CONTROLLER AND METHOD FOR ADMINISTERING AND PROVIDING ON-LINE CORRECTION OF A BATCH STERILIZATION PROCESS

Abstract: The present invention comprises a batch sterilization system, a controller for use in the batch sterilization system, and a method performed by the controller. The system, controller, and method are used to administer and provide on-line correction of a batch sterilization process performed on a batch of containers. The controller (104) compiles an actual retort time-temperature profile during the batch sterilization process from the actual retort temperatures sensed by a sensor (103). While this is occurring, the controller controls a batch sterilizer (102) so as to administer an initial portion of the batch sterilization process before a temperature deviation has begun according to a scheduled time-temperature profile. This temperature deviation is between the actual retort time-temperature profile and the scheduled processing time-temperature profile. In response to the temperature deviation, the controller defines a re-scheduled remaining time-temperature profile for a remaining portion of the batch sterilization process that begins when the temperature deviation clears. This is done by simulating the batch sterilization process based on the actual retort time-temperature profile. During the temperature deviation, the controller controls the batch sterilizer so as to administer corrections to clear the temperature deviation between the actual retort and rescheduled remaining time-temperature profiles. When the temperature deviation has finally cleared, the controller controls the batch sterilizer so as to administer the remaining portion of the batch sterilization process according to the re-scheduled remaining time-temperature profile.

Description: CONTROLLER AND METHOD FOR ADMINISTERING AND PROVIDING ON-LINE CORRECTION OF A BATCH STERILIZATION PROCESS TECHNICAL FIELD OF THE INVENTION The present invention relates generally to controllers for administering batch sterilization processes. In particular, it pertains to such a controller that provides on-line correction of a batch sterilization process when a temperature deviation occurs during the process. BACKGROUND OF THE INVENTION Batch sterilization systems are widely used to sterilize shelf stable food products packaged in containers. In a typical batch sterilization system, a batch of these containers is placed inside the batch sterilizer of the system. Then, the controller of the system administers the batch sterilization process that is performed by the batch sterilizer on the batch of containers. The batch sterilization process has come-up, processing, and cooling phases. These phases deliver a total lethality F to the batch of containers over a total time interval [t , t c ] covering these phases, where to is the begin time of the come-up phase and t c is the end time of the cooling phase. For purposes of this document, an open bracket [ or ] indicates that the corresponding time is included in the time interval while a closed bracket ( or ) indicates that the corresponding time is not included in the time interval. In order for the food product in the batch to be commercially sterilized, the total lethality actually delivered must satisfy a predefined target total lethality F^,,, for the food product. The target total lethality may be set by the USDA (U.S. Department of Agriculture), the FDA (Food and Drug Administration), and/or a suitable food processing authority. Furthermore, some batch sterilization systems also include an optional requirement that the come-up and processing phases must deliver a heating lethality F to the batch over a heating time interval [t 0 , t p ] that meets a predefined target heating lethality F^ for the food product, where t p is the end time of the processing phase. In this case, the operator sets the target heating lethality on an individual basis for each batch sterilization process. As is well known, the lethality F delivered to the batch over a particular time interval [t m> t k ] is given by the lethality equation: Fo = I 10 ( τ c . ω - τ, EF )/z dt where t-- and t k are respectively the begin and end times of the time interval [1--, t k ], T cs (t) is the product cold spot time-temperature profile of a container in the batch, z is the thermal characteristic of a particular microorganism to be destroyed in the sterilization process, and T REF is a reference temperature for destroying the organism. Thus, the heating lethality F delivered over the heating time interval [to, t p ] is given by this lethality equation, where t j _ = to and t k = t p . Similarly, the total lethality F delivered to the product cold spot over the total time interval [to, t c ] is also given by the lethality equation, but where t k = t c . The time intervals [to, t p ] and [to, tj and the product cold spot time-time-temperature profile T cs (t) must be such that the target lethalities F,- rgh and F^-^ are met by the heating and total lethalities F over [to, t p ] and F over [to, tj. In order to ensure that this occurs, various mathematical simulation models have been developed for simulating the product cold spot time-time-temperature profile T cs (t) over the come-up, processing, and cooling phases. These models include those described in Ball, CO. and Olson, F.C.W., Sterilization in Food Technology: Theory. Practice and Calculations. McGraw-Hill Book Company, Inc., 1957; Hayakawa, K., Experimental Formulas for Accurate Estimation of Transient Temperature of Food and Their Application to thermal Process Evaluation. Food Technology, vol. 24, no. 12, pp. 89 to 99, 1970; Thermobacteriologv in Food Processing. Academic Press, New York, 1965; Teixeira, A. A., Innovative Heat Transfer Models: From Research Lab to On-Line Implementation in Food Processing Automation II, ASAE, p. 177-184, 1992; Lanoiselle, J. L., Candau, Y., and Debray E., Predicting Internal Temperatures of Canned Foods During Thermal Processing Using a Linear Recursive Model. J. Food Sci., Vol. 60, No. 4, 1995; Teixeira, A. A. , Dixon, J. R., Zahradnik, J. W., and Zinsmeister, G. E., Computer Optimization of Nutrient Retention in Thermal Processing of Conduction Heated Foods. Food Technology, 23:137-142, 1969; Kan-Ichi Hayakawa, Estimating Food Temperatures During Various Processing or Handling Treatments. J. of Food Science, 36:378-385, 1971; Manson, J. E., Zahradnik, J. W., and Stumbo, C. R., Evaluation of Lethality and Nutrient Retentions of Conduction-Heating Foods in Rectangular Containers. Food Technology, 24(11):109-113, 1970; Noronha, J., Hendrickx, M., Van Loeg, A., and Tobback, P., New Semi-empirical Approach to Handle Time- Variable Boundary Conditions During Sterilization of Non-Conductive Heating Foods. J. Food Eng., 24:249-268, 1995; and the NumeriCAL model developed by Dr. John Manson of CALWEST Technologies, licensed to FMC Corporation, and used in FMC Corporation's LOG-TEC controller. A number of approaches have been developed for using these models to meet the target lethalities F^ and F A targtot" Referring to Fig. 1, a conventional approach is to use such a simulation model only for off-line (i.e., prior to administering the batch sterilization process) definition of a scheduled total time-temperature profile T sRT (t)° for the batch sterilization process. In this approach, the controller of the batch sterilization system uses the simulation model to simulate a scheduled product cold spot time-temperature profile T cs (t)° that is predicted to occur over the come-up, processing, and coolkig phases. This simulation is based on a predefined come-up time-temperature gradient T^t), a scheduled processing retort temperature T pRT °, and a pre-defined cooling time-temperature gradient T cRT (t). The gradients T^Ct) and T. RT O) are based on heating and cooling temperature distribution tests conducted on the batch sterilizer and may include segments defined by endpoint temperatures and time durations. The lethality equation described earlier is then used, where t_- = to and t k = t p °, F = F°, and T cs (t) = T cs (t)°, to compute a heating lethality F° that is predicted to be delivered over a scheduled heating time interval [to, t p °] and is based on the scheduled product cold spot time- temperature profile T cs (t)°. Similarly, a total lethality F° that is predicted to be delivered over a scheduled total time interval [to, t c °] is computed based on the profile T cs (t)° using the lethality equation, except where t k = t c °. As alluded to earlier, this is done so that the heating and total lethalities will meet the target lethalities F^ and F tøtgfQt . By simulating the scheduled product cold spot time-temperature profile T cs (t)° and computing the scheduled heating and total lethalities F° over [t 0 , t p °] and F° over [t 0 , t c °] in this way, the controller defines the scheduled total time-temperature profile T sRT (t)° for which the target lethalities F^ and F^,,, are satisfied. This profile T sRT (t)° includes come-up, processing, and cooling portions over scheduled come-up, processing, and cooling time intervals [to, t u °], (t p °, t c °], (t-°, t c °], respectively. The come-up and cooling portions comprise the portions of the gradients T^t) and T cRT (t) over the corresponding scheduled come-up and cooling time intervals [to, t,, 0 ] and (t p °, t c °], respectively. Similarly, the processing portion comprises the constant scheduled processing retort temperature T pRT ° over the scheduled processing time interval (t-, 0 , t p 0 ]. Moreover, some of the simulation models, such as the earlier mentioned Numeric AL model and the models described in the Teixeira et al., 1969 and Manson et al., 1970 references use finite differencing. In this case, the scheduled product cold spot time- temperature profile T cs (t)° and the predicted heating and total lethalities F° over [to, t p °] and F° over [to, t c °] are incrementally and iteratively simulated and computed. The controller then administers the batch sterilization process to be performed by the batch sterilizer according to the scheduled total time-temperature profile T sRT (t)°. However, a temperature deviation may occur during the processing phase. This occurs when the actual retort temperature T aRT (t,) at each real sampling time t. during a deviation time interval [t d , t e ) is below the scheduled processing temperature T pRT °. In this case, the heating and total lethalities F° over [to, t p °] and F° over [to, t c °] will in fact be less than the target lethalities F^ and ¥ tar . In a conventional off-line scheduling approach, the controller has no means for on-line scheduling correction if a temperature deviation occurs. Thus, when such a deviation does occur, the operator is left with several undesirable options. The first option is to discard the batch entirely. However, this is wasteful and not necessary. The second option is to re- process the batch. This, however, will cause the food product in the batch to be over processed. And, the third option is to post process the recorded actual retort time-temperature profile T aRT (t) to determine whether the target lethalities F^,, and F t -^-, have been satisfied. If they have not been satisfied, then the batch will be discarded or re-processed. If they have been satisfied, then the batch can be released for distribution. However, this is time consuming and, like the other options, wasteful and damaging to the food product. In another approach, the controllers of the batch sterilization system is provided with conservative on-line scheduling correction capabilities. An example of such an approach is found in FMC Corporation's LOG-TEC controller which uses the NumeriCAL model mentioned earlier. Referring to Fig. 2, this controller computes a scheduled total time- temperature profile T sRT (t)° off-line using the model in the manner just described. And, while still offline, the controller also uses the model to generate a correction table of re-scheduled remaining time-temperature profiles T sRT (ty, T sRT (t) 2 , etc. This table is then used for on-line correction of the scheduled total time-temperature profile T sRT (t)° in case a temperature deviation does occur during the processing phase. In generating the correction table, the controller selects a re-scheduled processing retort temperature T^ 1 that is below the scheduled processing retort temperature T pRT °. The controller then defines a corresponding re-scheduled remaining time-temperature profile T sRT (t)' over a re-scheduled remaining time interval [t u ! , t. 1 ]. The re-scheduled remaining time interval comprises re-scheduled heating and cooling time intervals [to, t p 1 ] and [to, t- 1 ]. This is done in a similar manner to that just described. Thus, a product cold spot time- temperature profile T cs (t)' is simulated that is based on the re-scheduled processing retort temperature T pRT '. From this product cold spot time-temperature profile, heating and cooling lethalities F 1 over [to, t p 1 ] and F 1 over [to, t- 1 ] are computed that satisfy the target heating and total lethalities F^,, and F^-^ and are predicted to be delivered over the re-scheduled heating and cooling time intervals. This entire process is then repeated for other re-scheduled processing retort temperature T pRT 2 , etc. to complete the correction table. Then, if a temperature deviation occurs during the processing phase, the controller records the minimum actual retort temperature during the deviation time interval [t d , t e ). The controller then locates the closest re-scheduled processing retort temperature T pR -,- 1 in the correction table that is equal to or just below the retort temperature The remainder of the processing phase is administered according to the re-scheduled remaining time-temperature profile T sRT (t)' over the rescheduled remaining time interval [t , t c ']. However, this approach can still cause the food product to be over processed. This is due to the use of the minimum actual retort temperature T aRr ™,.) during the temperature deviation for simulating the product cold spot time-temperature profile T^t) 1 . This simulation is overly conservative in that it disregards the fact that the actual retort time- temperature profile T aRT (t) was above the scheduled processing retort temperature T pRT over the time interval [to, tj) before the temperature deviation occurred. In other words, the portion of this product cold spot time-temperature profile over this time interval is overly conservative. This means that, in the computation of the heating and total lethalities F 1 over [t , t p 1 ] and F 1 over [t 0 , t. 1 ], full credit is not given to the lethality F that was actually delivered to the product cold spot of the batch over the time interval [to, tj) prior to the temperature deviation. As a result, the re-scheduled heating and total time intervals [to, t p 1 ] and [to, t- 1 ] are overly conservative since they are based on the overly conservative product cold spot time- temperature profile T cs (t)'. The food product in the batch will therefore be over processed since the heating and total lethalities actually delivered to the batch will substantially surpass the target lethalities F^ and F^^, respectively. Another disadvantage of this approach is that the minimum actual retort temperature T aRT ^i-) during the temperature deviation may be lower than any of the re-scheduled processing retort temperatures T^-,- 1 , T pRT 2 , etc. in the correction table. In this case, the online scheduling correction just described will not be available. The operator of the batch sterilization system will then be only left with the options described earlier for the off-line scheduling approach. In view of this, a new approach has been recently developed for on-line definition of the heating and total time intervals [to, t p ] and (t p , t c ] using a finite difference simulation model. This approach is described in Teixeira, A. A. and Tucker, G. S., On-Line Retort Control in Thermal Sterilization of Canned Foods. Food Control, 8(3):13-20, 1997; Simpson, R., Almonacid S., and Torres, J.A., Computer Control of Batch Retort Process Operations. Food Processing Automation I, ASAE, 1991 ; Teixeira, A. A. and Manson, J. E., Computer Control of Batch Retort Operations with On-Line Correction of Process Deviations. Food Technology, p. 85-90, April 1982; and Datta, A. K., Teixeira, A. A., and Manson, J. E., Computer-based Retort Control Logic for On-Line Correction of Process Deviations. J. Food Sci., 51(2):480-483 and 507, 1986. This approach will also be discussed next to provide a better understanding of the differences between this approach and the approach used in the invention disclosed herein. Referring to Fig. 3, in the on-line definition approach, the controller causes the batch sterilization process to begin without defining a scheduled total time-temperature profile T sRT (t)° or a correction table. The come-up and processing phases are administered according to the pre-defined come-up time-temperature gradient T„ RT (t) and the scheduled processing retort temperature T pRT . While these phases are being administered, the controller simulates for each current real sampling time t_ the portion of a product cold spot time-temperature profile T cs (t) that has actually occurred over the time interval [to, tj. This is done based on the actual retort temperature T aRT (t-) measured at each real sampling time t, of the processing phase. From this portion of the cold spot time-temperature profile, the controller computes the heating lethality F actually delivered to the batch over the time interval [to, tj. This is done on-line at each real sampling time t_ of the come-up and processing phases according to the lethality equation described earlier, where t,- = to and t k = t_. The controller then determines whether this heating lethality satisfies the target heating lethality F^. If it does not, then the process is repeated for the next real sampling time t,+Δt-, where Δt- is a pre- defined sampling period. If the target heating lethality F^ is satisfied, then the controller uses the simulation model to simulate the portion of the product cold spot time-temperature profile T cs (t) that is predicted to occur over the cooling phase beginning at the current real sampling time t_. This is done while the controller is still on-line at the time t-. In doing so, the controller first defines a predicted cooling time-temperature profile T sRT (t) by shifting the cooling time- temperature gradient T cRT (t) so that it starts at the actual retort temperature T aRT (t-) at the time t- and occurs over a predicted cooling time interval [t_, t-+Δt c ], where Δt c is the time duration of the predicted cooling time-temperature profile. Moreover, while still on-line at the current real sampling time t., the controller computes a total lethality F predicted to be delivered over a predicted total time interval [to, t-+Δt c ]. This is done by computing a cooling lethality F predicted to be delivered to the batch over the predicted cooling time interval [t,, t.+Δt c ] and adding it to the actually delivered heating lethality F over [to, t . The predicted cooling lethality is computed according to the lethality equation, where t,-, = and t k = t-+Δt c , by using the portion of the product cold spot time-temperature profile T cs (t) predicted to occur over the time interval [t-, t-+Δt c ]. If the predicted total lethality does not satisfy the target total lethality F targtot , then the controller repeats the entire process for the next real sampling time t r +Δt-. If the target total lethality F^- g ^ is satisfied, then the controller defines the time t- as the actual processing end time t p and the time t-+Δt c as the scheduled cooling end time t c . This means that the processing phase was administered over the actual processing time interval (t„, t p ]. The controller then administers the cooling phase according to the now scheduled cooling time-temperature profile T sRT (t) over the correspondingly scheduled cooling time interval (t p , tj. As discussed earlier, the on-line definition approach just described requires use of a finite difference simulation model. Such a model is required to accurately simulate the portion of the product cold spot time-temperature profile T cs (t) that actually occurs over each real time increment [ At., ] of the processing phase using the actual retort temperature T_ R τ(t r ) measured at the real sampling time t_. And, similar to the other approaches already described, this model can also be used to accurately simulate the portion of the product cold spot time-temperature profile T cs (t) predicted to occur over each simulation time increment [t s -Δt_, tj of the cooling phase using the cooling retort temperature T cRT (t s ) at the simulation sampling time t s . A disadvantage to this on-line definition approach is that the definition of the processing and cooling end times t p and t c is open ended. In other words, the operator and the controller do not know the end times t p and t c in advance. This makes it difficult for an operator to comply with current FDA and/or USDA regulatory requirements in filing the batch sterilization process with the FDA and/or USDA. Another disadvantage of this approach is that the product cold spot temperature profile T cs (t) must be simulated over each real time increment [t--Δt-, tj and the heating lethality F over the time interval [to, t] must be computed at each sample time t_ of the processing phase. This makes the approach computationally intensive and difficult to implement. SUMMARY OF THE INVENTION In summary, the present invention comprises a batch sterilization system, a controller for use in the batch sterilization system, and a method performed by the controller. The system, controller, and method are used to control and provide on-line correction of a batch sterilization process performed on a batch of containers. In addition to the controller, the batch sterilization system includes a batch sterilizer to perform the batch sterilization process on the batch of containers. The system also includes a sensor to sense actual retort temperatures in the batch sterilizer during the batch sterilization process. The controller first defines a scheduled time-temperature profile for the batch sterilization process. The controller then compiles an actual retort time-temperature profile during the batch sterilization process from the actual retort temperatures sensed by the sensor. Before a temperature deviation has begun, the controller controls the batch sterilizer so as to administer an initial portion of the batch sterilization process before the temperature deviation has begun according to the scheduled time-temperature profile. The temperature deviation is between the actual retort time-temperature profile and a scheduled processing time- temperature profile. In response to the temperature deviation, the controller defines a re-scheduled remaining time-temperature profile for a remaining portion of the batch sterilization process that begins when the temperature deviation clears. This is done by simulating the batch sterilization process based on the actual retort time-temperature profile. Furthermore, during the temperature deviation, the controller controls the batch sterilizer so as to administer corrections to clear the temperature deviation between the actual retort and re-scheduled remaining time-temperature profiles. When the temperature deviation has finally cleared, the controller controls the batch sterilizer so as to administer the remaining portion of the batch sterilization process. This is done according to the re-scheduled remaining time-temperature profile. BRIEF DESCRIPTION OF THE DRAWINGS Figs. 1 to 3 are timing diagrams of prior art approaches to controlling and providing on-line correction of a batch sterilization process. Fig. 4 is a block diagram of a batch sterilization system in accordance with the present invention. Fig. 5 is a block diagram of a controller of the batch sterilization system of Fig. 4. Fig. 6 is an overall process flow diagram for one embodiment of the controller of Fig. 5 in controlling and providing on-line correction of a batch sterilization process. Figs. 7 and 8 are timing diagrams for the overall process flow of Fig. 6. Figs. 9 to 12 are detailed process flow diagrams for various steps of the overall process flow diagram of Fig. 6. Fig. 13 is a timing diagram for another embodiment of the controller of Fig. 5. DETAILED DESCRIPTION OF THE INVENTION Referring to Fig. 4, there is shown a batch sterilization system 100 for performing a batch sterilization process on a batch 101 of containers that contain a food product. The system comprises a batch sterilizer 102, a retort temperature sensor 103, a programmed controller 104, and a host computer 105. The controller controls and provides on-line correction of the process by controlling the batch sterilizer. This is done in response to the actual retort time-temperature profile T aRT (t) in the batch sterilizer that is sensed with the retort temperature sensor 103 and compiled by the controller. The host computer is used to provide input information, namely input parameters and software, used by the controller in controlling the process. The host computer is also used to receive, process, and display output information about the process which is generated by the controller. 1. Hardware and Software Configuration of Controller 104 Referring to Fig. 5, the controller 104 comprises a main control computer 106 that includes a microprocessor (i.e., CPU) 107, a primary memory 113, and a secondary memory 118. The microprocessor executes an operating system 108, a process control program 109, a process scheduling program 110, and a temperature deviation program 111 of the controller. The operating system and programs are loaded from the secondary memory into the primary memory during execution. The operating system 108 and the programs 109 to 111 are executed by the microprocessor 107 in response to commands issued by the operator. These commands may be issued with a user interface 114 of the main control computer 106 and/or the host computer 105 via a host computer interface 115 of the controller 104. The operating system controls and coordinates the execution of the programs 109 to 111. Data 116 generated by the operating system and the programs during execution and data 116 inputted by the operator is stored in the primary memory 113. This data includes input information provided by the operator with the user interface and/or the host computer via the host computer interface. It also includes output information that is to be displayed to the operator and provided to the user interface or the host computer via the host computer interface. The controller 104 also comprises control circuitry 117. The control circuitry includes circuits, microprocessors, memories, and software to control the batch sterilization process by generating control signals that control the sequential operation of the batch sterilizer 102. As alluded to earlier, the software may be downloaded from the host computer 105 and provided to the control circuitry by the process control program 109. The control signals are generated in response to commands generated by the process control program and issued to the control circuitry from the microprocessor 107 via the control circuitry interface 122. Furthermore, at each real sampling time i of the batch sterilization process, the control circuitry 117 receives sensor signals from the retort temperature sensor 103 that represent the actual retort temperature T aRT (t-) sensed by this sensor. The control circuitry generates the control signals for controlling the batch sterilizer 102 in response to the sensed actual retort temperature. The sensed actual retort temperature is also provided to the microprocessor 107 via the control circuitry interface 122 and recorded by the process control program 109 as data 116 in the primary memory 113. In this way, the process control program compiles and records the actual retort time-temperature profile T aRT (t) in the primary memory. This profile is used in the manner described later for providing on-line correction of the batch sterilization process. The sensor 103 ϊs preferably located in the slowest heating zone θf the batcM stffilizer tM^s ffit αs£gj ^ % δ& ' ato . program 109 may adjust the temperature rc^ ei&By C j^Tmsnf yjS B * to adding to temperature distribution data, I' iβ fh&ptftmgy meϊSory 113 generate fromA ting and cooling temperature distribution tests co duced on IKi'bi fsMlli*, As mentioned earlier, the operating system 108 and the programs 109 to 111 are normally stored in the secondary memory 118 and then loaded into the primary memory 113 during execution. The secondary memory comprises a computer readable memory 124 that is readable by the main control computer 106 of the controller 104. This computer readable memory is therefore used to direct the controller in controlling and providing on-line correction of the batch sterilization process. The computer readable memory may comprise a PROM (programmable read only memory) that stores the operating system and/or programs. Alternatively or additionally, the computer readable memory may comprise a magnetic or CD ROM storage disc that stores the operating system and/or programs. The computer readable memory in this case is readable by the main control computer with a magnetic or CD ROM storage disk drive of the secondary memory. Moreover, the operating system and/or programs could also be downloaded to the computer readable memory or the primary memory from the host computer 105 via the host computer interface 115. 2. Example Embodiment In an exemplary embodiment, the controller 104 controls the batch sterilization process according to the flow and timing diagrams of Figs. 6 to 12. In doing so, a finite difference simulation model is used by the process scheduling and temperature deviation programs 110 and 111 to simulate the product cold spot time-temperature profile T cs (t) of the batch 101 of containers being processed. This model may be the earlier mentioned NumeriCAL model and used for both conduction heated food products and convection heated food products. Or, it may be one of the models described in the Teixeira et al., 1969 and Manson et al., 1970 references and used for conduction heated food products. As will be evident from the foregoing discussion, the novelty of the invention described herein is not in which model is used, but in the manner in which it is used according to the flow and timing diagrams in Figs. 6 to 12. 2.a. Overall Process Flow In the first step 126 of the overall process flow of Fig. 6, the input parameters for the batch sterilization process are defined and provided to the controller 104. The input parameters include a predefined sampling time period Δt. (e.g., .1 to 1 second) for each real time increment [t_-Δt, tj from the previous real sampling time t--Δt- to the current real sampling time t_ during the process. These input parameters also include the initial product temperature T IP for the food product in the containers of the batch 101 being processed. The initial product temperature T IP is manually measured by the operator by using one of the containers of the batch as a sample. The input parameters also include the traditional heating and cooling factors j h , f h , x bh , f 2 , j„ and f c to be used in the simulation model. The heating factors j h , f h , x bh , and f 2 are respectively the heating time lag factor, the heating curve slope factor, the broken heating time factor, and the broken heating curve slope factor that are predefined for the food product. Similarly, the cooling factors j c and f c are respectively the cooling time lag factor and the cooling curve slope factor that are also pre-defined for the food product. The input parameters further include the earlier discussed thermal characteristic z for destroying a particular microorganism in the food product and the associated reference temperature T REF . Also included in the input parameters are the earlier discussed target lethalities F^ and F^- g ^. Finally, the input parameters include the earlier discussed scheduled processing retort temperature T pRT and the earlier discussed pre-defined come-up and cooling time-temperature gradients T^t) and T cRT (t) for the batch sterilizer 102. In order to perform step 126, the operator issues commands with the user interface 114 and/or the host computer 105 to invoke the process control program 109. Then, the operator enters the input parameters T IP , j h , f h , x bh , f 2 , j c , f c , T^t), T cRT (t), and T pRT ° with the user interface and/or the host computer. The process control program loads the entered input parameters into the primary memory 113 for use by the programs 109 to 111. The execution of these programs is controlled and coordinated by the process control program in the manner discussed next. The process control program 109 first invokes the process scheduling program 110. In step 127, the process scheduling program simulates the entire batch sterilization process to define a scheduled total time-temperature profile T sRT (t)° over a scheduled total time interval [to, t c 0 ]. This is simulation covers the come-up, processing, and cooling phases of the process. Therefore, the profile T sRT (t)° has come-up, processing, and cooling portions that are predicted to respectively occur over scheduled come-up, processing, and cooling time intervals (to, I-, 0 ], (t,. 0 , t-, 0 ], and (t p 0 , t c 0 ]. The come-up portion comprises the portion of the come-up time-temperature gradient T^t) over the time interval (to, t u °] and between an initial retort temperature T iRT and the scheduled processing retort temperature T pRT °. The processing portion comprises the temperature T pRT ° over the time interval (I-, 0 , t p 0 ]. And, the cooling portion comprises the portion of the cooling time-temperature gradient T cRT (t) over the time interval (t p °, t c °] and between the temperature T pRT ° and an ending retort temperature T eRT . The precise manner in which step 127 is performed is discussed in greater detail in section 2.b., but will be briefly discussed next The scheduled total time-temperature profile T sRT (t)° is defined by using the simulation model mentioned earlier. Specifically, the process scheduling program 110 model is used to iteratively and incrementally simulate a scheduled product cold spot time- temperature profile T cs (t)° that is predicted to occur during the batch sterilization process. This simulation is based on the input parameters T IP , j h , f h , x bh , f 2 , j c , f c , T uRT (t), T pRT °, and The process scheduling program 110 also iteratively and incrementally computes a lethality F° that is predicted to be delivered to the batch 101 during the batch sterilization process. In doing so, the program 110 computes a heating lethality F° that satisfies the target heating lethality F^,, and is predicted to be delivered over a scheduled heating time interval [to, t p °] covering just the come-up and processing phases. This computation is made based on the portion of the product cold spot time-temperature profile T cs (t)° over the time interval [to, t p °] and the input parameters z and Furthermore, the lethality equation described earlier is used to make this computation, where i^ = to, t k = t p 0 , T cs (t) = T cs (t)°, and F = F°. The come-up and processing portions of the scheduled total time-temperature profile T sRT (t)° on which the portion of the profile T cs (t)° over the time interval [t 0 , t p °] is based are defined as a result. Similarly, the process scheduling program 110 also iteratively and incrementally computes a total lethality F° that satisfies the target total lethality F^ o , and is predicted to be delivered over a scheduled total time interval [to, t c °] covering the entire batch sterilization process. The lethality equation is also used in this computation, but where t k = t c °. The predicted total lethality is computed based on the portion of the product cold spot time- temperature profile T cs (t)° over a scheduled cooling time interval (t p 0 , t c °], the predicted heating lethality F° over [to, t p °], and the input parameters z and T REF . The predicted total lethality F° over [to, t c °] is in fact the sum of the predicted heating lethality F° over [to, t p °] and a cooling lethality F° predicted to be delivered to the batch 101 over the scheduled cooling time interval (t p °, t c 0 ]. In this way, the cooling portion of the scheduled total time-temperature profile T- RT (t)° on which the portion of the profile T cs (t)° over the time interval (t p °, t c °] is based is also defined. Referring now to both Figs. 6 and 7, the process control program 109 then causes the come-up phase in step 128 to be administered by the control circuitry 117. The control circuitry does so in accordance with the come-up portion of the scheduled total time- temperature profile T sRT (t)° by appropriately controlling the batch sterilizer 102. This means that the actual retort time-temperature profile T aRT (t) is brought up along the come-up portion of the profile T sRT (t)° over the scheduled come-up time interval [to, O]. More specifically, the control circuitry controls the batch sterilizer and monitors the sensed actual retort temperature T aRT (t r ) at each real sampling time t. to make sure that this temperature stays at least equal to the corresponding scheduled come-up retort temperature T sRT (t-)° for that time. The temperature T sRT (t-) 0 is obtained from the profile T sRT (t)°. After the come-up phase has been administered, the process control program 109 controls the administration of the processing phase in steps 130 to 149 of Fig. 6. In doing so, it first clears a deviation flag and sets a deviation counter n to zero in step 129 of the flow diagram. The flag is used to indicate whether or not a temperature deviation is occurring and the counter n is used to identify each temperature deviation that does occur. Then, at the current real sampling time t., it causes the control circuitry 117 in step 130 to administer the processing phase at the scheduled processing retort temperature T pRT °. In administering the processing phase at the time t_, the control circuitry appropriately controls the batch sterilizer 102 and monitors the actual retort time-temperature profile T aRT (t) to verify that it is at least equal to the temperature T pRT °. In this embodiment of the controller 104, the scheduled processing retort temperature T pRT 0 will remain the same throughout the processing phase regardless if a temperature deviation occurs. Then the process control program 109 waits for the next real sampling time t- = t τ +Δt I . in step 131. In step 132, the process control program determines whether the processing phase is over. Since the deviation counter n has been initially set to zero in step 129, this is done initially until the first temperature deviation occurs by determining whether the current real sampling time t_ is the scheduled processing end time t p °. In this embodiment of the controller 104, the processing end time t p n scheduled in response to the nth temperature deviation is re-scheduled (i.e., re-defined) whenever the (n+l)th temperature deviation occurs. This will be explained in greater detail later. In step 133, the process control program 109 records the actual retort temperature T_ R τ( r ) at the current real sampling time t_. In this way, the actual retort time-temperature profile T aRT (t) is compiled. Then, in step 134, the process control program 109 determines whether a temperature deviation is occurring at the current real sampling time t_. In doing so, the program momtors the actual retort time-temperature profile T aRT (t) to determine if the actual retort temperature T aRT (t-) at the time is less than the scheduled processing temperature T pRT °. Since the deviation counter n is initially set to zero, the program is actually determining whether the deviation is occurring between the actual retort time-temperature profile and the processing portion of the scheduled total time-temperature profile T sRT (t)°. If no deviation is occurring and the process control program 109 determines in step 135 that the deviation flag is cleared, then it returns to step 130. Steps 130 to 135 are then repeated until it is determined in step 132 that the processing phase is over or it is determined in step 134 that a temperature deviation is occurring. If the process control program 109 does determine in step 134 that a temperature deviation is occurring, it then determines in step 136 whether the deviation flag is set. If it is not, this means that the deviation has just begin at the current real sampling time t_. In this case, the deviation counter n is incremented to one to identify the first deviation and the time t- is recorded as the deviation begin time t d ' in step 137. If the deviation flag is set in step 136, then the deviation has already begun and was previously detected in step 134 before the time t_. In this case, the program proceeds to step 138. As alluded to earlier, the control circuitry 117 monitors the actual retort temperature T aR τ(t_) at the current real sampling time t.. Therefore, in step 138, the control circuitry administers at this time a correction according to the scheduled processing retort temperature T pR τ°- This is done by appropriately controlling the batch sterilizer 102 to eventually bring the actual retort temperature up to at least the temperature T pRT °. Then, the process control program 109 invokes the temperature deviation program 111. In step 139, the invoked program computes a heating lethality F 1 actually delivered to the product cold spot of the batch 101 over the expired time interval [to, tj. This is done by simulating the portion of the batch sterilization process that was actually administered over this time interval. This portion includes the come-up phase and the portion of the processing phase actually administered prior to and including the time t-. In performing this simulation, the simulation model mentioned earlier is used to iteratively and incrementally simulate the portion of a product cold spot time-temperature profile TcsO) 1 that actually occured over the expired time interval [to, tj. This simulation is based on the input parameters T IP , j h , f h , x bh , and f 2 and the actual retort time-temperature profile T aRT (t) over the time interval [to, tj. From this portion of the profile T cs (ty and the input parameters z and T REF , the program 110 iteratively and incrementally computes the heating lethality F 1 actually delivered over the time interval [to, tj. This is done using the lethality equation described earlier, where to = t- π , t- = t k , T cs (ty = T cs (t), and F 1 = F. The precise manner in which step 139 is performed is discussed in greater detail in section 2.c. In step 140, the temperature deviation program 111 determines whether the actual heating lethality F 1 over [to, tj satisfies the target heating lethality F^. If it does not, then this means that the processing phase must continue in order to properly deliver the target heating lethality F^ to the batch 101. As a result, the program 111 returns control to the process control program 109. In step 141, the process control program 109 sets the deviation flag to indicate that a deviation is currently occurring. It then waits in step 149 for the next real sampling time t. = t r +Δt- to return to steps 133 and 134 to determine whether the deviation is still occurring. But, if it is determined in step 140 that the actual heating lethality F 1 over [to, ] does satisfy the target heating lethality F^, then the temperature deviation program 111 proceeds to step 142. In step 142, this program simulates the remaining portion of the batch sterilization process that is predicted to be administered after the current real sampling time t_, assuming that the processing phase ends at this time. This portion is, of course, the cooling phase. The simulation is done in order to compute a total lethality F 1 predicted to be delivered to the batch over a predicted total time interval [to, t τ +Δt c 1 ]. In performing this simulation, the simulation model mentioned earlier is used to iteratively simulate the remaining portion of the product cold spot time-temperature profile Tcs(t) 1 predicted to occur over the predicted total time interval [to, t-H-Δt. 1 ]. This simulation is based on the input parameters j c , f c , T cRT (t) and the actual product cold spot temperature Tc^lj 1 at the current real sampling time t.. This temperature T cs (t- is obtained from the actual portion of the profile T cs (ty that was simulated in step 139. Since it is assumed that the processing phase has ended at the time t^ the cooling time-temperature gradient T cRT (t) is shifted over to begin at a selected cooling retort temperature T- RT 1 which is offset from the actual retort temperature T aRT (t_) at the time t-. The time duration At. 1 therefore covers the portion of the gradient T cRT (t) that is between the temperature T cRτ l and the ending retort temperature T eRT . This allows the actual retort time- temperature profile T aRT (t) to be brought down along and at least equal to this portion of the gradient T cRT (t). The program 110 iteratively and incrementally computes the predicted total lethality F 1 over [to, t τ -ι-Δt c 1 ] based on the product cold spot time-temperature profile T cs (ty, the actually delivered heating lethality F 1 over [to, ], and the input parameters z and T REF . This is done using the lethality equation described earlier, where t 0 = t-,,, t-+Δt c = t k , T cs (t)' = T cs (t), and F 1 = F. The precise manner in which step 142 is performed is discussed in greater detail in section 2.d. In step 143, the temperature deviation program 111 determines whether the processing phase is to end at the current real sampling time t- while the temperature deviation is still occurring. This is done by determining if the predicted total lethality F 1 over [to, Vi-Δt- 1 ] satisfies the target heating lethality F^^- If it is determined that the processing phase has ended, then the program proceeds to step 147 which will be discussed later. In the case where it is determined in step 143 that the processing phase is to continue, the temperature deviation program 111 returns control to the process control program 109. The process control program then sets the deviation flag in step 141 to indicate that a deviation is currently occurring. In step 149, the process control program waits for the next real sampling time t- = f-At.. In this way, steps 133 to 143 are repeated for each real sampling time t_ beginning with the deviation begin time t d l until it is determined in step 134 that the temperature deviation has cleared or it is determined in step 143 that the processing phase has ended. In the case where it is determined in step 134 that the temperature deviation has cleared, the process control program 109 proceeds to step 144 after determining in step 135 that the deviation flag is set. In step 144, the program records the current real sampling time t. as the deviation end time 1 of the deviation. The process control program 109 then again invokes the temperature deviation program 111. In step 145, the temperature deviation program 111 simulates the remaining portion of the batch sterilization process that is predicted to be administered beginning at the deviation end time t e '. This remaining portion includes the remaining portion of the processing phase beginning with the time t,, 1 and the cooling phase. This is done in order to define a rescheduled remaining time-temperature profile T sRT (t)' over a re-scheduled remaining time interval [t, 1 , t, 1 ]. The re-scheduled remaining time-temperature profile T pRT (ty has a remaining processing portion over a re-scheduled remaining processing time interval (t e ', t p 1 ]. This portion comprises the scheduled processing retort temperature T pRT ° as constant over the time interval (t e \ t p 1 ]. Thus, the first temperature deviation is actually cleared between the actual retort time-temperature profile T aRT (t) and this portion of the profile T sRT (ty at the deviation end time t e ! . The profile T^^ 1 also has a cooling portion over a re-scheduled cooling time interval (t p 1 , t c ']. This portion comprises the portion of the time-temperature gradient T cRT (t) between the temperature T pRT ° and the ending retort temperature T eRT over the time interval The precise manner in which step 145 is performed is briefly discussed next and is discussed in greater detail in section 2.e. The simulation model mentioned earlier is used by the temperature deviation program 111 in step 145. The program 111 uses the model to iteratively and incrementally simulate the portion of the product cold spot time-temperature profile T cs (t)' that is predicted to occur over the remaining portion of the batch sterilization process. This simulation is done based on the input parameters j h , f h , x bh , f 2 , j c , f c , T pRT °, and T cRT (t) and the product cold spot temperature T cs (t e -Δt-y at the previous real sampling time t e -Δt-. The product cold spot temperature T cs (t e -Δt-y is obtained from the actual re-scheduled product cold spot time-temperature profile T cs (ty simulated at the time -Δt- in step 139. In step 145, the program 110 also iteratively and incrementally computes a total lethality F 1 that is predicted to be delivered to the product cold spot of the batch 101 over the remaining portion of the batch sterilization process. In doing so, the program 110 computes a heating lethality F 1 that satisfies the target heating lethality F^ and is predicted to be delivered over a re-scheduled heating time interval [to, t p 1 ]. This computation is made based on the portion of the re-scheduled product cold spot time-temperature profile T cs (ty that is predicted to occur over the re-scheduled remaining processing time interval [t,, 1 , t p 1 ], the actually delivered heating lethality F 1 over [to, t,. 1 ) from step 139, and the input parameters z and T REF . Furthermore, the lethality equation described earlier is used to make this computation, where t-„ = to , t k = t p 1 , T cs (t), = T cs (ty, and F = F 1 . The predicted heating lethality F 1 over [to, t p 1 ] is therefore the sum of the actually delivered heating lethality F 1 over [to, t j . 1 ) and a heating lethality F 1 predicted to be delivered over the time interval [t e ! , t p 1 ]. The remaining processing portion of the re-scheduled remaining time-temperature profile T sRT (ty on which the portion of the profile T cs (t)' over the time interval [t e ', t p 1 ] is based is defined as a result. Similarly, the temperature deviation program 111 also iteratively and incrementally computes a total lethality F 1 that satisfies the target total lethality F tøτ&ot and is predicted to be delivered over a re-scheduled total time interval [to, t c ']. The lethality equation is also used in this computation, but where t k = t- 1 . Moreover, the predicted total lethality F 1 over [to, t. 1 ] is based on the portion of the product cold spot time-temperature profile T cs (ty predicted to be delivered over a re-scheduled cooling time interval (t p 1 , ._'], the predicted heating lethality F 1 over [to, t-, 1 ], and the input parameters z and Thus, the predicted total lethality F 1 over [to, t c l ] is the sum of the predicted heating lethality F 1 over [to, t p 1 ] and a cooling lethality F 1 predicted to be delivered over the time interval (t p 1 , t. 1 ]. The cooling portion of the rescheduled remaining time-temperature profile T sRT (ty on which the portion of the profile Tcs(t) 1 over the time interval (t p 1 , t c '] is based is also defined in this way. In step 146, the process control program 109 clears the deviation flag since it has been determined in step 134 that the first temperature deviation has been cleared. The program then returns to step 130. Since the deviation counter n has been incremented to one, the rescheduled processing end time t p 1 is now used in step 132. Therefore, steps 130 to 135 will be repeated until it is determined in step 132 that the current real sampling time t- is the end time t p 1 or until a second temperature deviation is detected in step 134. From the foregoing, it should be clear that only the initial portion of the batch sterilization process over the initial time interval [to, t d ') before the temperature deviation begins will be administered according to the scheduled total time-temperature profile T sRT (t)°. Then, when the deviation clears, the remaining portion of the process over the remaining time interval [t e ! , t- 1 ) will be administered according to the re-scheduled remaining time- temperature profile T sRT (ty if a second temperature deviation does not occur. The process control program 109 then causes the cooling phase in step 148 to be administered by the control circuitry 117. The control circuitry does so in accordance with the re-scheduled remaining time-temperature profile T sRT (.y by appropriately controlling the batch sterilizer 102. Thus, the actual retort time-temperature profile T aRT (t) is brought down along the cooling portion of the profile T sRT (ty over the re-scheduled cooling time interval (t p 1 . t c 1 ]. In doing so, the control circuitry controls the batch sterilizer and monitors the sensed actual retort temperature T aRT (t,.) at each real sampling time \ to make sure that it stays at least equal to the corresponding re-scheduled cooling retort temperature T sRT (t-y for that time. The temperature T sRT (t-y is obtained from the profile T sRT (ty . Referring now to Figs. 6 and 8, as mentioned earlier, it is possible that the processing phase will actually end at a current real sampling time t- while the temperature deviation is still occurring. This is determined in step 143 when the total lethality F 1 predicted to be delivered over the predicted total time interval [to, t r +Δt. 1 ] satisfies the target heating lethality F targtot - In this case, the temperature deviation program 111 defines in step 147 the rescheduled processing end time t p 1 as the time t_ and the re-scheduled cooling end time t- 1 as the time t r +Δt- 1 . Moreover, the re-scheduled remaining time-temperature profile T sRT (.y on which the product cold spot temperature profile T cs (t)' is based is also defined in step 147. As alluded to earlier, this comprises the portion of the cooling time-temperature gradient T- R τ(t) between the selected cooling and ending retort temperatures T cRτ l and T eRT over the re- scheduled remaining time interval (t p 1 , t c ']. The process control program 109 then causes the cooling phase in step 148 to be administered by the control circuitry 117. This is done in accordance with the re-scheduled remaining time-temperature profile T sRT (t)' over the re-scheduled remaining time interval (t p 1 , t. 1 ] in the manner described earlier. It is important to note here that the controller 104 has the unique feature of being able to handle multiple temperature deviations during the processing phase. Thus, as mentioned earlier, it is possible that a second temperature deviation is detected in step 134 after the first temperature deviation. In this case, if it is eventually determined in step 134 that this deviation has cleared, steps 133 to 149 are repeated to define another re-scheduled remaining time-temperature profile T pRT (t) 2 over another re-scheduled remaining time interval [t e 2 , t p 2 ]. But, it may be determined in step 143 that the processing phase has in fact ended while the deviation is still occurring. In this case, the profile T sRT (t) 2 over the time interval (t_, 2 , t c 2 ] is defined in step 147 and the cooling phase is administered in step 148 accordingly. 2.b. Detailed Process Flow for Step 127 of Fig. 6 Fig. 9 shows the detailed process flow that the process scheduling program 110 uses in step 127 of Fig. 6 to define the scheduled total time-temperature profile T sRT (t)°. The program 109 first iteratively performs a simulation of the come-up phase in sub-steps 150 to 156 of step 127. In step 150, the current simulation sampling time t s is initially set to the come-up begin time to. The product cold spot temperature T cs (t s )° at the current simulation sampling time t s is therefore initially set in step 150 to the initial product temperature T IP . And, the heating lethality F° predicted to be delivered to the product cold spot over the current simulation time interval [to, tj is initially set in step 150 to zero. Steps 151 to 155 are then performed by the process scheduling program 110 in each iteration of the come-up phase simulation. In step 151 of each iteration, the current simulation sampling time t s is incremented by the amount of the sampling period Δt_. This results in a new current simulation sampling time t s . The portion of the product cold spot time-temperature profile T cs (t)° predicted to occur over the current simulation time increment [t s -Δt_, tj is then simulated in step 152 of each iteration by the process scheduling program 110. This is done using the simulation model discussed earlier. Moreover, this simulation is based on the heating factors j h , f h , x bh , and f 2 , the product cold spot temperature Tc^t j -Δt.) 0 at the previous simulation sampling time t s -Δt-, and the corresponding scheduled come-up retort temperature at the current simulation time t s . In the first iteration, the product cold spot temperature T cs (t s -Δt-)° will be the initial product temperature T IP from step 150. However, in each subsequent iteration, this temperature is obtained from the product cold spot time-temperature profile T cs (t)° over the previous simulation time increment [t s -2Δt-, t s -Δtj simulated in step 152 of the previous iteration. The temperature T„ RT (t s ) is obtained from the pre-defined come-up time- temperature gradient T uRT (t). Then, in step 153 of each iteration, the process scheduling program 110 computes the heating lethality F° that is predicted to be delivered over the current simulation time increment [ -Δt r , tj. This is done based on the portion of the product cold spot time- temperature profile T cs (t)° over the time increment [t s -Δt-, tj and the input parameters z and T REP . This is also done in accordance with the lethality equation described earlier, where t,-Δt. = t,,,, t s = t k , T cs (t)° = T cs (t), and F° = F. In step 154 of each iteration, the process scheduling program 110 computes the heating lethality F° predicted to be delivered over the current simulation time interval [to, tj. This is done by adding the predicted heating lethality F° over [t s -Δt_, tj from step 153 to the heating lethality F° predicted over the previous simulation time interval [to, t s -ΔtJ. In the first iteration, the lethality F° over [to, t s -ΔtJ is zero from step 150. In each subsequent iteration, this lethality is computed in step 154 of the previous iteration. Then, in step 155 of each iteration, the process scheduling program 110 determines whether the corresponding scheduled come-up retort temperature T^t,.) at the current simulation time t s is the scheduled processing retort temperature T pRT °. This temperature T uR τ(t s ) is obtained from the come-up time-temperature gradient T uRT (t). If the temperatures T URT O S ) nd T pRT ° are not the same, then the process scheduling program 110 returns to step 151 for the next iteration. In this way, steps 151 to 155 are repeated in each subsequent iteration until it is determined that the temperatures T uR ^ .) and T PRT ° are the same. When this occurs, the scheduled come-up end time t u ° is defined as the current simulation sampling time t s in step 156 by the program 110. The program 110 also defines the come-up portion of the scheduled total time-temperature profile T sRT (t)° as the portion of the come-up time- temperature gradient T^t) between the initial and scheduled processing retort temperatures T iRT and T pRT ° over the scheduled come-up time interval [t 0 , t^j. Alternatively, the scheduled come-up end time t,, 0 may be directly defined by the operator from the come-up time-temperature gradient T^t) using the scheduled processing retort temperature T pRT °. The time t,, 0 would be entered as one of the input parameters. Then, the determination in step 155 would be whether this time t^ and the current simulation sampling time t s are the same. The process scheduling program 110 then iteratively performs a simulation of the processing phase in sub-steps 157 to 162 of step 127. Steps 157 to 161 are performed in each iteration of the processing phase simulation. Moreover, steps 157 to 160 are respectively the same as steps 151 to 154, except for the differences described next. In step 158 of each iteration, the portion of the product cold spot time-temperature profile T cs (t)° predicted to occur over the current simulation time increment [ -Δt j , t J is simulated based on the scheduled retort processing temperature T pRT °. The temperature T pRT ° is used in the simulation instead of a scheduled come-up retort temperature T^x^). It should be noted that, in step 158 of the first iteration,- the scheduled product cold spot temperature T cs (t s -Δt_)° is obtained from the profile T cs (t)° predicted over the previous simulation time increment [t s -2Δt-, t s -Δtj in step 152 of the last iteration of the come-up phase simulation. Similarly, in step 160 of the first iteration, the heating lethality F° predicted over the previous simulation time interval [to, t s -Δlj is computed in step 154 of the last iteration of the come-up phase simulation. Then, in step 161 of each iteration, the process scheduling program 110 determines whether the heating lethality F° predicted over the current simulation time interval [to, tj is at least equal to the target heating lethality F tøsh . If it is not, then the process scheduling program 110 returns to step 157 for the next iteration. As a result, the steps 157 to 161 are repeated for each subsequent iteration until it is determined in step 161 that the lethality F° over the current simulation time interval [to, tj is in fact at least equal to the lethality F^- When this occurs, the program 110 defines in step 162 the scheduled processing end time t p 0 as the current simulation sampling time t s . As a result, the program 110 also defines in step 162 the processing portion of the scheduled total time-temperature profile T sRT (t)° as the constant scheduled processing retort temperature T pRT 0 over a scheduled processing time interval (t,, 0 , t p 0 ]. The program 110 further defines in step 162 the heating lethality F° predicted over the scheduled heating time interval [to, t p °] as the lethality F° predicted over the current simulation time interval [to, tj in step 160 of the last iteration. Finally, the program 110 defines in step 162 the scheduled product cold spot temperature T cs (t p 0 ) 0 at the time t-, 0 as the product cold spot temperature T cs (t s )° obtained from the product cold spot temperature profile T cs (t)° simulated over the time increment [ At,, tj in step 158 of the last iteration. The process scheduling program 110 then iteratively performs a simulation of the cooling phase in sub-steps 163 to 170 of step 127. Steps 163 to 167 are performed in each iteration of the cooling phase simulation. Furthermore, steps 163 to 166 are respectively the same as steps 151 to 154 described earlier, except for some differences that are discussed next. In step 164 of each iteration, the process scheduling program 110 simulates the portion of the scheduled product cold spot time-temperature profile T cs (t)° predicted over the current simulation time increment [t s -Δt-, tj. This is simulation is based on the cooling factors j c and f c and the scheduled cooling retort temperature T cRT (t s ) at the current simulation sampling time t s . The temperature T cRT (t s ) is obtained from the scheduled cooling time- temperature gradient T cRT (t). Moreover, for the first iteration, the product cold spot temperature is obtained from the profile T cs (t)° predicted over the previous simulation time increment [t s -2Δt_, t s -Δtj in step 158 of the last iteration of the processing phase simulation. For each subsequent iteration, the product cold spot temperature T cs (t s -Δt-)° is obtained from the profile T cs (t)° predicted over the previous simulation time increment [t s -2Δt-, t s -ΔtJ in step 164 of the previous iteration. In step 165 of each iteration, a cooling lethality F° that is predicted to be delivered to the batch 101 over the current simulation time increment [t s -Δt-, tj is computed by the process scheduling program 110. Then, in step 166 of each iteration, the total lethality F° predicted to be delivered over the current simulation time interval [to, tj is computed. This is done by adding the lethality F° predicted over the current simulation time increment [t s -Δt-, t J in step 165 of the iteration to the lethality F° predicted over the previous simulation time interval [to, t s -ΔtJ. For the first iteration, the lethality F° over [to, t s -ΔtJ is computed in step 160 of the last iteration of the processing phase simulation. But, for each subsequent iteration, this lethality is computed in step 166 for the previous iteration. Then, in step 167 of each iteration, the process scheduling program 110 determines whether the corresponding scheduled cooling retort temperature T cRT (t s ) at the current simulation time t s is the ending retort temperature T eRT of the cooling retort time-temperature gradient T cRT (t). If it is not, then the process scheduling program 110 returns to step 163 for the next iteration. Thus, steps 163 to 167 are repeated in each subsequent iteration until it is determined in step 167 that the temperatures T ucRT (t s ) and T eRT are the same. When this finally occurs, the program 110 determines in step 168 whether the total lethality F° predicted over the current simulation time interval [to, tj is at least equal to the target total lethality F^ g ^. If it is, then the program 110 defines the scheduled cooling end time t c ° as the time t s in step 169. The program 110 also defines in step 169 the cooling portion of the scheduled total time-temperature profile T sRT (t)° as the portion of the gradient T CR τ(t) between the scheduled processing and ending retort temperatures T pRT ° and T eRT over the scheduled cooling time interval [t p 0 , t c 0 ]. But, it may be determined in step 168 that the total lethality F° predicted over the current simulation time interval [to, tj is at least equal to the target total lethality F^ g ,.,. In this case, program 110 re-sets the current simulation sampling time t s in step 170 to the scheduled processing end time t p ° defined in step 162. In view of this, the program 110 also re-sets the lethality F° predicted over the simulation time interval [to, tj to the heating lethality F° over the scheduled heating time interval [to, t p °] defined in step 162. Furthermore, the program 110 re-sets the product cold spot temperature T cs (t s )° to the product cold spot temperature T cs (t p °)° defined step 162. The process scheduling program 110 then returns to step 157. As a result, steps 157 to 161 will be performed in another iteration in the processing phase and the scheduled processing end time t p ° will be redefined in step 162. The re-defined scheduled processing end time t p ° will be the previously defined one incremented by the amount of the sampling period Δt_. Then, the entire cooling phase will be iteratively simulated again in steps 163 to 167 and it will be determined in step 168 whether the lethality F over the current simulation time interval [to, tj is at least equal to the target total lethality F^-,. If this is not the case, then the program 110 returns again to step 157 and steps 157 to 168 are repeated until it is finally determined in step 168 that the lethality F predicted over the time interval [to, tj does satisfy the target total lethality F^ g ^.. When this occurs, the program 110 defines the cooling portion of the scheduled total time-temperature profile T sRT (t) 0 predicted over the scheduled cooling time interval [t p °, t c °] in step 169 in the manner described earlier. The scheduled total time-temperature profile T sRT (t)° is then used to administer the batch sterilization process. This is done in the manner described earlier in section 2.a. discussing the overall process flow of the controller 104. 2.c. Detailed Process Flow for Step 139 of Fig. 6 Fig. 10 shows the detailed process flow that the temperature deviation program 111 uses in step 139 of Fig. 6 at the current real sampling time t- during the nth temperature deviation. As indicated earlier, this program computes in step 139 the re-scheduled lethality F 1 actually delivered over the expired time interval [to, tj. In sub-step 172 of step 139, the program 111 determines whether the deviation flag is set. If it is not, then this means that the current real sampling time t. is the deviation begin time t d l of the first temperature deviation since the deviation counter is now set to one. In this case, the program 111 proceeds to step 173 and iteratively performs in sub-steps 173 to 179 of step 139 a simulation of the come-up phase and the portion of the processing phase actually administered up to the time t_. Steps 174 to 178 are performed in each iteration of the simulation. Furthermore, steps 173 to 178 are respectively the same as steps 150 to 154 of Fig. 9 and discussed in section 2.b., except for the important differences discussed next. In step 173 and steps 174 and 175 of each iteration, the portion of the product cold spot time-temperature profile T cs (t)' that actually occurred over the current simulation time increment [t s -Δt-, tj and an actual product cold spot temperature T cs (t s -Δt-y at the previous simulation sampling time t s -Δt- are simulated and used. This portion of the profile T cs (t)' over the time increment [t s -Δt,., t J is simulated based on the actual retort temperature T aRT (t s ) recorded for the current simulation sampling time t s . The temperature T aRT (t s ) is obtained from the compiled actual retort time-temperature profile T aRT (t). Furthermore, actually delivered lethalities F° over [t s -Δt-, tj, F° over [to, tj, and F° over [t 0 t s -Δt_] are computed and used in steps 176 to 178 of each iteration. In step 178 of each iteration, the temperature deviation program 111 determines whether the current simulation sampling time t s has reached the current real sampling time t_. If it has not, then the program returns to step 174 for the next iteration. In this way, steps 174 to 178 are repeated in each subsequent iteration until it is determined that the times t s and t. are the same. When this finally occurs, the temperature deviation program 111 defines in step 179 the heating lethality F 1 actually delivered over the expired real time interval [to, tj as the lethality F 1 computed over the current simulation time interval [to, tj in step 177 of the last iteration. Similarly, the program defines the actual product cold spot temperature T cs (t-y at the time t_ as the product cold spot temperature T cs (t s y. The temperature T cs (t s )' is obtained from the portion of the product cold spot time-temperature profile T cs (ty simulated over the time increment [t s -Δt-, tj in step 175. But, it may be determined in step 172 that the deviation flag is set. In this case, the current real sampling time t_ is not the deviation begin time t d since the temperature deviation has already begun. The temperature deviation program 111 then proceeds to step 180 where it sets the current simulation sampling time t s to the time t-. The program also sets in step 180 the lethality F 1 over the previous simulation time interval [to, t s -ΔtJ to the heating lethality F 1 actually delivered over the expired real time interval [to, t--AtJ defined at the previous real sampling time At in step 179. Then, steps 175 to 179 are performed in the manner just discussed to define the actually delivered heating lethality F 1 over [to, t] and the actual product cold spot temperature T cs (t-y at the time t_. 2.d. Detailed Process Flow for Step 142 of Fig. 6 Fig. 11 shows the detailed process flow that the temperature deviation program 111 uses in step 142 of Fig. 6 at the current real sampling time t- during the first temperature deviation. As indicated earlier, the total lethality F 1 predicted to be delivered over the rescheduled total time interval [to, t τ +Δt c 1 ] is computed by the program 111 in step 142. In doing so, the program 111 iteratively performs in sub-steps 182 to 186 of step 142 a simulation of the cooling phase beginning at the time t- assuming that the processing phase has ended. Steps 182 to 185 are performed in each iteration of the cooling phase simulation. And, steps 182 to 186 are respectively the same as steps 163 to 167 of Fig. 9 and discussed in section 2.b., except for the notable differences discussed next. In steps 182 and 183 of each iteration, the portion of the product cold spot time- temperature profile T cs (ty that is predicted to occur over the current simulation time increment [t s -Δt_, tj and a predicted product cold spot temperature T cs (t s -Δt-y at the previous simulation sampling time t s -Δt- are simulated and used. The profile T cs (t)' over the time increment [t s -Δt-, tj is simulated based on the re-scheduled cooling retort temperature T cRT (t s ) at the current simulation sampling time t s . The temperature T cRT (t s ) is obtained from the scheduled cooling time-temperature gradient T cRT (t). Since it is assumed that the processing phase has ended at the time t., the gradient T cRT (t) is shifted so as to begin at the selected cooling retort temperature T cKτ l which is offset from the actual retort temperature T aRT (t,.) at the time t-. Furthermore, a predicted cooling lethality F° over the current simulation time increment [t s -Δt_, tj is computed and used in steps 183 and 184 of each iteration. In addition, predicted lethalities F° over [t s -Δt_, tj, F° over [t 0 , tj, and F° over [to.t.-ΔtJ are computed and used in steps 182 to 184 of each iteration. In step 185 of the last iteration, the temperature deviation program 111 determines that the corresponding scheduled cooling retort temperature T cRT (t s ) at the current simulation time t s is the ending retort temperature T eRT . The program then sets in step 186 the total lethality F 1 predicted to be delivered over the re-scheduled total time interval [to, t τ +Δt c 1 ] to the lethality F 1 computed over the current simulation time interval [to, tj in step 184 of the last iteration. As mentioned earlier, the time duration Δt c ' covers the portion of the cooling time-temperature gradient T cRT (t) that is between the selected cooling and ending retort temperatures T- R - J - 1 and T eRT . 2.e. Detailed Process Flow for Step 145 of Fig. 6 Fig. 12 shows the detailed process flow that the temperature deviation program 111 uses in step 145 of Fig. 6 when the current real sampling time t- is the deviation end time t e ' for the first temperature deviation. As indicated earlier, this is done to define the rescheduled remaining time-temperature profile T sRT (t)'. The program 109 first iteratively performs a simulation of the remaining portion of the processing phase in sub-steps 190 to 196 of step 145 when the first temperature deviation clears at the deviation end time t,. 1 . In step 190, the temperature deviation program 111 sets the current simulation sampling time t s to the current real sampling time t-. The program also sets in step 190 the lethality F 1 over the current simulation time interval [to, tj to the heating lethality F 1 actually delivered over the expired real time interval [to, tj. The heating lethality F 1 over [to, ] is defined in step 179 of Fig. 10 and discussed in section 2.c. Similarly, the program also sets in step 190 the product cold spot temperature T cs (t s y at the time t s to the actual product cold spot temperature Tc^) 1 at the time t_. The product cold spot temperature T CS O T ) 1 is defined in step 179 as well. Steps 191 to 195 are performed in each iteration of the simulation of the remaining portion of the processing phase. Moreover, steps 191 to 196 are respectively the same as steps 157 to 162 of Fig. 9 and discussed in section 2.b., except for the differences noted next. In steps 192 and 193 of each iteration, the portion of the product cold spot time- temperature profile T cs (t)' predicted to occur over the current simulation time increment [t s -Δt_, tj and a predicted product cold spot temperature T cs (t s -Δt_y at the previous simulation sampling time t s -Δt_ are simulated and used. Furthermore, predicted lethalities F° over [t s -Δt_, tj, F° over [to, tj, and F° over [to t s -Δtj are computed and used in steps 193 to 195 of each iteration. In step 195 of the last iteration, the temperature deviation program 111 determines that the lethality F° predicted over the current simulation time interval [to, tj satisfies the target heating lethality F^. When this occurs, the program 111 defines in step 196 the rescheduled processing end time t p 1 , the remaimng processing portion of the re-scheduled remaining time-temperature profile T sRT (t)' over the re-scheduled remaining processing time interval (t e ] , t p 1 ], the heating lethality F° predicted to be delivered over the re-scheduled heating time interval [to, t p 1 ], and the product cold spot temperature T cs (t p 'y predicted at the time t p 1 . The profile T sRT (ty comprises the constant scheduled processing retort temperature T PR τ° over the time interval (t e ', t p 1 ]. The temperature deviation program 111 then iteratively performs in sub-steps 197 to 204 of step 145 a simulation of the cooling phase. Steps 197 to 201 are performed in each iteration of the cooling phase simulation. And, steps 197 to 204 are respectively the same as steps 163 to 170 of Fig. 9 and discussed in section 2.b., except for some differences discussed next. In steps 198 and 199 of each iteration, the portion of the product cold spot time- temperature profile T cs (ty predicted to occur over the current simulation time increment [t s -Δt-, tj and a predicted product cold spot temperature T cs (t s -Δt,.y at the previous simulation sampling time t s -Δt- are simulated and used. Furthermore, a cooling lethality F° predicted to be delivered over the current simulation time increment [t s -Δt-, tj is computed and used in steps 199 and 200 of each iteration. Furthermore, predicted lethalities F° over [t s -Δt-, tj, F° over [to, tj, and F° over [t^t.-Δlj are computed and used in steps 198 to 200 of each iteration. After step 201 of the last iteration, the temperature deviation program 111 will proceed to step 203 if it determines in step 202 that the total lethality F° predicted over the current simulation time interval [to, tj does satisfy the target total lethality F^ g ,.,. Then, in step 203, the program defines the cooling portion of the re-scheduled remaining time- temperature profile T sRT (ty over the re-scheduled cooling time interval [t p 1 , t- 1 ]. However, the temperature deviation program 111 will proceed to step 204 if it determines in step 202 that the predicted total lethality F° over [to, t J does not satisfy the target total lethality F^ ot - In this case, the program re-sets in step 204 the current simulation sampling time t s to the re-scheduled processing end time t p 1 defined in step 195. The program 111 also re-sets in step 204 the lethality F 1 over [to, tj to the predicted heating lethality F 1 over [to, t p 1 ] defined in step 195. And, the program re-sets in step 204 the product cold spot temperature T cs (t-)' to the product cold spot temperature T^t- 1 ) 1 defined step 195. Then, the steps 191 to 204 are repeated until the program re-defines the remaining processing portion of the re-scheduled remaining time-temperature profile T sRT (t)' in step 196 and defines the cooling portion of the profile T cRT (t)' in step 203. 3. Alternative Embodiments As indicated earlier, the embodiment of controller 104 associated with Figs. 6 to 12 and described in section 2 is only an exemplary embodiment. Alternative embodiments that utilize the principles and concepts developed in Figs. 6 to 12 and section 2 do exist. 3. a. Scheduled Processing End Time t p ° Kept Constant For example, in one embodiment, the scheduled processing end time t p ° kept constant, as shown in Fig. 13. Thus, in this embodiment, the processing retort temperature T pRT n scheduled in response to the nth temperature deviation will be re-scheduled whenever the (n+l)th temperature deviation occurs while the scheduled remaining processing time interval [t e 1 , t p °] is kept the same. More specifically, the remaining processing portion of the re-scheduled remaimng time-temperature profile T pRT (t)' will be defined as a constant re-scheduled remaimng processing retort temperature T^ 1 over the time interval [t e 1 , t p 0 ] for the first temperature deviation. The process control program 109 detects the first temperature deviation when the actual retort temperature T^t d 1 ) at the deviation begin time tj 1 is below the scheduled processing retort temperature T pRT °. Similar to step 138 of Fig. 6, the program 109 will cause the control circuitry 117 to administer a temperature deviation correction at each real sampling time t_ during the deviation. However, in this case, the actual retort time- temperature profile T aR -rO r ) is brought up until the deviation is cleared between the profile _ τ(t r ) and the remaining processing portion of the profile T pRT (t)'. This occurs when the actual retort temperature T^t e ) at the deviation end time t e ! is at least equal to the temperature T^ 1 . In order to define the re-scheduled remaining processing retort temperature T^ 1 , the temperature deviation program 111 computes at each time t_ during the temperature deviation the heating lethality F 1 predicted to be delivered over the scheduled heating time interval [to, t p 0 ]. This is the sum of the heating lethality F 1 actually delivered over the expired real time interval [to, ] and the heating lethality F 1 predicted to be delivered over the scheduled remaining processing time interval [t_, t p 0 ]. Moreover, this computation is made by simulating the processing phase over the time interval [to, t p 0 ] in a similar manner to that described earlier for the time interval [to, t p 1 ] in step 145 of Fig. 6. However, here, the lethality F 1 predicted over the time interval [t., t p °] is computed based on the portion of the product cold spot time- temperature profile T cs (ty that is predicted over the time interval [t., t p 0 ]. This simulation is performed by setting the temperature T pRT ' to the actual retort temperature T aRT (t-) at the time The computation just described is repeated at each real sampling time t_ after the deviation begin time t d l until the heating lethality F 1 predicted to be delivered over the time interval [to, t-, 0 ] does satisfy the target heating lethality F tøgh . When this finally occurs, the program 111 computes the total lethality F 1 predicted to be delivered over the re-scheduled total time interval [to, t. 1 ]. Here, the lpredicted total ethality F 1 over [to, t- 1 ] will be the sum of the predicted heating lethality F 1 over [to, t p °] and a cooling lethality F 1 predicted to be delivered over a re-scheduled cooling time interval [t p °, t- 1 ]. This computation is made by simulating the cooling phase over the time interval [t- 0 , t- 1 ] in a similar manner to that described earlier for step 145 of Fig. 6. Here, however, the cooling time-temperature gradient T CR τ(t) will be shifted to start at the re-scheduled remaining processing retort temperature T pR j. 1 . As a result, the portion of the product cold spot time-temperature profile T cs (ty predicted to occur over the time interval [t p °, t c ! ] will be based on the portion of the gradient T cRT (t) that is between the temperature T p ^ 1 and the ending retort temperature T eRT over the time interval [t p °, c 1 ]. If the predicted total lethality F 1 over [to, t c '] satisfies the target total lethality F^-,, then the temperature deviation is cleared. But, if it does not, then the temperature deviation program 111 repeats the entire process just described for the next real sampling time t-4-Δt- until the target total lethality F^ g ,,,, is finally satisfied and the deviation is cleared. When this occurs, the program defines the remaining processing portion of the re-scheduled remaining time-temperature profile T sRT (ty as the re-scheduled remaining processing retort temperature T pR -p 1 over the scheduled remaining processing time interval [t e l , t p 0 ]. Similarly, the program defines the cooling portion of the re-scheduled remaining time-temperature profile T sRT (ty as the portion of the gradient T cRT (t) between the temperature T p ^ 1 and the scheduled ending retort temperature T eRT over the re-scheduled cooling time interval [t-°, t c ']. Referring to Fig. 8, it is also possible in this embodiment that the processing phase will actually end at a current real sampling time t- while the temperature deviation is still occurring. In this case, the re-scheduled remaining time-temperature profile T cRT (ty is defined in the same manner as was described earlier for step 147 of Fig. 6. The flow diagrams in Figs. 6 and 9 to 12 and described in section 2 would of course have to be adjusted according to the foregoing discussion. However, the manner in which this is done will be obvious to those skilled in the art. 3.b. Re-Scheduled Remaining Processing Retort Temperature T pRT ' and End Time t-, 1 As a variation of the embodiment just described, the remaining processing portion of the re-scheduled remaining time-temperature profile T pRT (ty may comprise a re-scheduled remaining processing retort temperature T p ^ 1 over a re-scheduled remaining processing time interval [t e ', t p 1 ]. This embodiment would therefore be a combination of the two previous embodiments described. In this way, both a re-scheduled processing end time t p 1 and a rescheduled remaining processing retort temperature T PRT ' may be defined when the first temperature deviation occurs. The same would be true for any subsequent deviations. 3.c. Handling Temperature Deviation in Come-Up Phase It is possible that a temperature deviation will occur during the come-up phase between the actual retort time-temperature profile T aRT (t) and the come-up portion of the scheduled total time-temperature profile T sRT (t)°. There are numerous well known techniques for handling such a temperature deviation. However, as those skilled in the art will recognize, the technique disclosed herein for handling a temperature deviation during the processing phase may be used in another embodiment of the controller 104 for also handling a temperature deviation in the come-up phase. 3.d. Using Portion of Actual Retort Time-Temperature Profile T aRT (t) In step 139 of the embodiment described in section 2, the portion of the product cold spot time-temperature profile T cs (ty that actually occurs over the expired real time interval [t , ] is based on the actual retort time-temperature profile T aRT (t) over this same time interval. However, a more conservative embodiment could be used. For example, the portion of the profile T cs (t)' over the time interval [to, t d ') may be based on the potion of the scheduled total time-temperature profile T sRT (t) over the scheduled time interval [to, t d ') before the deviation began. Then, the portion of the profile T cs (t)' over the time interval [t d ', tj may be based on the portion of the profile T aRT (t) over this same time interval. This means that the portion of the re-scheduled product cold spot time-temperature profile Tcs(t) 1 over the deviation time interval [t d \ tg 1 ) will be based on the portion of the profile T aRT (t) over the same time interval. The remaining portion of the profile T cs (t)' over the re-scheduled remaining time interval (tg 1 , t . 1 ] will be simulated in the manner discussed earlier for step 145. 3.e. Without Heating Target Lethality F^ As mentioned earlier, the target heating lethality F^ may be an optional requirement in the batch sterilization system 100. Thus, in another embodiment, only the target total lethality F tøglot would be used and the flow diagrams in Figs. 6 and 9 to 12 would have to be adjusted accordingly. 3.f. Temperature Gradients in Processing and Remaining Processing Portions of Scheduled Total and Re-scheduled Remaining Time-Temperature Profiles T sRT (t)° and T sRT (ty Finally, the scheduled total and re-scheduled remaining time-temperature profiles T sRT (t)° and T sRT (ty were defined in steps 127 and 145 with scheduled and re-scheduled remaining processing retort temperatures T pRT (t)° and T pRT (t)' that are constant over the scheduled and re-scheduled remaining processing time intervals [t u °, t d °] and [t e ', t d ], respectively. However, as those skilled in the art will recognize, the profiles T sRT (t) 0 and T sR τ(t) 1 may also be defined in such a way that they are not constant over the time intervals [C d °] and [tg 1 , tj 1 ]. In other words, the profiles T sRT (t)° and T sRT (ty may be defined in such a way that their respective processing and remaining processing portions have temperature gradients over the time intervals [t u °, t d °] and [t e ', t d '] like their come-up and cooling portions. 4. Conclusion Referring to Figs. 7 and 13, it is important to note that the portion of the product cold spot time-temperature profile T cs (t)' that actually occurs over the time interval [to, t e 1 ) is based on at least the portion of the actual retort time-temperature profile T aRT (t) that occurs over the deviation time interval [t d , t e '). This means that full credit is given to the heating lethality F 1 that is actually delivered over this time interval [t 0 , t. 1 ) to the batch 101. As a result, the re-scheduled heating time interval [to, t p 1 ] will not be overly conservative and the food product in the batch will not be over processed. While the present invention has been described with reference to a few specific embodiments, the description is illustrative of the invention and is not to be construed as limiting the invention. Various modifications may occur to those skilled in the art without departing from the true spirit and scope of the invention as defined by the appended claims.

Claims: WHAT IS CLAIMED IS: 1. A batch sterilization system comprising: a batch sterilizer to perform a batch sterilization process on a batch of containers; a sensor to sense actual retort temperatures in the batch sterilizer during the batch sterilization process; and a controller to: compile an actual retort time-temperature profile during the batch sterilization process from the actual retort temperatures sensed by the sensor; until a temperature deviation between the actual retort time-temperature profile and a scheduled time-temperature profile has begun, control the batch sterilizer so as to administer an initial portion of the batch sterilization process before the temperature deviation has begun according to the scheduled time-temperature profile; in response to the temperature deviation, define a re-scheduled remaining time-temperature profile for a remaining portion of the batch sterilization process that begins when the temperature deviation has cleared by simulating the batch sterilization process based on the actual retort time-temperature profile; during the temperature deviation, control the batch sterilizer so as to administer corrections to clear the temperature deviation between the actual retort and rescheduled remaining processing time-temperature profiles; when the temperature deviation has cleared, administer the remaining portion of the batch sterilization process according to the re-scheduled remaining time-temperature profile. 2. The batch sterilization system of claim 1 wherein the temperature deviation occurs during a processing phase of the batch sterilization process. 3. The batch sterilization system of claim 1 wherein the temperature deviation occurs during a come-up phase of the batch sterilization process. 4. The batch sterilization system of claim 2 wherein the controller defines the rescheduled remaining time-temperature profile by: computing a total lethality predicted to be delivered to the product cold spot over the batch sterilization process that (a) is based on the product cold spot time-temperature profile, and (b) satisfies a target lethality to be delivered to the product cold spot; simulating the product cold spot time-temperature profile based on the actual retort temperature profile and the re-scheduled remaining time-temperature profile. 5. The batch sterilization system of claim 3 wherein the controller uses a finite difference simulation model to simulate the product cold spot time-temperature profile. 6. The batch sterilization system of claim 3 wherein the total lethality is the sum of (a) a lethality actually delivered over a first time interval from when the batch sterilization process begins to when the temperature deviation clears, and (b) a lethality predicted to be delivered over a second time interval from when the temperature deviation clears to when the batch sterilization process is predicted to end. 7. The batch sterilization system of claim 6 wherein: the lethality actually delivered over the first time interval is based on the portion of the product cold spot time-temperature profile over the first time interval; the portion of the product cold spot time-temperature profile over the first time interval is based on the portion of the actual retort temperature profile over a time interval from when the temperature deviation begins to when the temperature deviation clears. 8. The batch sterilization system of claim 6 wherein: the heating lethality actually delivered over the first time interval is based on a portion of the product cold spot time-temperature profile over the first time interval; the portion of the product cold spot time-temperature profile over the first time interval is based on the portion of the actual retort temperature profile over the first time interval. 9. A method of administering and providing on-line correction of a batch sterilization process performed on a batch of containers, the method comprising the steps of: compiling an actual retort time-temperature profile during the batch sterilization process from actual retort temperatures sensed during the batch sterilization process; until a temperature deviation between the actual retort temperature profile and a scheduled time-temperature profile has begun, administering an initial portion of the batch sterilization process before the temperature deviation has begun according to the scheduled time-temperature profile; in response to the temperature deviation, defining a re-scheduled remaining time- temperature profile for a remaining portion of the batch sterilization process that begins when the temperature deviation has cleared by simulating the batch sterilization process based on the actual retort time-temperature profile; during the temperature deviation, administering corrections so that the temperature deviation will be cleared between the actual retort and re-scheduled remaining time- temperature profiles; when the temperature deviation has cleared, administering the remaining portion of the batch sterilization process according to the re-scheduled remaining time-temperature profile. 10. The method of claim 9 wherein the temperature deviation occurs during a processing phase of the batch sterilization process. 11. The method of claim 9 wherein the temperature deviation occurs during a come-up phase of the batch sterilization process. 12. The method of claim 9 wherein the step of defining the re-scheduled remaining time- temperature profile comprises the steps of: computing a total lethality predicted to be delivered to the product cold spot over the batch sterilization process that (a) is based on a product cold spot time-temperature profile, and (b) satisfies a target lethality to be delivered to the product cold spot; and simulating the product cold spot time-temperature profile based on the actual retort temperature profile and the re-scheduled remaining time-temperature profile. 13. The method of claim 12 wherein a finite difference simulation model is used in the step of simulating the product cold spot time-temperature profile. 14. The method of claim 12 wherein the total lethality is the sum of (a) a lethality actually delivered over a first time interval from when the batch sterilization process begins to when the temperature deviation clears, and (b) a lethality predicted to be delivered over a second time interval from when the temperature deviation clears to when the batch sterilization process is predicted to end. 15. The method of claim 14 wherein: the lethality actually delivered over the first time interval is based on the portion of the product cold spot time-temperature profile over the first time interval; the portion of the product cold spot time-temperature profile over the first time interval is based on the portion of the actual retort temperature profile over a time interval from when the temperature deviation begins to when the temperature deviation clears. 16. The method of claim 14 wherein: the heating lethality actually delivered over the first time interval is based on a portion of the product cold spot time-temperature profile over the first time interval; the portion of the product cold spot time-temperature profile over the first time interval is based on the portion of the actual retort temperature profile over the first time interval. 17. A controller for use in a batch sterilization system, the batch sterilization system including a batch sterilizer to perform a batch sterilization process on a batch of containers and a sensor to sense actual retort temperatures in the batch sterilizer during the batch sterilization process, the controller comprising: control circuitry to administer the batch sterilization process by controlling the batch sterilizer and measure the actual retort temperatures sensed by the sensor; a memory to store a process control program and a temperature deviation program; and a microprocessor coupled to the control circuitry and the memory to execute the process control and temperature deviation programs such that: the process control program: compiles an actual retort time-temperature profile during the batch sterilization process from the actual retort temperatures measured by the control circuitry; until a temperature deviation between the actual retort time-temperature and a scheduled time-temperature profile has begun, causes the control circuitry to administer an initial portion of the batch sterilization process before the temperature deviation has begun according to the scheduled time-temperature profile; during the temperature deviation, causes the control circuitry to administer corrections to clear the temperature deviation between the actual retort time-temperature profile and a re-scheduled remaining time-temperature profile for a remaimng portion of the batch sterilization process that begins when the temperature deviation has cleared; and when the temperature deviation has cleared, causes the control circuitry to administer the remaining portion of the batch sterilization process according to the re- scheduled remaining time-temperature profile; and the temperature deviation program, in response to the temperature deviation, defines the re-scheduled remaining time-temperature profile by simulating the batch sterilization process based on the actual retort time-temperature profile. 18. The controller of claim 17 wherein the temperature deviation occurs during a processing phase of the batch sterilization process. 19. The controller of claim 17 wherein the temperature deviation occurs during a come-up phase of the batch sterilization process. 20. The controller of claim 17 wherein the temperature deviation program defines the rescheduled remaining time-temperature profile by: computing a total lethality predicted to be delivered to the product cold spot over the batch sterilization process that (a) is based on the product cold spot time-temperature profile, and (b) satisfies a target lethality to be delivered to the product cold spot; simulating the product cold spot time-temperature profile based on the actual retort temperature profile and the re-scheduled remaining time-temperature profile. 21. The controller of claim 20 wherein the temperature deviation program uses a finite difference simulation model to simulate the product cold spot time-temperature profile. 22. The controller of claim 21 wherein the total lethality is the sum of (a) a lethality actually delivered over a first time interval from when the batch sterilization process begins to when the temperature deviation clears, and (b) a lethality predicted to be delivered over a second time interval from when the temperature deviation clears to when the batch sterilization process is predicted to end. 23. The controller of claim 22 wherein: the lethality actually delivered over the first time interval is based on the portion of the product cold spot time-temperature profile over the first time interval; the portion of the product cold spot time-temperature profile over the first time interval is based on the portion of the actual retort temperature profile over a time interval from when the temperature deviation begins to when the temperature deviation clears. 24. The controller of claim 22 wherein: the lethality actually delivered over the first time interval is based on a portion of the product cold spot time-temperature profile over the first time interval; the portion of the product cold spot time-temperature profile over the first time interval is based on the portion of the actual retort temperature profile over the first time interval.

Inventors: WENG ZHIJUN, WENG, ZHIJUN
Applicants: FMC CORP, FMC CORPORATION
Application year: 1999
Main classification: A23L3
IPC codes: A23L3