WO2019006590A1 - Communication method for industrial control system, and industrial control system - Google Patents

Abstract

Embodiments of the present invention provide an industrial control system communication method and an industrial control system, the method comprising: establishing a backbone communication link based on fieldbus communication between a main industrial control device in the industrial control system and from an industrial control device And an auxiliary communication link based on power carrier communication. Communication between the primary industrial control device and the secondary industrial control device is performed with the secondary communication link as a backup link for the backbone communication link. The industrial control system includes a main industrial control device, a backbone communication link from an industrial control device and a fieldbus communication, and an auxiliary communication link based on power carrier communication. In the above manner, the communication network architecture is not redesigned, and the existing power lines are used to transmit the analog and/or digital signals in the industrial control system through the carrier wave at high speed without increasing the network topology complexity and equipment cost, thereby effectively ensuring the master-slave Communication between industrial control devices.

Description

Industrial control system communication method and industrial control system

[Technical Field]

Embodiments of the present invention relate to the field of industrial control, and in particular, to an industrial control system communication method and an industrial control system.

 【Background technique】

Industrial control equipment has high reliability requirements for communication. When the industrial control equipment is running, if the communication is faulty or interrupted, the industrial control equipment will work abnormally or even fail to operate, causing huge losses to the enterprise.

At present, in order to avoid the problem that the industrial control equipment can not work normally due to communication failure or interruption, the common practice is to use the redundant network topology to communicate with the industrial control equipment, generally using two sets of the same industrial field bus network to constitute redundancy. In the redundant network, when one industrial field bus fails, another industrial field bus will undertake the task of communication of industrial control equipment.

Obviously, the above scheme adopts two sets of the same industrial field bus network. In complex industrial field conditions, the probability of common mode error is high, that is, the two networks may fail at the same time due to some interference. Forming a bus structure will increase the complexity of the network topology.

 [Summary of the Invention]

The embodiment of the invention provides a communication method and an industrial control system for an industrial control system, which can effectively avoid equipment work problems or industrial field problems caused by network communication failures.

An embodiment of the present invention provides a communication method for an industrial control system, including:

Establishing a main communication link based on fieldbus communication and an auxiliary communication link based on power carrier communication between the main industrial control device in the industrial control system and from the industrial control device;

Communication between the primary industrial control device and the secondary industrial control device is performed with the secondary communication link as a backup link for the backbone communication link.

The step of establishing a main communication link based on fieldbus communication and an auxiliary communication link based on power carrier communication between the main industrial control device in the industrial control system and the industrial control device includes:

Two fieldbus communication links are established within the backbone communication link and an auxiliary communication link based on power carrier communication is established between the primary industrial control device and the slave industrial control device.

The step of establishing a main communication link between the main industrial control device in the industrial control system and the field communication communication based on the fieldbus communication and the auxiliary communication link based on the power carrier communication further includes:

The two fieldbus communication links are divided into a main fieldbus communication link and a standby fieldbus communication link according to a sequence of establishing communication of the two fieldbus communication links during the initialization process.

Optionally, the backbone communication link and the auxiliary communication link work in a redundant manner or in a switched manner.

The step of establishing a main communication link between the main industrial control device in the industrial control system and the field communication communication based on the fieldbus communication and the auxiliary communication link based on the power carrier communication further includes:

During the initialization process, the working states of the trunk communication link and the auxiliary communication link are detected, and a corresponding initialization policy is executed according to the detection result.

Wherein, when the backbone communication link and the auxiliary communication link operate in a redundant manner, in the initializing process, the working states of the trunk communication link and the auxiliary communication link are detected, and according to The steps of the detection result to execute the corresponding initialization strategy include:

If the two fieldbus communication links in the trunk communication link are working normally and the auxiliary communication link is also working normally, initialization is completed and no alarm signal is generated;

If the two fieldbus communication links in the trunk communication link are working normally and the auxiliary communication link is abnormal, the initialization is completed but an alarm signal is generated;

If any one of the two fieldbus communication links in the backbone communication link operates abnormally, the initialization fails.

Wherein, when the trunk communication link and the auxiliary communication link operate in a switching manner, in the initializing process, the working states of the trunk communication link and the auxiliary communication link are detected, And the steps of executing the corresponding initialization strategy according to the detection result include:

If the two fieldbus communication links in the trunk communication link are all working normally and the auxiliary communication link is also working normally, initialization is completed;

If any of the two fieldbus communication links and the auxiliary communication link in the backbone communication link operate abnormally, the initialization fails.

The step of performing communication between the main industrial control device and the slave industrial control device by using the auxiliary communication link as a backup link of the backbone communication link includes:

During the working process, the working states of the trunk communication link and the auxiliary communication link are detected, and a corresponding working policy is executed according to the detection result.

Wherein, when the backbone communication link and the auxiliary communication link operate in a redundant manner, the working state of the trunk communication link and the auxiliary communication link is detected during operation And the steps to execute the corresponding work strategy based on the test results include:

If the trunk communication link and the auxiliary communication link both work normally, the industrial control system performs redundant communication through the main fieldbus communication link and the standby fieldbus communication link, and maintains the current working state. And does not generate an alarm signal;

If only the auxiliary communication link operates abnormally, the industrial control system performs redundant communication through the main field bus communication link and the standby field bus communication link, and maintains a current working state and generates a first alarm signal;

If only the standby fieldbus communication link in the trunk communication link operates abnormally, the industrial control system performs redundant communication through the primary fieldbus communication link and the auxiliary communication link, and maintains current work State and generate a second alarm signal;

If only the primary fieldbus communication link in the trunk communication link operates abnormally, the industrial control system performs redundant communication through the standby fieldbus communication link and the auxiliary communication link, and maintains current work. State and generate a third alarm signal;

And if the one of the primary fieldbus communication link and the standby fieldbus communication link operates abnormally and the auxiliary communication link operates abnormally, the industrial control system passes the primary fieldbus communication link and The other one of the standby field bus communication links that works normally communicates, maintains the current working state, and generates a fourth alarm signal;

If the primary fieldbus communication link and the standby fieldbus communication link both operate abnormally, and the auxiliary communication link works normally, the industrial control system communicates through the auxiliary communication link and enters The safety state and a fifth alarm signal is generated.

Wherein, when the trunk communication link and the auxiliary communication link operate in a switching manner, the working state of the trunk communication link and the auxiliary communication link is detected during operation, And the steps of executing the corresponding work strategy according to the detection result include:

If the trunk communication link and the auxiliary communication link both work normally, the industrial control system communicates through the main fieldbus communication link, and maintains a current working state without generating an alarm signal;

If the primary fieldbus communication link is functioning properly and any one of the standby fieldbus communication link and the auxiliary communication link operates abnormally, the industrial control system passes the primary fieldbus communication link The road communicates and maintains the current working state and generates a sixth alarm signal;

If the primary fieldbus communication link operates abnormally and the standby fieldbus communication link works normally, the industrial control system switches to communicate through the standby fieldbus communication link and maintains the current working state and Generating a seventh alarm signal;

If the primary fieldbus communication link and the standby fieldbus communication link both operate abnormally, and the auxiliary communication link works normally, the industrial control system switches to work by using the auxiliary communication link to communicate And maintain the current working state and generate an eighth alarm signal.

Embodiments of the present invention also provide an industrial control system including a main industrial control device, a slave industrial control device, and a fieldbus communication-based backbone communication link disposed between the main industrial control device and the slave industrial control device. An auxiliary communication link based on power carrier communication, wherein the auxiliary communication link acts as a backup link for the backbone communication link during communication between the primary industrial control device and the secondary industrial control device .

The backbone communication link further includes two fieldbus communication links.

In the initialization process, the main industrial control device divides the two field bus communication links into a main field bus communication link and a standby field bus communication link according to a sequence of establishing communication between the two field bus communication links. .

Optionally, the backbone communication link and the auxiliary communication link work in a redundant manner or in a switched manner.

The main industrial control device detects the working states of the trunk communication link and the auxiliary communication link, and performs a corresponding initialization policy according to the detection result.

Wherein, when the trunk communication link and the auxiliary communication link operate in a redundant manner, the main industrial control device performs the following initialization policy according to the detection result:

If the two fieldbus communication links in the trunk communication link are working normally and the auxiliary communication link is also working normally, initialization is completed and no alarm signal is generated;

If the two fieldbus communication links in the trunk communication link are working normally and the auxiliary communication link is abnormal, the initialization is completed but an alarm signal is generated;

If any one of the two fieldbus communication links in the backbone communication link operates abnormally, the initialization fails.

Wherein, when the trunk communication link and the auxiliary communication link operate in a switching manner, the main industrial control device performs the following initialization policy according to the detection result:

If the two fieldbus communication links in the trunk communication link are all working normally and the auxiliary communication link is also working normally, initialization is completed;

If any of the two fieldbus communication links and the auxiliary communication link in the backbone communication link operate abnormally, the initialization fails.

In the working process, the main industrial control device detects the working status of the trunk communication link and the auxiliary communication link, and executes a corresponding working policy according to the detection result.

Wherein, when the trunk communication link and the auxiliary communication link operate in a redundant manner, the main industrial control device performs the following working policies according to the detection result:

If the trunk communication link and the auxiliary communication link both work normally, the industrial control system performs redundant communication through the main fieldbus communication link and the standby fieldbus communication link, and maintains the current working state. And does not generate an alarm signal;

If only the auxiliary communication link operates abnormally, the industrial control system performs redundant communication by the main field bus communication link and the standby field bus communication link, and maintains the current working state and generates the first Alarm;

If only the standby fieldbus communication link in the trunk communication link operates abnormally, the industrial control system performs redundant communication through the primary fieldbus communication link and the auxiliary communication link, and maintains current work State and generate a second alarm signal;

If only the primary fieldbus communication link in the trunk communication link operates abnormally, the industrial control system performs redundant communication through the standby fieldbus communication link and the auxiliary communication link, and maintains current work. State and generate a third alarm signal;

And if the one of the primary fieldbus communication link and the standby fieldbus communication link operates abnormally and the auxiliary communication link operates abnormally, the industrial control system passes the primary fieldbus communication link and The other one of the standby field bus communication links that works normally communicates, maintains the current working state, and generates a fourth alarm signal;

If the primary fieldbus communication link and the standby fieldbus communication link both operate abnormally, and the auxiliary communication link works normally, the industrial control system communicates through the auxiliary communication link and enters The safety state and a fifth alarm signal is generated.

Wherein, when the trunk communication link and the auxiliary communication link operate in a switching manner, the main industrial control device performs the following working policies according to the detection result:

If the trunk communication link and the auxiliary communication link both work normally, the industrial control system communicates through the main fieldbus communication link, and maintains a current working state without generating an alarm signal;

If the primary fieldbus communication link is functioning properly and any one of the standby fieldbus communication link and the auxiliary communication link operates abnormally, the industrial control system passes the primary fieldbus communication link The road communicates and maintains the current working state and generates a sixth alarm signal;

If the primary fieldbus communication link operates abnormally and the standby fieldbus communication link works normally, the industrial control system switches to communicate through the standby fieldbus communication link and maintains the current working state and Generating a seventh alarm signal;

If the primary fieldbus communication link and the standby fieldbus communication link both operate abnormally, and the auxiliary communication link works normally, the industrial control system switches to work by using the auxiliary communication link to communicate And maintain the current working state and generate an eighth alarm signal.

Compared with the prior art, the beneficial effects of the embodiments of the present invention are: using the power carrier communication as the auxiliary communication link and the backbone communication link to form a redundant network, without redesigning the communication network architecture, using the master-slave industrial control device The power line transmits the analog and/or digital signals in the industrial control system at high speed through the carrier wave, without increasing the complexity of the network topology and the equipment cost, and effectively protecting the master-slave industrial control equipment when the trunk communication link fails. Inter-communication, and reliable communication, can meet the communication requirements between the master-slave industrial control equipment.

Further, the use of power carrier communication as an auxiliary communication link can reduce the common mode error rate existing between the two field bus communication links, thereby further ensuring normal communication of the industrial control system.

Further, the present invention provides two communication methods, a network redundancy working mechanism and a network switching working mechanism, which can effectively ensure the communication of the industrial control system in both normal operation and failure, and both communication modes are industrial. The communication link of the control system is detected, which can effectively detect the communication situation before or during the operation of the industrial control system, and can provide different guarantees for different communication situations.

 [Description of the Drawings]

1 is a schematic flow chart of an embodiment of a communication method of an industrial control system according to the present invention;

2 is a schematic flow chart of a redundant mode working state in an embodiment of a communication method of an industrial control system according to the present invention;

3 is a schematic flow chart of another embodiment of a communication method of an industrial control system according to the present invention;

4 is a schematic flowchart of a working mode of a switching mode in another embodiment of a communication method of an industrial control system according to the present invention;

FIG. 5 is a schematic structural view of an embodiment of an industrial control system according to the present invention.

【Detailed ways】

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

Referring to FIG. 1 , FIG. 2 and FIG. 5 , the method in the embodiment of the communication method of the industrial control system of the present invention includes:

S1: establishing a main communication link based on fieldbus communication and an auxiliary communication link based on power carrier communication between the main industrial control device in the industrial control system and from the industrial control device.

S2: performing communication between the main industrial control device and the slave industrial control device with the auxiliary communication link as a backup link of the backbone communication link.

In actual communication of the industrial control system, a fieldbus communication backbone communication link in the industrial control system turns on communication between the main industrial control device and the slave industrial control device, and simultaneously with the auxiliary The communication link can constitute a redundant network, thereby further ensuring that the communication between the master-slave industrial equipment remains unblocked when the fault occurs. For example, when a failure of the backbone communication link causes communication between the primary industrial control device and the secondary industrial control device to be interrupted, the secondary communication link in the redundant network can be connected as a backup communication link The main industrial control device and the communication with the slave industrial control device avoid loss caused by communication interruption caused by failure of the backbone communication link, and can conveniently detect and repair the faulty backbone communication link .

In this embodiment, the power carrier communication is utilized as an auxiliary communication link, and the communication network architecture is not redesigned, and the existing power line of the master-slave industrial control device is used to simulate and/or simulate the industrial control system. The high-speed transmission of the digital signal does not increase the network topology complexity and the equipment cost, and can effectively ensure the communication between the master-slave industrial control devices when the trunk communication link fails, and the communication is reliable and the transmission speed is fast. It can meet the communication requirements between the master-slave industrial control devices.

The power carrier can be implemented in various manners, for example, the processor in the industrial control device converts the baseband signal into a bandpass signal (ie, a modulated signal) with a higher frequency relative to the baseband frequency through a modem to be suitable for channel transmission. . The signal pre-processing circuit realizes amplification and filtering of the transmitted signal and the received signal. The power line coupled power realizes a physical interface between the power carrier circuit and the power line.

Optionally, the auxiliary communication link based on power carrier communication may be classified into high voltage power carrier communication, medium voltage power carrier communication, or low voltage power carrier communication. Optional low voltage power carrier communication with a voltage of 380V or 220V. Generally, there are different signal coupling modes of the power carrier signal, such as wired-ground coupling and line-to-neutral coupling. In this embodiment, the auxiliary communication link may be selected or set according to actual conditions.

Specifically, the steps of establishing a main communication control link based on fieldbus communication and an auxiliary communication link based on power carrier communication between the main industrial control device in the industrial control system and the industrial control device include:

S11: Establish two fieldbus communication links in the trunk communication link, and establish an auxiliary communication link based on power carrier communication between the main industrial control device and the slave industrial control device. .

The two fieldbus communication links can work simultaneously or separately. And the industrial control system can automatically select or not automatically select the two fieldbus communication links. The auxiliary communication link can also establish two field-assisted communication links.

In normal communication, two fieldbus communication links are established in the backbone communication link, and when the two communication links work simultaneously, the communication data signals of the industrial control system can be shared, thereby avoiding a single communication line may bring The communication is not smooth, or the load is too high, the communication failure and the like, the communication between the master-slave industrial control devices is more effectively ensured, and in addition, one of the field bus communication in the trunk communication link is When the link fails, another one of the fieldbus communication links can ensure smooth communication between the master-slave industrial control devices, and does not affect normal communication of the master-slave industrial control device. In addition, the use of the power carrier communication as an auxiliary communication link can reduce the common mode error rate existing between the two fieldbus communication links, thereby further ensuring the effectiveness of the redundant network of the industrial control system and the normal communication. .

Specifically, the step of establishing a main communication link between the main industrial control device and the industrial control device based on the fieldbus communication and the auxiliary communication link based on the power carrier communication further includes:

S12: The two field bus communication links are divided into a main field bus communication link and a standby field bus communication link according to a sequence of establishing communication between the two field bus communication links during the initialization process.

In actual communication of the industrial control system, the primary fieldbus communication link and the standby fieldbus communication link form a redundant network in the primary fieldbus communication link and the standby fieldbus communication link When one of the faults occurs, the other fieldbus communication link that is working normally can ensure that the communication of the backbone communication link of the master-slave industrial control device is normal. The trunk communication link and the auxiliary communication link based on the power carrier communication constitute another redundant network, which ensures the main when the main field bus communication link and the standby field bus communication link both fail. Normal communication between the industrial control devices ensures the normal operation of the master-slave industrial control device. Through two levels of redundant networks, the risk of failure caused by a single identical redundant network can be reduced, and communication between the master-slave industrial control devices can be more effectively guaranteed. And utilizing the power carrier communication as the auxiliary communication link can reduce the common mode error rate existing between the two fieldbus communication links, thereby further reducing the risk of communication failure of the industrial control system.

In this embodiment, the backbone communication link and the auxiliary communication link operate in a redundant manner.

Specifically, the step of establishing a main communication link between the main industrial control device and the industrial control device based on the fieldbus communication and the auxiliary communication link based on the power carrier communication further includes:

S13: During the initialization process, the working states of the trunk communication link and the auxiliary communication link are detected, and a corresponding initialization policy is executed according to the detection result.

Before the operation of the industrial control system, real-time or non-real-time detection is performed on the backbone communication link and the auxiliary communication link in the redundant network, and after the result is obtained, the corresponding detection result is executed according to the obtained detection result. Initializing strategy for initializing the fieldbus communication link and the auxiliary communication link as a communication link of the master-slave industrial control device, avoiding communication interruption of the master-slave industrial control device during operation, causing the master-slave Industrial control equipment cannot work and other issues.

The detection method is various, for example, the main industrial control device transmits the control command to the slave industrial control device and/or receives the slave industrial control device by using the trunk communication link or the auxiliary communication link. An operational state whereby the communication path of the backbone communication link and the auxiliary communication link is detected.

Specifically, when the trunk communication link and the auxiliary communication link operate in a redundant manner, in an initialization process, the working states of the trunk communication link and the auxiliary communication link are performed. The steps of detecting and executing the corresponding initialization strategy according to the detection result include S14:

If both of the fieldbus communication links in the backbone communication link are working properly and the auxiliary communication link is also functioning properly, initialization is completed and no alarm signal is generated.

If the two fieldbus communication links in the trunk communication link are working normally and the auxiliary communication link is abnormal, the initialization is completed but an alarm signal is generated.

If any one of the two fieldbus communication links in the backbone communication link operates abnormally, the initialization fails.

In this embodiment, the communication link of the industrial control system must include at least one fieldbus communication link that is working normally, otherwise the initialization fails. If the two fieldbus communication links work abnormally and still need to be initialized, then in the course of work, the communication of the industrial control system lacks the backbone communication, so that normal communication is not guaranteed, and it is extremely easy. At least one working bus communication link that works normally, to some extent, guarantees normal communication of the industrial control system due to communication problems caused by communication interruption or communication failure.

Certainly, the initialization policy described in this embodiment may be multiple. For example, if the two field bus communication links in the trunk communication link are working normally and the auxiliary communication link is also working normally, the completion is completed. Initialized and no alarm signal is generated. If any one of the two fieldbus communication links and the auxiliary communication link in the trunk communication link work abnormally, the initialization fails.

Specifically, the step of performing communication between the main industrial control device and the slave industrial control device by using the auxiliary communication link as a backup link of the backbone communication link includes:

S15: During the working process, the working states of the trunk communication link and the auxiliary communication link are detected, and a corresponding working policy is executed according to the detection result.

After the initialization is completed, the master-slave industrial control device can start working, and the communication link is normally connected. In order to ensure that the master-slave industrial control devices can also communicate normally during the working process, in the working process, the working states of the trunk communication link and the auxiliary communication link are detected in real time or not detected in real time, and then The communication link that makes the communication of the master-slave industrial control device unblocked or the security of the master-slave industrial control device is selected or switched according to the detection result.

The detecting is performed in various manners, for example, the industrial control system transmits the control command to the slave industrial control device and receives the operating state of the slave industrial control device by using the trunk communication link or the auxiliary communication link. Thereby detecting a communication path of the backbone communication link and the auxiliary communication link.

Specifically, after the initialization is completed, when the trunk communication link and the auxiliary communication link operate in a redundant manner, in the working process, the trunk communication link and the auxiliary communication link are The working state is detected, and the steps of executing the corresponding working strategy according to the detection result include S16:

If the trunk communication link and the auxiliary communication link both work normally, the industrial control system performs redundant communication through the main fieldbus communication link and the standby fieldbus communication link, and maintains the current working state. And does not generate an alarm signal;

If only the auxiliary communication link operates abnormally, the industrial control system performs redundant communication through the main field bus communication link and the standby field bus communication link, and maintains a current working state and generates a first alarm signal;

If only the standby fieldbus communication link in the trunk communication link operates abnormally, the industrial control system performs redundant communication through the primary fieldbus communication link and the auxiliary communication link, and maintains current work State and generate a second alarm signal;

If only the primary fieldbus communication link in the trunk communication link operates abnormally, the industrial control system performs redundant communication through the standby fieldbus communication link and the auxiliary communication link, and maintains current work. State and generate a third alarm signal;

And if the one of the primary fieldbus communication link and the standby fieldbus communication link operates abnormally and the auxiliary communication link operates abnormally, the industrial control system passes the primary fieldbus communication link and The other one of the standby field bus communication links that works normally communicates, maintains the current working state, and generates a fourth alarm signal;

If the primary fieldbus communication link and the standby fieldbus communication link both operate abnormally, and the auxiliary communication link works normally, the industrial control system communicates through the auxiliary communication link and enters The safety state and a fifth alarm signal is generated.

By setting different alarm signals according to different situations, it is possible to clarify the current communication mode of the industrial control system and the place where the failure occurs in the actual working process, and select different maintenance strategies. In this embodiment, the five different alarm signals may be expressed in various manners, for example, by displaying signals of different colors, or by different sounds, or by voice.

Of course, there are various working strategies, for example, if the trunk communication link and the auxiliary communication link are all working normally, the industrial control system passes the main field bus communication link and the standby field bus communication chain. The road performs redundant communication and maintains the current working state without generating an alarm signal. If the one or both of the primary fieldbus communication link and the standby fieldbus communication link and the auxiliary communication link of the backbone communication link operate abnormally, then the industrial control system chooses to maintain the current The working state or enters a safe state and generates an alarm signal.

In this embodiment, the higher the first to fifth median values of the alarm signal, the more serious the event. Of course, it can also be set that the lower the value in the first to the fifth, the more serious the event, and in this setting state, the working strategy should be set correspondingly.

The working strategy can be determined according to the actual working needs of the industrial control system.

In this embodiment, the redundant working mode is a digital communication mode and/or an analog communication mode.

Referring to FIG. 3 and FIG. 4, another embodiment of the communication method of the industrial control system of the present invention is the same as the embodiment of the communication method of the industrial control system of the present invention described above, and the difference mainly includes the trunk communication link and the auxiliary. The communication link operates in a switched manner.

In the actual communication of the industrial control system, when the trunk communication link or the auxiliary communication link fails, the industrial control system can automatically or not automatically switch to a working communication link to secure the industry. Communication between the slave main industrial control devices of the control system.

Specifically, the step of establishing a main communication link between the main industrial control device and the industrial control device based on the fieldbus communication and the auxiliary communication link based on the power carrier communication further includes:

M13: During the initialization process, the working states of the trunk communication link and the auxiliary communication link are detected, and a corresponding initialization policy is executed according to the detection result.

Before the operation of the industrial control system, real-time or non-real-time detection of the working states of the backbone communication link and the auxiliary communication link is performed to initialize, and the working state is completed after initialization, which can effectively avoid the industrial control. The system has a problem of communication interruption during the work process.

Specifically, when the trunk communication link and the auxiliary communication link operate in a switching manner, the working states of the trunk communication link and the auxiliary communication link are detected during an initialization process. And the steps of executing the corresponding initialization strategy based on the detection result include M14:

If the two fieldbus communication links in the trunk communication link are all working normally and the auxiliary communication link is also working normally, initialization is completed;

If any of the two fieldbus communication links and the auxiliary communication link in the backbone communication link operate abnormally, the initialization fails.

If the initialization is completed, the industrial control system can enter a normal working state; if the initialization fails, the industrial control system can be overhauled, and when the maintenance is completed, the initialization is resumed. It is initialized to clarify whether the trunk communication link and the auxiliary communication link are in a normal working state, and to prevent the faulty communication link from affecting communication in the operation of the industrial control system.

Specifically, the step of performing communication between the main industrial control device and the slave industrial control device by using the auxiliary communication link as a backup link of the backbone communication link includes:

M15: During the working process, the working states of the trunk communication link and the auxiliary communication link are detected, and a corresponding working policy is executed according to the detection result.

Specifically, when the trunk communication link and the auxiliary communication link operate in a switching manner, the working status of the trunk communication link and the auxiliary communication link are detected during operation. And the steps to execute the corresponding work strategy based on the test results include M16:

If the trunk communication link and the auxiliary communication link both work normally, the industrial control system communicates through the main fieldbus communication link, and maintains a current working state without generating an alarm signal;

If the primary fieldbus communication link is functioning properly and any one of the standby fieldbus communication link and the auxiliary communication link operates abnormally, the industrial control system passes the primary fieldbus communication link The road communicates and maintains the current working state and generates a sixth alarm signal; at this time, the trunk communication link is kept connected to the main fieldbus communication link for communication, and the normal operation of the trunk communication link is maintained. .

If the primary fieldbus communication link operates abnormally and the standby fieldbus communication link works normally, the industrial control system switches to communicate through the standby fieldbus communication link and maintains the current working state and A seventh alarm signal is generated; at this time, the trunk communication link is switched to the standby fieldbus communication link for communication, and the normal operation of the trunk communication link is maintained.

If the primary fieldbus communication link and the standby fieldbus communication link both operate abnormally, and the auxiliary communication link works normally, the industrial control system switches to work by using the auxiliary communication link to communicate And maintain the current working state and generate an eighth alarm signal. At this time, the communication link of the industrial control system is switched to the standby field bus communication link for communication, maintaining the normal operation of the industrial control system, and prompting the master-slave industrial control device to perform maintenance or the above The fault is handled.

In this embodiment, the switching mode is a digital communication mode and/or an analog communication mode.

In this embodiment, the higher the value in the sixth to eighth of the alarm signal in the switching mode, the higher the event. Of course, it can also be set that the lower the value in the sixth to eighth, the more serious the event, in which the working strategy is to be correspondingly set.

Steps M1 and M2 of this embodiment are steps S1 and S2 in an embodiment of the above-described industrial control communication method of the present invention. Steps M11 and M12 of this embodiment are steps S11 and S12 in an embodiment of the above-described industrial control communication method of the present invention.

Referring to FIG. 5, an embodiment of the industrial control system of the present invention includes a main industrial control device 1, a slave industrial control device 2, and a fieldbus-based communication provided between the main industrial control device 1 and the slave industrial control device 2. The backbone communication link 3 and the auxiliary communication link 4 based on power carrier communication. The auxiliary communication link 4 serves as a backup link for the trunk communication link 3 in the communication process between the main industrial control device 1 and the slave industrial control device 2.

In the actual communication of the industrial control system, the backbone communication link 3 and the auxiliary communication link 4 constitute a redundant network, and when the trunk communication link 3 fails, the auxiliary communication link 4 As a backup link, communication between the master-slave industrial control devices 2 of the industrial control system is maintained normal.

By using power carrier communication as the auxiliary communication link 4, the communication network architecture is not redesigned, and the analog power and/or digital signals in the industrial control system are transmitted at high speed by means of the existing power line of the master-slave industrial control device 2 through the carrier. Without increasing network topology complexity and equipment cost, when the trunk communication link 3 fails, the communication between the master-slave industrial control device 2 can be effectively guaranteed, and the communication is reliable, the transmission speed is fast, and the device can be satisfied. The communication requirements between the master and the industrial control device 2 are described.

The power carrier can be implemented in various manners, for example, the processor in the industrial control device converts the baseband signal into a bandpass signal (ie, a modulated signal) with a higher frequency relative to the baseband frequency through a modem to be suitable for channel transmission. . The signal pre-processing circuit realizes amplification and filtering of the transmitted signal and the received signal. The power line coupled power realizes a physical interface between the power carrier circuit and the power line.

In the present embodiment, the main industrial control device 1 can simultaneously connect one or more of the slave industrial control devices 2. The main industrial control device 1 is configured to send a control command to each of the slave industrial control devices 2 to receive an operating state of the slave industrial control device 2 and key parameter information of the controlled device, such as voltage, current, power, and the like. Both the main industrial control device 1 and the slave industrial control device 2 include a redundant industrial fieldbus communication interface and a power carrier communication interface.

Optionally, the auxiliary communication link 4 based on the power carrier communication may be high voltage power carrier communication, medium voltage power carrier communication or low voltage power carrier communication. Optional low voltage power carrier communication with a voltage of 380V or 220V. Generally, there are different signal coupling modes of the power carrier signal, the wire-ground coupling and the line-neutral coupling. In this embodiment, the auxiliary communication link 4 can be selected or set according to actual conditions.

The backbone communication link 3 further includes two fieldbus communication links.

The two fieldbus communication links can operate simultaneously or separately. The industrial control system can automatically select or not automatically select the two fieldbus communication links

The industrial control system is initialized prior to operation of the industrial control system. In the initialization process, the main industrial control device 1 divides the two field bus communication links into a main field bus communication link A and a standby field bus communication according to the order in which the two field bus communication links establish communication. Link B.

In this embodiment, the main field bus communication link A and the standby field bus communication link B constitute a redundant network, and the main field bus communication link A and the standby field bus communication link B constitute redundant Any one of the remaining networks fails, and the normal operation can ensure that the communication of the master-slave industrial control device 2 of the industrial control system is normal.

Referring to Figure 2, in the present embodiment, the backbone communication link 3 and the auxiliary communication link 4 can operate in a redundant manner. The main fieldbus communication link A and the standby field main line communication link constitute a redundant network, and the auxiliary communication link 4 and the backbone communication link 3 constitute a redundant network, whereby the industrial control system has two A hierarchical redundant network can effectively guarantee the communication of the industrial control system in the event of a communication failure.

The industrial control system is initialized prior to operation of the industrial control system. In the initialization process, the main industrial control device 1 detects the working states of the trunk communication link 3 and the auxiliary communication link 4, and executes a corresponding initialization policy according to the detection result.

The main industrial control device 1 detects various working states of the trunk communication link 3 and the auxiliary communication link 4, for example, the main industrial control device 1 utilizes the trunk communication link 3 Or the auxiliary communication link 4 transmits a control command to the slave industrial control device 2 and receives an operating state of the slave industrial control device 2 if the master industrial control device 1 can send the slave industrial control device 2 Controlling the command and receiving the operating state of the slave industrial control device 2, then the communication link utilized by the main industrial control device 1 is in a normal operating state, otherwise abnormal.

Specifically, when the trunk communication link and the auxiliary communication link operate in a redundant manner, the main industrial control device 1 performs the following initialization policy according to the detection result:

If the two fieldbus communication links in the trunk communication link 3 are all working normally and the auxiliary communication link 4 is also working normally, initialization is completed and no alarm signal is generated;

If the two fieldbus communication links in the trunk communication link 3 are working normally and the auxiliary communication link 4 is abnormal, the initialization is completed but an alarm signal is generated;

If any one of the two fieldbus communication links in the backbone communication link 3 operates abnormally, the initialization fails.

Of course, there are a plurality of said initialization strategies, for example, if the two fieldbus communication links in the backbone communication link 3 are all working properly and the auxiliary communication link 4 is also working properly, initialization is completed and No alarm signal is generated; if any one of the two field bus communication links and the auxiliary communication link 4 in the trunk communication link 3 operate abnormally, the initialization fails.

The initialization strategy is determined according to the requirements of the communication in the actual operation of the industrial control system.

The industrial control system needs to perform real-time detection or non-real-time detection on the operational status of the backbone communication link 3 and the auxiliary communication link 4 during operation. During operation, the main industrial control device 1 detects the working states of the backbone communication link 3 and the auxiliary communication link 4, and executes a corresponding working policy according to the detection result.

There are various detection methods, for example, the main industrial control device 1 transmits a control command to the slave industrial control device 2 and receives the slave industrial control by using the trunk communication link 3 or the auxiliary communication link 4. The operating state of the device 2, thereby detecting the communication path of the backbone communication link 3 and the auxiliary communication link 4.

Specifically, when the trunk communication link and the auxiliary communication link operate in a redundant manner, the main industrial control device 1 performs the following work policies according to the detection result:

If the trunk communication link 3 and the auxiliary communication link 4 are both working normally, the industrial control system performs redundant communication through the primary fieldbus communication link A and the standby fieldbus communication link B, and Maintain the current working state and do not generate an alarm signal;

If only the auxiliary communication link 4 operates abnormally, the industrial control system performs redundant communication through the main field bus communication link A and the standby field bus communication link B, and maintains the current working state and generates the first Alarm;

If only the standby fieldbus communication link B in the trunk communication link 3 operates abnormally, the industrial control system performs redundant communication through the primary fieldbus communication link A and the auxiliary communication link 4, And maintaining the current working state and generating a second alarm signal;

If only the primary fieldbus communication link A in the trunk communication link 3 operates abnormally, the industrial control system performs redundant communication through the standby fieldbus communication link B and the auxiliary communication link 4, And maintaining the current working state and generating a third alarm signal;

If one of the primary fieldbus communication link A and the standby fieldbus communication link B operates abnormally, and the auxiliary communication link 4 operates abnormally, the industrial control system communicates through the primary fieldbus Link A communicates with another one of the standby fieldbus communication link B that is working normally, and maintains the current working state and generates a fourth alarm signal;

If the primary fieldbus communication link A and the standby fieldbus communication link B both operate abnormally, and the auxiliary communication link 4 works normally, the industrial control system performs the auxiliary communication link 4 Communicate and enter a safe state and generate a fifth alarm signal.

Of course, there are various working strategies, for example, if the trunk communication link 3 and the auxiliary communication link 4 are all working normally, the industrial control system passes the main field bus communication link A and the standby site. The bus communication link B performs redundant communication and maintains the current working state without generating an alarm signal. If the one or both of the main fieldbus communication link A and the standby field bus communication link B and the auxiliary communication link 4 of the trunk communication link 3 operate abnormally, then the industrial control The system chooses to maintain the current working state or enter a safe state and generate an alarm signal.

In this embodiment, the higher the values in the first to fifth, the more serious the matter. Of course, the lower the values in the first to the fifth, the more serious the situation, in which the working strategy is to be set correspondingly.

The working strategy can be determined according to the actual working needs of the industrial control system.

Referring to FIG. 5, in the embodiment, the backbone communication link 3 and the auxiliary communication link 4 can also operate in a switching manner.

Referring to Figure 4, the industrial control system can be initialized prior to operation of the industrial control system. In the initialization process, the main industrial control device 1 detects the working states of the trunk communication link 3 and the auxiliary communication link 4, and executes a corresponding initialization policy according to the detection result.

The main industrial control device 1 detects various working states of the trunk communication link 3 and the auxiliary communication link 4, for example, the main industrial control device 1 utilizes the trunk communication link 3 Or the auxiliary communication link 4 transmits a control command to the slave industrial control device 2 and receives an operating state of the slave industrial control device 2 if the master industrial control device 1 can send the slave industrial control device 2 Controlling the command and receiving the operating state of the slave industrial control device 2, then the operating state of the communication link utilized by the main industrial control device 1 is normal, otherwise abnormal.

When the trunk communication link and the auxiliary communication link operate in a switching manner, the main industrial control device 1 performs the following initialization policy according to the detection result:

If the two fieldbus communication links in the trunk communication link 3 are all working normally and the auxiliary communication link 4 is also working normally, initialization is completed;

If any of the two fieldbus communication links and the auxiliary communication link 4 in the trunk communication link 3 operate abnormally, the initialization fails.

During operation, the main industrial control device 1 detects the working states of the backbone communication link 3 and the auxiliary communication link 4, and executes a corresponding working policy according to the detection result.

When the trunk communication link and the auxiliary communication link operate in a switching manner, the main industrial control device 1 performs the following work policies according to the detection result:

If both the backbone communication link 3 and the auxiliary communication link 4 are operating normally, the industrial control system communicates via the primary fieldbus communication link A and maintains the current operating state without generating an alarm signal.

If the primary fieldbus communication link A is working properly, and any one of the standby fieldbus communication link B and the auxiliary communication link 4 is abnormal, the industrial control system passes through the main site. The bus communication link A communicates and maintains the current operating state and generates a sixth alarm signal.

If the primary fieldbus communication link A is abnormal and the standby fieldbus communication link B is working normally, the industrial control system switches to communicate through the standby fieldbus communication link B, and maintains the current Working state and generating a seventh alarm signal. At this time, the industrial control system switches the operation of the main field bus communication link A to the standby field bus to maintain the operation of the trunk communication link 3.

If the primary fieldbus communication link A and the standby fieldbus communication link B both operate abnormally, and the auxiliary communication link 4 works normally, the industrial control system switches to pass the auxiliary communication link. 4 work to communicate, and maintain the current working state and generate an eighth alarm signal. The industrial control system described at this time turns on the auxiliary link, and the communication of the master-slave industrial control device 2 is maintained by the auxiliary communication link 4. The industrial control device can be serviced or enter a safe state.

Of course, in this embodiment, there are many working strategies, for example, if the trunk communication link 3 and the auxiliary communication link 4 are all working normally, the industrial control system passes the main field bus. Communication link A communicates and maintains the current operating state without generating an alarm signal. If the primary fieldbus communication link A and any one or both of the standby fieldbus communication link B and the auxiliary communication link 4 operate abnormally, the industrial control system maintains the current operating state or switches Go to a working communication link and generate an alarm signal.

Optionally, in this embodiment, a relay may be used as a switching unit of the industrial control system to perform switching between the trunk communication link and the auxiliary communication link 4, and a location of the trunk communication link. The switching between the main field bus communication link A and the standby field bus communication link B may be selected as an electromagnetic relay, a solid state relay, a temperature relay, etc., and may be a relay with a forced guiding function, for example, meeting the requirements of the European standard EN50205. Relay.

In order to ensure the reliability of the relay as a switching unit, the relay detection circuit is generally used to perform real-time or non-real-time reliability detection on the relay, so that the relay can be reliably detected as a misoperation or switching of the switching unit. Misuse and switching unsuccessful damage to the industrial control system communication.

The above is only the embodiment of the present invention, and is not intended to limit the scope of the invention, and the equivalent structure or equivalent process transformations made by the description of the invention and the drawings are directly or indirectly applied to other related technologies. The fields are all included in the scope of patent protection of the present invention.

Claims (20)

A communication method for an industrial control system, the method comprising: Establishing a main communication link based on fieldbus communication and an auxiliary communication link based on power carrier communication between the main industrial control device in the industrial control system and from the industrial control device; Communication between the primary industrial control device and the secondary industrial control device is performed with the secondary communication link as a backup link for the backbone communication link. The method according to claim 1, wherein said main industrial control device in said industrial control system establishes a communication link based on fieldbus communication and a power carrier communication based communication between said industrial control device The steps of the auxiliary communication link include: Two fieldbus communication links are established within the backbone communication link and an auxiliary communication link based on power carrier communication is established between the primary industrial control device and the slave industrial control device. The method according to claim 2, wherein said main industrial control device in said industrial control system establishes a communication link based on fieldbus communication and a power carrier communication based communication between said industrial control device The step of assisting the communication link further includes: The two fieldbus communication links are divided into a main fieldbus communication link and a standby fieldbus communication link according to a sequence of establishing communication of the two fieldbus communication links during the initialization process. The method of claim 3 wherein said backbone communication link and said auxiliary communication link operate in a redundant manner or in a switched manner. The method according to claim 4, wherein said main industrial control device in said industrial control system establishes a communication link based on fieldbus communication and a power carrier based communication between said industrial control device The step of assisting the communication link further includes: During the initialization process, the working states of the trunk communication link and the auxiliary communication link are detected, and a corresponding initialization policy is executed according to the detection result. The method of claim 5 wherein said primary communication link and said backbone communication link and said auxiliary communication link operate in a redundant manner The step of detecting the working status of the auxiliary communication link and performing the corresponding initialization policy according to the detection result includes: If the two fieldbus communication links in the trunk communication link are working normally and the auxiliary communication link is also working normally, initialization is completed and no alarm signal is generated; If the two fieldbus communication links in the trunk communication link are working normally and the auxiliary communication link is abnormal, the initialization is completed but an alarm signal is generated; If any one of the two fieldbus communication links in the backbone communication link operates abnormally, the initialization fails. The method according to claim 5, wherein during said initializing, said trunk communication link and said backbone communication link and said auxiliary communication link are operated in a switching manner The steps of detecting the working status of the auxiliary communication link and performing the corresponding initialization policy according to the detection result include: If the two fieldbus communication links in the trunk communication link are all working normally and the auxiliary communication link is also working normally, initialization is completed; If any of the two fieldbus communication links and the auxiliary communication link in the backbone communication link operate abnormally, the initialization fails. The method according to claim 4, wherein said said auxiliary communication link is used as a backup link of said trunk communication link between said main industrial control device and said slave industrial control device The steps of communication include: During the working process, the working states of the trunk communication link and the auxiliary communication link are detected, and a corresponding working policy is executed according to the detection result. The method of claim 8 wherein said trunk communication link and said trunk communication link and said auxiliary communication link operate in a redundant manner, said The step of detecting the working status of the auxiliary communication link and performing the corresponding working policy according to the detection result includes: If the trunk communication link and the auxiliary communication link both work normally, the industrial control system performs redundant communication through the main fieldbus communication link and the standby fieldbus communication link, and maintains the current working state. And does not generate an alarm signal; If only the auxiliary communication link operates abnormally, the industrial control system performs redundant communication through the main field bus communication link and the standby field bus communication link, and maintains a current working state and generates a first alarm signal; If only the standby fieldbus communication link in the trunk communication link operates abnormally, the industrial control system performs redundant communication through the primary fieldbus communication link and the auxiliary communication link, and maintains current work State and generate a second alarm signal; If only the primary fieldbus communication link in the trunk communication link operates abnormally, the industrial control system performs redundant communication through the standby fieldbus communication link and the auxiliary communication link, and maintains current work. State and generate a third alarm signal; And if the one of the primary fieldbus communication link and the standby fieldbus communication link operates abnormally and the auxiliary communication link operates abnormally, the industrial control system passes the primary fieldbus communication link and The other one of the standby field bus communication links that works normally communicates, maintains the current working state, and generates a fourth alarm signal; If the primary fieldbus communication link and the standby fieldbus communication link both operate abnormally, and the auxiliary communication link works normally, the industrial control system communicates through the auxiliary communication link and enters The safety state and a fifth alarm signal is generated. The method according to claim 8, wherein when said trunk communication link and said auxiliary communication link operate in a switching manner, said said backbone communication link and said The steps of detecting the working status of the auxiliary communication link and performing the corresponding working policy according to the detection result include: If the trunk communication link and the auxiliary communication link both work normally, the industrial control system communicates through the main fieldbus communication link, and maintains a current working state without generating an alarm signal; If the primary fieldbus communication link is functioning properly and any one of the standby fieldbus communication link and the auxiliary communication link operates abnormally, the industrial control system passes the primary fieldbus communication link The road communicates and maintains the current working state and generates a sixth alarm signal; If the primary fieldbus communication link operates abnormally and the standby fieldbus communication link works normally, the industrial control system switches to communicate through the standby fieldbus communication link and maintains the current working state and Generating a seventh alarm signal; If the primary fieldbus communication link and the standby fieldbus communication link both operate abnormally, and the auxiliary communication link works normally, the industrial control system switches to work by using the auxiliary communication link to communicate And maintain the current working state and generate an eighth alarm signal. An industrial control system, comprising: a main industrial control device, a slave industrial control device, and a fieldbus-based backbone disposed between the main industrial control device and the slave industrial control device a communication link and an auxiliary communication link based on power carrier communication, wherein the auxiliary communication link acts as the backbone communication link during communication between the primary industrial control device and the secondary industrial control device Alternate link. The system of claim 11 wherein said backbone communication link further comprises two fieldbus communication links. The system according to claim 12, wherein in the initializing process, said main industrial control device divides said two fieldbus communication links into a sequence in which said two fieldbus communication links establish communication Main fieldbus communication link and standby fieldbus communication link. The system of claim 13 wherein said backbone communication link and said auxiliary communication link operate in a redundant manner or in a switched manner. The system according to claim 14, wherein in the initializing process, the main industrial control device detects an operating state of the trunk communication link and the auxiliary communication link, and performs corresponding according to the detection result. Initialization strategy. The system according to claim 15, wherein when said trunk communication link and said auxiliary communication link operate in a redundant manner, said main industrial control device performs the following initialization policy based on the detection result: If the two fieldbus communication links in the trunk communication link are working normally and the auxiliary communication link is also working normally, initialization is completed and no alarm signal is generated; If the two fieldbus communication links in the trunk communication link are working normally and the auxiliary communication link is abnormal, the initialization is completed but an alarm signal is generated; If any one of the two fieldbus communication links in the backbone communication link operates abnormally, the initialization fails. The system according to claim 15, wherein when said trunk communication link and said auxiliary communication link operate in a switching manner, said main industrial control device performs the following initialization policy based on the detection result: If the two fieldbus communication links in the trunk communication link are all working normally and the auxiliary communication link is also working normally, initialization is completed; If any of the two fieldbus communication links and the auxiliary communication link in the backbone communication link operate abnormally, the initialization fails. The system according to claim 14, wherein during operation, said main industrial control device detects an operating state of said trunk communication link and said auxiliary communication link, and performs corresponding according to the detection result. Work strategy. The system according to claim 18, wherein, when said trunk communication link and said auxiliary communication link operate in a redundant manner, said main industrial control device performs the following work policy based on the detection result: If the trunk communication link and the auxiliary communication link both work normally, the industrial control system performs redundant communication through the main fieldbus communication link and the standby fieldbus communication link, and maintains the current working state. And does not generate an alarm signal; If only the auxiliary communication link operates abnormally, the industrial control system performs redundant communication by the main field bus communication link and the standby field bus communication link, and maintains the current working state and generates the first Alarm; If only the standby fieldbus communication link in the trunk communication link operates abnormally, the industrial control system performs redundant communication through the primary fieldbus communication link and the auxiliary communication link, and maintains current work State and generate a second alarm signal; If only the primary fieldbus communication link in the trunk communication link operates abnormally, the industrial control system performs redundant communication through the standby fieldbus communication link and the auxiliary communication link, and maintains current work. State and generate a third alarm signal; And if the one of the primary fieldbus communication link and the standby fieldbus communication link operates abnormally and the auxiliary communication link operates abnormally, the industrial control system passes the primary fieldbus communication link and The other one of the standby field bus communication links that works normally communicates, maintains the current working state, and generates a fourth alarm signal; If the primary fieldbus communication link and the standby fieldbus communication link both operate abnormally, and the auxiliary communication link works normally, the industrial control system communicates through the auxiliary communication link and enters The safety state and a fifth alarm signal is generated. The system according to claim 18, wherein when said trunk communication link and said auxiliary communication link operate in a switching manner, said main industrial control device performs the following work policy based on the detection result: If the trunk communication link and the auxiliary communication link both work normally, the industrial control system communicates through the main fieldbus communication link, and maintains a current working state without generating an alarm signal; If the primary fieldbus communication link is functioning properly and any one of the standby fieldbus communication link and the auxiliary communication link operates abnormally, the industrial control system passes the primary fieldbus communication link The road communicates and maintains the current working state and generates a sixth alarm signal; If the primary fieldbus communication link operates abnormally and the standby fieldbus communication link works normally, the industrial control system switches to communicate through the standby fieldbus communication link and maintains the current working state and Generating a seventh alarm signal; If the primary fieldbus communication link and the standby fieldbus communication link both operate abnormally, and the auxiliary communication link works normally, the industrial control system switches to work by using the auxiliary communication link to communicate And maintain the current working state and generate an eighth alarm signal.