How to Safeguard Plant Automation with a Change Management System

这些最佳实践可以帮助您保护工厂的自动化系统免受机器故障,人为错误,网络攻击等导致的停机和产品错误。

This content was submitted directly to this website by the supplier.

制造商取决于自动化资产,例如可编程逻辑控制器(PLC),PC控制系统和计算机数值控制器(CNC)。这些设备对当今制造厂的吞吐量至关重要,但这些设备与这些设备相关的风险来源未被认可。通常,他们的控制程序不受损失,人为错误,未经授权的变更,安全漏洞,设备故障和电力冲浪等等的保护。

如果这些事件损害了控制设备的数据,则成本和停机时间可能会相当大。由于这些原因,重要的是要确保您拥有适当的保障措施,以保护和管理这些资产的任何更改,并具有可轻松访问设备配置的当前备份副本。

One effective way to meet these goals and minimize the risks to your automated production is to implement software that manages all the plant’s Industrial Internet of Things (IIoT) devices and their data, allowing you to safeguard your plant’s IioT assets, instantly recover control program backups and more.

变更管理的情况

Change management, as it applies to plant automation, is the set of processes that ensures any adjustments to control systems are implemented in an organized, controlled fashion. Change management software (CMS) functions as a centralized system that manages any changes to the control system or to devices’ programming logic. Small plants will typically have a few hundred programs that must be managed, while large plants can have several thousand.

制造工厂中的设备控制程序需要保护侵害人为错误,安全漏洞和设备故障。 制造工厂中的设备控制程序需要保护侵害人为错误,安全漏洞和设备故障。 Because automated devices have become more complex in recent years, owing to the incorporation of large amounts of plant data, there is an ongoing need to adjust variables and logic more frequently. Although minor on an individual basis, these adjustments — when taken together — are directly linked to equipment throughput and uptime. Should you lose your current device program, for example, you may need to use an older version, causing machine performance, product quality and uptime to suffer. And while this scenario is costly enough, consider the operational ramifications if no older versions of the lost program are available. While completely rewriting programs can and does happen, the effects can significantly impact your plant’s safety and productivity levels for months.

With proper management of all automation devices and data, you can protect your plant from the following:

  • Human error。A CMS makes prior program versions readily available, which comes in handy if someone makes undesirable changes to a program or corrupts it.
  • 设备故障。If a machine fails and the only good copy of the program was in that hardware, then you have a problem. With a CMS, maintenance personnel simply replace the hardware and download the latest version of the program to the processor, resulting in only a few minutes of downtime.
  • Sabotage。不幸的是,任何人都可以直接连接到设备并随时修改程序。CMS可以存储处理器密码,使其通过任何其他方式无法访问。它还将定期从处理器上传逻辑,并将其与文件上的副本进行比较,识别和警告个人的任何更改。
  • Power surges or interruptions。如果这些情况导致程序丢失,则用户可以在重置硬件后简单地从CMS下载程序。
  • Fire。Whether a single device or an entire facility is lost to, having all the programs stored in a central, organized CMS repository accelerates the return to production.
  • Cybersecurity attacks。CMS不仅可以识别未知或未经授权的程序更改并迅速带回正确的系统配置,而且还有软件解决方案还可以识别漏洞并提供有关缓解这些风险的建议。

The ability to quickly recover from these events depends on backing up the control program — something the CMS provides with current, complete and easily accessible backup copies. Although manual backups may appear to be an adequate option, plant personnel often have too many tasks that compete for their time. The CMS also offers additional value in the form of reporting, which increases plant visibility and the potential for process improvement.

Typical Device Programs

PLC是CMS支持的最常见的设备类型。那里有许多PLC供应商,每个供应商都有自己的专有软件包用于PLC计划编辑。您的CMS应用程序应该能够与PLC软件的所有主要品牌进行交互,以捕获和检测更改,并提供一种在编辑器工作站上捕获项目文件的替代方法。PLC的较新变体(称为可编程自动化控制器(PAC))可以同时同时管理多个应用程序。

One example of a CMS software platform is octoplant, which ensures greater data consistency and protection in production plants. One example of a CMS software platform is octoplant, which ensures greater data consistency and protection in production plants. A second common device type is the CNC for machine tools. In this case, the CMS needs to be able to access the machine control logic, G-Code that describes tool paths and process parameters as part of the backup process. You can find this information in standard locations, as defined by the manufacturer, or in custom locations developed by the OEM. File locations can also differ based on the types of CNCs within a model. For example, a single- or dual-axis CNC machine within the same model can have different file locations. Before installing the CMS, it’s important to define and document these variables.

In addition to PLCs and CNCs, other common device types for CMS applications include:

  • Robots。When it comes to change management, robots that have file transfer protocol (FTP) communications are often straightforward devices. The robot manufacturer or plant controls group should provide the file list for each robot type.
  • Human machine interfaces (HMI)。CMS applications typically provide integrated support for common HMI packages. If the CMS doesn’t have a unique driver for a particular HMI, then you can use the generic module that backs up the development environment for the PC workstation.
  • PC controls。These devices, which are common in machining operations, run the control program that mimics a PLC’s operation. Some differ slightly from the PLC programming software they are emulating, while others are custom applications. In all cases, pay attention to device communications and the PC control file structure, which is required for successful CMS installation. Typically, you can use either a unique driver or a generic module that backs up the development environment.

CMS的关键功能

When it comes to selecting the right CMS application, it’s important to weigh the features of the CMS against your plant’s unique requirements. Key characteristics and capabilities include the following:

Backup archive。Many facilities set retention parameters to maintain a certain number of prior program versions. These parameters often include the number of copies to maintain, as well as the minimum age of deletable copies. The age requirement can be useful if you’ve made multiple unsuccessful attempts to correct a program issue; sometimes, reverting to an older copy of the program is a better starting point compared to recently edited versions.

更改检测。通过CMS进行任何和所有程序更改,可确保您拥有完整的更改历史记录。此外,CMS可以询问设备,并将在特定设备中运行的程序与CMS中的参考副本进行比较。如果CMS检测到任何更改,它将识别它们并通知人员。

更改文档。程序编辑器软件包的识别能力可能会有所不同。另一方面,CMS提供了一个一致,直观的平台,以比较程序的任何两个版本之间的更改(无论是在处理器中的主副本,先验版本还是当前版本之间)。

Historical tracking。When assessing areas for process improvement, it’s helpful to be able to identify device changes in light of the device type, production line and individuals making the changes. Understanding these patterns can help you evaluate whether or not excessive changes are being made and what the root cause might be.

安全用户和工作站访问。The CMS authenticates each user. Some facilities even place line-of-sight restrictions on which workstations can be used to edit device programs.

Controlled editor operations。You can assign CMS users to groups with permission profiles that map to the individual’s authority within the plant. We recommend keeping the role structure as simple as possible.

灾难恢复。If a device fails, you’ll need to obtain a replacement device and connect it to the network. CMS users can download the latest copy of the program to the device to easily resume operation.

入门:Implementing a CMS

Selecting a commercial off-the-shelf (COTS) product that supports many hardware and software control types can reduce the cost of implementing and running a CMS, while offering flexibility in your controls strategy. CMS implementation often includes the following tasks:

  • Pre-installation tasks — e.g., gathering stakeholders for kickoff meetings, documenting project milestones, gathering device information, etc.
  • 在服务器和关联的支持工作站上安装软件
  • Identifying device communication routes
  • Configuring communication routes for managed devices
  • 配置将支持的设备
  • 记录与配置的拓扑结构

章鱼将整个生产环境的管理集中在一个系统中,从而释放了许多好处。 章鱼将整个生产环境的管理集中在一个系统中,从而释放了许多好处。 An example of a CMS software platform isoctoplant,确保生产工厂的数据一致性和保护。该模块化包提供了全面的资产和设备管理以及程序备份,所有这些都可以根据您的工厂的独特要求易于自定义。

此外,章鱼将整个生产环境的管理集中在一个系统中,从而释放以下好处:

  • Ensure all devices are configured correctly
  • 做出更明智的决定
  • Improve your operational uptime
  • Quickly bring back the right system configurations
  • Know and manage what is going on with your IoT devices
  • Take proactive action to prevent security breaches
  • Fulfill regulatory requirements and streamline production audits

To learn more, please visit:auvesy-mdt.com

Author:Name: Gary Gillespie, President at AUVESY-MDT, Americas

Auvesy-MDT的总裁Gary Gillespie,美洲 Auvesy-MDT的总裁Gary Gillespie,美洲 简历:加里·吉莱斯皮软件(现在AUVESY-MDT加入联合化疗) in 2004 and led the business for 17 years. Gary began his career as an engineer at the NASA Johnson Space Center in Houston, Texas. In the mid-1990s he moved into the software market, working in the Maintenance Management/EAM space, among others. Gary has extensive experience providing software solutions for mining, energy, food and beverage, petrochemical and automotive companies. He holds a Bachelors in Mining Engineering and a Masters in Mechanical Engineering from the University of Alabama. AUVESY-MDT secures the world’s automation with solutions that reduce downtime, errors and security threats.

更多的植物维护