US20220260961A1 - Methods and apparatus to virtualize a process control system - Google Patents

Abstract

Methods and apparatus to virtualize a process control system are described. A described process control system includes a server cluster including one or more servers. When operating, the server cluster provides a virtual workstation or virtual server, a virtual controller to interoperate with the virtual workstation or server and to implement process control operations, and a virtual input/output device to interoperate with the virtual controller and coupled to one or more field devices within the process control system.

Description

CROSS-REFERENCE TO RELATED APPLICATIONS
• This patent arises from a continuation of U.S. patent application Ser. No. 15/517,891 (now U.S. Pat. No. 11,320,797), filed Jun. 27, 2017, entitled “METHODS AND APPARATUS TO VIRTUALIZE A PROCESS CONTROL SYSTEM,” which is a National Stage Entry of PCT Application No. PCT/US11/53467, filed Sep. 27, 2011 entitled “METHODS AND APPARATUS TO VIRTUALIZE A PROCESS CONTROL SYSTEM,” which claims the benefit of U.S. Provisional Patent Application No. 61/386,810, filed Sep. 27, 2010, entitled “METHODS AND APPARATUS TO VIRTUALIZE A PROCESS CONTROL SYSTEM.” U.S. patent application Ser. No. 15/517,891; PCT Application No. PCT/US11/53467; and U.S. Provisional Patent Application No. 61/386,810 are hereby expressly incorporated herein by reference in their entireties. Priority to U.S. patent application Ser. No. 15/517,891; PCT Application No. PCT/US11/53467; and U.S. Provisional Patent Application No. 61/386,810 is hereby claimed.
FIELD OF THE DISCLOSURE
• The present disclosure relates generally to process control systems and, more particularly, to methods and apparatus to virtualize a process control system.
BACKGROUND
• Process control systems, like those used in chemical, petroleum or other processes, typically include one or more process controllers and input/output (I/O) devices communicatively coupled to at least one host or operator workstation and to one or more field devices via analog, digital or combined analog/digital buses. The field devices, which may be, for example, valves, valve positioners, switches and transmitters (e.g., temperature, pressure and flow rate sensors), perform process control functions within the process such as opening or closing valves and measuring process control parameters. The process controllers receive signals indicative of process measurements made by the field devices, process this information to implement a control routine, and generate control signals that are sent over the buses or other communication lines to the field devices to control the operation of the process. In this manner, the process controllers may execute and coordinate control strategies using the field devices via the buses and/or other communication links communicatively coupling the field devices.
• Process information from the field devices and the controllers may be made available to one or more applications (i.e., software routines, programs, etc.) executed by the operator workstation (e.g., a processor-based system) to enable an operator to perform desired functions with respect to the process, such as viewing the current state of the process (e.g., via a graphical user interface), evaluating the process, modifying the operation of the process (e.g., via a visual object diagram), etc. Many process control systems also include one or more application stations. Typically, these application stations are implemented using a personal computer, workstation, or the like that is communicatively coupled to the controllers, operator workstations, and other systems within the process control system via a local area network (LAN). Each application station may include a graphical user interface that displays the process control information including values of process variables, values of quality parameters associated with the process, process fault detection information, and/or process status information.
SUMMARY
• An example process control system includes a server cluster including one or more servers. The server cluster, when operating, provides a virtual workstation or virtual server, a virtual controller to interoperate with the virtual workstation or server and to implement process control operations, and a virtual input/output device to interoperate with the virtual controller and coupled to one or more field devices within the process control system.
• Another example process control system a multi-core processing unit. The multi-core processing unit, when operating, provides a virtual controller to interoperate with a workstation or server and to implement process control operations, and a virtual input/output device to interoperate with the virtual controller and coupled to one or more field devices within the process control system.
• An example method of controlling a process system involves establishing a virtual workstation or virtual server, establishing a virtual controller to interoperate with the virtual workstation or server and to implement process control operations, and establishing a virtual input/device to interoperate with the virtual controller.
BRIEF DESCRIPTION OF FIGURES
• FIG. 1 depicts a known control system architecture.
• FIG. 2 depicts a known control system architecture having a remote portion.
• FIGS. 3A and 3B depict another known control system architecture including fully integrated plant functions.
• FIG. 4 depicts another known control system architecture.
• FIGS. 5A and 5B depict physical aspects of a digital control system.
• FIG. 6 depicts display, control strategy and alarms configuration that may be used with a control system.
• FIG. 7 depicts an example manner of virtualizing workstations and/or servers.
• FIG. 8 depicts an example manner in which a control system may be virtualized.
• FIGS. 9 and 10 depict example architecture that may be used to perform the virtualization shown inFIG. 8.
• FIG. 11 depicts physical aspects of a virtualized control system.
DETAILED DESCRIPTION
• Although the following describes example methods and apparatus including, among other components, software and/or firmware executed on hardware, it should be noted that these examples are merely illustrative and should not be considered as limiting. For example, it is contemplated that any or all of the hardware, software, and firmware components could be embodied exclusively in hardware, exclusively in software, or in any combination of hardware and software. Accordingly, while the following describes example methods and apparatus, persons of ordinary skill in the art will readily appreciate that the examples provided are not the only way to implement such methods and apparatus.
• The combination of technology advances in computer architecture such as multi-core processing units, commercial operating systems, and networking has enabled the development of effective, easy-to-manage, virtualized computing environments. Such virtualized environments have been used by information technology departments to lower costs and improve system up-time. Although the shift to centralized computing resources running servers and clients hosted in virtualized environments is well established, an architecture to apply such virtualized environments to manufacturing environments or, more generally, process control systems and, particularly, real-time embedded environments has not been available.
• The example methods and apparatus described herein may be used to virtualize an entire process control environment or system, including such environments or systems employing embedded processing units. More specifically, the example methods and apparatus described herein may provide a process control system architecture that enables workstations, servers, controllers, input/output devices, and field devices to be virtualized via a server cluster having one or more servers. Thus, an entire process control system may be implemented within such a virtualization environment or architecture, thereby significantly increasing the flexibility and robustness of the process control system. For example, any of the virtualized portions of the process control system can be easily migrated from one server within the server cluster to another server or servers during operation of the process control system for maintenance purposes, in response to the failure of a server, in response to a need to otherwise shut down a server, a need to balance resources within the server cluster, etc. Such migration can occur without any loss of data and without having to interrupt communications between, for example, a virtualized operator interface and other virtualized portions of the process control system such as the input/output devices and/or controllers. Further, the servers of the server cluster may be co-located and/or may be in different geographic areas.
• In one particular example, a process control system may be implemented with a server cluster including one or more servers, where the server cluster, when operating, provides a virtual workstation or virtual server, a virtual controller to interoperate with the virtual workstation or server and to implement process control operations, and a virtual input/output device to interoperate with the virtual controller and coupled to one or more field devices within the process control system. The virtual workstation may, for example, provide a user interface to the process control system such as an operator interface, a diagnostics interface or a configuration interface. The virtual server may, for example, provide a backend service to the process control system such as data storage or collection, a configuration function, a calculation function, or an interface to another system.
• The architecture of the server cluster may employ at least one virtual machine server to interoperate with guest operating systems corresponding to each of the virtual workstation or server, the virtual controller, and the virtual input/output device. Additionally, the architecture may include a storage area network to store data for the guest operating systems. Users may access the virtual workstation or server via a remote desktop service implemented via a personal computer, another workstation, or a thin client device. Further, in addition to virtualizing workstations, servers, controller and I/O devices, the architecture may also be used to virtualize field devices, thereby facilitating simulation and/or any other testing.
• The foregoing example architecture may be extended for use with embedded systems and, alternatively or additionally, the virtual workstation or server, the virtual controller and/or the virtual input/output device may be implemented via one or more multi-core processing units.
• Before discussing the example methods and apparatus to virtualize a process control system in more detail, a discussion of digital control systems (DCSs) is provided below in connection withFIGS. 1, 2 and 3. DCSs are deployed in configurations ranging from a standalone laptop, which is primarily used for focused training and design activities, to multi-zone configurations to control an entire plant. In some cases, a DCS may extend over a wide geographic area with, for example, a portion of the system covering onshore operations and offshore components controlling platforms many kilometers offshore. In some process plants, the DCS is integrated with business systems providing real-time access to lab data, scheduling, maintenance systems, etc.
• FIG. 1 illustrates a knowncontrol system100. As shown inFIG. 1, workstations andservers102 provide a variety of functions including operator interfaces, maintenance, historical data collection, and integration with the plant network. In many cases, users are provided with remote access to the DCS viathin clients104 using terminal services, for example, via a virtual private network (VPN) connection. These connections may connect through one or moreterminal servers106 and may generally be referred to as thin client connections.
• In some examples, portions of thesystem100 may be remote from the main control system. The network connecting these remote operations may include communication links via an Ethernet backhaul, phone lines, cable, fiber, microwave, and/or satellite. Security, sampling times, and reliability are generally considered for such remote connections.
• FIG. 2 illustrates another knowncontrol system200 with a remote operation. In many instances, the DCS may be fully integrated into the overall plant operation, and it is not uncommon for the DCS, safety systems, burner management, and machine health functions to be integrated.
• FIGS. 3A and 3B illustrate asystem300 with fully integrated plant functions. Distributed control systems such as the one shown inFIGS. 3A and 3B are made of workstations and servers, controllers, input/output devices, field devices, control technology, and applications such as plant data historians. As described in greater detail below, the example system inFIGS. 3A and 3B may be virtualized by the example methods and apparatus described herein. Virtualizing theexample system300 enables, among other tasks, process control personnel to simulate and test system configurations. Further, virtualizing theexample system300 may improve disaster recovery. For example, if resources hosting the virtualized system are located in an area expected to be impacted by a hurricane, other resources in a different location may be used to host the virtualized system, thereby preventing system downtime from the hurricane. Additionally, virtualizing theexample system300 enables system scenarios to be tested prior to a physical system upgrade.
• A known processcontrol system architecture400 is shown inFIG. 4. As shown inFIG. 4, thearchitecture400 includes workstations andservers402 and404. Theworkstations402 may support user interface functions such as an operator interface, diagnostics, and/or configuration. Theservers404 support backend functions such as data collection and storage, configuration, calculations, and interfaces to external systems.
• An operator interface to the process typically includes or involves theworkstations402 and theservers404, keyboards, mice, and liquid crystal display (LCD) monitors. For example, to provide a wide view and range of control, multiple monitors may be used in various arrangements. Large LCD monitors may be used to support plant overview displays. Further, known operating systems such as Windows Server 2008 and Windows 7 may be utilized because of the broad support available to manufacturers for these systems.
• Equipment that an operator uses to monitor process conditions and manipulate setpoints of the process operation may be located in a central control room or distributed on the plant floor close to the equipment. From these locations, the operator can view information transmitted from the processing area and displayed on operator displays and change control conditions, assuming proper security privileges for the operator, from an input device.
• Operator display applications are typically implemented on a system wide basis in one or more of theworkstations402 and provide preconfigured displays to the operator or maintenance persons regarding the operating state of the control system or the devices within the plant. Typically, these displays take the form of alarm summary displays that receive alarms generated bycontrollers406 and408 ordevices410 within the process plant, control displays indicating the operating state of the controllers and other devices within the process plant, maintenance displays indicating the operating state of the devices within the process plant, etc.
• Displays may be created through the use of objects that have an associated graphic. The object may animate the graphic on the display screen based on the received data to illustrate, for example, that a tank is half full, to illustrate the flow measured by a flow sensor, etc. While the information for the displays is sent from the devices or configuration database within the process plant, the information is used to provide a display to the user containing that information. As a result, all information and programming that is used to generate alarms, detect problems within the plant, etc. may be generated by and configured within the different devices associated with the plant, such as controllers and field devices during configuration of the process plant control system.
• Programming the process control system instructions involves several configuration activities such as physical configuration, control strategy configuration, display configuration, and historical data collection configuration. These activities are generally performed in parallel and then integrated as the process control system is engineered. A configuration database enables users (e.g., plant operators) to create and modify control strategies and download these strategies via acontrol network412 to the distributedcontrollers406 and408, consoles, anddevices410. Typically, the control strategies are made up of interconnected function blocks, SFCs, equipment and unit representations, etc. that perform functions within the control scheme based on inputs and which provide outputs to other function blocks and/or input/output devices within the control scheme. The configuration application also allows a designer to create or change operator interfaces that are used by a viewing application to display data to an operator and to enable the operator to change settings within the process control system. Each of thecontrollers406 and408 and, in some cases,field devices410, stores and executes a controller application that runs the control modules assigned and downloaded to implement actual process control functionality. For regulated and/or highly critical process control applications, such as those requiring FDA certification, the configuration may be versioned. The version and audit trail application records all changes, who made the changes, and when the changes were made.
• A DCS may also include the ability to collect batch, continuous, and event data. A centrally defined history database may be available for the storage of historical data. The value of any attribute, alarm of any control strategy, alert, or process condition can be recorded in the history database along with its status. In modern control systems, the data values are collected as an integrated feature of the system. Events are collected and time stamped at their source. For example, the data may be collected and recorded with a resolution of a few milliseconds. Users and layered applications can retrieve the batch, continuous, and event data in a time-ordered fashion. For security reasons, values may not be edited without leaving behind an audit trail.
• Security is generally a part of a DCS architecture. The DCS manages what a user is able to do by user, plant area, unit, and workstation. Layered applications may be authenticated before they are allowed access into the system. Security within a DCS may involve an authentication process by which access to the DCS for users and layered applications are controlled through the use of password protected user accounts. DCS security may also involve user-related aspects such as requiring a user of the DCS to have a user account on the system in order to gain access, naming all user accounts, providing unique names to all user accounts within the scope of a site, and requiring all user accounts to have a password to be provided in conjunction with the account name in order to start a DCS session. Still further, DCS security may involve plant area security aspects such as permitting or denying access to make changes within zero or more areas within a process control plant based on user account. For each plant area where access is permitted, access can be restricted at runtime according to the classification of the runtime attribute data can be changed. For each plant area where access is permitted, the ability to make configuration changes can be restricted. A user account can also be permitted or denied access to view or modify user account and privilege information. In some systems it is also possible to enable authorization. In these cases, one or more users may confirm by password the changing of certain parameters, starting/stopping a batch, etc.
• Integrated diagnostics may be a feature of a DCS. Such diagnostics may cover the hardware, redundancy, communications, control, and to some extent, the software of the DCS.
• Thecontrol network412 is used to connect thecontrollers406 and408, remote input/output, and theworkstations402 and theservers404. To provide a deterministic communication of process alarms and values, some DCS systems use proprietary networks. However, these have been largely replaced in most process control systems by inexpensive Ethernet interfaces operating at communication rates of 10 Mbps, 100 Mbps, and 1 Gbps.
• Segmenting network on the control network is achieved by usingswitches414 and416. Standard switches have given way to smart switches with built-in firewall capabilities. By designing thecontrol network412 with smart switches, it possible to both secure the control system and manage traffic flow. To increase the reliability of thecontrol network412, thecontrol network412 may include redundant switches, redundant Ethernet cards, and/or redundant network cabling.
• Thecontrollers406 and408 are connected to thefield devices410 via analog, digital or combined analog/digital buses. Thefield devices410 may be, for example, valves, valve positioners, switches and transmitters (e.g., temperature, pressure, level and flow rate sensors), are located within the process environment and perform process functions such as opening or closing valves, measuring process parameters, etc. Smart field devices, such as the field devices conforming to the input/output bus protocols, may also perform control calculations, alarming functions, and other control functions. Thecontrollers406 and408 implement control strategies, which read measurements from thefield devices410, perform control functions, and send signals over the communication lines to actuators, motors, etc. to control the operation of the process.
• Information from thefield devices410 and thecontrollers406 and408 is made available over thecontrol network412 to theoperator workstations402, thedata historians404, report generators, centralized databases, etc. These nodes run applications that may, for example, enable an operator to perform functions with respect to the process, such as changing settings of the process control routine, modifying the operation of the control modules within thecontrollers406 and408 or thefield devices410, viewing the current state of the process, viewing alarms generated by thefield devices410 and thecontrollers406 and408, simulating the operation of the process for the purpose of training personnel or testing the process control software, keeping and updating a configuration database, etc.
• One approach that may be used to develop the layout of the control system involves maintaining the input/output devices with the unit and unit operations of the process, for example, locating a chemical reactor and a distillation column in the same physical controller. If this approach is selected, the process remains under control as long as thecontroller406,408 is functioning. To increase the reliability of this scenario, thecontroller406,408 and input/output modules, cards ordevices418 can be made redundant. Thecontrollers406 and408 are further described in ‘Terry Blevins, Mark Nixon. Control Loop Foundation—Batch and Continuous Processes, Research Triangle Park: ISA,2010,’ the entirety of which is incorporated by reference.
• The input/output cards ordevices418 may address a variety of field measurements and actuators. Example types of input/output cards or devices include (1) Analog Input (isolated) 1-5 volt DC, 4-20 ma, (2) Analog Output 4-20 mA, (3) Isolated RTD input (2, 3, or 4 wire) and Thermocouple Input (B, E, J, K, N, R, S, T), (4) Discrete Input 24 VDC, 120/230 VAC, (5) Discrete Output 24 VDC, 120/230 VAC, (6) Pulse Count Input, and (7) Pulse Duration Output.
• Digital transmitters and actuators may use a variety of available communication protocols and physical interfaces. Example communication interface cards include (1) HART AI-Card, 4 to 20 mA, (2) HART AO Card, 4 to 20 mA Series, (3) DeviceNet (Baud rate 125 250 500 kbit/sec), (3) FOUNDATION Fieldbus, (4) AS-Interface, (5) Profibus DP Baud rate (9.6 19.2 93.75 187.5 500 1500 kbit/sec), and (6) Serial Interface (Modbus or Allen Bradley's Data Highway Plus protocol).
• In addition, some manufacturers may offer input/output cards to meet special requirements. For example, Sequence of Events (SOE) input cards are used to capture process-upset events received directly from devices in the field. Because events are captured and temporarily stored locally on the SOE input card, faster recording for each of the channels on the card is possible. For example, events captured by an SOE input card are time stamped using a ¼-millisecond resolution.
• Input and output terminations are made at terminals that may be part of the electronic mounting frames or on separate terminal boards. In the case of a terminal board, a cable connection between the terminal board and the electronic controller file may be used. Connections may be made from the front of the cabinet. Alternatively, a separate termination cabinet filled with rows of terminal strips may be used. This alternate approach involves additional wiring from the termination cabinet to the terminals in the remote controller cabinet but enables the field wiring to be completed before the distributed control housings are delivered and installed.
• Analog input and output signals may be conveyed via shielded, twisted pairs of copper wire. Digital inputs and outputs, either 120 volt AC or 24 volt DC, can be conveyed via twisted pairs, which do not have to be shielded. Analog signals may not be run in proximity to alternating current wiring. Many controllers are configured to process 1 to 5 volt direct current (DC) signals. Thus, one often used input is a 4 to 20 mA current signal, which develops a 1 to 5 volt input across a 250 ohm resistor mounted on the input terminal board. Some distributed control systems can accept low-level signals from RTDs and thermocouples and perform signal amplification in their input electronic circuitry. Some systems can accept pulse input with frequencies sufficiently high to allow signals from turbine flow meters to be used directly.
• Most suppliers offer some conditioning of signals. Taking the square root, linearizing signals derived from thermocouples and resistance thermometers, and dampening noisy inputs can be selected by configuration. Some input/output boards provide terminals with fused 24 volt DC power that can be used to supply a positive voltage to two-wire transmitters.
• Separate terminal boards may also be supplied for digital input and output signals. Optical isolation for these signals may be provided. A DC input signal (or a rectified alternating current (AC) input signal) causes a light emitting diode (LED) in the isolating relay to be energized. A photoelectric device energized from the LED actuates a transistor in transistor-transistor logic (TTL) input circuitry to signal a digital input. A digital output signal is similarly isolated to actuate a transistor driver circuit for DC outputs or a triac for AC outputs. The solid-state relay from which the output is generated functions similar to a dry contact, and the output is powered from a separate power source.
• The requirements for redundancy and interfacing for input/output processing may result in a custom hardware design for the process controller(s). Multiple processors are often used to address the communication and input/output processing and control execution. Also, a real-time operating system for embedded applications may be used to provide deterministic scheduling and execution of control systems.
• The term “devices” may collectively refer to transmitters such flow meters and final control elements such as valves. Smart devices provide both measurement data and diagnostic information. The diagnostic information can be used to monitor the health of the device, and to some extent, the health of the process that the devices are monitoring. To enable the entire system to run reliably, the information may be monitored on a continuous basis.
• There are various methods to connect to and communicate with devices including a local control bus. Devices with a control bus interface can be connected directly to the control bus. Such devices include flow computers, gas chromatographs, anti-surge control systems and other complex field devices. Alternatively, field buses may be used. Devices with field bus capabilities can be connected by means of a DCS controller or a linking device (Gateway). Field buses include Foundation Fieldbus H1, HART, Profibus, and ASi (Actuator Sensor interface). Whereas Fieldbus H1 and Profibus are primarily used for continuous signals, ASi is used to network field sensors and actuators subject to ‘on-off-control’ or ‘on-off-monitoring’ (2-state field devices, such as proximity switches, on-off valves and on-off indicators). In a further alternative, conventional input/output may be used. For example, 4-20 mA current loop with HART may be used. The HART protocol enables configuration and diagnostics within the device to be utilized by the plant systems. Devices are further described in ‘McMillan, Gregory K.Essentials of Modern Measurements and Final Elements in the Process Industry: A Guide to Design, Configuration, Installation, and Maintenance, Research Triangle Park: ISA, 2010,’ the entirety of which is incorporated by reference.
• The physical aspects of a known DCS configuration is shown inFIGS. 5A and 5B, and display, control strategy, and alarms configuration is shown inFIG. 6.
• As part of configuring systems it may be necessary or desirable to test the configuration before it is deployed on the actual equipment. Various techniques have been used to achieve such testing. For example, the configuration may be tested on a virtual or simulated controller. However, with the foregoing known systems and techniques, such testing results in a substantial amount of additional work and may not test the overall performance of the system due to the very limited nature of the virtualization. To simulate the process dynamics, several forms of dynamic process simulations have been used. For the majority of cases it is possible to use specially configured control strategies to represent the process. These process simulations can be run in controllers or in virtual controllers that are part of the application/integration stations.
• The example apparatus and methods to virtualize process control systems described herein may be employed without changing the core functions and features of a process control system. Instead, the example apparatus and methods described herein may be used to implement a process control system architecture that separates the functions and features from the underlying hardware. In doing so, the example apparatus and methods described herein and the DCS architecture provided thereby, enables an entire control system, or a portion of the control system, to be implemented (e.g., run) on a single server or a cluster of servers.
• An example architecture implemented in accordance with the example methods and apparatus described herein is illustrated inFIGS. 7, 8, 9 and 10. As shown in these figures, virtualization enables a guest operating system, or multiple guest operating systems, to operate on a cluster of servers. The virtualized process control system or environment combines a collection of infrastructure components such as central processing units (CPUs), storage, and networking into a seamless and dynamic operating environment. The virtualized system or environment includes infrastructure services, which abstract, aggregate, and allocate hardware and infrastructure resources such as CPUs, memory, storage, and networking. The virtualized system or environment also includes application services, which ensure availability, security, and scalability for applications. The virtualized system or environment further includes management services, which provides a single point of control for the virtualized environment. Virtualization techniques that may be applied or adapted to implement the example architecture described herein are generally described in ‘VMware,Introduction to VMware vSphere, Palo Alto, Calif., 2009,’ and ‘VMware,ESXi Installable and vCenter Server Setup Guide, Palo Alto, Calif., 2009,’ the entirety of which is incorporated by reference.
• FIG. 7 illustrates an example manner of virtualizing workstations and/orservers700 into asingle host computer702. As depicted inFIG. 7, a plurality ofthin clients704 may be communicatively coupled to thehost computer702 via a LAN. Additionally, as depicted inFIG. 7,software708 within thehost computer702 is structured to provide a virtualmachine server layer710 interposing virtual workstations712 andoperating system714 andhardware716 layers. Each of the virtual workstations712 includes an encapsulated application and operating system within which the application is to be executed. Thus, in this manner, theworkstations700 may be consolidated to operate within a single host computer (e.g., the computer702).
• FIG. 8 depicts an example manner in which acontrol system800 may be virtualized. Virtualization of input/output devices802 is depicted in the system corresponding to reference804.Controllers806 may additionally or alternatively be virtualized as depicted in the system corresponding to reference808. Similarly,workstations810 may additionally or alternatively be virtualized as depicted in the system corresponding to reference812. Still further, while not shown inFIG. 8, field devices may alternatively or additionally be virtualized in a similar manner. The various software layers resulting from virtualization of the input/output devices802, thecontrollers806 and theworkstations810 are depicted in the block corresponding to reference814.
• The architecture for the virtualized environment ofFIG. 8 is further illustrated inFIGS. 9 and 10. As shown inFIGS. 9 and 10, virtual workstations orservers900 run on a cluster ofphysical servers902 having one or more servers. Astorage area network904 provides common storage for the guest operating systems which are running on the cluster ofphysical servers902. The cluster ofservers902 provides an environment in which guest workstations orvirtual desktops906 such as operator stations and configuration stations and guest servers or the virtualized servers900 (such as the PROPlus and Application Station) may be executed. Users may access servers and clients throughremote desktop services908, which may be launched from a users laptop, workstation, or thin client device. Thecluster902 may also be used to store images, which may be streamed out tophysical desktops910. In this case thecluster902 may be used to manage physical images that are stored on physical hard drives.
• Further, as illustrated inFIG. 10,controllers912 andCIOCs914 may also be virtualized. In this case, the controllers and CIOC's are virtualized and run on thecluster902 and, when run in Fault Tolerant (FT) mode, provide same reliability as when run in dedicated hardware.
• FIG. 11 depicts physical aspects of a virtualized control system. In particular, a hierarchical arrangement of clusteredsevers1100, an active directory anddomain controller1102, aworkstation1104,virtual machine software1106 andworkstation templates1108 are depicted.
• To virtualize a control system, an infrastructure bus may be used to synchronize distributed systems, controllers, and/or other distributed process control components. In examples where processes operating on the systems, controllers, and/or other distributed process control components are migrated, the example methods and apparatus described herein may use asynchronous and/or synchronous memory state and/or data state transfers. For example, to transfer operation of one set of controllers to another set of controllers, a disk and/or memory state of the controllers may be transmitted asynchronous initially. Then, after the initial disk and/or memory transfer, the set of controllers may transfer the remaining disk and/or memory state synchronously using any optimization routine to reduce total amount of data transferred and/or to reduce transfer times. In this manner, changes to the disk and/or memory state of the first set of controllers are propagated to the second set of controllers. After substantially all of the memory state and/or disk state have been transferred, the example methods and apparatus described herein may route traffic to the second set of controllers, stop the first set of controllers and transfer the remaining memory and/or disk state to the second set.
• In other examples, the methods and apparatus described herein may use redundant systems, controllers, and/or other distributed process control components to transfer processes. In these examples, a redundant back plane may be utilized by a virtualized switch so that any process may be substantially seamlessly transferred between systems, controllers, and/or other distributed process control components as computing loads and/or client requirements change.
• Multi-core technology allows chip manufactures to increase computational capacity without having to increase clock speeds, which would increase heat, radio emissions/interference, etc. Such multi-core technology may be used to leverage virtualization. For example, a hypervisor may execute on the hardware to enable multiple guest operating systems to use the hardware capabilities.
• There are numerous benefits to the virtualization provided by the example methods and apparatus described herein. Such benefits include extended system life that minimizes upgrades due to hardware and software obsolescence, simplified migrations that reduces disruption of system upgrades and minimizes installation and maintenance costs, increased system availability including availability during maintenance and backups, increased system performance due to maximized resource utilization and scalability, improved maintenance and support due to easy patch management and security updates as well as easy remote software support.
• The benefits of the example methods and apparatus described herein further include cost effective workstation deployment due to maximum utilization of computing resources and lower hardware and installation costs; lower maintenance costs due to centralized back-up and storage, easy virus protection operating system updates, and easy process control system software upgrades; improved availability due to redundant computing and data storage for critical applications and fast recovery from workstation failures; improved security due to an additional security level to limit access and provide audit and control; quicker response to threat situations; improved flexibility due to more flexible training and development systems, reduced hardware required for FAT and reduced project schedule with parallel FAT and site input/output checkout; improved support due to non-intrusive remote maintenance and troubleshooting; improved packaging as controllers can be packaged together as a cluster without having to run input/output to individual controllers; reduced engineering costs due to the ability to move control strategies between controllers without having to retest large portions of the control strategy; improved availability because clustered controllers and input/output servers can be moved between available controller and input/output computing platforms without loss of access to the system; simplified FAT because any controller loading problems can be corrected by adding CPU's; improved system distribution because clusters can be in the same plant or located remotely from the main control system to cover utility areas, tank farms, oil platforms, and remote stations (for example in hydrocarbon fields); and improved disaster recovery as clusters can be moved across high speed links to back them up.
• Although certain example methods and apparatus have been described herein, the scope of coverage of this patent is not limited thereto. On the contrary, this patent covers all methods, apparatus and articles of manufacture fairly falling within the scope of the appended claims either literally or under the doctrine of equivalents.

Claims (20)

What is claimed is:

1. An apparatus comprising:

at least one memory;

instructions; and

processor circuitry to execute the instructions to:

virtualize a workstation for a process control system, the workstation virtualized using a first physical server in a server cluster of at least two servers;

virtualize an input/output device for the process control system, the input/output device to run in a fault tolerant mode;

cause the virtualized input/output device to interoperate with a virtual controller in communication with the workstation, the virtualized input/output device to be communicatively coupled to a field device in the process control system, the field device to receive a control signal from the virtual controller;

provide a remote access user interface for the workstation, the remote access user interface including at least one of an operator interface, a diagnostics interface, or a configuration interface; and

in response to a maintenance action initiated via the remote access user interface, cause migration of the workstation to a second physical server in the server cluster different than the first physical server, the workstation to maintain communication with the virtual controller during the migration.

2. The apparatus ofclaim 1, wherein the processor circuitry is to execute the instructions to migrate the workstation without loss of data and without a communications interruption between the workstation and the virtual controller.

3. The apparatus ofclaim 1, wherein the processor circuitry is to execute the instructions to cause the migration of the workstation via a redundant back plane that includes a virtualized switch.

4. The apparatus ofclaim 1, wherein the control signal includes at least one of a 4-20 mA analog input signal, a 4-20 mA analog output signal, a 24 VDC discrete input signal, or a 24 VDC discrete output signal.

5. The apparatus ofclaim 1, wherein the processor circuitry is to execute the instructions to:

provide the remote access user interface via a remote desktop service that stores user information on a storage area network; and

cause transmission of data from the workstation to the storage area network.

6. The apparatus ofclaim 1, wherein the field device corresponds to at least one of a valve, a valve positioner, an actuator, a motor, or a sensor transmitter.

7. The apparatus ofclaim 1, wherein the processor circuitry is to execute the instructions to launch guest operating systems corresponding to ones of the workstation, the virtual controller, and the virtualized input/output device, at least one of the guest operating systems being a real-time operating system.

8. A computer readable storage device or storage disk comprising instructions which, when executed, cause processor circuitry to:

virtualize a workstation for a process control system, the workstation virtualized using a first physical server in a server cluster of at least two servers;

virtualize an input/output device for the process control system, the input/output device to run in a fault tolerant mode;

cause the virtualized input/output device to interoperate with a virtual controller in communication with the workstation, the virtualized input/output device to be communicatively coupled to a field device in the process control system, the field device to receive a control signal from the virtual controller;

provide a remote access user interface for the workstation, the remote access user interface including at least one of an operator interface, a diagnostics interface, or a configuration interface; and

in response to a maintenance action initiated via the remote access user interface, cause migration of the workstation to a second physical server in the server cluster different than the first physical server, the workstation to maintain communication with the virtual controller during the migration.

9. The computer readable storage device or storage disk ofclaim 8, wherein the instructions, when executed, cause the processor circuitry to cause the migration of the workstation without loss of data and without a communications interruption between the workstation and the virtual controller.

10. The computer readable storage device or storage disk ofclaim 8, wherein the instructions, when executed, cause the processor circuitry to cause the migration of the workstation via a redundant back plane that includes a virtualized switch.

11. The computer readable storage device or storage disk ofclaim 8, wherein the control signal includes at least one of a 4-20 mA analog input signal, a 4-20 mA analog output signal, a 24 VDC discrete input signal, or a 24 VDC discrete output signal.

12. The computer readable storage device or storage disk ofclaim 8, wherein the instructions, when executed, cause the processor circuitry to:

provide the remote access user interface via a remote desktop service that stores user information on a storage area network; and

cause transmission of data from the workstation to the storage area network.

13. The computer readable storage device or storage disk ofclaim 8, wherein the field device corresponds to at least one of a valve, a valve positioner, an actuator, a motor, or a sensor transmitter.

14. The computer readable storage device or storage disk ofclaim 8, wherein the instructions, when executed, cause the processor circuitry to launch guest operating systems corresponding to ones of the workstation, the virtual controller, and the virtualized input/output device, at least one of the guest operating systems being a real-time operating system.

15. A method comprising:

virtualizing, by executing an instruction with processor circuitry, a workstation for a process control system, the workstation virtualized using a first physical server in a server cluster of at least two servers;

virtualizing, by executing an instruction with the processor circuitry, an input/output device for the process control system, the input/output device to run in a fault tolerant mode;

causing, by executing an instruction with the processor circuitry, the virtualized input/output device to interoperate with a virtual controller in communication with the workstation, the virtualized input/output device to be communicatively coupled to a field device in the process control system, the field device to receive a control signal from the virtual controller;

providing, by executing an instruction with the processor circuitry, a remote access user interface for the workstation, the remote access user interface including at least one of an operator interface, a diagnostics interface, or a configuration interface; and

in response to a maintenance action initiated via the remote access user interface, causing, by executing an instruction with the processor circuitry, migration of the workstation to a second physical server in the server cluster different than the first physical server, the workstation to maintain communication with the virtual controller during the migration.

16. The method ofclaim 15, wherein the causing of the migration of the workstation is accomplished without loss of data and without a communications interruption between the workstation and the virtual controller.

17. The method ofclaim 15, wherein the causing of the migration of the workstation is accomplished via a redundant back plane that includes a virtualized switch.

18. The method ofclaim 15, wherein the control signal includes at least one of a 4-20 mA analog input signal, a 4-20 mA analog output signal, a 24 VDC discrete input signal, or a 24 VDC discrete output signal.

19. The method ofclaim 15, further including:

providing the remote access user interface via a remote desktop service that stores user information on a storage area network; and

causing transmission of data from the workstation to the storage area network.

20. The method ofclaim 15, further including launching guest operating systems corresponding to ones of the workstation, the virtual controller, and the virtualized input/output device, at least one of the guest operating systems being a real-time operating system.

Images