Abstract:
The invention relates to an alarm management apparatus for managing an alarm occurring in a plant. The alarm management apparatus includes an alarm collection unit for collecting an alarm; a process data collection unit for collecting process data; an alarm suppression determination unit for determining whether or not suppressing an alarm from an alarm suppression target is adequate using the process data upon reception of an alarm suppression command; and an alarm processing unit for suppressing the alarm from the alarm suppression target if the alarm suppression determination unit determines that the alarm suppressing is adequate.

Description:
TECHNICAL FIELD 
       [0001]    The present invention relates to an alarm management apparatus for managing an alarm occurring in a plant and in particular to an alarm suppression function of suppressing an unnecessary alarm message. 
       RELATED ART 
       [0002]    Hitherto, a large number of alarms have occurred without interruption from a field device, a distributed control system (DCS), etc., whereby an alarm flood state in which an alarm message monitor screen becomes full of alarm messages has occurred, causing a plant operator to overlook an important alarm or make an erroneous determination. Thus, there is a demand for suppressing an alarm notification sent to the operator in response to the state and the operation situation of the plant. 
         [0003]    Then, alarm management has been conducted in such a manner that the operator is notified only of a necessary alarm at the optimum timing by choosing information if a large number of alarms are generated. 
         [0004]      FIG. 4  is a schematic representation of alarm suppression in a related art. 
         [0005]    A DCS is made up of a field control station (FCS)  1  for controlling a field device (not shown), an operation monitor station (HIS)  10  for providing an operator interface to perform operation monitor of the FCS  1 , and an engineering station (ENG)  20  for executing engineering functions of application edit, download, test, etc., and maintenance. The function of the HIS  10  and the function of the ENG  20  can be installed in one PC or in separate PCs. 
         [0006]    An alarm collection section  11  receives an alarm and an event from a real device in a plant such as a field device or the FCS  1 . An alarm processing section  12  adds added value information to the received alarm and event, normalizes the received alarm and event, etc. 
         [0007]    The alarm processing section  12  determines whether or not the collected alarm is an alarm to be suppressed in accordance with an alarm suppression command from an input section  13 , and sends only the alarm to be reported to the operator to an alarm display section  14 . Consequently, an unnecessary alarm is suppressed and only a necessary alarm is displayed on a display  15 . 
         [0008]    A plant engineer sets processing for an alarm or an event by an alarm engineering section  22  through an input section  21  and groups alarms to be suppressed. The data set in the alarm engineering section  22  is retained in an alarm engineering DB  23  as a database (DB). The plant engineer engineers the plant while checking the descriptions on a-display  24 . 
         [0009]    Processing of the alarm processing section  12  is executed based on information in the alarm engineering DB  23 . 
         [0010]      FIG. 5  is a schematic representation of an alarm suppression condition in the related art. 
         [0011]    The plant engineer previously groups alarms by the alarm engineering section  22 . In the example, tags FIC 100 , FIC 200 , TIC 100 , and TIC 200  are assigned to Group  1 , and tags FIC 300 , FIC 400 , TIC 300 , and TIC 400  are assigned to Group  2 . 
         [0012]    If it is necessary to suppress alarms of FIC 100 , FIC 200 , TIC 100 , and TIC 200 , the operator sends a notification that Group  1  is to be suppressed to the alarm processing section  12  using the input section  13  of the HIS  10 . 
         [0013]    [Patent document 1] Japanese Patent Laid-Open No. 2003-186536 
         [0014]    In a state in which an alarm message is inevitably issued as at the maintenance time of a field device, there is a demand for temporarily suppressing such an unnecessary alarm to prevent overlooking of any other important alarm. However, determination as to which alarm group to suppress is left to the operator and a check mechanism for operation of the operator is not provided and thus there is a possibility that a device which must not be suppressed may be suppressed because of a mistake in the group name, an operation mistake, etc. 
         [0015]    Determination of suppression release of an alarm message is left to the operator and an automatic suppression releasing mechanism is not provided and thus it is feared that an alarm may be overlooked because the operator forgets to release alarm suppression although it becomes unnecessary to suppress the alarm. 
       SUMMARY 
       [0016]    Exemplary embodiments of the present invention provide an alarm management apparatus that can check validity of alarm suppression. 
         [0017]    Exemplary embodiments of the present invention are embodied as follows: 
         [0000]    (1) An alarm management apparatus for managing an alarm occurring in a plant, the alarm management apparatus having: 
         [0018]    an alarm collection section which collects an alarm; 
         [0019]    a process data collection section which collects process data; 
         [0020]    an alarm suppression determination section which determines whether or not suppressing an alarm from an alarm suppression target is adequate using the process data upon reception of an alarm suppression command; and 
         [0021]    an alarm processing section which suppresses the alarm from the alarm suppression target if the alarm suppression determination section determines that the alarm suppressing is adequate. 
         [0000]    (2) The alarm management apparatus as claimed in claim  1  further having an alarm engineering section which groups the alarm suppression targets and sets an alarm suppression condition to suppress alarms for each group.
 
(3) The alarm management apparatus as claimed in claim  1  or  2  wherein the process data collection section selects only the process data required for the determination of the alarm suppression determination section and collects the process data periodically.
 
(4) The alarm management apparatus as claimed in claim  2  or  3  further comprising:
 
         [0022]    an alarm display section which controls an alarm display, 
         [0023]    wherein upon reception of the alarm suppression command, when the group of the alarm suppression target does not satisfy the alarm suppression condition, the alarm suppression determination section does not permit the alarm processing section to execute alarm suppression and the alarm processing section notifies the alarm display section that the alarm suppression is not permitted. 
         [0000]    (5) The alarm management apparatus as claimed in any of claims  2  to  4  wherein if the alarm suppression condition becomes unsatisfied after being satisfied, the alarm suppression determination section releases the alarm suppression of the alarm processing section. 
         [0024]    According to the invention, the following advantages can be provided: 
         [0025]    An operation mistake involved in the alarm suppression of the operator can be prevented, erroneous suppression of a necessary alarm can be eliminated, and safety of plant operating can be improved. 
         [0026]    Other features and advantages may be apparent from the following detailed description, the accompanying drawings and the claims. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0027]    In the accompanying drawings: 
           [0028]      FIG. 1  is a block diagram to show one embodiment of the invention; 
           [0029]      FIG. 2  is a schematic representation of an alarm suppression condition of the invention; 
           [0030]      FIG. 3  is a specific block diagram of the invention; 
           [0031]      FIG. 4  is a schematic representation of alarm suppression in a related art; and 
           [0032]      FIG. 5  is a schematic representation of an alarm suppression condition in the related art. 
       
    
    
     DETAILED DESCRIPTION 
       [0033]    The invention will be discussed in detail with the accompanying drawings. 
         [0034]      FIG. 1  is a block diagram to show one embodiment of the invention. Components identical with those previously described with reference to  FIG. 4  are denoted by the same reference numerals in  FIG. 1 . 
         [0035]    An alarm collection section  11  receives an alarm and an event from a real device in a plant such as a field device or an FCS  1 . An alarm processing section  12   a  adds added value information to the received alarm and event, normalizes the received alarm and event, etc. Adding the added value information is a function of adding the assumed issuance cause of the alarm, the measures to be taken, information to be monitored together, etc., to the alarm or the event. The normalizing is processing of removing dialect of the collected alarm and event and level mismatch and is a function of standardizing the notation, performing level matching of alarm importance, etc. 
         [0036]    An alarm engineering section  22  is a section for setting processing for an alarm or an event and a plant operator or a plant engineer (hereinafter simply referred to as operator) groups alarms to be suppressed through an input section  21  and specifies an alarm suppression condition to suppress each group. The alarm suppression condition is specified by describing a conditional expression using process data of the plant. The data set in the alarm engineering section  22  is retained in an alarm engineering DB  23  as a database (DB). 
         [0037]    A process data collection section  31  periodically collects process data from the plant. At this time, all process data of the plant may be collected or the alarm suppression condition set in the alarm engineering section  22  may be analyzed and only the process data set in the alarm suppression condition (process data required for determination of an alarm suppression determination section  32 ) may be selected for collection. 
         [0038]    If the operator determines that alarm suppression is required, the operator issues an alarm suppression command through the input section  21 . Upon reception of the alarm suppression command, the alarm suppression determination section  32  determines whether or not suppression of the alarms in the group to be suppressed is adequate. At this time, the alarm suppression determination section  32  uses the process data collected in the process data collection section  31  to determine whether or not the alarm suppression condition set in the alarm engineering section  22  is satisfied. 
         [0039]    If the alarm suppression determination section  32  determines that suppression of the alarms in the group to be suppressed is adequate, the alarm suppression determination section  32  permits the alarm processing section  12   a  to suppress the alarms in the group. In this case, the alarm processing section  12   a  identifies and suppresses the alarms in the group corresponding to the alarm suppression command issued by the operator among the alarms collected in the alarm collection section  11 , and passes data concerning the alarms to an alarm display section  14 . Consequently, the unnecessary alarms in the group specified by the operator are suppressed and only necessary alarms are displayed on a display  15 . 
         [0040]    On the other hand, if the alarm suppression determination section  32  determines that suppression of the alarms in the group to be suppressed is not adequate, the alarm suppression determination section  32  does not permit the alarm processing section  12   a  to suppress the alarms in the group. In this case, the alarm processing section  12   a  notifies the alarm display section  14  that the alarm suppression commanded by the operator is not permitted. Consequently, a message to the effect that the alarm suppression is not permitted is displayed on the display  15 , enabling the operator to recognize that the alarm suppression commanded by the operator is not permitted. 
         [0041]    Accordingly, for the determination of the operator for the situation of the plant, the process data from the real plant is collected and is used to check whether or not suppression of the alarms in the group to be suppressed is adequate, whereby an operation mistake involved in the alarm suppression of the operator can be prevented, erroneous suppression of a necessary alarm can be eliminated, and safety of plant operating can be improved. 
         [0042]    If alarm suppression is started, the alarm suppression determination section  32  uses the process data periodically collected by the process data collection section  31  to periodically check whether or not the alarm suppression condition is satisfied. If the alarm suppression condition set is not satisfied, the alarm suppression determination section  32  commands the alarm processing section  12   a  to release the alarm suppression. 
         [0043]    Accordingly, overlooking an alarm because the operator forgets to release alarm suppression although it becomes unnecessary to suppress the alarm can be prevented. 
         [0044]      FIG. 2  is a schematic representation of the alarm suppression condition of the invention. 
         [0045]    The alarms to be suppressed are grouped and a condition to suppress each group is specified by the alarm engineering section  22 . 
         [0046]    The alarms are grouped considering relevant events as in facility units, step units, etc., conforming to the situation of the plant. In the example, tags FIC 100 , FIC 200 , TIC 100 , and TIC 200  are assigned to Group  1 , and tags FIC 300 , FIC 400 , TIC 300 , and TIC 400  are assigned to Group  2 . FIC 100 , TIC 100 , etc., represents the name (tag) assigned to a field device installed in the plant. 
         [0047]    The group suppression condition is set for each group. In the example, the group suppression condition is described with the process data for the tag name of a field device and a logical operation expression. Specifically, the alarm suppression condition of Group  1  will be discussed. 
         [0048]    (FIC 100 , PV&lt;10.0) AND (FIC 200 , PV&lt;10.0) indicates that if PV (measurement value) of each of the field devices FIC 100  and FIC 200  for measuring the flow quantity of the plant becomes smaller than 10.0% of the whole flow quantity, alarms from the devices belonging to Group  1  are suppressed. Such a setting is possible if unnecessary alarms are to be temporarily suppressed collectively (as a group), etc., in a state in which an alarm is inevitably issued containing the field devices associated with a specific value as the specific value is closed for maintenance. 
         [0049]    If it is necessary to suppress alarms of FIC 100 , FIC 200 , TIC 100 , and TIC 200 , the operator uses the input section  21  to notify the alarm suppression determination section  32  that Group  1  is to be suppressed. The alarm suppression determination section  32  reads the alarm suppression condition of Group  1  from the alarm engineering DB  23  and uses the process data collected in the process data collection section  31  to determine whether or not the alarm suppression condition of Group  1  is satisfied. 
         [0050]    Thus, automatic checking is performed for the determination of the operator based on the actual process data, so that suppressing an alarm which must not be suppressed because of a mistake in the group name, an operation mistake, etc., of the operator is eliminated. 
         [0051]    As in the example, the alarm suppression condition is set as a logical operation expression according to the process data of a plurality of field devices (FIC 100  and FIC 200 ), whereby the validity of the alarm suppression can be precisely determined as compared with determination based on the process data of only one field device. Field machines involving an alarm issued one after another (for example, TIC 100  and TIC 200 ) need only to be assigned to the relevant group (Group  1 ) and the conditional expression for the tag name becomes unnecessary. 
         [0052]    The alarm suppression determination section  32  collates the process data and the alarm suppression condition with each other in a fixed cycle. Thus, for example, if the measurement value of the field device FIC 100  exceeds 10.0% of the whole flow quantity, the alarm suppression is released. Accordingly, operator triggers starting of alarm suppression, but alarm suppression can be released automatically, a burden of operation, determination, etc., on the operator can be lightened, the operator can be prevented from forgetting to release alarm suppression, and overlooking of an important alarm can be eliminated. 
         [0053]      FIG. 3  is a specific block diagram of the invention. 
         [0054]    An alarm suppression condition (A) is previously set for each group of alarms to be suppressed and when the operator specifies the group of alarms to be suppressed and issues an alarm suppression command (B), whether or not suppressing the alarms in the group specified by the operator is adequate, namely, whether or not the alarm suppression condition of the group is satisfied is determined for the alarm suppression command of the specific group issued by the operator (C). 
         [0055]    If the alarm suppression condition is not satisfied, the operator is notified that the alarm suppression of the group is not executed (D). On the other hand, if the alarm suppression condition is satisfied, the alarm suppression of the group is executed (E). At this time, the tag names of the field devices whose alarm is to be suppressed are listed, enabling the operator to check them (F). 
         [0056]    If the alarm suppression condition is satisfied and the alarm suppression is started, whether or not the alarm suppression condition is satisfied is checked on a predetermined period (G). The checking interval can be defined by the operator. 
         [0057]    If the alarm suppression condition is not satisfied, the operator is notified that the alarm suppression condition is not satisfied (H). If the alarm suppression condition is not satisfied (H, J) or if the operator issues an alarm suppression release command (I, J), the alarm suppression of the group is released (K). 
         [0058]    Although occurrence of an alarm flood state can be prevented by suppressing alarms, it is feared that an alarm may be overlooked because of an erroneous alarm suppression command or that an alarm may be overlooked because the operator forgets to release alarm suppression. 
         [0059]    According to the invention, the alarm suppression command is automatically checked for validity and when it becomes unnecessary to suppress alarms, automatically the alarm suppression is released, so that a burden of operation, determination, etc., on the operator can be lightened and appropriate alarm management can be conducted.