Cloud IoT Safety Communication for Geographically Separated SISs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional safety instrumented systems (SISs) in the oil and gas and petro-chemical industries face challenges in preventing recurring hazardous events and escalating unsafe conditions due to geographical limitations and lack of real-time communication between geographically separated systems, leading to cascade effects and collateral damage.
Innovation Solution
The implementation of a redundant, reliable, and functional safety certifiable communication system using Cloud technology or other certified protocols to link geographically separated SISs, enabling real-time communication and decision-making across distant locations to prevent hazardous events by automatically taking necessary actions, such as shutting down the source of the hazard.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional SISs are used with hardwired I/O, then the system is simple and reliable locally, but geographical limitations prevent communication between distant systems leading to cascade effects
Solution Approach 1:
The patent introduces a communication intermediary layer (cloud-based platform, wireless communication modules, and protocol translators) that mediates between geographically separated SISs. This intermediary enables safe state communication across distances without requiring direct physical connections, thus preventing cascade effects while managing complexity through standardized interfaces and protocols.
Solution Approach 2:
The patent segments the safety communication system into independent modular components: local SIS units, communication interfaces, transmission network, and remote SIS units. Each segment operates semi-independently with defined interfaces, allowing geographical distribution while maintaining system reliability through modular fault isolation and individual component certification.
2Adaptability or versatility
If geographically separated SISs are connected using Cloud technology, then real-time communication is enabled across distances, but communication reliability and functional safety certification become challenging
Solution Approach 1:
The patent implements beforehand cushioning through redundant communication pathways and pre-configured fail-safe mechanisms. Multiple communication channels (wireless, wired, satellite) are established in advance with automatic failover capabilities, ensuring that if one pathway fails, alternative routes maintain safety communication. This cushioning approach addresses reliability concerns before they manifest in operational failures.
Solution Approach 2:
The patent employs parameter changes by dynamically adjusting communication protocols, data transmission frequencies, and safety integrity levels based on operational conditions and geographical requirements. Functional safety parameters are adapted to match the specific characteristics of each communication medium while maintaining certification compliance, enabling versatile deployment across different geographical scenarios.
3Reliability
If redundant communication systems are implemented, then communication reliability improves, but system complexity and cost increase
Solution Approach 1:
The patent merges multiple communication functions and redundancy mechanisms into integrated communication modules that combine wireless transceivers, protocol handlers, and fault management logic. By consolidating these functions into unified components rather than separate systems, the patent achieves high reliability through redundancy while managing overall system complexity through integration and standardized interfaces.
Data Source
AI summary
Systems and methods include a computer-implemented method: A first Safety Instrumented Function (SIF) determines that a process equipment event has occurred or is predicted to occur in a first system. A first action to be performed by the first SIF is identified. In response to determining that the process equipment event has occurred or is predicted to occur, the first action is performed by the first SIF to prevent an occurrence of a first hazardous event. A determination is made by a highly-reliable, self-healing communication transmission network that a second action is to be performed in the second SIF to prevent the occurrence of a second hazardous event. In response, a notification is provided by the transmission network to the second SIF that the second action is to be performed. In response to receiving the notification by the second SIF, the second action is performed by the second SIF.