# Patent

## Title
Systems and methods for rule-based control system reliability

## Abstract

In one embodiment, a system includes system includes a data collection system configured to collect a data from a control system. The system further includes a configuration management system configured to manage a hardware configuration and a software configuration for the control system based on the data. The system additionally includes a rule engine configured to use the data as input and to output a health assessment by using a rule database configured to store at least one rule, and a report generator configured to provide a health assessment for the control system. The system also includes a rule editor configured to create the at least one rule, update the at least one rule, delete the at least one rule, or a combination thereof.

## Background
BACKGROUND OF THE INVENTION
The subject matter disclosed herein relates to reliability operations, and more specifically, to controller reliability operations.
Control systems, including industrial control systems, may include a variety of components and subsystems participating in a process. For example, a controller may include one or more processors, I/O subsystems, a memory, and the like. The controller may be operatively coupled to a variety of systems and used, for example, to control an industrial process. However, control systems may be complex, including numerous interrelated components and subsystems. Accordingly, recognizing or predicting a reliability of control system operations may be difficult and time-consuming.
BRIEF DESCRIPTION OF THE INVENTION
Certain embodiments commensurate in scope with the originally claimed invention are summarized below. These embodiments are not intended to limit the scope of the claimed invention, but rather these embodiments are intended only to provide a brief summary of possible forms of the invention. Indeed, the invention may encompass a variety of forms that may be similar to or different from the embodiments set forth below.
In a first embodiment, a system includes a data collection system configured to collect a data from a control system. The system further includes a configuration management system configured to manage a hardware configuration and a software configuration for the control system based on the data. The system additionally includes a rule engine configured to use the data as input and to output a health assessment by using a rule database configured to store at least one rule, and a report generator configured to provide a health assessment for the control system. The system also includes a rule editor configured to create the at least one rule, update the at least one rule, delete the at least one rule, or a combination thereof.
In a second embodiment, a method includes inputting at least one control system health assessment rule by using a rule editor, and acquiring a data related to a control system. The method further includes analyzing the data. The method additionally includes analyzing the data to obtain a data analysis by using the at least one control system health assessment rule, and deriving a control system health assessment based on the data analysis.
In a third embodiment, a system includes a non-transitory machine readable medium storing code configured to insert a rule, update the rule, delete the rule, or a combination thereof. The code is additionally configured to acquire a data related to a control system and to analyze the acquired data to obtain a data analysis by using the rule. The code is further configured to derive a control system health assessment based on the data analysis.



BRIEF DESCRIPTION OF THE DRAWINGS
These and other features, aspects, and advantages of the present invention will become better understood when the following detailed description is read with reference to the accompanying drawings in which like characters represent like parts throughout the drawings, wherein:
FIG. 1 is an information flow diagram of an embodiment of a control system health advisor communicatively coupled to plant including a control system;
FIG. 2 is a schematic diagram of an embodiment of the control system health advisor of FIG. 1 communicatively coupled to a control system;
FIG. 3 is a block diagram of an embodiment of the control system health advisor of FIG. 1; and
FIG. 4 is a flowchart of an embodiment of a process useful in deriving a health assessment for a control system;
FIG. 5 is a flowchart of an embodiment of a process useful in creating, updating, and/or deleting health assessment rules;
FIG. 6 is a screen view of an embodiment of a rule editor; and
FIG. 7 is another screen view of an embodiment of the rule editor.



DETAILED DESCRIPTION OF THE INVENTION
One or more specific embodiments of the present invention will be described below. In an effort to provide a concise description of these embodiments, all features of an actual implementation may not be described in the specification. It should be appreciated that in the development of any such actual implementation, as in any engineering or design project, numerous implementation-specific decisions must be made to achieve the developers' specific goals, such as compliance with system-related and business-related constraints, which may vary from one implementation to another. Moreover, it should be appreciated that such a development effort might be complex and time consuming, but would nevertheless be a routine undertaking of design, fabrication, and manufacture for those of ordinary skill having the benefit of this disclosure.
When introducing elements of various embodiments of the present invention, the articles “a,” “an,” “the,” and “said” are intended to mean that there are one or more of the elements. The terms “comprising,” “including,” and “having” are intended to be inclusive and mean that there may be additional elements other than the listed elements.
In certain embodiments, control of operations for an industrial process and associated machinery may be provided by a control system. In these embodiments, the control system may be implemented as a combination of hardware and software components suitable for receiving inputs (e.g., process inputs), processing the inputs, and deriving certain control actions useful in controlling a machinery or process, such as a power generation process, as described in more detail blow. However, the control system may not be as reliable, for example, due to older hardware and software.
Certain corrective maintenance (CM) techniques may be used, useful in repairing or updating the controller after an unexpected maintenance event. However, because the CM techniques are typically applied after the unexpected event, the controlled process may be stopped until the control system is brought back to a desired operating condition. The novel techniques described herein, including prognostic health monitoring (PHM) techniques, may enable a preventative or predictive approach in which control system issues may be identified prior to their occurrence. Accordingly, maintenance actions, such as control system upgrades, part replacements, supply chain order placement, and the like, may be performed in advance, and the control system may be maintained in an operational status for a longer duration. Indeed, stoppages of the controlled process and associated machinery may be substantially minimized or eliminated.
In certain embodiments, rule-based systems and methods, including a rules editor and a method for using the rules editor, may be included, for example, in a controller health advisor suite of software tools, and used to analyze and derive a health assessment for the control system. The health assessment may include a controller readiness, controller recommendations (e.g., upgrade recommendations, parts replacement recommendations, parts ordering recommendations), a configuration report, early warning reports (e.g., early warning outage reports), and access based reports (e.g., role-based access reports). The health advisor suite may additionally include online and offline components, useful in performing the health assessment while the health advisor suite is communicatively coupled either directly to the control system, or coupled indirectly to the control system. Additionally, the health assessment may be provided in real-time or near real-time. The health assessment may be derived continuously and used to update or improve the control system, thus providing for an up-to-date prognosis of the health of the control system.
With the foregoing in mind and turning now to FIG. 1, the figure is an information flow diagram illustrating an embodiment of a controller health advisor system 10 that may be communicatively coupled to a control system 12. The health advisor system 10 may include non-transitory code or instructions stored in a machine-readable medium and used by a computing device (e.g., computer, tablet, laptop, notebook, cell phone, personal digital assistant) to implement the techniques disclosed herein. The control system 12 may be used, for example, in controlling a power plant 14. The power plant 14 may be any type of power producing plant 14, and may include turbomachinery, such as a gas turbine, a steam turbine, a wind turbine, a hydroturbine, a pump, and/or a compressor. It is to be noted that, in certain embodiments, the controller 12 may be used to control a variety of other machinery, and may be disposed in any industrial plant (e.g., manufacturing plant, chemical plant, oil refining plant).
The health advisor system 10 may include a health advisor database 16, a health advisor suite (e.g., suite of software and/or hardware tools) 18, and a knowledge base 20. The health advisor database 16 may store, for example, rule-based information detailing expert knowledge on the workings and possible configurations of the control system 12, as well as knowledge useful in making deductions or predictions on the health of the control system 12. For example, the health advisor database 16 may include expert system rules (e.g., forward chained expert system, backward chained expert system), regression models (e.g., linear regression, non-linear regression), fuzzy logic models (e.g., predictive fuzzy logic models), and other predictive models (e.g., Markov chain models, Bayesian models, support vector machine models) that may be used to predict the health, the configuration, and/or the probability of occurrence of undesired maintenance events (e.g., failure of a power supply, failure of a processor core, failure of an input/output [I/O]) pack, insufficient memory, loose bus connection) related to the control system 12.
The knowledge base 20 may include one or more answers to control system 12 questions or issues, including answers relating to controller configurations, unexpected problems, known hardware or software issues, service updates, and/or user manuals. The knowledge base 20 may additionally include operating history details of the plant 14 and equipment related to the plant 14 (e.g., turbine system 68, valve 72, pump 74). The health advisor suite 18 may update the knowledge base 20 based on new information, such as a control system health assessment 24. Additionally, an online life cycle support tool 22 is provided. The online life cycle support tool 22 may use the health advisor suite 18 and the knowledge base 20 to provide support to customers 26 of the power plant 14. For example, the customers 26 may connect to the online life cycle support tool 22 by using a web browser, a client terminal, a virtual private network (VPN) connection, and the like, and access the answers provided by the knowledge base 20, as well as the health advisor suite 18 and/or the health assessment 24, through the online life cycle support tool 22.
The online life cycle support tool 22 may similarly be used by other entities, such as a contract performance manager (CPM) tasked with administrating contractual services delivered to the plant 14, and/or a technical assistant (TA) tasked with providing information technology and/or other system support to the plant 14. For example, the plant 14 may be provided with contractual maintenance services (e.g., inspections, repairs, refurbishments, component replacements, component upgrades), service level agreements (SLAs), and the like, supported by the CPM and the TA.
The health assessment 24 may be used, for example, to enable a new product introduction (NPI) 28 and/or a root cause analysis (RCA) 30. For example, issues found in the health assessment 24 may aid in identifying issues related to the introduction (e.g., NPI 28) of a new hardware or software component for the control system 12, or the introduction of a newer version of the control system 12. The identified issues may then be used to derive the RCA 30. For example, the health advisor suite 18 may use techniques such as fault tree analysis, linear regression analysis, non-linear regression analysis, Markov modeling, reliability block diagrams (RBDs), risk graphs, and/or layer of protection analysis (LOPA). The RCA 30 may then be used to re-engineer or otherwise update the control system 12 to address any issues found.
The health assessment 24 and/or the knowledge base 20 may also be used to derive engineering opportunities 32 and revenue opportunities 34. For example, controller usage patterns (processor usage, memory usage, network usage, program logs), issues found, frequently asked questions, and the like, may be used to derive engineering changes for the control system 12. The engineering changes may include changing memory paging schemes, memory allocation algorithms, applying CPU optimizations (e.g., assigning process priorities, assigning thread priorities), applying programming optimization (e.g., identifying and rewriting program bottlenecks, using improved memory allocation, using processor-specific instructions), applying networking optimizations (e.g., changing transmit/receive rates, frame sizes, time-to-live (TTL) limits), and so on.
Revenue opportunities 34 may also be identified and acted on. For example, the health assessment 24 may detail certain upgrades to the control system 12 based on a desired cost or budget structure, suitable for improving the performance of the control system 12. Upgrades may include software and or hardware updates, such as newer versions of a distributed control system (DCS), a manufacturing execution system (MES), a supervisor control and data acquisition (SCADA) system, a human machine interface (HMI) system, an input/output system (e.g., I/O pack), a memory, processors, a network interface, a power supply, and/or a communications bus. By using the heath advisor suite 18 to derive the health assessment 24, the techniques described herein may enable a more efficient and safe power plant 14, as well as minimize operating costs.
FIG. 2 is a schematic diagram depicting an embodiment of the control system 12 communicatively coupled to the health advisor suite 18. The control system 12 may include a computer system 36 suitable for executing a variety of control and monitoring applications, and for providing an operator interface through which an engineer or technician may monitor the components of the control system 12. Accordingly, the computer 36 includes a processor 38 that may be used in processing computer instructions, and a memory 40 that may be used to store computer instructions and other data. The computer system 36 may include any type of computing device suitable for running software applications, such as a laptop, a workstation, a tablet computer, or a handheld portable device (e.g., personal digital assistant or cell phone). Indeed, the computer system 36 may include any of a variety of hardware and/or operating system platforms. In accordance with one embodiment, the computer 36 may host an industrial control software, such as a human-machine interface (HMI) software 42, a manufacturing execution system (MES) 44, a distributed control system (DCS) 46, and/or a supervisor control and data acquisition (SCADA) system 48. The HMI 42, MES 44, DCS 46, and/or SCADA 50 may be stored as executable code instructions stored on non-transitory tangible computer readable media, such as the memory 40 of the computer 36. For example, the computer 36 may host the ControlSTTM and/or ToolboxSTTM software, available from General Electric Co., of Schenectady, N.Y.
The health advisor 18 may be communicatively coupled to the computer system 36 through direct or indirect techniques. For example, a signal conduit (e.g., cable, wireless router) may be used to directly couple the health advisor 18 to the computer 38. Likewise, a file transfer mechanism (e.g., remote desktop protocol (rdp), file transfer protocol (ftp), manual transfer) may be used to indirectly send or to receive data, such as files. Further, cloud 50 computing techniques may be used, where the health advisor 18 resides in the cloud 50 and communicates directly or indirectly with the computer system 36.
The health advisor suite 18 may include a data collection subsystem 54, a configuration management system 56, and a rule engine 60. In certain embodiments, the data collection subsystem 54 may collect and store data, such as data representative of the status, health, and operating condition of the control system 12. The data collection subsystem 54 may be continuously operating, and may include relational databases, network databases, files, and so on, useful in storing and updating stored data. The configuration management system 56 may be used to manage the various configurations of software and/or hardware components used in constructing the control system 12. Indeed, the control system 12 may include multiple software and/or hardware components, each component having one or more versions. These versioned components may be packaged by a manufacturer into the control system 12 as part of a contract services agreement, and/or may be provided as part of a transactional services agreement (e.g., purchased individually). The rule engine 58 may be used to enable the derivations of the health assessment 24, as described in more detail below with respect to FIGS. 3-7.
Further, the computer system 36 and the health advisor 18 may be communicatively connected to a plant data highway 60 suitable for enabling communication between the depicted computer 36 and other computers 36 and/or health advisors 18. Indeed, the industrial control system 12 may include multiple computer systems 36 interconnected through the plant data highway 60, or through other data buses (e.g., local area networks, wide area networks). In the depicted embodiment, the computer system 36 and the health advisor 18 may be further communicatively connected to a unit data highway 62, suitable for communicatively coupling the computer system 36 and the health advisor 18 to an industrial controller system 64. In other embodiments, other data buses (e.g., direct cabling, local area networks, wide area networks) may be used to couple the computer system 36 and the health advisor 18 to the industrial controller 64.
The industrial controller 64 may include a processor 66 suitable for executing computer instructions or control logic useful in automating a variety of plant equipment, such as a turbine system 68, a temperature sensor 70, a valve 72, and a pump 74. The industrial controller 64 may further include a memory 76 for use in storing, for example, control code (e.g., computer instructions and other data). For example, the controller 64 may store one or more function blocks written in an International Electrotechnical Commission (IEC) 61804 language standard, sequential function charts (SFC), ladder logic, or programs written in other programming languages, in the control code. In one embodiment, the control code may be included in a configuration file 65. Additionally or alternatively, the configuration file 65 may include configuration parameter for the controller, such as instantiated function blocks (e.g., function blocks to load into memory), networking parameters, code synchronization and timing, I/O configuration, and so on.
The industrial controller 64 may communicate with a variety of field devices, including but not limited to flow meters, pH sensors, temperature sensors, vibration sensors, clearance sensors (e.g., measuring distances between a rotating component and a stationary component), pressure sensors, pumps, actuators, valves, and the like. In some embodiments, the industrial controller 64 may be a triple modular redundant (TMR) MarkTM VIe controller system, available from General Electric Co., of Schenectady, N.Y. By including three processors, the TMR controller 64 may provide for redundant or fault-tolerant operations. In other embodiments, the controller 64 may include a single processor, or dual processors.
In the depicted embodiment, the turbine system 68, the temperature sensor 70, the valve 72, and the pump 74 are communicatively connected to the industrial controller 64 and/or the health advisor 18 by using linking devices 78 and 80 suitable for interfacing between an I/O network 82 and an H1 network 84. For example, the linking devices 78 and 80 may include the FG-100 linking device, available from Softing AG, of Haar, Germany. Additional field devices 86 (e.g., sensors, pumps, valves, actuators) may be communicatively coupled via the I/O network 82 to the controller 64 and/or the health advisor 18, for example, by using one or more input/output (I/O) packs 88. The I/O packs 88 may each include a microprocessor 90 useful in executing a real-time operating system, such as QNX® available from QNX Software Systems/Research in Motion (RIM) of Waterloo, Ontario, Canada. Each I/O pack 88 may also include a memory 92 for storing computing instructions and other data, as well as one or more sensors 94, such as temperature sensors, useful in monitoring the ambient temperature in the I/O packs 88. In other embodiments, the turbine system 68, the temperature sensor 70, the valve 72, the pump 74, and/or the field devices 86, may be connected to the controller 64 and/or the health advisor 18 by using direct cabling (e.g., via a terminal block) or indirect means (e.g., file transfers).
As depicted, the linking devices 78 and 80 may include processors 96 and 98, respectively, useful in executing computer instructions, and may also include memory 100 and 102, useful in storing computer instructions and other data. In some embodiments, the I/O network 82 may be a 100 Megabit (MB) high speed Ethernet (HSE) network, and the H1 network 84 may be a 31.25 kilobit/second network. Accordingly, data transmitted and received through the I/O network 82 may in turn be transmitted and received by the H1 network 84. That is, the linking devices 78 and 80 may act as bridges between the I/O network 82 and the H1 network 84. For example, higher speed data on the I/O network 82 may be buffered, and then transmitted at suitable speed on the H1 network 84. Accordingly, a variety of field devices may be linked to the industrial controller 64, to the computer 36, and/or to the health advisor 18. For example, the field devices 68, 70, 72, and 74 may include or may be industrial devices, such as Fieldbus FoundationTM devices that include support for the Foundation H1 bi-directional communications protocol. The field devices 68, 70, 72, 74, and 86 may also include support for other communication protocols, such as those found in the HART® Communications Foundation (HCF) protocol, and the Profibus Nutzer Organization e.V. (PNO) protocol.
FIG. 3 is a block diagram of an embodiment of the health advisor suite 18 depicting the transformation of inputs 106 into the health assessment 24. By using the inputs 106 to derive the health assessment 24, the health advisor suite 18 may enable an up-to-date prognosis of the health of the control system 12, and may be used to derive the NPI 28, the RCA 30, the engineering opportunities 32, and/or the revenue opportunities 34 for the plant 14. As mentioned above, the health advisor suite 18 may include computer instructions stored in a non-transitory machine readable medium, such as the memory of a computer, a tablet, a notebook, a workstation, a cell phone, and/or other computing device. In the depicted embodiment, the inputs 106 may include site software 108, rules 110, and/or process dynamics 112.
The site software 108 may include all software (e.g., software tools, operating systems, networking software, firmware, microcode, display drivers, sound drivers, network drivers, I/O system drivers) used by the components of the control system 12 of FIG. 2, such as the HMI 42, the MES 44, the DCS 46, the computer 36, the controller 64, the linking devices 78, 80, the I/O pack 88, the plant data highway 60, the I/O network 82, the H1 network 84, and the field devices 68, 70, 72, 74, 86.
The rules 110 may include “if . . . then . . . ” rules with the “if” portion set as an antecedent condition, and the “then” portion set as a consequent of the antecedent condition. The rules may also include fuzzy logic rules, expert system rules (e.g., forward chained expert systems, backward chained expert systems), recursive rules (e.g., Prolog rules), Bayesian inference rules, dynamic logic rules (e.g., modal logic), neural network rules, genetic algorithm rules, or a combination thereof. The rules may be derived through consultation with one or more experts in the field, such as a controller system health experts, or automatically, such as by using machine learning techniques (e.g., reinforcement learning, decision tree learning, inductive logic programming, neural network training, clustering, support vector machine).
The rules 110 may created by using a rules editor 111. In one embodiment, the rules editor 111 may be included as part of the health advisor suite 18. In another embodiment, the rules editor 111 may be provided separate from the health suite 18. The rules editor 111 may include computer instructions stored in a non-transitory machine readable medium, such as the memory of a computer, a tablet, a notebook, a workstation, a cell phone, and/or other computing device. In the depicted embodiment, the rule editor 111 may be used to create, update, and/or delete, one of more of the rules 110. For example, FIGS. 6 and 7 describe a screen suitable for creating, updating, and/or deleting one or more of the rules 110.
The process dynamics 112 may include data received when the health advisor 18 is communicatively coupled to the control system 12. The process dynamics 112 data may include alerts issued by the controller 64, and/or the HMI 42, the MES 44, the DCS 46, the SCADA 48. Likewise, the process dynamics 112 may include utilization data (e.g., percent utilization, total utilization) for the memories 40, 76, 92, 100, 102, utilization data for the processors 38, 66, 90, 96, 98 (e.g., utilization by software processes, utilization by software applications), current configuration parameters used by the components of the control system 12 (e.g., memory page size, virtual memory pages, thread priority, process priority) controller 64 parameters (e.g., master/slave configuration, I/O parameter), bus 60, 62, and 84 parameters, I/O pack 88 parameters, linking device 78, 80 parameters, field device 68, 70, 72, 74, 86 parameters.
In the depicted embodiment, the health advisor suite 18 includes online 114 and offline 116 operational modes, which may be used alone or in combination with each other. In the online mode 114 of operations, the health advisor may be constantly receiving the inputs 106, for example, by using the data collection subsystem 54 of the health advisor suite 18, then processing the inputs 106, for example, by using the configuration management 56 and rule engine 58 of the health advisor suite 18, to produce the health assessment 24. In the offline mode 116 of operations, the inputs 106 may be provided, for example, as a set of files or as a “batch job.” That is, the files or “batch job” may be provided to the data collection subsystem 54 as pre-collected data, which may be subsequently used to produce the health assessment 24. By providing for the offline mode 116, the health advisor suite 18 may be used, for example, in a computing device that may be disconnected from the controller system 12. User input 118 is also depicted. The user input 118 may include data related to the control system 12 and manually entered by the user. Additionally, the user input 118 may include usage input (e.g., keyboard, mouse, voice) directing the health advisor 18 to perform certain desired operations, such as operations deriving the health assessment 18, including a TMR readiness report 120, a recommendation report 122, an auto configuration report 124, early warnings 126, and/or access-based reports 128.
The TMR readiness report 120 may detail the condition of the TMR controller 64, including any detected fault conditions, alarm reports based on alarm logging data, error reports based on error logging data, and may also derive an overall readiness metric by using the inputs 106. For example, the readiness metric may detail an approximate percentage readiness (0%-100%) for the overall control system 12, as well as for each component of the control system 12. A higher number for the percentage readiness may indicate that the control system 12 (or component) is more suitable for continued operations, while a lower number for the percentage readiness may indicate that the control system 12 (or component) is less suitable for continued operations. The percentage readiness may be derived by using certain of the rules 110 focused on determining the overall operational health of the control system 12 (or component). The percentage readiness may also be found by using a statistical or historical analysis based on the inputs, such as a Poisson distribution model, linear regression analysis, non-linear regression analysis, Weibull analysis, fault tree analysis, Markov chain modeling, and so on.
The recommendation report 122 may include recommendations on improvements for the control system 12. For example, certain hardware and software upgrades or additions may be recommended. The hardware upgrades may include memory upgrades, network equipment upgrades, processor upgrades, replacement of components of the control system 12, replacement of cabling, replacement of power supplies, and so on. The recommendations may also include adding certain component and related subsystems, for example to enable faster control and/or faster processing of data. The software recommendations may include upgrading or replacing the software components of the control system 12 (e.g., HMI 42, MES, 44, DCS 46, SCADA 48), operating systems, software tools, firmware, microcode, applications, and so on.
The auto configuration report 124 may include details of the configuration of the control system 12. The configuration details may include a list of all software and hardware components used by the control system 12, including details of the components 36, 38, 40, 42, 44, 46, 48, 50, 60, 62, 64, 66, 68, 70, 72, 74, 76, 78, 80, 82, 84, 86, 88, 90, 92, 94, 96, 98, 100, and/or 102. The details may include the number of each of the aforementioned components used by the control system 12, version information for each components (hardware version, firmware version, software version, microcode version), interconnections between component (e.g., network diagram, electronic circuit diagrams, information flow diagrams, programming flowcharts, database diagrams), procurement information (cost, delivery times, supplier information).
The early warning report 126 may include a list of issues that may lead to undesired conditions, such as unexpected maintenance events or stoppage of the control system 12. For example, the early warning report 126 may include issues such as insufficient memory 40, 76, 92, 100, 102, loss of redundancy of the controller 64, low bandwidth capacity of the buses 60, 62, 84, insufficient processing power for the processors 38, 66, 90, 96, 98, failure of any of the components 36, 38, 40, 42, 44, 46, 48, 50, 60, 62, 64, 66, 68, 70, 72, 74, 76, 78, 80, 82, 84, 86, 88, 90, 92, 94, 96, 98, 100, and 102, software errors, hardware errors, and so on.
The access based reports 128 may be reports accessible by certain roles, such as system administrators, plant operators, commissioning engineers, managers, programmers, control engineers, procurement personnel, accounting personnel, and so on, and useful in performing the jobs associated with the aforementioned roles. In one embodiment, the access based reports 128 may be based on the data used in the reports 120, 122, 124, and/or 126 focused on the desired role. For example, a control engineer role may receive a report 128 based on all of the data used in the reports 120, 122, 124, and 126, while a procurement based report 128 may distil the data and present data relevant to procurement activities (e.g., manufacturing information, cost information, delivery time information). In this manner, data from the reports 120, 122, 124, and 126 may be distilled and used to more efficiently support roles such as system administrators, plant operators, commissioning engineers, managers, programmers, control engineers, procurement personnel, accounting personnel.
FIG. 4 is flowchart of an embodiment of a process 130 useful in analyzing the control system 12 and deriving the health assessment 24. The process 130 may be implemented by using computer instructions stored in a non-transitory machine-readable medium, such as the memory of a computer, a laptop, a notebook, a tablet, a cell phone, and/or a personal digital assistant (PDA). By analyzing the inputs 106 and deriving the health assessment 24 (e.g., TRM readiness 120, recommendations 122, auto configuration report 124, early warnings 126, access bases reports 128), the process 130 may enable a more efficient, reliable, and safe control system 12.
The process 130 may acquire data (block 132), such as the inputs 106, related to the control system 12. As previously mentioned, the data may be acquired directly (e.g., through a cable or other conduit), or indirectly (e.g., through files loaded onto a storage medium, such as a CD, DVD, flash card, thumb drive). The acquired data may then be analyzed (block 134). For example, the health assessment suite 18 may use the rule engine 58 and rules 110 to analyze the data. Other techniques including statistical and historical analysis techniques may also be used, such as fault tree analysis, linear regression analysis, non-linear regression analysis, Markov modeling, RBDs, risk graphs, LOPA, Poisson distribution model, Weibull analysis, and/or Markov chain modeling.
The process 130 may then derive (block 136) the control system health assessment 24, for example, by using the control system health assessment suite 18 as described above. The health assessment 24 may then be provided (block 138), to the control system 12 operator and/or manufacturer and to user roles (e.g., system administrators, plant operators, commissioning engineers, managers, programmers, control engineers, procurement personnel, accounting personnel), as well as stored in, for example, the knowledge base 20 accessible by the online life cycle support tool 22. As mentioned previously, the health assessment report may include the TRM readiness report 120, the recommendation report 122, the auto configuration report 124, the early warning report 126, and the access based report 128.
The process 130 may then use the provided reports 120, 122, 124, 126, and/or 128 to improve (block 140) the control system 12 and/or the plant 14. For example, components of the control system 12 may be replaced, added, or upgraded. Likewise, NPI 28 and RCA 30, engineering opportunities 32 and/or revenue opportunities 34 may be derived and used to more efficiently and safely operate the control system 12 and/or plant 14.
Turning to FIG. 5, the figure is a flowchart of an embodiment of a process 150 suitable for using the rule editor 111 to create and to publish the rules 110. The process 150 may be implemented by using computer instructions stored in a non-transitory machine-readable medium, such as the memory of a computer, a laptop, a notebook, a tablet, a cell phone, and/or a personal digital assistant (PDA). In the depicted embodiment, the process 150 may communicate (block 152) one or more control system issues into a drop box 154. For example, the communicated issues (block 152) may include control system 12 issues identified by the customer, the manufacturer, a repair technician, a user, a user community (e.g., online forum), and so on. For example, a technical information letter (TIL) may be issued by the manufacturer detailing certain issues related to the control system 12. Likewise, a product service bulletin (PSB) may similarly list issues related to the control system 12. The issues may include known undesired issues, such as the turbine system 68 tripping due to undesired control system 12 conditions, undesired control performance during load shedding, during startup, and/or during shutdown of the turbine system 68. The issues may also include recommendations, such as manufacturer recommended usage modes for the control system 12 (e.g., recommended programming code to be used, recommended OS to use, recommended device drivers, firmware, and/or microcode to install). Accordingly, the TIL, PSB, and other issues may be used to derive the health assessment rules. For example, a rule such as “if version=9 and product=controlST then issue_may be=memory_fault” may be generated based on information gathered from the TIL, the PSB, and other issues 152.
The drop box 154 may include an electronic mailbox (e.g., email folder), a post office mailbox, an online drop box (e.g., file transfer protocol [hp] folder), and so on. A requestor 156 may then submit (block 158) a workflow request. In one embodiment, the requestor 156 may be an automated agent or other software implemented by using computer instructions stored in a non-transitory machine-readable medium. In another embodiment, the requestor 156 may be a human person, such as the customer 26, a manufacturer representative, plant engineer, controls engineer, commissioning engineer, and/or programmer. The workflow submission (block 158) may request that an approver 160 aid in addressing issues, including but not limited to the issues submitted in block 152. Indeed, the requestor 156 may submit (block 158) workflows addressing any issues related to the control system 12 and equipment communicatively or operatively connected to the control system 12. The approver 160 may include or may use computer instructions stored in a non-transitory machine-readable medium, including software agents useful in automatically approving or disapproving (decision 162) the submitted workflow requests.
If the approver 160 does not approve (decision 162) the workflow, then the requestor 156 may be notified (block 164) of the rejection. If the approver 160 approves (decision 162) the workflow, then the rule editor 111 may be used to create (block 166) a health advisor (HA) rule, such as a rule to be included in the rules 110. As mentioned previously, the rules 110 may include any type of rule, including “if . . . then . . . ” rules, fuzzy logic rules, expert system rules (e.g., forward chained expert systems, backward chained expert systems), recursive rules (e.g., Prolog rules), Bayesian inference rules, dynamic logic rules (e.g., modal logic), neural network rules, genetic algorithm rules, or a combination thereof. In certain embodiments, experts having knowledge of the control system 12 and related equipment (e.g., turbine system 68) may be consulted during the creation (block 166) of the rules. For example, tacit knowledge extraction techniques, such as field-oriented interviews, structured interviews, unstructured interviews, analysis of the expert diagnosing the control system 12, and so on, may be used to derive the rules 110. The rules 110 may then be stored in various structured formats, including extensible markup language (XML) files, resource description framework (RDF) files, web ontology language (OWL) files, relational database tables, binary files, flat files, and so forth. For example, a rule may be written in XML as follows:










<?xml version=”1.0” encoding=”UTF-8” ?>
















<RULE_PACKAGE CREATED_BY=”105033965”



CREATED_ON=”03/10/2012 5:26:10 PM”>


 <NAME>PSB 25185</NAME>


 <TYPE>PSB</TYPE>


 <BRIEF_DESC>Error in TIMER block can cause turbine


 trip</BRIEF_DESC>


 <DESCRIPTION>An error was discovered within the TIMER block


in ControlST versions prior to V03.02.35C. <DESCRIPTION>


 <RECOMMENDATIONS>Replace TIMER block with BFILT


block or site needs to upgrade the ControlST version to correct the issue.


</RECOMMENDATIONS>


 <COMPLIANCE_CODE>-NA-</COMPLIANCE_CODE>


 <TIMING_DATE>-NA-</TIMING_DATE>


 <URL>http://web01.com/PDF%20Service%20Bulletins/


 PSB25185.pdf</URL>


 <CONDITION TYPE=””>


  <SEQUENCE>


   <PERMUTATION>Runtime:V03.02.18C;


   L</PERMUTATION>


  </SEQUENCE>


 </CONDITION>


</RULE_PACKAGE>









The rule includes sections for capturing the rule name, a brief description of an issue associated with the rule, a full description of the issue, a recommendation to fix or address the issue, a compliance code, a timing date, a uniform resource locator (URL) associated with the rule, a condition type for the rule, a sequence for the rule, and/or a permutation (e.g., version information) for equipment related to the rule.
The created rule (block 166) may then be used during unit testing (block 168). For example, the rule may be tested to provide for adequate syntax, representation, and execution by the rule engine 58. After the unit testing (block 168), the rule may then be published (block 170), for use, for example, during a beta release. During publication (block 170), the rule may be stored, for example, in the beta testing database. The rule may then be tested (block 172), for example, by one or more testers 174. The testers 174 may include computer instructions stored in a non-transitory machine-readable medium, such as quality assurance code, automatic testing code, and the like, useful in automatically testing the published (block 170) HA rule.
The process 150 may then determine (decision 178) if the HA rule passes beta testing. For example, the rule may not cover a desired scope, or may not adequately cover a desired issue or set of issues. If it is determined (decision 178) that the HA rule does not pass beta testing, then the process 150 may iterate back to block 166 and re-create the HA rule. If it is determined (decision 178) that the HA rule passes beta testing, then the HA rule may be released (block 178), for example, into the health advisor database 16 as a Charlie version. This Charlie version of the HA rule may then be further exposed to testing, including customer 26 testing, and eventually leave the Charlie version as a full HA rule and incorporated into the rules 110 used by the rule engine 58.
FIG. 6 is a screenshot of an embodiment of a screen 180 that may be used by the rule editor 111 to edit one or more of the rules 110. The screen 180 may be implemented by using computer instructions stored in a non-transitory machine-readable medium, such as the memory of a computer, a laptop, a notebook, a tablet, a cell phone, and/or a personal digital assistant (PDA). In the depicted embodiment, a rule hierarchy 181 (e.g., tree control) may be used to navigate the rule. Accordingly, a portion 182 (e.g., list box portion) of the screen 180 may display and/or navigate through any existing rules 110, or a new rule 110, for example, by using the rule hierarchy 181. A rule detail portion 183 of the screen 180 may then be used to create, update, or edit the rules 110. For example, a name portion 184 (e.g., text box) may be used to enter a name for the rule, and a brief description portion 186 (e.g., text box) may be used to enter a description of the issue associated with the rule. A type portion 187 (e.g., dropdown box) may be used to enter a rule type, such as a rule based on a PSB, a TIL, and so on.
Additionally, a recommendation portion 190 (e.g., text box) may be used to enter one or more recommendations for the rule, and a compliance portion 192 (e.g., text box) may be used to enter a compliance data for the rule. Further, a timing portion 194 (e.g., text box) may be used to enter timing information, and a uniform resource locator (URL) portion 196 (e.g., text box) may be used to enter internet and/or intranet information for the rule. The frame portion 198 (e.g., text box) may be used to enter equipment related information, such as a turbine system 68 frame information. Once the user has entered the desired rule information, an update facility 200 (e.g., button) may be used to save the rule's information.
As mentioned previously, the rule may be stored in a hierarchical language, such as XML. Accordingly, each level in the hierarchy may include corresponding details suitable for data entry by using the screen 180. As an example, FIG. 7 depicts an embodiment of the screen 180 where the user has expanded the rule hierarchy 181 to display the levels 202, 204, and 206. Because in the illustrated embodiment the user has selected the level 206 (e.g., permutation level), further details for the level 206 are depicted in the rule details portion 183 of the screen 180. For example, an attribute name portion 208 (e.g., text box) may be used to enter an attribute associated with the rule. Likewise, an attribute value portion 210 (e.g., text box) may be used to enter an attribute value for the rule, and a validate portion 212 (e.g., dropdown box) may be used to enter validation data, such as mathematical expressions, for the rule. Once data related to the level 206, or any other level (e.g., levels 181, 202, 204) is entered or modified, the update facility 200 may be used to save the data. By providing for the screen 180 that may provide for the insertion, update, and deletion of rule information, the techniques described herein may enable a more efficient capture of knowledge useful in deriving the rules 110.
Technical effects of the invention include the online and offline gathering of control system information. The gathered control system information may then be used to derive a control system health assessment, for example, by using a rule engine communicatively coupled to a health assessment database. The rules in the rule engine may be edited by using a rule editor. The health assessment may include a triple modular redundant (TMR) readiness report, a controller recommendation, an auto configuration report, an early warning report, an access based report, or a combination thereof, suitable for improving and/or optimizing the control system.
This written description uses examples to disclose the invention, including the best mode, and also to enable any person skilled in the art to practice the invention, including making and using any devices or systems and performing any incorporated methods. The patentable scope of the invention is defined by the claims, and may include other examples that occur to those skilled in the art. Such other examples are intended to be within the scope of the claims if they have structural elements that do not differ from the literal language of the claims, or if they include equivalent structural elements with insubstantial differences from the literal language of the claims.

## Claims

1. A system comprising:
a control system comprising a redundant controller, wherein the redundant controller is configured to provide for redundant control operations for a plant, and wherein the redundant controller is communicatively coupled to one or more field devices configured to actuate one or more machinery of the plant;
a data collection system configured to collect a data from the control system, wherein the data collection system is communicatively coupled to the redundant controller to collect the data from the redundant controller during operations of the controller;
a configuration management system configured to manage a hardware configuration and a software configuration for the redundant controller of the control system based on the data;
a rule engine configured to use the data and a site software as input and to output a health assessment detailing a health of the redundant controller by using a rule database configured to store at least one rule, wherein the health comprises a predictive probability of occurrence of an undesired maintenance event for the redundant controller, wherein the data comprises a field device data incoming from at least one of the one or more field devices;
a report generator configured to provide the health assessment for the control system; and
a rule editor configured to create the at least one rule, update the at least one rule, delete the at least one rule, or a combination thereof.

2. The system of claim 1, wherein the at least one rule comprises a rule name, a brief description, a full description, a recommendation, a compliance code, a timing date, a uniform resource locator (URL), a condition type, a sequence, a permutation, or a combination thereof.

3. The system of claim 2, wherein the recommendation comprises an action used in addressing an undesired issue of the redundant controller, and wherein the at least one rule was derived by using a technical information letter (TIL), a product service bulletin (PSB), or a combination thereof, and wherein the undesired maintenance event comprises failure of a processor R, S, or T core, failure of an input/output [I/O] pack, insufficient memory, loose bus connection, failure of a power supply, or a combination thereof.

4. The system of claim 1, wherein the rule database is configured to use a extensible markup language (XML), a resource description framework (RDF), an web ontology language (OWL), or a combination thereof, to store the at least one rule.

5. The system of claim 1, wherein the rule editor comprises a screen configured to display the at least one rule in a hierarchical display, and to provide a screen section configured to create the at least one rule, update the at least one rule, delete the at least one rule, or a combination thereof.

6. The system of claim 5, wherein the hierarchical display is configured to dynamically display a rule section of the at least on rule based on a user selection, and the screen section is configured to create the rule section, update the rule section, delete the rule section, or a combination thereof.

7. The system of claim 1, wherein the redundant controller comprises a Triple Module Redundant (TMR) controller having an R core, an S core, and a T core, and wherein the TMR controller is configured to provide for redundant control operations for the control system.

8. The system of claim 1, comprising an online life cycle support tool configured to use the health assessment to update a knowledge base, and wherein the knowledge base comprises a plurality of answers to customer questions related to the health of the control system, an operating history of plant equipment, or a combination thereof.

9. The system of claim 1, wherein the health assessment comprises a TMR readiness report, a controller recommendation, a configuration report, an early warning report, an access-based report, or a combination thereof.

10. The system of claim 1 comprising a power generation system having the control system.

11. A method comprising:
inputting at least one control system health assessment rule by using a rule editor;
acquiring a data related to a control system, wherein the control system comprises a redundant controller, wherein the redundant controller is configured to provide for redundant control operations for a plant, and wherein the redundant controller is communicatively coupled to one or more field devices configured to actuate one or more machinery of the plant;
analyzing, via a rule engine, the data and a site software to obtain a data analysis by using the at least one control system health assessment rule, wherein the data comprises a field device data incoming from at least one of the one or more field devices; and
deriving a control system health assessment detailing a health of the redundant controller based on the data analysis, wherein the health comprises a predictive probability of occurrence of an undesired maintenance event for the redundant controller.

12. The method of claim 11, wherein the at least one control system health assessment rule comprises a rule name, a brief description, a full description, a recommendation, a compliance code, a timing date, a uniform resource locator (URL), a condition type, a sequence, a permutation, or a combination thereof.

13. The method of claim 11, wherein the control system health assessment comprises a triple modular redundant (TMR) readiness report, a controller recommendation, an auto configuration report, an early warning report, an access based report, or a combination thereof, and wherein the undesired maintenance event comprises failure of a processor R, S, or T core, failure of an input/output [I/O] pack, insufficient memory, loose bus connection, failure of a power supply, or a combination thereof.

14. The method of claim 11, wherein acquiring the data comprises acquiring the data offline of the control system, acquiring the data online of the control system, or a combination thereof.

15. A system comprising:
a non-transitory machine readable medium comprising code configured to:
insert a rule, update the rule, delete the rule, or a combination thereof;
acquire a data related to a control system, wherein the control system comprises a redundant controller, wherein the redundant controller is configured to provide for redundant control operations for a plant, and wherein the redundant controller is communicatively coupled to one or more field devices configured to actuate one or more machinery of the plant;
analyze, via a rule engine, the data and a site software to obtain a data analysis by using the rule, wherein the data comprises a field device data incoming from at least one of the one or more field devices; and
derive a control system health assessment detailing a health of the redundant controller based on the data analysis, wherein the health comprises a predictive probability of occurrence of an undesired maintenance event for the controller.

16. The system of claim 15, wherein the non-transitory machine readable medium comprising code configured to insert the rule, update the rule, delete the rule, or a combination thereof, comprises code configured to display the rule in a hierarchical display, and to provide a screen section configured to create the rule, to update the rule, to delete the rule, or a combination thereof.

17. The system of claim 16, wherein the non-transitory machine readable medium comprising code configured to display the rule in the hierarchical display, and to provide the screen section configured to create the rule, to update the rule, to delete the rule, or a combination thereof, comprises code configured to dynamically display a rule section based on a user selection, and the screen section is configured to create the rule section, update the rule section, delete the rule section, or a combination thereof.

18. The system of claim 15, wherein the non-transitory machine readable medium comprising code configured to derive the control system health assessment comprises code configured to derive a triple modular redundant (TMR) readiness report, derive a controller recommendation, derive an auto configuration report, derive an early warning report, derive an access based report, or a combination thereof, and wherein the undesired maintenance event comprises failure of a processor R, S, or T core, failure of an input/output [I/O] pack, insufficient memory, loose bus connection, failure of a power supply, or a combination thereof.

19. The system of claim 15, comprising an industrial system having the non-transitory machine readable medium storing the code, wherein the industrial system comprises a gasification system, a turbine system, a gas treatment system, a power generation system, or a combination thereof.