Operating system and method for checking a relationship between a process alarm of a process object displayed visually on an operator client of a process control system and output acoustically

A method for checking the relationship between a process alarm of a process object displayed visually on an operator client of a process control system and output acoustically, wherein an operator server of the process control system is provided with an alarm message component for preparing process alarms to be output acoustically and for transmitting these process alarms to an alarm output, and is provided with an alarm display component for preparing process alarms to be output visually and for transmitting these process alarms to the operator client, on which the process alarms can be displayed, where the output of the respective acoustic process alarms can be deactivated via an operator input on the operator client such that an operator can determine at any time whether an inconsistency is present between an alarm output acoustically and visually.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The invention relates to an operator system and a method for checking the relationship between a process alarm of a process object displayed visually on an operator client of a process control system and output acoustically.

2. Description of the Related Art

In process control technology, particularly within the scope of the operation and monitoring of process systems, graphic displays are provided for process objects, e.g., process objects in the form of measuring points, tanks, valves, sensors, actuators, where the graphical displays associated with these process objects, such as displays in the form of image symbols of a system image, block symbols for process object monitoring, faceplates for process object operation, sequence of events displays and/or image hierarchies dynamized with group alarms, . . . , are shown on an operator client of an operator system. In the event that an operator is to be notified of a process alarm of a process object, this alarm can be provided to the operator both visually, e.g., as what is known as an “alarm banner” on the operator client and also acoustically in the form of an alarm tone by way of a suitable output device. In such cases, the operator can mute the alarm tone, by the operator selecting what is known as an “alarm annunciator mute” button displayed on the operator client in the upper monitor area adjacent to the alarm banner of the operator client. If the operator mutes the recently output alarm tone of an active alarm from a first point in time to (n=1, 2, . . . ) because the operator acknowledged the alarm, for instance, then the alarm tone of a further active alarm activated from a second point in time tn-1(n=1, 2, . . . ) will be played back or output immediately. An active alarm is understood to mean an alarm that has not yet been acknowledged by an operator, because the operator has not yet processed this alarm, for instance, or has not yet taken any suitable measures with respect to a suitable process operation on account of this alarm.

A visually output alarm banner and an output alarm tone are typically consistent with one another, which means that the output alarm tone “matches” with the alarm shown in the alarm banner. It may occur, however, that a number of active alarms occur and a number of operators “mute” the associated alarm tones, even though the alarms are not yet processed and acknowledged. This can rapidly result in an inconsistency between the output alarm tone and the displayed alarm banner, which means that an operator hears an alarm tone that does not “match” or “is not consistent” with the alarm banner displayed and that can also not be located. On account of this, the operator cannot find the process object that caused the alarm and thus the alarm tone, until all previously muted alarms are processed and acknowledged. The operator is also unable to foresee the point in time at which the process object is found, if the inconsistency only occurs once.

EP 1 950 639 A1 discloses a method for operating a process system, in which a number of items of alarm information for showing inappropriate operating procedures is generated on a process level.

WO 2010/130343 A2 discloses an alarm management system and a method associated therewith for managing alarm messages from measured values, process variables and/or status messages of a technical system or a technical process.

SUMMARY OF THE INVENTION

In view of the foregoing, it is an object of the present invention to provide an operation system and a method via which an operator can determine at any time whether an inconsistency is present between a process alarm output acoustically and visually.

This and other objects and advantages are achieved in accordance with the invention by a method in which an alarm display component is queried by the alarm message component to determine which process alarm is currently output visually, where the alarm message component is used to check whether the process alarm currently output visually deviates from the process alarm currently output acoustically and the deviation is shown on the operator client.

The objects are also achieved in accordance with the invention by an operator system in which the alarm message component is configured to query the alarm display component to determine which process alarm is currently output visually, check whether the process alarm currently output visually deviates from the process alarm currently output acoustically and to receive and show the deviation transmitted by the alarm message component.

It is advantageous that the requirement for a more efficient and improved alarm management is created, as a result of which in particular the availability of a process system can be increased.

In one embodiment of the invention, it is possible for an operator to monitor and operate the process object emitting and generating the alarm at any time, which shows or forms the source of the acoustically output process alarm.

It should be noted here that a process object has a number of associated facets. For instance, a process image of a server of an operator system comprises process image modules associated with these process objects or operation- and monitoring-relevant process data of these process objects, an automation device comprises automation modules or control modules (CFCs, SFCs, . . . ) associated with the process objects and furthermore a user interface of a client of the operator system has block symbols of a system image associated with the process objects as well as what are known as faceplates, where the system images are provided for process monitoring and the faceplates are provided for process management or process operation.

DETAILED DESCRIPTION OF THE EXEMPLARY EMBODIMENTS

The same parts shown inFIGS. 1 to 4are provided with the same reference characters.

Components of a process control system which, in the present exemplary embodiment, comprise an operator server2and an operator client3and an automation device4, are designated with reference numeral1inFIG. 1. It should be understood the process control system can have a plurality of automation devices which, on the one hand, are connected via a plant bus5ato the operator server2and, on the other hand, via a further bus (not shown) to decentralized peripherals, to which a plurality of field devices (sensors, actuators) are connected. Furthermore, an operator server2and an operator client3are only shown in the present example. Further, it should be understood operator servers and operator clients can also be provided, where typically an operator server and an operator client each form an operator system and an operator station and the operator clients and the operator servers are connected to a terminal bus5b.

As mentioned, graphical displays are provided for process objects in process control technology particularly within the scope of the operation and monitoring of process systems, where process objects have process objects in the form of measuring points, tanks, valves, sensors, actuators, a number of facets, for instance. A process image6of the operator server2of the operator system therefore has process image modules7,8associated with process objects, for instance, the automation device4has automation modules9,10associated with these process objects and furthermore a user interface11of the operator client3has faceplates and block symbols that can be displayed in a system image and are associated with these process objects. The block symbols are provided for monitoring parameters and process values of the process objects, the system image is provided for process monitoring and the faceplates are provided for process management and process operation, where an operator can change the parameters of the process objects within the scope of the process management and process operation using the faceplate.

The operator server2is configured to reproduce all alarms of the respective process objects, which sound during the process control, onto an alarm tag12,13of the process image module7,8of the process image6that is associated with the respective process object. These alarms indicate process malfunctions and are transmitted via the automation modules9,10of the automation device4to the operator server2, which stores the alarms in its memory14.

In the present exemplary embodiment, the operator server2has an alarm display component in the form of an alarm banner component15and an alarm message component in the form of an alarm annunciator component16, which reads each alarm stored in the memory12. The alarm banner component15prepares the read-out alarms to form process alarms to be output or displayed visually, and the alarm annunciator component16prepares the read-out alarms to form process alarms to be output acoustically. The alarm banner component15transmits the respectively prepared alarm to the user interface11, which is configured to process the prepared alarm for display on the operator client3. In the present example, alarm banners17,18that represent the active (still unacknowledged) alarms output or displayed visually are shown on the operator client3. Accordingly, the alarm annunciator component16transmits the prepared process alarm to be output acoustically to a suitable (acoustic) output device, which outputs alarm tones assigned to these alarms. Moreover, the alarm annunciator component16transmits prepared data for displaying a mute button19and a loop-in button20to the user interface11, where these buttons19,20are arranged adjacent to the alarm banner17,18. The loop-in button20is, as shown again below, only then faded in if the currently displayed alarm banner does not match the acoustically output alarm tone and an inconsistency is therefore present between the visually output and acoustically output process alarm. In the event that the operator activates the mute button19, by the operator selecting this mute button19, such as using a mouse, the annunciator component16mutes the correspondingly just output alarm tone where, to this end, this component16deactivates the correspondingly prepared process alarm to be output acoustically.

In order to determine or check whether the process alarm just output visually deviates from the process alarm just output acoustically, the annunciator component16interrogates the alarm banner component15as to which alarm the alarm banner component15is currently preparing for a visual display. In the event that the annunciator component16identifies that the alarm currently prepared by the alarm banner component15and therefore output visually deviates from the alarm prepared by the annunciator component16and therefore currently output acoustically, the annunciator component16activates the loop-in button20for display on the operator client3. By displaying or showing the loop-in button20, the operator is notified of the deviation, as a result of which the operator identifies that the currently displayed alarm banner does not match the acoustically output process alarm or the alarm tone to be output. There is therefore an inconsistency between the process alarm output visually and acoustically.

Reference is made below toFIGS. 2 to 4, in which the alarm banners17,18are shown on the operator client3, which represent the alarms output or displayed visually, where these alarms, as mentioned, are not yet processed and acknowledged by the operator and where the alarm banner17shows the most up-to-date active alarm prepared from a point in time tn(n=1, 2, . . . ) and the alarm banner18shows the further currently prepared alarm which is active from a point in time tn-1(n=1, 2, . . . ).

Here, it is initially assumed that the operator has muted the acoustically output alarm associated with the alarm banner17, which is shown to the operator via the mute button19(alarm tone switched off) (FIG. 2). The loop-in button20is not activated and faded in, which indicates to the operator that the alarm output visually and acoustically are consistent with one another.

It may occur that the operator mutes an alarm tone, e.g., the alarm tone of the most up-to-date active alarm without acknowledging this alarm. In the present example, it is assumed that the operator switches off the alarm tone for the not yet acknowledged alarm (active from time instant tn), which is displayed visually via the alarm banner17(FIG. 3). As a result of this alarm tone being muted, the alarm tone of the next active alarm sounds (active from the point in time tn-1), which is displayed visually in the present example via the alarm banner18. In other words, an alarm tone of an alarm that belongs to the visually output alarm banner18or is assigned to the alarm banner18is output to the visually output alarm (alarm banner17), as a result of which inconsistency prevails or is present. In order to show this inconsistency to the operator, the annunciator component16is used to activate the loop-in button20and to fade it in onto the operator client3and the deviation of the currently visually output alarm from the currently acoustically output alarm is therefore shown on the operator client3.

In order to enable the operator to be able to monitor and operate the process object, producing or generating the alarm at any time, which shows or forms the source of the acoustically output process alarm, a system image specification22,23is entered in the process image modules7,8associated with the process objects in each case, which indicates the system image in which the respective process object outputs alarms. The annunciator component16is configured to read out the system image specifications22,23from the process image modules7,8generating the respective alarm and producing the alarm tone, where on account of the system image specifications22,23, the display of the system image, of parts of the system image, of a block symbol associated with the process object and/or a faceplate associated with the process object is triggered on the operator client3if/when the operator selects the loop-in button20of the operator client3showing the deviation using a mouse, for instance.

In the present example (FIG. 4), after selecting or actuating the loop-in button20, despite an inconsistency between the alarm output visually and acoustically, a block symbol21is faded in the system image or graphically highlighted among the plurality of block symbols in the system image, which system image represents the process object producing the alarm tone and which is provided for the process monitoring. As a result of the fading-in within the system image, the process object generating or outputting the alarm tone is located. In the event that no block symbol is provided for this process object, a faceplate associated with this process object is faded in or opened for process operation.

An alarm message component that can be correlated is produced using the measures described, where an operator can determine at any time whether an inconsistency is present between an alarm output acoustically and visually. Furthermore, an operator can navigate to the source of an alarm tone, i.e., to the process object producing the alarm, at any time, even in the event of an inconsistency between an alarm output acoustically and visually. The operation and monitoring of process systems is improved in the context of “alarm management”, as a result of which the availability of a process system is increased.

FIG. 5is a flowchart of the a method for checking the relationship between a process alarm of a process object displayed visually on an operator client3of a process control system1and output acoustically, where an operator server2of the process control system1includes an alarm message component16for preparing process alarms to be output acoustically and for transmitting these process alarms to an alarm output, and includes an alarm display component15for preparing process alarms to be output visually and for transmitting these process alarms to the operator client3, on which the process alarms can be displayed, and wherein an output of respective acoustic process alarms is deactivateable via an operator input on the operator client3.

The method comprises querying the alarm display component15by the alarm message component16to determine which process alarm is currently output visually, as indicated in step510.

Next, the alarm message component16is utilized to check whether the process alarm currently output visually deviates from the process alarm currently output acoustically, as indicated in step520.

Next, the deviation is displayed on the operator client3, as indicated in step530.