Method and operating device for exchanging data

Abstract

In order to close the communication gap between a cloud-based planning or configuration programme and an operating programme on an operating device for operating an automation system, the invention provides a method for exchanging data between a configuration application (160, 360) and at least one electronic device (110) connected to an operating device (155), in which method, in particular, an instance (160) of a configuration application running on the operating device (155) calls up a web server application (180, 180') installed on the operating device (155) in order to exchange data between the instance (160) of the configuration application running on the operating device (155) and the at least one electronic device (110) via the web server application (180, 180'). The invention also relates to an operating device (155) designed to perform the method.

Description

[0001] Procedure and operating device for exchanging data

[0002] Description

[0003] The invention relates generally to industrial automation and, more particularly, to a method and an operator device for exchanging data with devices connected to an operator device for data exchange.

[0004] Industrial automation uses field devices such as actuators and sensors. These devices today typically employ a digital communication protocol and are connected via networks or star architectures using gateways and remote I / Os, i.e., input / output modules close to the field device. These devices, i.e., both actuators and sensors, but also gateways and remote I / Os, have a large number of parameters that can only be controlled using specific software. This software is typically installed on an operator panel connected to the respective device via a communication link.

[0005] This software, also referred to as operating program, is used in different, adapted forms during commissioning, maintenance and repair work and is then able to communicate directly with the respective device and thus read out current measurement, status and configuration data, write configuration data and initiate internal processes.

[0006] For the specific use of devices in industrial automation, there are a variety of device types, each optimally supporting specific application cases. The selection of suitable devices and the design options are now so extensive that special software, also referred to as design programs, is used to find the right devices for the respective application.

[0007] To speed up the planning process of a new automation system or a new

[0008] To complete the automation system, another type of software, also referred to as a configuration program, is typically used, which allows the assembly of all individual parts of the automation system or automation plant with regard to their mechanical, data-technical and electrical requirements.

[0009] Often, the configuration program and design program are combined into a single program, referred to as the planning program. Everything can then be prepared in the planning program for ordering materials and setting up the system. For commissioning, the devices must then be configured with their respective parameter sets to ensure the system is operational.

[0010] Due to the emergence of Internet technologies with their extensive web applications, as well as the initiatives for IoT and Industry 4.0, there is an increasing need for web-based solutions that, with the help of cloud concepts, make the entire planning of a plant much easier and more user-friendly.

[0011] A method for planning and / or operating a technical system is known, for example, from EP 3 435 299 A1, wherein a portion of system data provided in a cloud is released in such a way that it can be accessed by one or more external service providers. Furthermore, web-based solutions for automation systems are described, for example, in EP 1 906 592 B1 and EP 1 906 274 A2.

[0012] However, cloud-based planning programs have a major disadvantage: Due to individual data security policies and measures within the executing companies, connecting planning programs and operating programs is not easily possible. The actual advantage of cloud-based planning programs is thus largely lost and usually leads to a data-related dead end. The object of the invention can be seen as demonstrating a way to close the communication gap between a cloud-based planning or configuration program and an operating program in a simple and / or improved manner, particularly without compromising data security.

[0013] This object is achieved by the features of the independent claims. Advantageous embodiments are the subject of the dependent claims, wherein the stated features and advantages can essentially apply to all independent claims.

[0014] A core idea of ​​the invention can be seen in the provision of a web server application on an operating device which is designed for configuring and / or parameterising electronic devices of industrial automation or interface technology, by means of which web server application communication is enabled between a planning or configuration application executed on the operating device and an operating application executed on the operating device, in order in this way to enable configuration and / or parameterisation of an electronic device, in particular a device of industrial automation or interface technology, which is connected to the operating device, wherein the web server functionality can be integrated into the operating application.In this way, the electronic device can be configured and / or parameterized on the basis of data retrieved by the planning application from a server located in a public network.

[0015] According to a first aspect of the invention, a method for exchanging data between a configuration application and at least one electronic device connected to an operating device is provided, which comprises the following steps: a) calling the configuration application by transmitting a call command from the operating device, which is connected to a secure network, to a server arranged in a public network, b) creating and executing an instance of the configuration application on the operating device in response to the calling of the configuration application, c) calling a web server application installed on the operating device by the instance of the configuration application executed on the operating device, d) exchanging data between the instance of the configuration application executed on the operating device and the at least one electronic device,which is connected to the operating device via the secure network, via the web server application.

[0016] The electronic device to be configured and / or parameterized can, in principle, be any device usable in the field of automation that can be connected wirelessly or wired to an operator panel and is designed to exchange data with the operator panel. Examples of electronic devices with which data can be exchanged using the described method are actuators, sensors, gateways, I / O modules, in particular field-device I / O modules, also known as remote I / Os, as well as bus couplers or function modules. The communication connection between the operator panel and the device to be configured can be established, in particular, using known interfaces and bus systems, such as those typically used in the field of industrial automation.The method can be used advantageously, for example, for electronic devices that can be mounted on a mounting rail and are typically arranged in a control cabinet.

[0017] The configuration application is a software program with which a configuration of an automation system or individual components of such a system can be created and saved. The configuration application can advantageously be designed as a planning application or planning program and accordingly include the functionalities of a design program.

[0018] The configuration application is advantageously implemented as a web application and accordingly comprises a web client application and a web server application. The instance of the configuration application created and executed on the operating device is preferably the web client application, which can be executed in a browser running on the operating device and is configured to exchange data with the web server application, which is executed on the server located in the public network.

[0019] Advantageously, the instance of the configuration application executed on the operating device retrieves data from the server arranged in the public network, transmits it to the electronic device, and / or retrieves data from the electronic device and transmits it to the server arranged in the public network.

[0020] To exchange data in step d), the instance of the configuration application executed on the operating device advantageously causes an execution of an operating application installed on the operating device.

[0021] The web server application installed on the operating device particularly advantageously enables the operating application to be executed locally on the operating device as a web application. For this purpose, the operating application is advantageously called from the instance of the configuration application running on the operating device by transmitting a call command to the web server application installed on the operating device, whereupon an instance of the operating application is preferably created in the form of a web client and executed within the instance of the configuration application running on the operating device. The calling of the web server application installed on the operating device in step c) advantageously takes place with the aid of a protocol handler. Particularly advantageously, the instance of the operating application is provided by the local web server application in the form of a static website.

[0022] It may also be advantageous to install the web server application on the operating device only when required or to retrofit existing operating devices accordingly.

[0023] Accordingly, the method can advantageously provide the following steps: - Check whether the web server application is installed on the operating device

[0024] - Requesting the user of the operating device through the instance of the configuration application running on the operating device to install the web server application on the operating device if the check shows that the web server application is not installed on the operating device, and

[0025] - Installation of the web server application on the operating device by the user.

[0026] The secure network in which the operating device is located is preferably separated from the public network, which may be the Internet, for example, by at least one firewall. A so-called demilitarized zone (DMZ) may also be provided, which is located between the secure and public networks. The computers located in the DMZ are then typically separated from both the public network and the secure network by a firewall.

[0027] Communication between the secure network and the public network is thus advantageously protected by at least one firewall. To protect against unauthorized access to the electronic devices connected to an operating device by a cloud-based web application running in a browser on the operating device, communication between the operating device and a public server for this purpose is prevented by the at least one firewall.

[0028] This block is circumvented by the described method in particular by the fact that only communication running locally on the operating device is required for the actual exchange of data with the device connected to the operating device.

[0029] According to a further aspect of the invention, an operating device is provided which is connected to at least one electronic device, in particular a device of industrial automation technology, via a secure network, wherein a web server application is installed on the operating device, and wherein the operating device is designed to call up a configuration application by transmitting a call command to a server arranged in a public network, wherein an instance of the configuration application is created and executed on the operating device, and wherein the instance of the configuration application executed on the operating device is designed to call up the web server application installed on the operating device and to exchange data with the at least one electronic device via the web server application.

[0030] Advantageously, the instance of the configuration application executed on the operating device is configured to execute an operating application installed on the operating device. Furthermore, the instance of the configuration application executed on the operating device is advantageously configured to retrieve data from the server located in the public network and transmit it to the electronic device via the web server application using the operating application, and / or to retrieve data from the electronic device via the web server application using the operating application and transmit it to the server located in the public network.

[0031] The features and advantages of the present invention will become apparent from the embodiments which are explained in more detail below with reference to the accompanying drawings.

[0032] Fig. 1 is a schematic representation of a prior art structure for planning and configuring an automation system,

[0033] Fig. 2 is a schematic representation of a structure for planning and configuring an automation system, which comprises a first preferred embodiment of an operating device and is designed to carry out a method according to the invention, and

[0034] Fig. 3 is a schematic representation of a structure for planning and configuring an automation system, which comprises a second preferred embodiment of an operating device and is designed to execute a method according to the invention. Fig. 1 is a schematic representation of a structure known from the prior art for planning and configuring an automation system.

[0035] In the example shown, an operator device 150, also referred to as an operator station, is connected to an automation system. This is usually done directly or, as in the example shown, via an interface converter 130. A USB-to-serial converter or a modem, for example, can be used as the interface converter. Access is then either directly to an electronic device 110 or via network components such as gateways 120 to multiple devices 110. The operator station 150 itself is thus capable of communicating with the devices 110, reading in current values, and reading and writing configurations and parameterizations.

[0036] The operator panel 150 and the devices of the automation system are arranged within a secure network 100, wherein the secure network 100 in the example shown is separated by a firewall 210 from a DMZ 200, which in turn is separated from a public network 300 by another firewall 310.

[0037] A server 350 in the public network 300 offers a configuration application in the form of a planning program that is accessible from the operator station 150 even through the firewalls 210 and 310, even though the operator station 150 is connected to the secure network 100. This is possible because the configuration application behaves like a standard website and is therefore not blocked by the firewalls 210 and 310.

[0038] With the help of the configuration application designed as a planning program, the user can now plan their system, select and configure the necessary devices 110, and from this, develop the required parameter set for the respective device 110. The data thus generated can then be stored in a central data storage 370 in the public network 100. The user can be supported in this process by typical cloud applications. One example is an AI-supported analysis of the data sets. The advantage of this implementation of the configuration application is that the user can use the application ad hoc, without installing any software or making changes to their IT infrastructure.

[0039] The configuration application thus comprises a web client application 160 executed in a browser 170, which may have the form of a standard web page, and a web server application 360 executed on the server 350, which communicates with the web client application 160, in particular via the Internet 320.

[0040] Even if the user has now created data for their device 110 in the configuration application and stored it in a server 350 or a central data storage 370, it is not possible according to the state of the art to transfer this data from the configuration application to the device 110. Even reading out current values, configuration, and parameterization data is not readily possible according to the state of the art, since the firewalls 210 and / or 310 prevent any such communication as a potential attack.

[0041] Depending on the system, a person with local administrative rights can either install additional software or open the firewall selectively, although opening the firewall represents a security risk.

[0042] When working with modern automation devices 110, a program is generally required to process the configuration and parameterization, as well as to read the current values ​​and status of the device 110. The term "operating program" or "operating application" is used here for the software required for this purpose. In the example shown, such an operating application 140 is installed on the operating station 150, although it operates independently of the configuration application. Fig. 2 shows a schematic representation of a structure for planning and configuring an automation system, which comprises a first preferred embodiment of an operating device 155 and is designed to execute a method according to the invention.

[0043] In the structure shown in Fig. 2, the operating application 145 is designed such that it itself includes or represents a web server application 180. The instance 160 of the configuration application on the operating station 155 can then establish a connection to the local server 180 and seamlessly integrate the application of the server 180, i.e. an instance of a web client application 185 provided by the server 180 in response to a call command, into its application, wherein the instance of the web client application 185 is provided in particular in the form of a static web page. The instance 185 of the operating program can then communicate with the instance 160 of the configuration application and exchange data. Thus, data from the external server 350 or the data memory 370 can be communicated to the device 110 connected to the operating device 155.

[0044] The sequence of the method for exchanging data with a device 110 is explained in more detail below using an example.

[0045] (1) The user opens the configuration application 360 on the external server 350.

[0046] (2) A local instance 160 is created on the operator station 155, which calls the server 180 on the local computer 155 via a protocol handler.

[0047] (3) If the server 180 is not found on the local computer 155, the local instance 160 of the configuration application prompts the user to download and execute an installation file. If the operating program 145 is already installed, proceed to (5).

[0048] (4) The user downloads the installation file, for example, from a server 400 accessible via the Internet 320, and installs it. The installation is particularly advantageously designed so that it can be executed on the operating device 155 without the user having administrator rights. After installation, the server 180 of the operating program 145 is started and is now available to the instance 185 of the operating program.

[0049] (5) The local instance 160 of the configuration application now retrieves the application page 185 of the operating program from the server 180 of the operating program 145 and integrates it into its instance 160. In this way, the operating application can also be displayed directly in the browser 170 in the operating station 155, ie it is temporarily loaded as instance 185 by the web server application 180 and executed in the browser 170 of the operating station 155, ie in particular an instance of the application page is loaded.

[0050] (6) The instance 160 of the configuration application can already exchange data with the external server 350.

[0051] (7) The loaded instance 185 of the application page of the operating program can also be used to exchange data with the local application 145 and thus also with the local device 110.

[0052] The described method advantageously makes it possible, even when using an online version of a planning or configuration program, to transfer data from the instance data of the planning or configuration program to the devices 110 connected to the operating station 155 and then to check the devices 110 for their correct function.

[0053] Fig. 3 shows a variant of the structure shown in Fig. 2. In this variant, the web server application 180' is not integrated into the operating application 145', but is installed as a separate application on the operating device 155, wherein the web server application 180' is configured to communicate with an operating application 145' via a predetermined communication interface.

Claims

Patent claims 1. A method for exchanging data between a configuration application (160, 360) and at least one electronic device (110) connected to an operating device (155), in particular a device of industrial automation technology, comprising the steps: a) calling the configuration application by transmitting a call command from the operating device (155), which is connected to a secure network (100), to a server (350) arranged in a public network (300), b) creating and executing an instance (160) of the configuration application on the operating device (155) in response to the calling of the configuration application, c) calling a web server application (180, 180') installed on the operating device (155) by the instance (160) of the configuration application executed on the operating device (155),d) exchanging data between the instance (160) of the configuration application executed on the operating device (155) and the at least one electronic device (110) connected to the operating device (155) via the secure network (100), via the web server application (180, 180').

2. The method according to claim 1, wherein the instance (160) of the configuration application executed on the operating device (155) retrieves data from the server (350) arranged in the public network (300) and transmits it to the electronic device (110) and / or retrieves data from the electronic device (110) and transmits it to the server (350) arranged in the public network (300).

3. Method according to one of the preceding claims, comprising the steps: - Check whether the web server application (180, 180') is installed on the operating device (155) - Requesting the user of the operating device (155) by the instance (160) of the configuration application running on the operating device (155) to install the web server application (180, 180') on the operating device (155) if the Check shows that the web server application (180, 180') is not installed on the operating device (155), and - Installation of the web server application (180, 180') on the operating device (155) by the user.

4. Method according to one of the preceding claims, wherein, for exchanging data in step d), the instance (160) of the configuration application executed on the operating device (155) causes an execution of an operating application (145) installed on the operating device (155).

5. The method according to claim 1, wherein the calling of the web server application (180, 180') installed on the operating device (155) in step c) is carried out with the aid of a protocol dealer.

6. Method according to one of the preceding claims, wherein the configuration application is designed as a web application (160) executable in a browser (170).

7. The method according to any one of the preceding claims, wherein communication between the secure network (100) and the public network (300) is protected by at least one firewall (210, 310).

8. Operating device (155) which is connected via a secure network (100) to at least one electronic device (110), in particular a device of industrial automation technology, wherein on the operating device (155) a Web server application (180, 180') is installed, wherein the operating device (155) is designed to call a configuration application (160, 360) by transmitting a call command to a server (350) arranged in a public network (300), wherein an instance (160) of the configuration application (160, 360) is created and executed on the operating device (155), and wherein the instance (160) of the configuration application executed on the operating device (155) is designed to call the web server application (180, 180') installed on the operating device (155) and to exchange data with the at least one electronic device (110) via the web server application (180, 180').

9. Operating device according to claim 8, wherein the instance (160) of the configuration application executed on the operating device (155) causes an execution of an operating application (145) installed on the operating device.

10. Operating device according to claim 9, wherein the instance (160) of the configuration application executed on the operating device (155) is designed to retrieve data from the server (350) arranged in the public network (300) and to transmit it to the electronic device (110) by means of the operating application (145, 145') via the web server application (180, 180') and / or to retrieve data from the electronic device (110) by means of the operating application (145, 145') via the web server application (180, 180') and to transmit it to the server (350) arranged in the public network (300).

Images