Abstract:
A multivariable process controller controls a chemical, polymer or other physical process. Slow tuning and over-conservative controlled variable values are employed during step testing. While all controlled process variables are within safe limits, only one manipulated variable (MV) at a time is step changed. Several manipulated variables are moved when process variables exceed safe limits to ensure that the controlled process variables return to the safe range, such that suitable MV targets for step testing are able to be automatically discovered within a closed loop control environment. Thus, the step test is able to be conducted mostly unsupervised and/or remotely via a telephone or network connection. A new process perturbation approach simultaneously perturbs multiple or all of the process input variables in such a way that the process responses (process outputs) are maximized, while the process variables are maintained inside its predefined operating constraints. It uses magnitude modulated Generalized Binary Noise (MGBN) signals to excite multiple process variables, and uses a specially designed model predictive controller (MPC) to safeguard the process. The specially designed MPC controller uses minimal move and discrete control action to reduce interference with the GBN perturbations and prevents unwanted feedback from contaminating the data quality, while keeping the process operating in a desired range.

Description:
RELATED APPLICATION(S)  
       [0001]     This application is a continuation-in-part of U.S. application Ser. No. 09/904,168, filed Jul. 12, 2001, which claims the benefit of U.S. Provisional Application No. 60/217,753, filed on Jul. 12, 2000, the entire teachings of which are incorporated herein by reference. 
     
    
     BACKGROUND OF THE INVENTION  
       [0002]     Multivariable Process Control (MPC) algorithms, e.g., Dynamic Matrix Control (DMC), require sufficiently accurate dynamic models of the process unit to ensure high performance control and maintain closed loop stability. The accuracy of the model places an upper limit on the obtainable closed loop performance of the multivariable control system. However, there is a finite limit imposed on the obtainable model accuracy. This is due to the approximation error introduced by representing the real process, which is often non-linear, with linear models, and the ability to identify the model through a system identification process based on observed process data that is usually corrupted by noise and disturbances.  
         [0003]     In general, the most cost-effective way to derive accurate models of a large-scale process unit, is to vigorously perturb the process unit with suitable test signals without exceeding safety or operability constraints. The process perturbations have to cover the full amplitude and frequency range of the unit. Several different types of test signals can be used, including steps, pulses, random white noise sequences, of pseudo-random-binary (PRBS) signals. In the process control industry, step test signals are widely used because it is easy to generate these signals manually, and the procedure is referred to as step testing. For the purposes of this discussion, perturbing a process unit with the intent of identifying an empirical dynamic model, is referred to as step testing, whatever test signals are used.  
         [0004]     Step testing consists of making sufficiently large orthogonal and independent step changes in all the manipulated variables (MV&#39;s) of the process unit under careful supervision. Manipulated variables are those that are adjusted through actuators coupled to respective control valves, reactors, pumps/compressors, etc. forming the process unit and are for example feed rates, flow rate, temperature of a vessel, and the like. The step test data is then used in system identification algorithms to fit empirical dynamic models to the observed process responses. In order to minimize the duration and consequent cost of the step test, these step changes must be of sufficient amplitude to clearly observe the dynamic behavior of the process and maximize the signal to noise ratio. Correlation (dependence) between the MV&#39;s has to be minimized to ensure that accurate models can be identified.  
         [0005]     Model accuracy results from using large step changes, ensuring minimal correlation between MV&#39;s and minimal feedback correlation, and ensuring that the step test sequence spans the full frequency range from very fast to very slow steps relative to the Time-to-Steady-State (TTSS) of the process. Unwanted feedback correlation results from the need to make frequent correcting moves in the MV&#39;s to counteract the effect of large unmeasured disturbances, and can degrade the accuracy of the model.  
         [0006]     Control valves must also be prevented from fully opening or closing (valve saturation), and tank levels must be kept within the range of the level measurement devices. The fast high frequency dynamics of the process model are important to ensure high performance closed loop control. The slow low frequency dynamics (or process gains) is important to ensure accurate prediction of the future steady-state operating point of the process. This ensures that the optimizer built into the MPC algorithm will determine the most economically optimum steady state targets for the various process variables, and the MPC control algorithm will maintain the process close to the optimum targets, resulting in substantial economic benefit.  
         [0007]     It is also important to introduce enough large steps to ensure that the identification algorithm can average out the effect of unmeasured disturbances. The duration of the test is a direct result of the frequency content of the process output signals resulting from the test signals, relative to the frequency content of the process outputs resulting from unmeasured disturbances. Where the process model matrix has a dominantly diagonal model structure (i.e., several units connected in a series structure), independently perturbing several or even all inputs simultaneously can shorten the test duration. Essentially, the signal to noise ratio of every CV (controlled variable, e.g., temperature, pressure, composition, product properties, etc.) in every frequency range of interest has to be maximized.  
         [0008]     A significant part of the cost of implementing MPC on major process units, is the cost associated with using highly trained control engineers to supervise the unit while step testing is in progress. The project team often has to supervise the unit on a 24 hours per day, 7 days per week basis to ensure that the step changes do not cause the process unit to exceed safety or operability constraints. Full supervision greatly increases the cost of implementing MPC on large process units with a large MV count, and/or a long time to steady state. The need for an automated algorithm to conduct the step testing of the process unit while ensuring safe operation and keeping all the products within quality specification, while guaranteeing good identification results, has been recognized for a long time and will provide a substantial competitive advantage to its inventor.  
         [0000]     Previous Approaches  
         [0009]     Several approaches have been used before and are described in the academic literature. Some are summarized next.  
         [0010]     Manual Step Testing: Essentially, two or three highly skilled process control engineers working shifts around the clock introduce manual step changes usually in one independent variable at a time, while supervising the unit around the clock. Any unacceptable deviations in the dependent variable are corrected for by introducing additional steps to move the process back to the safe operating region (correcting moves). If the process control engineers are highly skilled, then this approach can provide acceptable data and sufficiently accurate models, but this is not always easy, and it can be very expensive. However, there is a natural tendency to make changes in a fixed order and to respond to process disturbances by making correcting moves. This inadvertently introduces correlation into the MV sequence and makes the model identification problematic. In practice, it is quite difficult to prevent valve saturation and loss of tank levels, the manual step test sequence does not usually have sufficient high frequency content, and step changes are kept small enough to prevent large deviations in the CV&#39;s to reduce the risk of constraint violation. At present, this method is widely used in the process control industry.  
         [0011]     Using a Programmed Step Test Sequence: This method relies on a sequence of carefully designed programmed step changes in every independent variable around a pre-defined average value, with the ability to manually adjust the average value and step size, or low and high limit values. Typically, the control engineer will choose a sequence based on process insight and good engineering practice to excite the full frequency range of the process and ensure independence between the step test sequences. This method requires less intervention from the process control engineers once the sequence has been set up, but it still requires careful supervision, as the control engineer has to monitor the process closely, and move the average values when constraint violation occurs. High frequency content can be improved using this approach, but preventing valve saturation is still difficult. Once again, step change amplitudes are kept small enough to prevent excessive constraint violation, and it is still difficult to preventing loss of levels especially if automatic level controllers have to be disabled. This method can provide some improvements in terms of frequency content and reduced correlation, but does not reduce the cost of the project as full supervision is still required.  
         [0012]     Using Pseudo Random Binary Sequences (PRBS): A PRBS sequence is automatically generated for every independent variable (MV). The PRBS method requires three parameters per independent variable (base period, amplitude, and sequence length). If these parameters are chosen appropriately, then the data will contain sufficient high frequency information. Since every independent variable will have a linearly independent sequence, all (or several of) the MV&#39;s can be stepped at the same time. This has the advantage that any CV&#39;s (controlled variables) that do not share the same MV&#39;s, will be perturbed at the same time, potentially reducing the time required to generate sufficient data to fit accurate empirical models. If all the MV&#39;s are perturbed at the same time, it is possible for the random sequence to occasionally generate steps in several of the MV&#39;s that may cause deviation in the same direction. For this reason, the amplitude of the step changes have to be reduced by dividing the amplitudes that could have been used if only one independent variable was stepped at any one time, by the number of MV&#39;s. This greatly reduces the amplitude of the steps, reducing the signal to noise ratio. Most process units are disturbed by large low frequency unmeasured disturbances, e.g. feed composition changes in chemical or refining process units. In such applications, a much larger amount of data has to be collected if small amplitudes have to be used. Full supervision is still required. Some cost advantage can be achieved due to a potentially shorter step test, but the need for careful supervision cannot be removed, limiting the achievable cost saving.  
         [0013]     Superimposing PRBS Signals on top of Controller Outputs: A more sophisticated approach is to use a closed loop control system, e.g., an MPC system like DMC, and superimpose independent PRBS signals on top of every MV. The MPC controller will always respond by ramping out the pulse to return to the previous steady state targets. This modification generates sufficient medium to high frequency information, but it will not excite the low frequency dynamics of the process. In order to generate accurate gain estimates, large step changes in every limiting (or active) dependent variable has to be made, and at least some of these steps have to be maintained for the full TTSS. This improves the low frequency content of the data, but at the expense of a higher level of unwanted MV correlation. This approach has the advantage that it requires little or no supervision once a suitably accurate model has been determined. However, it has the disadvantage that an initial model needs to be available. A further more limiting disadvantage is the fact that all the MV&#39;s will move in a highly correlated way. This can cause numerical difficulties for the system identification algorithm, leading to poor model accuracy. Another problem stems from feedback correlation appearing in the MV&#39;s due to noise and disturbances in the CV&#39;s, which also makes the system identification problem much more difficult. Since the controller responds to maintain the CV at their targets and limits, all the MV&#39;s will exhibit correlation. The nearly ideal PRBS signals on each MV will be diluted by the correlation effect resulting from the control action. If the controller is slowly tuned, and large PRBS amplitudes are used, then the PRBS signal can swamp the controller action, in which case the data appears nearly open loop. Ideally, correlation between MV&#39;s, and between CV&#39;s and MV&#39;s must be minimized as far as possible. Specifically, a high degree of feedback correlation due to high frequency noise and unmeasured disturbances is known to cause failure of multivariable model identification algorithms.  
       SUMMARY OF THE INVENTION  
       [0014]     The previously mentioned method is substantially enhanced to overcome the stated problems and disadvantages. As before, an initial dynamic model is used to control the process. It is accepted that this model is not accurate enough for high performance process control, but if slow controller tuning and sufficiently over-conservative CV limits are used, the system can be set up to maintain stability, and reject external disturbances without violating the real process constraints.  
         [0015]     Typically, only the major MV/CV responses are included in the initial model, and the sign of these responses must be correct. Where there is doubt about the gain and/or dead time of the model curves, it is safer to use higher rather than lower values. The ability of the initial model to serve as an adequate basis for controlling the process unit, is confirmed by making large programmed target and/or limit changes in every active CV. Where unstable and/or highly underdamped closed loop responses are observed, the CV steps can be repeated with only one major MV active at any time. In this way, the specific MV/CV pairs causing the poor closed loop response can be identified. It is then relatively straight-forward to increase the model gain in large steps (e.g. 2×) until acceptable performance is achieved. Where the closed loop performance is very slow due to unreasonably high model gains, the previous approach can once again be used to identify the responsible MV/CV pairs, and the model gain can be reduced in large steps until acceptable performance is achieved. The data collected during this procedure is of course highly correlated. However, this data can be combined with good quality independent and uncorrelated test data as long as the total amount of correlated data is less than approximately 20% of the total data set.  
         [0016]     The system model can be improved periodically by importing the latest data and re-running the model identification. Where an initial model is not available, any of the existing testing methods can be used to generate a suitable initial model from only a small number of steps. An initial model of low to moderate accuracy is acceptable. For example, the initial model may be derived from a non-model based process control system, may be an existing model from a potentially different but similar process system, may be derived from a manual step test of the subject process being modeled, or may be derived from engineering knowledge of the subject process being modeled.  
         [0017]     The previously mentioned approach where large programmed step changes are made in active CV targets can be used every few days to monitor model convergence and provide a stopping criterion. In this way, a large amount of system model identification and controller tuning and commissioning work can be accomplished in parallel with the step testing activities. Some of this work may also be done remotely via a high-speed communication link. These methodology enhancements can dramatically reduce the amount of engineering supervision required and the total cost of an MPC project.  
         [0018]     In one embodiment, the present invention method models a process system employing the steps of: 
        (a) modeling a subject process system with an initial model;     (b) coupling to the subject process system a multivariable process control system that utilizes said initial model augmented with shadow system controlled variables that are mathematically and functionally equivalent to system manipulated variables, where each shadow system variable corresponds to a respective manipulated variable, to control the subject process system with large independent step changes in one or more shadow system variables at a time while keeping control variables within a predetermined range;     (c) tuning said multivariable process control system for stable operation of the subject process system; and     (d) using data generated from said subject process system, generating an improved model of the subject process system, said steps of tuning and generating effectively perturbing the subject process system to generate data for model identification of the subject process system.        
 
         [0023]     The steps (b) through (d) are repeated with the improved model as the initial model, such that a further improved model is generated. In a preferred embodiment, the multivariable process control system employs a constrained, model-based controller.  
         [0024]     In accordance with one aspect of the present invention, the step of coupling to the subject process system includes computing process control action for controlled variables and manipulated variables following an objective function J. Preferably the objective function J is extremized.  
         [0025]     Further the step of coupling to the subject process system includes augmenting the initial model with shadow system controlled variables. The shadow system controlled variables are mathematically and functionally equivalent to system manipulated variables which may be treated as system controlled variables. One or more of the system manipulated variables or shadow system controlled variables are moved or stepped simultaneously. In addition, one or more of the system manipulated variables or the shadow system controlled variables may be moved or stepped for desired amounts of time (either fixed or varying). In a preferred embodiment, a pseudo random binary (PRBS) sequence is superimposed on the moves or steps of the system manipulated variables and shadow system controlled variables.  
         [0026]     In accordance with another aspect of the present invention, the gain relationship between a system manipulated variable and a system controlled variable is determined and normalized to unity. The multivariable process control system then utilizes the normalized gain relation as the shadow system controlled variable. Further the shadow system controlled variable targets are adjusted to prevent shadow system controlled variables from violating subject process control variable limits.  
         [0027]     In accordance with another aspect of the present invention, the step of coupling to the subject process system includes constructing and controlling equivalent system manipulated variables. The values of the equivalent system manipulated variables are equal to the initial model predicted values when controlled variables of the subject process system are within subject process limits. Preferably the step of controlling equivalent system manipulated variables is in accordance with one of: 
        an objective function J;     a simultaneous moving of one or more shadow system controlled variables or system manipulated variables;     for an amount of time, moving of one or more shadow system controlled variables or system manipulated variables;     a superimposed PRBS sequence;     a normalized system manipulated variable-system controlled variable gain, the normalized gain being normalized to unity and used as the shadow system controlled variable; and     an adjustment of shadow system controlled variables targets to prevent shadow system controlled variables from violating subject process control variable limits.        
 
         [0034]     In the preferred embodiment the step of coupling the subject process system includes imposing a dead zone on controlled variables of the multivariable process control system. The dead zone is computed by accumulating relatively small manipulated variable control action from the multivariable process control system. The control action is implemented when the summed control action reaches a predefined threshold. In addition, the controlled variables are filtered to attenuate high frequency noise.  
         [0035]     In accordance with another aspect of the present invention, the step of coupling to the subject process system includes creating a time varying, almost periodic limit cycle of manipulated variables of the subject process system.  
         [0036]     In accordance with another aspect of the present invention, suitable target values for the system manipulated variables of the subject process system are either chosen manually by a human operator or calculated by one of: 
        a middle value of process control limit values for controlled variables of the subject process system;     a partial least squares analysis;     a principle components analysis; and     a value furthest away from process control limit values of both manipulated variables and controlled variables of the subject process system.        
 
         [0041]     Preferably the suitable targets for system manipulated variables are automatically determined and implemented by a digital processing system. In this manner a reduction of engineering supervision is enabled. Further the manipulated variables are stepped or moved in a random way about the suitable targets while keeping the manipulated variables and controlled variables of the subject process system within process control limits.  
         [0042]     In accordance with another aspect of the present invention, the step of tuning the multivariable process control system includes adjusting internal variables of the multivariable process control system. The adjusting of internal variables is accomplished in a manner that improves process control action and ensures process system safety. Further the adjusting reduces feedback correlation between control action of the multivariable process control system and disturbances of the subject process system. The disturbances include unmeasured extraneous influences affecting the subject process system and not captured in the initial model.  
         [0043]     In accordance with another aspect of the present invention, the step of using data and generating an improved model includes using a system identification algorithm and analyzing values of manipulated variables and controlled variables of the subject process system to create an improved model.  
         [0044]     Apparatus for modeling a process system implements the foregoing method. Preferably computer means coupled to a multivariable process controller executes the method and effectively perturbs the subject process system to generate data for model identification.  
         [0045]     Similarly a controller implements the foregoing method. The controller comprises a digital processor and a program storage device that is readable by the digital processor. The program storage device encodes a program of instructions for performing the method of modeling a subject process system.  
         [0000]     Magnitude Maximized GBN Perturbation  
         [0046]     In an accordance with a preferred embodiment of the present invention, a magnitude Modulated Generalized Binary Noise (MGBN) Signal is used to perturb the process model. A Generalized Binary Noise (GBN) signal is a binary sequence: it consists of two values, +M or −M. At any time instant, a uniformly distributed random number decides if it should make a switch from +M to −M or from −M to +M. Normally, the random number is in the range [0,1]. Using a so-called switching probability (a parameter in the range [0,1]), a switch will be made if the current random number is larger than the switching probability, which is set by the user. A GBN signal has some good statistical characteristics for model identification: it is closer to a white noise sequence (an ideal signal for model identification) than a PRBS (Pseudo Random Binary Signal, one of the most popularly used signals for perturbation), since it does not have any dips in its frequency spectrum. This zero mean GBN signal is then superimposed (added to) the current MV signals or process inputs.  
         [0047]     Unfortunately, a conventional GBN signal can still be a threat to the safety of the process unit. For instance, the process may still violate the CV constraints due to disturbances or a change in operating condition even though the mean value of the additive GBN signal is zero. A riskier scenario is the following: two or more GBN sequences may have a superposition impact on the process, if they both move in the worst case direction within a short period of time. Two or more MVs exciting the so-called “strong” process direction will push the process well outside the safety constraints. For a large number of MVs, the problem is even more severe.  
         [0048]     A magnitude Modulated GBN (MGBN) is derived from GBN with this improvement: its magnitude is not fixed at +M and −M; instead, the magnitude is adjusted based on the situation of the perturbed process. Principally, the magnitude should be adjusted to satisfy the following requirements: 
        1) A move in a manipulated variable should not cause the process to violate predefined constraints; safety is always of the highest priority in process perturbation.     2) The MV move is maximized to generate a process response with good signal to noise ratio (S/N). This will lead to faster model convergence and improved model quality (accuracy).     3) The MV move should be able to relieve an existing process constraint violation. This means that it can move in an opposite direction as planned if such a move is necessary to relieve constraint violation (CVs that are above their high limits, or below their low limits). 
 
 Discrete Minimal Move Control 
       
 
         [0052]     Although the improved MGBN algorithm has certain capability for keeping the process within a safe range, the perturbed process may still be exposed to safety issues, since an MGBN signal makes a move only at the next switching time. A modified MPC controller is hence called upon to safeguard the process during these periods of time. Unlike a conventional MPC controller, this safeguarding controller should have the following characteristics: 
        1) It is a minimal move constraint controller: the controller will take action only if a controlled variable (CV) violates a constraint; otherwise, the controller will be in a predictive mode and will not move, and will therefore not counteract the MGBN pulses. This reduces the interference to the ongoing MV perturbations and hence generates higher data quality for improved model identification.     2) Undesirable feedback is minimized: frequent controller action resulting from feedback will contaminate the data quality. One way to reduce this unwanted feedback correlation is to employ a discrete control action: the controller will make a control move only if the anticipated move size is larger than a certain threshold or so-called Move Resolution (MR). In this way, it generates a staircase-like signal, and will not respond at every time instant. This greatly reduces the amount of high frequency noise appearing in the MV signals.        
 
         [0055]     This preferred embodiment of the present invention method models a process system employing the steps of: 
        (a) modeling a subject process system with an initial model;     (b) coupling to the subject process system a multivariable process control system that utilizes discrete minimal move algorithm to control the subject process system with large independent step changes in multiple variables using a MGBN signal;     (c) tuning said multivariable process control system for stable operation of the subject process system; and     (d) using data generated from said subject process system, generating an improved model of the subject process system, said steps of tuning and generating effectively perturbing the subject process system with the MGBN signal to generate data for model identification of the subject process system.        
 
         [0060]     This preferred embodiment aims at not only making process perturbation safe and automatic, but also much more efficient. This is achieved by combining the modified MPC technology and the GBN technology in an innovative new way. It consists of two tiers of optimization: (1) the discrete minimal move control and (2) the magnitude maximized GBN perturbation. The first tier of optimization keeps the perturbed process operating inside the safety constraints while minimizing its interference to the intended MV perturbations. The second tier generates GBN like signals with the MV magnitude maximized up to the predefined process output (CV) constraints. The new approach starts with an initial process model, which is either derived from manual pre-test work, or from an existing model for a process unit that has subsequently been modified. Normally, only certain key model curves are needed to start with, as the weaker process relationships will not contribute much to CV limit violation. As more perturbation data becomes available, an updated model is identified. With an updated model, the constraint setting (CV limits) can be relaxed and a better perturbation with larger magnitude MV moves can then be achieved.  
         [0061]     Other embodiments or applications of the invention method are in the purview of one skilled in the art having the following disclosure before him. 
     
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0062]     The foregoing and other objects, features and advantages of the invention will be apparent from the following more particular description of preferred embodiments of the invention, as illustrated in the accompanying drawings in which like reference characters refer to the same parts throughout the different views. The drawings are not necessarily to scale, emphasis instead being placed upon illustrating the principles of the invention.  
         [0063]      FIGS. 1A, 1B , and  1 C are schematic views of a multivariable process control systems embodying the present invention.  
         [0064]      FIG. 2  is a timing diagram of PRBS sequences superimposed on manipulated variables output by the process controller in  FIG. 1 .  
         [0065]      FIG. 3  illustrates a move plan for manipulated variable targets in the system of  FIG. 1 .  
         [0066]      FIG. 4  illustrates manipulated variable moves as affected by random PRBS pulses in the system of  FIG. 1 .  
         [0067]      FIG. 5  illustrates upper and lower bounds for a ramp output at different operating points as in an embodiment of present invention.  
         [0068]      FIG. 6  illustrates a two manipulated variable undergoing MGBN perturbation by the process controller in  FIG. 1C .  
         [0069]      FIG. 7  the response of two control variables as affected by MGBN perturbation in the system of  FIG. 1C . 
     
    
     DETAILED DESCRIPTION OF THE INVENTION  
       [0070]     A description of preferred embodiments of the invention follows.  
         [0071]     Illustrated in  FIGS. 1A, 1B  and  1 C is a multivariable process control system  23  embodying the present invention. In the preferred embodiment, the multivariable process control system  23  is implemented in software, hardware, or both executed on computer processing means  35 . The computer processing means  35  is coupled in communication (for example, via a network  37 ) with process control system  39 . The process control system  39  controls the subject process  11  using techniques and mechanics common in the art. The network  37  may be a local area network (LAN), a wide area network (LAN) and/or part of a global network (e.g., the Internet). Network  37  provides access to computer means  35  and process control system  39  across communication lines and the like common in the art. In the preferred embodiment, communication lines  10   a, b  are high speed communication links which enable remote access/operation of the invention system  23 .  
         [0072]     With reference to  FIG. 1B , the preferred embodiment of multivariable process control system  23  is detailed as follows. An MPC controller  13  models the subject process unit  11  which is formed of various pieces of equipment, e.g., distillation columns, stirring tanks, vessels, pumps, conduits, valves, inlet feeds, outlet feeds, etc., coupled together in pertinent series or stages. Respective operating temperature, pressure and/or volume of each stage (piece of equipment) are represented by independent variables called manipulated variables (MV&#39;s). The subject contents of the pieces of equipment is the product of the process unit  11 . Quality of the product is measured by physical or chemical aspects such as composition and physical properties. These quality aspects are represented by control variables (e.g., temperature, pressure, composition, product properties) throughout the process  11 .  
         [0073]     In the preferred embodiment, MPC controller  13  is a constrained model based system. Controller  13  employs either an explicit model (describable by a mathematical equation) or an implicit model (not describable by a mathematical equation). Further, controller  13  employs sliding mode control, switching mode control structures and/or variable structure control as known in the art.  
         [0074]     The present invention introduces the following innovations.  
         [0075]     The MPC controller  13  model matrix is appended with dummy unity gain models  15  to define so-called shadow CV&#39;s  25  that are essentially copies of the input MV&#39;s  27 . Every shadow CV  25  has no other model curves except against its own MV  27 , and this model  15  is a pure unity gain model with no dead time and no dynamic transient. By programming large independent step changes in one shadow CV  25  at a time, with at least some of the steps lasting for a full time to steady state, it is possible to ensure perpendicular step testing (steps in one direction at a time), removing all correlation between MV&#39;s  27 . This ensures an easy system identification problem, especially if Finite Impulse Response (FIR) model identification is used. In large-scale applications where the model matrix of controller  13  is nearly diagonally dominant, several independent shadow CV target changes can be introduced concurrently (e.g. one MV being stepped per distillation column in a gas plant).  
         [0076]     Ideally, the maximum amplitude step changes need to be made to maximize the signal to noise ratio. The present invention modifies the controller  13  to only follow these step changes in the shadow CV&#39;s  25  if none of the original process CV&#39;s (stored in  15 ) will violate their safety and operability limits (i.e. prevent constraint relaxation). This makes it possible to request large step changes in the shadow CV&#39;s  25  to maximize the signal to noise ratio, and allowing the MPC controller  13  to determine the largest possible step change amplitudes within the safety and operability constraints of the process unit  11 .  
         [0077]     A slow PRBS sequence  17  is superimposed on the MV&#39;s  29  output by controller  13  to improve the medium to high frequency content of the step test data. The minimum pulse width has to be chosen relative to the TTSS, typically in the range 10% to 50% of the dominant time constant of the process  11 . However, these steps are only added if the process  11  is far away from critical safety or operability constraints, and is only added to the MV being stepped at the time.  FIG. 2  is illustrative of the step moves  40  of MV&#39;s  29  superimposed with respective PRBS sequence  17 .  
         [0078]     Illustrated in  FIG. 2  are timing lines of two MV&#39;s (output  29  from MPC controller  13 ) referenced as MV 1  and MV 2 . The top time line shows the PRB sequence  1  which is superimposed on MV 1 . The minimum pulse width is indicated at  42 . The next time line shows the PRB sequence  2  which is superimposed on MV 2 . PRB sequence  2  has a minimum pulse width shown at  44 . The third time line shows the MV 1  move amplitude which is stepped up in the first two time to steady state (TTSS) periods and falls to a dead zone threshold  46  at a quarter TTSS before the end of that period. MV 1  remains at the dead zone threshold  46  for the succeeding two TTSS periods. The last time line shows the MV 2  move amplitude at a respective dead zone threshold  48  for the first two TTSS periods. The MV 2  move amplitude is stepped up for the succeeding two TTSS periods, and stepped down at a quarter TTSS before the end of that period.  
         [0079]     Alternatively, the PRBS  17  amplitude can be reduced as the process  11  moves closer to hard constraints. Another alternative is to pre-select the safe direction in which to introduce pulses.  
         [0080]     Optionally, instead of using simple unity gain models (with no dead time or dynamics)  15  for the shadow CV&#39;s  25 , it is advantageous to select the slowest CV response for that particular MV  27 . If this response is normalized to have unity gain, it can be used as the only model  15  between the shadow CV  25  and the corresponding MV  27 . If the MPC controller  13  is then tuned aggressively (i.e., high bandwidth), step changes in the shadow CV  25  will result in near inversion of the slow process response, with the output MV sequences  29  consisting of an approximate step with an initial pulse superimposed on top of the step. This further improves the high frequency content of the data. The standard MV ramp constraints are still observed to prevent excessively fast MV  29  movement.  
         [0081]     Optionally, instead of fixed step lengths imposed on the shadow CV&#39;s  25 , it is advantageous to impose a PRBS sequence  17  with a slow basis period relative to the Time to Steady State of the process  11 . This spans the full frequency range better than long steps. In applications where it is desirable, independent PRBS signals  16  can be imposed on several or even all shadow CV targets  15  to reduce the total test duration.  
         [0082]     Optionally, the shadow CV targets  15  can be ramped away from constraint situations to prevent shadow CV&#39;s  25  from being infeasible. This way, if large disturbances occur in the original CV&#39;s, the controller  13  will not typically need to make adjustments as they are still far enough away from the respective limits. This further reduces feedback correlation due to large unmeasured low frequency disturbances affecting the CV&#39;s and subsequently appearing in the MV&#39;s  29 . To further prevent feedback correlation, the weight that the controller  13  attributes to process CV&#39;s when they are between their low and high limits, is set to zero, effectively turning them off.  
         [0083]     By imposing sufficiently large dead zones on the controller outputs  29 , it is possible to largely prevent a high degree of correlation between process CV&#39;s and MV&#39;s due to high frequency noise (i.e., feedback correlation). This modification essentially prevents small moves in the MV&#39;s  29  (controller outputs). In the preferred embodiment, this is achieved by internally accumulating (at  40 ) small moves in the controller outputs  29  while keeping the controller output constant, until the accumulated move  40  exceeds a suitably chosen threshold value at nodes  60 . If the threshold value  60  is chosen large enough (approximately the same amplitude that would be used for a manual step test), then the noise correlation can generally be removed from the controller outputs  29 . In addition, a low pass filter is used to attenuate the high frequency noise component in the CV&#39;s. This modification makes it possible to reduce the size of the threshold values  60  of the dead zones on the controller outputs  29 .  
         [0084]     Alternatively, the dead zone is generated by modifying mathematical formulation of the multivariable process control system  23 . The mathematical formulation may employ discrete or binary system manipulated variables for example. In other embodiments the dead zone may be generated by an analog to digital converter or by a pulse width modulation.  
         [0085]     Once the process reaches steady state, a periodic limit cycle will develop unless the threshold parameters varied randomly. In the present invention, the threshold is changed randomly between 50% and 150% of the nominal value. This prevents exact periodic steps, which can confuse the system identification algorithm. By superimposing PRBS pulses  17  on top of the MV&#39;s  29 , the controller  13  will attempt to ramp back to the MV target  51 ,  49  values, and a series of nearly triangular pulses will be observed as illustrated in  FIGS. 3 and 4  (discussed later). These PRBS pulses  17  are only added to the MV&#39;s  29  if all the critical CV&#39;s are well within range, to prevent excessive limit violation. Once again, the preferred implementation is to move only one MV at a time as that makes the identification problem very easy. It also makes it simple to interpret predicted model responses by comparing with observed responses and visually identifying poor models.  
         [0086]     Referring to  FIG. 3 , a move plan for the MV&#39;s  29  (MV 1  and MV 2 ) of  FIG. 2  is shown. The target move amplitude  51  for MV 1  is shown stepped up at the beginning of and remaining through the first TTSS period. The target move amplitude  51  for MV  1  returns to its dead zone threshold value  46  at the beginning of the second TTSS period and stays at that value for the succeeding three TTSS periods. The target move amplitude  49  for MV 2  is illustrated as being at its dead zone threshold value  48  for the first two TTSS periods. Target move amplitude  49  for MV 2  is stepped up for the third TTSS period and returns to the dead zone threshold value  48  for the fourth TTSS period. As such, the plan is to move/step each MV  29  (e.g., MV 1  and MV 2 ) one at a time, for a full TTSS period. This move plan (i.e., MV 1  and MV 2  targets  51 ,  49 ) is illustrated in dotted lines in  FIG. 4  for comparison to actual MV move results with superimposed PRBS pulses  17 .  
         [0087]     In a preferred embodiment, target amplitude values for MV&#39;s  29  (shadow CV&#39;s  25 ) are calculated by a robust steady-state target calculation as disclosed in U.S. patent application Ser. No. 09/266,709 filed Mar. 11, 1999 and related U.S. patent application Ser. No. 09/819,475 and PCT/US99/22368, each incorporated herein by reference.  
         [0088]     Illustrated by signal line  53  in  FIG. 4  is PRBS sequence  1  (of  FIG. 2 ) superimposed on the MV 1  move amplitude values (of  FIG. 2 ). An additional random PRBS pulse  16   a  (illustrated as an up-arrow) is also included. The resulting MV 1  amplitude values form a pattern of about three nearly triangular pulses in the first TTSS period. The MV 1  amplitude is stepped down in the second TTSS period with random PRBS pulses (arrows)  16   b  and  16   c . In the last quarter of the second TTSS period, controller  13  ramps MV 1  down to the target move values for that time period, i.e., dead zone threshold  46 . This ramping down is illustrated at  55  in  FIG. 4 .  
         [0089]     Similarly signal line  57  shows the results of PRBS sequence  2  (of  FIG. 2 ) superimposed on the MV 2  move amplitude values of  FIG. 2 . Additional random PRBS pulse  16   d  is included and results in a nearly triangular pulse that runs through the third TTSS period illustrated. In the fourth TTSS period, the MV 2  amplitude is stepped down with random PRBS pulse  16   e . In the last quarter TTSS of the fourth TTSS period, controller  13  ramps MV 2  toward the target move value  49  for that time period, i.e. dead zone threshold  48 , as illustrated at  59  in  FIG. 4 .  
         [0090]     A crucially important feature of the present invention is the ability to automatically discover suitable MV (i.e. shadow CV  25 ) targets. The algorithm goes into “HOLD” mode if any critical CV exceeds the CV limit by more then a pre-set safety margin. All step testing is then suspended, all MV&#39;s are enabled, MV tuning is slowed down, the shadow CV limits are opened as wide as possible, and the critical CV&#39;s (e.g. levels, product quality and valve positions) are clamped around the middle of the range (around the ideal values). This allows the MPC controller  13  to slowly move all the critical CV back to sensible values using all the MV&#39;s. Once the critical CV&#39;s get close enough to the ideal values, the current MV values are stored (at  31  in  FIG. 1 ) and will be used for future MV targets (i.e., shadow CV targets  15 ), and the step testing is resumed.  
         [0091]     When the algorithm enters “HOLD” mode, all the MV&#39;s move in a highly correlated way, and this data will have to be removed if a weak system identification algorithm is used. If more sophisticated algorithms are used, then some minimal amount of correlation is acceptable. In general, the algorithm has been designed to minimize the need for entering HOLD mode, by setting the CV ranks on the shadow CV&#39;s  25  to be less important than all the process CV&#39;s, and through selective use of Minimum Movement variables.  
         [0092]     The algorithm also has a feature to allow manual changes to the MV targets. This is useful if the process operator has advanced warning of an impending change in the operating condition of the unit that will require a change in the MV targets (e.g. an impending feed rate change). The ability of the algorithm to discover suitable MV targets automatically within a closed loop control environment, makes it possible to conduct the step test mostly unsupervised. The ability to conduct a remote step test via a telephone or network connection, also becomes possible.  
         [0093]     MV tuning is also varied, depending on whether actual CV&#39;s are active (predicted to reach their limits). When only shadow CV&#39;s  25  are active, the models are perfectly accurate, and the controller  13  can be tuned very aggressively under these conditions (high bandwidth). If any actual CV becomes active, MV tuning has to be slowed down as some inaccurate models may be used to control this CV. If the MPV controller  13  relaxes CV targets  15 , then very slow tuning will be used, as several poor models may be active. Typically, within a few days, the new automated step test data can be used to improve the models and more aggressive tuning can be used to better reject disturbances. Less conservative CV limits can then be used.  
         [0094]     A slow PRBS sequence  17  is superimposed on the MV&#39;s  29  to improve the frequency content of the step test data. However, these steps are only added if the process is far away from critical safety or operability constraints, and is only added to the MV being stepped at the time.  
         [0095]     Optionally, instead of using simple unity models (with no dead time or dynamics)  15 , it is advantageous to select the slowest CV response for that particular MV, normalize the gain to unity, and use that as the only model between the shadow CV  25 , and the corresponding MV  27 . If the MPC controller  13  is then tuned aggressively (i.e., high bandwidth), step changes in the shadow CV  25  will result in near inversion of the slow process response, with the MV sequences  29  consisting of an approximate step with an initial pulse  17  superimposed on top of the step. This further improves the high frequency content of the data.  
         [0096]     Optionally, instead of fixed step lengths imposed on the shadow CV targets  15 , it is advantageous to impose a PRBS sequence  17  with a slow basis period relative to the Time to Steady State of the process. This spans the full frequency range better than long steps. If these PRBS driven target changes are done concurrently, it can reduce the duration of the plant test.  
         [0097]     One alternative embodiment includes imposing variable dead zones and implementing internal move accumulation to enforce staircase signals on every MV, and low pass filtering all the CV&#39;s. This greatly reduces feedback correlation due to high frequency noise and unmeasured disturbances.  
         [0098]     Alternatively, use internal move accumulation of MV&#39;s and impose fixed dead zones by employing an Analogue to Digital (AD) Converter with very low resolution (2 to 4 bit binary resolution) for the range allowed in the MV. This alternative instantiation reduces the effect of high frequency feedback correlation appearing in the MV sequence every time the threshold value is exceeded.  
         [0099]     A further improvement may be made by randomly varying the resolution of the AD converter between 2 and 4 bits. This will cause the amplitude and period of the resultant limit cycle to vary randomly, reducing auto-correlation in the MV sequence.  
         [0100]     A further enhancement may be made. Reset the internal move summation variable to the current MV process value every time a change in the AD output results, i.e. remove the round-off error from the summation variable. This enhancement further reduces high frequency feedback correlation in the MV sequence.  
         [0101]     In accordance with the foregoing, the operation of MPC controller  13  effectively creates a closed-loop process control system that generates values for manipulated variables and controlled variables of the subject process unit  11  for model identification. In the preferred embodiment, a system identification routine (computer program) analyzes the values of the manipulated variables and the controlled variables and creates an improved model of process unit  11 . The generated data  31  is effectively an open-loop process control system.  
         [0102]     Summary of Fortran code of the preferred embodiment is provided next followed by corresponding pseudocode.  
         [0000]     Initialization  
         [0000]    
       
          1. Initialize all Variables  
          2. Initialize internal copies of the current PCS value, and the move summated value to the current process values  
          3. Set the master counter  33  to zero. Repeat:  
          1. Read the mode flag and if required pit the program into SUSPEND mode to suspend the step test.  
          2. If the mode flag indicates that the user wants to reset the SUSPEND flag, then the SUSPEND flag is returned to normal (0), and the step test is resumed.  
          3. If the mode flag indicates that the user wants to force the program into HOLD mode, then set HOLD to 1.  
          4. If in HOLD mode, open up all MV limits, clamps the CV limits around the middle of the CV range, and ramps all the MV&#39;s until the critical process CV&#39;s have nearly reached the middle of the range to re-initialise the MV targets. Hold and Initialization Checks:  
          5. If the program is not in HOLD mode, and any critical process CV value exceeds the Maximum or minimum limits by a predetermined margin, then go into HOLD mode.  
          6. If the program is not in SUSPEND mode, but HOLD is ON, then for all the critical CV&#39;s, clamp the CV limits close to the ideal CV target values  15  to prepare the process for MV target re-initialization, else keep the limits wide (at CV Minimum and CV Maximum values).  
          7. Set the Initialization flag equal to the HOLD flag (while the program is in HOLD mode, always attempt to initialize). INIT=1 indicates that the program is in the process of initializing. Once all the checks have been completed, INIT=0 indicate that initialization has failed (some CV&#39;s are still too far away from the optimal middle-of-range targets).  
          8. If the program is still trying to initialize (i.e., it has not yet failed an initialization condition), then if all the critical CV&#39;s are within a pre-set distance from the optimal process CV targets  15 , then keep INIT=1, else turn it off (it failed to initialize). 
 
 Grab New MV Targets: 
 
          9. If the initialization checks were successful, (INIT still at 1), use the current MV values on the Process Control System (PCS)  39  to initialize the new MV targets  27 . The new MV steps will take place around these targets, until a critical process CV exceeds a high or low limit by more than the specified amount.  
          10. If initialization was successful, then Reset HOLD to zero, else stay in HOLD mode.  
          11. If still in HOLD mode, then keep on trying to initialize, if not in HOLD mode, then don&#39;t try to. Calculate a pseudo random fraction between −1 and 1. 
 
 Generate PRBS Signals  17 : 
 
          12. Generate a fast PRBS sequence  17  with amplitude 2*MV Tolerance and store. This signal  17  can potentially change every step. When the PRBS counter equals the PRBS base Period, then store the new current PRBS value, and keep the slow Pulse signal constant for at least the PRBS pulse Period.  
          13. Prevent any PRBS pulses  17  if the respective MV  29  is not being stepped, and set it to zero.  
          14. If the program is in HOLD mode, then don&#39;t add any PRBS pulses  17 .  
          15. If the critical process CV&#39;s are not exceeding their limits too much, then keep PULSE the same, else set to zero (no PRBS pulses if critical CV&#39;s are too close to their limits).  
          16. If the PRBS pulse counter exceeds the PRBS pulse period, then reset the counter to zero, else increment counter by one.  
          17. Calculate random real fraction.  
          18. If the MPC controller  13  aborts, then don&#39;t increment the master counter  33 .  
          19. Calculate a random real fraction. 
 
 Check if MV Re-Initialization is Required: 
 
          20. If the difference between the internal copy of what should be on the PCS MV tag and the actual feedback value just read in, are different by more than the MV tolerance (dead zone threshold), then reset the master counter to zero. This will force the program to use the current MV value to re-initialize the internal move summated MV values (re-initialize the internal move calculation). This situation can happen for several reasons. Either the last MV write did not arrive on the PCS, or the read-back echo is one or more steps late, or someone has reloaded an old Controller Configuration, and the internal copy of the MV value is out of date. In such a case, the current one summated MV value must not be written out as it will bump the process hard, and it has to be re-initialized at the current MV value.  
          21. If the master counter  33  is less than 1, then set the move summated MV&#39;s equal to the current MV values on the PCS to re-initialize the move accumulation, else keep it the same (for now). 
 
 Implement Move Accumulation: 
 
          22. If the MV loop status is ON, then set Move Summated MV=Move Summated MV+Current Move to achieve move accumulation.  
          23. Keep the Move Summated MV between upper and lower MV limits.  
          24. If the difference between the internal copy of what is on the PCS MV tag and the Move Summated MV value exceeds the variable dead zone threshold, then set the internal copy of the PCs MV tag equal to the Move Summate MV value, else keep it the same. The minimum move threshold is typically varied between 50% and 150% of the nominal value stored in MVTOL, but a wider range can also be used.  
          25. Add (superimpose) the PRBS pulse signal  17  on top of the new MV value  29 , and write it out to the PCS. 
 
 Maintain Counter  33 : 
 
          26. If the master counter  33  exceeds the total step test sequence length, then reset it to zero, and restart the MV step test sequence.  
          27. Reset the error code (indicating which MV has forced MV re-initialization) if the master counter  33  equals zero.  
          28. Implement the pre-programmed set point sequence for each MV. Step size is set by an appropriate variable that the user has access to while the code is executing. If the program is in HOLD mode, then move the soft MV target (i.e., shadow CV  25 ) limits out of the way (rely on the hard MV limits). 
 
 Set MV Resolution: 
 
          29. Vary the MV resolution depending on where the program is in the step test sequence. Use course resolution (large thresholds) while stepping its respective MV to enforce a staircase signal and introduce a desirable a-periodic limit cycle. Use high resolution when not stepping the respective MV to prevent undesired limit cycles. The objective is to encourage only one MV to move significantly at one time.  
          30. If the program is in HOLD mode, then use very high resolution to help the critical CV reach their new targets.  
          31. Change the MV tuning (MV Move Suppression in the case of DMC) to selectively discourage the MV&#39;s that are not being stepped at this time from moving. The DMC Minimum Move variable feature is used selectively to prevent correlated MV moves. 
 
 Repeat Until the User Terminates the Program 
 
 Pseudo-Code Description 
 
 Input Calculations: 
 
       
     
         [0137]     All input calculations are executed after the MPC algorithm has read in new process data, but before the control engine executes to calculate new MV values. The pseudo-code is listed below.  
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         *************************************************************************************       Define the following integer variables:                I, J, K   ! Indexing variables           COUNTER   ! Master Counter 33           RELOAD   ! RELOAD = 1 if a controller configuration file reload has been detected           SUSPEND   ! If the user has suspended the test, SUSPEND=1           HOLD   ! If excessive CV violation has been detected, HOLD=1           CONFIRM   ! If user chose Confirmation mode, do only clean steps           INIZ   ! Used for MV initialization checks           SAFE   ! SAFE=1 if all process CV&#39;s are within limits minus Delta           TTSS   ! Time To Steady State (in samples)            Define the following integer arrays with dimension equal to the number of MV&#39;s in the controller 13:                PULSE_CNT(IPMIND)   ! Pulse counters           PULSE_PERIOD(IPMIND)   ! Minimum Pulse Period            Define the following real valued function:                RANDOM   ! Random function (with 0.5 mean, uniform distribution, range between 0 and 1)            Define the following real arrays with dimension equal to the number of MV&#39;s in the controller 13:                MVSUM(IPMIND)   ! Internal move accumulated MV&#39;s           MVNOW(IPMIND)   ! Copies of the last MV values sent to Process Control System (PCS)           THRESHOLD(IPMIND)   ! Default Threshold for move accumulation           THRESH_NOW(IPMIND)   ! Current (variable) MV threshold           MVSTEP(IPMIND)   ! Step Size in MV Target (Shadow CV 25)           MVTARG_NOW(IPMIND)   ! Current MV target value in step test sequence           MVTARGET(IPMIND)   ! Default MV targets (nominal values)           CVINIT_LO(IPNDEP)   ! ‘Middle of range’ low limit for INIT           CVINIT_HI(IPNDEP)   ! ‘Middle of range’ high limit for INIT           CVDELTA(IPNDEP)   ! CV Delta values for MV Initialisation           PULSE(IPMIND)   ! Pulse Signals (for Superposition of PRBS sequence) 17            BEGINNING OF PROGRAM       Now increment the master counter 33 If in Suspend or Hold mode, then don&#39;t increment the counter 33                IF COUNTER &lt; No. Of MV&#39;s*TTSS+1 THEN   ! Max value = No. of MV&#39;s * TTSS                IF (SUSPEND = 0) AND (HOLD = 0) THEN   ! Only increment if                SET COUNTER = COUNTER + 1   ! not in Hold or Suspend mode                ENDIF                ELSE                SET COUNTER = 0   ! Reset to zero once max value is                reached                ENDIF            Check if any process CV&#39;s exceeded the Engineering limits. If so, then initiate HOLD mode:       Only check CV&#39;s that have normal status (ignore CV&#39;s that are turned off or BAD). Stay in HOLD mode until reset by the INIT       procedure.       CV Violation has detected, set HOLD mode on. Don&#39;t reset HOLD (only INIT procedure should do that).       FOR I = 1 to No. of Critical process CV&#39;s                IF (CV Status(I) is Good) AND (HOLD = 0) THEN                IF (CV Value(I) &gt; CV Upper Engineering Limit (I)) OR (CV Value(I) &lt;CV Lower                Engineering Limit (I))) THEN                HOLD = 1                ENDIF                ENDIF            NEXT I       Check if any MV&#39;s are in Wind-up Condition, initiate HOLD mode if required:            For I = 1 to Nr. of MV&#39;s   ! Check all MV&#39;s                IF MV Wind-up Status (I) is ON THEN   ! If MV is Wound up,                HOLD = 1   ! then set HOLD mode on                ENDIF   ! Note: Any MV that tend to wind up            NEXT I   ! should have valve position as a CV            If not in Suspend mode, then clamp the CV limits to ‘middle of range’, open up all the MV limits:            IF (SUSPEND = 0) AND (HOLD = 1) THEN   ! If in HOLD mode, then...            Do the Shadow CV&#39;s (soft MV targets) 25:                FOR I = 1 TO No. of MV&#39;s   ! Open up shadow CV (MV) limits:                Shadow CV Upper Limit(I) = MV Upper Limit(I)   ! Open high limit to MV operator                limit                Shadow CV Lower Limit(I) = MV Lower Limit(I)   ! Open low limit to MV operator limit                NEXT I            Now do the process CVs:                FOR I = 1 TO No. of Process CV&#39;s   ! Do all Process CV&#39;s                Process CV Upper Limit(I) = CVINIT_HI(I)   ! Clamp high limit to initialisation                limits                Process CV Lower Limits(I) = CVINIT_LO(I)   ! Clamp low limit to initialisation                limits                NEXT I            ENDIF       Now check if plant is ready for Initialisation of new MV targets:            INIZ = HOLD   ! Only try to Initialise new MV targets if in                HOLD mode           ! Any CV that fails the Initialisation checks,           will reset INIZ to 0            IF (INIZ = 1) THEN                FOR I = 1 TO No. of Process CV&#39;s   ! Only check process CV&#39;s                IF (CV Value(I) &gt; CVINIT_LO(I) − CVDELTA(I)) AND   ! DEP must be             (CV Value(I) &lt; CVINIT_HI(I) + CVDELTA(I))) THEN   ! between low                INIZ = INIZ   ! and high +−                ELSE   ! delta value to keep INIZ                INIZ = 0   ! else INIT failed (0)                ENDIF   ! if CV Values are between limits                NEXT I            ENDIF                ! IF INIZ=0            If Initialisation checks passed, then Initialise the MV targets at the current MV values (on the PCS):            IF (INIZ = 1) THEN   ! If it passed all Initialisation                checks, then                FOR I = 1 to No. of MV&#39;s   ! For all MV&#39;s,                MVTARGET(I) = Current MV value(I)   ! Grab new MV targets                NEXT I   !            ENDIF   ! If INIZ=1       Reset HOLD and INIZ flags:            IF (INIZ = 1) THEN   ! MV Initialisation has been completed                HOLD = 0   ! HOLD can now be reset            ELSE   !                HOLD = HOLD   ! Stay in HOLD mode until INIT checks are                passed            ENDIF            INIZ = HOLD   ! If still in HOLD mode, then keep on trying                to Initialise            Check if all critical process CV&#39;s are safe (within their respective ranges):            SAFE = 1   ! Initially, assume all CV&#39;s within limits                minus Delta&#39;s            FOR I = 1 TO No. of Shadow CV&#39;s   ! For all the Shadow CV&#39;s 25, do                IF (CV Value(I) &gt; CVINIT_LO(I) + CVDELTA(I)) AND   ! CV value must be             (CV Value(I) &lt; CVINIT_HI(I) − CVDELTA(I)) THEN   ! between low and                SAFE = SAFE   ! Keep Safe flag the same                ELSE                SAFE = 0   ! Safe check failed                ENDIF            NEXT I       Generate Pulse Signals only if SAFE, and NOT in HOLD, and only when pulse counter exceeds Pulse Period (otherwise, keep it       constant):            FOR I = 1 TO No. of MV&#39;s   ! Generate PULSE signals 17 for all MV&#39;s 29 if                SAFE                IF (SAFE = 1) AND             (PULSE_CNT(I) &gt;= PULSE_PERIOD(I)) AND                  (HOLD = 0) THEN   ! PULSE if SAFE, and NOT in HOLD                IF (RANDOM &gt; 0) THEN   ! IF random number is positive, then pulse                PULSE(I) = THRESHOLD(I)/2   ! up, else pulse down                ELSE   ! Use ½-amplitude                PULSE(I) = −THRESHOLD(I)/2   ! so that peak to peak value is                ENDIF   ! one full THRESHOLD value                ELSE   ! If not SAFE, then keep                PULSE(I) = PULSE(I)   ! PULSE signals the same                ENDIF   ! IF SAFE           PULSE_CNT(I) = PULSE_CNT(I) + 1   ! Increment pulse counter           IF (PULSE_CNT(I) &gt; PULSE_PERIOD(I)) THEN   ! Reset Pulse Counter to 0                PULSE_CNT(I) = 0   ! when Pulse Period is reached                ENDIF   ! IF PULSE_CNT            NEXT I       Check for reload of old Controller Configuration File and re-initialise MV copies if required. If PCS value is significantly different       from value in engine, then assume reload. All internal copies of the move accumulated MV&#39;s need to be re-initialized at the current       PCS value to prevent a bump in the MV&#39;s. Compare current MV value and the MV value from the previous iteration:       RELOAD = 0       FOR I = 1 TO No. of MV&#39;s                IF (ABS(Current MV Value(I) − Copy of Previous MV value(I)) &gt; MVTOL(I)) THEN                RELOAD = 1                ENDIF            NEXT I       Re-initialize all the copies of the MV&#39;s if a reload has been detected:       IF (RELOAD = 1) THEN                FOR I = 1 TO No. of MV&#39;s                MVSUM(I) = Current MV value(I)   ! Re-initialise move accumulated MV           MVNOW(I) = Current MV value(I)   ! Re-initialise copy of current MV value                with           ! current PCS value                NEXT I            ENDIF       END OF PROGRAM       Output Calculations:       All output calculations are executed after the control engine has calculated new MV values, but before new MV values are sent to       the PCS. The pseudo-code is shown below.       ************************************************************************************       BEGINNING OF PROGRAM       Implement Explicit Move Accumulation (Enforce Staircase Signals on all MV&#39;s):       Check that move-accumulated value does not exceeding MAXMOV rate of change limits:            FOR I = 1 TO Nr. of MV&#39;s   ! For all the MV&#39;s, do                ! explicit move accumulation                MVSUM(I) = MVSUM(I) + Current MV Move(I)            Limit Move Accumulated MV between MV Operator Limits                MVSUM(I) = MIN(MAX(MVSUM(I),MV Lower Limit(I)),MV Upper Limit(I))   ! Observe hard MV                ! limits            Enforce Staircase Signal on MV&#39;s:                IF (ABS(MVSUM(I) − MVNOW(I)) &gt; THRESHOLD(I)) THEN   ! New MV value                MVNOW(I) = MVSUM(I)                ENDIF            Generate Step Changes in MV Targets (Shadow CV&#39;s) 25:                IF ((COUNTER &gt;E 2*(I−1)*TTSS+1) AND (COUNTER &lt;= (2*I−1)*TTSS)) THEN                MVTARG_NOW(I) = MVTARGET(I) + 0.5*MVSTEP(I)                ELSE                MVTARG_NOW(I) = MVTARGET(I) − 0.5*MVSTEP(I)                ENDIF            Check that the current MV values and the current shadow CV 25 values are close (within MVTOL(I)) before setting the Shadow       CV operator limits to MVTARG_NOW.            IF (ABS(Shadow CV value(I) − Current MV value(I)) &gt; MVTOL(I)) THEN   ! If shadow CV&#39;s 25 have not                ABORT   ! been set up correctly, then abort           ENDIF           IF ((SUSPEND = 0) AND (HOLD = 0) AND (CONFIRM = 0)) THEN                Shadow CV Lower Limit(I) = MVTARG_NOW(I)   ! Not in Suspend/Hold/Confirm modes           Shadow CV Upper Limit(I) = MVTARG_NOW(I)   ! set shadow CV operator limits                ENDIF            Set MV Thresholds.       When a shadow CV is being stepped, use course resolution to enforce a staircase signal and a large non-periodic limit cycle with       fast tuning (push against the MV rate of change limits), but use high resolution and very slow tuning when an MV is not being       stepped, to allow it to reach the shadow CV target (allow last 10% of TTSS for MV to reach target before next MV is stepped).                IF ((COUNTER &gt; 2*(I−1)*TTSS+1) AND (COUNTER &lt;= 2*I*TTSS−TTSS/10)) THEN                ! Pick next MV to step                THRESH_NOW(I) = THRESHOLD(I)   ! Use course resolution to                ! enforce staircase signal                MV Move Suppression(I) = 0.01001   ! Use very fast tuning                ! to follow MV targets                MV Cost Criterion(I) = 0   ! Use min move variable when                ! stepping an MV                ELSE                THRESH_NOW(I) = THRESHOLD(I)/50   ! Use high resolution to                ! allow MV to reach target                MV Move Suppression(I) = 100   ! Use very slow tuning to                ! discourage MV moves                MV LP Cost Criterion(I) = 1   ! Use Min Cost if not stepping                ! to prevent LP from using it                PULSE(I) = 0   ! Remove PRBS Pulse Signal if not stepping                ENDIF            Override MV resolution if in Hold mode (use medium resolution for Hold mode):                IF (HOLD = 1) THEN                THRESH_NOW(I) = THRESHOLD(I)/5   ! Use medium resolution           MV LP Cost Criterion(I) = 0   ! Use Min Move if searching           PULSE(I) = 0   ! Remove Pulse Signal 17                ENDIF   ! for new targets            Override resolution if in Confirmation mode (use very high resolution for Confirmation Mode):                IF (CONFIRM = 1) THEN                THRESH_NOW(I) = THRESHOLD(I)/20   ! Use high resolution           PULSE(I) = 0   ! Remove Pulse Signal 17                ENDIF            MV Target Infeasibility:       If the MV (shadow CV 25) that is being stepped right now does not have a feasible target, then accept that any disturbances in the       active (genuine) CV&#39;s will introduce moves in the ‘active’ MV&#39;s. Reduce the correlation between MV and active CV by using low       resolution. Since genuine CV&#39;s are active with potentially poor models, use medium slow tuning.                IF (ABS(CV Steady State Error(I)) &gt; 0) THEN   ! If shadow CV target cannot                ! be reached (another CV is active),                THRESH_NOW(I) = THRESHOLD(I)/5   ! then use low resolution           MV Move Suppression(I) = 5   ! Use medium fast tuning when                ! genuine CV&#39;s are active                PULSE(I) = 0   ! Remove Pulse Signal 17                ENDIF   !            Override resolution, move suppression and LP cost criterion if in Suspend mode:                IF (SUSPEND = 1 ) THEN   ! User has turned program OFF                PULSE(I) = 0   ! Remove Pulse Signal 17           THRESH_NOW(I) = THRESHOLD(I)/50   ! Use very high resolution           MV Move Suppression = 5   ! Use medium slow tuning           MV LP Cost Critenon(I) = 1   ! Assume all MV&#39;s are min cost                ENDIF            Add Pulse Signals to MV sequences (superimpose PRBS signal 17):                MVNOW(I) = MVNOW(I) + PULSE(I)   ! Add Pulse Signal 17 to MV 29            Enforce MAXMOV on MVNOW                IF (MVNOW(I) &gt; Current MV Value(I) + MV Maximum Move(I)) THEN   ! Positive Rate of Change                MVNOW(I) = Current MV Value(I) + MV Maximum Move(I)   ! Limit Check                ENDIF                IF (MVNOW(I) &lt; Current MV Value(I) − MV Maximum Move(I)) THEN   ! Negative Rate of Change                MVNOW(I) = Current MV Value(I) − MV Maximum Move(I)   ! Limit Check                ENDIF                MVNOW(I) = MIN(MAX(MVNOW(I),MV Lower Limit(I)),MV Upper Limit(I))   ! Observe hard                ! MV limits            Note: MVNOW(I) will be written out after Output Calculations have been completed.       NEXT I       Implement Explicit Move Accumulation (Enforce Staircase Signals on all MV&#39;s):       Check that move-accumulated value does not exceed MAXMOV rate of change limits            FOR I = 1 TO Nr. Of MV&#39;s   ! For all the MV;s, do                ! explicit move accumulation                MVSUM(I) = MVSUM(I) + Current MV Move(I)            Limit Move Accumulated MV between MV Operator Limits                MVSUM(I) = MIN(MAX(MVSUM(I),MV Lower Limit(I)),MV Upper Limit(I))                ! Observe hard MV limits            Enforce Staircase Signal on MV&#39;s                THRESHOLD(I) = MVTOL(I)*(RAND*2−1)   ! RAND is a uniform random function (0,1)           IF (ABS(MVSUM(I) − MVNOW(I)) &gt; THRESHOLD(I)) THEN   ! New MV value                MVNOW(I) = MVSUM(I)                ENDIF            Check that Current MV and Shadow CV values are close (within MVTOL) before setting the Shadow CV operator limits to       MVTARG_NOW.                IF (ABS(Shadow CV value(I) − Current MV Value(I)) &gt; MVTOL(I)) THEN   ! If shadow CV&#39;s 25                ABORT   ! have not been set up                ! correctly, then abort                ENDIF   !            Add Pulse Signals 17 to MV sequences 29:                MVNOW(I) = MVNOW(I) + PULSE(I)   ! Add Pulse Signal 17 to MV29            Enforce Maximum Move constraint on MVNOW:                IF (MVNOW(I) &gt; Current MV value(I) + MV Current Move(I)) THEN   ! Positive Rate of Change                MVNOW(I) = Current MV Value(I) + MV Current Move(I)    ! Limit Check                ENDIF                IF (MVNOW(I) &lt; Current MV Value(I) − MV Current Move(I)) THEN   ! Negative Rate of Change                MVNOW(I) = Current MV Value(I) − MV Current Move(I)    ! Limit Check                ENDIF                MVNOW(I) = MIN(MAX(MVNOW(I), MV Lower Limit(I)), MV Upper Limit(I))   ! Observe hard MV limits            NEXT I       Now over-write the new calculated MV value with MVNOW:            New MV Value = MVNOW(I)   ! Complete MV re-calculation       END OF PROGRAM                  
 
         [0138]     For example, it is understood that the above discussed CV model  15 , counter  33 , MPC controller  13 , overlaid PRBS signals  16 ,  17  and current MV values module  31  are implemented in software (and/or hardware)  23  executed on digital processing means  35 ,  37 . The digital processing means  35 ,  37  may employ distributed processing across multiple computers, may be a network of computers and may employ a variety of other architectures, data structures, communications structures and the like. Further, each component  15 ,  33 ,  13 ,  16 ,  17 ,  31  of software  23  may be implemented in a variety of ways by a common module or multiple modules. The foregoing description of these components was for purposes of functionally illustrating the present invention and not for limiting the invention.  
         [0139]     Also other alternative discretization methods other than internal move accumulation  40  and variable dead zones to prevent feedback correlation is in the purview of one skilled in the art given the foregoing discussion of the present invention.  
         [0140]     Similarly, alternatives to shadow CV&#39;s  25 , especially for highly co-linear systems (like distillation columns) are suitable.  
         [0141]     Also various non-linear variable structure (sliding mode) control methods for generating the MV moves  40 , based on the sign of the gains only, or other non-linear processing (NLP) to generate the move plan for very low MV resolution are suitable.  
         [0142]     Another preferred embodiment of the present invention, as shown in  FIG. 1C , aims at not only making process perturbation safe and automatic, but also much more efficient. This is achieved by combining the modified MPC technology and the GBN technology in an innovative new way. It consists of two tiers of optimization: (1) the discrete minimal move control  13  and (2) the magnitude maximized GBN perturbation  131 . The first tier of optimization keeps the perturbed process operating inside the safety constraints while minimizing its interference to the intended MV perturbations. The second tier generates GBN like signals with the MV magnitude maximized up to the predefined process output (CV) constraints.  
         [0143]     The new approach starts with an initial process model, which is either derived from manual pre-test work, or from an existing model for a process unit that has subsequently been modified. Normally, only certain key model curves are needed to start with, as the weaker process relationships will not contribute much to CV limit violation. As more perturbation data becomes available, an updated model is identified. With an updated model, the constraint setting (CV limits) can be relaxed and a better perturbation with larger magnitude MV moves can then be achieved. As shown in  FIG. 1C , the system can be implemented using a process control system (PCS)  39  feeding back into the MPC controller  13 , the PCS controlling the subject process  11  using techniques and mechanics common in the art.  
         [0144]     In this preferred embodiment of the invention, process inputs and outputs are as defined as follows: 
 
 U ( k )=[ u   1 ( k ), u   2 ( k ), . . . , u   m ( k )] T , k=0,1 
 
 Y ( k )=[ y   1 ( k ), y   2 ( k ), . . . ,  y   n ( k )] T  
 
 where m is the number of inputs and n is the number of outputs. For the sake of convenience, we assume the process can be described using a Finite Impulse Response (FIR) model, as shown below:  
         Y   ⁡     (   k   )       =       ∑     t   =   0     T     ⁢       H   ⁡     (   t   )       *     U   ⁡     (     k   -   t     )               
 
 where T is the time to steady state. Notice that the technology covered is not restricted to an FIR model; instead, any linear model structure can be used. 
 
         [0145]     Denote the cycle-to-cycle input change as: 
 
Δ U ( k )= U ( k )− U ( k− 1) 
 
 And further define the history inputs and the response to the history inputs as:  
           V   k     ⁡     (   t   )       =     {             U   ⁡     (   t   )                 U   ⁡     (   k   )             ⁢           ∀     t   &lt;   k                 ∀     t   ≥   k               }         
             Y   0     ⁡     (     k   +   l     )       =       ∑     t   =   0     T     ⁢     H   ⁢           ⁢     (   t   )     *       V   k     ⁡     (     k   +   l   -   t     )             ,     l   ≥   1         
 
         [0146]     Because of the superposition property of a linear system, we can describe the future prediction of the output using: 
 
 Y ( k+ 1)= Y   0 ( k+ 1)+Δ Y ( k+ 1)+Bias 
 
 where  
         Δ   ⁢           ⁢     Y   ⁡     (     k   +   l     )         =       ∑     t   =   0       min   ⁡     (     T   ,   l     )         ⁢           ⁢       H   ⁡     (   t   )       *   Δ   ⁢           ⁢     U   ⁡     (     k   +   l   -   t     )               
 
         [0147]     Assume that the process has already propagated up to time k−1 and our task is to find the process inputs (MV values) for time instant k. Based on the principles stated in the previous section, the future control action can be computed by solving the following constrained optimization problem:  
               min       Δ   ⁢           ⁢   U     ,   E       ⁢     (         E   T     *     W   Y     *   E     +     Δ   ⁢           ⁢     U   T     *     W   U     *   Δ   ⁢           ⁢   U       )             (   1   )             
 
 with the following constraints: 
 
 U   −   ≦U ( k+t )≦ U *, 0≦ t≦N   u  (control horizon) 
 
Δ U   −   ≦ΔU ( k+t )≦Δ U*  
 
|Δ U ( k+t )|≧Δ U   min  (MV move resolution) 
 
           Y   ⁡     (     k   +   t     )       =         Y   0     ⁡     (     k   +   t     )       +       ∑     l   =   0       min   ⁡     (     T   ,   t     )         ⁢           ⁢     H   ⁢           ⁢     (   t   )     *   Δ   ⁢           ⁢     U   ⁡     (     k   +   t   -   l     )               ⁢               
  Y   − ( k+t )− E≦Y ( k+t )≦Y + ( k+t )+ E,    0≦   t≦N   y  (prediction horizon) 
 
E≧0 (slack variables) 
 
         [0148]     The output upper and lower bounds, Y + (k+t) and Y − (k+t) respectively, should be chosen in this way: 
        For a stable output, they can simply be the operating high and low limits.     For a ramp output (integrating variables), two bounds  501   a ,  501   b  define a safety cone  501  as in the  FIG. 5 . This means that if the current ramp is close to or outside a limit, a conservative cone  502 ,  503  is used. If the current ramp variable is well inside the limit, a less conservative cone  501  is used.        
 
         [0151]     The move resolution ΔU min  can be decided as follows. Denote d yj  as the Test Margin for jth output (a safety margin associated with a specific CV that denotes the amount of acceptable limit violation), and g ij  the steady state gain or r ij  the ramp rate between input i and output j. Then  
         u     i   ⁢           ⁢   min       =     min   ⁡     (         min     non   -   ramps       ⁢     (            ⅆ     y   j         g   ij            )       ,       min   ramps     ⁢     (              ⅆ     y   j       /     N   y         r   ij            )         )           
 
 This means that the move resolution should be small enough so that at least one input can be moved to bring an output back one Test Margin inside the limit should it violate. 
 
         [0152]     Since the move resolution constraint is imposed, the above optimization formula is not a conventional quadratic programming (QP) problem any more. However, it can be solved sequentially in the following way: 
        1. Solve the problem without the move resolution constraint first;     2. If any computed input change is smaller than the move resolution, force this input to be constant (no change allowed) and then solve the problem again;     3. Repeat step 2 until all input changes either are bigger than the move resolution or are equal to zero.        
 
         [0156]     Denote the control move computed above as U c  and the resultant output prediction as Y c . Our next step is to compute the magnitude for the MGBN signals.  
         [0157]     Assume Pi(·) to be the random number generator for process input i with uniform distribution in the range [0,1], and Pi to be the switching probability. Define: 
 
 S   k   ={i, 0≦ i≦m  and  P   i ( k )≧ P   i }
 
 As such, S k  contains the indexes of all process inputs (MV) that will make a switch at time k. We further separate S k  into two subsets: one contains the inputs which have moved downward at a previous switching time and one contains the inputs which have moved upward at a previous switching time, as follows: 
 
 S   k   −   ={i ε S   k  and Δu i (k−1)&lt;0}
 
 S   k   +   ={i ε S   k  and Δu i (k−1)&gt;0}
 
 Then the magnitude at time k can be computed from the following formula:  
               min         Δu   i     ⁢     ❘     i   ∈     S   k           ,   E       ⁢     (         E   T     *     W   Y     *   E     +       ∑     i   ∈     S   k   -         ⁢           ⁢       W   i     *   Δ   ⁢           ⁢     u   i         -       ∑     i   ∈     S   k   +         ⁢           ⁢       W   i     *   Δ   ⁢           ⁢     u   i           )             (   2   )             
 
 with the following constraints: 
 
Δu i =0, ∀i ∉ S k  
 
 U   −   ≦U   c ( k )+Δ U≦U   + 
 
Δ U   −   ≦ΔU≦ΔU   + 
 
           Y   ⁡     (     k   +   t     )       =         Y   c     ⁡     (     k   +   t     )       +       ∑     l   =   0       min   ⁡     (     T   ,   t     )         ⁢           ⁢       H   ⁡     (   t   )       *   Δ   ⁢           ⁢   U           ,     0   ≤   t   ≤     N   y           
  Y   − ( k+t )− E≦Y ( k+t )≦ Y   + ( k+t )+ E  
 
E≧0 
 
 Notice that the output violation weighing W y  should be significantly higher than the other weightings. 
 
         [0158]     After completing the above two tiers of optimization, the actual input signal at time k is ΔU c (k)+ΔU x , where ΔU x  is the computed magnitude of the multivariable MGBN signals.  
         [0159]     Illustrated in  FIG. 6  is a plot diagram that shows two process inputs (MV&#39;s) undergoing MGBN perturbation. Note that rate of change, and low and high limits are imposed on the process input (MV) signals, for safety purposes.  FIG. 7  shows the response of two process output (CV) variables. Note that both process outputs (CVs) are very actively perturbed and are never allowed to line out, thus maximizing Signal to Noise ratio and therefore the time it will take for the model to converge is reduced. In addition, note that the CVs do not violate their limits by more than the allowed Test Margin.  
         [0160]     While this invention has been particularly shown and described with references to preferred embodiments thereof, it will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the scope of the invention encompassed by the appended claims.