A system for enabling remote control of floating production units

Abstract

The invention relates to a system for enabling remote control of a Floating Production, FP, unit, such as a Floating Production Storage and Offloading, FPSO, unit The system for enabling remote contro

Description

[0001] A system for enabling remote control of Floating Production Units

[0002] Field of the invention

[0003] The invention relates to a system for enabling remote control of a Floating Production Unit, FPU, such as a Floating Production Storage and Offloading, FPSO, unit. The invention further relates to a method of remotely controlling the FPU via the system.

[0004] Background art

[0005] FPUs refer to large vessels used as floating units operating offshore. The operations typically involve production, storage and offloading. For example, FPSO units are large vessels used as floating facilities for extraction of hydrocarbons. Operations performed by such vessels typically comprise mining oil and / or gas from a well below the ocean floor, processing the mined oil / gas, and temporarily storing and transporting the processed oil / gas away from the FPSO unit. In that sense, an FPSO unit may be regarded as an offshore production site. FPSO units execute various further complex operations known to the person skilled in the art, such as controlling flows from the well(s), controlling process equipment including pressure control, heating and / or cooling, mooring operations for properly positioning the FPSO unit, etc.

[0006] In the context of mining gas, an FPU is also referred to as a floating liquefied natural gas, FLNG, facility or FLNG unit, which typically performs operations related to producing / processing / mining / storing liquified natural gas, LNG.

[0007] Further examples of known FPUs are Floating Storage and Offloading, FSO, units, floating storage regasification, FSR units, FSRUs, production semi-submersible units.

[0008] In the future, FPUs may potentially also be developed and used for further purposes such as offshore processing of hydrogen, e.g. for mining and storing hydrogen in liquified form. For example, a future FPU may be used as a floating unit for hydrogen production, storage and offloading. Typically, FPUs are stationary while operating.

[0009] In general, an FPU may be operated from a local system located on the FPU, and may also be operated from a remote location using remote functions. The remote location may be located away from the FPU in a safe zone in order to reduce security risks of staff members by removing humans from dangerous offshore environments, to facilitate controlling the FPU with increased efficiency and at reduced costs, enable easy and fast access to experts, generally reduce the number of personnel on production sites, etc. The remote location may for example be located tens to hundreds of kilometres away from the FPU.

[0010] However, while security risks of staff members are reduced when using a remote location, providing remote functions includes other risks such as cyber security risks. For example, when establishing remote connectivity, potentially any malicious party may gain access to local systems on the FPU. Remote functions allow interaction with the production process, components and / or equipment on the FPU, and may involve the control of forces and pressures that can damage and even destroy equipment on the FPU. Therefore, a successful cyber attack may have devastating consequences that can potentially stop the production process, disturb logistic chains and ultimately disrupt energy supply.

[0011] Hence, there is a need for enabling remote control of an FPU in a secure way.

[0012] Summary of the invention

[0013] A general object of the invention is to find a way of providing a secure way of enabling remote control of an FPU.

[0014] Therefore, according to a first aspect of the invention, a system as defined in appended claim 1 is provided. According to the first aspect, the system is for enabling remote control of a Floating Production Unit, FPU, the system comprising: a dedicated keyboard, video and mouse, KVM, network configured to establish a point-to-point dedicated link between one or more local human-machine interface, HMI, devices and one or more remote HMI devices, the one or more local HMI devices being installed in one or more local control rooms on the FPU, the one or more local control rooms being configured to enable monitoring operations and / or controlling operations on the FPU via the one or more local HMI devices, and the one or more remote HMI devices being installed in one or more remote control rooms at a remote location away from the FPU.

[0015] It has been identified by the inventor that using a dedicated KVM network for communicatively connecting the remote location and the FPU via a point-to-point dedicated link is advantageous as it is shielded from externals, corresponds to an intranet-type connection and is not connected to external sources. The dedicated KVM network may be a dedicated stand-alone network, which does not require connection to Operational technology (OT) Networks and / or Information technology (IT) Networks, so that there are no potential break-in points on the Integrated Control and Safety System (ICSS) and package networks for a cyber attack. As no Internet Protocol (IP) address of local system components is required for the dedicated KVM network, hacking is further made difficult.

[0016] Hence, using the dedicated KVM network for establishing the point-to-point dedicated link enables secure remote control of an FPU.

[0017] A special advantage may be recognized in that remote control is enabled with low latency because merely video-stream type data needs to be transmitted between the FPU and the remote location. That is, the system with the dedicated KVM network provides a low- latency communication channel / point-to-point dedicated link, which may enable experts efficiently controlling the FPU from a distance at the remote location by quickly and adequately reacting to changes in time.

[0018] In addition, the inventor found that the invention is easy to implement as it is applicable to already existing vessels and moreover can readily be used as soon as video output is used in control management. Furthermore, the dedicated KVM network / connection does not interfere with the network interface of computers at control rooms on the FPU; a dedicated data flow for each sub-system — different sub-systems potentially not being combinable — is not required. The first aspect enables efficient remote control and facilitates installing the remote control.

[0019] Hence, the solution developed by the inventor enables both secure remote control as well as easy integration to already existing IT systems, making the solution not only feasible but also resource efficient and adaptable to various types of already employed FPUs.

[0020] Furthermore, the dedicated KVM network extension does not require integration of the packages in the ICSS. For example, the dedicated KVM network extension can be used on legacy ICSS & package systems without any upgrade of existing systems. Regarding regulatory compliance, remote control typically requires a dedicated certification such as an American Bureau of Shipping (ABS) Remote Con Notation. However, as a KVM extension does not connect to the ICSS network, it does not interfere with the existing ABS Certification on the ICSS. Hence, the inventor provides a practicable and easy-to-implement solution to enhancing secure remote control.

[0021] In general, a dedicated KVM network may be installed in addition to already existing network extensions or may be installed to replace already existing networks.

[0022] In summary, the proposed system may have at least one of the above-described advantages and may enhance secure remote control of FPUs. Various further components contributing to at least one of the above-described technical effects may be included in the system, and are described in more detail below. The person skilled in the art will appreciate that each of the various further components may also provide further technical advantages in addition to the above-described technical advantages.

[0023] Preferably, the system further comprises a local network comprising a HMI network and a control network.

[0024] Preferably, the dedicated KVM network comprises a first KVM device located at the FPU and configured to convert between first HMI data and first KVM data, and a second KVM device located at the remote location and configured to convert between second HMI data and second KVM data. Preferably, the first KVM device and the second KVM device are configured to exchange KVM data.

[0025] Preferably, the dedicated KVM network further comprises at least one of: a first external display interface link configured to connect a local HMI device of the one or more local HMI devices with the first KVM device, the external display interface link being for transmitting the first HMI data to the first KVM device; and / or a first serial communication link, such as a Universal Serial Bus, USB, link, configured to connect the local HMI device with the first KVM device, the serial communication link being for transmitting and / or receiving data between the first KVM device and the local HMI device.

[0026] Preferably, the dedicated KVM network further comprises a network communication interface, such as an ethernet interface, configured to transmit and / or receive networkcommunication data, such as ethernet data, between the first KVM device located at the FPU and the second KVM device located at the remote location.

[0027] Preferably, the dedicated KVM network comprises a plurality of remote KVM devices located at the remote location; a plurality of links connecting the plurality of remote KVM devices with the one or more remote HMI devices, the plurality of links comprising at least one of external display interface links and USB links, each external display interface link being configured to provide an external display interface connection between at least one of the one or more remote HMI devices and at least one of the plurality of remote KVM devices, and each USB link being configured to provide a USB connection between at least one of the one or more remote HMI devices and at least one of the plurality of remote KVM devices.

[0028] Preferably, one or more of the external display interface links comprises a High Definition Multimedia Interface, HDMI, link configured to provide a respective HDMI connection between at least one of the one or more HMI devices and at least one of the plurality of KVM devices.

[0029] Preferably, the dedicated KVM network is specifically configured to virtually extend the one or more local control rooms from the FPU to the remote location.

[0030] Preferably, the dedicated KVM network extends from the FPU to the remote location.

[0031] Preferably, the dedicated KVM network comprises at least one of: a wired communication channel using a wired network, and / or a wireless connection.

[0032] Preferably, the wired network comprises a fibre optic cable.

[0033] Preferably, local HMI devices are arranged with a plurality of security levels including a security level 0, a security level 1, and a security level 2, wherein the dedicated KVM network is configured to virtually extend only a subset of local HMI devices of the local HMI devices. Preferably, the subset of local HMI devices comprises a packaged HMI device.

[0034] Preferably, the security level 1 is configured to comprise at least one of a Basic Process Control Systems, BPCS, HMI device and a Safety Instrumented Systems, SIS, HMI device.

[0035] Preferably, the one or more local control rooms comprise at least one of: one or more output devices, such as monitors, configured to provide a video output signal; one or more input devices, such as mouses and / or keyboards configured to provide input signals.

[0036] Preferably, the dedicated KVM network is implemented based on a redundant network for providing redundancy.

[0037] Preferably, the FPU is an FPSO unit.

[0038] Preferably, the FPU comprises one or more of an FPSO unit, an FLNG unit, an FSO unit.

[0039] Brief description of the drawings

[0040] Embodiments of the present disclosure will be described herein below with reference to the accompanying drawings. However, the embodiments of the present disclosure are not limited to the specific embodiments and should be construed as including all modifications, changes, equivalent devices and methods, and / or alternative embodiments of the present disclosure.

[0041] The terms “have”, “may have”, “include” and “may include” as used herein indicate the presence of corresponding features (for example, elements such as numerical values, functions, operations, or parts), and do not preclude the presence of additional features.

[0042] The terms “A or B”, “at least one of A or / and B” or “one or more of A or / and B” as used herein include all possible combinations of items enumerated with them. For example, “A or B”, “at least one of A and B”, or “at least one of A or B” means (1) including at least one A, (2) including at least one B, or (3) including both at least one A and at least one B.

[0043] The terms such as “first” and “second” as used herein may modify various elements regardless of an order and / or importance of the corresponding elements, and do not limit the corresponding elements. These terms may be used for the purpose of distinguishing one element from another element. For example, a first element may be referred to as a second element without departing from the scope the present invention, and similarly, a second element may be referred to as a first element.

[0044] It will be understood that, when an element (for example, a first element) is “(operatively or communicatively) coupled with / to” or “connected to” another element (for example, a second element), the element may be directly coupled with / to another element, and there may be an intervening element (for example, a third element) between the element and another element. To the contrary, it will be understood that, when an element (for example, a first element) is “directly coupled with / to” or “directly connected to” another element (for example, a second element), there is no intervening element (for example, a third element) between the element and another element.

[0045] The expression “configured to (or set to)” as used herein may be used interchangeably with “suitable for” “having the capacity to” “designed to” “adapted to”, “made to”, or “capable of’ according to a context. The term “configured to (set to)” does not necessarily mean “specifically designed to” in a hardware level. Instead, the expression “apparatus configured to...” may mean that the apparatus is “capable of...” along with other devices or parts in a certain context.

[0046] The terms used in describing the various embodiments of the present disclosure are for the purpose of describing particular embodiments and are not intended to limit the present disclosure. As used herein, the singular forms are intended to include the plural forms as well, unless the context clearly indicates otherwise. All of the terms used herein including technical or scientific terms have the same meanings as those generally understood by an ordinary skilled person in the related art unless they are defined otherwise. The terms defined in a generally used dictionary should be interpreted as having the same or similar meanings as the contextual meanings of the relevant technology and should not be interpreted as having ideal or exaggerated meanings unless they are clearly defined herein. According to circumstances, even the terms defined in this disclosure should not be interpreted as excluding the embodiments of the present disclosure.

[0047] The person skilled in the art will understand that the features described above and / or below may be combined in any way deemed useful. The drawings of the present disclosure show examples / embodiments of the invention, which will be described in detail hereinafter. It is to be understood that one or more of elements / components shown and / or described in one or more of these examples / embodiments and not in others may be used in those others too unless mechanical or other limitations prevent such an implementation. Moreover, describing features of different examples / embodiments in a single passage does not automatically mean that those features are inextricably linked. They may be applied separately from one another.

[0048] The present invention is discussed in more detail below, with reference to the attached drawings, in which:

[0049] Fig. 1 illustrates a system according to the present invention, the system comprising a dedicated KVM network.

[0050] Fig. 2 illustrates an example of a KVM network. Fig. 3 illustrates a configuration of multiple KVM devices in a KVM network.

[0051] Fig. 4 illustrates HMI devices arranged within a number of security levels.

[0052] Detailed description

[0053] List of used abbreviations.

[0054] BPCS Basic Process Control Systems

[0055] FPU Floating Production Unit

[0056] FPSO Floating Production Storage and Offloading

[0057] HDMI High-Definition Multimedia Interface

[0058] HMI Human-machine interface

[0059] IACS Industrial Control and Automation Systems

[0060] ICSS Integrated Control and Safety System

[0061] IP Internet Protocol

[0062] IT Information technology

[0063] KVM Keyboard, video and mouse

[0064] OT Operational technology

[0065] OTA Over-the-air

[0066] RDP Remote desktop

[0067] SIF Safety Instrumented Function

[0068] SIS Safety Instrumented Systems

[0069] UCP Unit Control Panel

[0070] USB Universal Serial Bus

[0071] Fig. 1 illustrates a system (1) according to the present invention.

[0072] The system (1) is for enabling remote control of a Floating Production Unit (100), FPU. The FPU (100) may correspond for example to an offshore production facility for mining hydrocarbons.

[0073] The FPU (100) comprises one or more local control rooms (110) that may be regarded as operations control rooms. For simplicity of the description and ease of the description only, a local control room (110) is referred to hereinafter. However, the present invention is not limited to a configuration involving a single local control room (110).

[0074] The local control room (110) may be configured to control at least parts of the FPU (100), i.e. to enable monitoring operations and / or controlling operations on the FPU (100). To that end, the local control room (110) comprises one or more HMI devices (111, 112, 113). The one or more HMI devices (111, 112, 113) are also referred to as local HMI devices, as they are installed locally at a location of the FPU (100). The one or more HMI devices (111, 112, 113) may for example display data indicative of an operating state of one or more components on the FPU (100).

[0075] For example, the FPU (100) typically comprises components such as process equipment (130), a production site (140), a subsea facility (150) located in proximity to the production site (140), and may comprise various further components for manging the FPU (100) that are not illustrated in Fig. 1. The local control room (110) is preferably configured to enable monitoring operations and / or controlling operations of one or more of the process equipment (130), the production site (140), the subsea facility (150), and / or the various further components of the FPU (100) not illustrated in Fig. 1. The amount of control provided by the local control room (110) may be fixed or may be adapted, e.g. by an operator of the FPU (100).

[0076] A general concept of the present invention is to virtually extend the local control room (110) to a remote location (300) in order to enable remote control of at least parts of the FPU (HO).

[0077] To that end, the system (1) comprises a dedicated KVM network (200) configured to establish a point-to-point dedicated link between one or more local HMI devices (111, 112, 113) installed in the local control room (110) on the FPU (100) and one or more remote HMI devices (311, 312, 313) installed in a remote control room (310) at a remote location (300) away from the FPU (100).

[0078] As illustrated in Figure 1, the remote location (300) may for example be located onshore (22) while the FPU (100) is located offshore (21). Typically, the remote location (300) is an operator building hosting the remote control room (110). However, other locations of the remote location (300) away from the FPU (100) may be considered as well. The remote location (300) may be chosen so as to be located in a safe and accessible zone away from the FPU (100).

[0079] The remote control room (310) can generally refer to a control room that is located at the remote location (300). The primary purpose of the remote control room (310) is to remotely control and operate at least part of the FPU (110), but the remote control room (310) may also include dedicated remote engineering or maintenance rooms. The remote control room (310) may comprise various other components contributing to enabling remote control. Although not illustrated in Fig. 1, the dedicated KVM network (200) may also be configured and / or installed so as to connect further remote control rooms to the local control room (110) on the FPU (100) and / or to further local control rooms on the FPU (100).

[0080] In summary, the system (1) is for enabling remote control of a FPU (100), and comprises a dedicated KVM network (200) configured to establish a point-to-point dedicated link between one or more local HMI devices (111, 112, 113) and one or more remote HMI devices (311, 312, 313). The one or more local HMI devices (111, 112, 113) are installed in one or more local control rooms (110) on the FPU (100). Each local control room (110) is configured to enable monitoring operations and / or controlling operations on the FPU (100) via respective one or more local HMI devices (111, 112, 113) installed therein. The one or more remote HMI devices (311, 312, 313) are installed in one or more remote control rooms (310) at a remote location (300) away from the FPU (100).

[0081] The point-to-point dedicated link established by the dedicated KVM network (200) enables remote but secure control of the FPU (110). For example, by the established point-to- point dedicated link, an operator may control for example a local HMI device (111, 112, 113) via a remote HMI device (311, 312, 313). Data received by a local HMI device (111, 112, 113) may be transmitted via the dedicated KVM network (200) to a remote HMI device (311, 312, 313). Vice versa, data received by a remote HMI device (311, 312, 313) may be transmitted via the dedicated KVM network (200) to a local HMI device (111, 112, 113). Thereby, the dedicated KVM network (200) establishes a virtual extension of the local control room (110) to the remote location (300), e.g. by virtually extending the one or more local HMI devices (111, 112, 113) to the one or more remote HMI devices (311, 312, 313). The remote control room (310) may be configured so as to enable whole of or at least part of a control functionality of the local control room (110).

[0082] Preferably, as illustrated in Fig. 1, the FPU (100) further comprises a local network

[0083] (120). The one or more local HMI devices (111, 112, 113) can for example exchange data with components of the FPU (100) via the local network (120). The local network (120) may, to that end, comprise a HMI network (121) and a control network (122). For example, using the local network (120), data may be exchanged between the one or more local HMI devices (111, 112, 113) and one or more of the process equipment (130), the production site (140), the subsea facility (150), and / or the various further components of the FPU (100) not illustrated in Fig. 1.

[0084] The HMI network (121) may be for enabling control of process equipment and / or facilities, process steps, process operations, and the like, on the FPU (100). The HMI network

[0085] (121) may function as a HMI interface for communicating between control data of the FPU (100) and HMI data. The control data may be related to operations on the FPU (100). The HMI data may be for representing the control data, for example via Unit Control Panels, UCPs, on monitors installed in the local control room (110). The control network (122) may be configured to transmit and / or receive control data between the local control room (110), the HMI network (121) and other systems on the FPU (100).

[0086] By employing the dedicated KVM network (200), an extension of the local network (120) on the FPU (100) to the remote location (300) may become obsolete. I.e., the dedicated KVM network (200) virtually extending the one or more local control rooms (110) on the FPU (100) to the remote location (300) may provide a more secure way of enable remote control as compared to extending the local network (120) to the remote location (300). For example, the local network (120) may be designed to remain local on the FPU, while specifically only the one or more local HMI devices (111, 112, 113) are virtually extended via the dedicated KVM network to the remote location (300).

[0087] The one or more local HMI devices (111, 112, 113) and / or the one or more remote HMI devices (311, 312, 313) may comprise output devices and / or input devices, for enabling monitoring and / or controlling process operations. An output device may be configured to output data such as video data, and / or to represent output data to humans. Examples of output devices are monitors, tablets, etc. An input device may be configured to receive input from humans. Examples of input devices are keyboards, mouses, touchpads, etc.

[0088] The one or more local HMI devices (111, 112, 113) may be configured to transmit and / or receive data via the local network (120), e.g. via the HMI network (121) and / or the control network (122), so as to enable monitoring and / or controlling process operations. A (local / remote) HMI device may also be referred to as a workstation or may be considered part of a workstation.

[0089] The dedicated KVM network preferably comprises at least one of one or more wired communication channels and one or more wireless communication channels. A wired communication channel using a wired connection may be suitable for reliably transmitting data between the local control room (110) and the remote control room (310). For example, the wired connection may transmit data signals with low latency and may be more secure and more reliable than a wireless connection transmitting signals over-the-air (OTA). The wired connection may comprise for example a fibre optic cable. The one or more wired communication channels established by the dedicated KVM network (200) may also use an existing wired network.

[0090] The point-to-point dedicated link provided by the dedicated KVM network (200) is specifically for communications between two points, e.g. between the local control room (110) and the remote control room (310). The point-to-point dedicated link may include a security protocol for encrypting messages sent over the communication channel and may include a VPN. The point-to-point dedicated link thus can provide a secure communication channel between the local (110) and the remote control room (310), wherein specifically local HMI devices on the FPU (100) are extended by the dedicated KVM network to remote HMI devices at the remote location (300). In that sense, the point-to-point dedicated link may be understood to enable KVM communication between a point on the FPU (100) (local control room (110)) and a point located away from the FPU (100) (remote control room (310)).

[0091] The dedicated KVM network (200) may thus be specifically installed to virtually extend the local control room (110) to the remote control room (310), and / or may virtually extend from the FPU (100) to the remote location (300). In general, using the dedicated KVM network (200), the local control room (110) can be virtually extended to the remote control room (310) by establishing the point-to-point dedicated link between the one or more local HMI devices (111, 112, 113) and the one or more remote HMI devices (311, 312, 313), thereby enabling remote but secure control of the local control room (110). For example, only visual parts of applications may be exchanged using the provided point-to-point dedicated link.

[0092] Fig. 2 illustrates an example of the dedicated KVM network (200). The dedicated KVM network (200) is not limited to the example illustration containing the components illustrated in Fig. 2, but may be implemented in other ways as well. The dedicated KVM network (200) is for example not limited to the number of components illustrated and is also not limited to the type of components illustrated. The example shown in Fig. 2 is for illustration purposes only.

[0093] In this example, the dedicated KVM network (200) comprises one or more KVM devices (211, 212, 213, 214) installed at the FPU (100), one or more network communication interfaces (210, 230) installed at the FPU (100) and / or at the remote location (300), and one or more KVM devices (231, 232, 233, 234) installed at the remote location (300). In this illustration, one or more local HMI devices (111, 112, 113, 114) are installed at the FPU (100) (e.g., in the local control room (110) of the FPU (100)), and one or more remote HMI devices (311, 312, 313, 314) are installed at the remote location (300) (e.g., in the remote control room (310)). The one ore more network communication interface (210, 230) may also be installed for adding network redundancy to the system (1).

[0094] A KVM devices (211, 212, 213, 214) installed at the FPU (100) may be referred to as a local KVM device (211, 212, 213, 214). A KVM device (231, 232, 233, 234) installed at the remote location (300) may be referred to as a remote KVM device (231, 232, 233, 234).

[0095] Each local KVM device (211, 212, 213, 214) may be configured to convert between HMI data and KVM data. For example, a local KVM device (211) may be configured to receive HMI data from a local HMI device (111). Similarly, each remote KVM device (231, 232, 233, 234) may be configured to convert between HMI data and KVM data.

[0096] As illustrated in Fig. 2, the dedicated KVM network (200) may comprise one or more links (Li l, L12, L13, L14, L21, L22, L23, L24). For example, one or more local links (Li l, L12, L13, L14) may be installed / established so as to connect the one or more local KVM devices (211, 212, 213, 214) with the one or more local HMI devices (111, 112, 113, 114). For example, one or more remote links (L21, L22, L23, L24) may be installed / established between the one or more remote KVM devices (231, 232, 233, 234) and the one or more remote HMI devices (311, 312, 313, 314).

[0097] Each link (LI 1, L12, L13, L14, L21, L22, L23, L24) may comprise an external display interface link configured to connect a respective local or remote HMI device with a respective local or remote KVM device. The external display interface link may be configured to transmit, from the respective HMI device, HMI data to the respective KVM device that the link is configured to connect. An example of an external display interface is a High-Definition Multimedia Interface (HDMI) configured to transmit the HMI data. Further examples of external display interfaces are DisplayPort, Digital Visual Interface (DVI), Video Graphics Array (VGA) connectors.

[0098] Each link (Li l, L12, L13, L14, L21, L22, L23, L24) may further comprise a serial communication link configured to connect a respective local or remote HMI device with a respective local or remote KVM device. The serial communication link may be configured to transmit / receive data between respective HMI and KVM devices that the link is configured to connect. An example of a serial communication link is a Universal Serial Bus (USB) link.

[0099] In general, one or more of the installed links (LI 1, L12, L13, L14, L21, L22, L23, L24) may comprise both an external display interface link and a USB link. Also, one or more of the installed links (LI 1, L12, L13, L14, L21, L22, L23, L24) may comprise only an external display interface link. Which type of links are installed may depend on preference choices. For example, when only video-data is supposed to be sent on a link, then only an external display interface link such as a HDMI link may be installed on the link. The configuration of each link may be chosen depending on various specific circumstances and considerations.

[0100] As illustrated in Fig. 2, the dedicated KVM network (200) may comprise a network communication interface (210, 230). Each network communication interface (210, 230) may be configured to transmit / receive network-communication data between at least part of the one or more KVM devices (211, 212, 213, 214; 231, 232, 233, 234), using a data connection (201). The data connection may include one or more of a wired network, a wireless network, a fibre optic cable, and similar components for transmitting data. An example of a network communication interface (210, 230) is an ethemet interface, with corresponding ethernet data being transmitted over the data connection.

[0101] For example, each of the network communication interfaces (210, 230) may be implemented as ethernet devices (210, 230) configured to convert between KVM data and ethemet data. Each ethemet device (210, 230) may be configured to transmit ethemet data using the data connection (201). Each ethemet device (210, 230) may be further configured to convert received ethemet data to KVM data and to forward / transmit the KVM data to respective KVM devices (e.g., 211, 212, 213, 214; 231, 232, 233, 234).

[0102] As illustrated in Fig. 2, a local KVM device (e.g., 211) and a remote KVM device (e.g., 231) may be configured to exchange KVM data. The exchange of the KVM data may be performed using the data connection, e.g., using the network communication interfaces (210, 230).

[0103] Although not illustrated in Fig. 2, more than one network communication interface (210, 230) may be installed on each side and accordingly connected to respective one or more KVM devices. E.g., more than the one illustrated communication interface 210 may be installed on the FPU, and more than the one illustrated communication interface 230 may be installed at the remote location (300).

[0104] Fig. 3 illustrates at the example of remote KVM devices (235, 236) that a single KVM device (e.g., KVM device 235 or KVM device 236) may be configured to connect to a plurality of HMI devices (e.g., to HMI devices 311, 312 via a link L25 or to HMI devices 313, 314 via a link L26). Although not illustrated, similarly, a single local KVM device may be configured to connect to a plurality of local HMI devices. In general, the number of KVM devices and their respective connections establishes to one or more HMI devices is not limited to the illustrations.

[0105] In general, the dedicated KVM network (200) may be configured to establish KVM interfaces at both the remote location (300) and the FPU (100). Establishing / installing KVM interfaces at both sides (remote location and FPU) enables exchange of KVM data between the both sides.

[0106] The dedicated KVM network (200) may be specifically installed so as to only extend chosen local HMI devices (111, 112, 113, 114, 117) to be virtually extended to the remote location (300). In particular, the dedicated KVM network (200) may be established so as to only connect specifically to the one or more local HMI devices (111, 112, 113, 114, 117), but not directly to the local network (120) or to other components on the FPU (100). As illustrated in Fig. 4, the FPU (100) may be structured in a plurality of security levels. For example, the plurality of security levels may include security levels denoted security level 0 (“Level 0”), security level 1 (“Level 1”), and security level 2 (“Level 2”). In general, the plurality of security levels may include security levels 0 to security level N, with N > 1.

[0107] HMI devices may be arranged within these security levels, e.g. depending on their functionality or operation characteristics / roles. For example, a first group of devices may be arranged in a security level 0. A second group of devices may be arranged in a security level 1, etc.

[0108] Fig. 4 illustrates a number of local HMI devices (111, 112, 113, 114, 115, 116, 117) being installed on the FPU (100).

[0109] As an example illustrated in Fig. 4, the security level 0 may comprise a field device (131) for example for controlling part of the operation on the FPU (100). The security level 1 may comprise one or more HMI devices for Basic Process Control Systems, BPCS (local HMI device 115, i.e. a BPCS HMI device), one or more HMI devices for Safety Instrumented Systems, SIS (local HMI device 116, i.e. a SIS HMI device), and one or more HMI devices for package systems (local HMI device 117, i.e. a packaged HMI device). The security level 2 may comprise local HMI devices (111, 112, 113, 114).

[0110] The HMI devices controlled from the remote location (300) using the dedicated KVM network (200) may be chosen specifically. For example, as illustrated in Fig. 4, local HMI devices (111, 112, 113, 114) may be controlled from the remote location (300) via the dedicated KVM network (200). Furthermore, specifically packaged HMI devices (e.g., packaged HMI device 117) may be virtually extended using the dedicated KVM network (200), while other HMI devices may be chosen to not be extended via the dedicated KVM network (200); e.g., BPCS HMI devices and / or SIS HMI devices may be chosen to not be extended via the dedicated KVM network (200).

[0111] Other arrangements than the one illustrated in Fig. 4 may be considered as well. In general, specifically chosen HMI devices may be virtually extended using the dedicated KVM network (200) while other HMI devices may be chosen to not be extended via the dedicated KVM network (200). For example, as illustrated in Fig. 4, local HMI devices (111, 112, 113, 114, 117) may be extended while other local HMI devices (115, 116, 131) may not be extended.

[0112] The choice of which HMI devices are extended may also be linked to the security levels. For example, although not illustrated in Fig. 4, only HMI devices on a certain security level such as security level 2 may be extended while the remaining HMI devices arranged in other security levels may not be extended. In general, different type of Industrial Control and Automation Systems, IACS, may be considered. IACS may refer to a collection of personnel, hardware and software that can affect or influence the safe, secure and reliable operation of an industrial process. Further details about IACS may be found in standardization documents such as IEC 62443, 61511-1.

[0113] Examples of IACS are BPCS, SIS, Packaged system, Packaged system supplied with a UCP.

[0114] BPCS may refer to a system which responds to input signals from a process, its associated equipment, other programmable systems and / or operators and generates output signals causing the process and its associated equipment to operate in the desired manner but which does not perform any Safety Instrumented Function, SIF.

[0115] SIS may refer to an instrumented system used to implement one or more SIFs.

[0116] Packaged system may refer to packaged equipment (for example a compressor, generator, and pump) that have their own instrumentation with control and safety functions implemented for example in a UCP. These packages are usually interfaced to the BPCS and / or SIS, e.g., for system startup, shutdown and equipment status signals to the Operator. For example, monitoring systems (which are connected to BPCS, SIS, or package, such as vibration monitoring) are often considered part of the packaged system.

[0117] In summary, a system (1) for enabling remote control of a FPU (100) is provided. The system (1) comprising: a dedicated keyboard, video and mouse, KVM, network (200) configured to establish a point-to-point dedicated link between one or more local humanmachine interface, HMI, devices (111, 112, 113, 114, 117) and one or more remote HMI devices (311, 312, 313, 314), the one or more local HMI devices (111, 112, 113, 114, 117) being installed in one or more local control rooms (110) on the FPU (100), the one or more local control rooms (110) being configured to enable monitoring operations and / or controlling operations on the FPU (100) via the one or more local HMI devices (111, 112, 113, 114, 117), and the one or more remote HMI devices (311, 312, 313, 314) being installed in one or more remote control rooms (310) at a remote location (300) away from the FPU (100).

[0118] Preferably, the system (1) further comprises a local network (120) comprising a HMI network (121) and a control network (122).

[0119] Preferably, the dedicated KVM network (200) comprises: a first KVM device (211) located at the FPU (100) and configured to convert between first HMI data and first KVM data; and a second KVM device (231) located at the remote location (300) and configured to convert between second HMI data and second KVM data. Preferably, the first KVM device (211) and the second KVM device (231) are configured to exchange KVM data.

[0120] Preferably, the dedicated KVM network (200) further comprises at least one of: a first external display interface link configured to connect a local HMI device of the one or more local HMI devices (111, 112, 113, 114, 117) with the first KVM device, the first external display interface link being for transmitting the first HMI data to the first KVM device; and / or a first serial communication link, such as a Universal Serial Bus, USB, link, configured to connect the local HMI device with the first KVM device, the serial communication link being for transmitting and / or receiving data between the first KVM device and the local HMI device.

[0121] Preferably, the dedicated KVM network (200) further comprises: a network communication interface (210, 230), such as an ethemet interface, configured to transmit and / or receive network-communication data, such as ethernet data, between the first KVM device (211) located at the FPU (100) and the second KVM device (231) located at the remote location (300).

[0122] Preferably, the dedicated KVM network (200) further comprises: a plurality of remote KVM devices (231, 232, 233, 234) located at the remote location (300); a plurality of links (L21, L22, L23, L24) connecting the plurality of remote KVM devices (231, 232, 233, 234) with the one or more remote HMI devices (311, 312, 313, 314), the plurality of links (L21, L22, L23, L24) comprising at least one of external display interface links, and Universal Serial Bus, USB, links, each external display interface link being configured to provide an external display interface connection between at least one of the one or more remote HMI devices (311, 312, 313, 314) and at least one of the plurality of remote KVM devices (231, 232, 233, 234), and each USB link being configured to provide a USB connection between at least one of the one or more remote HMI devices (311, 312, 313, 314) and at least one of the plurality of remote KVM devices (231, 232, 233, 234).

[0123] Preferably, one or more of the external display interface links comprises a High Definition Multimedia Interface, HDMI, link configured to provide a respective HDMI connection between at least one of the one or more HMI devices (311, 312, 313, 314) and at least one of the plurality of KVM devices (231, 232, 233, 234).

[0124] Preferably, the dedicated KVM network (200) is specifically configured to virtually extend the one or more local control rooms (110) from the FPU (100) to the remote location (300). Preferably the dedicated KVM network (200) extends from the FPU (100) to the remote location (300).

[0125] Preferably, the dedicated KVM network (200) comprises at least one of: a wired communication channel using a wired network, and / or a wireless connection.

[0126] Preferably, the wired network comprises a fibre optic cable.

[0127] Preferably, local HMI devices (111, 112, 113, 114, 115, 116, 117) are arranged with a plurality of security levels including a security level 0, a security level 1, and a security level 2, wherein the dedicated KVM network (200) is configured to virtually extend only a subset of local HMI devices (111, 112, 113, 114, 117) of the local HMI devices (111, 112, 113, 114, 115, 116, 117).

[0128] Preferably, the subset of local HMI devices (111, 112, 113, 114, 117) comprises a packaged HMI device (117).

[0129] Preferably, the security level 1 is configured to comprise at least one of a Basic Process Control Systems, BPCS, HMI device (114) and a Safety Instrumented Systems, SIS, HMI device (115).

[0130] Preferably, the one or more local control rooms (110) comprise at least one of: one or more output devices, such as monitors, configured to provide a video output signal; one or more input devices, such as mouses and / or keyboards, configured to provide input signals.

[0131] Preferably, the dedicated KVM network (200) is implemented based on a redundant network for providing redundancy.

[0132] Preferably, the FPU (100) is an Floating Production Storage and Offloading, FPSO, unit (100).

[0133] Preferably, the FPU (100) comprises one or more of an Floating Production Storage and Offloading, FPSO unit, an floating liquefied natural gas, FLNG, unit, an Floating Storage and Offloading, FSO unit.

[0134] Moreover, a method of remotely controlling a Floating Production Unit (100), FPU, via the system is provided. The method comprises: controlling equipment on the FPU (100) by exchanging, via the point-to-point dedicated link established by the KVM network (200), control data as KVM data between the one or more remote HMI devices in the one or more remote control rooms (310) and the one or more local HMI devices in the one or more local control rooms (110), wherein the control data is for monitoring operations and / or controlling operations on the FPU (100) via the one or more local HMI devices. The control data for monitoring operations and / or controlling operations on the FPU (100) is configured to control equipment of the FPU (100) such as process equipment (130), a production site (140), a subsea facility (150).

[0135] Preferably, the method further comprises receiving, at the one or more remote HMI devices via the point-to-point dedicated link established by the KVM network (200), KVM- type data from the one or more local HMI devices, and transmitting, to the one or more local HMI devices via the point-to-point dedicated link established by the KVM network (200), further KVM-type data from the one or more remote HMI devices, wherein the KVM-type data and the further KVM-type data relate to the control data for monitoring operations and / or controlling operations on the FPU (100) so as to enable remote control of the equipment of the FPU (100).

[0136] In conclusion, the system and the method enable secure remote control of the FPU.

Claims

What is claimed is:

1. A system (1) for enabling remote control of a Floating Production Unit (100), FPU, the system (1) comprising: a dedicated keyboard, video and mouse, KVM, network (200) configured to establish a point-to-point dedicated link between one or more local human-machine interface, HMI, devices (111, 112, 113, 114, 117) and one or more remote HMI devices (311, 312, 313, 314), the one or more local HMI devices (111, 112, 113, 114, 117) being installed in one or more local control rooms (110) on the FPU (100), the one or more local control rooms (110) being configured to enable monitoring operations and / or controlling operations on the FPU (100) via the one or more local HMI devices (111, 112, 113, 114, 117), and the one or more remote HMI devices (311, 312, 313, 314) being installed in one or more remote control rooms (310) at a remote location (300) away from the FPU (100).

2. The system (1) of claim 1, wherein the system (1) further comprises a local network (120) comprising a HMI network (121) and a control network (122).

3. The system (1) of any one of the preceding claims, wherein the dedicated KVM network (200) comprises: a first KVM device (211) located at the FPU (100) and configured to convert between first HMI data and first KVM data; and a second KVM device (231) located at the remote location (300) and configured to convert between second HMI data and second KVM data.

4. The system (1) of claim 3, wherein the first KVM device (211) and the second KVM device (231) are configured to exchange KVM data.

5. The system (1) of claim 4, wherein the dedicated KVM network (200) further comprises at least one of: a first external display interface link configured to connect a local HMI device of the one or more local HMI devices (111, 112, 113, 114, 117) with the first KVM device, the first external display interface link being for transmitting the first HMI data to the first KVM device; and / ora first serial communication link, such as a Universal Serial Bus, USB, link, configured to connect the local HMI device with the first KVM device, the serial communication link being for transmitting and / or receiving data between the first KVM device and the local HMI device.

6. The system (1) of claim 4 or claim 5, wherein the dedicated KVM network (200) further comprises: a network communication interface (210, 230), such as an ethemet interface, configured to transmit and / or receive network-communication data, such as ethernet data, between the first KVM device (211) located at the FPU (100) and the second KVM device (231) located at the remote location (300).

7. The system (1) of any one of the preceding claims, wherein the dedicated KVM network (200) further comprises: a plurality of remote KVM devices (231, 232, 233, 234) located at the remote location (300); a plurality of links (L21, L22, L23, L24) connecting the plurality of remote KVM devices (231, 232, 233, 234) with the one or more remote HMI devices (311, 312, 313, 314), the plurality of links (L21, L22, L23, L24) comprising at least one of external display interface links, and Universal Serial Bus, USB, links, each external display interface link being configured to provide an external display interface connection between at least one of the one or more remote HMI devices (311, 312, 313, 314) and at least one of the plurality of remote KVM devices (231, 232, 233, 234), and each USB link being configured to provide a USB connection between at least one of the one or more remote HMI devices (311, 312, 313, 314) and at least one of the plurality of remote KVM devices (231, 232, 233, 234).

8. The system (1) of claim 7, wherein one or more of the external display interface links comprises a High Definition Multimedia Interface, HDMI, link configured to provide a respective HDMI connection between at least one of the one or more HMI devices (311, 312, 313, 314) and at least one of the plurality of KVM devices (231, 232, 233, 234).

9. The system (1) of any one of the preceding claims, wherein the dedicated KVM network (200) is specifically configured to virtually extend the one or more local control rooms (110) from the FPU (100) to the remote location (300).

10. The system (1) of any one of the preceding claims, wherein the dedicated KVM network (200) extends from the FPU (100) to the remote location (300).

11. The system (1) of any one of the preceding claims, wherein local HMI devices (111, 112, 113, 114, 115, 116, 117) are arranged with a plurality of security levels including a security level 0, a security level 1, and a security level 2, wherein the dedicated KVM network (200) is configured to virtually extend only a subset of local HMI devices (111, 112, 113, 114, 117) of the local HMI devices (111, 112, 113, 114, 115, 116, 117).

12. The system (1) of any one of the preceding claims, wherein the one or more local control rooms (110) comprise at least one of: one or more output devices, such as monitors, configured to provide a video output signal; one or more input devices, such as mouses and / or keyboards, configured to provide input signals.

13. The system (1) of any one of the preceding claims, wherein the dedicated KVM network (200) is implemented based on a redundant network for providing redundancy.

14. The system (1) of any one of the preceding claims, wherein the FPU (100) is an Floating Production Storage and Offloading, FPSO, unit (100).

15. The system (1) of any one of claims 1-17, wherein the FPU (100) comprises one or more of an Floating Production Storage and Offloading, FPSO unit, an floating liquefied natural gas, FLNG, unit, an Floating Storage and Offloading, FSO unit.

16. Method of remotely controlling a Floating Production Unit (100), FPU, via the system of any one of the preceding claims, the method comprising:controlling equipment on the FPU (100) by exchanging, via the point-to-point dedicated link established by the KVM network (200), control data as KVM data between the one or more remote HMI devices in the one or more remote control rooms (310) and the one or more local HMI devices in the one or more local control rooms (110), wherein the control data is for monitoring operations and / or controlling operations on the FPU (100) via the one or more local HMI devices and the control data is configured to control equipment of the FPU (100) such as process equipment (130), a production site (140), a subsea facility (150).

17. The method of claim 16, further comprising: receiving, at the one or more remote HMI devices via the point-to-point dedicated link established by the KVM network (200), KVM-type data from the one or more local HMI devices, and transmitting, to the one or more local HMI devices via the point-to-point dedicated link established by the KVM network (200), further KVM-type data from the one or more remote HMI devices, wherein the KVM-type data and the further KVM-type data relate to the control data for monitoring operations and / or controlling operations on the FPU (100) so as to enable remote control of the equipment of the FPU (100).

Images