field device function may also have other functions. For example, the field device function may include converting and / or outputting the measurement results obtained by the measurement. Alternatively or additionally, the field device function may include an alarm, determining one or more supplementary measurement values ​​and / or determining information about the operating state of the field device or the facility.

[0036] A verification in the sense of the invention is preferably a check of verification information to determine the function of the field device or to identify a fault in the field device (missing field device function, in particular a malfunction, such as measuring accuracy, or loss of function), and / or to identify an indication of an impending fault of the field device (fault prediction). The latter advantageously enables replacement or repair of the field device during a later maintenance rotation of the installation with the field device, so that unexpected faults in its operation can be effectively avoided.

[0037] For verification or during verification, the state of the device can be read or transmitted as verification information. This can be done, for example, based on the recommended specification NE107 of NAMUR (Association of Users of Process Automation Technology): 2017-04-10 "Self-monitoring and diagnostics of field devices" (Beuth Publishing House, 2017) or other popular industrial standards / industrial recommended specifications.

[0038] Thus, the verification information enables the determination of a fault, the need for a functional check, out-of-specification operation, and / or the need for maintenance as a result of the verification. The determination may be or include interpretation of the verification information with or without further analysis of the verification information.

[0039] In order to generate verification information, the functionality of components of the field device, in particular electrical components, sensor elements, actuator elements, one or more mechanical components and / or devices for supplying power to the field device, can be checked, wherein the verification information includes the inspection result or is formed by the inspection result or is the inspection result.

[0040] After or as a result of the verification, the output of a verification result, such as an automatic message and / or an alarm, for example in the form of an alarm tone, a corresponding notification or similar measures which draw attention to a situation corresponding to the status, can be initiated.

[0041] For example, a measurement error on the border of a predetermined tolerance range or outside a predetermined tolerance range can form an indication of an impending failure. Alternatively or additionally, a prediction of the measurement error, for example within a time series, can form such an indication of an impending failure. However, other indications that directly or indirectly indicate an impending failure are also possible.

[0042] Due to the intensive checking achieved by the present invention, faults or potential faults can be detected more reliably and / or earlier, and thus faults and the resulting damage can be avoided.

[0043] The verification information in the sense of the invention preferably has raw data which enable conclusions to be drawn about the (normal) function of the field device. Thus, the function of the field device can be verified using the verification information and in particular the raw data.

[0044] The verification information or raw data may be parameters related to the function of the field device, results of self-tests, results of self-monitoring and / or diagnostic results, results of calibration measurements and / or one or more status reports and / or error reports. The verification information particularly comprises the device status and / or (current) measured values ​​of the field device. However, alternatively or additionally, the verification information may also contain other information. Therefore, in addition to the raw data reflecting the function of the field device, the verification information may include a timestamp assigned to these raw data and / or a field device ID for identifying the field device.

[0045] By means of self-testing or self-monitoring and / or diagnosis, a field device can acquire and / or generate information about its state as verification information. The verification information can be suitable for making the measured values ​​of a sensor and / or the functionality of an actuator of the (corresponding) field device plausible and thus verifying the functionality of the (corresponding) field device. Thus, negative effects on the functionality of an installation having one or more field devices due to a field instrument failure can be avoided in an advantageous manner.

[0046] The verification information can be used when planning facility shutdowns etc. The invention thus makes it possible to at least temporarily cancel planned maintenance measures as required and instead to carry out maintenance measures in a condition-oriented manner which are accordingly needs-based or which make it possible to reduce downtimes.

[0047] The mobile terminal device in the sense of the present invention is particularly preferably a smartphone (mobile phone), a tablet, a wearable device (especially a smart watch) or another portable device. The mobile terminal device is preferably equipped for grid-independent operation, i.e., it is supplied with electrical energy, especially via an energy storage device such as a battery or an accumulator. The mobile terminal device is preferably portable.

[0048] The mobile terminal device is preferably connectable to one or more field devices, whereby a wireless connection is established between the (corresponding) field device and the terminal device. For this purpose, the mobile terminal device preferably has a processor and / or an application for executing the proposed method and / or a transceiver for connecting and establishing a wireless data connection. The mobile terminal device may have a user interface, but preferably no user input is required according to the proposed method.

[0049] A connection in the sense of the present invention may be or include a so-called "pairing", i.e. the establishment of a data connection, in particular a point-to-point data connection. The connection may be carried out using a transmission standard which is in particular suitable for and / or common to ad-hoc connections. Particularly preferably, the connection is a WLAN connection, a WPAN connection and / or an NFC connection, for example via Bluetooth and preferably according to the Bluetooth Low Energy (BLE) standard. In principle, however, the connection or the wireless data connection may also be realized using other methods or standards.

[0050] Preferably, the verification information is transmitted from the field device to the terminal device via a data connection and is used by the terminal device itself or by an external application (application program) to generate a verification result.

[0051] A verification result in the sense of the invention may be or form an indication of a functioning (fault) of the field device that is in compliance with the specification or not in compliance with the specification. Alternatively or additionally, the verification result may be or include details about the functioning, such as accuracy information or tolerance information. Very particularly preferably, the verification result includes a prediction about a functioning of the field device that is in compliance with the specification or not in compliance with the specification and / or a treatment recommendation about the field device.

[0052] Preferably, the verification information is transmitted directly or indirectly to the external application via the terminal device or also via other data connections. The external application is preferably a process that is executed or can be executed on a server or in other words on the (Internet) cloud. The external application is preferably implemented in a way that is structurally / spatially separated from the terminal device. However, the functions of the external application can also be implemented in the terminal device. The external application can be a data platform or form a data platform.

[0053] Verification information can be received and evaluated by an external application, so that the external application generates verification results. Alternatively or additionally, the application can receive, reprocess, evaluate, store and / or aggregate in a time series the verification results generated by evaluating the verification information. As needed, this process can be initiated by a mobile terminal device. Optionally, the external application provides information for checking the verification requirements, which can be used to check whether the verification of the corresponding field equipment should be carried out at the current time point. The external application can optionally manage multiple field devices of the facility. However, management can also be carried out in other ways and the application can also include multiple modules for different functions, which can be implemented in different locations. The application can provide its functions for multiple or all terminal devices.

[0054] The reception range in the sense of the present invention preferably extends from the (corresponding) field device to a region at a certain distance from the (corresponding) field device, up to which a connection to a terminal device or a data connection can be established, for example. The reception range can be formed or influenced by the transceiver or antenna of the field device.

[0055] In the present invention, for the sake of clarity and brevity, we are talking about the reception range of the (corresponding) field device. Nevertheless, the reception range can be affected by the terminal device, in particular by the transmission characteristics or reception characteristics of the terminal device. If the transmission characteristics or reception characteristics of the terminal device are better or worse, this may cause the reception area to expand or shrink. Therefore, the term "reception range of the field device" can be understood as an area in which a connection can be made, which is jointly affected by the combination of the field device and the terminal device or can be replaced by it. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] Further advantages, features and aspects of the invention are derived from the claims and the subsequent description of preferred embodiments with the aid of the accompanying drawings, in which:

[0057] Figure 1 shows a simplified schematic diagram of a system according to the proposal; and

[0058] Figure 2 A schematic flow chart of the verification according to the proposal is shown.

[0059] The same reference numerals are used for the same or similar components in the drawings, wherein corresponding or similar characteristics and advantages can be achieved even if they are not described again in detail. DETAILED DESCRIPTION

[0060] Figure 1 A system 1 according to the proposal is shown in a simplified schematic diagram. The system 1 has at least one field device 2A, 2B, 2C.

[0061] In the example shown, the system 1 has three field devices 2A, 2B, 2C. However, more, fewer or other field devices 2A, 2B, 2C can also be provided. The corresponding field devices 2A, 2B, 2C can have the same or different field device functions. They preferably form a common, preferably process-technical installation component.

[0062] In accordance with Figure 1 In the example shown, a first flow measurement device 2A preferably based on the Coriolis effect, a second flow measurement device 2B preferably based on ultrasound, and a third level measurement device 2C preferably based on radar are exemplarily involved. However, the present invention is also advantageous for other field devices, so the field device types given are only examples.

[0063] Preferably, the field devices 2A, 2B, 2C each have a connection 3 between a measured value transducer 4 and a sensor 5. The respective field devices 2A, 2B, 2C can have different sensors 5.

[0064] The sensor 5 is preferably designed to measure one or more physical and / or chemical variables, preferably process variables, in particular flow, level, pressure, temperature and / or one or more physical and / or chemical properties of a medium, or for liquid analysis.

[0065] The present invention is particularly advantageous in process technology applications, in particular in the operation and monitoring of large process technology installations with a plurality of field devices 2A, 2B, 2C. However, the present invention is preferably not limited thereto, so that the sensor 5 can also measure other variables than the specified variable and the present invention can also be advantageous in this case.

[0066] The measured value converter 4 preferably forms an interface between the sensor 5 and an external device such as an installation control. In particular, the measured value converter can convert the physical and / or chemical variables directly measured by the sensor 5 into measurement data or parameters as measurement results, which preferably correspond to the physical and / or chemical variables or are derived therefrom.

[0067] The measured value transducer 4 can have a display device 4A for displaying measurement results or operating states of the field devices 2A, 2B, 2C. Alternatively or additionally, the measured value transducer 4 has a preferably wired interface 4B which is designed to output measurement results determined by the sensor 5 .

[0068] The measured value converter 4 preferably has a radio interface 4C, via which the field device function, in particular the measuring accuracy or fault detection, can be checked. The radio interface 4C is preferably a transceiver which operates with a data transmission protocol, such as Bluetooth, in particular Bluetooth LE (BLE), or other protocols, such as WPAN protocols, WLAN protocols or NFC protocols.

[0069] The field device 2A, 2B, 2C preferably generates the verification information 6 autonomously or in response to a corresponding instruction or is designed for this purpose.

[0070] Preferably, device-type-dependent and possibly at least partially different verification information 6 is generated by the different field devices 2A, 2B, 2C and / or is evaluated during or for the verification. Preferably, therefore, different requirements are checked during the verification according to the corresponding verification information 6, depending on the device type or sensor 5 of the respective field device 2A, 2B, 2C.

[0071] In the following, by way of example, one of the field devices 2A, 2B, 2C, namely firstly Figure 1 The invention is explained in detail with reference to the field device 2A shown on the left in the figure, wherein the different field devices 2A, 2B, 2C preferably all have the characteristics described by way of example with reference to the field device 2A, unless otherwise stated or implied. The primary functions or the nature of the sensors 5 of the respective field devices 2A, 2B, 2C may be different, but the basic steps, characteristics and advantages of the proposed verification are preferably the same for the field devices 2A, 2B, 2C, and are therefore not described in detail.

[0072] According to the proposal, the field device function of the first field device 2A is checked. For this purpose, the field device function is checked based on the verification information 6. For this purpose, the verification information 6 can have one or more operating parameters of the field device 2A or the sensor 5 that are relevant to the operation of the field device 2A and in particular self-test results (preferably the results of one or more device-internal test methods), which are checked. For the purpose of checking, the verification information 6, i.e. the operating parameters or the self-test results, can be analyzed with respect to expected values, reference values, tolerance ranges, development trends, specifications, etc.

[0073] If no irregularities are detected during the check, the verification is successful. If irregularities are detected during the check, such as deviations from expected values, reference values, tolerance values, specifications, etc., the verification fails. A failed verification preferably results in a signal being emitted, such as a message or an alarm, for example, via the terminal 8 or another output device.

[0074] like Figure 1 As schematically shown in FIG. 8 , a connection 7 is established between the mobile terminal 8 and the field device 2A, whereby a wireless data connection 9 is established between the field device 2A and the terminal 8 .

[0075] The mobile terminal device 8 can have a display device 8A, such as a screen, in particular a touch screen. Alternatively or additionally, the mobile terminal device 8 has a radio interface 8B, via which the connection 7 can be made. The radio interface 8B is preferably a transceiver that operates using a data transmission protocol, such as the Bluetooth protocol, in particular the Bluetooth LE (BLE) protocol, or other protocols, such as the WPAN protocol, the WLAN protocol or the NFC protocol.

[0076] The radio interface 8B of the mobile terminal 8 preferably corresponds to the radio interface 4C of the field device 2A or the measurement value converter 4. The radio interfaces 4C, 8B are designed to initiate a connection 7. For this purpose, available connection partners (ready-to-connect field device 2A and ready-to-connect mobile terminal 8) can be detected within the reception range 10 and a connection process can be started to establish a wireless data connection 9.

[0077] The wireless data connection 9 is preferably a wireless point-to-point connection. An Ad-hoc network can be formed or extended by the connection 7. However, other forms of data connection 9 are also feasible.

[0078] According to the proposal, the connection 7 is fully automatically carried out when the terminal device 8 enters the receiving range 10 of the field device 2A. It can therefore be provided that the terminal device 8 moves relative to the field device 2A, such as Figure 1 As shown by the dashed arrow in the middle, the terminal device 8 enters the receiving range 10 of the field device 2A during this movement 20 .

[0079] After the wireless data connection 9 has been established, the verification information 6 is transmitted from the field device 2A via the wireless data connection 9 and the field device functionality of the field device 2A is verified using the verification information 6 .

[0080] In the example shown, the field device 2A generates verification information 6 which is preferably transmitted fully automatically from the field device 2A to the mobile terminal device 8 or via the mobile terminal device 8 via the wireless data connection 9 .

[0081] Figure 2 A schematic flow chart of the verification according to the proposal is shown with the aid of the steps S1 to S6 which are arranged in sequence in time. It should be understood that it is in principle possible to skip one or more of the steps S1 to S6, to insert steps and / or to execute only some of the steps S1 to S6 preferably while maintaining the sequence shown.

[0082] In a first step S1 , it is preferably first checked whether a connection 7 is to be established between the mobile terminal 8 and the field device 2A.

[0083] In a first step S1, the method can begin with the identification of a connectable pair consisting of a field device 2A and a mobile terminal device 8. To this end, the mobile terminal device 8 can identify the connectable field device 2A.

[0084] Figure 2 , the field device 2A is shown by way of example by means of a selection box as being ready for connection 11. In particular, the radio interface 4C of the field device 2C is then ready to establish a wireless data connection 9 with the mobile terminal 8 or its radio interface 8B by means of a connection 7.

[0085] The terminal device 8 can continuously search for field devices 2A, 2B, 2C that are ready to connect 11, and / or the field devices 2A, 2B, 2C can continuously search for terminal devices 8 that are ready to connect. If a field device 2A and / or terminal device 8 that can be connected is found, the connection 7 is performed fully automatically. However, the connection 7 can be performed or not performed or interrupted according to the conditions, as described in detail below.

[0086] Alternatively, however, it is preferred to check the verification request 12. The verification request 12 specifies whether a verification of the field device 2A is currently to be carried out.

[0087] If a check verification requirement 12 is specified, the generation of verification information 6 for verification purposes, the connection 7, the transmission of verification information 6 and / or the evaluation of verification information 6 are preferably performed only when the verification requirement 12 is checked and met.

[0088] Preferably, the verification requirement 12 is met or can be met when, according to the information used for checking, the verification requirement 12 exists, in particular when the mark 13 assigned to the field device 2A exists and / or the current time point 14 is within the verification interval 15 assigned to the field device 2A.

[0089] It can then be checked, preferably by the mobile terminal 8, whether the field device 2A should be verified at the current time 14. For this purpose, information indicating that the field device 2A should be verified can be stored. For example, there can be Figure 2 A flag 13 is indicated by a selection box in the field device 2A, wherein the verification requirement 12 is met or can be met when the flag 13 assigned to the field device 2A is present.

[0090] Alternatively or additionally, one or more verification intervals 15 (time intervals) can be defined. Here, the verification requirement 12 is met or can be met when the current time point 14 is within the verification interval 15 assigned to the field device 2A. This is also the case in Figure 2 The process is shown in step S1.

[0091] The identification 13 and / or the verification interval 15 are assigned to the field device 2A and are therefore Figure 2 The marking 13 and / or the verification interval 15 may be stored in the field device 2A. However, alternatively or additionally, it is feasible and preferred that the marking 13 and / or the verification interval 15 exist in the mobile terminal device 8 or are obtained therefrom.

[0092] An external application A can be provided, which is data-connected to the terminal device 8, for example via a mobile communication network and / or the Internet. The external application A is in particular a server application and / or a (Internet) cloud application. The application A can be or include a data platform. When a plurality of terminal devices 8 are provided, the external application A is preferably a central device for all terminal devices 8.

[0093] Application A can receive, evaluate and / or archive verification information 6. It can in particular integrate verification information 6 and / or aggregate from different points in time and make predictions on this basis. Alternatively or additionally, application A controls the verification process, preferably via one or more terminal devices 8.

[0094] The application A can be used to determine whether the verification requirement 12 is met for the field device 2A. For this purpose, the flag 13 and / or the verification interval 15 can be stored in the application A. Thus, the field device 2A can be marked in the application A as “to be tested”.

[0095] The mobile terminal device 8 can then use the application A to check the verification requirement 12. For example, the terminal device 8 obtains the field device ID 23 of the field device 2A, forwards it to the application A, and obtains information from the application whether the verification requirement 12 is met.

[0096] A flag 13 and / or a verification interval 15 can be defined for each field device 2A and / or in the application A, for example to be repeated “as often as possible” or once every hour / day / ...

[0097] The verification interval 15 can start after a phase in which verification is not possible or is not required and / or verification requirements 12 are not met. The verification interval 15 can be derived, for example, from statutory or enterprise boundary conditions and / or from facility-specific or field device-specific boundary conditions, such as boundary conditions for the availability of verification information 6.

[0098] The verification interval 15 is preferably reset when the verification is completed. In particular, when the verification is completed, a phase in which verification is not possible or is not required and / or verification requirements 12 are not met begins, and after this phase, the next verification interval 15 begins.

[0099] Preferably, a self-test of the field device 2A, in particular a level 1 test (measurements of the field device 2A are not interrupted) is started within the verification interval 15 when the field device 2A is marked and / or when connected 7. The self-test of the field device 2A can be triggered (automatically) at or after the connection 7. This enables automated testing of the field device 2A, in particular of field devices installed in batch applications.

[0100] If the field device 2A supports level 2 testing (measurement interruption of the field device 2A), a level 2 self-test of the field device 2A can alternatively or additionally be started within the verification interval 15 and / or when the field device 2A is marked at or after the connection 7 .

[0101] In a particularly advantageous embodiment of the invention, verification request 12 is derived taking into account a connection probability, based on which another connection 7 or connectability of field device 2A to terminal 8 located within its reception range 10 is expected later within verification interval 15 .

[0102] If the result of checking the remaining duration of the verification interval 15 (between the current time point 14 and the end of the verification interval 15) shows that the connection probability is too small or is below a certain threshold, the verification requirement 12 is met or can be met.

[0103] If the connection probability within the remaining duration of the check interval 15 is sufficiently high or lies above a threshold value, the check at the current time 14 (self-test of the connection 7 / field device 2A) can be disregarded and a check can be performed accordingly at a later time in the check interval 15 .

[0104] For example, after identifying the field device 2A, the mobile terminal device 8 sends a pairing message corresponding to the field device 2A and / or a query for the verification requirement 12 of the field device 2A to the application A. Based on the pairing message or the query, the application A checks with what probability another connection 7 will occur within the verification interval 15, and only when it is expected to leave the verification interval 15 before the next connection 7, the mobile terminal device 8 instructs to start other steps for verification or start the self-test of the field device 2A.

[0105] Example 1: Verification is expected to be performed every 12 hours. The last verification was performed 8 hours ago. The mobile terminal device 8 is moved past the field device 2A approximately every 30 minutes → no new verification is started.

[0106] Example 2: A verification is expected every 12 hours. The last verification was 8 hours ago. The mobile terminal device 8 is moved past the field device 2A approximately every 300 minutes. A new verification is started.

[0107] Example 3: Verification is expected to be performed every 12 hours. The last verification occurred 8 hours ago. The mobile terminal device 8 is moved past the field device 2A to be verified approximately every 30 minutes. However, the verification interval 15 ends early, for example, at 17 o'clock, the shift ends and there is no night shift → start a new verification

[0108] Preferably, the connection 7 is made or the wireless data connection 9 is established in the second step S2 when the field device 2A is ready for connection 11 and has been checked and meets the verification requirements 12. However, the connection 7 can also be made first before the verification requirements 12 are checked.

[0109] The generation of verification information 6 or parts of verification information 6 can take place continuously or during operation of the field device 2A by time control at one or more predetermined time points and / or by event control, for example depending on certain boundary conditions, such as monitored measurement behavior of sensor 5.

[0110] In principle, it can also be provided that the verification information 6 is already present at the time of the connection 7. This can be the case if the verification information 6 is continuously or constantly generated. For this purpose, the field device 2A can even independently (in the background) perform one or more self-tests or the rest of the verification including the generation of the verification information 6 without the connection 7.

[0111] The verification information 6 can be stored or temporarily stored in the device memory 18 of the field device 2A. The verification information 6 stored or temporarily stored in the device memory 18 can be forwarded by the field device 2A during or after the connection 7, in particular sent by the field device or called up / read by / via the mobile terminal 8. In this case, the verification information 6 is preferably transmitted via the data connection 9.

[0112] Differently, according to Figure 2 In the example shown in FIG. 1 , the self-test control command 16 is forwarded from the terminal device 8 to the field device 2A via the data connection 9 . Figure 2 This process is shown in step S3. After the field device 2A receives the self-test control command 6, the field device 2A can perform a self-test and thereby generate verification information 6.

[0113] Forwarding of the self-test control command 16 via the data connection 9 can be done as follows Figure 2 In step S4 , it is indicated by clock symbols that a waiting time 17 is involved while the verification information 6 is being generated.

[0114] In accordance with Figure 2 In the example shown, the verification information 6 is forwarded from the field device 2A to the mobile terminal 8 via the existing data connection 9. Alternatively or additionally, it is possible to forward the verification information to the application A via the mobile terminal 8. Such forwarding can in principle also take place independently of the mobile terminal 8.

[0115] The terminal device 8 can function as a bridge, gateway or router between the field device 2A and other components, such as application A. Therefore, the terminal device 8 can receive the verification information 6 via the wireless data connection 9 and transmit it via another medium or network, such as a mobile communication network and / or the Internet, preferably to the application A.

[0116] like Figure 2 As schematically shown in step S5 of , the verification information 6 may include raw data 21, a timestamp 22 and / or a field device ID 23. The raw data 21 contains information that enables verification of the field device function. The raw data is in particular a parameter representing the operation or self-test result of the field device 2A.

[0117] The verification information 6 is preferably evaluated. This can take place within the mobile terminal 8. Alternatively or additionally, the verification information 6 can be forwarded to an external application A, which in turn causes the verification information 6 to be evaluated.

[0118] The verification information 6 is preferably evaluated with regard to the state of the field device 2A, with regard to a process carried out with the field device 2A and / or for predicting a possible failure or a probability of failure of the field device 2A.

[0119] Thus, current raw data 21 or data derived therefrom, for example aggregated therefrom, can be compared with corresponding historical data 19 in time series and / or with reference values ​​and / or threshold values. Alternatively or additionally, a change trend can be determined based on the raw data 21 or data derived therefrom.

[0120] In one aspect of the present invention, a prediction is made for the function of a field device. Based on the prediction, it can be evaluated whether a failure is foreseeable or probabilistic. Accordingly, maintenance, repair or replacement is performed before the failure occurs.

[0121] The prediction can be generated based on the raw data 21, data derived from the raw data and / or trends. In principle, however, other forms of evaluation of the verification information 6 can also be performed for the purpose of prediction.

[0122] In particular, a prediction is made of a possible failure or failure probability of the field device 2A based on historical data 19, in particular one or more time series, wherein the historical data 19, in particular one or more time series, is equivalent to or corresponds to the original data 21 at one or more earlier time points, data derived from the original data and / or a change trend.

[0123] In one aspect of the invention, raw data 21 or parts of raw data are generated at a plurality of different consecutive time points, and a time series is directly generated from these raw data or from data derived therefrom. For this purpose, a time stamp 22 and / or a field device ID 23 can be used, but this is not mandatory.

[0124] The verification result 24 may reflect whether the verification was successful, that is, whether the evaluation of the verification information 6 indicates that there is no abnormality in the function of the field device, such as a sign of an existing or impending failure. The verification result may be or include details about the function of the field device 2A, such as accuracy information or tolerance information, a prediction about whether the function of the field device meets or does not meet the specification, and / or a treatment suggestion for the field device.

[0125] like Figure 2 As shown in step S6 in , the verification information 6 or the verification result 24 generated by evaluating the verification information can be sent to the (external) application A. Particularly preferably, the application A receives the verification information 6 and analyzes it to generate the verification result 24 .

[0126] The mobile terminal 8 can establish a connection between the field device 2A and the Internet, via which a data connection exists to the application A. Alternatively or additionally, however, it is possible for the application A to run on the mobile terminal.

[0127] Generating verification information 6, connecting 7, transmitting verification information 6 and / or evaluating verification information 6 for verification are preferably one or more background activities. In particular, they are processes running on mobile terminal device 8, field device 2A and / or application A without requiring user intervention.

[0128] In this regard, preferably, background activities are also carried out fully automatically on the terminal 8 according to the proposed method, while the user interface of the mobile terminal 8, which can be formed by the touch-sensitive display device 8A, is locked from logging in or processing inputs.

[0129] The locked mobile terminal device 8 therefore preferably performs the steps required for the connection 7 fully automatically and then forwards the verification information 6 - in the case of forwarding the self-test control command 16 from the mobile terminal device 8 to the field device 2A or by calling up the verification information 6 already stored in the field device 2A. The evaluation of the verification information 6 and / or the generation of the verification result 24 and / or the generation of the time series are also preferably carried out fully automatically and / or as a background activity.

[0130] The data connection 9 is preferably disconnected automatically when the verification information 6 has been completely or partially transmitted and / or when the mobile terminal 8 leaves the reception range 10. If the transmission of the verification information 6 has not yet been (completely) realized by the time the data connection 9 is disconnected, the transmission is preferably carried out / completed at the next connection 7 of the one or other mobile terminal 8 to the same field device 2A.

[0131] It is emphasized again at this point that the described aspects of the invention preferably apply accordingly to further field devices of the field devices 2A, 2B, 2C and / or to further mobile terminal devices 8. In particular, therefore, with regard to the described aspects, the field device 2A can be supplemented or replaced by one or more further field devices 2B, 2C.

[0132] Preferably, when the mobile terminal 8 enters the (other / other) reception range 10 of the different field devices 2A, 2B, 2C, by means of Figure 2 The aspects described in connection with the field device 2A also apply correspondingly to the other field devices 2A, 2B, 2C.

[0133] As in Figure 1 As indicated by the dashed arrow in the figure, the mobile terminal device 8 is preferably moved relative to one or more field devices 2A, 2B, 2C. During the movement 20, the connection 7 is then automatically established and / or the verification information 6 is automatically transmitted from the corresponding field device 2A, 2B, 2C via the wireless data connection 9 during the movement 20.

[0134] Particularly preferably, the mobile terminal device 8 successively enters the receiving range 10 of different field devices 2A, 2B, 2C by moving 20 relative to the field devices 2A, 2B, 2C, thereby transmitting the corresponding verification information 6 of the corresponding field devices in the different field devices 2A, 2B, 2C and can verify the corresponding field devices in the different field devices 2A, 2B, 2C on this basis.

[0135] In the example, one or more mobile terminal devices 8 are moved into the area of ​​a facility or system 1, which has field devices 2A, 2B, 2C. During this period, the mobile terminal device 8 searches for field devices 2A, 2B, 2C that can be connected in the background / without user intervention, for example, using BLE connectivity. Once such a field device 2A, 2B, 2C is found, the mobile terminal device 8 automatically pairs, that is, connects 7 with the corresponding field device of the field devices 2A, 2B, 2C. In this case, one or more of the following steps are preferably performed:

[0136] The mobile terminal device 8 sends a pairing message to the application A, wherein the pairing message may include the field device ID and / or the current time point.

[0137] The mobile terminal 8 checks the verification information 6 already present in the memory 18 of the connected field device in the field device 2A, 2B, 2C and downloads this verification information from the field device 2A, 2B, 2C, preferably into the application A.

[0138] The mobile terminal 8 checks the necessity and possibility of a (re)authentication with the aid of the application A.

[0139] The mobile terminal 8 sends the time stamp 22 to the field device 2A, 2B, 2C and / or to the application A as required and in particular in a clock-synchronous manner and starts the verification of the field device 2A, 2B, 2C.

[0140] The mobile terminal 8 continues to move, which results in the connection 7 being disconnected and / or the connection 7 being automatically cut off.

[0141] Optionally, the application A generates a verification certificate from the verification information 6 or the verification result 24 and forwards or outputs the certificate if necessary.

[0142] If the field devices 2A, 2B, 2C do not have a real-time clock, they receive the current time 14 and / or the check interval 15 as required via the mobile terminal 8 (subsequent configuration during connection 7 ).

[0143] During the connection 7 , preferably only the corresponding current verification information 6 is downloaded from the field device 2A, 2B, 2C and uploaded to the application A as required.

[0144] In a further aspect of the invention, the verification information 6 is transmitted separately by means of a plurality of connections 7 of the field devices 2A, 2B, 2C to the same or different terminal devices 8 that follow one another in time.

[0145] It can therefore be provided that the time period during which the mobile terminal 8 is within the reception range 10 of the respective field device 2A, 2B, 2C is not sufficient for the complete forwarding of the verification information 6. In these cases, it is preferred that the partial or step-by-step forwarding of the verification information 6 takes place by means of multiple connections 7, possibly even to different mobile terminals 8. The complete verification information 6 can then be assembled, for example, by means of the application A.

[0146] In other words, if the terminal device 8 leaves the reception range 10 (reception radius) of the field device 2A, 2B, 2C too quickly while transmitting the verification information 6 and / or during the self-test, the verification information 6 can be fragmented and transmitted to the application A within multiple connections 7.

[0147] In summary, the present invention can advantageously be used to verify the field device functions of multiple different field devices 2A, 2B, 2C in an incidental manner without user intervention based on a method that is implemented as a background activity according to the suggestion, wherein a mobile terminal device 8 is moved and here (accidentally / incidentally) enters the acceptance range 10 of different field devices 2A, 2B, 2C, wherein the connection 7 of the mobile terminal device 8 to the corresponding different field devices 2A, 2B, 2C is carried out fully automatically, which subsequently causes the generation and / or calling of verification information 6 of the corresponding field devices 2A, 2B, 2C and the evaluation of the verification information 6 and causes the verification of the field device functions of the corresponding field devices 2A, 2B, 2C by deriving the verification results 24 of the corresponding field devices 2A, 2B, 2C from the verification information 6.

[0148] The proposed method is preferably applied in a proposed system 1 having at least one terminal device 8 and a plurality of field devices 2A, 2B, 2C, which is designed to carry out the proposed method. Therefore, in the system 1, the field devices 2A, 2B, 2C and one or more mobile terminal devices 8 are preferably designed to correspond to each other so that a verification can be carried out using the method according to the invention.

[0149] Particularly preferably, a background process runs on the processor 8C of the mobile terminal 8 , which background process is designed to detect the field device 2A, 2B, 2C when the reception range 10 of the field device 2A, 2B, 2C is reached and subsequently initiate a connection 7 according to the suggestion.

[0150] Furthermore, the background process is preferably designed to send a self-test control command 16 to the connected field devices 2A, 2B, 2C and to receive a verification message 6 as a response, which can then be evaluated, also without user input. To this end, the terminal device 8 can evaluate the verification message 6 and / or forward the verification message 6 to the application A, which can then evaluate it.

[0151] The verification information 6 is forwarded to the field devices 2A, 2B, 2C in order to verify the field device functions of the corresponding field devices 2A, 2B, 2C.

[0152] Background processes are preferably provided on the (corresponding) field devices 2A, 2B, 2C and one or more mobile terminal devices 8, which can automatically implement the recommended connection 7 and / or forward verification information 6 to verify the field device functions of the corresponding field devices 2A, 2B, 2C without user intervention.

[0153] Furthermore, a computer program product 25 is preferably provided, which has computer code segments which, when run on a processor 4D, 8C of a field device 2A, 2B, 2C and / or one or more terminal devices 8 of the system 1 , cause the steps of the proposed method to be performed.

[0154] Preferably, the program code segments are stored, preferably in a non-volatile manner, in the device memory 18 of the (corresponding) field device 2A, 2B, 2C and / or in the terminal memory 26 of the mobile terminal 8. To carry out the proposed method, the program code segments can be read and executed on the processor 8C of the mobile terminal 8 and / or on the processor 4D of the corresponding field device 2A, 2B, 2C.

[0155] Individual aspects of the invention can be implemented separately from one another and / or combined with one another in different ways and function in a synergistic manner and / or be advantageous, even if this is not explicitly stated.

[0156] Reference numerals list

[0157] 1 System 16 Self-test control commands

[0158] 2A Field Device 17 Waiting Time

[0159] 2B field device 18 device memory

[0160] 2C field equipment 19 historical data

[0161] 3 connections 20 moves

[0162] 4 Measurement value converter 21 Raw data

[0163] 4A Display device 22 timestamp

[0164] 4B interface 23 field device ID

[0165] 4C Radio Interface 24 Verification Results

[0166] 4D processor 25 computer program product

[0167] 5Sensors 26Terminal device memory

[0168] 6. Verify information

[0169] 7Connect A application

[0170] 8 Mobile terminal equipment t time

[0171] 8A Display device S1 First step

[0172] 8B Radio Interface S2 Second Step

[0173] 8C Processor S3 Step 3

[0174] 9Wireless Data Connection S4 Step 4

[0175] 10 Acceptance range S5 Fifth step

[0176] 11 Connection ready S6 Step 6.

[0177] 12Verification requirements

[0178] 13 Mark

[0179] 14 Time Point

[0180] 15 Verification interval

Claims

1. A method for verifying a field device function of a field device (2A, 2B, 2C), the method preferably being performed during an uninterrupted connection between a measured value transducer (4) and a sensor (5) of the field device (2), in, The field device (2A, 2B, 2C) generates verification information (6), using which the function of the field device can be verified, wherein a connection (7) is established between a mobile terminal device (8) and the field device (2A, 2B, 2C), thereby establishing a wireless data connection (9) between the field device (2A, 2B, 2C) and the mobile terminal device (8); and wherein the verification information (6) is transmitted from the field device (2A, 2B, 2C) via the wireless data connection (9) and the field device function of the field device (2A, 2B, 2C) is verified using the verification information (6), It is characterized in that When the mobile terminal device (8) enters the receiving range of the field device (2A, 2B, 2C), the connection (7) is carried out fully automatically, and the verification information (6) is transmitted fully automatically from the field device (2A, 2B, 2C) via the wireless data connection (9).

2. The method according to claim 1, characterized in that The mobile terminal device (8) continuously searches for a field device (2A, 2B, 2C) that is ready for connection (11), or the field device (2A, 2B, 2C) continuously searches for a mobile terminal device (8) that is ready for connection (11), and when such a field device (2A, 2B, 2C) and / or mobile terminal device (8) is found, the connection (7) is performed fully automatically.

3. The method according to claim 1 or 2, characterized in that: The generation of the verification information (6) for verification purposes, the connection (7), the transmission of the verification information (6) and / or the evaluation of the verification information (6) are one or more background activities.

4. The method according to any one of the preceding claims, characterized in that When the verification requirements (12) have been checked and met, the verification information (6) is generated for verification purposes, the connection (7), the transmission of the verification information (6) and / or the evaluation of the verification information (6) is carried out.

5. The method according to claim 4, characterized in that The verification requirement (12) is met or can be met when there is a mark (13) assigned to the field device (2A, 2B, 2C) and / or the current time point (14) is within a verification interval (15) assigned to the field device (2A, 2B, 2C).

6. The method according to claim 5, characterized in that The verification request (12) takes into account a connectability probability, by means of which another connectability of the field device (2A, 2B, 2C) with a mobile terminal device (8) located within the range of the field device is predicted later in the verification interval (15).

7. The method according to any one of the preceding claims, characterized in that The generation of the verification information (6) is carried out by a self-test performed by the field device (2A, 2B, 2C) and / or is initiated in a time-controlled manner and / or in an event-controlled manner and / or via the wireless data connection (9).

8. The method according to any one of the preceding claims, characterized in that The verification information (6) is temporarily stored in a device memory (18) of the field device (2A, 2B, 2C), wherein the verification information (6) temporarily stored in the device memory (18) is read from the device memory (18) when the field device (2A, 2B, 2C) is connected (7) to the mobile terminal device (8), and the verification information (6) is transmitted via the wireless data connection (9).

9. The method according to any one of the preceding claims, characterized in that The verification information (6) is evaluated with respect to the following aspects: regarding the status of the field device (2A, 2B, 2C), regarding the process performed using the field device (2A, 2B, 2C) and / or for predicting possible failures or failure probabilities of the field device (2A, 2B, 2C), preferably, the verification information is evaluated based on historical data (19), in particular, the verification information is evaluated based on a time series.

10. The method according to any one of the preceding claims, characterized in that The mobile terminal device (8) is moved relative to the field device (2A, 2B, 2C) and the connection (7) is automatically performed during the movement (20) and / or the verification information (6) is automatically transmitted from the field device (2A, 2B, 2C) via the wireless data connection (9) during the movement (20).

11. The method according to any one of the preceding claims, characterized in that The verification information (6) is transmitted separately by multiple connections (7) of the field device (2A, 2B, 2C) to the same or different mobile terminals (8) in succession in time.

12. The method according to any one of the preceding claims, characterized in that The verification information (6) includes the original data (21), the associated time stamp (22) and / or the field device ID (23) of the field device (2), and / or, Generating a verification result (24) by evaluating the verification information (6), preferably, wherein the verification information (6) is received and evaluated by a preferably cloud-based application (A), in particular by a data platform, and / or After the verification information (6) is completely or partially transmitted, the wireless data connection (9) is automatically disconnected.

13. The method according to any one of the preceding claims, characterized in that The field device functionality of a plurality of field devices (2A, 2B, 2C) is checked using a method according to one of the preceding claims.

14. A system (1) comprising at least one mobile terminal device (8) and at least one field device (2A, 2B, 2C), wherein: The system (1) is designed to carry out the method according to any one of the preceding claims.

15. A computer program product (25) having a program code segment, which, when the program code segment is run on the processor (4D, 8C) of the field device (2A, 2B, 2C) and the mobile terminal device (8) of the system (1) according to claim 14, causes the method according to any one of claims 1 to 13 to be executed.

Images