Cloud-based control platform with connectivity to remote embedded devices in distributed control system

Patent metadata

Field	Value
Publication number	US-10310467-B2
Application number	US-201615251815-A
Country	US
Kind code	B2
Filing date	Aug 30, 2016
Priority date	Aug 30, 2016
Publication date	Jun 4, 2019
Grant date	Jun 4, 2019

Abstract

A method includes transmitting, over a virtual private network (VPN) to a remotely-located control platform, a request for first information associated with a BOOTP protocol synchronization process. The method also includes receiving, from the control platform, a first response comprising the requested first information. The method further includes receiving, over a local network from an embedded device in a distributed control system, a request for second information associated with the BOOTP protocol. In addition, the method includes transmitting, to the embedded device, a second response comprising the requested second information.

First claim

What is claimed is:

1. A method for communicating between a remotely-located control platform and an embedded device in a distributed control system over a virtual private network (VPN), comprising:
communicatively coupling a bootstrapping server to the embedded device via a local network;
transmitting, over the VPN to the remotely-located control platform, a request for first information associated with a BOOTP protocol synchronization process;
receiving, from the control platform, a first response comprising the requested first information;
receiving, over the local network from an embedded device in the distributed control system, a request for second information associated with the BOOTP protocol; and
transmitting, to the embedded device, a second response comprising the requested second information,
wherein:
the VPN comprises a VPN tunnel between first and second VPN endpoints,
the second VPN endpoint is communicatively coupled to the embedded device and the bootstrapping server by the local network, and
at least one of the first and second VPN endpoints is configured to only allow information associated with the distributed control system to pass through the VPN tunnel.

2. The method of claim 1 , further comprising:
initializing one or more BOOTP protocol components before transmitting the request for first information.

3. The method of claim 1 , wherein the first information comprises at least one of: one or more Ethernet settings and one or more MAC identifiers.

4. The method of claim 1 , wherein the second response comprises a User Datagram Protocol (UDP) response.

5. The method of claim 1 , wherein the embedded device comprises a Level 1 controller in an industrial process control and automation system.

6. The method of claim 1 , wherein the control platform is configured to control the embedded device over the VPN after the second response is transmitted to the embedded device.

7. An apparatus for communicating between a remotely-located control platform and an embedded device in a distributed control system over a virtual private network (VPN), comprising:
at least one network interface stored in a memory configured to receive and transmit data over at least one network; and
at least one processing device having a hardware processor configured to control the at least one network interface to:
communicatively couple to a bootstrapping server to the embedded device, having a hardware processor, via a local network;
transmit, over the VPN to the remotely-located control platform stored in a memory, a request for first information associated with a BOOTP protocol synchronization process;
receive, from the control platform, a first response comprising the requested first information;
receive, over the local network from the embedded device in the distributed control system, a request for second information associated with the BOOTP protocol; and
transmit, to the embedded device, a second response comprising the requested second information,

wherein:
the VPN comprises a VPN tunnel between first and second VPN endpoints,
the second VPN endpoint is communicatively coupled to the embedded device and the bootstrapping server by the local network, and
at least one of the first and second VPN endpoints is configured to only allow information associated with the distributed control system to pass through the VPN tunnel.

8. The apparatus of claim 7 , wherein the at least one processing device is further configured to initialize one or more BOOTP protocol components before transmitting the request for first information.

9. The apparatus of claim 7 , wherein the first information comprises at least one of: one or more Ethernet settings or one or more MAC identifiers.

10. The apparatus of claim 7 , wherein the second response comprises a User Datagram Protocol (UDP) response.

11. The apparatus of claim 7 , wherein the embedded device comprises a Level 1 controller in an industrial process control and automation system.

12. The apparatus of claim 7 , wherein the control platform is configured to control the embedded device over the VPN after the second response is transmitted to the embedded device.

13. A system comprising:
an embedded device having a hardware processor in a distributed control system;
a control platform stored in a memory configured for communication with the distributed control system over a virtual private network (VPN), the control platform located remotely from the embedded device, the control platform configured to support native communication with the embedded device; and
a bootstrapping server having a hardware processor communicatively coupled to the embedded device by a local network, the bootstrapping server configured to:
transmit, over the VPN to the control platform, a request for first information associated with a BOOTP protocol synchronization process;
receive, from the control platform, a first response comprising the requested first information;
receive, over the local network from the embedded device, a request for second information associated with the BOOTP protocol; and
transmit, to the embedded device, a second response comprising the requested second information,

wherein:
the VPN comprises a VPN tunnel between first and second VPN endpoints,
the second VPN endpoint is communicatively coupled to the embedded device and the bootstrapping server by the local network, and
at least one of the first and second VPN endpoints is configured to only allow information associated with the distributed control system to pass through the VPN tunnel.

14. The system of claim 13 , wherein the bootstrapping server is further configured to initialize one or more BOOTP protocol components before transmitting the request for first information.

15. The system of claim 13 , wherein the first information comprises at least one of: one or more Ethernet settings or one or more MAC identifiers.

16. The system of claim 13 , wherein the second response comprises a User Datagram Protocol (UDP) response.

17. The system of claim 13 , wherein the embedded device comprises a Level 1 controller in an industrial process control and automation system.

18. The system of claim 13 , wherein the control platform is configured to control the embedded device over the VPN after the second response is transmitted to the embedded device.

19. The system of claim 13 , wherein the control platform is hosted in the cloud and comprises at least one of: one or more supervisory control applications, one or more procedural operations using standard function blocks, one or more custom applications using custom algorithm blocks, multiple selectable execution periods, one or more shared standard function blocks with different types of controllers, inter-cluster communication, Open Platform Communications (OPC) integration into a control environment, and multivariable control and optimization technology.

Assignees

• Honeywell Int Inc

Inventors

• Haridas Harshal S
• Booker Shane W
• Mclaughlin Paul F
• Watson Adrian
• Strilich James A
• Schreder James

Classifications

• G05B2219/25232

  DCS, distributed control system, decentralised control unit · CPC title

• G05B2219/23276

  Use of virtual, logical connections · CPC title

• G05B19/042 Primary

  using digital processors (G05B19/05 takes precedence) · CPC title

• G05B19/4155

  characterised by program execution, i.e. part program or machine function execution, e.g. selection of a program · CPC title

• G05B19/41855

  by local area network [LAN], network structure · CPC title