System and method for recovering or transmitting parameters necessary for operation to components of modular automation system

Abstract

A system and method are disclosed for recovering parameters necessary for operation, or for transmitting the parameters to a first component of a modular automation device. The method comprises dividing parameters necessary for operation into a first parameter set enabling a first component to communicate with a server to which a network connection of the automation device is connectable, and a second parameter set enabling a second component to communicate with the server through the network connection of the automation device; the method also includes storing the first set of parameters on one or more second components of the modular automation device and storing the second set of parameters on the server.

Description

Technical Field

[0001] The present invention relates to a system and method for recovering parameters necessary for operation.

[0002] Or a system and method for transmitting to components of a modular automation system. Background Art

[0003] Automation components must often be tailored to their use in a specific environment within the framework of a configuration.

[0004] When a component fails, it must be repaired or replaced with a new component of the same structure. In both cases, the component must be adapted to the specific environment.

[0005] Use the re-adaptive adjustment component. Summary of the Invention

[0006] The method according to the present invention is used for recovering or transmitting parameters required for operation to a first component of a modular automation device, comprising: dividing the parameters required for operation into a first parameter group and a second parameter group, the first parameter group enabling the first component to communicate with a server, which can be contacted via a network connection of the automation device; storing the first parameter group on one or more second components of the modular automation device; and storing the second parameter group on the server.

[0007] Here, "parameters necessary for operation" as used in the description and claims are understood to mean in particular parameters without which the first component cannot (or at most can only) operate.

[0008] Its purpose of use as part of a modular automation system can be achieved to a rather limited extent.

[0009] Furthermore, the expression "the first parameter set enables the first component to communicate with a server, which is reachable via a network connection of the automation device" used in the description and claims should be understood in particular as follows: the first parameter set is necessary for establishing the network connection. For example,

[0010] If the communication component is already connected to the server (or can establish a connection to the server if necessary) and can forward messages or payloads from the first component to the server and from the server to the first component, then a first parameter set may be required to establish a connection between the component and the dedicated communication component of the modular automation device.

[0011] Here, the concept of "server" used within the scope of the description and claims is particularly understood as an electronic network component that provides data and / or services to a series of modular automation devices, where such data and / or services can be requested or invoked by the modular automation devices or components of the modular automation devices. Additionally, the concept of "component" used in the description and claims is particularly understood as an electronic device that includes a processor and a memory (where various instructions executable by the processor are stored in the memory), and the electronic device optionally includes sensors and / or actuators, configured to connect to sensors or actuators or configured to establish connections with sensors and actuators. A first component can be, for example, an input / output module (I / O module) or a front end of a modular automation device, where the automation device is configured in the form of a modular fieldbus node that includes a front end and a plurality of I / O modules serially arranged on the front end.

[0012] In this regard, the concept of "front end" used within the scope of the present description is to be understood as a component of a modular fieldbus node, and the task of this component is to make the data and / or services of the I / O modules serially arranged on the front end available via the fieldbus connected to the front end. Additionally, the concept of "I / O module" used within the scope of the present description is particularly understood as an electronic device that can be serially arranged on the front end or serially arranged during operation, and this electronic device connects one or more field devices to the front end and optionally (via the front end) to a superior control device.

[0013] The I / O module can have one or more input terminals and / or output terminals, which are configured to connect to field devices that provide status signals or process control signals. In this regard, the concept of "field device" used within the scope of the present description is particularly understood as sensors and / or actuators (signal-technically) connected to the I / O module (such as connected to the I / O module). Additionally, the concept of "input terminal" or "output terminal" used within the scope of the present description is particularly understood as electrical terminals, such as connection posts.

[0014] If field devices are connected to an I / O module, it may be necessary to configure the I / O module to operate the field devices. The configuration can be carried out in the following way: Transmit the parameters necessary for operation to the I / O module. By means of the configuration, for example, it can be specified which data are to be derived from the signals read in at the input of the I / O module and, if necessary, transmitted to the front end. In addition, by means of the configuration, it can be specified which signals are to be derived from the data received at the front end and, if necessary, output at the output of the I / O module. In addition, after the initial configuration, it may be necessary to change or update the parameters necessary for operation stored on the I / O module, for example when the assigned tasks and / or the environment of the I / O module change or when a defective I / O module has to be replaced.

[0015] If the front end is put into operation or (other) I / O modules are cascaded to the front end, it may be necessary to configure the front end (to operate the I / O modules). By means of the configuration, for example, it can be specified how the front end communicates with the superior control unit and whether the data of the I / O module (or which data of the I / O module) are processed by the front end or forwarded to the superior control unit. In addition, by means of the configuration, it can be specified whether the data of the superior control unit (or which data of the superior control unit) are processed by the front end or forwarded to the I / O module. In addition, after the initial configuration, it may be necessary to change or update the parameters necessary for operation stored on the front end, for example when the assigned tasks and / or the environment of the front end change or when a defective front end has to be replaced.

[0016] The concept of "second parameter set" used within the scope of the description and claims is particularly understood as a data set which specifies how the process image is generated (for example, how data are derived from the signals read in at the input of the I / O module) and how the above data are transmitted, for example via a bus, to the front end or from the front end to the superior control unit and / or which data are to be forwarded from the superior control unit to the I / O module, or how signals are to be derived from the data transmitted from the front end to the I / O module (which signals are output, for example, at the output of the I / O module).

[0017] The first parameter set can be stored in a modular automation device on a plurality of second components in at least partially redundant form.

[0018] For example, the first parameter set can be stored in a modular fieldbus node on a plurality of I / O modules in at least partially redundant form. In particular, two identical copies of the first parameter set can be stored on two different I / O modules so that the availability of the first parameter set within the modular fieldbus node is not affected when one of the I / O modules fails or is replaced.

[0019] When the first component is integrated into the automation device for the first time or after the first component is reset, a plurality of second components of the modular automation device can transmit a first parameter set to the first component.

[0020] For example, when the first component is integrated into the automation device, the first component can self-identify, and the second component can infer from the information accompanying the identification process that the first parameter set is designated for the first component, and the second component can transmit the first parameter set to the first component.

[0021] The method may further include establishing a connection with a server and requesting a second parameter set through the first component, wherein the server transmits the second parameter set to the first component only when the server receives a confirmation message from an authorized device or through an authorized communication channel.

[0022] Access to the second parameter set can be protected in particular by two-factor authentication. For example, the first component can store a password (the password is, for example, part of the first parameter set), and as long as the first component has not been registered and the registration is not approved by an authorized device or an authorized communication channel, the server can still deny access to the second parameter set despite the transmission of the password.

[0023] The server can report a request for the second parameter set through the first component to an authorized device or through an authorized communication channel and request confirmation.

[0024] For example, when the first component logs in to the server using the password, the server can send a message to an authorized device or through an authorized communication channel and request confirmation that the first component is authorized and the first component is registered as authorized upon confirmation.

[0025] The system according to the invention includes a modular automation device having a first component and one or more second components and a server, wherein the one or more second components are arranged to store a first parameter set, wherein the server is arranged to store a second parameter set, wherein the first parameter set enables the first component to request the second parameter set from the server via a network connection of the modular automation device, and wherein the second parameter set enables the first component to perform a predetermined function within the automation device.

[0026] The one or more second components may be arranged to store the first parameter set in at least a partially redundant form on a plurality of the second components of the modular automation system.

[0027] The one or more second components may be arranged to transmit the first parameter set to the first component when the first component is integrated into the automation system for the first time or after the first component is reset.

[0028] The server can be set such that it responds to the request of the first component to transmit the second parameter set to the first component only when the server receives confirmation from an authorized device or through an authorized communication channel.

[0029] The server can also be set to report the request for the second parameter set by the first component to an authorized device or through an authorized communication channel and request confirmation.

[0030] It is to be understood here that the features described in connection with the system can also be features of the method and vice versa. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The present invention will then be described in detail with the aid of embodiments, wherein, with reference to the drawings, in which:

[0032] Figure 1 shows a schematic diagram of a fieldbus system;

[0033] Figure 2 shows a schematic diagram of a fieldbus node and a schematic diagram of a fieldbus device connected to the fieldbus node;

[0034] Figure 3 shows the storage of the parameters necessary for the operation of the first component of the fieldbus node on the second component of the fieldbus node and on the server;

[0035] Figure 4 shows a request for the transmission of a parameter set from the server to the first component of the fieldbus node;

[0036] Figure 5 shows the approval of the transmission of a parameter set from the server to the first component of the fieldbus node by means of two-factor authentication; and

[0037] Figure 6 shows a flowchart of a method for restoring the parameters necessary for operation, or a flowchart of a method for transmitting the parameters necessary for operation to the components of a modular automation device.

[0038] Herein, the same or functionally similar elements are denoted by the same reference numerals in the figures. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0039] Figure 1A block diagram of a fieldbus system 10 is shown. The fieldbus system 10 includes a superior control unit 20, and a plurality of fieldbus nodes 100 are connected to the superior control unit via a fieldbus 30. The superior control unit 20 can be used not only for monitoring but also for regulating devices (not shown) controlled by the fieldbus system 10. When the superior control unit 20 monitors the devices, the superior control unit 20 can periodically or aperiodically receive status data from the fieldbus nodes 100, the status data describes the status of the devices and when the status of the devices deviates (substantially) from the desired / allowed status or status range, the status data generates a fault signal or an alarm signal. When the superior control unit 20 (not only monitors but also) regulates the devices, the superior control unit 20 can periodically or aperiodically receive status data from the fieldbus nodes 100 and determine the control data transmitted to the fieldbus nodes 100 in consideration of the status data.

[0040] Figure 2 An exemplary modular fieldbus node 100 is shown, including a front end 110 and two I / O modules 120 and 130 serially connected to the front end 110, and field devices 140, 150, 160, and 170, such as sensors and actuators, are connected to the I / O modules. During operation, the I / O modules 120 and 130 read in sensor signals through the input ends and generate status data from the sensor signals, and the status data is transmitted to the front end 110 via a local bus 180. The front end 110 can locally process these status data and / or (if necessary in an improved form) forward these status data to the superior control unit 20. The superior control unit 20 (or the front end 110 in the case of local processing) can generate control data in consideration of these status data.

[0041] The control data generated by the superior control unit 20 can be transmitted via the fieldbus 30 to the same or another front end 110. The control data transmitted to the front end 110 (or generated by the front end 110) is forwarded / transmitted to the I / O modules 120 and 130 (if necessary in an improved form). The I / O modules 120 and 130 receive the control data and output control signals conforming to the control data at the output ends connected to the actuators. The data communication between the components of the fieldbus system 10 and the mapping of sensor signals to status data and the mapping of control data to control signals can be adapted to different usage scenarios through the configuration of the fieldbus node 100. Here, this configuration is achieved by transmitting corresponding parameters to the components of the fieldbus node 100.

[0042] As Figure 3As shown, the parameters 200 that fully configure the I / O module 120 are divided into two parameter groups 210 and 220. The parameter group 210 that enables the I / O module 120 to communicate with the server 40 is stored in the I / O module 130, and the parameter group 220 is stored on the server 40. For example, after the configuration is completed, the I / O module 120 can transmit the parameter group 210 to the I / O module 130 and transmit the parameter group 220 to the server 40. In addition, the parameter group 210 can also be additionally stored in the front end 110 or other I / O modules (if any) to ensure the local availability of the parameter group 210 even if the I / O module 130 fails.

[0043] If the I / O module 120 is replaced by an I / O module 120 with the same structure due to a defect, the latter obtains the parameter group 210 that enables the I / O module 120 to communicate with the server 40 in such a way that, as indicated by the arrow in Figure 4 , the parameter group 210 is provided by the I / O module 130. If the parameter group 210 is transmitted from the I / O module 130 to the I / O module 120, then this I / O module establishes a connection with the server 40 using the parameter group 210 and requests the parameter group 220 from the server. Here, if the front end 110 is able to (independently) establish a connection with the server 40, then the parameter group 210 is sufficient for the I / O module 120 to be able to communicate with the front end 110.

[0044] To protect the parameter group 220 from unauthorized access, the server 40 responds to the above request by requesting approval for the transmission from an authorized device 50 (as indicated by the arrow in Figure 5 ). If approved, then the server 40 registers the I / O module 120 and transmits the parameter group 220 to the I / O module 120. The configuration of the I / O module 120 is completed by storing the parameter group 220 and the I / O module 120 is now fully ready to operate. Approval can also be made through an authorized communication channel, such as by means of (encrypted) email, SMS, application push messages, etc., rather than requesting approval for the transmission from an authorized device 50.

[0045] As Figure 6As shown in the figure, the method for restoring or transmitting the parameters 200 necessary for operation includes step 300, that is, dividing the parameters 200 necessary for operation into a first parameter group 210 and a second parameter group 220. The former enables the I / O module 120 to communicate with the server 40, and the latter enables the I / O module 120 to play a predetermined role. In step 310, the method continues with storing the first parameter group 210 on the I / O module 130. In step 320, the method ends with storing the second parameter group 220 on the server 40.

[0046] List of reference numerals

[0047] 10 Fieldbus system

[0048] 20 Control unit

[0049] 30 Fieldbus

[0050] 40 Server

[0051] 50 Device

[0052] 100 Fieldbus node

[0053] 110 Front end

[0054] 120 I / O module

[0055] 130 I / O module

[0056] 140 Field device

[0057] 150 Field device

[0058] 160 Field device

[0059] 170 Field device

[0060] 180 Local bus

[0061] 200 Parameter

[0062] 210 Parameter group

[0063] 220 Parameter group

[0064] 300 Step

[0065] 310 Step

[0066] 320 Step

Claims

1. A method for restoring the parameters (200) necessary for operation or for transferring said parameters to a first component of a modular automation device, comprising: Dividing (300) the parameters (200) necessary for operation into a first parameter group (210) and a second parameter group (220), wherein the first parameter group enables the first component to communicate with a server (40) that can be reached via a network connection of the automation device; Storing (310) the first parameter group (210) on one or more second components of the modular automation device; And Storing (320) the second parameter group (220) on the server (40).

2. The method according to claim 1, wherein The first parameter group (210) is stored in a at least partially redundant form on a plurality of second components of the modular automation device.

3. The method according to claim 2, wherein When the first component is first integrated into the automation device or after the first component is reset, the plurality of second components of the modular automation device transfer the first parameter group (210) to the first component.

4. The method according to any one of claims 1 to 3, further comprising: Establishing a connection with the server (40) and requesting the second parameter group (220) via the first component, wherein the server (40) transfers the second parameter group (220) to the first component only when the server (40) receives a confirmation message from an authorized device (50) or via an authorized communication channel.

5. The method according to claim 4, wherein The server (40) reports the request for the second parameter group (220) via the first component to the authorized device (50) or via an authorized communication channel and requests confirmation.

6. A system, comprising: A modular automation device having a first component and one or more second components; And A server (40); Wherein the one or more second components are arranged to store a first parameter group (210); Wherein the server (40) is arranged to store a second parameter group (220); Wherein the first parameter group (210) enables the first component to request the second parameter group (220) from the server (40) via a network connection of the modular automation device; and Wherein the second parameter group (220) enables the first component to perform a predetermined function within the automation device.

7. The system according to claim 6, wherein, The one or more second components are arranged to store the first parameter group (210) in a at least partially redundant form on a plurality of the second components of the modular automation system.

8. The system according to claim 7, wherein, The one or more second components are arranged to transfer the first parameter group (210) to the first component when the first component is first integrated into the automation system or after the first component is reset.

9. The system according to one of claims 7 to 8, wherein, The server (40) is arranged to respond to a request from the first component and transfer the second parameter group (220) to the first component only when the server (40) receives confirmation from an authorized device (50) or via an authorized communication channel.

10. The system according to claim 9, wherein, The server (40) is further configured to report a request for the second parameter set by the first component to the authorized device (50) or via an authorized communication channel and request confirmation.

Images