Process control system with different hardware architecture controller backup

Patent metadata

Field	Value
Publication number	US-11762742-B2
Application number	US-202016836556-A
Country	US
Kind code	B2
Filing date	Mar 31, 2020
Priority date	Mar 31, 2020
Publication date	Sep 19, 2023
Grant date	Sep 19, 2023

Abstract

A process control system includes first type and second type controllers having different hardware architectures coupled together by a redundancy network for providing a controller pool. Primary application modules (AMs) are coupled to the controller platforms by a plant-wide network. The controller platforms are coupled by an input/output (I/O) mesh network to I/O devices to provide an I/O pool coupled to field devices coupled to processing equipment. A translating device translates states and values from one of the primary AMs running on a first type controller to generate a backup AM having an instruction set compatible with the second type controller. A controller application module orchestrator (CAMO) extends synchronization to the second type controller, makes the backup AM available to the second type controller, and then switches to utilize the second type controller as an active controller running the process.

First claim

The invention claimed is:

1. A method, comprising:
providing a process control system configured for running a process comprising a plurality of controller platforms including first type controllers having a first hardware architecture and at least one second type controller having a second hardware architecture different from the first type controllers coupled to one another by a plurality of redundancy networks for providing a plurality of controller pools, and primary application modules (AMs) coupled to the plurality of controller platforms by a plant-wide network, wherein the plurality of controller platforms are coupled by an input/output (I/O) mesh network to I/O devices to provide an I/O pool coupled to field devices coupled to processing equipment, the method comprising:
translating, as a first translation by the first type of controllers, states and values from at least one of the primary AMs into a hardware architecture independent format information;
transferring the states and the values from the at least one of the primary AMs running on one of the first type controllers to a memory accessible by the second type controller to store a backup AM,
wherein the transferring comprises sending the hardware architecture independent data format information to the memory accessible by the second type controller, to allow synchronization of the second type controller and the first type controllers;
translating, as a second translation by the second type controller, the hardware architecture independent data format information into an instruction set that is compatible with the second hardware architecture thereby extending synchronization to the second type controller; and
switching to utilize the second type controller by deploying the backup AM as an active controller while continuing to run the process using at least one of the redundancy networks, wherein the states and values of the second type controller and the first type controllers are synchronized so that the second type controller is ready to take over as the active controller upon failure of the first type controllers.

2. The method of claim 1 , wherein the first hardware architecture comprises a PowerQUICC or an ARM architecture, and wherein the second hardware architecture comprises an X86 operating system (OS) architecture.

3. The method of claim 1 , wherein at a first time the process is being exclusively controlled by the first type controllers, further comprising at a second time after the first time determining a data processing or memory insufficiency in the first type controllers, and then implementing the switching.

4. The method of claim 3 , further comprising repairing or replacing at least one of the first type controllers to overcome the data processing or memory insufficiency, restoring all controller functions of the first type controllers, then idling the second type controller to transfer an entire controller workload back to the first type controllers.

5. The method of claim 1 , wherein the plurality of controller platforms include at least one redundant controller arrangement.

6. The method of claim 1 , wherein the switching is performed at least partially automatically.

7. The method of claim 1 , wherein a controller application module orchestrator (CAMO) coupled to the plant-wide network implements at least the extending synchronization and the switching.

8. The method of claim 1 , wherein the plurality of controller pools comprising a first controller pool and a second controller pool are coupled to one another by a first redundancy network and a second redundancy network of the plurality of redundancy networks.

9. The method of claim 1 , wherein the plurality of controller pools is extensible by adding additional controllers that have the second hardware architecture that is different from the first hardware architecture.

10. A process control system for running a process, comprising:
a plurality of controller platforms including first type controllers having a first hardware architecture and at least one second type controller having a different second hardware architecture coupled to one another by a plurality of redundancy networks for providing a plurality of controller pools;
primary application modules (AMs) coupled to the plurality of controller platforms by a plant-wide network, wherein the plurality of controller platforms is coupled by an input/output (I/O) mesh network to I/O devices to provide an I/O pool coupled to field devices coupled to processing equipment;
a translating device comprising computing hardware and memory in the at least one second type controller, for translating states and values received from at least one of the primary AMs running on one of the first type controllers to generate a backup AM that has an instruction set compatible with the second type controller;
a controller application module orchestrator (CAMO) comprising a software engine coupled to the plant-wide network, and wherein the CAMO using the software engine is configured to:
translate, as a first translation using the first type of controllers, the states and the values from at least one of the primary AMs into a hardware architecture independent format information;
transfer the backup AM to a memory of the second type controller,
wherein the transferring comprises sending the hardware architecture independent data format information to the memory accessible by the second type controller, to allow synchronization of the second type controller and the first type controllers;
translate, as a second translation using the second type controller, the hardware architecture independent data format information into the instruction set that is compatible with the second hardware architecture thereby extending synchronization to the at least one second type controller; and
switch to utilize the second type controller that deploys the backup AM as an active controller while continuing to run the process using at least one of the redundancy networks, wherein the states and values of the second type controller and the first type controllers are synchronized so that the second type controller is ready to take over as the active controller upon failure of the first type controllers.

11. The process control system of claim 10 , wherein the first hardware architecture comprises PowerQUICC or an ARM architecture, and wherein the second hardware architecture comprises an X86 operating system (OS) architecture.

12. The process control system of claim 10 , wherein at a first time the process is being exclusively controlled by the primary AMs, further comprising one of the first type controllers or the second type controller at a second time after the first time for determining a data processing or memory insufficiency in the first type controllers, and then implementing the switching.

13. The process control system of claim 12 , wherein at least one of the first type controllers is repaired or replaced to overcome the data processing or memory insufficiency, to restore all controller functions of the first type controllers, then idling the second type controller to transfer an entire controller workload back to the first type controllers.

14. The process control system of claim 10 , wherein the plurality of controller platforms include at least one redundant controller arrangement.

15. The process control system of claim 10 , wherein the switching is performed at least partially automatically.

16. The process control system of claim 10 , wherein the plurality of controller pools comprising a first controller pool and a second co

Assignees

• Honeywell Int Inc

Inventors

• Mclaughlin Paul Francis
• Urso Jason Thomas
• Schreder James Michael
• Felix Joseph Pradeep
• Waynick Michael James
• Rachlin Elliott Harry

Classifications

• G05B19/4184 Primary

  characterised by fault tolerance, reliability of production system · CPC title

• G06F11/2028 Primary

  eliminating a faulty processor or activating a spare · CPC title

• G05B2219/31088

  Network communication between supervisor and cell, machine group · CPC title

• G06F11/2025

  using centralised failover control functionality · CPC title

• G06F11/2005

  using redundant communication controllers · CPC title