# Patent

## Title
Intrinsically safe field maintenance tool with power islands

## Abstract

A hand held configuration for coupling to a two wire process control loop for use in configuring and monitoring field units coupled to the two wire process control loop is provided which includes a power supply, and at least two power islands. The power islands are configured to electrically isolate electrical components in one power island from electrical components in another power island. Independent power connections are provided between each power island and the power supply.

## Background
BACKGROUND OF THE INVENTION
Intrinsically safe field maintenance tools are known. Such tools are highly useful in the process control and measurement industry to allow operators to conveniently communicate with and/or interrogate field devices in a given process installation. Examples of such process installations include petroleum, pharmaceutical, chemical, pulp and other processing installations. In such installations, the process control and measurement network may include tens or even hundreds of various field devices which periodically require maintenance to ensure that such devices are functioning properly and/or calibrated. Moreover, when one or more errors in the process control and measurement installation is detected, the use of an intrinsically safe hand held field maintenance tool allows technicians to quickly diagnose such errors in the field.
One such device is sold under the trade designation Model 275 HART® Communicator available from Fisher-Rosemount Systems, Inc., of Eden Prairie, Minn. HART® is a registered trademark of the HART® Communication Foundation. The Model 275 provides a host of important functions and capabilities and generally allows highly effective field maintenance. However, the Model 275 does not currently support communication with non-HART® (Highway Addressable Remote Transducer) devices.
The HART® protocol has a hybrid physical layer consisting of digital communication signals superimposed on the standard 4-20 mA analog signal. The data transmission rate is approximately 1.2 Kbits/SEC. HART® communication is one of the primary communication protocols in process industries.
Another major process industry communication protocol is known as the FOUNDATIONTM fieldbus communication protocol. This protocol is based on an ISA standard (ISA-S50.01-1992, promulgated by the Instrument Society of America in 1992). A practical implementation was specified by the Fieldbus Foundation (FF). FOUNDATIONTM Fieldbus is an all-digital communication protocol with a transmission rate of approximately 31.25 Kbits/SEC.
SUMMARY OF THE INVENTION
A hand held configurator for coupling to a two wire process control loop is provided for use in configuring and monitoring field units coupled to the two wire process control loop. The configurator includes a power supply, loop coupling circuitry configured to couple to the two wire process control loop and at least two power islands which are configured to electrically isolate electrical components in one power island from electrical components in another power island. Independent power connections are provided between each power island and the power supply. A series resistor electrically connects two power islands to limit energy transfer therebetween.



BRIEF DESCRIPTION OF THE DRAWINGS
FIG. 1 illustrates a multidrop wiring configuration.
FIGS. 2A and 2B illustrate ways in which an intrinsically safe field maintenance tool may be connected to a process device.
FIG. 3 is a diagrammatic view of field maintenance tool in accordance with an embodiment of the present invention.
FIG. 4 is a more detailed block diagram of the intrinsically safe maintenance tool illustrated in FIGS. 2A, 2B and 3.



DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
An improved intrinsically safe field maintenance tool in accordance with embodiments of the present invention is operable with at least two industry standard device descriptions. The tool includes at least two power islands which are electrically isolated in a manner to meet intrinsic safety requirements. In one specific embodiment, an improved intrinsically safe field maintenance tool implements both HART® and fieldbus Device Description Language (DDL). The improved field maintenance tool is used to maintain both two-wire and four-wire (i.e. external power) field devices using these protocols. Preferably, both configuration and calibration are supported via DDL technology. DDL technology is known and additional reading regarding Device Description Language can be found in U.S. Pat. No. 5,960,214 to Sharp, Jr. et al.
The improved intrinsically safe field maintenance tool also facilitates a convenient display of diagnostic information from individual field devices (i.e. status bits) as well as providing advanced protocol-specific network troubleshooting features. Further details and benefits of the improved intrinsically safe field maintenance tool in accordance with embodiments of the present invention will be appreciated after reading the description below.
FIG. 1 illustrates an exemplary system in which embodiments of the present invention are useful. System 10 includes controller 12, I/O and control sub-system 14, intrinsic safety (IS) barrier 16, process communication loop 18 and field devices 20. Controller 12 is coupled to I/O and control sub-system 14 via link 21 which can be any suitable link such as a local area network (LAN) operating in accordance with Ethernet signaling protocols or any other suitable protocol. I/O and control sub-system 14 is coupled to intrinsic safety barrier 16 which in turn is coupled to process communication loop 18 to allow data communication between loop 18 and I/O and control sub-system 14 in a manner that limits energy passing therethrough.
In this illustration, process communication or process control loop 18 is a FOUNDATIONTM fieldbus process communication loop and is coupled to field devices 20, which are shown coupled arranged in a multi-drop configuration. An alternative process communication loop (not shown) is an HART® process communication loop. FIG. 1 illustrates a multi-drop wiring configuration that vastly simplifies system wiring compared to other topologies such as the star topology. Multi-drop HART® configurations support a maximum of 15 devices, while multi-drop FOUNDATIONTM Fieldbus configurations support a maximum of 32 devices.
Intrinsically safe field maintenance tool 22 is coupled to loop 18 as illustrated in FIG. 1. When coupled to a process control loop as shown, tool 22 can perform a number of the communication and diagnostic functions. Tool 22 can couple to and interact with HART® process communication loops in much the same way the presently available Model 275 HART® Communicator can.
FIG. 2A illustrates tool 22 coupled to HART®-compatible device 20 via terminals 24. Alternately, tool 22 can communicate with a HART® compatible device on the process instrumentation communication loop, such as device 24 via the loop itself, as indicated in FIG. 2B.
FIG. 3 is a diagrammatic view of field maintenance tool 22 in accordance with embodiments of the present invention. As illustrated, tool 22 preferably includes three communication terminals 26, 28 and 30 which facilitate coupling tool 22 to process communication loops and/or devices in accordance with at least two process industry standard protocols. For example, when tool 22 is to be coupled to a loop of a first process industry standard protocol, such coupling is effected using terminal 26 and common terminal 28. Accordingly, the connection then is made via media access unit 32 which is configured to interact upon the process communication loop in accordance with the first industry standard protocol. Additionally, when tool 22 is to be coupled to a process and control measurement loop that operates in accordance with a second industry standard protocol, such connection is made via common terminal 28 and terminal 30. Thus, such a connection is effected via the second media access unit 34 which is configured to interact upon the process communication loop in accordance with the second industry standard protocol. Both media access units 32 and 34 are coupled to processor 36 which receives data from one of the media access units and interprets that data accordingly.
Processor 36 is also coupled to keypad module 38 and display module 40. Keypad module 38 is coupled to the keypad on the housing of tool 22 in order to receive various keypad inputs from a user. Display module 40 is coupled to the display to provide data and/or a user interface.
In accordance with various embodiments of the present invention, tool 22 includes additional hardware enhancements that facilitate increased functionality over that generally available in the prior art. In one embodiment, tool 22 includes infrared data access port 42 which is coupled to processor 36 to allow tool 22 to transfer information to and from a separate device using infrared wireless communication. One advantageous use of port 42 is for transferring and/or updating Device Descriptions stored in one or more memories of tool 22. A Device Description (DD) is a software technology used to describe parameters in a field device in a computer-readable format. This contains all of the information necessary for a software application being executed on processor 36 to retrieve and use the parametric data. The separate device such as computer 12, can obtain a new Device Description from floppy disk, CD ROM, or the internet and wirelessly transfer the new Device Description to tool 22.
Removable memory module 44 is removably coupled to processor 36 via port/interface 46. Removable memory module 44 is adapted to store software applications that can be executed instead of primary applications on processor 36. For example, module 44 may contain applications that use the HART® or FOUNDATIONTM fieldbus communication port, to provide a comprehensive diagnostic for a given process valve. Additionally, module 44 may store software applications that aid in the calibration or configuration of specific devices. Module 44 may also store a software image for a new or updated primary device application that can subsequently be transferred into the non-volatile memory of device 36 to enable execution of the updated application. Further still, module 44 provides removable memory storage for the configuration of multiple devices allowing a field maintenance operator to acquire a relatively substantial amount of device data and conveniently store or transfer such data by simply removing module 44.
Preferably, module 44 is adapted to be replaceable in hazardous areas in a process plant. Thus, it is preferred that module 44 comply with intrinsic safety requirements set forth in: APPROVAL STANDARD INTRINSICALLY SAFE APPARATUS AND ASSOCIATED APPARATUS FOR USE IN CLASS I, II AND III, DIVISION 1 HAZARDOUS (CLASSIFIED) LOCATIONS, CLASS NUMBER 3610, promulgated by Factory Mutual Research October, 1988. Adaptations to comply with additional industrial standards such as Canadian Standards Association (CSA) and the European CENELEC standards are also contemplated. Examples of specific structural adaptations for memory module 44 and/or interface 46 to facilitate compliance include energy limiting circuits such that the operating voltage level of memory module 44 is sufficiently low that stored energy within module 44 cannot generate a source of ignition. Additionally, module 44 may include current limiting circuitry to ensure that in the event that specific terminals on module 44 are shorted, that the discharge energy is sufficiently low that ignition is inhibited. Specific implementations of these features are set forth in connection with FIG. 4. Interface 44 may include physical characteristics that are specifically designed to prevent exposure of electrical contacts on memory module 44 to an external environment while simultaneously allowing suitable interface contacts to make electrical contact with module 44. For example, module 44 may include an over-modeling that can be pierced or otherwise displaced by coupling module 44 to interface 46.
Tool 22 also preferably includes expansion memory module 48 coupled to processor 36 via connector 50 which is preferably disposed on the main board of tool 22. Expansion memory module 48 may contain Device Descriptions of first and second industry standard protocols. Module 48 may also contain license code(s) that will determine the functionality of tool 22 with respect to the multiple protocols. For example, data residing within module 48 may indicate that tool 22 is only authorized to operate within a single process industry standard mode, such as the HART® protocol. Ultimately, a different setting of that data within module 48 may indicate that tool 22 is authorized to operate in accordance with two or more industry standard protocols. Module 48 is preferably inserted to a connector 50 on the main board and may in fact require partial disassembly of tool 22, such as removing the battery pack to access port 50.
FIG. 4 is a more detailed block diagram of tool 22. Tool 22 generally includes power supply circuitry 100 and power islands 102, 104 and 106. The keypad 38 shown in FIG. 3 is divided into a touch panel 38A and a keyboard 38B in FIG. 4. A charger/adapter 110 couples to power supply circuitry 100 as does a battery pack 112.
Power supply circuitry 100 provides power to power islands 102, 104 and 106 using power received from charger/adapter 110 or battery pack 112. Battery pack 112 includes batteries 120 which couple to power supply circuitry 100 through a fuse 122. Power supply circuitry 100 includes charger interface circuitry 130, isolator 132, power supply circuitry 134, and voltage regulator 136. Power island 102 includes keyboard and battery management circuitry 140. Power island 104 includes processor 136. Power island 106 includes loop I/O circuitry 150 which implements MAU 32 and MAU 34 shown in FIG. 3. The infrared interface 42 is also located in power island 106.
In the present invention, the power supply 100 and the power islands 102, 104 and 106 are isolated using passive and active techniques. Power supply 100 receives power from charger/adapter 110 or battery pack 112. When charger/adapter 110 is used power supply 100 charges battery 120 or battery pack 112. The power supply 100 is controlled by keyboard/battery management circuitry 140 and is isolated from circuitry 140 by isolator 132 which includes a plurality of resistors 160 and Zener diode 162. Resistors 160 act as passive current limiters and diode 162 act as passive voltage limiters. Power from battery pack 112 is provided to power island 102 through voltage regulator 136 and resistor 164. A Zener diode 166 connects the power connection to ground. Connection 172 from power supply 134 provides a power on/off connection. Active current limiters 174 and 176 couple power supply 134 to power islands 104 and 106, respectively. SCR 178 limits the voltage applied to current limiters 174 and 176. An electrical ground connection 180 is also provided between power supply circuitry 100 and power islands 102, 104 and 106. A power on/off connection 190 selectively closes switch 192 to thereby provide power to power island 106.
Keyboard/battery management circuitry 140 couples to a touch pad panel 38A and a keyboard 38B and is configured to receive user input which is provided to processor 36 over connection 200 through a resistor 202. Circuitry 140 also couples to power connection 204 and 206 through resistors 208 and 210, respectively. These connections allow circuitry 140 to sense whether power is being supplied to power islands 104 and 106, respectively. Zener diodes 214 and 215 limit the voltage seen between the power islands.
Power island 104 includes processor 36 which couples to infrared interface 42 through resistor 230 and to loop I/O circuitry 150 through resistor 232. Processor 36 also couples to display 40 through power island 106 and display drivers 240 and 242 and resistors 244 and 246.
Loop I/O circuitry 150 of power island 106 receives power from a voltage regulator 250 through resistors 252 and 254. A Zener diode 256 limits the voltage applied to circuitry 150.
In order to meet intrinsic safety requirements, it is important that the surface temperature of small components under fault conditions be limited. Limiting component surface temperature will prevent ignition of surrounding material. For example, if the total surface area of a component is 20 mm2, the power dissipation by the component must be limited to 1.3 watts. For systems with higher total power consumption, it is necessary to split the power between separate power islands. Using this power island technique, it is possible to exceed the 1.3 watt limit.
In the present invention, the power islands 102, 104 and 106 are supplied power through separate power connections which are connected to separate power supplies or through barriers. The power source for each power island is limited by voltage and current barriers to ensure that the maximum allowed power draw is not exceeded. Both passive barriers are used, such as a resistor current limiter and a Zener diode voltage limiter, as well as active limiters. For example, SCR 178 will close (short circuit) if the voltage exceeds a predetermined limit. Similarly, current limiters 174 and 176 activate SCR 178 if the current draw exceeds a predetermined limit. In both cases if the voltage or current exceeds the limits, SCR 178 will be activated and short circuit the power supply output.
In order to avoid energy transfers between the various islands 102, 104 and 106, sufficient physical space is provided between the islands. The distance is defined by the voltages on the island, the voltage differences and the particular intrinsic safety standard being met. Ground routes are also provided from the islands such that all of the islands are coupled to the same ground. The ground routes must be sufficient to carry the largest possible current. If the ground routes are fabricated as traces on a circuit board, the width of the trace must be sufficient to carry the desired current. Alternatively, a multi-layered trace can be provided.
Within each power island 102, 104 and 106, increased voltages can be generated using a DC to DC converter if the voltage required is greater than that provided by the power supply. For example, voltage regulator 250 can increase the voltage level provided from the power supply. The converter outputs are limited with voltage barriers which limit the maximum voltage applied. The greatest possible voltage value present in a particular island, along with the voltage of adjacent islands, defines the necessary spacing between the islands.
Various signal paths are provided between islands 102, 104 and 106 to allow signals to pass therebetween. Resistors are provided in the signal paths to limit the energy transfer. For the various signal paths, the following rules must be followed:

    
    
        The maximum power transferred from one island to another through a signal path is maximum if the internal resistance of a particular island has the same value as the series resistor placed in the signal path. This yields the formula for maximum power Pmax=(I2/R)/4 where I is the current level and R is the series resistance value.
        The maximum power calculation must be done for each island, and calculated in each direction through each signal path, in order to get the maximum power transfer into all of the islands via all of the signal paths.
        A maximum power which an island is allowed to receive from the power supply must be such that the total power received is less than the desired maximum [i.e. 1.3 watts]. Thus, the maximum power allowed which an island is to receive to the power supply, plus the maximum power which an island may receive through all of the signal paths, must sum to less than 1.3 watts.
        If the signal voltage between islands are different, the signal path must be blocked with barrier diodes.
    
    


A selection of the series resistors can effect the high frequency characteristics of the signal paths between islands. The resistance value together with the internal capacitance of the circuitry act as a high frequency filter. In order to reduce the capacitance due to the wiring, driver and level shifter circuits are preferably placed close to the series resistors an the island borders to thereby reduce the capacitance.
In some instances, very small components with a total component surface area of less than 20 mm2, and the surface temperature limitation having a maximum value of 275° C., the limit may be exceeded for a particular power island even with the supplied power of 1.3 watts. In the present invention, a “subpower island” can be used to overcome this limitation. A subpower island is contained within a power island and is separated with a desired physical spacing. The same rules described above with respect to power islands are applied to the subpower island. Current limiting series resistors between the power island and the subpower island reduce the maximum possible power inside the subpower island. The maximum possible surface temperature of components inside the subpower island can be controlled by choosing the appropriate value of the current limiting series resistors. The signal paths between the power island and the subpower island thus reduce the power available within the subpower island. An example of subpower island is shown as loop I/O circuitry 150 in FIG. 4 which is a part of power island 106. Resistors 232, 252 and 254 limit the maximum power which may be supplied to the subpower island 150.
Although the present invention has been described with reference to preferred embodiments, workers skilled in the art will recognize that changes may be made in form and detail without departing from the spirit and scope of the invention.

## Claims

1. A hand held configurator for coupling to a two wire process control loop for use in configuring and monitoring field units coupled to the two wire process control loop, comprising:
loop coupling circuitry configured to couple to the two wire process control loop;
a first power island having a first maximum allowed power draw based upon a maximum allowed surface temperature of a first component under a fault condition;
a second power island having a second maximum allowed power draw based upon a maximum allowed surface temperature of a second component under a fault condition;
a power supply configured to provide total power to the power islands which is greater than a sum of the first maximum allowed power and the second maximum allowed power; and
barrier circuitry coupled to the first and second power islands configured to limit power entering the first power island to a value less than the first maximum allowed power draw and further configured limit power entering the second power island to a value less than the second maximum allowed power draw to thereby maintain intrinsic safety of the first and second power islands.

2. The apparatus of claim 1 including a current limiter in the barrier circuitry to limit current supplied to a power island.

3. The apparatus of claim 1 including a voltage limiter in the barrier circuitry.

4. The apparatus of claim 1 wherein at least one of the power islands includes a subpower island therein which is separated by a desired spacing distance and coupled to through at least one series resistor.

5. The apparatus of claim 2 wherein the current limiter comprises an active component.

6. The apparatus of claim 2 wherein the current limiter comprises a passive component.

7. The apparatus of claim 3 wherein the voltage limiter comprises an active component.

8. The apparatus of claim 3 wherein the voltage limiter comprises a passive component.

9. The apparatus of claim 1 wherein at least one power island includes voltage step up circuitry to increase a voltage level within the power island.

10. The apparatus of claim 1 wherein the power supply comprises a battery.

11. The apparatus of claim 1 wherein power supplied to the first power island is disconnected if the power draw of the power island exceeds the first maximum allowed power draw.

12. The apparatus of claim 1 wherein at least one power island includes a microprocessor.

13. The apparatus of claim 1 wherein at least one power island includes loop input/output circuitry for coupling to the two-wire process control loop.

14. The apparatus of claim 1 wherein at least one power island includes a display driver.

15. The apparatus of claim 1 wherein at least one power island includes keyboard circuitry.

16. The apparatus of claim 1 wherein at least one power island includes battery management circuitry.

17. The apparatus of claim 1 wherein the power islands are coupled to electrical ground through electrical connections configured to carry a desired maximum current level.

18. The apparatus of claim 1 wherein the first maximum power draw is 1.3 watts.

19. The apparatus of claim 1 wherein the barrier circuitry includes a barrier diode electrically connecting the first and second power islands which operate at differing voltage levels.

20. The apparatus of claim 1 including driver and/or level shifter circuits are located in close proximity to borders of first power island to thereby reduce capacitance in a signal pass therebetween.

21. The apparatus of claim 1 including communication circuitry for use in communicating on the two wire process control loop.

22. The apparatus of claim 1 wherein the first and second maximum allowed power draws are the same.

23. The apparatus of claim 1 wherein the first and second power islands are spaced apart to prevent energy transfer therebetween under the fault condition.

24. The apparatus of claim 1 wherein the maximum allowed surface temperature is 275° C.

25. The apparatus of claim 1 wherein a minimum surface era of the first component is 20 mm2.