Layered Process Data Distribution for Secure Remote Plant Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing distributed process control systems lack the ability for real-time, secure access to process data outside the plant premises, limiting operators' situational awareness and causing discontinuities during shift changes, which can impact product quality, efficiency, and safety.
Innovation Solution
A system that securely disseminates process data from a process control node to remote computing devices via a mobile server, allowing real-time communication and access to process data, alarms, and notifications on mobile devices, while maintaining network security through a layered architecture and secure data transmission protocols.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If process control data is made accessible outside the plant premises, then operators gain real-time situational awareness and continuity during shift changes, but network security and system protection are compromised
Solution Approach 1:
The patent introduces multiple intermediary components including a data highway, gateway server, and web server that act as secure buffers between the process control system and external networks. These intermediaries enable remote access to process data while maintaining network security by preventing direct connections to the control system.
Solution Approach 2:
The network architecture is segmented into multiple isolated layers: the process control network, the data highway network, and the external network. This segmentation allows operators to access process information remotely while maintaining security boundaries that prevent unauthorized access to the control system.
2Ease of operation
If centralized hardware devices are used for process monitoring, then data security and system control are maintained, but operators cannot access process data remotely outside the plant
Solution Approach 1:
The patent adds a new dimension to process monitoring by introducing wireless mobile device access alongside traditional centralized hardware terminals. This allows operators to access process data from any location outside the plant while the system maintains its centralized architecture for security.
Solution Approach 2:
Web servers and gateway servers act as intermediaries that translate process control data into formats accessible by mobile devices and web browsers, enabling remote access without requiring operators to be physically present at centralized monitoring stations.
3Speed
If direct network connection is provided to mobile devices, then real-time data access is achieved, but system complexity and security vulnerabilities increase
Solution Approach 1:
Instead of providing direct connections to mobile devices, the system creates simplified copies of process data through web pages and data feeds that can be displayed on any mobile device with a browser. This approach achieves fast data access without the complexity of direct device integration.
Solution Approach 2:
The web server provides a universal interface that works with any mobile device running a web browser, eliminating the need for device-specific implementations. This multi-functional approach reduces system complexity while maintaining real-time data access across multiple platforms.
Data Source
AI summary
A system for securely disseminating information relating to a process control plant includes a process control node and a controller that is coupled to a plurality of process control devices. The process control node includes a communicator module operable to transmit, via a first network, information of the process plant received from the controller. The system also includes a data services module operable to receive from the communicator module, via the first network, the information of the process plant and to transmit some or all of that information via a second network, and a mobile server, coupled to the second network and to a third network, and operable to receive data from the data services module. The mobile server is operable to communicate with a plurality of mobile computing devices via the third network.