Abstract: To provide a trusted, secure, and immutable record of transactions within a process plant, techniques are described for utilizing a distributed ledger in process control systems. The distributed ledger may be maintained by nodes which receive transactions broadcasted from field devices, controllers, operator workstations, or other devices operating within the process plant. The transactions may include process plant data, such as process parameter data, product parameter data, configuration data, user interaction data, maintenance data, commissioning data, plant network data, and product tracking data. The distributed ledgers may also be utilized to execute smart contracts to allow machines such as field devices to transact by themselves without human intervention. In this manner, recorded process parameter values and product parameter values may be retrieved to verify the quality of products.

Abstract: A supervisor engine cooperates with an expert system in a process control environment to automatically generate, assign, track, and manage work items. The supervisor engine creates work items according to data received from the expert system, selects available personnel to execute work items, sends work items to the selected personnel, schedules the execution of the work items, and creates and stores permissions that allow the assigned personnel to complete a target function of the work item at an assigned time. The supervisor engine determines required skill sets, roles, certifications, and/or credentials associated with a work item, and selects personnel to perform the work item according to a personnel profile specifying a skill set, a role, certifications, and/or credentials associated with the personnel. Alternatively or additionally, the supervisor engine assigns a work item according to the presence of personnel at or near the target equipment.

Abstract: A field device includes components to communicate with a control and/or asset management system of a process control system or with other field devices using any of several different communication protocols such as several different internet protocol (IP) protocols. This architecture allows for a single version of a field device to be provided in automation or plant control systems that use any of these communication protocols, thus saving on inventory and product development costs. Moreover, the multi-protocol field device or a system using the multi-protocol field device can manage the asset (read and write parameterized data from and to the asset) using one protocol while at the same time communicating real-time process/factory automation information using a second and different protocol. Moreover, the field device may be able to communicate to other devices including other field devices and host devices using both of these protocols or other protocols for different purposes.

Abstract: The described techniques enable plant personnel to avoid the time and labor-intensive process associated with traditional design systems by enabling users to design, test, and “preview” control logic for controlling a process before downloading the control logic to a configuration database or process controller in the plant. This enables the quick testing and improvement of control logic during the design phase, avoiding the time-consuming iterative process of designing, downloading to a database, propagating to a live controller, and testing on the physical controller. It also separates testing of logic and non-logic aspects of a controller configuration, enabling a user to finish designing the control logic before downloading the configuration to the controller, where she only needs to test non-logic aspects of the configuration.

Abstract: A method of generating a product recipe for execution by a batch process in an automated manufacturing environment, such the product recipe is associated with a plurality of actions, a set of transitions, and a set of parameters, and such that the plurality of actions define a plurality of logical levels including a phase level at which the batch process interacts with equipment, includes receiving a procedure definition specifying the plurality of actions, receiving a transaction definition specifying the set of transitions so that each one in the set of transitions is associated with two or more of the plurality of actions, and receiving the set of parameters. Receiving the set of parameters includes receiving at least one dynamic input parameter that resolves to a value without obtaining the value from the product recipe or an operator prompt associated at the phase level of the product recipe.

Abstract: In a method of providing virtual enhanced vision to a user of an augmented reality (AR) mobile device, it is determined that a first node associated with a map of a process control environment corresponds to a first real-world object currently within a field of view of a camera of the AR mobile device. A relationship between the first node and one or more other nodes is determined, with the relationship indicating that one or more other objects corresponding to other nodes are at least partially obscured by the first object. At least partially in response to determining the relationship, one or more digital models or images depicting the other object(s) is/are retrieved from memory. A display of the AR mobile device is caused to present the retrieved digital models or images to the user while the first object is in the field of view of the camera.

Abstract: A process control system having an external data server that provides process control data to external networks via one or more firewalls implements a cost-effective security mechanism that reduces or eliminates the ability of the external data server to be compromised by viruses or other security attacks. The security mechanism includes a DMZ gateway disposed outside of the process control network that connects to an external data server located within the process control network. A configuration engine is located within the process control network and configures the external data server to publish one or more preset or pre-established data views to the DMZ gateway, which then receives the data/events/alarms as defined by the data views from the control system automatically, without performing read and write requests to the external data server.

Abstract: A system and method of configuring monitor blocks and effect blocks associated with a process control system for a process plant includes causing a display device to display a graphical user interface, the graphical user interface indicating a first monitor block, a second monitor block, and an effect block. The system and method further includes enabling a user to input configuration data via the input device, including: (i) configuring one of the outputs of the first monitor block to serve as one of the inputs of the second monitor block, (ii) configuring an additional one of the outputs of the first monitor block and one of the outputs of the second monitor block to serve as inputs to the effect block, and (iii) designating at least one of the plurality of cells of each of the first monitor block, the second monitor block, and the effect block as a trigger associated with the respective input/output pair for the respective cell and corresponding to a condition in the process plant.

Abstract: In a method of facilitating interaction between a user of an augmented reality (AR) mobile device and a first real-world object, a display device is caused to superimpose digital information on portions of a process control environment within a field of view of a camera of the device. The superimposed information is associated with nodes in a map of the environment, and the nodes correspond to other objects in the environment. The display is caused to indicate a direction to the first object. After detecting a user input that indicates selection of the first object, the display is caused to superimpose, on a portion of the process control environment currently within the field of view, a digital model or image of the first object. A user interface is caused to provide one or more virtual controls and/or one or more displays associated with the first object.

Abstract: Techniques for assessing the completeness of a graphical display configuration of a process plant include receiving or obtaining a list of expected display views to be included in the draft of the process plant's graphical configuration or a portion thereof. For each expected display view, a graphical display configuration application obtains a list of expected control references corresponding to the display view and determines whether the control references are included in the display view, whether the control references are configured and stored in a control configuration database, and/or whether related display views corresponding to the control references are configured.

Abstract: Techniques for configuring layouts and display view hierarchies and presenting display views in an operating environment of a process plant according to the layouts and display view hierarchies include providing graphical user controls at a graphical display configuration application for defining a layout. The layouts indicate a manner in which divide one or several display screens into one or several display regions, where each display region presents a display view that includes indications of process control elements. The graphical display configuration application also includes graphical user controls for defining a display view hierarchy of the display views by assigning levels of detail to the display views and designating some of the display views as subviews of other display views. An operator application obtains the defined layout and display view hierarchy and presents the display views at an operator workstation according to the obtained layout and/or display view hierarchy.

Abstract: To provide a trusted, secure, and immutable record of transactions within a process plant, techniques are described for utilizing a distributed ledger in process control systems. The distributed ledger may be maintained by nodes which receive transactions broadcasted from field devices, controllers, operator workstations, or other devices operating within the process plant. The transactions may include process plant data, such as process parameter data, product parameter data, configuration data, user interaction data, maintenance data, commissioning data, plant network data, and product tracking data. The distributed ledgers may also be utilized to execute smart contracts to allow machines such as field devices to transact by themselves without human intervention. In this manner, recorded process parameter values and product parameter values may be retrieved to verify the quality of products.

Abstract: A smart process control switch can implement a lockdown routine to lockdown its communication ports exclusively for use by devices having known physical addresses, enabling the smart process control switch to prevent new, potentially hostile, devices from communicating with other devices to which the smart process control switch is connected. Further, the smart process control switch can implement an address mapping routine to identify “known pairs” of physical and network addresses for each device communicating via a port of the smart process control switch. Thus, even if a new hostile device is able to spoof a known physical address in an attempt to bypass locked ports, the smart process control switch can detect the hostile device by checking the network address of the hostile device against the expected network address for the “known pair.

Abstract: To provide a trusted, secure, and immutable record of storage operations executed by a storage center for storing measurement data provided by a process plant, techniques are described for utilizing a distributed ledger. When a data contributor such as a process plant generates measurement data, an encrypted version of a set of measurement data is transmitted to a storage center for secure storage of the measurement data. In some instances, the data contributor divides the set of measurement data into several subsets and transmits each subset of encrypted measurement data to a different storage center. Furthermore, the storage center generates a transaction for the storage operation which is recorded in a distributed ledger. When a data subscriber retrieves the encrypted measurement data from a storage center, the data subscriber can verify the authenticity of the data based on the information recorded in the distributed ledger.

Abstract: To provide a trusted, secure, and immutable record of transactions within a process plant, techniques are described for utilizing a distributed ledger in process control systems. The distributed ledger may be maintained by nodes which receive transactions broadcasted from field devices, controllers, operator workstations, or other devices operating within the process plant. The transactions may include process plant data, such as process parameter data, product parameter data, configuration data, user interaction data, maintenance data, commissioning data, plant network data, and product tracking data. The distributed ledgers may also be utilized to execute smart contracts to allow machines such as field devices to transact by themselves without human intervention. In this manner, recorded process parameter values and product parameter values may be retrieved to verify the quality of products.

Abstract: The described techniques enable a skid communicator tool to quickly change network settings to those required by a particular skid or network in a process control environment with which a user of the tool wishes to establish communication. These techniques are helpful because skids and networks in process control environments often require different network settings for any device attempting to communicate with the skids or network, and a user often must manually load these network settings every time she wants to communicate with a different network or skid. By contrast, the techniques enable the skid communicator tool to seamlessly connect to, disconnect from, and reconnect to any of the skids or other networks requiring different network settings with minimal input from the user, thus enabling a user to easily move through and interact with different areas, units, or equipment of the process control environment.

Abstract: Methods and apparatus are disclosed for security event detection through virtual machine introspection. Example methods involve monitoring usage of a plurality of resources by a first virtual machine executing on a computing device by a monitoring agent, the monitoring agent executing on the computing device separate from the first virtual machine. Example methods further involve detecting a potential security event by comparing the usage of the plurality of resources to resource usage patterns. Example methods further involve assigning a severity level to the detected potential security event, and initiating a security action defined for the assigned severity level.

Abstract: A smart process control switch can implement a lockdown routine to lockdown its communication ports exclusively for use by devices having known physical addresses, enabling the smart process control switch to prevent new, potentially hostile, devices from communicating with other devices to which the smart process control switch is connected. Further, the smart process control switch can implement an address mapping routine to identify “known pairs” of physical and network addresses for each device communicating via a port of the smart process control switch. Thus, even if a new hostile device is able to spoof a known physical address in an attempt to bypass locked ports, the smart process control switch can detect the hostile device by checking the network address of the hostile device against the expected network address for the “known pair.

Abstract: An edge gateway system securely delivers and exposes data generated by and/or related to a process plant for consumption by external systems, and includes a field-facing component that stores interest lists indicating the particular data that is allowed to be exposed by the field-facing component. Each interest list is defined (e.g., manually and/or automatically) in accordance with an exposable data type system extracted from (in some cases, multiple different) configurations of the process plant, and may include multiple types of data (e.g., control, I/O, diagnostic, device, historical, etc.) that collectively represent a particular named entity of the plant. The field-facing component obtains the process plant-related data indicated by the interest lists, and provides the obtained field content data to an edge-facing component of the edge gateway system for exposure to external systems, for example, by streaming and/or publishing the obtained data to the edge-facing component.

Abstract: Techniques for streaming big data in a process plant are disclosed. Generally, these techniques facilitate storage or communication of process control data, including alarms, parameters, events, and the like, in near real-time. Receivers of big data, such as big data historians or devices requesting specific data, are configured via an initial set of metadata, and thereafter receive updated metadata upon requesting it from the transmitting device, such as when the receiving device encounters an identifier in the data, which identifier was not defined in the metadata previously received.