Control Program Management System with Approval Workflow

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for changing control parameters or logic in power generation plants do not effectively prevent content errors and do not meet the safety standards set by IEC 61508 and JIS C 0508, potentially leading to misoperations.

Innovation Solution

A control program management system that involves an editing device for generating new control programs, an approval-receiving device for confirming and approving the content of these programs, and a control arithmetic device that only implements the changes after receiving approval from a third-party manager, utilizing CRC codes for error detection and ensuring proper user authorities are followed.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If operators or maintenance engineers directly change control parameters or logic during operation, then the ease of operation is improved, but the reliability deteriorates due to potential misoperations and content errors

Engineering Contradiction:
Improveease of changing control programVSAvoidreliability of control program
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces an approval-receiving device as an intermediary between the editing device and control arithmetic device. This mediator verifies the authority of operators, checks for content errors in proposed changes, and requires approval before implementing modifications. This resolves the contradiction by enabling easy operation through direct interface while maintaining reliability through intermediate verification steps.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements preliminary verification actions before control program changes are executed. The system checks operator authority, detects content errors in the new control program, and requires approval from designated personnel before applying changes. This preliminary action ensures reliability is maintained while allowing ease of operation during the actual change process.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If version checking and authority checking methods are implemented, then the reliability is improved, but they do not prevent content errors in control programs

Engineering Contradiction:
Improveprevention of misoperationVSAvoidaccuracy of control program content
Core Design Contradiction:
ReliabilityVSManufacturing precision

Solution Approach 1:

The patent replaces manual verification methods with automated error detection mechanisms. The approval-receiving device automatically checks the new control program for content errors using error detection codes (such as CRC codes) before approval is given. This substitution of automated detection for manual checking improves both reliability and content accuracy simultaneously.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The approval-receiving device serves as an intermediary that performs both authority verification and content error detection. It receives the new control program, verifies operator authority, checks for content errors using error detection codes, and only allows implementation if both checks pass. This intermediary function simultaneously addresses both reliability and manufacturing precision concerns.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If third-party approval process is implemented, then the reliability is improved by preventing content errors, but the productivity deteriorates due to additional approval steps

Engineering Contradiction:
Improveprevention of content errorsVSAvoidspeed of control program change
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system implements self-service error detection using automated error detection codes (such as CRC codes) that are calculated and verified by the approval-receiving device itself. This automated self-verification reduces the burden on third-party approvers, allowing them to quickly validate error detection codes without manually reviewing entire control programs, thus maintaining reliability while improving productivity.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent replaces manual content review with automated error detection code verification. The approval-receiving device automatically calculates and verifies error detection codes of the new control program, substituting time-consuming manual content inspection with rapid automated verification. This maintains reliability through thorough error checking while significantly improving the speed of the approval process.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentEP2821866B1Control program management system and method for changing control program
Publication Date: 2017.12.13 MITSUBISHI HEAVY IND LTD
  • EP2821866B1 patent drawingFigure 1
  • EP2821866B1 patent drawingFigure 2~3
  • EP2821866B1 patent drawingFigure 4

AI summary

A control calculation device causes the contents of a new control program received from an editing device to be displayed on an approval-receiving device. The approval-receiving device receives an input from a manager comprising approval information expressing whether or not a change to the control program is approved. The control-calculation device changes the control program to the new control program when the approval information received from the approval-receiving device is information indicating approval of the new control program.