System for the operation and the assistance in the operation of a critical industrial process and associated method

A system that operates and assists with operation of a critical industrial process, comprising:

• a first set of operator stations each comprising a graphical interface and each being configured to
• receive instructions from an operator via the graphical interface;
• display, at a current time and on request from the operator, first information from a subset of information, the subset of information being comprised in a set of information comprising a group of information for each acquisition time from among a plurality of acquisition times preceding the current time, each group of information comprising first information for operating the critical industrial process and second information for assisting with the operation of the critical industrial process;
• a second set of operator stations, each configured to display, at the current time and on request from the operator, the second information from the subset of information;
• a first sub-system that operates the critical industrial process working cyclically, a second sub-system that assists with the operation of the critical industrial process working in an event-driven manner, and a unidirectional separating device comprised in the first sub-system and in the second sub-system, comprising a pair of computing units, the first sub-system comprising
• an interface module configured to collect data from a plurality of programmable logic controllers each having a controller model, each item of data being associated with an acquisition time from the plurality of acquisition times, the interface module including at least one pair of computing units for each controller model, each computing unit of the pair of computing units being configured to
• collect each item of data received by each controller having the controller model and eliminating each duplicate data received;
• send to at least one controller, one or more of at least one data dependent command collected and instructions provided by the operator;
• the computing units of the interface module working in asynchronous redundancy;
• a first processing module including a pair of computing units, each computing unit of the pair of computing units being configured to
• receive the data collected from each computing unit of the interface module;
• sort the data received as a function of their acquisition time and eliminating the each duplicate data that is received;
• compute for each acquisition time, the first information of the group of information corresponding thereto, from the data that is sorted and corresponding thereto;
• send to each computing unit of the unidirectional separating device, each first information item computed;
• the computing units of the first processing module working in active redundancy;
• a first module that manages the operator stations of the first set of operator stations, comprising one computing unit for each operator station in the first set of operator stations, each computing unit being configured to
• receive each first information item computed;
• send to the each operator station corresponding thereto each first information item corresponding to the subset of information requested;
• manage the graphical interface of the each operator station corresponding thereto;
• a first duplicate communication network having a first channel and second channel that are separate, comprising a first redundancy module distributed over each computing unit of the first sub-system, each computing unit of the first sub-system being configured to
• send to the first redundancy module each message intended for at least one other computing unit of the first sub-system simultaneously on the first channel and the second channel;
• receive each message intended for it from the first redundancy module and sending an acknowledgment to the first redundancy module;
• the first redundancy module being configured to
• receive the each message sent via one or more of the first channel and the second channel;
• delete the each message received via the second channel if the each message has been received via the first channel;
• modify the each message that is received by adding an acknowledgment request;
• disseminate the each message that is modified to said at least one other computing unit of the first sub-system simultaneously on the first channel and the second channel;
• the second sub-system comprising
• a second processing module comprising a pair of computing units, each computing unit of the pair of computing units being configured to
• receive from each computing unit of the unidirectional separating device, the data that is collected and the first information that is computed;
• eliminate any duplicate data and first information received;
• compute, for each acquisition time, the second information of the group of information corresponding thereto, from the data that is sorted and the first information corresponding thereto;
• the computing units of the second processing module working in active redundancy;
• a second module that manages the operator stations of the second set of operator stations, comprising one computing unit for each operator station in the second set of operator stations, each computing unit being configured to
• receive each computed second information item;
• send to the each operator station corresponding thereto each second information item corresponding to the subset of information requested;
• manage the graphical interface of the each operator station corresponding thereto;
• a second duplicate communication network having a first channel and second channel that are separate, comprising a second redundancy module distributed over each computing unit of the second sub-system, each computing unit of the second sub-system being configured to
• send to the second redundancy module each message intended for at least one other computing unit of the second sub-system simultaneously on the first channel and the second channel;
• receive each message intended for it from the second redundancy module and sending an acknowledgment to the second redundancy module;
• the second redundancy module being configured to
• receive the each message sent via one or more of the first channel and the second channel;
• delete the each message that is received via the second channel if the each message has been received via the first channel;
• modify the each message that is received by adding an acknowledgment request;
• disseminate the each message that is modified to the at least one other computing unit of the second sub-system simultaneously on the first channel and the second channel.

A method for operating a critical industrial process implemented by a system that operates and assists with operation of the critical industrial process, said system comprising

• a first set of operator stations each comprising a graphical interface and each being configured to
• receive instructions from an operator via the graphical interface;
• display, at a current time and on request from the operator, first information from a subset of information, the subset of information being comprised in a set of information comprising a group of information for each acquisition time from among a plurality of acquisition times preceding the current time, each group of information comprising first information for operating the critical industrial process and second information for assisting with the operation of the critical industrial process;
• a second set of operator stations, each configured to display, at the current time and on request from the operator, the second information from the subset of information;
• a first sub-system that operates the critical industrial process working cyclically, a second sub-system that assists with the operation of the critical industrial process working in an event-driven manner, and a unidirectional separating device comprised in the first sub-system and in the second sub-system, comprising a pair of computing units, the first sub-system comprising
• an interface module configured to collect data from a plurality of programmable logic controllers each having a controller model, each item of data being associated with an acquisition time from the plurality of acquisition times, the interface module including at least one pair of computing units for each controller model,
• the computing units of the interface module working in asynchronous redundancy;
• a first processing module including a pair of computing units, the computing units of the first processing module working in active redundancy;
• a first module that manages the operator stations of the first set of operator stations, comprising one computing unit for each operator station in the first set of operator stations, each computing unit being configured to
• manage the graphical interface of the each operator station corresponding thereto;
• a first duplicate communication network having a first channel and second channel that are separate, comprising a first redundancy module distributed over each computing unit of the first sub-system,
• the second sub-system comprising
• a second processing module comprising a pair of computing units, the computing units of the second processing module working in active redundancy;
• a second module that manages the operator stations of the second set of operator stations, comprising one computing unit for each operator station in the second set of operator stations, each computing unit being configured to
• manage the graphical interface of the each operator station corresponding thereto;
• a second duplicate communication network having a first channel and second channel that are separate, comprising a second redundancy module distributed over each computing unit of the second sub-system;
• said method carried out for each cycle of a set of cycles and comprising:
• for said each computing unit of said each pair of computing units of the interface module,
• collecting each item of data that is received by each controller having a corresponding controller model, and
• eliminating each duplicate data that is received,
• each item of data being associated with an acquisition time preceding the current time;
• receiving, by said each computing unit of the processing module, said data that is collected by the interface module, sorting the data that is received as a function of their acquisition time, eliminating the each duplicate data that is received, computing the first information of the group of information corresponding thereto for said each acquisition time from the data that is sorted and corresponding thereto, and sending to each computing unit of the unidirectional separating device, each first information item that is computed;
• receiving, by said each computing unit of the first module that manages the operator stations of the first set of operator stations, each first information item that is computed, and sending to said each operator station in the first set of operator stations, each first information item that is received comprised in the subset of information that is requested by the operator;
• receiving, by said each computing unit of the second processing module, the data that is collected and the first information that is computed by the first sub-system, detecting the data and the first information modified since a previous cycle, eliminating any duplicate data and the first information received, and computing of the second information of the group of information for said each acquisition time, from the data that is detected and corresponding thereto and the first information;
• receiving, by said each computing unit of the second module that manages the operator stations of the second set of operator stations, each computed second information item, and sending to said each operator station in the second set of operator stations, each second information item that is received and comprised in the subset of information subset requested;
• displaying the first information of the subset of information requested by said each operator station of the first set of operator stations and of the second information of the subset of information requested by said each operator station of the second set of operator stations, at the current time;
• if the operator provides an instruction via the graphical interface of an operator station in the first set of operator stations, sending the instruction to the interface module;
• sending to at least one controller, by the interface module, one or more of at least one data dependent command received and the instruction provided by the operator;
• said receiving by said each computing unit of the first sub-system including an exchange of at least one message between the each computing unit and said at least one other computing unit of the first sub-system and including
• simultaneously sending on the first channel and the second channel of the first communication network, the at least one message by the at least one other computing unit to the first redundancy module;
• receiving by the first redundancy module, the at least one message that is sent;
• if the at least one message is received via the first channel and via the second channel, deleting by the first redundancy module the at least one message that is received via the second channel;
• modifying by the first redundancy module, the at least one message that is received by adding an acknowledgment request;
• simultaneously disseminating on the first channel and the second channel, the at least one message that is modified to the each computing unit by the first redundancy module;
• reception of the at least one message that is modified by the each computing unit and sending of an acknowledgment to the first redundancy module;
• said receiving by said each computing unit of the second sub-system comprising an exchange of at least one message between the each computing unit and at least one other computing unit of the second sub-system comprising
• simultaneously sending on the first channel and the second channel of the second communication network, the at least one message by the at least one other computing unit to the second redundancy module;
• receiving by the second redundancy module (1038), the message sent (2132);
• if the at least one message is received via the first channel and via the second channel, deleting by the second redundancy module the at least one message that is received via the second channel;
• modifying by the second redundancy module, the at least one message that is received by adding an acknowledgment request;
• simultaneously disseminating on the first channel and the second channel, the at least one message that is modified to the each computing unit by the second redundancy module;
• receiving the at least one message that is modified by the each computing unit and sending an acknowledgment to the second redundancy module.

A non-transitory computer program product comprising instructions that, when executed on a computer, lead the computer to implement a method for operating a critical industrial process implemented by a system that operates and assists with operation of the critical industrial process, said system comprising

• a first set of operator stations each comprising a graphical interface and each being configured to
• receive instructions from an operator via the graphical interface;
• display, at a current time and on request from the operator, first information from a subset of information, the subset of information being comprised in a set of information comprising a group of information for each acquisition time from among a plurality of acquisition times preceding the current time, each group of information comprising first information for operating the critical industrial process and second information for assisting with the operation of the critical industrial process;
• a second set of operator stations, each configured to display, at the current time and on request from the operator, the second information from the subset of information;
• a first sub-system that operates the critical industrial process working cyclically, a second sub-system that assists with the operation of the critical industrial process working in an event-driven manner, and a unidirectional separating device comprised in the first sub-system and in the second sub-system, comprising a pair of computing units, the first sub-system comprising
• an interface module configured to collect data from a plurality of programmable logic controllers each having a controller model, each item of data being associated with an acquisition time from the plurality of acquisition times, the interface module including at least one pair of computing units for each controller model,
• the computing units of the interface module working in asynchronous redundancy;
• a first processing module including a pair of computing units, the computing units of the first processing module working in active redundancy;
• a first module that manages the operator stations of the first set of operator stations, comprising one computing unit for each operator station in the first set of operator stations, each computing unit being configured to
• manage the graphical interface of the each operator station corresponding thereto;
• a first duplicate communication network having a first channel and second channel that are separate, comprising a first redundancy module distributed over each computing unit of the first sub-system,
• the second sub-system comprising
• a second processing module comprising a pair of computing units, the computing units of the second processing module working in active redundancy;
• a second module that manages the operator stations of the second set of operator stations, comprising one computing unit for each operator station in the second set of operator stations, each computing unit being configured to
• manage the graphical interface of the each operator station corresponding thereto;
• a second duplicate communication network having a first channel and second channel that are separate, comprising a second redundancy module distributed over each computing unit of the second sub-system;
• said method carried out for each cycle of a set of cycles and comprising:
• for said each computing unit of said each pair of computing units of the interface module,
• collecting each item of data that is received by each controller having a corresponding controller model, and
• eliminating each duplicate data that is received,
• each item of data being associated with an acquisition time preceding the current time;
• receiving, by said each computing unit of the processing module, said data that is collected by the interface module, sorting the data that is received as a function of their acquisition time, eliminating the each duplicate data that is received, computing the first information of the group of information corresponding thereto for said each acquisition time from the data that is sorted and corresponding thereto, and sending to each computing unit of the unidirectional separating device, each first information item that is computed;
• receiving, by said each computing unit of the first module that manages the operator stations of the first set of operator stations, each first information item that is computed, and sending to said each operator station in the first set of operator stations, each first information item that is received comprised in the subset of information that is requested by the operator;
• receiving, by said each computing unit of the second processing module, the data that is collected and the first information that is computed by the first sub-system, detecting the data and the first information modified since a previous cycle, eliminating any duplicate data and the first information received, and computing of the second information of the group of information for said each acquisition time, from the data that is detected and corresponding thereto and the first information;
• receiving, by said each computing unit of the second module that manages the operator stations of the second set of operator stations, each computed second information item, and sending to said each operator station in the second set of operator stations, each second information item that is received and comprised in the subset of information subset requested;
• displaying the first information of the subset of information requested by said each operator station of the first set of operator stations and of the second information of the subset of information requested by said each operator station of the second set of operator stations, at the current time;
• if the operator provides an instruction via the graphical interface of an operator station in the first set of operator stations, sending the instruction to the interface module;
• sending to at least one controller, by the interface module, one or more of at least one data dependent command received and the instruction provided by the operator;
• said receiving by said each computing unit of the first sub-system including an exchange of at least one message between the each computing unit and said at least one other computing unit of the first sub-system and including
• simultaneously sending on the first channel and the second channel of the first communication network, the at least one message by the at least one other computing unit to the first redundancy module;
• receiving by the first redundancy module, the at least one message that is sent;
• if the at least one message is received via the first channel and via the second channel, deleting by the first redundancy module the at least one message that is received via the second channel;
• modifying by the first redundancy module, the at least one message that is received by adding an acknowledgment request;
• simultaneously disseminating on the first channel and the second channel, the at least one message that is modified to the each computing unit by the first redundancy module;
• reception of the at least one message that is modified by the each computing unit and sending of an acknowledgment to the first redundancy module;
• said receiving by said each computing unit of the second sub-system comprising an exchange of at least one message between the each computing unit and at least one other computing unit of the second sub-system comprising
• simultaneously sending on the first channel and the second channel of the second communication network, the at least one message by the at least one other computing unit to the second redundancy module;
• receiving by the second redundancy module (1038), the message sent (2132);
• if the at least one message is received via the first channel and via the second channel, deleting by the second redundancy module the at least one message that is received via the second channel;
• modifying by the second redundancy module, the at least one message that is received by adding an acknowledgment request;
• simultaneously disseminating on the first channel and the second channel, the at least one message that is modified to the each computing unit by the second redundancy module;
• receiving the at least one message that is modified by the each computing unit and sending an acknowledgment to the second redundancy module.