CN102193512A - Field device for determining or monitoring a physical or chemical process variable - Google Patents
Field device for determining or monitoring a physical or chemical process variable Download PDFInfo
- Publication number
- CN102193512A CN102193512A CN2011100498757A CN201110049875A CN102193512A CN 102193512 A CN102193512 A CN 102193512A CN 2011100498757 A CN2011100498757 A CN 2011100498757A CN 201110049875 A CN201110049875 A CN 201110049875A CN 102193512 A CN102193512 A CN 102193512A
- Authority
- CN
- China
- Prior art keywords
- subregion
- measuring route
- field apparatus
- fpga
- functional module
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000012544 monitoring process Methods 0.000 title claims abstract description 7
- 238000001311 chemical methods and process Methods 0.000 title claims abstract description 5
- 125000006850 spacer group Chemical group 0.000 claims abstract description 29
- 238000005259 measurement Methods 0.000 claims abstract description 14
- 230000008859 change Effects 0.000 claims abstract description 7
- 238000004891 communication Methods 0.000 claims description 17
- 238000013461 design Methods 0.000 claims description 9
- 238000002955 isolation Methods 0.000 claims description 5
- 230000003068 static effect Effects 0.000 claims description 5
- 238000011156 evaluation Methods 0.000 abstract description 3
- 230000007257 malfunction Effects 0.000 abstract 1
- 230000006870 function Effects 0.000 description 11
- 239000007788 liquid Substances 0.000 description 5
- 238000004801 process automation Methods 0.000 description 5
- 238000005516 engineering process Methods 0.000 description 4
- 230000002349 favourable effect Effects 0.000 description 4
- 230000000712 assembly Effects 0.000 description 3
- 238000000429 assembly Methods 0.000 description 3
- 238000010586 diagram Methods 0.000 description 3
- 239000000463 material Substances 0.000 description 3
- 238000000034 method Methods 0.000 description 3
- 230000008901 benefit Effects 0.000 description 2
- 230000006872 improvement Effects 0.000 description 2
- 230000007246 mechanism Effects 0.000 description 2
- 230000008569 process Effects 0.000 description 2
- 238000012545 processing Methods 0.000 description 2
- 102100026816 DNA-dependent metalloprotease SPRTN Human genes 0.000 description 1
- 101710175461 DNA-dependent metalloprotease SPRTN Proteins 0.000 description 1
- 238000004458 analytical method Methods 0.000 description 1
- JJWKPURADFRFRB-UHFFFAOYSA-N carbonyl sulfide Chemical compound O=C=S JJWKPURADFRFRB-UHFFFAOYSA-N 0.000 description 1
- 230000008878 coupling Effects 0.000 description 1
- 238000010168 coupling process Methods 0.000 description 1
- 238000005859 coupling reaction Methods 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000003745 diagnosis Methods 0.000 description 1
- 230000009977 dual effect Effects 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 238000005265 energy consumption Methods 0.000 description 1
- 239000002360 explosive Substances 0.000 description 1
- 239000004744 fabric Substances 0.000 description 1
- 230000005251 gamma ray Effects 0.000 description 1
- 231100001261 hazardous Toxicity 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000005192 partition Methods 0.000 description 1
- 238000000197 pyrolysis Methods 0.000 description 1
- 230000005855 radiation Effects 0.000 description 1
- 238000011160 research Methods 0.000 description 1
- 230000009897 systematic effect Effects 0.000 description 1
- 238000012360 testing method Methods 0.000 description 1
- 230000000007 visual effect Effects 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B19/00—Programme-control systems
- G05B19/02—Programme-control systems electric
- G05B19/04—Programme control other than numerical control, i.e. in sequence controllers or logic controllers
- G05B19/042—Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
- G05B19/0428—Safety, monitoring
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B9/00—Safety arrangements
- G05B9/02—Safety arrangements electric
- G05B9/03—Safety arrangements electric with multiple-channel loop, i.e. redundant control systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F30/00—Computer-aided design [CAD]
- G06F30/30—Circuit design
- G06F30/34—Circuit design for reconfigurable circuits, e.g. field programmable gate arrays [FPGA] or programmable logic devices [PLD]
-
- H—ELECTRICITY
- H03—ELECTRONIC CIRCUITRY
- H03K—PULSE TECHNIQUE
- H03K19/00—Logic circuits, i.e. having at least two inputs acting on one output; Inverting circuits
- H03K19/02—Logic circuits, i.e. having at least two inputs acting on one output; Inverting circuits using specified components
- H03K19/173—Logic circuits, i.e. having at least two inputs acting on one output; Inverting circuits using specified components using elementary logic circuits as components
- H03K19/177—Logic circuits, i.e. having at least two inputs acting on one output; Inverting circuits using specified components using elementary logic circuits as components arranged in matrix form
- H03K19/17704—Logic circuits, i.e. having at least two inputs acting on one output; Inverting circuits using specified components using elementary logic circuits as components arranged in matrix form the logic functions being realised by the interconnection of rows and columns
- H03K19/17708—Logic circuits, i.e. having at least two inputs acting on one output; Inverting circuits using specified components using elementary logic circuits as components arranged in matrix form the logic functions being realised by the interconnection of rows and columns using an AND matrix followed by an OR matrix, i.e. programmable logic arrays
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/24—Pc safety
- G05B2219/24196—Plausibility check in channels for correct sequence or result
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/25—Pc structure of the system
- G05B2219/25428—Field device
Landscapes
- Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Automation & Control Theory (AREA)
- Computer Hardware Design (AREA)
- Mathematical Physics (AREA)
- General Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Computing Systems (AREA)
- Geometry (AREA)
- Evolutionary Computation (AREA)
- Arrangements For Transmission Of Measured Signals (AREA)
- Design And Manufacture Of Integrated Circuits (AREA)
Abstract
Field device for determining or monitoring a physical or chemical process variable, wherein the field device is composed of a sensor, which works according to a defined measuring principle, and a control/evaluation unit, which, as a function of a safety standard required for the particular safety-critical application, conditions and evaluates, along at least two equivalent measuring paths, measurement data delivered by the sensor. The control/evaluation unit is implemented on an FPGA, on which are provided at least a first section and a second section, wherein, in each section, a digital measuring path, which is composed of a plurality of software-based and/or hardware-based function modules, is dynamically reconfigurable. The sections are isolated from one another by permanently configured spacer regions, wherein the spacer regions are embodied in such a way, that a temperature and/or a voltage change in one of the sections has no influence on the other section or other sections, and, in the case of malfunction, no connection occurs between the sections.
Description
Technical field
The present invention relates to a kind of field apparatus that is used for determining or monitoring physics or chemical process variable, this field apparatus is made up of sensor and control/assessment unit, this sensor comes work according to specific measuring principle, and this control/assessment unit depends in the corresponding vital application of security desired safety standard and handles and assess the measurement data that is provided by sensor along the measuring route of at least two equivalences.Preferably, field apparatus uses in automatic technology, especially uses in process automation and factory automation.By the known a solution of WO 2004/013585A1, this solution research be a kind of make of field apparatus, this field apparatus can use in the vital application of the security in the process automation field.Yet the present invention is not limited to the field of process automation and factory automation, but can use equally in the vital application of security in automobile industry and other industry.
Background technology
In automatic technology, especially in process automation, used field apparatus, these field apparatuss are used for determining and monitor process variables.The example of this type of field apparatus is level gauging equipment, flow measurement, analysis to measure equipment, pressure and temperature measuring equipment, humidity and conductivity measurement equipment, density and viscosity measuring apparatus.The corresponding process variable of the sensor acquisition of these field apparatuss, for example material level, flow, pH value, material concentration, pressure, temperature, humidity, conductivity, density or viscosity.
Yet, also actuator (for example valve or pump) is included in the notion of " field apparatus ", for example can change the flow of ducted liquid or the material level in the container by these actuators.A large amount of this field apparatuss is provided by Endress+Hauser group and sells.
Generally, field apparatus passes through communication network in the facility of the automatic technology in modern times and in automobile industry, for example HART multidrop network, point-to-point connection, Profibus, Foundation Fieldbus, CAN-Bus, be connected with last bit location, bit location is called as guidance system or upper control module on this.Bit location be should go up and control, diagnosis, visual, monitoring and commissioning test and manipulation field apparatus were used for.Optional feature (these optional features directly are connected with fieldbus and are particularly useful for and upper unit communication) essential for the operation of field bus system equally often is called as field apparatus.These optional features for example are meant Remote I/O (remote I/O), Gateway (gateway), Linking Device (chained device) or controller, Wireless Adapter (wireless adapter).Also these optional features are included in the notion of " field apparatus ".
Software share in the field apparatus constantly increases.Use is by the advantage of the smart devices (Smart Field Devices) of microprocessor controls, realizes a large amount of different functions in the equipment at the scene by the software program of special use; But also can carry out modification of program relatively simply.On the other hand, as the result of executive routine in order, with the very high dirigibility opposition that is subjected to programme controlled field apparatus be relative little processing speed and therefore corresponding little measuring rate.
For improve processing speed, just always have only when using ASIC (Application Specific Integrated Circuit, special IC) in the equipment at the scene fully rationally the time economically.By the configuration of special use, these assemblies can be than obvious deal with data quickly of software program and signal.Therefore, especially for the application of computation-intensive, ASIC is specially suitable.
In the application of ASIC, disadvantageously, the function of these assemblies is by given in advance regularly.In these assemblies, can not easily change function afterwards.In addition, the use of ASIC only just is worth under the situation of big relatively number of packages, and this is because development cost are very high with relevant therewith cost.
In order to evade the drawback of function given in advance regularly, by the known a kind of configurable field apparatus of WO 03/098154A1, wherein be provided with the reconfigurable logic module of FPGA (Field Programmable Gate Array, field programmable gate array) form.In this known solution, during system start-up, utilize at least one microcontroller (being also referred to as embedded controller) to come logic module is configured.After configuration is finished, with the software loading of needs in microcontroller., reconfigurable logic module required at this must have enough resources, and logical resource, interconnection resource and memory resource more precisely are so that satisfy desired function.The big energy of logic module needs that has many resources, this may make its use robotization be achieved from function again only restrictedly.Have few resources and have because of ground under the situation of logic module of less energy consumption in use, disadvantageously, the tangible restriction in the function of corresponding field apparatus.
According to applicable cases, field apparatus must satisfy various safety requirements.In order to satisfy corresponding safety requirements (SIL standard " Security Integrity Level (safety integrity level) " for example, it plays great role in process automation), must design the function of field apparatus with redundant and/or diversified mode.
" redundancy " mean, the hardware component of security-critical and software part realized the security that improves by design all in dual or multiple mode." variation " mean, is in that hardware component (for example microprocessor, A/D converter) in the different measuring route comes from different manufacturers and/or these hardware componenies are different types.In the situation of software part, " variation " requires: the software that is stored in the microprocessor comes from different sources, that is to say to come from different manufacturers or programmer.Should guarantee by all these measures, get rid of the generation and the appearance of the systematic error of appearance simultaneously in measured value is handled of the vital fault of security of field apparatus with very high probability.Be well known that equally, additionally also come each basic hardware parts and software part of design evaluation circuit with redundant and/or diversified mode.By with redundant and diversified mode designs each hardware component and software part can further improve the grade of security.
An example of security important use is the level monitoring in the container, in this container, deposit flammable, explosive or non-flammable in addition but aspect this side environmentally hazardous liquid.Here must guarantee,, the liquid of container is just supplied be interrupted immediately in case reach the maximum liquid level that allows.This is a prerequisite with following situation again, that is, measuring equipment is detection of liquid level and working error-free very reliably.
By the known a kind of field apparatus of WO 2009/062954A1, this field apparatus has sensor and control/assessment unit, this sensor comes work according to specific measuring principle, and this control/assessment unit depends in the corresponding vital application of security desired safety standard and handles and assess the measurement data that is provided by sensor along the measuring route of at least two equivalences.Control/assessment unit is configured to have the reconfigurable logic module of a plurality of functional modules that can partly dynamically reconfigure at least in part.That control/assessment unit depends on is correspondingly specific, the vital application of the security functional module in the allocating and measuring path as follows,, designs field apparatus corresponding to desired safety standard that is.
Problem in known make is, functional fault, and short circuit or the temperature variation in subregion for example automatically also influences other subregion.It causes the crosstalking of other subregion, thereby makes field apparatus that vicious measurement result may be provided and work no longer reliably.This especially in the vital application of security is can not received excessive risk.
Summary of the invention
The objective of the invention is, propose a kind of field apparatus very flexibly that is used for the vital field of security.
This purpose realizes in the following way, promptly, control/assessment unit is realized on FPGA, this FPGA is provided with at least one first subregion and at least one second subregion, wherein, in each subregion, can the measuring route of numeral partly dynamically be reconfigured, this digital measuring route is made up of based on functional module software and/or hardware based a plurality of, wherein, each subregion is separated from each other by the spacer region or the forbidden zone of fixed configurations, wherein, spacer region is constructed as follows, promptly, temperature variation in one of subregion and/or change in voltage are to another subregion or the not influence of other subregion, and under failure condition, do not connect between the subregion, and wherein, control/assessment unit depends on correspondingly specific, the vital applying portion of security ground dynamically reconfigures the functional module in the measuring route, thereby makes field apparatus satisfy desired safety standard.At this, " can partly dynamically reconfigure " means: the functional module of FPGA is reconfigured at run duration (promptly dynamically) in corresponding measuring route." fault " for example causes that by the gamma ray or the cosmic radiation (being high-energy ray) of incident it makes the function of one or more logical blocks or other resource change or lost efficacy.
According to according to a kind of favourable make of field apparatus of the present invention, the size that is used for the spacer region of potential isolation (Potentialtrennung) is set the structure that depends on FPGA and is selected.Thus, can use existing FPGA on the market.The structure of FPGA is finally set by the size of the wiring between the logical block (CLB-Configurable Logic Block, configurable logic block) especially and is set to determine by the size of the logical block (CLB) of FPGA.For fear of the influence of a kind of influence between the adjacent subregion and any kind, the size settings/width that will follow at least of spacer region preferably is appointed as many times of size setting of the logical block of the FPGA that correspondingly uses.At this, the cloth line model of CLB also plays effect.The minimum spacing between the subregion or the width of spacer region are selected as follows, that is, make the short circuit between the subregion or crosstalk and got rid of.In addition, spacer region is used for the pyrolysis coupling of subregion.
A kind of favourable improvement project according to field apparatus of the present invention proposes: make the logical block and corresponding wiring (the being resource) ground connection of arranging in each spacer region in spacer region.
In addition, the situation that has the global lines/wiring (global line) of extending or a long line/wiring (long line) at FPGA at least two subregions proposes: these global lines or long line are separated or ground connection.
In addition, a kind of favourable improvement project setting according to field apparatus of the present invention: as follows FPGA is divided into each subregion, promptly, also exist in the resource that exists on FPGA each subregion in these subregions, described resource is essential for implementing for the function by the functional module in corresponding subregion.As visible among Fig. 3, this requirement will correspondingly be divided into subregion by operational area on FPGA, and this is because when FPGA is standard FPGA, and this goes up described resource by given in advance regularly in FPGA.These resources refer in particular to logical resource, interconnection resource and memory resource and so-called DCM (Digital Clock Manager, digital dock manager), and this DCM provides beat for the logical block of FPGA.
A kind of preferred make according to field apparatus of the present invention proposes: the measuring route that has the functional module that dynamically reconfigures with redundant, diversified or redundant and diversified mode design.
In addition, be furnished with voting machine (Voter) or microcontroller for control/assessment unit, this voting machine or microcontroller separate by spacer region and adjacent measuring route equally.Voting machine or microcontroller will by measuring route or in measuring route, provide and corresponding each other measurement data compare mutually, and under situation devious, generate warning message or error message or use suitable burring machine (Reparaturmechanism).
If voting machine or microcontroller with the mode of serial or parallel to be used for Odd number, functional module redundant and/or diversified measuring route partly dynamically reconfigures, voting machine or microcontroller can be by relatively identifying in measuring route or by the measurement data that measuring route provides so: which measuring route provides vicious measurement data.Can generate corresponding warning message again.In addition, what especially can realize in this make certainly is to have at ground in relevant measuring route and carry out suitable restorative procedure.These burring machines and repairing mechanism 2009.08.27 application, still at length be described among the undocumented DE 10 2,009 028938.0.But corresponding mechanism also can find in disclosed DE 10 2,007 054 672A1.Corresponding open disclosure of can be regarded as present patent application clearly.
In conjunction with the present invention, be considered to particularly advantageous and be, based on hardware ground at least one measuring route in the measuring route is configured to the FPAA in the subregion of FPGA in the mode that is independent of employed FPGA.
In addition, the following selected subregion of FPGA is provided with static zones, described selected subregion distinguishes by spacer region and adjacent branch, in this static zones, at least one functional module is carried out fixed configurations, in this at least one functional module, in order to move control program to there being the pending dynamically functional module of configuration to be configured in each subregion.In particular, in this selected subregion, can find voting machine or microcontroller.
A kind of favourable make according to field apparatus of the present invention is provided with communication line, and these communication lines are being arranged in outside the FPGA between each subregion.These communication lines are responsible for carrying out message exchange between the measuring route and/or between each measuring route and voting machine or microcontroller.Can enter into subregion by these communication lines in order to ensure only limited energy supply or power supply, each communication line that is preferably in the communication line is furnished with at least one restraint device.It is highly important that the energy by communication line between the restriction measuring route is supplied with and power supply.Only in this way just can guarantee, can avoid having the mistake (Commen Cause Failure) of common cause.About spacer region or forbidden zone, above-mentioned situation also is suitable for.
Description of drawings
The invention will be further described by following accompanying drawing.Wherein:
Fig. 1 illustrates the synoptic diagram according to field apparatus of the present invention,
Fig. 2 illustrates the make according to solution of the present invention that has three measuring route,
Fig. 3 illustrates the preferable configuration mode according to solution of the present invention, and
Fig. 4 illustrates the synoptic diagram of the logical resource of FPGA.
Embodiment
Fig. 1 illustrates the synoptic diagram according to the control/assessment unit 10 of field apparatus of the present invention, this control/assessment unit has two subregions 3.1,3.2, in these two subregions 3.1,3.2, can partly dynamically reconfigure each digital measuring route MP1, a MP2.This field apparatus does not illustrate in the accompanying drawings individually itself.Dissimilar field apparatuss is provided by Endress+Hauser group and sells.
The measuring route MP1 of these two equivalences, each measuring route among the MP2 all are made up of based on functional module software and/or hardware based one or more, and these functional modules do not illustrate in Fig. 1 equally individually.Control/assessment unit 10 is realized on FPGA 1.Preferably, use standard FPGA 1 as basis according to solution of the present invention.According to desired safety standard, design this two measuring route MP1, MP2 with redundant and/or diversified mode.In measuring route MP1, MP2, as required required functional module is partly dynamically reconfigured.This advantage that partly dynamically reconfigures is the relatively little size of FPGA, on this FPGA the functional module among measuring route MP1, the MP2 is configured.
In order to prevent that the functional fault in the subregion 3.1 from having influence on adjacent subregion 3.2, is spaced apart from each other two measuring route MP1, MP2.The spacing of two measuring route MP1, MP2 or two subregions 3.1,3.2 is represented with D1 in Fig. 1.Space D 1 between two adjacent subregions 3.1,3.2 and the space D 2 between this two subregions 3.1,3.2 and the voting machine 2 depend on usually and the corresponding structure of FPGA 1 realize control/assessment unit 10 on this FPGA 1.In addition, space D 1, the D2 between the adjacent subregion 3.1,3.2,2 is many times of size of logical block (CLB), and FPGA 1 is made up by these logical blocks and forms.
Especially can on this basis, limit the space D of following the best, promptly, two adjacent subregions 3.1,3.2,2 must have this optimal spacing to each other, do not influence another subregion 3.2 or 2 or another measuring route MP2 thereby functional fault occurs at subregion 3.1 or in measuring route MP1.Temperature variation whether to occur in order identifying, to be considered to advantageously, in each measuring route MP1, MP2, realize temperature survey.
For the purpose of potential isolation, between subregion 3.1,3.2,2 is spacer region 4.1,4.2.Spacer region 4.1,4.2 is configured and size is constructed or set to this spacer region 4.1,4.2 as follows regularly, promptly, temperature variation in one of subregion 3.1,3.2 and/or change in voltage are to another subregion or the not influence of other subregion, and under failure condition, be not electrically connected or hot tie-in between the subregion 3.1,3.2,2.Crosstalking between the subregion 3.1,3.2,2 stoped effectively by spacer region 4.1,4.2.
Such as already mentioned, the size that is used for the spacer region 4.1,4.2 of potential isolation is set the corresponding structure that preferably depends on FPGA 1.Determine by the size setting of connecting up especially on the structure of FPGA 1 plane below, determine but also pass through the correspondingly size setting of the logical block CLB (configurable logic block) of the FPGA 1 of application.Potential isolation realizes in the following way, that is, make the logical block CLB, 7 that arranges in each spacer region in spacer region 4.1,4.2,9 and logical block CLB, 7,9 between corresponding wiring 8 ground connection.Preferably, standard FPGA 1 with come into operation under the present invention combines.
Can the functional module in the subregion 3.1,3.2 of FPGA 1 partly dynamically be reconfigured, and the voting machine in the static zones of FPGA 12 is carried out fixed configurations.
Realizing that by communication line 12 these communication lines are distributed in outside the FPGA 1 between measuring route MP1, the MP2 and communicating by letter between measuring route MP1, MP2 and voting machine 2 or the microcontroller.In order to ensure only realize limited energy supply or power supply by these communication lines 12, preferably all settle at least one restraint device 13 in each communication line in communication line 12.
Make shown in Fig. 2 is different from the make shown in Fig. 1 in the following way, promptly, except subregion 3.1,3.2, (in these subregions, can partly dynamically reconfigure), be provided with other measuring route MP3 measuring route MP1, MP2.On FPAA6, measuring route MP3 be configured and therefore realize in the mode that is independent of standard FPGA 1 based on simulated mode (analogbasiert).At this, " with based on simulated mode " means, in FPAA, for example to measuring route dynamically, promptly at run duration, that is to say that equipment is implemented to be configured between its functional period according to the rules at the scene.By the 3rd measuring route MP3, can realize the redundancy and/or the diversity that increase.In particular, can measure under the situation of measuring route MP1, the MP2 of triple designs, MP3 and under the situation in the measuring route of other Odd number: which measuring route among measuring route MP1, MP2, the MP3 may be worked improperly.
Fig. 3 illustrates the preferred make according to control/assessment unit 1 of the present invention.In this make, as follows FPGA 1 is divided into each subregion 3.1,3.2,2, promptly, resource in existence on the FPGA 1: all exist in CBL, 7,8,9 each subregion in these subregions 3.1,3.2,2, these resources are essential for implementing for the function by the functional module in the respective partition 3.1,3.2,2.Described resource is meant logical block CBL, memory assembly 7 (this memory assembly for example is configured to RAM) and so-called digital dock manager DCM 9, and at least one in these resources must be arranged in each subregion 3.1,3.2,2.In addition, described resource comprises wiring 8, and shown in Figure 3 in these wirings is so-called global lines.Global lines causes CLB with clock signal from DCM.Except global lines (these global lines can extended on a plurality of subregions), also has long line.The global lines transmit clock signal, and long line is used to transmit other signal.As seen wiring on the plane of logical block detailed be shown among Fig. 4.Other details can find in article " Sicherheitsbewusstes Place and Route f ü r In-Chip Redundanz in sicherheitskritischen Anwendung (in the vital use of security at sheet the position and the path of redundant safety-sensitive) ", and present patent application requires its right of priority.The corresponding disclosure of this article can be can be regarded as disclosing of present patent application.For example FPGA Spartan 3E or 3A are called FPGA in this article, described FPGA can be in the use down that combines with field apparatus according to the present invention.
Such as already mentioned previously, make logical block CLB and wiring ground connection in the spacer region 4.1,4.2.The same applies to the digital dock manager 9 in the spacer region 4.1,4.2.Certainly, as visible among Fig. 3, spacer region 4.1,4.2 is constructed as follows, promptly, measuring route MP1, MP2 guarantee that at least one digital dock manager 9 is effectively in each subregion 3.1,3.2, because otherwise can not obtain clock signal.
It is to be noted, the disclosure of file " Sicherheitsbewusstes Place and Route f ü r In-Chip Redundanz in sicherheitskritischen Applikationen (in the vital application of security at sheet the position and the path of redundant safety-sensitive) " can be listed clearly in the disclosure of present patent application, present patent application requires its right of priority.
Claims (12)
1. be used for determining or monitoring the field apparatus of physics or chemical process variable, this field apparatus is made up of sensor and control/assessment unit (10), described sensor is according to specific measuring principle work, described control/assessment unit (10) depends on desired safety standard in the corresponding vital application of security and handles and assess the measurement data that is provided by described sensor along the measuring route (MP1, MP2) of at least two equivalences
Wherein, described control/assessment unit is gone up at FPGA (1) and is realized, described FPGA (1) is provided with at least one first subregion (3.1) and at least one second subregion (3.2), wherein, in each subregion (3.1,3.2), can dynamically reconfigure the measuring route (MP1, MP2) of a numeral, the measuring route of described numeral (MP1, MP2) is made up of based on functional module software and/or hardware based a plurality of
Wherein, each described subregion is separated from each other by the spacer region (4.1,4.2) of fixed configurations, wherein, constructs described spacer region (4.1,4.2), makes at a subregion (MP1; MP2) temperature variation in and/or change in voltage are to another subregion (MP2; MP1) or the not influence of other subregion, and under failure condition, do not connect between the described subregion (MP1, MP2), and
Wherein, described control/assessment unit (10) depends on the vital described application of correspondingly specific security and partly dynamically reconfigures described functional module in the described measuring route (MP1, MP2), thereby makes described field apparatus satisfy desired safety standard.
2. field apparatus according to claim 1, wherein, the size that is used for the described spacer region (4.1,4.2) of potential isolation is set the structure that depends on described FPGA (1).
3. field apparatus according to claim 1 and 2, wherein, the logical block of in each described spacer region (4.1,4.2), arranging (CBL, 7,9) and corresponding wiring (8) ground connection.
4. according to each described field apparatus in the claim 1 to 3, wherein, have in the last global lines (8) of extending of at least two described subregions (MP1, MP2,2) and the situation of long line for described FPGA (1), described global lines and described long line are spaced and ground connection.
5. according to each described field apparatus in the claim 1 to 3, wherein, described FPGA (1) is divided into each subregion (3.1,3.2,2), make that going up the resource (CBL, 7,8,9) that exists at described FPGA (1) all exists in each described subregion (3.1,3.2,2), described resource is essential for implementing for the function by the functional module in the corresponding subregion (3.1,3.2,2).
6. according to each or multinomial described field apparatus in the aforementioned claim, wherein, have the measuring route (MP1, MP2) of the functional module that can dynamically be reconfigured with redundant, variation or redundant and diversified mode design.
7. according to each or multinomial described field apparatus in the aforementioned claim, wherein, for described control/assessment unit (10) is furnished with voting machine (2) or microcontroller, described voting machine (2) or described microcontroller are equally by spacer region (4.2) and adjacent measuring route (MP1, MP2) separately, described voting machine (2) or described microcontroller will be from described measuring route (MP1, MP2) or at described measuring route (MP1, measurement data that provide MP2) and that correspond to each other compares mutually, and generates warning message or error message under situation devious.
8. according to claim 1 or 7 described field apparatuss, wherein, described voting machine (2) or described microcontroller with the mode of serial or parallel to be used for Odd number, redundant and/or diversified measuring route (MP1, MP2, MP3 ...) functional module partly dynamically reconfigure
Wherein, described voting machine (2) or described microcontroller will from described measuring route (MP1, MP2, MP3 ...) or described measuring route (MP1, MP2, MP3 ...) in the described measurement data that provides compare mutually,
And wherein, if at specific measuring route (MP1; MP2; MP3) measurement data that provides on and remaining measuring route (MP1; MP2; MP3) measurement data difference, so described voting machine (2) or described microcontroller generate warning message, and this warning message shows described specific measuring route (MP1; MP2; MP3) provide vicious data.
9. according to each or multinomial described field apparatus in the aforementioned claim, wherein, in FPAA (6), at least one measuring route in the described measuring route is configured based on simulated mode.
10. according to each or multinomial described field apparatus in the aforementioned claim, wherein, the selected subregion (11) of described FPGA (1) is provided with static zones, described selected subregion (11) separates by spacer region (4.1,4.2) and adjacent subregion (3.1,3.2), in described static zones, at least one functional module is carried out fixed configurations, and operation is useful on the control program that the functional module that remains dynamically to be disposed in each subregion (3.1,3.2) is configured in described at least one functional module.
11. according to each or multinomial described field apparatus in the aforementioned claim, wherein, be provided with communication line (12), described communication line (12) is being arranged in outside the described FPGA (1) between each subregion (3.1,3.2,2).
12. field apparatus according to claim 11 wherein, provides at least one restraint device (13) in each bar communication line (12), be used to limit voltage and/or electric current between the subregion (3.1,3.2,2).
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| DE102010002346.9 | 2010-02-25 | ||
| DE102010002346A DE102010002346A1 (en) | 2009-10-12 | 2010-02-25 | Field device for determining or monitoring a physical or chemical process variable |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102193512A true CN102193512A (en) | 2011-09-21 |
| CN102193512B CN102193512B (en) | 2015-07-08 |
Family
ID=43663939
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201110049875.7A Expired - Fee Related CN102193512B (en) | 2010-02-25 | 2011-02-25 | Field device for determining or monitoring a physical or chemical process variable |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN102193512B (en) |
| GB (1) | GB2478178B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102959479A (en) * | 2010-07-05 | 2013-03-06 | 恩德莱斯和豪瑟尔两合公司 | Field device for determining or monitoring a physical or chemical process variable |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6160418A (en) * | 1999-01-14 | 2000-12-12 | Xilinx, Inc. | Integrated circuit with selectively disabled logic blocks |
| GB2453040A (en) * | 2007-09-18 | 2009-03-25 | Fisher Rosemount Systems Inc | Methods and Apparatus to Upgrade and Provide Control Redundancy in Process Plants |
| CN101587166A (en) * | 2009-06-26 | 2009-11-25 | 上海大学 | Failure testing system for embedded logic cores in system on chip |
Family Cites Families (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6449732B1 (en) * | 1998-12-18 | 2002-09-10 | Triconex Corporation | Method and apparatus for processing control using a multiple redundant processor control system |
| DE102007054672A1 (en) * | 2007-11-14 | 2009-05-20 | Endress + Hauser Gmbh + Co. Kg | Field device for determining or monitoring a process variable in process automation |
| WO2009155993A1 (en) * | 2008-06-27 | 2009-12-30 | Abb Research Ltd. | A safety system for a machine |
| DE102009028938A1 (en) * | 2009-08-27 | 2011-03-03 | Endress + Hauser Gmbh + Co. Kg | Field device for determining or monitoring a physical or chemical variable |
-
2011
- 2011-01-07 GB GB1100261.5A patent/GB2478178B/en not_active Expired - Fee Related
- 2011-02-25 CN CN201110049875.7A patent/CN102193512B/en not_active Expired - Fee Related
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6160418A (en) * | 1999-01-14 | 2000-12-12 | Xilinx, Inc. | Integrated circuit with selectively disabled logic blocks |
| GB2453040A (en) * | 2007-09-18 | 2009-03-25 | Fisher Rosemount Systems Inc | Methods and Apparatus to Upgrade and Provide Control Redundancy in Process Plants |
| CN101587166A (en) * | 2009-06-26 | 2009-11-25 | 上海大学 | Failure testing system for embedded logic cores in system on chip |
Non-Patent Citations (2)
| Title |
|---|
| ROMUALD GIRARDEY等: "DYNAMIC RECONFIGURABLE MIXED-SIGNAL ARCHITECTURE FOR SAFETY CRITICAL APPLICATIONS", 《IEEE数据库》 * |
| TED HUFFMIRE等: "Moast and Drawbridges:An Isolation Primitive for Reconfigurable Hardware Based Systems", 《IEEE数据库》 * |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102959479A (en) * | 2010-07-05 | 2013-03-06 | 恩德莱斯和豪瑟尔两合公司 | Field device for determining or monitoring a physical or chemical process variable |
| US9720386B2 (en) | 2010-07-05 | 2017-08-01 | Endress + Hauser Gmbh + Co. Kg | Field device for determining or monitoring a physical or chemical, process variable |
Also Published As
| Publication number | Publication date |
|---|---|
| GB2478178B (en) | 2014-10-01 |
| GB2478178A (en) | 2011-08-31 |
| GB201100261D0 (en) | 2011-02-23 |
| CN102193512B (en) | 2015-07-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8612920B2 (en) | Field device for determining or monitoring a physical or chemical variable | |
| EP2210151B1 (en) | Field device for determining or monitoring a process variable in process automation | |
| US7870299B1 (en) | Advanced logic system | |
| CN104380666B (en) | Field bus system | |
| US8712727B2 (en) | Field device for determining or monitoring a physical or chemical process variable | |
| EP4235323B1 (en) | Method and device for automatically validating security functions on a modular security system | |
| CN106664260A (en) | System and method for controller redundancy and controller network redundancy with ethernet/ip i/o | |
| DE102012112687A1 (en) | Field device of automation technology, in particular process automation technology | |
| EP2591402B1 (en) | Field device for determining or monitoring a physical or chemical process variable | |
| CN104508574B (en) | Field device for the process variable in determination or monitoring automation technology | |
| US8572305B2 (en) | Apparatus and method for configuring a bus system | |
| CN107209503B (en) | Automated manufacturing system with job packaging mechanism and method of operation thereof | |
| WO2017103043A1 (en) | Field bus coupler, system, and method for configuring a failsafe module | |
| CN102193512B (en) | Field device for determining or monitoring a physical or chemical process variable | |
| US10054925B2 (en) | Field device for a safety-critical application with redundant measuring channels in an FPGA | |
| AT516652B1 (en) | forming plant | |
| US10379144B2 (en) | Arrangement having two redundant modules | |
| US10078313B2 (en) | Field device for determining or monitoring a process variable in automation technology | |
| DE102009002734A1 (en) | Field device for determining or monitoring process variable in process automation, has sensor, which works according to defined measuring principle, and control or evaluation unit, which processes and evaluates measured data | |
| DE102011086054A1 (en) | System for securing availability of bus system in e.g. process automation system, has functional modules activated during connection of device module with field device, and processing unit that recognizes error function of field device | |
| DE102012010145A1 (en) | I / O Module | |
| DE19904892A1 (en) | Method for suppressing input unit errors in control devices uses memory-programmable controls to regulate bus traffic and overall data transport over a connected bus system in a master function | |
| JP2011108075A (en) | Controller | |
| EP3454151B1 (en) | Automation system for controlling a machine or an installation | |
| UA139373U (en) | PLATFORM FOR FORMATION OF SECURE INFORMATION AND MANAGEMENT SYSTEMS (ICS) |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20150708 |
|
| CF01 | Termination of patent right due to non-payment of annual fee |