thinkallied.com
The eXact I/O you need
eXactly where you need it!
TM
LEVEL MEASUREMENT
These are characteristics that personify American know-
how and craftsmanship. Orion Instruments, born on the
legendary Gulf Coast, embodies the spirit which has
made American products synonymous with quality and
performance. Like you, at the end of the day, we don’t
mind washing a hard day’s work off our hands. Let us
show you what Orion quality is all about.
Get Tough.
www.orioninstruments.com
—
System 800xA Select I/O
and xStream Engineering
Configure. Check. Connect.
60
COVER STORY
Features
71
FINAL CONTROL ELEMENTS
74
SOFTWARE SYSTEMS
CONTROL (ISSN 1049-5541) is published monthly by PUTMAN MEDIA COMPANY (also publishers of CONTROL DESIGN, CHEMICAL PROCESSING, FOOD PROCESSING, PHARMACEUTICAL MANUFACTURING, PLANT SERVICES and
SMART INDUSTRY), 1501 E. Woodfield Rd., Ste. 400N, Schaumburg, IL 60173. (Phone 630/467-1300; Fax 630/467-1124.) Address all correspondence to Editorial and Executive Offices, same address. Periodicals Postage
Paid at Schaumburg, IL, and at additional mailing offices. Printed in the United States. © Putman Media 2017. All rights reserved. The contents of this publication may not be reproduced in whole or part without
consent of the copyright owner. Postmaster: Please send change of address to Putman Media, PO Box 1888, Cedar Rapids IA 52406-1888; 1-800-553-8878 ext. 5020. SUBSCRIPTIONS: Qualified-reader subscriptions are
accepted from Operating Management in the control industry at no charge. To apply for a free subscription, email putman@stamats.com. To non-qualified subscribers in the Unites States and its possessions, subscriptions
are $96.00 per year. Single copies are $15. International subscriptions are accepted at $200 (Airmail only.) CONTROL assumes no responsibility for validity of claims in items reported. Canada Post International Publications
Mail Product Sales Agreement No. 40028661. Canadian Mail Distributor Information: Frontier/BWI,PO Box 1051,Fort Erie,Ontario, Canada, L2A 5N8.
Imagine your devices had their own pulse. They would tell you how healthy they were and what you could do to
improve the performance of your process. Heartbeat Technology™ breathes life into your devices. It provides
you with diagnostics, verifies performance and monitors process data to support optimization and predictive
maintenance strategies. Our engineers listen carefully to you and understand your Mindset. It is their job to find
the best fitting products with Heartbeat Technology to deliver increased operational availability for your plant.
Departments
39 EDITOR’S PAGE 77 ASK THE EXPERTS
Running on fumes Orifice flowmeter straight runs
Sometimes a level instrument is only Requirements vary widely and depend
as smart as its calibrator. on expectations as well as piping.
Food & Kindred Products ........................................ 10,106 Paper & Allied Products ............................................ 2,856 Explore the new pressure devices!
Chemicals & Allied Products ..................................... 8,919 Pharmaceuticals ....................................................... 3,945 www.e-direct.endress.com/pressure
Systems Integrators & Engineering Design Firms ....... 8,681 Rubber & Miscellaneous Plastic Products.................. 3,762
Primary Metal Industries ........................................... 4,657 Stone, Clay, Glass & Concrete Products ..................... 1,686
Electric, Gas & Sanitary Services ............................... 3,481 Textile Mill Products ..................................................... 802
Petroleum Refining & Related Industries ................... 4,016 Tobacco Products ........................................................ 110
thinkallied.com •1.800.433.5700
AN ADVERTISING SUPPLEMENT TO NOVEMBER 2017
Worth its
weight
Registration assures performance
of HART, FOUNDATION Fieldbus
and FDI technologies
WELCOME LE T TER
Rising value
OUR ROLE AT FieldComm Group has expanded since combining the Fieldbus
Foundation and HART Communication Foundation. With the addition of FDI
technology, our strategic importance in “simplifying the complexity” of process
automation systems grows. As the integration technology of choice for many
protocols, it is enabling users and suppliers to focus less on the underlying protocol
and more on the data.
This is not to say protocols are less relevant, in fact quite the contrary. In talking
to users, I hear one common theme, that regardless of IIoT initiatives, future archi-
tectures or newly available protocols, no one is “ripping out” field devices. These field
devices are delivering data through robust protocols trusted by users to meet their
performance, interoperability and security needs. In fact, it becomes increasingly clear Ted Masters
that the IIoT will require many protocols. President and CEO
So what does the future plant and enterprise look like at the field device level in FieldComm Group
the next 10 years? I think it is fair to say we will see a combination of HART, Foun-
dation Fieldbus, HART-IP, WirelessHART and many others. Physical layers will
include 4-20 mA, Ethernet, wireless and maybe more. The key to IIoT now becomes
how we integrate these various protocols and what we do with the data they provide.
To develop standards, we use a collaborative working model that leverages
hundreds of volunteer subject matter experts from more than 340 member com-
panies. We also partner with organizations like the OPC Foundation to create
“information models” that help extend field device information from the OT
world to IT side where many users are less familiar with the origin and meaning
of process data. FDI is one such standard that helps “simplify the complexity.”
Use cases such as asset management, analytics, monitoring and diagnostic sup-
port across enterprises all require a common model to compare like information,
regardless of protocol. The protocol is how it gets there, however, the use cases
only care about the information!
Our cover article focuses on product registration and conformance services.
As devices, hosts, and architectures become more complex, assured adherence to
standards at the protocol and information model level is a requirement for maxi-
mizing captured value. In the past year, our verification team has completed new
or updated registrations for nearly 200 products. Trust me, registration is worth FieldComm Group™,
its weight in gold! FOUNDATION™ Fieldbus,
By continuing to build on the “gold standard” of our protocols, bridging them to HART-IP™, FDI™ are
the IoT and ensuring they conform to these standards, the industry can seize this trademarks, and HART®,
data revolution to achieve improved performance in their operations and enterprises. WirelessHART®, ROM®
FieldComm Group will be there to help each unique user capture the value of this and SIF® are registered
revolution by meeting them where they are today and getting them there with many trademarks of the
solutions from our technologies and from our members. ● FieldComm Group.
FƵƺƴƪƧƹƯƵƴ Fieldbus and HART provide valu- tion, as well as during commissioning and startup, will
able information and powerful communications, but be reduced.”
these capabilities can be incomplete and integration As a field device and solutions provider,
may be difficult if the software and hardware are not Endress+Hauser benefits from testing because it
designed and engineered to conform with the specifi- ensures proper integration of field devices and solu-
cations. The FieldComm Group helps users avoid tions in different system environments and indus-
problems by offering assistance to suppliers in the tries. “Based on FieldComm Group compatibility,
form of consultation and testing services. Products Endress+Hauser makes further tests with the field
that pass the tests conform to the specifications, are device in our own test lab with all major systems to
registered and may display the “Registered” logo as- ensure that additional device-specific benefits are
sociated with its implemented technology, which as- available for the users in their environment,” Klaus-
sures the specified functionality and interoperability. mann adds.
“Testing and registration is very important,” says In short, says Scott Saunders, president and CEO,
Sean Vincent, director, technical services, FieldComm Moore Industries, “It’s another layer we have to go
Group. “It provides third-party verification of confor- through, but if I put myself in the customers’ shoes,
mance to standards, which results in better products and I always do, I want to know that device in service
that perform reliably and predictably for the end user.” will work with another vendor’s device.” The net result
This recognition is important both to suppliers and is a user that can choose the best-in-class product for
users. “Third-party registration provides peace of mind his/her application.
to the specifying engineer—the manufacturer says it’s
good, and the FieldComm Group says it meets the
certification requirements,” says Eric Wible, direc-
tor of engineering, Fluid Components International
(FCI).
“For suppliers, the customers will not spec you if
you don’t have it,” Wible says. “For the user, if there
is any issue in bringing the instrument up on startup,
you’ll get the full attention of the FieldComm Group
as well as the manufacturer.”
Device manufacturers agree that registration
benefits everyone. “Users benefit from such tests
because they know that field devices provided by
Flawless FOUNDATION
Endress+Hauser will properly work in their sys-
tem environment,” says Lukas Klausmann, senior Test cases are written in software, and automated testing tools
marketing manager, Industrial Communication, exercise the permutations. Here, a FOUNDATION Fieldbus device is un-
Endress+Hauser “Furthermore, risks in plant opera- dergoing a physical layer review.
:KHQLWFRPHVWR+$57GDWDWKH66;667)XQFWLRQDO6DIHW\
,VRODWRUVDQG6SOLWWHUVDUHJDPHFKDQJHUVE\SDVVLQJRQ
YDOXDEOH+$57GDWDIURP\RXUVDIHW\ORRSVWR\RXUEDVLF
SURFHVVFRQWUROV\VWHPRUPRQLWRULQJV\VWHP
8QOLNHRWKHULVRODWRUVWKH66;DQG667DOORZFULWLFDO+$57
GLDJQRVWLFSURFHVVDQGFDOLEUDWLRQLQIRUPDWLRQWRSDVVWKURXJK
IURP¿HOGWUDQVPLWWHUVWR+$57HQDEOHGKRVWV\VWHPVDQGYLFH
YHUVD7KH\DOVRVHUYHDV³EORFNHUV´WRSURWHFWDQGLVRODWH\RXU
6DIHW\,QVWUXPHQWHG6\VWHPIURPLQDGYHUWHQWGLVFRQQHFWLRQV
RUIDLOXUHVLQ\RXUDX[LOLDU\FRQWURORUPRQLWRULQJV\VWHP
6HL]HWKHRSSRUWXQLW\WRDFFHVVYDOXDEOH+$57GDWDIRU
\RXU6DIHW\,QVWUXPHQWHG6\VWHPVZLWKWKH66;6676DIHW\
,VRODWRUVDQG6SOLWWHUV
&DOO8VDW
'HPDQG0RRUH5HOLDELOLW\
9LVLWRXUZHEVLWHDQGOHDUQPRUHDERXWRXU66;DQG667
+$57)XQFWLRQDO6DIHW\6HULHV,VRODWRUVDQG6SOLWWHU
ZZZPLLQHWFRPVV[VVW
REGISTRATION
TESTING IS A PROCESS, NOT AN EVENT says. “This makes sure the devices are robust.”
Before a hardware or software product is registered, it is The registration process starts long before the test
tested to ensure that it not only communicates the speci- date. “Most projects start with the specifications. The
fied parameters as expected, but that it does so in many vendor’s development team gets training and serves as
different possible scenarios and under adverse conditions the primary developers, but others may help,” Vincent
often found in industrial networking applications. says. “Questions are answered by FieldComm Group
There are required capabilities, such as read/write, and the vendors’ trained experts.”
and optional capabilities for various devices. “The As they develop the product, vendors can use quality
specifications tell you many things about possibilities, assurance (QA) test tools to be sure the performance
and the tests verify single or multiple implementations is there early in the process so they can raise issues and
of those possibilities,” says Vincent. resolve questions. “Being engaged with the tools and
Test cases are written in software, and automated tests along the way really shows at the end test,” Vin-
testing tools exercise the permutations. “Along with cent says. “Development may take months or years, so
the positive cases, where we make sure it works, we we view it as a long-term partnership. There are many
test many more negative cases using erroneous infor- options, and we expect questions along the way.
mation, and simulate mistakes and network malfunc- “We try to make everything clear so people pass
tions to make sure the device tolerates and recovers the first time. Discrepancies are caught early during
from error conditions, and keeps working,” Vincent the test process.”
Backed by Emerson’s proven experience in Smart Wireless field instrumentation, the Rosemount 708 will enable you to prevent serious safety incidents
and minimize production losses without running all over the plant. Talk to Emerson. We’re the experts in wireless so you don’t have to be.
rosemount.com/stopsteamloss
The Emerson logo is a trademark and a service mark off Emerson Electric Co. © 2017 Emerson Electric Co.
COOPERATION ASSURES SUCCESS The process instrument manufacturer must fully understand the
“The process of certification testing is important WHVWSURWRFROWKHVSHFLͤFDWLRQDQGKRZLWDSSOLHVWRWKHLULQVWUX-
because suppliers can verify whether the device meets ment. Here, a HART instrument is being tested for registration.
7RJHWWKHPRVWIURP\RXUÀHOGEXV\RXKDYHWRVSHDNWR(QGUHVV+DXVHU,QDGGLWLRQWRRXUWRSSURGXFWV
ZHFDQDOVRSURYLGHWKHH[SHUWLVHLQÀHOGQHWZRUNHQJLQHHULQJDQGDVVHWPDQDJHPHQWWKDWZLOOPDNH\RXU
LQYHVWPHQWDVXFFHVV,PSURYHGSODQWSHUIRUPDQFHOHVVKDVVOHDQGULVN²QRWKLQJSX]]OLQJDERXWWKDW
ZZZDXWRPDWLRQHQGUHVVFRPÀHOGEXV
Endress+Hauser
Instruments International AG Phone +41 61 715 81 00
Kaegenstrasse 2 Fax +41 61 715 25 00
4153 Reinach info@ii.endress.com
Switzerland www.endress.com
CERTIFIED TRAINING
Information reigns
The process automation cloud relies on FieldComm Group technologies
IT SEEMS THAT everyone is talking about the fourth tries, “Our job is to provide customers with data and
industrial revolution—Industrie 4.0, the Industrial the capability of smart instruments to support predic-
Internet of Things (IIoT) and connecting the plant tive modeling, asset management and reduced calibra-
floor to the cloud. As a result, we’re seeing a fog of tion.” This is where you find Foundation Fieldbus,
alternative technologies and standards competing for HART and FDI technologies.
the attention of engineers, manufacturers and vendors,
and rightfully so, as the ability to gather and analyze SHARED DATA, LEVERAGED RESOURCES
information is key to driving increased value in pro- For remote applications, “It’s very easy to add cloud
cess manufacturing. connectivity for visibility into device health, to be sure
But regardless of where the data ends up, much of everything is working,” says David Lincoln, digital
it must come from the plant floor and at the interface leader, measurement and analytics business unit, ABB.
between the process and the IT networks. There, says “In the control system environment, a local cloud is
Scott Saunders, president and CEO, Moore Indus- useful for data gathering, analysis and local trending.
Corporate
Production
Industrial Plant
Delivery
Field Devices
For example, tracking how many times a valve opens Fieldbus and HART portable communicators are now
and closes is a low-cost addition. Then you can share connecting to the cloud to save device configurations,
valve operating data with one valve expert across the share configuration data, perform automatic backups,
organization, or with a vendor service technician sit- and make the latest data and configurations equally as
ting miles away, through the cloud.” available remotely as they are locally. Saving trend data
“We make the data available, and the customer to the cloud allows users to troubleshoot device issues
decides how to use it,” Saunders says. “Most use an with colleagues anywhere in the world, and gives
intranet for IIoT, not an immediate jump to the cloud global access to process performance data.
over the Internet, due to security concerns. That’s their “Our DevCom2000 Smart Device Communica-
responsibility, they can decide that technology. Our tor and our DevCom Apps all support HART-IP.
next two or three products will have Ethernet running This allows access to all HART devices in the net-
Modbus TCP, Ethernet IP or HART-IP. We make IP work through an Ethernet connection to the Wire-
available to them, they decide how high they want to lessHART gateway. The user can download HART
go. OPC UA? XML? It’s up to them.” device configurations and make parameter changes,”
For field instruments outside a control system, says Jeff Dobos, president, ProComSol. “Now we’re
“The cloud provides the connection and a technician adding functionality for online use. You can view the
can analyze the entire fleet,” says Neil Shah, product entire network hierarchy on one screen showing mea-
manager, control systems technologies, ABB. surement values, device status, and record and store
Within a control system, with no additional con- the data locally or in the cloud.”
nectivity or infrastructure, “Data may be locked into “Our software also can save trend data—for any
the system. We need to convert it to get it out to the period you want—to the cloud to share with colleagues
experts for analysis,” Shah says. “For that, we can use all over the world, ” Dobos says. “You can do it from the
device management tools.” FieldComm Group’s FDI office or home, you don’t need to go into the plant.”
technology is made for the job (p. S-13). Shah says,
“FDI is open, and enables us to draw on data not just OPC UA DELIVERS DATA EVERYWHERE
from ABB devices, not just from ones that are not For a significant group of suppliers, the default solu-
already connected, and not just from a single source.” tion for connecting disparate devices, packages and
Capabilities found traditionally in Foundation systems is OPC UA. “The big thing right now is
OPC. It’s a big, open platform for Ethernet and the
Internet,” says Saunders.
NEW SMART ESD* DEVICE FOR As part of a continuing partnership between the
SAFETY INSTRUMENTED SYSTEM
OPC Foundation and FieldComm Group, the OPC
Azbil Corporation’s Smart ESD Device 700
UA information model is a part of the framework
series (700SIS) is now available. Devices in
this series act as upon which FDI is built. “This allows complex infor-
the interface for an mation rendered in device package to be seamlessly
emergency shutdown
valve in a safety
communicated to disparate applications and devices,”
instrumented system. says Tom Burke, president and executive director,
They’re compliant OPC Foundation. It allows a generic application to
with the IEC61508
international standard
connect to the corresponding device or host applica-
for functional safety. tion and consume data without any knowledge of the
The 700SIS has been certified for applications underlying protocol of the device. Much like plug and
that require SIL (Safety Integrity Level) 3 ac-
cording to IEC 61508. play in the consumer electronics business.
*ESD: Emergency Shut Down “End users consistently tell us that they have no in-
Azbil
terest in replacing their field devices,” says Ted Masters,
www.azbil.com/products/bi/ CEO of FieldComm group. This is hardly surprising
iap/products/hfbs/index.html
given the large installed based (40 million or more
units) and long lifecycle of field Instead of having many pro- lows my group to simply support
instrumentation. Technologies like tocols to provide and support, OPC UA.
FDI and OPC UA allow for cre- it’s just one OPC UA interface. “At the NAMUR conference
ation of “digital twins” for the field “It takes less than a week to [in November], they’ll have a joint
instrumentation that can then be become compatible with a huge demo using OPC UA to connect
mapped into a variety of application number of devices,” Barnstedt FieldComm Group technologies
formats. Masters continues, “When says. “FieldComm Group offers to Microsoft Azure, showing how
we give management presentations, an entire ecosystem of devices you can quickly get insights into
our computers probably have three compatible with FDI technology. machine data from the cloud with
or four different ways of connecting It’s protocol independent and al- a few clicks.” ●
to a projector. Most users don’t care
if VGA, HDMI, DVI, or wireless
connections are used, as long as the
image on the computer is render-
ing properly by the projector. It’s
DĂŝŶƚĞŶĂŶĐĞ͕^ŝŵƉůŝĨŝĞĚ͘
the same in process automation.
Many, slightly different, protocols
will continue to operate in plants
D'dŽƚĂů/ŶƐŝŐŚƚ
worldwide, but the information
dŚĞŶĞǁDĂŐŶĞƚŝĐ&ůŽǁŵĞƚĞƌ^ĞƌŝĞƐĨƌŽŵzŽŬŽŐĂǁĂ
delivered by those protocols must
D'd/ĂĐĐƵƌĂƚĞůLJŵĞĂƐƵƌĞƐƉƌŽĐĞƐƐĨůŽǁǁŚŝůĞŝŶĐŽƌƉŽƌĂƚŝŶŐ
be standardized for consumption by ĞƋƵŝƉŵĞŶƚŚĞĂůƚŚĂŶĚƉƌŽĐĞƐƐĚŝĂŐŶŽƐƚŝĐƐ͕ƐƚƌĞŶŐƚŚĞŶŝŶŐŵŽŶŝƚŽƌŝŶŐ͕
all process applications. This is the ĂŶĚĐŽŶƚƌŝďƵƚŝŶŐƚŽƌĞĚƵĐƚŝŽŶŽĨŵĂŝŶƚĞŶĂŶĐĞĂŶĚŽƉĞƌĂƚŝŽŶĂůĞdžƉĞŶƐĞ͘
ultimate goal of the FDI and OPC
UA information models.”
ٹsĞƌŝĨŝĐĂƚŝŽŶĨƵŶĐƚŝŽŶĂůŝƚLJ
CLOUD CONNECTS VIA OPC 嵣ƵŝůƚͲŝŶĐŽŵƉƌĞŚĞŶƐŝǀĞŚĞĂůƚŚ
On the cloud side, evidence that ĐŚĞĐŬ
OPC UA is the key to field-to-
ٹDŽŶŝƚŽƌŝŶŐƉƌŽĐĞƐƐĐŽŶĚŝƚŝŽŶƐ
cloud connectivity comes from Mi- 嵣sŝƐƵĂůŝnjĞƚŚĞĞĨĨĞĐƚƐŽĨĨůŽǁŶŽŝƐĞ
crosoft. “We’ve been investing quite ŽŶƚŚĞƉƌŽĐĞƐƐ ǀŝĂƚƌĞŶĚŐƌĂƉŚŽŶ
heavily in a platform for Industrie ƚŚĞĚŝƐƉůĂLJ
4.0, Made in China 2020 and the
ٹZĞĚƵĐĞdŽƚĂůŽƐƚŽĨKǁŶĞƌƐŚŝƉ
IIoT,” says Erich Barnstedt, soft-
嵣ŽŶĚŝƚŝŽŶͲďĂƐĞĚŵĂŝŶƚĞŶĂŶĐĞ
ware engineering lead, Microsoft. ƌĞĚƵĐĞƐƵŶŶĞĐĞƐƐĂƌLJĚŽǁŶƚŝŵĞ
“My team owns the industrial verti- ĂŶĚĐŽƐƚ
cal for Azure IoT, and OPC UA is
the only open industrial protocol we
support to bring data to the cloud
and all its services. All the back-end
services understand OPC UA. And
OPC UA is open-source, which is a
big change. Supporting open-source
zK<K't>dZ/KZWKZd/KE
is a winning strategy.
'ůŽďĂů,ĞĂĚƋƵĂƌƚĞƌƐ
“Everything is gravitating to ϵͲϯϮ͕EĂŬĂĐŚŽ ϮͲĐŚŽŵĞ͕DƵƐĂƐŚŝŶŽͲƐŚŝ͕
OPC UA, and we want everyone dŽŬLJŽϭϴϬͲϴϳϱϬ͕:WE ǁǁǁ͘ĂĚŵĂŐƚŝ͘ĐŽŵ
to support it.”
ŽͲŝŶŶŽǀĂƚŝŶŐƚŽŵŽƌƌŽǁŝƐĂƌĞŐŝƐƚĞƌĞĚƚƌĂĚĞŵĂƌŬŽĨzŽŬŽŐĂǁĂůĞĐƚƌŝĐŽƌƉŽƌĂƚŝŽŶ͘
CONTROL PROTOCOL SURVEY
Users Weigh In
This year’s annual protocol survey was completed by 133 members of Control’s primarily North American subscriber list
representing the process industries including Food, Chemicals, Pharmaceuticals, Primary metals, Petroleum, Utilities, etc.
2TQƒDWU2#
#PCNQI1PN[
Ethernet/IP Dealing with device drivers and revisions
HART
FƵƺƴƪƧƹƯƵƴ Cost and installation of interface devices
2016
2TQƒDWU2#
#PCNQI1PN[ 0GGFRTQƒEKGPE[KPOWNVKRNGRTQVQEQNU
Ethernet/IP
Access/availability of tools/privileges
HART
FƵƺƴƪƧƹƯƵƴ
2015
Other 2017
2TQƒDWU2#
2016
#PCNQI1PN[
0% 10% 20% 30% 40% 50% 60% 0% 10% 20% 30% 40% 50% 60% 70% 80%
THE FIELD DEVICE Integration (FDI) specification erson, Siemens and others begin to arrive, suppliers
and ecosystem isn’t resting on its laurels. want to use the FDI information model and OPC
“FDI packages and hosts help bring field device UA to connect to other communication protocols,
information to control and upper-management get data to the enterprise level via Microsoft Azure,
systems, so their key is providing bet- and participate in the Industrial Internet of Things
ter interoperability, saving time and (IIoT) and Industrie 4.0.”
reducing headaches for users,” says FDI was conceived to bring previously hard-to-
Achim Laubenstein, integration reach data into uniformly reported and displayed for-
technology director at the Field- mats, to help improve decisions and increase profits
Comm Group. “However, as FDI for process automation companies. It merges the ad-
packages and hosts from ABB, Em- vantages of an FDT Device Type Manager (DTM)
and Electronic Device Description (EDD) in one,
scalable software device package to help manage the
complete lifecycles of basic and sophisticated com-
ponents, including commissioning, configuration,
diagnostics, calibration, maintenance and other
1 functions.
FDI Device Package
per protocol “The clear benefit of FDI is its simplified
drivers for different host systems,” says Michael
Bückel, product manager at Endress+Hauser’s
Flowtec division. “Where we used to have many
drivers for many different host systems in place,
FDI shrinks it to just one package that’s needed to
get a device up and running or for operations and
maintenance.”
In addition to simplifying the device management
process, FDI will also enable:
• Open access to cloud-based computing services via
jointly developed OPC UA information models,
Before and after
• Offline configuration,
Before FDI, multiple integration products had to be implemented and • A device package repository,
maintained by the device manufacturers, supportive documents had • Security, and,
to be searched and collected by the users, and several integration • Communication servers for automation protocols.
standards had to be supported by the system vendors. FDI-registered These initiatives will enable FDI (published as the
devices have one single FDI Device Package consisting of all the host IEC 62769 standard) to fulfill its mission statement:
needs to optimize the capabilities of each device. ONE device – ONE package – ALL tools.
“The FDI standardization team did an excel- Shah reports there are presently three host systems
lent job of writing the FDI specification—fully that support FDI, including:
supported by the FDI Package IDE [Integrated • Field Information Manager (FIM) from ABB;
Development Environment]—and it’s a huge • Instrument Inspector from Emerson Automation
difference from the past,” says Neil Shah, global Solutions, and
product manager for fieldbus and asset optimization • Process Device Manager (PDM) from Siemens
in ABB’s Industrial Automation division. “Where “They all have the same purpose of integrating
users previously had to tweak device drivers on each field devices into systems, and also allow configura-
system and modify EDDs to comply with each tion, commissioning, diagnosis and parameterization,”
supplier’s host, FDI makes EDDs independent of explained Shah.
individual supplier protocols, and allows all instru- Despite its potential advantages, some suppliers
ments to work with any host.” are concerned that FDI means they’ll have to develop
software for it in addition to the EDDs and DTMs
they already write for their field devices, which con-
tinue to be deployed in systems worldwide.
“FDI packages and hosts are at the beginning
of their implementation cycle. They will eventually
replace EDD and DTM,” adds Laubenstein. “We’ve
already held several plugfests where different suppliers
can compare and work hands-on with FDI pack-
ages and hosts, and we’re going to have more. We did
confirm at the plugfests that FDI can achieve much
better interoperability, and so our advice is to try FDI
with OPC UA server because it’s ready for IIoT and
Industrie 4.0.”
OFFLINE CONFIGURATION
One of the most sought-after capabilities in process
control has been uncoupling configuration and other
tasks from the components themselves, which allows
this programming to be done remotely and completed
before equipment is installed on plant floors.
“Offline configuration and user interface plug-ins
(UIP) are so important because they let us create
standardized configuration files, and download them
to many devices, mostly when commissioning new
plants,” says Dan Ryan, engineering program manager
for Plantweb at Emerson and chair of the FieldComm
OPC UA is the key to the IIoT
Group Integration Working Group. “FDI lets us take
An FDI Host implementing the Information Model Facet exposes a device packages and work up configurations without
standardized OPC UA Information Model containing the complete the spreadsheets and manual processes we used to use.
device data, accessible via FDI Clients and standard OPC UA Cli- That’s a big savings in labor and time.”
ents/Servers. As part of the OPC UA infrastructure, the data can Ryan explains that UIPs are equally useful because
be used by Asset Management Systems or published into IIoT plat- they enable enhanced interfaces for troubleshooting.
forms and processors. UIPs are an optional part of an FDI device package. For
Predictive and
RTQCEVKXGQPVJG2CEKƒE
6KHOO˸VKXJH3UHOXGH/1*YHVVHOLVWKḨUVWRFHDQJRLQJ3ODQWRIWKH<HDU
Source: Shell
THE LEGENDARY BOY Scout motto is “be prepared,” facilities to perform their advanced diagnostics, intel-
but even they would need to play serious catch-up to ligent operations and predictive maintenance, and
equal all the design, setup, configuration, commission- achieve their lifecycle benefits.
ing, testing, smart instrumentation and predictive/ “FieldComm Group technologies are used exten-
proactive maintenance integrated into Royal Dutch sively in every phase of the Shell Prelude FLNG proj-
Shell’s Prelude, the world’s largest floating liquid natu- ect, and form the backbone of the intelligent predic-
ral gas (FLNG) production facility. In fact, though tive maintenance system,” says Kyle Dickson, control
configuration and maintenance don’t normally get and automation engineer for Shell Prelude FLNG.
as much glory as operational performance, Prelude’s “The use of device templates is delivering excellent
testing and evaluation of its processes have been so conformity and quality assurance throughout the com-
extensive that it’s also earned the FieldComm Group’s missioning process. This has enabled a small team to
Plant of the Year Award for 2016. achieve impressive loop check rates whilst maintaining
Having recently completed its long sail from South exceptionally high levels of quality assurance. Once
Korea to the Timor Sea off Australia’s northwest coast, commissioned, equipment and unit modules have used
Prelude is presently being stationed 200-km from the the extensive diagnostics and alerts provided by both
mainland. Once its connections to the local gas wells HART and Foundation Fieldbus technologies to
are established and final implementation is completed, great effect, specifically avoiding numerous plant trips
it’s scheduled to begin regular operations in 2018. The and enabling unprecedented levels of remote support
488- x 71-m vessel’s 14 production facilities, rising to and deep-level diagnostics.”
about eight stories above the main deck and chock- Rong Gul, senior automation engineer and subject
full of FieldComm Group networking and technolo- matter expert (SME) for smart instrumentation and
gies, will extract and process for transport about 3.6 instrument asset management with Shell Global Solu-
million tonnes per year (Mtpa) of liquefied natural gas tions, reports that Prelude’s process applications employ:
(LNG), 1.3 Mtpa of condensate and 0.4 Mtpa of liq- • More than 8,000 Foundation Fieldbus devices,
uefied propane gas (LPG) during its 25-year lifespan. including 2,500 valve positioners, located on all
control and monitoring devices, and connected
FIELDCOMM ON DECK only to the DCS;
Beginning with Prelude’s initial designs and continu- • More than 4,500 HART devices connected to the
ing through to its construction and upcoming opera- DCS and PLCs via HART multiplexers, and used
tions, Shell’s engineers report that FieldComm Group predominantly on devices connected to safety instru-
technologies are essential in enabling the production mented systems (SIS) and fire and gas (F&G) systems;
• ValveLink and FDT/DTM on all complex instru- specific parameters that enable diagnostic features,
ments like guided wave radar (GWR) and valve device options or other functions. For example, pres-
positioners; and sure, Coriolis or valve positioning devices can have
• WirelessHART on certain applications. hundreds of parameters, so parameter settings can be
“In a nutshell, proactive maintenance was embed- stored in corporate or onsite template files, depending
ded from Day 1 on this project, rather than adding it on individual device types or how and where they’re
as a work process on running facilities,” explains Gul. applied. These parameters in templates allow users to:
“Factory acceptance test (FAT) preparation and test- • Optimize diagnostics;
ing, training, templating, selection of smart instru- • Select features and options;
mentation, rigid work processes, and a management • Ensure error-free downloads to devices;
and maintenance organization firmly supporting the • Identify application and commissioning parameters;
technology are mandatory to make proactive mainte- • Apply consistent work practices at sites to utilize
nance succeed.” smart instrument data; and
• Eliminate error messages and unnecessary trouble-
TEMPLATES ENABLE “FIX BEFORE FAIL” shooting during commissioning.
One of the most important tools used to prepare Consequently, these templates streamline commis-
Prelude’s production facilities for consistent, optimal sioning because they can be used to apply standard
operations are default, commissioning or application- configurations to hundreds of Foundation Fieldbus
are crucial to enabling Prelude’s proactive maintenance challenging. Thanks to using templates for its param-
schedule. Templates for all devices were configured eters, Prelude’s staff and contractors achieved:
during its FAT (Factory Acceptance Test) in Singa- • Total time savings of 80% for device commis-
pore, and Shell Global Solutions worked with Emer- sioning and loop checking across all devices that
son Automation Solutions to develop required asset applied user configuration via templates and test
management functions. “As a result, Foundation devices using full-loop check procedure during
Fieldbus devices can be configured and loop tested six FAT—not just commissioning devices in the asset
times faster compared to traditional 4-20mA HART management system;
devices,” says Gul, who provides training onsite to • Time savings for the valve positioner loop check
make sure Prelude’s operators have sufficient expertise procedure was more than 80% for the full loop test;
in using the appropriate tools to diagnose and deci- • Tested all device types able to be tested in the FAT
pher alerts and other information. in less than three days, compared to previous test
using traditional methods, which took more than
COMMISSIONING AND LOOP CHECK SAVINGS two days to test just three device types; and
At the peak of its recent commissioning efforts, Dick- • Human error during FAT was identified quickly
son reports that Prelude’s staff was performing more with reporting tool allowing for correction on the
than 500 loop checks per week, and checking multiple spot, whereas previously it was a tedious exercise
streams of complex functions. The vessel’s utilities to find a mistake with dozens of parameters and
plant was also running 24/7, which made maintenance multiple screens.
EU office: +47 22131910, US office: +1 (512) 794 1011 Fieldbus International AS, Ullern Alle 28, N-0381, Oslo Norway, www.fint.no
BBFFP
YOUR PATHWAY TO THE IIOT SENSE AND UNDERSTAND VIBRATION
Digital and optimized
for process control, the
HART PCH420V vibra-
tion monitoring sen-
sor provides users with
valuable benefits. Simple
connection to existing
plant infrastructure is a
key reason plants need to
use the PCH420V vibra-
tion sensor. Important
features include HART
7.0-compliant, three con-
figurable bands, remote
field-configurable scale
and frequency range,
hazardous location ap-
proval and multiple con-
nector choices.
FDI - THE BETTER WAY OF FIELD DEVICE Put the HART PCH420V
INTEGRATION to work in your plant and
FDI unifies device drivers, configuration tools, di- address common prob-
agnostics and documentation regardless of operat- lems including lack of un-
ing system with an independent and downloadable derstanding of vibration
software package compatible with any FDI registered in process departments.
host system. Typical users include
instrumentation engineers, system engineers, opera-
FieldComm Group is a global organization with a tions, and process automation specialists. It’s ideal for
mission to develop, manage and promote process oil & gas and chemical processingindustries. Conve-
automation standards. nient to buy online or request a quote.
Three user
FRQÀJXUDEOHEDQGV
Integrates with
exisiting controllers
1-800-WILCOXON www.wilcoxon.com
info@wilcoxon.com EX\ZLOFR[RQFRP
Your Pathway to the IIoT
Running on fumes
Sometimes a level instrument is only as smart as the guy doing the calibration.
THE first time I ran out of gas was in my 1953 The latest time was just last week, and it also
Studebaker coupe. When I was 13 years old, involved a Studebaker—this time, a 1963 Avanti.
my father bought me the car for $50. Having I recently had the sensor out of the car, and had
sat abandoned for years, it had bad and missing calibrated it carefully, making sure the gauge read
paint, no transmission, and an interior ravaged by full with the float arm raised to the top, and empty
vermin, but it was a ’53 Loewy coupe, and it was with it just above the floor of the gas tank.
mine. He put it in our suburban backyard, and I But I stupidly did it with the engine off, at per-
went to work. By the time I got my driver’s license, haps 12.2 battery volts. With the engine running,
it was completely apart, cleaned and painted, and the charging system regulates at 14.2 volts, so it
back together. It took first place, modified division, reads about 1/8 high. I knew this, but I thought,
at the seventh annual Studebaker Drivers Club surely, reading 3/16 of its 20-gallon tank, it would
national meet. get me to the next service area.
That car and I were very close, and with all I However, with only a few miles to go, the car
had done for it, I took it personally when it refused lost power and we coasted across three lanes of PAUL STUDEBAKER
to run just because I was in a hurry and couldn’t traffic to the right shoulder. Perfectly safe, remem- Editor in Chief
get gas just then. It was a life lesson, so I was ber, I have a lot of practice at this. pstudebaker@putman.net
less surprised the only other time it let me down, I noted the mile marker, pulled out my smart
which was during a high-speed pass of multiple phone and called AAA, but for some reason, with
cars on a two-lane highway in Arkansas. the highway number, direction and mile marker,
With a few miles to go,
An oncoming car was getting too close, so I they couldn’t figure out where I was. After a
the car lost power and
went to pull in behind one of my slow-moving pas- few minutes of back-and-forth and questions I
we coasted across three
sees and discovered that even those big finned couldn’t answer (Visible landmarks? None, it’s
lanes of traffic to the
drums I had retrofitted from a 1964 Gran Turismo dark. Municipality? Don’t know. Last highway I
right shoulder. Perfectly
Hawk almost couldn’t haul us down from 90 mph crossed? I don't recall), I told them I could see
safe, remember, I have
in time to prevent a rear-ending. As I write this, I an exit up ahead but couldn’t quite make out the
a lot of practice at this.
can smell the burning linings. sign, so I would just walk up the shoulder a ways
Nowadays, despite widespread digitalization, and read it. By the time I did that and walked
to my knowledge, all cars with gas tanks still have back, a tollway rescue truck had pulled up behind
float-actuated rheostatic level sensors, and the my car, so I told AAA to forget it.
dashboard indicators are essentially voltmeters. The rescue worker put two gallons in the tank,
New ones have low-fuel warning lights and some gave me a form to send back with $10 in a post-
can even count down the miles to empty. The one paid envelope, and waited while I cranked the
in my wife's car is highly accurate—the other day, engine for too long to refill the float bowls with its
with an indicated 8 miles left to empty, I put 17.9 mechanical pump. Eventually, the beast fired up,
gallons in the “18.5 gallon” tank. I call that close and I was on my way. Total lost time was less than
enough. 45 minutes.
Many people I know won’t let their cars go When I told this story to my millennial son, he
below half a tank, but I want to stop for gas as sel- asked, “Why didn’t you look up your location with
dom as possible, preferably at my favorite station the phone GPS?” It had never occurred to me
near my home. So, I often push my luck and learn because all those times in the past, I didn’t have a
exactly how far down the gauge I can go. As a smart phone. Hey, I know what I’m doing.
consequence, I’ve run out of gas every few years,
all my life. That's one reason I carry a AAA card,
and I know how to use it.
over and over, even though engineers In our latest State of Technology report, panelists from Cono-
are attentive and experienced, and coPhillips, Chevron and Rice University chart past and present
have the best intentions. Here’s Greg forces enabling their industry’s future, and propose a range of 2017 STATE OF TECHNOLOGY:
McMillan’s take. possibilities for improving productivity and cutting costs in new OIL & GAS APPLICATIONS
www.controlglobal.com/blogs/con- and existing plants. Among the other topics explored in this ebook
troltalkblog/common-mistakes- are “ExxonMobil makes strides to simplify, standardize its designs
not-commonly-understood-part-1 and solutions,” “A digital foundation for the chemical, oil and gas in-
dustry,” “UOP pioneering ‘optimization-as-a-service’,” and “Human
Expro unveils an industry first factors engineering delivers ROI.” It’s available as a free download.
The international oilfield services https://info.controlglobal.com/sot-2017-oilgas
company has accomplished the first
proven wireless transmission of res-
ervoir pressure data to surface from a Webinar – IIoT: Fundamentals for open and secure design and deployment
recently abandoned subsea appraisal IIoT is the convergence of sensing, actuation, networks and computation, en-
well that incorporated a rock-to-rock abled by the evolution of many different technologies. The resulting flat auto- 2017
cement plug. mation architectures, also defined by terms like Edge Networks and Industrie
www.controlglobal.com/industry 4.0, are filled with opportunity and risk, including improved performance,
news/2017/expro-unveils-first-proven- reliability and lifecycle costs, weighed against complexity, cybersecurity and
electromagnetic-transmission-of- ROI. Join Albert Rooyakkers, CEO of Bedrock Automation on Dec. 13, when
reservoir-pressure-data-to-surface- he shares the innovative designs, technologies and standards that ensure WEBINAR SERIES
across-an-open-hole-well-section- open and secure automation extends to the IIoT.
without-casing https://info.controlglobal.com/the-industrial-internet-of-things-iiot-fundamentals-for-open-and-secure-design-
and-deployment
Pentair unveils new electrical
company
Beth Wozniak will lead nVent as CEO Whitepaper – Frequency and antenna selection effects on accuracy of free-space radar
and Stacy McMahan will take on the In addition to the importance of frequency, antenna design, smart algorithms and Frequency and Antenna Selection Effects on
Accuracy of Free Space Radar
role of CFO. Pentair’s separation into location play a big role in successfully measuring levels in tanks or silos. The more Accuracy of free space radar depends on frequency, beam angle, antenna
configuration and installation.
By: Bill Sholette, Level Product Manager, Northeast, and Gene Henry, Level Product
two independent companies is sched- difficult the application and higher the accuracy requirement, the more critical it is
Business Manager, Endress+Hauser, Inc.
uled to be completed by Q2 of 2018. to have optimal frequency and antenna design. This whitepaper explores the im-
higher the frequency the better the performance. This is
not necessarily true. Instead, accuracy is dependent upon
a combination of frequency, beam angle, antenna
FRQÀJXUDWLRQDQGLQVWDOODWLRQEXWPRVWLPSRUWDQWO\WKH
dielectric constant of the product itself.
www.controlglobal.com/ portance of reviewing application details and working with experienced profession- radar transmitters: Time of Flight (TOF) and Frequency
Modulated Continuous Wave (FMCW). Both have “time”
as the base for a distance measurement…. But calculate
´WLPHµLQDGL̟HUHQWZD\
Figure 2: Frequency modulated continuous wave radar measures level
based on the difference in frequency sent vs frequency being received.
new-electrical-company-nvent https://info.controlglobal.com/white-paper-2017-frequency-antenna-selection- Figure 1: Time-of-flight radar calculates level based on the time it takes
for a microwave pulse to travel to and return from the surface of the
material being measured.
pulse, moving at the speed of light, to reach the surface
and return. This time divided by two provides the distance
to the surface being measured. The transmitter then
subtracts the distance from the span of measurement
resulting in the level of product inside a tank or silo.
accuracy-free-space-radar
but also saved more than the price of the camera in a single timely repair. If you can use a digital camera,
Multimedia Alerts
you can learn to operate a Fluke
thermal imager. While the images
from your thermal imager may
not make it into the family photo
album, they could very well save
While the images from your thermal imager may not make it into the fam-
your business thousands of dollars
when integrated into your overall
preventive maintenance strategy.
ily photo album, they could very well save your business thousands of dollars Preventive maintenance applications for Fluke thermal imaging are plentiful in an industrial
environment such as this Weyerhaeuser location in Drayton Valley, Alberta.
Feniak, the sawmill’s electrical noticed a very hot spot in the far (194 °F),” he says. “We did amp
Go to www.controlglobal.com and
maintenance supervisor pur- distance,” Feniak recounts. checks and found a severe
when integrated into your overall preventive maintenance strategy. Read more chased the imager and, after
some basic training on its use,
went into the plant and found a
problem. A big problem.
“We have been doing IR (infra-
red) scans routinely on a six- to
The Fluke thermal imager
Feniak used has a built in laser
pointer, and once Feniak turned
it on he found that heat was
being generated about 150 feet
away from the sawmill trim-saw
imbalance between phases. This
was on a Thursday, so we got
our spare motor out and installed
it the next morning on the
maintenance shift, with no
downtime. If the motor had failed
nine-month basis since 1992 motor.
or so, and we usually find very “Taking the camera right
in this case study. bearings in the planer mill and motor windings were at 90 °C
weyerhaeuser
the list from where they are now, around down the work or at least to help keep their Senior Production Manager
Anetta Gauthier, agauthier@putman.net
27 or 28.] ability to build closed/proprietary systems.
How do I know? They have been doing this PUBLISHING TEAM
Users must demand open systems successfully since 2001 when Foundation Group Publisher/VP Content
Keith Larson, klarson@putman.net
Today, ExxonMobil has 100 or more con- Fieldbus HSE became an international stan-
trol systems installed and working since dard and the (then) Fieldbus Foundation pre- Midwest/Southeast Regional Sales Manager
Greg Zamin, gzamin@putman.net
the 1980s. They are obsolete and repair pared its Host Interoperability Support Test 704/256-5433, Fax: 704/256-5434
parts can't be ordered from the original Specification. The architecture of Foundation Northeast/Mid-Atlantic Regional Sales Manager
manufacturer, but are available from third- Fieldbus offers a completely open process Dave Fisher, dfisher@putman.net
508/543-5172, Fax 508/543-3061
party suppliers. New software is out of the automation system, but most process con-
West Coast/Mountain Regional Sales Manager
question, but they can keep them running trol DCS suppliers do not support HSE, and Jeff Mylin, jmylin@putman.net
847/516-5879, Fax: 630/625-1124
for a few more years. It's easy to replace prefer to use their own proprietary version of
these systems with a new system from the Ethernet. In other words, an open process Classifieds Manager
Lori Goldberg, lgoldberg@putman.net
same vendor, but they have declared that automation architecture has existed since
Subscriptions/Circulation:
they will not do this again. They do not 2001, except for support by vendors. Jerry Clark, Jack Jones, 888/644-1803
want to have their vendor dictate the con- Today we know that Foundation Field-
EXECUTIVE TEAM
trol system renewal path. This is their drive bus HSE is an adequate basis for the Open
President & CEO
to Open Systems for Process Automation Process Automation architecture, but work John M. Cappelletti
that's now a project of the Open Group’s needs to be done to bring all of Foundation
VP, Circulation
Open Process Automation Forum (OPAF.) Fieldbus up to 21st-century standards by Jerry Clark
Every end-user company should have adding security, wireless, HART integra- VP, CFO
the same expectations of its suppliers to tion, IEC 61131-3 programming and many Rick Kasper
build open systems for process automa- other items. However, we can't count on Foster Reprints
Corporate Account Executive
tion. However, many user companies view DCS/control system suppliers to actually Jill Kaletha, jillk@fosterprinting.com
219-878-6094
endorsement of the products of one sup- build interoperable systems, even if this
plier as adequate to meet their needs, and work is completed by the OPAF. Not until Finalist Jesse H. Neal Award, 2013 and 2016
it does—for now. What will they feel like in end users actually demand these open in- Jesse H. Neal Award Winner
20-30 years when all of those systems are teroperable systems, and refuse to accept Eleven ASBPE Editorial Excellence Awards
Twenty-five ASBPE Excellence in Graphics Awards
obsolete and perhaps their chosen vendor proprietary control systems. Not only are
ASBPE Magazine of the Year Finalist, 2009 and 2016
is no longer in business? end user companies part of the problem, Four Ozzie awards for graphics excellence
Vendors are in control of the process auto- by not participating in the OPAF they're not
mation business, and prepare their product part of the solution either.
lines to prevent open competition. ExxonMo- RICHARD H. CARO, CEO, CMC ASSOCIATES
bil is leading the way to open systems, but Rcaro@CMC.us
42 • NOVEMBER 2017
break through
the
NOISE
3X 4.40 guided wave radar technology the standard for accurate, reliable level
Model 706 measurement, the fact is signal-to-noise ratio (SNR) represents a far
Higher SNR more critical indicator of level control performance. For superior SNR
in all process conditions, no other GWR device beats the Eclipse ®
1.57 Model 706 transmitter from Magnetrol®.
Competitor
SNR
To learn more about the breakthrough ECLIPSE Model 706 GWR
The ECLIPSE Model 706 transmitter has a transmitter visit radar.magnetrol.com or contact your
signal-to-noise ratio nearly 3 times higher MAGNETROL representative today.
than competitors.
RESOLVE is probably too strong a word, but global temperature has reached 16.1 °C. This
we can certainly analyze the climate change is 1.1°C (2.0 °F) above the average in 1880,
process the same way process control profes- and for this reason, in April 2016, 195 nations
sionals evaluate any process before attempt- signed the Paris Agreement, which sets a maxi-
ing to control it, because we know that in order mum allowable limit for this warming to 2 °C
to control a process, one must understand it! (preferably 1.5 °C). Most scientists believe that
So the goal of this article is to prove whether if this process is allowed to remain uncontrolled
climate change is a "Chinese hoax" or is in fact and the temperature rise reaches 4.4 °C (8.0
occurring; has parameters like gain, inertia, °F), Earth could no longer support a large hu-
time constants, capacity and dynamics that man population.
can be determined; and determine the size and Some might think that the present 1.1 °C
the speed of change of this variable, both if it's temperature rise is insignificant, but from a
is left uncontrolled and when it is controlled. process control perspective it is not, because
BÉLA LIPTÁK This knowledge is important because it tells us considering the immense mass of our planet,
liptakbela@aol.com how much total change is needed and the time it represents the accumulation of gigantic
frame in it must be achieved. amounts of heat. Therefore, this rise from 15
°C to 16.1 °C is a temendous upset to this heat
Is present global warming significant? balance process.
Most scientists believe For the past million years, the incoming and
that if this process is outgoing energies of our planet were in balance, How do we know if CO2 is the cause?
allowed to remain and as a consequence, the average tempera- Before reaching any conclusions, a good pro-
uncontrolled and the ture of the earth's surface stayed at 15 °C. At cess control engineer will check the reliability of
temperature rise reaches the same time, the surface temperature of the the measurements. In case of the atmospheric
4.4 °C (8.0 °F), Earth moon, which receives the same amount of solar concentration of CO 2, the data for the past half-
could no longer support energy (340 W/m2) as we do, stayed at -18 °C. century is highly reliable, as the measurem-
a large human The earth was 33 °C warmer than the moon nents were made by instrumental means. The
population. because it has an atmosphere, while the moon rest of the data, which goes back to when the
does not. earliest Neanderthals evolved about 200,000
For the past million years, the earth's atmo- years ago, was obtained by ice core drilling.
sphere contained a fairly constant amount of This involves drilling down to some 3,000-
"naturally present" greenhouse gases, which 4,000 feet, crushing the drilled ice samples un-
acted like a mirror, reflecting more than half der vacuum, and expanding the gas into a pre-
of the infrared energy that the earth radiated evacuated sampling loop, where it is analyzed
to the cold space that surrounds it, while the by gas chromatography. As this drilling process
moon radiated all the energy it received back was repeated many times and in many loca-
into space. tions, with little variation in the results, this data
Our global energy imbalance started at the can also be considered reliable.
beginning of the Industrial Revolution in 1880, In my analysis, I am not considering earlier
when global record-keeping began and when data, because I do not have enough confidence
the greenhouse gas concentration of our at- in their accuracy. Those measurements, going
mosphere started to increase. At that time, the back to millions of years, are usually based on
rate of temperature rise was less than 0.01 °C detecting the composition of gases trapped in
per decade. By today, this rate has increased crushed stone samples. While in my conclu-
to about 0.12 °C per decade, and the average sions I do not depend on them, I should men-
:PVGBDFHSFBUUSBOTGPSNBUJPOUIFTFEBZT
FTQFDJBMMZEJHJUBMJ[BUJPOBOEFWFSDIBOHJOHUSFOET
"OEZPVXBOUTUBCMF
FDJFOUPQFSBUJPOPGQMBOUBOEFOUFSQSJTF
BTTVSJOHDSFBUJPOPGWBMVFGPS
PQUJNBMSFTPVSDFVTFBOEQSPUBCJMJUZ5IJTJTXIFSFDPJOOPWBUJPODPNFTBMJWF8FMMSFTQPOE
XJUITPMVUJPOTBOEQSPQPTBMTGSPNBQFSTQFDUJWFPVUTJEFUIFCPY
BOEXJUIJOTJHIUTJOUP
BEWBODFEUFDIOPMPHJFTUIBUTVQQPSUTVTUBJOBCMFHSPXUIGPSZPVBOETPDJFUZ
:PLPHBXB:PVSQBSUOFSJOBWJUBMGVUVSF
ZPLPHBXBDPNJOUP
$PJOOPWBUJOHUPNPSSPXJTBSFHJTUFSFEUSBEFNBSLPG:PLPHBXB&MFDUSJD$PSQPSBUJPO
500
LESSONS460LEARNED
440
400
Current level
500
CO2 level (ppmv)
460 360
In view of the above, I would con-
440
320 For centuries, atmospheric CO2 had never been above this line 1950 level
clude that although many other vari-
400
Current level
ables contribute to global warming,
280
CO2 level (ppmv)
360
the existance of a direct relationship
For
240centuries, atmospheric CO2 had never been above this line 1950 level
320 between global temperature and atmo-
280
200 spheric CO2 concentration is unques-
240 tionable (Figure 1).
160
200 During the past 50 years, both the
400,000 350,000 300,000 250,000 200,000 150,000 100,000
160 rate of rise of50,000 0
CO2 concentration and
400,000 350,000 300,000 250,000 200,000 150,000
Years100,000
before today (0 = 1950)
50,000 0
the rate of temperature rise increased
Years before today (0 = 1950)
drastically faster than in previous cen-
4 4 turies (Figure 2). Based on this data,
2
2 process control professionals would
0
0 conclude that, because of the capacity
-2
∆T, °C
350 57.5
ated back into space by an immense
340
57.3
amount (0.5 to 0.75 W/m2). Therefore,
330
390 58.1
CO2 in ice cores 57.1 eventually the energy balance would
320 380
57.9 be reestablished, but at an even higher
Global average temperature, °F
310
370 Direct CO2 measurements 56.9
300
56.7 temperature.
290 360 57.7
The various scientific models sug-
CO2 level (ppmv)
56.5
280 350 57.5 gest that if the CO2 concentration is
340
1880 1900 1920 1940 1960 1980 2000
reduced to about 345 ppmv, this can
57.3
330 limit the global temperature rise to
320 57.1
2 °C. This I disagree with! It seems
310 56.9 to me that this conclusion does not
300 sufficiently consider the tremendous
56.7
290 inertia and "dead time" of this pro-
56.5
280 cess, and therefore our target should
be 295 ppmv and not 345 ppmv. The
1880 1900 1920 1940 1960 1980 2000 295 ppmv concentration was not ex-
ceeded during the past million years,
RECENT RAPID RISING and therefore, the energy balance of
Figure 2: Since 1880, the rate of rise of both CO2 concentration and surface temperature the planet will not be reached until we
drastically increased. (National Climatic Data Center) reach it again. I also doubt the accept-
ability of the continued use of fossil
fuels even for only a few decades be-
tion that all these studies agree that mosphere). Therefore, I can say with cause my crude calculations suggest
today's CO2 concentration of 400 ppmv reasonable confidence, that the CO2 that even if we stopped using them to-
(parts per million by volume) has never concentration in our atmosphere has day, it is already inevitable that the sea
been reached (https://en.wikipedia.org/ not exceeded 280-295 ppmv during levels will already rise some 4.5 - 6.0 m
wiki/Carbon_dioxide_in_Earth%27s_at- the past couple of million years. (15-20 feet).
Our experts are engineering variable frequency drives to be more communicative and
intuitive, while still enabling reliable, energy-efficient results. With VLT® and VACON®
offering powerful product lines, and a unique service portfolio with DrivePro®, Danfoss has
the right drive to meet the application demands and unique conditions of every industry,
even in harsh environments. Choosing the right drive and optimizing your entire system
can yield potential energy savings of up to 60 percent. Danfoss is committed to innovating
drives that can address climate change, rapid urbanization, and successful and sustained
water and wastewater management, so you can tackle your industry’s challenges.
5bn
worldwide will
benefit daily from
Danfoss Drives
by 2025
ON THE BUS
Levels of inference
Smart engineers can get more than level from level instrumentation.
IT was cold for the midwestern United States, to an Amazon cloud service. He was delighted to
and when the frigid January morning got down to find how much he could infer about activities at
-15° F, the house operators were discussing which the brewery from a single trend. Noise in the cold
of two level indications they should believe. The liquor (brewing water) tank meant the hot liquor
“continuous” level, an analog (4-20 mA) DP trans- tank was boiling, i.e. too hot and wasting energy.
mitter, was trending high, and high level could Changes in a single tank level could also be reli-
result in liquid carryover to the steam system—a able indications of various steps in a batch, such
bad thing for all the steam users on this cold day. as mash-in, sparging and so forth. “With access
But the other level instrument—an Eye-Hye multi- to this information, my head brewer can better
point device that used conductivity “spark plugs” plan his day, maybe sleep in a bit if he sees he
to detect level—indicated that the level was get- can’t start a batch until later,” mused Koppelman.
ting perilously low. Since the level control was The frugal entrepreneur of small-batch brewing
based on the 4-20 mA instrument, it was reduc- was cleverly using his limited instrumentation bud-
JOHN REZABEK ing boiler feed water (BFW) flow. Should they take get for multiple inferred measurements. The same
Contributing Editor the BFW in manual to catch what one instrument principle can be applied at the large process plant
JRezabek@ashland.com showed to be a low level, or believe the other that has a more lucrative payout for reliability. For
measurement? The debate was settled moments years, HART and fieldbus instruments have been
later when the boiler tripped on low level, as two available with a statistical process monitoring fea-
Koppelman has been independent level switches provided the “votes” ture that can be configured to monitor the noise in
deploying very modest to trip the burner management system (BMS). the raw process signal. Changes in the noise can
innovations, using While our hardy neighbors to the north might be used to make inferences about the validity of
inexpensive Arduino be getting out the sunscreen when the ther- the measurement. If the high-side impulse line of
chips to connect a few mometer reads above 0° F (-18° C), tempera- a differential pressure (DP) level transmitter starts
level instruments to an tures below -10° F put all the winterization and to plug up or freeze, one might be able to see
Amazon cloud service. presumed specifications of equipment to the test. the signal change from the actively boiling liquid
In midwestern latitudes, waste heat boilers and interface to the more or less flat-line state of the
their ilk in process plants are rarely indoors, so all plugged line. It might take some attention, time
the boiler trim, e.g. gauge glasses, level switches and tuning to make the inference of a suspect
and transmitters, must have thorough and intact measurement reliable, but the information would
insulation. Over many years of wear and tear, with have been invaluable to the puzzled operators on
insulation removed and reapplied for shutdowns that cold January morning.
and other routine maintenance, it can be far from Rather than simply repeat a 4-20 mA signal
certain that all critical equipment and instrumen- from the emergency shutdown system to the DCS,
tation will endure the harshest weather. Without today one can install SIL-rated signal splitters, like
adding more redundancy, is there more informa- the Safety Series isolator and splitter from Moore
tion available that might have helped operators Industries. The signal passed on to the DCS can
determine which level to believe? have the full HART capability, so if you’ve config-
I was fortunate to stumble upon an interest- ured it for some manner of plugged line detec-
ing talk by Minneapolis-area craft brewer Michael tion, you may be able to inform the operator in
Koppelman last month at the Emerson Global Us- near-real time of a measurement that shouldn’t be
ers Exchange. In his 20-barrel Badger Hill Brew- believed. The cost is a little more than an Arduino
ery, Koppelman has been deploying very modest chip and space on Amazon’s cloud service, but so
innovations, using inexpensive (less than $20) is the payout for a plant that dare not go cold on a
Arduino chips to connect a few level instruments frigid morning.
www.vega.com/radar
WIRELESS is often a good application for level However, if the level (differential pressure) is large
measurement because in many cases, the re- enough to mask this error and digital communi-
sponse time is somewhat slower, the distances cations are used, then the two-transmitter option
tend to be quite long between sensors, and there may be less expensive in the long run than a long
is little interference from things like pipe racks capillary. In addition, using two wireless transmit-
and closely packed equipment. ters offers the option of not needing to install a
Despite advances in level sensing and com- power conduit.
munications technology, a significant percentage For applications in solids or where material
of level measurements still rely on plain, old dif- builds up in the nozzle, extended flanged dia-
ferential pressure measurement and the equation phragm seals ‘fill’ the nozzle with the diaphragm
∆P=ρg∆h directly correlating the differential pres- itself, thus preventing plugging or bridging of the
sure to the associated height of the column of liq- measurement ports. There are, however, a few
uid above the lower pressure tap. Many intelligent cautionary items to consider. The diaphragms are
IAN VERHAPPEN transmitters can output level directly by simply designed to have a close tolerance to the pipe's
Senior Project Manager, dividing the differential pressure by the density. internal diameter—always be sure the full pipe
Automation, CIMA+ We also know that every pressure transmitter diameter is available, so you don't damage the
Ian.Verhappen@cima.ca measures differential pressure—in many cases, diaphragm during installation. Another consider-
one side is open to atmosphere and hence the ation is to keep the diaphragm approximately 0.5
psig output. This means that for an open tank in. behind the surface of the inner vessel wall, as
or non-pressurized vessel, there's no need for this will reduce erosive wear on the diaphragm,
Extended flanged the low-pressure leg to be connected to a sec- while also ensuring any solids buildup on the re-
diaphragm seals ‘fill’ ond nozzle in the vapor space. To ensure that it sulting ledge can't build up to a level where it will
the nozzle with the remains in liquid all the time, the lower nozzle is adversely affect measurement.
diaphragm itself, thus located just below the lowest liquid level. Using All of us know that assuming can come back to
preventing plugging a capillary and diaphragm seal system has the bite us—so why assume the density when, by us-
or bridging of the advantage of being isolated, and therefore less ing a second set of nozzles a fixed distance apart,
measurement ports. susceptible to contamination by the process. As the above equation can be solved for density?
a result, a capillary is usually used to connect the Placing these nozzles below the lowest liquid level
second (top) nozzle with its flush, flanged dia- will provide a calculated density representing the
phragm seal, while the high-pressure (lower) side actual liquid in the vessel. For example, I normally
is directly mounted to the vessel/nozzle by another place the nozzles 1 m or 3 ft apart with the lower
flush, flanged diaphragm seal. tap on the same centerline as the level measuring
Care must be taken with capillary seals, not transmitter(s). This provides enough distance to
only in selecting the fill fluid, but also during in- get a reasonable measurement, but manufactur-
stallation. Mechanical protection provides support ers may allow smaller gaps. If space is an issue,
and protection from kinks or restrictions in the then the top density measurement nozzle may
capillary that will cause errors in measurement sometimes be located above the low liquid level,
and premature capillary failure. while the lower nozzle is always below the low-low
Intelligent devices, however, can replace the liquid level.
capillary system to the top transmitter with a Advances such as intelligent devices and digital
second transmitter, or with an “electronic remote communications make it possible to use tradi-
sensor” and cable. Because it's not possible to tional measurement technologies in new ways.
have two transmitters perfectly calibrated, the Though applied in innovative ways, they continue
two-transmitter option introduces some error. to rely on basic principles.
Ready for more capability in less space? Take action by contacting a Yaskawa
representative about Sigma-7Siec.
SEVERAL hundred visitors focused on ing, artificial intelligence (AI) and the lat-
"connected intelligence" at the Iconics Con- est advances in automation software."
nected Intelligence Customer Summit 2017 Attendees explored and tried out mul-
on Oct. 30-Nov. 2 in Providence, R.I. They tiple Iconics advances first-hand, including
took in dozens of presentations and exhib- its new IoTWorX software suite designed
its, and learned, not just to understand the for IIoT and Industrie 4.0 applications. IoT-
Industrial Internet of Things (IIoT), but how WorX combines software technology with
to take the greatest advantage of it for their affordable IoT hardware devices to create
applications and organizations. cloud-ready solutions for energy, building
“Connected intelligence is our theme automation, manufacturing and industrial
at this year’s summit, and it has a dual applications. Iconics maintains that data is
meaning for us,” said Russ Agrusa, the "new currency," and that its long-time
president and CEO of Iconics (www.icon- mission of "making the invisible visible" is IIOT BEACON
ics.com), which was recently named the further enhanced by IIoT and wearable, "We want to make using the IIoT and its devices
2017 Microsoft Application Development hands-free devices. Iconics provides in- more natural to use—and hands-free, too," said
Partner of the Year and is a five-time win- tegrated support for Microsoft’s HoloLens Russ Agrusa, president and CEO of Iconics.
ner of the Microsoft Partner of the Year holographic computing headset, Real-
award. “First, it refers to our extensive Wear's (https://realwear.com) HMT-1 head- • Genesis64, Version 10.95, HMI/
suite of automation software, and how it mounted Android computer and other new SCADA and building automation
provides out-of-the-box solutions for visu- virtual-reality (VR) devices. software suite that includes what's
alization, mobility, historical data collec- "We want to make the IIoT and its de- reported to be the world’s first 3D,
tion, analytics and IIoT. The second point vices more natural to use—and hands- holographic machine interface
is that over the past 30 years, Iconics has free, too," explained Agrusa. "Connected (HMI), which can be used with the
built a community of partners and cus- intelligence means linking to the real HoloLens self-contained holographic
tomers who have the opportunity to meet world, and then historizing, analyzing and computing device. This combination
our software designers and other employ- mobilizing data." of Iconics software with Microsoft
ees, and have one-on-one discussions Other demonstrations and releases hardware allows users to visualize
about IIoT, Industrie 4.0, cloud comput- during the conference included: real-time data and analytics KPIs in
both 2D and 3D holograms.
• Smart Energy AnalytiX software-as-a-
service (SaaS) combines Iconics' exper-
tise with energy management software,
FDDWorX fault detection/diagnostics
and KPIWorX self-service dashboarding
tool technologies into a cloud portal-
based subscription solution.
• Hyper Historian data historian with Mi-
crosoft Azure data lake for more data
storage, archiving and retrieval. Iconics
reports that, when real-time “hot” data
is collected at the edge by IoT devices
and other remote collectors, it can be
securely transmitted to “warm” data
LIVING ON THE EDGE historians for mid-term archiving and
Jotham Kildea, business development manager, Iconics, shows how its IoTWorX software works replay, and archived to “cold” long-
with affordable IoT devices to create cloud-ready solutions and serve in edge applications at term data storage systems such as data
the Iconics Connected Intelligence Customer Summit 2017 on Oct. 30-Nov. 2 in Providence, R.I. lakes, Hadoop or Azure HD Insight.
Ex i System Highlights
• Approved for location in Class 1 Div. 2 / Zone 2
• Intrinsically safe [ia] digital, analog and safety modules
• Combine standard and Ex i I/O in the same node
• Modular, compact design – 12 mm width
• Fieldbus Independent
www.wago.us/hazloc
IN PROCESS
www.advantech.com
IN PROCESS
Level Plus
Liquid Level Transmitters
SAFETY By Design,
NOT Safety by Approval
Not all hazardous area approvals are the same. Special conditions of
use allow inferior products to be approved with caveats. These Safety Integrity Level
IEC 61508
MTS Systems Corporation, Sensors Division • 3001 Sheldon Drive Cary, NC • Tel. 800-633-7609 • www.mtssensors.com • sensorsinfo@mts.com
Ensuring process
availability.
Providing flexibility.
Challenging expectations.
www.pepperl-fuchs.com/hmi
ICEWEB CYBER COMPILATION 'UNFETTERED' IS 10 YEARS OLD "Cybersecurity for Control Systems in
The now-legendary ICEweb site takes The great "Unfettered" blog written by Process Automation—European Ses-
on cybersecurity, and has compiled a Joe Weiss and hosted by Controlglobal. sion," are offered by the ISA and Sie-
treasure trove of articles and links at its com just celebrated its 10th birth- mens. ISA99 Committee Co-Chair Eric
"Control System Security" sub-website. day a few weeks ago, which means it's Cosman and Siemens Plant Security
The collection covers SCADA security, achieved more than a decade of thor- Services PSSO Robert Thompson pres-
malware, expenses of attacks, Stuxnet, ough and unrelenting coverage of cyber- ent the current threat landscape and
oil and gas facility security, standards, security issues and threats—and what's key steps you can take to protect your
videos and links to U.S. government and too often not being done about them. As critical assets in the production environ-
many other resources. They're all located his bio says, "Weiss is an international ment. They're at www.youtube.com/
at www.iceweb.com.au/Security/secu- authority on cybersecurity, control sys- watch?v=V7gVX7pbVjk and at www.you-
rity.htm tems and system security, and he weighs tube.com/watch?v=l5mDPtxW-8Y
ICEWEB in on cybersecurity, science and tech- ISA
www.iceweb.com.au nology, security emerging threats and www.isa.org
more." Find it at www.controlglobal.com/
NIST CYBER BLOG AND DOCS blogs/unfettered PROTECTION AND PREVENTION
The official site of the "NIST Cybersecu- CONTROL WHITEPAPER
rity Framework" consists of basic docu- www.controlglobal.com The 17-page whitepaper, "Cybersecurity
ments and a blog with the latest updates for Industrial Automation & Control
on what's going on with cybersecurity ICS-CERT SITE DELIVERS Environments," is authored by Schneider
from the unique perspective of the Na- The U.S. Dept. of Homeland Security's Electic and Frost & Sullivan, and cov-
tional Institute of Standards and Technol- Industrial Control Systems Cyber Emer- ers all the basic scenarios and stragies
ogy. The site also includes FAQs, news, gency Response Team (ICS-CERT) site for minimizing risk, improving postures
events, workshops and even a couple of has been improving with more timely and partnering with the right helpers. It's
short and informative videos. It's at www. threat updates and recommendations for at www2.schneider-electric.com/docu-
nist.gov/cyberframework users about protecting themselves, their ments/support/white-papers/white-pa-
NIST applications and their organizations from per-cybersecurity-for-industrial-automa-
www.nist.gov probes, intrusions and cyber attacks. In tion-control.pdf
fact, notices and alerts are now delivered FROST & SULLIVAN
EXIDA VIDEO INTRODUCTION right to those who sign up. It's at https:// https://ww2.frost.com
This 44-minute video, "Introduction to ics-cert.us-cert.gov
Process Control Cyber Security," is de- ICS-CERT ISA99 SECURITY MODELS
rived from a webinar by cybersecurity https://ics-cert.us-cert.gov This 50-minute video, "Industrial Cyber
consultant exida. It reports that it pro- System Security, the ISA 99 Security
vides an introduction to control system SECURITY FOR NORTH AMERICA Models," is presented by Dennis Brandl
cybersecurity and the security lifecycle. AND EUROPE of BR&L Consulting Inc., who addresses
While the course follows the security level The ISA99 standards development com- control system security, and how the ISA
lifecycle from ANSI/ISA-99.01.01 and mittee brings together industrial cyber- 99 Security Models can be a solution.
ANSI/ISA-99.02.01, it also references security experts from across the globe He originally delivered this presentation
other industry standards and best prac- to develop the ISA-62443 (IEC 62443) at the 2015 NovaTech Users Conference
tices. It's located at www.youtube.com/ security standards These two 90-min- in New Orleans, La. It's at www.youtube.
watch?v=ZcQLg9ary1Q e ute webinar videos, "Cybersecurity for com/watch?v=apD651mYp6A e
EXIDA Control Systems in Process Automa- NOVATECH
www.exida.com tion—North American Session" and www.novatechweb.com
If you know of any tools and resources we didn’t include, send them to ControlMagazine@Putman.net with
“Resource” in the subject line, and we’ll add them to the website.
CYBERSECURITY is a complex issue, made more complicated by Introduction to IEC 61511 First Edition A key difference in today’s security threats and what was in
having four technical domains (IT, enterprise, process control and When the First Edition of IEC 61511-1 came out some 14 years the 61511-1 1st Edition is that we've moved from a small arena Cyber domain
(not to scale)
safety systems) with different purposes, goals and potential hazards ago (and ANSI/ISA S84: 1996 before it), cybersecurity concerns (your company) that included mostly internal, physical threats
and risks, and often with different personnel involved. Here are and threats weren't well recognized in the process industries. to a much larger threat arena (the world) that can include both Government-
some of the considerations in performing the security assessment The 61511-1 2003 1st Edition standard did recognize potential internal physical threats and external, largely invisible cybersecu- and
state-supported
required in Clause 8.2.4 of the new Second Edition of IEC 61511- security threats to SIS. They primarily revolved around inadver- rity threats, potentially from all over the world. Hackers
Cyb
er
1: 2016 standard for safety instrumented systems (SIS). Some of tent or unauthorized access and changes affecting the safety
thr
eat
Company
the considerations also apply to non-SIS safety systems and to the integrity of the SIS. Unauthorized or mismanaged changes have Second Edition security assessment requirements IT/
vec
Public
tor
broader industrial control and automation systems (ICAS). long been recognized as a safety hazard (e.g. Flixborough, IEC 61511-1 2nd Edition recognized the increasing threat of cyber Enterprise Internal
threats
The purpose of the SIS is to ensure that we make product 1974), which led to management of change (MOC) rules. attacks to SIS, and added additional requirements to help reduce Process control
safely. For the most part, it's not involved in how the process is Security concerns at that time (and they're still concerns to- the risk. Compliance with the new IEC 61511-1 Second Edition Terrorists
Process safety
BPCS
& SCAI ICAS
controlled or how process and production information is nor- day) were primarily unauthorized physical access (e.g. locked 2016 will require that the SIS have a security assessment (Clause
mally collected or manipulated outside of the SIS, only if the cabinets, building access control, etc.), programming access 8.2.4) and that its design shall provides the necessary resilience tor SIS
t vec
er t hrea
process exceeds safe limits. We have some secondary concerns (e.g. keylocks, programming panels and computers, dongles, against identified security risks (Clause 11.2.12). Clause 8.2.4 Unknown Cyb
that the safety system doesn't affect production through exces- etc.), and password controls. Most threats were considered details a general outline of what's to be accomplished in a secu- threats
sive spurious trips or through high maintenance rates. internal, e.g. inadvertent, unauthorized and/or undocumented rity assessment, but not much on the nitty gritty of performing
The broad cyber domains are conceptually illustrated in Fig- changes, problems caused by disgruntled employees, etc. the assessment. The basic methodology is one of reductionism: Unknown unknown area
ure 1, where it can be seen that the SIS is essentially embed- Recent rapid advances of digital control technology, advances breaking down the SIS domain into smaller equipment pieces;
ded in the ICAS system and generally is considered part of it. in computing power and interconnection of the world via the analyzing the equipment’s vulnerabilities; evaluating the existing THE CYBER DOMAINS
It's important to understand the role the SIS plays in the ICAS to Internet, intranets, wireless and now the Internet of Things (IoT) protections that limit exposure of the vulnerabilities to a physical Figure 1: The safety instrumented system (SIS) is embedded in the
understand how a cyber attack might occur in a SIS, and what and Industrial IoT (IIoT) have opened a Pandora’s box of op- security breach or cyber attack; providing additional protections to industrial control and automation system (ICAS) along with the basic
cyber consequences could be physically realized and lead to a portunities, but also unleashed the big, bad wolf in the form of reduce the risk to an acceptable level based on the corporate risk process control system (BPCS) system, where it is subject to the same
hazardous condition. increasing cybersecurity threats. criteria; and documenting the risk assessment. In addition, when variety of cyber threats.
BPCS Generation of
Cyber Physical Cyber initiating
Cyber threat Vulnerability out-of-range
access point consequence consequence cause(s) in BPCS process condition
SIS cyber
domain
Cyber initiating
cause(s) in BPCS Enabling Alarm layer of SIS layer of PSV layer of
Hazard
conditions protection #1 protection #2 protection #3
Non-cyber
initiating cause
Cyber attack Cyber attack Cyber attack
defeats IPL defeats SIS IPL defeats IPL
Spurious
trips
Access Cyber
Cyber threat point Vulnerability consequence
using a reductionism methodology, care must be taken to not miss not the BPCS, then the SIS safety function could be defeated,
system-level threats. leaving a latent dangerous failure in the SIS. A cyber attack on
The overall risk assessment process is similar to a process haz- the SIS might also initiate a spurious trip (one or many), causing
ards and risk assessment (H&RA). In some cases, a cyber attack in a safety incident or disrupting production. If software resets are
the ICAS could initiate a cause similar to an equipment failure or hu- used in the SIS (versus field resets), then the cyber attack might
man error in a process H&RA, where other layers of protection (as- also auto-reset the SIF and trip again later, leading to a hazard-
suming some of those have not been defeated by the cyber attack) ous condition.
will come into play to bring the process to a safe state. A standard These SIS cyber attacks can be overt, such as in conjunc-
layer of protection analysis (LOPA) would prevent the physical real- tion with a simultaneous cyber attack on the BPCS, or covert
ization of this cyber threat into a hazard. In this case, the ability of by defeating the safety function of the SIS and waiting for a
the SIS to resist defeat of the SIS safety function can be paramount normal safety demand or a later cyber attack on the BPCS. It's
to achieving a safe state of the plant. important to realize that the SIS typically isn't the only IPL, which
should be considered in any risk assessment, and that the pri-
SIS cyber domain mary risk we are concerned with is a physical realization of a
Philosophically, the SIS is best understood in the context of lay- hazard.
ers of protection, where the SIS is equivalent to one to three in- It's also important to understand how a SIS can be defeated
dependent protection layers (IPL) that protect against identified in order to provide protection against those events. For example,
hazards determined by a process risk analysis. Figure 2 illus- some of the ways a SIS/SIF can be defeated are placing the
trates a situation where a cyber attack on the basic process con- safety functions in bypass without the operator being aware;
trol system (BPCS) could initiate a cause equivalent to a normal placing the logic solver in an infinite loop; changing the trip and
equipment failure or human error. This same attack could lead to alarm setpoints; disconnecting the output from the logic, spoof-
defeat of the alarm IPL, if it's in the BPCS and the attacker has ing the inputs; forcing the outputs, etc. This understanding can
sufficient skill in manipulating the BPCS. lead to SIS designs that, in addition to the zones/conduits protec-
If the SIS is designed to protect against that particular initiat- tion scheme, can help to protect against specific failure modes
ing cause, it should serve its purpose as an IPL, and bring the resulting from a cyber attack.
process to a safe state. However, if the attack is also directed at
the SIS, defeat of the safety instrument function (SIF) protecting IEC 61511-1 security assessment steps
against the BPCS initiating cause could also defeat the IPLs for To perform a security assessment under the new IEC 61511-1
that hazard, leaving protection to the mechanical IPLs. standard, one of the first things is to establish the outer boundary
If the initial cyber attack was directed strictly at the SIS and of the SIS under assessment. Where the zones/conduits in ISA/
IEC 62443:2010 and ISA TR84.00.09 to nodes in a HAZOP. An alternative to the purpose given a security event. Or use a
protection concept are used (Figures 3 HAZOP top-down approach, would be combination of both methods to cover all
and 4), the zone boundaries of the SIS are to use a failure mode and effect analysis your bases.
the boundaries for the security assess- (FMEA) bottom-up approach, and look at The security assessment requires a de-
ment. This is somewhat similar in concept how the system could fail to accomplish its scription of all the covered devices. These
device descriptions should include a list
of all the hardware and software versions,
including device sub-modules, for change
management.
Security-critical information (e.g. alarm
and trip setpoint, field device parameters,
communication parameters, etc.) in the
devices and system should be identified to
allow detection of unauthorized changes
in the parameters critical to safety. The
description should include all connec-
tions to other devices within the SIS, to
devices outside the SIS boundary, and to
all devices used for non-operational pur-
poses (programming terminals, update
connections, field device communicators,
calibration equipment, asset management
systems (AMS), any connection to the out-
side world whether they're active or not,
etc.). Include hardwired connections that
can be influenced by a cyber attack and
any connections that help provide protec-
tion against cyber attacks (e.g. hardwired,
keyed, bypass-enabled switch).
Known cyber vulnerabilities for each
device should be listed. As part of gen-
erating this list, known cyber vulnerabili-
ties should be discussed with the device
manufacturer, and researched in the
industry. Physical security vulnerabili-
ties for each device and for the system
as a whole should also be listed. There is
commercial software becoming available
to make this inventory effort easier, and
to help automate monitoring of unauthor-
ized changes and potential security is-
sues. An example of this type of software
is Cyber Integrity by PAS (www.pas.com).
Also, develop a description of identified
security threats that could exploit listed
equipment vulnerabilities and result in se-
curity events (including intentional attacks
on the hardware, application programs
and related operating system software, as
well as unintended events resulting from
human error). It's important in this type of
risk assessment to understand the security
“We no longer worry about connection issues; PT terminal blocks have a special
contact spring for easy insertion and quality contact. Plus, the compact components
fit nicely into our control boxes, so we can easily connect more than one circuit.”
PROTECT PUMPS
$29 25..).'