Rockwell Automation Technologies Incorporated

Sivaram Balasubramanian

Kendal R Harris

Anatoly Moldovansky

Brian Alan Batke

Anthony Gerard Gibart

Chandresh R Chaudhari

Kenwood H Hall

Francisco Paul Maturana

Scott A Pierce

Raymond R Husted

Jonathan D Bradford

Mark A Flood

Robert J Kretschmann

Raymond John Staron

Gregg M Sichner

Gregory A Majcher

Daniel E Killian

Kyle E Neet

Pavel Tichy

Patrick D Telljohann

Petr Slechta

David M Fort

Edward C Korsberg

David Alan Vasko

Taryl Jon Jasper

Gary Dan Dotson

Scott D Braun

Petr Ptacek

James B Vitrano

Jessica E Forguites

Nicholas Stay

Benjamin H Nave

August B Schrab

Kurt R Hohensee

William A Bartz

Mark G Devonshire

Mohammadreza Serjooei

Jaime D Fernandes

Chad J Bohl

Mark R Hantel

Robert Alexander

August Schrab

Benjamin Nave

A system of communicating data over a high availability industrial control system is disclosed. The industrial control system includes a first data producer, a second data producer in communicative connection with the first data producer, a first data consumer, and a second data consumer in communicative connection with the first data consumer. The system further includes the first producer communicating the data over multiple connection paths from the first producer to the first consumer and the second consumer through intermediate modules, and the second producer communicating the data over multiple connection paths from the second producer to the first consumer and the second consumer through intermediate modules. Also disclosed is a method of communicating data over the high availability industrial control system.

System and method of communicating data over high availability industrial control systems

A system for communicating between redundant devices balances the desired attributes of a high availability (HA) control system and a safety control system. The system includes concurrent connections as a fault tolerant mechanism for industrial protocol connections at the transport layer. The concurrent connections establish multiple paths for redundancy from a data producer to a data consumer. Concurrent connections increase availability of the HA control and safety instrumented systems. More specifically, concurrent connections and architectural redundancies eliminate a single point of failure within the control system and further reduce safety connection timeouts during fault detection and/or recovery. Concurrent connections may be used to keep a HA system operational or to provide detection of a failure in a safety system. The industrial control network may be configured to function as a HA control system, as a safety control system, or with certain degrees of both HA and safety-related operation.

System and method of communicating safety data over high availability industrial control systems

A method and system for assigning slot addresses to modules in a fault tolerant industrial control system includes a pair of backplane switches on each base. Each backplane switch is configured to communicate between one backplane and the modules located on the base and to communicate between backplane switches located at adjacent bases. A backplane switch on a bank master base first assigns a base address and slot addresses to itself. The backplane switches on each additional base initiate transmission of a base address request. A base address response, including a base address and slot numbers for the adjacent base, is transmitted after a base has its own address assigned. Each base repeats the process in sequence along the bank, incrementing the base address by one and the slot address by the number of slots on the base and passing the new base and slot addresses along the bank.

Fault tolerant backplane slot assignment

A modular I/O system for an industrial automation network includes a network adapter including first and second adapter modules, wherein each adapter module is configured for connection with an industrial network. The I/O system further includes a first I/O device with first and second I/O modules each configured for operative connection to a controlled system for input/output of data with respect to the controlled system. The I/O system further includes first and second independent backplane data networks that connect each of the first and second adapter modules to each of the first and second I/O modules. The network adapter includes first and second removable backplane network switches and the first I/O device includes third and fourth removable backplane network switches that establish the backplane networks. The backplane network switches can be Ethernet gigabit switches.

Distributed modular input/output (I/O) system with redundant ethernet backplane networks for improved fault tolerance

For uninterrupted network communications, a method detects a protected reset at a network device. In response to the protected reset, the method maintains communication functions of a communication module. The communication module communicates with other network devices using the communication functions. In response to the protected reset, the method resets the network device without resetting the communication module.

Protected reset for network device

A method and system for interacting with data frames passing through a module connected to an industrial network is disclosed. Each module includes an aggregation unit located on the network interface above the physical layer. To transmit data, the aggregation unit reads a header from a dynamic data packet to determine if the module is a participant module for the packet. If so, the aggregation unit inserts data from the module into the data packet and transmits the packet to another module. To receive data, the aggregation unit reads a header from the data packet to determine whether the data packet includes data for the module. If so, the aggregation unit reads the data and passes the data packet to another module. If the aggregation unit determines that a data packet is not intended for the module, the data packet is passed to another module with no further interaction.

Method and system for data aggregation in an industrial communication protocol

An improved system for establishing rules in a firewall for an industrial network is disclosed. Rules are established at an application level, identifying, for example, actions to occur between two devices. The action may be, for example, read data table or get attribute, and each action may require multiple message packets to be transmitted between the two devices in order to complete. A network device executing the firewall is configured to receive message packets from a sending device and to inspect the message packets to determine which action the sending device is requesting to perform. If the action corresponds to a rule in the database, the network device manages communications between the two devices until all message packets have been transmitted. Thus, a single action, or application, may be defined in the rules database to permit multiple data packets to be communicated between the devices.

Firewall with application packet classifer

A high-speed security device for network connected industrial controls provides hybrid processing in tandem hardware and software security components. The software security component establishes state-less data identifying each packet that requires high-speed processing and loads a data table in the hardware component. The hardware component may then allow packets matching data of the data table to bypass the software component while passing other non-matching packets to the software component for more sophisticated state analysis.

Network security module for Ethernet-receiving industrial control devices

Aspects of the present invention provide a ring supervisor operating as a server for maintaining and allocating addresses for devices in a ring topology. The ring supervisor may obtain an ordered list of devices in the ring by sending a data collection frame that passes through each device around the ring with each device appending its preconfigured address information. The ring supervisor may then operate to apply the addressing provided by each device, or alternatively, allocate different addresses to each device from a separate pool. As a result, control program software for ring devices can be developed using a general pool of addresses without requiring specific knowledge of actual addresses. Also, if a device requires replacement, the device may be replaced without requiring modification to the control program to provide the address for the replacement device.

Internet protocol addressing of devices employing the network ring topology

Aspects of the present invention provide a device, method and system which utilize hardware-based granular evaluation of industrial control protocol packets to withstand traffic storms. In an embodiment, packet evaluation circuitry coupled to a port may be adapted to evaluate one or more protocol fields contained in each inbound packet before switching circuitry can send the inbound packet to the proper destination. The inbound packet may be sent by the switching circuitry if it is a particular message, or may be selectively inhibited from being sent by the switching circuitry if the inbound packet does not contain the particular message for being sent and if the total number of bytes of the inbound packet type exceeds a threshold for the outbound port during a given period of time. As such, critical industrial applications may continue to operate in the presence of a traffic storm.

Hardware-based granular traffic storm protection

The subject matter disclosed herein describes a method to allocate and prioritize data communications on an industrial control network. A transmission schedule including multiple priority windows and multiple queues is established. Each queue is assigned to at least one priority window, and each priority window may have multiple queues assigned thereto. A control device communicating on the control network transmits data packets according to the transmission schedule. Within each priority window, data packets corresponding to one of the queues assigned to the priority window may be transmitted. The data packets may be transmitted at any point during the priority window, but will only be transmitted if no data packet from a higher queue is waiting to be transmitted.

Method and apparatus for allocating and prioritizing data transmission

Growing community of inventors

Solon, OH, United States of America

Sivaram Balasubramanian