Redundant Gateway Switching for Continuous Field Device Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In automation technology systems, plant asset management systems fail to recognize switchover from a primary communication network to a redundant backup network, leading to disrupted communication and loss of information when the control room switches due to faults, causing the operating unit to lose access to field devices.

Innovation Solution

A method is implemented using two gateways with different communication interfaces, connected to the same field device via redundant networks, allowing the control room to switch between them and ensuring the operating unit automatically switches to the active network, utilizing a common driver for seamless communication access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a redundant communication network is implemented with parallel lines for fault tolerance, then system reliability is improved, but the operating unit loses access to field devices when the control center switches between networks

Engineering Contradiction:
Improvecommunication reliabilityVSAvoidaccess to field devices
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The operating unit continuously monitors the communication status by analyzing telegrams on both communication networks. When a switchover is detected, the system receives feedback about the active network and automatically adjusts its access path accordingly, ensuring continuous access to field devices despite network changes

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system dynamically adapts its communication path by switching between the first and second communication networks based on real-time status. The operating unit can flexibly change its access route to field devices depending on which network is currently active, maintaining operational continuity

Inventive Principle:
Principle #15Dynamics

2Reliability

If the control center switches communication networks upon detecting faults, then communication reliability is improved, but the asset management system experiences connection interruption and loses information

Engineering Contradiction:
Improvecommunication continuityVSAvoidfield device information
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The operating unit acts as an intermediary that monitors both communication networks simultaneously. It detects the control center's switchover by analyzing telegram patterns and bridges the information flow by switching its own access path to match the active network, preventing information loss

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary monitoring of both communication networks before a switchover occurs. By continuously analyzing telegrams on both networks, the operating unit is already aware of the active network status and can immediately adjust its access path when a switchover happens, minimizing information loss

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP3692686B1Method for operating an automation technology facility
Publication Date: 2023.06.21 ENDRESS HAUSER PROCESS SOLUTIONS AG
  • EP3692686B1 patent drawingFigure 1
  • EP3692686B1 patent drawingFigure 2a~2b

AI summary

The invention relates to a method for operating an automation technology facility in which at least one field device (FG1, FG2) is used, wherein a first gateway (GW1) is connected via a first communication network (KN1) to the field device (FG1, FG2), wherein a second gateway (GW2) is connected to the field device (FG1, FG2) via a second communication network (KN2), connected redundantly and in parallel with the first communication network (KN1 ), wherein the first and the second gateway (GW2) are connected to a control unit (BE) for monitoring and/or operating the field device (FG1, FG2), wherein the first communication network (KN2) and the second communication network (KN2) are connected to a control room (LW) for the facility, wherein the control room (LW) establishes a communications connection and communicates either with the first communication network (KN1) or with the second communication network (KN2), wherein the control room (LW) switches over to the correspondingly other communication network (KN1, KN2) and establishes a communication connection therewith if a problem is detected in the previous communication connection, wherein communication access to the first gateway (GW1 ) is implemented in the control unit (BE) via a first driver in the control unit (BE), wherein communication access to the second gateway (GW2) is implemented in the control unit (BE) via a second driver in the control unit (BE), and wherein the control unit (BE) continuously analyses the first communication network and the second communication network (KN1, KN2) and in the event of a control room (LW) switchover, switches over to the gateway (GW1, GW2) of that network which is actively in communication connection with the control room (LW).