Operator Station Server Load Restriction for Safe Configuration Sync

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In technical plants, unsynchronized loading of automation data between operators and project planners at different locations can lead to loss of control, potential damage to the plant, and risks of server overload during data processing.

Innovation Solution

The operator station server is configured to refuse receipt or processing of automation configurations for a specific period if an abort condition is present, such as server overload, to prevent disruptions and maintain high availability.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If the operator station server continuously receives and processes automation configurations, then the system maintains high productivity and responsiveness, but the server may become overloaded leading to system failures and loss of control

Engineering Contradiction:
Improvesystem responsivenessVSAvoidserver stability
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The invention applies preliminary anti-action by detecting abort conditions (such as operator activities like error handling or critical optimizations) before they lead to system failure, and proactively restricting automation configuration loading to prevent server overload and maintain system reliability

Inventive Principle:
Principle #9Preliminary anti-action

Solution Approach 2:

The system dynamically adjusts its behavior by monitoring server load and operator activities in real-time, temporarily restricting automation configuration loading when abort conditions are detected, and automatically resuming normal operations when the server is ready, thus adapting productivity and reliability based on current system state

Inventive Principle:
Principle #15Dynamics

2Ease of operation

If operators and project planners work independently at different locations, then the system provides operational flexibility and ease of use, but unsynchronized loading of automation data can lead to loss of control and potential plant damage

Engineering Contradiction:
Improveoperational flexibilityVSAvoidcontrol synchronization
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The invention implements feedback mechanisms where the operator station server monitors operator activities and communicates abort conditions back to the engineering station server, ensuring that automation configuration loading is synchronized with current operational status, thus maintaining control safety while allowing distributed work

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system performs preliminary actions by checking for abort conditions and notifying the engineering station server before allowing automation configuration loading, preventing unsynchronized changes that could lead to loss of control while maintaining the flexibility of distributed operations

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12298745B2Event related load restrictions of a server of a control system of a technical plant
Publication Date: 2025.05.13 SIEMENS AG
  • US12298745B2 patent drawing
  • US12298745B2 patent drawing
  • US12298745B2 patent drawing

AI summary

A control system for a technical plant, in particular a process or production plant, includes an operator station server and an engineering station server, wherein the engineering station server includes a computer-implemented design tool via which an automation configuration for an automation of the technical plant can be created, and wherein the engineering station server transmits the automation configuration for operating and monitoring the technical plant to the operator station server, where operator station server of the control system refuses, for a specific period of time, receipt or processing of the automation configuration for the operation and monitoring of the technical plant if an abort condition is present.