System for the operation and the assistance in the operation of a critical industrial process and associated method

A method for operating a critical industrial process implemented by a system that operates and assists with operation of the critical industrial process, said system comprising

• a first set of operator stations each comprising a graphical interface and each being configured to
• receive instructions from an operator via the graphical interface;
• display, at a current time and on request from the operator, first information from a subset of information, the subset of information being comprised in a set of information comprising a group of information for each acquisition time from among a plurality of acquisition times preceding the current time, each group of information comprising first information for operating the critical industrial process and second information for assisting with the operation of the critical industrial process;
• a second set of operator stations, each configured to display, at the current time and on request from the operator, the second information from the subset of information;
• a first sub-system that operates the critical industrial process working cyclically, a second sub-system that assists with the operation of the critical industrial process working in an event-driven manner, and a unidirectional separating device comprised in the first sub-system and in the second sub-system, comprising a pair of computing units, the first sub-system comprising
• an interface module configured to collect data from a plurality of programmable logic controllers each having a controller model, each item of data being associated with an acquisition time from the plurality of acquisition times, the interface module including at least one pair of computing units for each controller model,
• the computing units of the interface module working in asynchronous redundancy;
• a first processing module including a pair of computing units, the computing units of the first processing module working in active redundancy;
• a first module that manages the operator stations of the first set of operator stations, comprising one computing unit for each operator station in the first set of operator stations, each computing unit being configured to
• manage the graphical interface of the each operator station corresponding thereto;
• a first duplicate communication network having a first channel and second channel that are separate, comprising a first redundancy module distributed over each computing unit of the first sub-system,
• the second sub-system comprising
• a second processing module comprising a pair of computing units, the computing units of the second processing module working in active redundancy;
• a second module that manages the operator stations of the second set of operator stations, comprising one computing unit for each operator station in the second set of operator stations, each computing unit being configured to
• manage the graphical interface of the each operator station corresponding thereto;
• a second duplicate communication network having a first channel and second channel that are separate, comprising a second redundancy module distributed over each computing unit of the second sub-system;
• said method carried out for each cycle of a set of cycles and comprising:
• for said each computing unit of said each pair of computing units of the interface module,
• collecting each item of data that is received by each controller having a corresponding controller model, and
• eliminating each duplicate data that is received,
• each item of data being associated with an acquisition time preceding the current time;
• receiving, by said each computing unit of the processing module, said data that is collected by the interface module, sorting the data that is received as a function of their acquisition time, eliminating the each duplicate data that is received, computing the first information of the group of information corresponding thereto for said each acquisition time from the data that is sorted and corresponding thereto, and sending to each computing unit of the unidirectional separating device, each first information item that is computed;
• receiving, by said each computing unit of the first module that manages the operator stations of the first set of operator stations, each first information item that is computed, and sending to said each operator station in the first set of operator stations, each first information item that is received comprised in the subset of information that is requested by the operator;
• receiving, by said each computing unit of the second processing module, the data that is collected and the first information that is computed by the first sub-system, detecting the data and the first information modified since a previous cycle, eliminating any duplicate data and the first information received, and computing of the second information of the group of information for said each acquisition time, from the data that is detected and corresponding thereto and the first information;
• receiving, by said each computing unit of the second module that manages the operator stations of the second set of operator stations, each computed second information item, and sending to said each operator station in the second set of operator stations, each second information item that is received and comprised in the subset of information subset requested;
• displaying the first information of the subset of information requested by said each operator station of the first set of operator stations and of the second information of the subset of information requested by said each operator station of the second set of operator stations, at the current time;
• if the operator provides an instruction via the graphical interface of an operator station in the first set of operator stations, sending the instruction to the interface module;
• sending to at least one controller, by the interface module, one or more of at least one data dependent command received and the instruction provided by the operator;
• said receiving by said each computing unit of the first sub-system including an exchange of at least one message between the each computing unit and said at least one other computing unit of the first sub-system and including
• simultaneously sending on the first channel and the second channel of the first communication network, the at least one message by the at least one other computing unit to the first redundancy module;
• receiving by the first redundancy module, the at least one message that is sent;
• if the at least one message is received via the first channel and via the second channel, deleting by the first redundancy module the at least one message that is received via the second channel;
• modifying by the first redundancy module, the at least one message that is received by adding an acknowledgment request;
• simultaneously disseminating on the first channel and the second channel, the at least one message that is modified to the each computing unit by the first redundancy module;
• reception of the at least one message that is modified by the each computing unit and sending of an acknowledgment to the first redundancy module;
• said receiving by said each computing unit of the second sub-system comprising an exchange of at least one message between the each computing unit and at least one other computing unit of the second sub-system comprising
• simultaneously sending on the first channel and the second channel of the second communication network, the at least one message by the at least one other computing unit to the second redundancy module;
• receiving by the second redundancy module (1038), the message sent (2132);
• if the at least one message is received via the first channel and via the second channel, deleting by the second redundancy module the at least one message that is received via the second channel;
• modifying by the second redundancy module, the at least one message that is received by adding an acknowledgment request;
• simultaneously disseminating on the first channel and the second channel, the at least one message that is modified to the each computing unit by the second redundancy module;
• receiving the at least one message that is modified by the each computing unit and sending an acknowledgment to the second redundancy module.

A non-transitory computer program product comprising instructions that, when executed on a computer, lead the computer to implement a method for operating a critical industrial process implemented by a system that operates and assists with operation of the critical industrial process, said system comprising

• a first set of operator stations each comprising a graphical interface and each being configured to
• receive instructions from an operator via the graphical interface;
• display, at a current time and on request from the operator, first information from a subset of information, the subset of information being comprised in a set of information comprising a group of information for each acquisition time from among a plurality of acquisition times preceding the current time, each group of information comprising first information for operating the critical industrial process and second information for assisting with the operation of the critical industrial process;
• a second set of operator stations, each configured to display, at the current time and on request from the operator, the second information from the subset of information;
• a first sub-system that operates the critical industrial process working cyclically, a second sub-system that assists with the operation of the critical industrial process working in an event-driven manner, and a unidirectional separating device comprised in the first sub-system and in the second sub-system, comprising a pair of computing units, the first sub-system comprising
• an interface module configured to collect data from a plurality of programmable logic controllers each having a controller model, each item of data being associated with an acquisition time from the plurality of acquisition times, the interface module including at least one pair of computing units for each controller model,
• the computing units of the interface module working in asynchronous redundancy;
• a first processing module including a pair of computing units, the computing units of the first processing module working in active redundancy;
• a first module that manages the operator stations of the first set of operator stations, comprising one computing unit for each operator station in the first set of operator stations, each computing unit being configured to
• manage the graphical interface of the each operator station corresponding thereto;
• a first duplicate communication network having a first channel and second channel that are separate, comprising a first redundancy module distributed over each computing unit of the first sub-system,
• the second sub-system comprising
• a second processing module comprising a pair of computing units, the computing units of the second processing module working in active redundancy;
• a second module that manages the operator stations of the second set of operator stations, comprising one computing unit for each operator station in the second set of operator stations, each computing unit being configured to
• manage the graphical interface of the each operator station corresponding thereto;
• a second duplicate communication network having a first channel and second channel that are separate, comprising a second redundancy module distributed over each computing unit of the second sub-system;
• said method carried out for each cycle of a set of cycles and comprising:
• for said each computing unit of said each pair of computing units of the interface module,
• collecting each item of data that is received by each controller having a corresponding controller model, and
• eliminating each duplicate data that is received,
• each item of data being associated with an acquisition time preceding the current time;
• receiving, by said each computing unit of the processing module, said data that is collected by the interface module, sorting the data that is received as a function of their acquisition time, eliminating the each duplicate data that is received, computing the first information of the group of information corresponding thereto for said each acquisition time from the data that is sorted and corresponding thereto, and sending to each computing unit of the unidirectional separating device, each first information item that is computed;
• receiving, by said each computing unit of the first module that manages the operator stations of the first set of operator stations, each first information item that is computed, and sending to said each operator station in the first set of operator stations, each first information item that is received comprised in the subset of information that is requested by the operator;
• receiving, by said each computing unit of the second processing module, the data that is collected and the first information that is computed by the first sub-system, detecting the data and the first information modified since a previous cycle, eliminating any duplicate data and the first information received, and computing of the second information of the group of information for said each acquisition time, from the data that is detected and corresponding thereto and the first information;
• receiving, by said each computing unit of the second module that manages the operator stations of the second set of operator stations, each computed second information item, and sending to said each operator station in the second set of operator stations, each second information item that is received and comprised in the subset of information subset requested;
• displaying the first information of the subset of information requested by said each operator station of the first set of operator stations and of the second information of the subset of information requested by said each operator station of the second set of operator stations, at the current time;
• if the operator provides an instruction via the graphical interface of an operator station in the first set of operator stations, sending the instruction to the interface module;
• sending to at least one controller, by the interface module, one or more of at least one data dependent command received and the instruction provided by the operator;
• said receiving by said each computing unit of the first sub-system including an exchange of at least one message between the each computing unit and said at least one other computing unit of the first sub-system and including
• simultaneously sending on the first channel and the second channel of the first communication network, the at least one message by the at least one other computing unit to the first redundancy module;
• receiving by the first redundancy module, the at least one message that is sent;
• if the at least one message is received via the first channel and via the second channel, deleting by the first redundancy module the at least one message that is received via the second channel;
• modifying by the first redundancy module, the at least one message that is received by adding an acknowledgment request;
• simultaneously disseminating on the first channel and the second channel, the at least one message that is modified to the each computing unit by the first redundancy module;
• reception of the at least one message that is modified by the each computing unit and sending of an acknowledgment to the first redundancy module;
• said receiving by said each computing unit of the second sub-system comprising an exchange of at least one message between the each computing unit and at least one other computing unit of the second sub-system comprising
• simultaneously sending on the first channel and the second channel of the second communication network, the at least one message by the at least one other computing unit to the second redundancy module;
• receiving by the second redundancy module (1038), the message sent (2132);
• if the at least one message is received via the first channel and via the second channel, deleting by the second redundancy module the at least one message that is received via the second channel;
• modifying by the second redundancy module, the at least one message that is received by adding an acknowledgment request;
• simultaneously disseminating on the first channel and the second channel, the at least one message that is modified to the each computing unit by the second redundancy module;
• receiving the at least one message that is modified by the each computing unit and sending an acknowledgment to the second redundancy module.