Honeywell International Inc.

Honeywell G.m.b.h.

Joseph Pradeep Felix

Paul Francis McLaughlin

James Michael Schreder

Jason Thomas Urso

John J Rosa-Bian

Norman Raymond Swanson

Jay William Gustin

Jethro F Steinman

David Barry Granatelli

Harshal Haridas

James A Strilich

Michael James Waynick

Elliott H Rachlin

Nagaraja Sundaresh

Michael D Carney

Andrew Duca

Ellen B Hawkinson

Abhishek Nikhra

W Russell Massey

Cathleen F Kilpatrick

Muslim Gulam Kanji

Joseph J Pane

Ram Mohan Anugu

Adrianus Cornelis Maria Hamers

Suraj Prakash

Sunil S Bale

Girish Krishnanivas

Aad Van Wensen

Ashutosh Singh

Ken Gorman

Robert Altimari

Christopher Michael Gilbert

Srinivas Atukuri

Sunil Bale

Jethro Francis Steinman

Mohammed Rizwan

Amol Gandhi

Falgun Bhayani

Prasad Samudrala

Norman R Swanson

Zhi Yang

John Rosa-Bian

Paul F Mclaughlin

Paul Francis Mclaughlin

Paul Mclaughlin

Harshal S Haridas

Elliott Harry Rachlin

A method is disclosed for using an alternate communication path to send and receive data between a first network node and a second network node. The method includes establishing a first communication path between the first network node and the second network node that sends and receives data between the first network node and second network node and a second communication path between the first network node and the second network node that sends and receives data between the first network node and second network node. A diagnostic program tests the first and second communication paths for network failures causing the alternate network path to send and receive data between the first network node and second network node when a network failure in the first and second communication paths is detected and alerting a technician of the failure and that the first and second communication paths need repair. The first and second communication paths returning to normal operation upon the repair of the failure.

Method and apparatus for an alternate communication path for connected networks

A process control system (PCS) includes a cable connection including physical cables including a first cable for connecting between a process controller and an I/O access device, and an independent second cable for connecting the process controller and a second node being the I/O access device or another device. The I/O access device is for coupling to I/O module(s) to receive an output of the I/O access device. An output of the I/O module is coupled to a field device coupled to processing equipment. The process controller and I/O access device each include a processor and memory that implement send and receive logic for communicating using any of multiple redundancy protocols including a first and a second redundant protocol. The cable connection is for supporting simultaneously communicating between the process controller and the second node utilizing both the first redundant protocol and the second redundant protocol.

Multiple network redundancy protocols for data flow using the same physical interface

A process control system includes first type and second type controllers having different hardware architectures coupled together by a redundancy network for providing a controller pool. Primary application modules (AMs) are coupled to the controller platforms by a plant-wide network. The controller platforms are coupled by an input/output (I/O) mesh network to I/O devices to provide an I/O pool coupled to field devices coupled to processing equipment. A translating device translates states and values from one of the primary AMs running on a first type controller to generate a backup AM having an instruction set compatible with the second type controller. A controller application module orchestrator (CAMO) extends synchronization to the second type controller, makes the backup AM available to the second type controller, and then switches to utilize the second type controller as an active controller running the process.

Process control system with different hardware architecture controller backup

A process control system includes a process controller level including at least one process controller, and an input/output (I/O) module level including at least one I/O module. The process controller level and the I/O module level are communicatively coupled. and each include control logic comprising control hardware or algorithm blocks. The control logic in the process controller level and the I/O module level are configured to execute and exchange data to perform process control for a process run by the process control system in a distributed fashion across the process controller level and the I/O module level.

Industrial control system having multi-layered control logic execution

In an industrial automation system, a control device adapted to a container-based architecture has been developed. The control device may comprise one or more containers instantiated with control execution application, communication application, and or redundancy management application.

High availability for container based control execution

Methods and systems for synchronizing controllers in an automation control system, can involve arranging redundancy elements in an automation control system comprising a group of nodes, wherein the redundancy elements can include one or more primary controllers and a group of concurrent secondary controllers, and wherein a back-up to the primary controller can exist on any node. Such methods and systems can further involve backing-up of the primary controller by the one or more secondary controllers to allow the primary controller to maintain the one or more secondary controllers as a new, alternate secondary controller for a load balancing or an equipment update.

Multi-synch of a primary automation device with multiple secondaries

A method for use by a primary device associated with a secondary device of a redundant pair, the primary device issuing a synchronization request to its control database causing the primary device to send a tracked memory file storage of the primary device to the secondary device to update the secondary device control database and to periodically send on request of the primary device the cached changes made in the primary device to the secondary device to update the secondary device control database. The secondary device using the updated control database to identify communications connections and paths to I/O modules and peer devices assigned to the secondary device and to perform diagnostic testing of the communications connections and paths identified by the interrogation and send diagnostic messages upon detection of faults in the communication connections and paths identified.

Method and apparatus for the enhanced diagnostic coverage of a secondary device of a redundant controller pair

A safety instrumented system (SIS) includes safety controllers, and safety input/output (I/O) modules coupled to safety field devices that are coupled in parallel with a process control system's field devices to processing equipment which is configured and controlled to run a process. An I/O mesh network between the safety controllers and the safety I/O modules is configured for selecting any safety controller to become coupled to any safety I/O module to function as a pool of safety I/O modules so that any safety controller is configurable to receive sensor signals from and transmit control signals to any safety field device. The safety field devices are for monitoring process variable(s) for the process so that when one of the safety controllers recognizes a hazardous condition regarding the processing equipment, the SIS independently takes action to keep the processing equipment under control or bring it to a safe state.

I/O mesh architecture for a safety instrumented system

A process control system includes a first process controller coupled to a first set of input/output (I/O) modules that provided first channels, including an I/O software agent coupled to an I/O module pool that includes a first and at least a second I/O module collectively providing pooled channels. The first channels and the pooled channels are each coupled by a respective field device to first and second processing equipment, respectively. The I/O software agent is configured for enabling addition of the first set of I/O modules to the LO module pool, coupling of a plurality of additional process controllers in a controller pool to the first process controller, and enabling at least one of i) making any of the first channels available to any of the process controllers in the controller pool, and ii) making any of the pooled channels available to the first process controller.

On-process migration of controller(s) to utilize an IO pool

An apparatus is disclosed that is used in an industrial process control and automation system that operates using an open platform data communication protocol. The apparatus includes a processor and a memory, and a communications interface connected to at least one process instrument and arranged to transmit instructions to and receive data from the at least one process instrument and to a data network of the industrial process control and automation system that communicates using the open platform data communication protocol. The apparatus memory contains a system repository file containing process data information sent to the apparatus from the at least one process instrument, a stored function block definition file containing function blocks that define a control strategy for controlling the at least one process instrument and an engineering repository containing the characteristics and parameters for the function blocks associated with the at least one process instrument. The processor operates to communicate the process data from the system repository file to the industrial process control and automation system using the open platform data communication protocol and to receive instructions from the industrial process control and automation system to execute the control strategy.

Industrial process control and automation system having decoupled controllers

An electronic device and other electronic device include a first and second port that utilizes a parallel redundancy protocol in a communications network including a first and second lane. The devices include a processing circuit, a PRP handler, a protocol stack, a memory, permanent storage accessible by the processing circuit, and transmit and receive circuitry for transmitting and receiving packets. A redundancy manager is for identifying path faults in the network. The processing circuit implements a method of detecting network path fault, including the other electronic device transmitting a frame pair over the first lane and second lane. The electronic device receives the frame pair and implements a receive processing flow, when the first frame or the second frame is identified to be a redundant frame, removes the redundant frame, and compares a first frame parameter to a second frame parameter to determine when the path fault is present.

Detecting path faults in parallel redundancy protocol communications

A distribution system that provides for multicast transmission of the most important data that is of highest interest and value to client applications including HMI stations, historians, trend views, alarm management functions, advanced process controls, peer-peer communications and supervisory control. A blast list containing the types of data that are to be collected is formulated and stored in a system server and sent to embedded controllers which then multicasts that data to the system server and all console stations in the system.

Data distribution method for a process automation and internet of things system

Control execution environment and container based architecture

A network control system within an industrial processing facility (IPF) includes a controller platforms coupled to one another by a private path redundancy network providing a controller pool, each controller platform having at least one controller including computing hardware and a memory. An application module (AM) pool includes a plurality of AMs, wherein the controller platforms are coupled by an input/output mesh network to input/output devices coupled to field devices that are coupled to processing equipment in the IPF. A control application module orchestrator (CAMO) coupled to the plant-wide network is for dynamically deploying the AM's to the controller platforms, wherein the CAMO receives resource consumption attribute data regarding the controller platforms including a pool of available storage in the memory and processing resources available for the computer hardware. Based on the resource consumption attributes, the plurality of AMs are at least partially automatically deployed to the controller platforms.

Controller application module orchestrator

A security appliance to perform a method that includes receiving a first set of data from a first device using a first secure protocol of a first network, the first secure protocol comprises a first level of security, and determining, by the security appliance, that the received first set of data is intended for a second device on a second network using a second secure protocol, the second secure protocol comprises a second level of security different from the first. The method includes authenticating, by the security appliance, the received first set of data from the first network using the first secure protocol for transmission through the second network using the second secure protocol while collecting and concentrating additional data from the first network and transmitting, by the security appliance, the received first set of data to the second device via the second network comprising the second secure protocol.

Apparatus and method for using a security appliance with IEC 61131-3

Growing community of inventors

Phoenixville, PA, United States of America

Joseph Pradeep Felix