CN102193512A - Field device for determining or monitoring a physical or chemical process variable - Google Patents

Field device for determining or monitoring a physical or chemical process variable Download PDF

Info

Publication number
CN102193512A
CN102193512A CN2011100498757A CN201110049875A CN102193512A CN 102193512 A CN102193512 A CN 102193512A CN 2011100498757 A CN2011100498757 A CN 2011100498757A CN 201110049875 A CN201110049875 A CN 201110049875A CN 102193512 A CN102193512 A CN 102193512A
Authority
CN
China
Prior art keywords
subregion
measuring route
field apparatus
fpga
functional module
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN2011100498757A
Other languages
Chinese (zh)
Other versions
CN102193512B (en
Inventor
罗穆亚尔德·吉拉尔迪
迪特马尔·弗吕奥夫
米夏埃尔·许布纳
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Endress and Hauser SE and Co KG
Original Assignee
Endress and Hauser SE and Co KG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from DE102010002346A external-priority patent/DE102010002346A1/en
Application filed by Endress and Hauser SE and Co KG filed Critical Endress and Hauser SE and Co KG
Publication of CN102193512A publication Critical patent/CN102193512A/en
Application granted granted Critical
Publication of CN102193512B publication Critical patent/CN102193512B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00Programme-control systems
    • G05B19/02Programme-control systems electric
    • G05B19/04Programme control other than numerical control, i.e. in sequence controllers or logic controllers
    • G05B19/042Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
    • G05B19/0428Safety, monitoring
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B9/00Safety arrangements
    • G05B9/02Safety arrangements electric
    • G05B9/03Safety arrangements electric with multiple-channel loop, i.e. redundant control systems
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F30/00Computer-aided design [CAD]
    • G06F30/30Circuit design
    • G06F30/34Circuit design for reconfigurable circuits, e.g. field programmable gate arrays [FPGA] or programmable logic devices [PLD]
    • HELECTRICITY
    • H03ELECTRONIC CIRCUITRY
    • H03KPULSE TECHNIQUE
    • H03K19/00Logic circuits, i.e. having at least two inputs acting on one output; Inverting circuits
    • H03K19/02Logic circuits, i.e. having at least two inputs acting on one output; Inverting circuits using specified components
    • H03K19/173Logic circuits, i.e. having at least two inputs acting on one output; Inverting circuits using specified components using elementary logic circuits as components
    • H03K19/177Logic circuits, i.e. having at least two inputs acting on one output; Inverting circuits using specified components using elementary logic circuits as components arranged in matrix form
    • H03K19/17704Logic circuits, i.e. having at least two inputs acting on one output; Inverting circuits using specified components using elementary logic circuits as components arranged in matrix form the logic functions being realised by the interconnection of rows and columns
    • H03K19/17708Logic circuits, i.e. having at least two inputs acting on one output; Inverting circuits using specified components using elementary logic circuits as components arranged in matrix form the logic functions being realised by the interconnection of rows and columns using an AND matrix followed by an OR matrix, i.e. programmable logic arrays
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00Program-control systems
    • G05B2219/20Pc systems
    • G05B2219/24Pc safety
    • G05B2219/24196Plausibility check in channels for correct sequence or result
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00Program-control systems
    • G05B2219/20Pc systems
    • G05B2219/25Pc structure of the system
    • G05B2219/25428Field device

Abstract

Field device for determining or monitoring a physical or chemical process variable, wherein the field device is composed of a sensor, which works according to a defined measuring principle, and a control/evaluation unit, which, as a function of a safety standard required for the particular safety-critical application, conditions and evaluates, along at least two equivalent measuring paths, measurement data delivered by the sensor. The control/evaluation unit is implemented on an FPGA, on which are provided at least a first section and a second section, wherein, in each section, a digital measuring path, which is composed of a plurality of software-based and/or hardware-based function modules, is dynamically reconfigurable. The sections are isolated from one another by permanently configured spacer regions, wherein the spacer regions are embodied in such a way, that a temperature and/or a voltage change in one of the sections has no influence on the other section or other sections, and, in the case of malfunction, no connection occurs between the sections.

Description

Be used for determining or monitoring the field apparatus of physics or chemical process variable
Technical field
The present invention relates to a kind of field apparatus that is used for determining or monitoring physics or chemical process variable, this field apparatus is made up of sensor and control/assessment unit, this sensor comes work according to specific measuring principle, and this control/assessment unit depends in the corresponding vital application of security desired safety standard and handles and assess the measurement data that is provided by sensor along the measuring route of at least two equivalences.Preferably, field apparatus uses in automatic technology, especially uses in process automation and factory automation.By the known a solution of WO 2004/013585A1, this solution research be a kind of make of field apparatus, this field apparatus can use in the vital application of the security in the process automation field.Yet the present invention is not limited to the field of process automation and factory automation, but can use equally in the vital application of security in automobile industry and other industry.
Background technology
In automatic technology, especially in process automation, used field apparatus, these field apparatuss are used for determining and monitor process variables.The example of this type of field apparatus is level gauging equipment, flow measurement, analysis to measure equipment, pressure and temperature measuring equipment, humidity and conductivity measurement equipment, density and viscosity measuring apparatus.The corresponding process variable of the sensor acquisition of these field apparatuss, for example material level, flow, pH value, material concentration, pressure, temperature, humidity, conductivity, density or viscosity.
Yet, also actuator (for example valve or pump) is included in the notion of " field apparatus ", for example can change the flow of ducted liquid or the material level in the container by these actuators.A large amount of this field apparatuss is provided by Endress+Hauser group and sells.
Generally, field apparatus passes through communication network in the facility of the automatic technology in modern times and in automobile industry, for example HART multidrop network, point-to-point connection, Profibus, Foundation Fieldbus, CAN-Bus, be connected with last bit location, bit location is called as guidance system or upper control module on this.Bit location be should go up and control, diagnosis, visual, monitoring and commissioning test and manipulation field apparatus were used for.Optional feature (these optional features directly are connected with fieldbus and are particularly useful for and upper unit communication) essential for the operation of field bus system equally often is called as field apparatus.These optional features for example are meant Remote I/O (remote I/O), Gateway (gateway), Linking Device (chained device) or controller, Wireless Adapter (wireless adapter).Also these optional features are included in the notion of " field apparatus ".
Software share in the field apparatus constantly increases.Use is by the advantage of the smart devices (Smart Field Devices) of microprocessor controls, realizes a large amount of different functions in the equipment at the scene by the software program of special use; But also can carry out modification of program relatively simply.On the other hand, as the result of executive routine in order, with the very high dirigibility opposition that is subjected to programme controlled field apparatus be relative little processing speed and therefore corresponding little measuring rate.
For improve processing speed, just always have only when using ASIC (Application Specific Integrated Circuit, special IC) in the equipment at the scene fully rationally the time economically.By the configuration of special use, these assemblies can be than obvious deal with data quickly of software program and signal.Therefore, especially for the application of computation-intensive, ASIC is specially suitable.
In the application of ASIC, disadvantageously, the function of these assemblies is by given in advance regularly.In these assemblies, can not easily change function afterwards.In addition, the use of ASIC only just is worth under the situation of big relatively number of packages, and this is because development cost are very high with relevant therewith cost.
In order to evade the drawback of function given in advance regularly, by the known a kind of configurable field apparatus of WO 03/098154A1, wherein be provided with the reconfigurable logic module of FPGA (Field Programmable Gate Array, field programmable gate array) form.In this known solution, during system start-up, utilize at least one microcontroller (being also referred to as embedded controller) to come logic module is configured.After configuration is finished, with the software loading of needs in microcontroller., reconfigurable logic module required at this must have enough resources, and logical resource, interconnection resource and memory resource more precisely are so that satisfy desired function.The big energy of logic module needs that has many resources, this may make its use robotization be achieved from function again only restrictedly.Have few resources and have because of ground under the situation of logic module of less energy consumption in use, disadvantageously, the tangible restriction in the function of corresponding field apparatus.
According to applicable cases, field apparatus must satisfy various safety requirements.In order to satisfy corresponding safety requirements (SIL standard " Security Integrity Level (safety integrity level) " for example, it plays great role in process automation), must design the function of field apparatus with redundant and/or diversified mode.
" redundancy " mean, the hardware component of security-critical and software part realized the security that improves by design all in dual or multiple mode." variation " mean, is in that hardware component (for example microprocessor, A/D converter) in the different measuring route comes from different manufacturers and/or these hardware componenies are different types.In the situation of software part, " variation " requires: the software that is stored in the microprocessor comes from different sources, that is to say to come from different manufacturers or programmer.Should guarantee by all these measures, get rid of the generation and the appearance of the systematic error of appearance simultaneously in measured value is handled of the vital fault of security of field apparatus with very high probability.Be well known that equally, additionally also come each basic hardware parts and software part of design evaluation circuit with redundant and/or diversified mode.By with redundant and diversified mode designs each hardware component and software part can further improve the grade of security.
An example of security important use is the level monitoring in the container, in this container, deposit flammable, explosive or non-flammable in addition but aspect this side environmentally hazardous liquid.Here must guarantee,, the liquid of container is just supplied be interrupted immediately in case reach the maximum liquid level that allows.This is a prerequisite with following situation again, that is, measuring equipment is detection of liquid level and working error-free very reliably.
By the known a kind of field apparatus of WO 2009/062954A1, this field apparatus has sensor and control/assessment unit, this sensor comes work according to specific measuring principle, and this control/assessment unit depends in the corresponding vital application of security desired safety standard and handles and assess the measurement data that is provided by sensor along the measuring route of at least two equivalences.Control/assessment unit is configured to have the reconfigurable logic module of a plurality of functional modules that can partly dynamically reconfigure at least in part.That control/assessment unit depends on is correspondingly specific, the vital application of the security functional module in the allocating and measuring path as follows,, designs field apparatus corresponding to desired safety standard that is.
Problem in known make is, functional fault, and short circuit or the temperature variation in subregion for example automatically also influences other subregion.It causes the crosstalking of other subregion, thereby makes field apparatus that vicious measurement result may be provided and work no longer reliably.This especially in the vital application of security is can not received excessive risk.
Summary of the invention
The objective of the invention is, propose a kind of field apparatus very flexibly that is used for the vital field of security.
This purpose realizes in the following way, promptly, control/assessment unit is realized on FPGA, this FPGA is provided with at least one first subregion and at least one second subregion, wherein, in each subregion, can the measuring route of numeral partly dynamically be reconfigured, this digital measuring route is made up of based on functional module software and/or hardware based a plurality of, wherein, each subregion is separated from each other by the spacer region or the forbidden zone of fixed configurations, wherein, spacer region is constructed as follows, promptly, temperature variation in one of subregion and/or change in voltage are to another subregion or the not influence of other subregion, and under failure condition, do not connect between the subregion, and wherein, control/assessment unit depends on correspondingly specific, the vital applying portion of security ground dynamically reconfigures the functional module in the measuring route, thereby makes field apparatus satisfy desired safety standard.At this, " can partly dynamically reconfigure " means: the functional module of FPGA is reconfigured at run duration (promptly dynamically) in corresponding measuring route." fault " for example causes that by the gamma ray or the cosmic radiation (being high-energy ray) of incident it makes the function of one or more logical blocks or other resource change or lost efficacy.
According to according to a kind of favourable make of field apparatus of the present invention, the size that is used for the spacer region of potential isolation (Potentialtrennung) is set the structure that depends on FPGA and is selected.Thus, can use existing FPGA on the market.The structure of FPGA is finally set by the size of the wiring between the logical block (CLB-Configurable Logic Block, configurable logic block) especially and is set to determine by the size of the logical block (CLB) of FPGA.For fear of the influence of a kind of influence between the adjacent subregion and any kind, the size settings/width that will follow at least of spacer region preferably is appointed as many times of size setting of the logical block of the FPGA that correspondingly uses.At this, the cloth line model of CLB also plays effect.The minimum spacing between the subregion or the width of spacer region are selected as follows, that is, make the short circuit between the subregion or crosstalk and got rid of.In addition, spacer region is used for the pyrolysis coupling of subregion.
A kind of favourable improvement project according to field apparatus of the present invention proposes: make the logical block and corresponding wiring (the being resource) ground connection of arranging in each spacer region in spacer region.
In addition, the situation that has the global lines/wiring (global line) of extending or a long line/wiring (long line) at FPGA at least two subregions proposes: these global lines or long line are separated or ground connection.
In addition, a kind of favourable improvement project setting according to field apparatus of the present invention: as follows FPGA is divided into each subregion, promptly, also exist in the resource that exists on FPGA each subregion in these subregions, described resource is essential for implementing for the function by the functional module in corresponding subregion.As visible among Fig. 3, this requirement will correspondingly be divided into subregion by operational area on FPGA, and this is because when FPGA is standard FPGA, and this goes up described resource by given in advance regularly in FPGA.These resources refer in particular to logical resource, interconnection resource and memory resource and so-called DCM (Digital Clock Manager, digital dock manager), and this DCM provides beat for the logical block of FPGA.
A kind of preferred make according to field apparatus of the present invention proposes: the measuring route that has the functional module that dynamically reconfigures with redundant, diversified or redundant and diversified mode design.
In addition, be furnished with voting machine (Voter) or microcontroller for control/assessment unit, this voting machine or microcontroller separate by spacer region and adjacent measuring route equally.Voting machine or microcontroller will by measuring route or in measuring route, provide and corresponding each other measurement data compare mutually, and under situation devious, generate warning message or error message or use suitable burring machine (Reparaturmechanism).
If voting machine or microcontroller with the mode of serial or parallel to be used for Odd number, functional module redundant and/or diversified measuring route partly dynamically reconfigures, voting machine or microcontroller can be by relatively identifying in measuring route or by the measurement data that measuring route provides so: which measuring route provides vicious measurement data.Can generate corresponding warning message again.In addition, what especially can realize in this make certainly is to have at ground in relevant measuring route and carry out suitable restorative procedure.These burring machines and repairing mechanism 2009.08.27 application, still at length be described among the undocumented DE 10 2,009 028938.0.But corresponding mechanism also can find in disclosed DE 10 2,007 054 672A1.Corresponding open disclosure of can be regarded as present patent application clearly.
In conjunction with the present invention, be considered to particularly advantageous and be, based on hardware ground at least one measuring route in the measuring route is configured to the FPAA in the subregion of FPGA in the mode that is independent of employed FPGA.
In addition, the following selected subregion of FPGA is provided with static zones, described selected subregion distinguishes by spacer region and adjacent branch, in this static zones, at least one functional module is carried out fixed configurations, in this at least one functional module, in order to move control program to there being the pending dynamically functional module of configuration to be configured in each subregion.In particular, in this selected subregion, can find voting machine or microcontroller.
A kind of favourable make according to field apparatus of the present invention is provided with communication line, and these communication lines are being arranged in outside the FPGA between each subregion.These communication lines are responsible for carrying out message exchange between the measuring route and/or between each measuring route and voting machine or microcontroller.Can enter into subregion by these communication lines in order to ensure only limited energy supply or power supply, each communication line that is preferably in the communication line is furnished with at least one restraint device.It is highly important that the energy by communication line between the restriction measuring route is supplied with and power supply.Only in this way just can guarantee, can avoid having the mistake (Commen Cause Failure) of common cause.About spacer region or forbidden zone, above-mentioned situation also is suitable for.
Description of drawings
The invention will be further described by following accompanying drawing.Wherein:
Fig. 1 illustrates the synoptic diagram according to field apparatus of the present invention,
Fig. 2 illustrates the make according to solution of the present invention that has three measuring route,
Fig. 3 illustrates the preferable configuration mode according to solution of the present invention, and
Fig. 4 illustrates the synoptic diagram of the logical resource of FPGA.
Embodiment
Fig. 1 illustrates the synoptic diagram according to the control/assessment unit 10 of field apparatus of the present invention, this control/assessment unit has two subregions 3.1,3.2, in these two subregions 3.1,3.2, can partly dynamically reconfigure each digital measuring route MP1, a MP2.This field apparatus does not illustrate in the accompanying drawings individually itself.Dissimilar field apparatuss is provided by Endress+Hauser group and sells.
The measuring route MP1 of these two equivalences, each measuring route among the MP2 all are made up of based on functional module software and/or hardware based one or more, and these functional modules do not illustrate in Fig. 1 equally individually.Control/assessment unit 10 is realized on FPGA 1.Preferably, use standard FPGA 1 as basis according to solution of the present invention.According to desired safety standard, design this two measuring route MP1, MP2 with redundant and/or diversified mode.In measuring route MP1, MP2, as required required functional module is partly dynamically reconfigured.This advantage that partly dynamically reconfigures is the relatively little size of FPGA, on this FPGA the functional module among measuring route MP1, the MP2 is configured.
In order to prevent that the functional fault in the subregion 3.1 from having influence on adjacent subregion 3.2, is spaced apart from each other two measuring route MP1, MP2.The spacing of two measuring route MP1, MP2 or two subregions 3.1,3.2 is represented with D1 in Fig. 1.Space D 1 between two adjacent subregions 3.1,3.2 and the space D 2 between this two subregions 3.1,3.2 and the voting machine 2 depend on usually and the corresponding structure of FPGA 1 realize control/assessment unit 10 on this FPGA 1.In addition, space D 1, the D2 between the adjacent subregion 3.1,3.2,2 is many times of size of logical block (CLB), and FPGA 1 is made up by these logical blocks and forms.
Especially can on this basis, limit the space D of following the best, promptly, two adjacent subregions 3.1,3.2,2 must have this optimal spacing to each other, do not influence another subregion 3.2 or 2 or another measuring route MP2 thereby functional fault occurs at subregion 3.1 or in measuring route MP1.Temperature variation whether to occur in order identifying, to be considered to advantageously, in each measuring route MP1, MP2, realize temperature survey.
For the purpose of potential isolation, between subregion 3.1,3.2,2 is spacer region 4.1,4.2.Spacer region 4.1,4.2 is configured and size is constructed or set to this spacer region 4.1,4.2 as follows regularly, promptly, temperature variation in one of subregion 3.1,3.2 and/or change in voltage are to another subregion or the not influence of other subregion, and under failure condition, be not electrically connected or hot tie-in between the subregion 3.1,3.2,2.Crosstalking between the subregion 3.1,3.2,2 stoped effectively by spacer region 4.1,4.2.
Such as already mentioned, the size that is used for the spacer region 4.1,4.2 of potential isolation is set the corresponding structure that preferably depends on FPGA 1.Determine by the size setting of connecting up especially on the structure of FPGA 1 plane below, determine but also pass through the correspondingly size setting of the logical block CLB (configurable logic block) of the FPGA 1 of application.Potential isolation realizes in the following way, that is, make the logical block CLB, 7 that arranges in each spacer region in spacer region 4.1,4.2,9 and logical block CLB, 7,9 between corresponding wiring 8 ground connection.Preferably, standard FPGA 1 with come into operation under the present invention combines.
Can the functional module in the subregion 3.1,3.2 of FPGA 1 partly dynamically be reconfigured, and the voting machine in the static zones of FPGA 12 is carried out fixed configurations.
Realizing that by communication line 12 these communication lines are distributed in outside the FPGA 1 between measuring route MP1, the MP2 and communicating by letter between measuring route MP1, MP2 and voting machine 2 or the microcontroller.In order to ensure only realize limited energy supply or power supply by these communication lines 12, preferably all settle at least one restraint device 13 in each communication line in communication line 12.
Make shown in Fig. 2 is different from the make shown in Fig. 1 in the following way, promptly, except subregion 3.1,3.2, (in these subregions, can partly dynamically reconfigure), be provided with other measuring route MP3 measuring route MP1, MP2.On FPAA6, measuring route MP3 be configured and therefore realize in the mode that is independent of standard FPGA 1 based on simulated mode (analogbasiert).At this, " with based on simulated mode " means, in FPAA, for example to measuring route dynamically, promptly at run duration, that is to say that equipment is implemented to be configured between its functional period according to the rules at the scene.By the 3rd measuring route MP3, can realize the redundancy and/or the diversity that increase.In particular, can measure under the situation of measuring route MP1, the MP2 of triple designs, MP3 and under the situation in the measuring route of other Odd number: which measuring route among measuring route MP1, MP2, the MP3 may be worked improperly.
Fig. 3 illustrates the preferred make according to control/assessment unit 1 of the present invention.In this make, as follows FPGA 1 is divided into each subregion 3.1,3.2,2, promptly, resource in existence on the FPGA 1: all exist in CBL, 7,8,9 each subregion in these subregions 3.1,3.2,2, these resources are essential for implementing for the function by the functional module in the respective partition 3.1,3.2,2.Described resource is meant logical block CBL, memory assembly 7 (this memory assembly for example is configured to RAM) and so-called digital dock manager DCM 9, and at least one in these resources must be arranged in each subregion 3.1,3.2,2.In addition, described resource comprises wiring 8, and shown in Figure 3 in these wirings is so-called global lines.Global lines causes CLB with clock signal from DCM.Except global lines (these global lines can extended on a plurality of subregions), also has long line.The global lines transmit clock signal, and long line is used to transmit other signal.As seen wiring on the plane of logical block detailed be shown among Fig. 4.Other details can find in article " Sicherheitsbewusstes Place and Route f ü r In-Chip Redundanz in sicherheitskritischen Anwendung (in the vital use of security at sheet the position and the path of redundant safety-sensitive) ", and present patent application requires its right of priority.The corresponding disclosure of this article can be can be regarded as disclosing of present patent application.For example FPGA Spartan 3E or 3A are called FPGA in this article, described FPGA can be in the use down that combines with field apparatus according to the present invention.
Such as already mentioned previously, make logical block CLB and wiring ground connection in the spacer region 4.1,4.2.The same applies to the digital dock manager 9 in the spacer region 4.1,4.2.Certainly, as visible among Fig. 3, spacer region 4.1,4.2 is constructed as follows, promptly, measuring route MP1, MP2 guarantee that at least one digital dock manager 9 is effectively in each subregion 3.1,3.2, because otherwise can not obtain clock signal.
It is to be noted, the disclosure of file " Sicherheitsbewusstes Place and Route f ü r In-Chip Redundanz in sicherheitskritischen Applikationen (in the vital application of security at sheet the position and the path of redundant safety-sensitive) " can be listed clearly in the disclosure of present patent application, present patent application requires its right of priority.

Claims (12)

1. be used for determining or monitoring the field apparatus of physics or chemical process variable, this field apparatus is made up of sensor and control/assessment unit (10), described sensor is according to specific measuring principle work, described control/assessment unit (10) depends on desired safety standard in the corresponding vital application of security and handles and assess the measurement data that is provided by described sensor along the measuring route (MP1, MP2) of at least two equivalences
Wherein, described control/assessment unit is gone up at FPGA (1) and is realized, described FPGA (1) is provided with at least one first subregion (3.1) and at least one second subregion (3.2), wherein, in each subregion (3.1,3.2), can dynamically reconfigure the measuring route (MP1, MP2) of a numeral, the measuring route of described numeral (MP1, MP2) is made up of based on functional module software and/or hardware based a plurality of
Wherein, each described subregion is separated from each other by the spacer region (4.1,4.2) of fixed configurations, wherein, constructs described spacer region (4.1,4.2), makes at a subregion (MP1; MP2) temperature variation in and/or change in voltage are to another subregion (MP2; MP1) or the not influence of other subregion, and under failure condition, do not connect between the described subregion (MP1, MP2), and
Wherein, described control/assessment unit (10) depends on the vital described application of correspondingly specific security and partly dynamically reconfigures described functional module in the described measuring route (MP1, MP2), thereby makes described field apparatus satisfy desired safety standard.
2. field apparatus according to claim 1, wherein, the size that is used for the described spacer region (4.1,4.2) of potential isolation is set the structure that depends on described FPGA (1).
3. field apparatus according to claim 1 and 2, wherein, the logical block of in each described spacer region (4.1,4.2), arranging (CBL, 7,9) and corresponding wiring (8) ground connection.
4. according to each described field apparatus in the claim 1 to 3, wherein, have in the last global lines (8) of extending of at least two described subregions (MP1, MP2,2) and the situation of long line for described FPGA (1), described global lines and described long line are spaced and ground connection.
5. according to each described field apparatus in the claim 1 to 3, wherein, described FPGA (1) is divided into each subregion (3.1,3.2,2), make that going up the resource (CBL, 7,8,9) that exists at described FPGA (1) all exists in each described subregion (3.1,3.2,2), described resource is essential for implementing for the function by the functional module in the corresponding subregion (3.1,3.2,2).
6. according to each or multinomial described field apparatus in the aforementioned claim, wherein, have the measuring route (MP1, MP2) of the functional module that can dynamically be reconfigured with redundant, variation or redundant and diversified mode design.
7. according to each or multinomial described field apparatus in the aforementioned claim, wherein, for described control/assessment unit (10) is furnished with voting machine (2) or microcontroller, described voting machine (2) or described microcontroller are equally by spacer region (4.2) and adjacent measuring route (MP1, MP2) separately, described voting machine (2) or described microcontroller will be from described measuring route (MP1, MP2) or at described measuring route (MP1, measurement data that provide MP2) and that correspond to each other compares mutually, and generates warning message or error message under situation devious.
8. according to claim 1 or 7 described field apparatuss, wherein, described voting machine (2) or described microcontroller with the mode of serial or parallel to be used for Odd number, redundant and/or diversified measuring route (MP1, MP2, MP3 ...) functional module partly dynamically reconfigure
Wherein, described voting machine (2) or described microcontroller will from described measuring route (MP1, MP2, MP3 ...) or described measuring route (MP1, MP2, MP3 ...) in the described measurement data that provides compare mutually,
And wherein, if at specific measuring route (MP1; MP2; MP3) measurement data that provides on and remaining measuring route (MP1; MP2; MP3) measurement data difference, so described voting machine (2) or described microcontroller generate warning message, and this warning message shows described specific measuring route (MP1; MP2; MP3) provide vicious data.
9. according to each or multinomial described field apparatus in the aforementioned claim, wherein, in FPAA (6), at least one measuring route in the described measuring route is configured based on simulated mode.
10. according to each or multinomial described field apparatus in the aforementioned claim, wherein, the selected subregion (11) of described FPGA (1) is provided with static zones, described selected subregion (11) separates by spacer region (4.1,4.2) and adjacent subregion (3.1,3.2), in described static zones, at least one functional module is carried out fixed configurations, and operation is useful on the control program that the functional module that remains dynamically to be disposed in each subregion (3.1,3.2) is configured in described at least one functional module.
11. according to each or multinomial described field apparatus in the aforementioned claim, wherein, be provided with communication line (12), described communication line (12) is being arranged in outside the described FPGA (1) between each subregion (3.1,3.2,2).
12. field apparatus according to claim 11 wherein, provides at least one restraint device (13) in each bar communication line (12), be used to limit voltage and/or electric current between the subregion (3.1,3.2,2).
CN201110049875.7A 2010-02-25 2011-02-25 Field device for determining or monitoring a physical or chemical process variable Expired - Fee Related CN102193512B (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102010002346A DE102010002346A1 (en) 2009-10-12 2010-02-25 Field device for determining or monitoring a physical or chemical process variable
DE102010002346.9 2010-02-25

Publications (2)

Publication Number Publication Date
CN102193512A true CN102193512A (en) 2011-09-21
CN102193512B CN102193512B (en) 2015-07-08

Family

ID=43663939

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201110049875.7A Expired - Fee Related CN102193512B (en) 2010-02-25 2011-02-25 Field device for determining or monitoring a physical or chemical process variable

Country Status (2)

Country Link
CN (1) CN102193512B (en)
GB (1) GB2478178B (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102959479A (en) * 2010-07-05 2013-03-06 恩德莱斯和豪瑟尔两合公司 Field device for determining or monitoring a physical or chemical process variable

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6160418A (en) * 1999-01-14 2000-12-12 Xilinx, Inc. Integrated circuit with selectively disabled logic blocks
GB2453040A (en) * 2007-09-18 2009-03-25 Fisher Rosemount Systems Inc Methods and Apparatus to Upgrade and Provide Control Redundancy in Process Plants
CN101587166A (en) * 2009-06-26 2009-11-25 上海大学 Failure testing system for embedded logic cores in system on chip

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6449732B1 (en) * 1998-12-18 2002-09-10 Triconex Corporation Method and apparatus for processing control using a multiple redundant processor control system
DE102007054672A1 (en) * 2007-11-14 2009-05-20 Endress + Hauser Gmbh + Co. Kg Field device for determining or monitoring a process variable in process automation
WO2009155993A1 (en) * 2008-06-27 2009-12-30 Abb Research Ltd. A safety system for a machine
DE102009028938A1 (en) * 2009-08-27 2011-03-03 Endress + Hauser Gmbh + Co. Kg Field device for determining or monitoring a physical or chemical variable

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6160418A (en) * 1999-01-14 2000-12-12 Xilinx, Inc. Integrated circuit with selectively disabled logic blocks
GB2453040A (en) * 2007-09-18 2009-03-25 Fisher Rosemount Systems Inc Methods and Apparatus to Upgrade and Provide Control Redundancy in Process Plants
CN101587166A (en) * 2009-06-26 2009-11-25 上海大学 Failure testing system for embedded logic cores in system on chip

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
ROMUALD GIRARDEY等: "DYNAMIC RECONFIGURABLE MIXED-SIGNAL ARCHITECTURE FOR SAFETY CRITICAL APPLICATIONS", 《IEEE数据库》 *
TED HUFFMIRE等: "Moast and Drawbridges:An Isolation Primitive for Reconfigurable Hardware Based Systems", 《IEEE数据库》 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102959479A (en) * 2010-07-05 2013-03-06 恩德莱斯和豪瑟尔两合公司 Field device for determining or monitoring a physical or chemical process variable
US9720386B2 (en) 2010-07-05 2017-08-01 Endress + Hauser Gmbh + Co. Kg Field device for determining or monitoring a physical or chemical, process variable

Also Published As

Publication number Publication date
GB2478178A (en) 2011-08-31
GB201100261D0 (en) 2011-02-23
CN102193512B (en) 2015-07-08
GB2478178B (en) 2014-10-01

Similar Documents

Publication Publication Date Title
US8812262B2 (en) Field device for determining or monitoring a process variable in process automation
US7870299B1 (en) Advanced logic system
US8612920B2 (en) Field device for determining or monitoring a physical or chemical variable
US8554953B1 (en) Advanced logic system diagnostics and monitoring
CN104380666B (en) Field bus system
US8712727B2 (en) Field device for determining or monitoring a physical or chemical process variable
EP2591402B1 (en) Field device for determining or monitoring a physical or chemical process variable
CN106664260A (en) System and method for controller redundancy and controller network redundancy with ethernet/ip i/o
CN106716275A (en) Control and data-transfer system, gateway module, i/o module, and method for process control
CN104508574B (en) Field device for the process variable in determination or monitoring automation technology
DE102012112687A1 (en) Field device of automation technology, in particular process automation technology
US8572305B2 (en) Apparatus and method for configuring a bus system
DE102009026785A1 (en) Field device for determining and / or monitoring a physical or chemical process variable
CN102193512B (en) Field device for determining or monitoring a physical or chemical process variable
US10379144B2 (en) Arrangement having two redundant modules
US10078313B2 (en) Field device for determining or monitoring a process variable in automation technology
US10054925B2 (en) Field device for a safety-critical application with redundant measuring channels in an FPGA
AT516652B1 (en) forming plant
DE102009002734A1 (en) Field device for determining or monitoring process variable in process automation, has sensor, which works according to defined measuring principle, and control or evaluation unit, which processes and evaluates measured data
DE102011086054A1 (en) System for securing availability of bus system in e.g. process automation system, has functional modules activated during connection of device module with field device, and processing unit that recognizes error function of field device
JP5348418B2 (en) controller
CN106153103A (en) For determining the field apparatus measuring parameter and the method for transmission
DE102012010145A1 (en) I / O Module
UA139373U (en) PLATFORM FOR FORMATION OF SECURE INFORMATION AND MANAGEMENT SYSTEMS (ICS)
Olay Safety Critical Applications

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20150708

CF01 Termination of patent right due to non-payment of annual fee