Field Device Parameter Change Approval for Active DCS Loops
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In distributed control systems, independent access by asset management systems to field devices can lead to unintended changes in active control processes without the knowledge or approval of DCS operators, potentially causing operational hazards due to differing levels of knowledge about current plant processes.
Innovation Solution
Implementing a security services module that intercepts write commands from asset management systems and requires approval from DCS operators before executing parameter changes, ensuring that only approved changes are committed to field devices, thereby preventing potentially damaging modifications to live plant processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of repair
If asset management systems are given independent access to field devices for maintenance and health monitoring, then device maintenance capability is improved, but operational safety deteriorates due to potential unintended changes in active control processes
Solution Approach 1:
A security services module is introduced as an intermediary component between the asset management system and field devices. This module intercepts write commands from the AMS, validates them against current process conditions monitored by the DCS, and either permits or blocks the commands. This mediator resolves the contradiction by enabling maintenance access while preventing harmful unintended changes through automated validation.
2Object-affected harmful factors
If write commands from asset management systems are intercepted and validated by DCS operators, then operational safety is improved, but command execution time increases due to the approval process
Solution Approach 1:
The security services module implements automated validation logic that independently assesses write commands against current process conditions without requiring manual operator review for every command. The system self-evaluates whether a command would create unsafe conditions based on real-time DCS data, automatically permitting safe commands and only blocking potentially harmful ones. This reduces the time loss compared to full manual approval processes while maintaining safety.
Data Source
AI summary
A system for preventing inadvertent or untimely parameter changes to an active online field device from a secondary system different from a distributed control system application providing control instructions to the field device, where the parameter changes may cause detrimental effects to a plant process or activity. A request for a parameter change from the secondary system may be intercepted before the request is received by a field device or a controller for evaluation by an operator of the distributed control system. The validation process may provide a plant operator with override authority to approve or deny a set of critical parameter changes to an active field device or other active plant device.