Industrial control system with interconnected remotely located computer control units

Claim 2

An information transfer system for transmitting digital information between active devices and testing the validity of the transmitted information, said system comprising: at least one active device for transmitting information in digital form; at least one other active device for receiving information in digital form; plural independent communication channels connected to and extending between said first-mentioned and said second-mentioned active devices for conveying information therebetween; said first-mentioned active device including a transmission means for transmitting digital information arranged in blocks of predetermined format, said transmission means transmitting an identical block on each of said plural communication channels; and said second-mentioned active device including receiving means for receiving digital information transmitted by said first-mentioned active device and for selecting one of said plural communication channels and testing the validity of the received block and, when said received block from said first-selected communication channel is found invalid, for selecting another of said plural communication channels and testing the validity of the received block on said other communication channel.

Claim 3

The information transfer system claimed in claim 1 wherein: said second-mentioned active device includes responding means for transmitting an acknowledgement signal over at least one of said channels to said first-mentioned active device when the block received over said first-selected communication channel is valid, for transmitting over at least one of said channels an acknowledgement signal to said first-mentioned active device when the block received over said other selected communication channel is found valid, and for transmitting over at least one of said channels a non-acknowledgement signal to said first-mentioned active device when the block received over said other selected communication is found invalid.

Claim 4

The information transfer system claimed in claim 2 wherein said transmission means is responsive to the non-acknowledgement signal from said second-mentioned active device to retransmit the invalidly received block.

Claim 5

The information transfer system claimed in claim 3 including means to limit the number of retransmissions of an invalidly received block to a predetermined value.

Claim 6

The information transfer system claimed in claim 1 wherein said transmission means is operable to transmit said block at least twice in succession on each communication channel.

Claim 7

The information transfer system claimed in claim 5 wherein: said receiving means includes means to test the validity of the plural blocks received on a communications channel by effecting a comparison between the first-received and the second-received block.

Claim 8

The information transfer system claimed in claim 1 further comprising: memory means for storing the block received by said receiving means on said other communication channel while the block received on said first-selected communication channel is tested for validity.

Claim 9

An information transfer system for transferring digital information between stored-program controlled means and for testing the validity of the transferred information, said system comprising: at least one stored-program controlled means for transmitting digital information in blocks of predetermined format which blocks include an error detecting code word; at least one other stored-program controlled means for receiving digital information in said block format and adapted to test the validity of said received block using the error detecting code word; plural independent communication channels connected to and extending between said first-mentioned and said second-mentioned stored-program controlled means for transferring information blocks therebetween; and said second-mentioned stored-program controlled means having validity testing means for selecting a one of said plural communication channels and testing the validity of the block received thereon and for selecting another of said plural communication channels and testing the validity of the block received on said other communication channel when the block received on said first-selected communication channel fails its validity test.

Claim 10

An information transfer system for transferring digital information between stored-program controlled means and for testing the validity of the transferred information, said system comprising: at least one stored-program controlled means for transmitting digital information in blocks of predetermined format which blocks include an error detecting code word; at least one other stored-program controlled means for receiving digital information in said block format and adapted to test the validity of said received block using the error detecting code word; plural independent communication channels connected to and extending between said first-mentioned and said second-mentioned stored-program controlled means for transferring information blocks therebetween; and said second-mentioned stored-program controlled means having validity testing means for selecting a one of said plural communication channels and testing the validity of the block received thereon and for selecting another of said plural communication channels and testing the validity of the block received on said other communication channel when the block received on said first-selected communication channel fails its validity test.

Claim 11

The information transfer system claimed in claim 8 wherein said second-mentioned stored-program controlled means includes responding means for transmitting over at least one of said channels an acknowledgement signal to said first-mentioned stored-program controlled means when the block received over said first-selected communication channel is valid, for transmitting over at least one of said channels an acknowledgement signal to said first-mentioned stored-program controlled means when the block received over said other selected communication channel is found valid, and for transmitting over at least one of said channels a non-acknowledgement signal to said first-mentioned stored-program controlled means when the block received over said other selected communication channel is found invalid.

Claim 12

The information transfer system claimed in claim 9 wherein said first-mentioned stored-program controlled means is responsive to the non-acknowledgement signal from said second-mentioned stored-program controlled means to retransmit the invalidly received block.

Claim 13

The information transfer system claimed in claim 10 including means to limit the number of retransmissions of an invalidity received block to a predetermined value.

Claim 14

The information transfer system claimed in claim 8 wherein said first-mentioned stored-program controlled means is operable to transmit said block at least twice in succession on each communication channel.

Claim 15

The information transfer system claimed in claim 12 wherein: said second-mentioned stored-program controlled means includes means to test the validity of the plural blocks received on a communications channel by effecting a comparison between the first-received and the second-received block on the channel.

Claim 16

The information transfer system claimed in claim 8 further comprising: memory means for storing the block received on said other communication channel by said second-mentioned stored-program controlled means while the block received on said first-selected communication channel is tested for validity.

Claim 19

The industrial process control system claimed in claim 15 wherein said second-mentioned remote includes responding means for transmitting over said communications link an acknowledgement signal to said first-mentioned remote when the information group received over said first-selected communication channel is valid, for transmitting over said communications link an acknowledgement signal to said first-mentioned remote when the information group received over said other selected communication channel is found valid, and for transmitting over said communications link a non-acknowledgement signal to said first-mentioned remote when the information group received over said other selected communication channel is found invalid.

Claim 20

The industrial process control system claimed in claim 16 wherein said first-mentioned remote is responsive to the non-acknowledgement signal from said second-mentioned remote to said first-mentioned remote to retransmit the invalidly received information group.

Claim 21

The industrial process control system claimed in claim 16 including means to limit the number of retransmissions of an invalidly received information group to a predetermined value.

Claim 22

The industrial process control system claimed in claim 15 wherein said first-mentioned remote is operable to transmit said information groups at least twice in succession on each communication channel.

Claim 23

The industrial process control system claimed in claim 19 wherein: said second-mentioned remote includes means to test the validity of the plural information groups received on a communications channel by effecting a comparison between the first-received and the second-received information group on the channel.

Claim 24

The industrial process control system claimed in claim 15 further comprising: memory means for storing information groups received on said other communication channel by said second mentioned remote while the information group on said first-selected communication channel is tested for validity.

Claim 27

The industrial process control system claimed in claim 22 wherein said second-mentioned remote includes responding means for transmitting over said communications link an acknowledgement signal to said first-mentioned remote when the information group received over a first-selected communication channel is valid, for transmitting over said communications link an acknowledgement signal to said first-mentioned remote when the information group received over the other communication channel is found valid, and for transmitting over said communications link a non-acknowledgement signal to said first-mentioned remote when the information group received over said other communication channel is found invalid.

Claim 28

The industrial process control system claimed in claim 23 wherein said first-mentioned remote is responsive to the non-acknowledgement signal from said second-mentioned remote to retransmit the invalidly received information group.

Claim 29

The industrial process control system claimed in claim 22 wherein said first-mentioned remote is operable to transmit said information groups at least twice in succession on each communication channel.

Claim 30

The industrial process control system claimed in claim 25 wherein said second-mentioned remote includes means to test the validity of the plural information groups received on a communications channel by effecting a comparison between the first-received and the second-received group.

Claim 31

The industrial process control system claimed in claim 22 further comprising: memory means for storing the information groups received on one of said communication channels by said second-mentioned remote while the information groups received on the other communication channel is tested for validity.

Claim 34

The method claimed in claim 28 wherein said first-selection step further comprises the step of transmitting an acknowledgement signal from the receiver to the transmitter when the first-tested information block is found valid.

Claim 35

The method claimed in claim 29 wherein the second selection step further comprises the steps of transmitting an acknowledgement signal from the receiver to the transmitter when the second-tested information block is found valid.

Claim 36

The method claimed in claim 30 wherein the requesting step further comprises the step of transmitting a non-acknowledgement signal from the receiver to the transmitter when the second-tested information block is found invalid.

Claim 37

The method claimed in claim 31 further comprising the step of: retransmitting the information blocks in response to a non-acknowledgement signal.

Claim 38

The method claimed in claim 32 further comprising the step of: limiting the number of retransmissions to a predetermined value.

Claim 39

The method claimed in claim 29 wherein said transmitting step further comprises the step of transmitting identical information blocks on each channel at least twice in succession and the steps of testing the validity of an information block include a comparison between the first and second information blocks received on a channel.

Claim 40

In a control system of the type having a plurality of process control remotes interconnected through a communications link with each remote assigned a unique position in a predetermined succession order and each remote exercising supervisory control of the communication link on a revolving master basis, a method for transferring supervisory control of the communications link from a present system master to the next successive remote in the succession order comprising the steps of: transmitting a control-transfer command signal along the communication link from the present system master to the next successive remote in the succession order; receiving and evaluating the validity of the control-transfer command signal at the next successive remote; sending an acknowledgement signal to the present system master from the next successive remote and accepting supervisory control of the communications link by the next successive remote from the present master if the control-transfer command signal is found valid by the next successive remote whereby the next successive remote becomes the present system master.

Claim 41

In a control system of the type having a plurality of process control remotes interconnected through a communications link with each remote assigned a unique position in a predetermined succession order and each remote exercising supervisory control of the communication link on a revolving master basis, a method for transferring supervisory control of the communications link from a present system master to the next successive remote in the succession order comprising the steps of: transmitting a control-transfer command signal along the communication link from the present system master to the next successive remote in the succession order; receiving and evaluating the validity of the control-transfer command signal at the next successive remote; sending an acknowledgement signal to the present system master from the next successive remote and accepting supervisory control of the communications link by the next successive remote from the present master if the control-transfer command signal is found valid by the next successive remote whereby the next successive remote becomes the present system master.

Claim 42

In a control system claimed in claim 35, said method further comprising the step of: sending a non-acknowledgement signal from the next successive remote to the present system master if the evaluated control-transfer command signal if found invalid.

Claim 43

In a control system claimed in claim 36, said method further comprising the step of: retransmitting the control-transfer command signal from the present master to said next successive remote in response to a non-acknowledgement signal from the next successive remote.

Claim 44

In a control system of the type having a plurality of process control remotes interconnected through a communications link with each remote assigned the unique position in a predetermined succession order and each remote exercising supervisory control of the communication link on a revolving master basis, each remote having a variable transfer monitor timer, a method for transferring supervisory control of the communication link from one remote to another comprising: transmitting a control-transfer command signal along the communication link from the present system master to the next successive remote in the succession order; setting, when said control-transfer command signal is transmitted from the present system master to the next successive master, the transfer-monitor time-out interval of at least the second successive remote from the present master to a time-out interval that is a function of a predetermined supervisory control transfer value and the position of the particular remote relative to the present master said method operating in a normal mode comprising the further steps of: (1) receiving and evaluating the validity of the control transfer command signal at the next successive remote; (2) sending an acknowledgement signal to the present system master from the next successive remote; and (3) accepting supervisory control of the communications link by the next successive remote from the present system master if the control transfer command signal is found valid by the next successive remote whereby the next successive remote becomes the present system master, said method operating in an abnormal mode comprising the further step of accepting supervisory control of the communications link by the second successive remote from the present system master in the event the transfer-monitor timer of such second successive remote times out before the first successive remote accepts supervisory control in said normal mode of operation.

Claim 45

In a control system of the type having a plurality of process control remotes interconnected through a communications link with each remote assigned the unique position in a predetermined succession order and each remote exercising supervisory control of the communication link on a revolving master basis, each remote having a variable transfer monitor timer, a method for transferring supervisory control of the communication link from one remote to another comprising: transmitting a control-transfer command signal along the communication link from the present system master to the next successive remote in the succession order; setting, when said control-transfer command signal is transmitted from the present system master to the next successive master, the transfer-monitor time-out interval of at least the second successive remote from the present master to a time-out interval that is a function of a predetermined supervisory control transfer value and the position of the particular remote relative to the present master said method operating in a normal mode comprising the further steps of: (1) receiving and evaluating the validity of the control transfer command signal at the next successive remote; (2) sending an acknowledgement signal to the present system master from the next successive remote; and (3) accepting supervisory control of the communications link by the next successive remote from the present system master if the control transfer command signal is found valid by the next successive remote whereby the next successive remote becomes the present system master, said method operating in an abnormal mode comprising the further step of accepting supervisory control of the communications link by the second successive remote from the present system master in the event the transfer-monitor timer of such second successive remote times out before the first successive remote accepts supervisory control in said normal mode of operation.

Claim 46

In a control system for controlling an industrial process of the type that includes a plurality of remote units each connected to an associated input/output device and interconnected through a communications link and in which each remote is assigned a unique position in a predetermined succession order, 0, 1, 2, 3, . . . m, . . . n, and each remote accepts supervisory control of the communications link on a master for the moment basis in accordance with the succession order, a method for transferring supervisory control of the communications link from a present system master R m to the first successive remote R m+1 comprising the steps of: transmitting a control-transfer command signal through the communications link from the present system master R m to the next successive remote R m+1 ; evaluating the validity of the control-transfer command signal at the next successive remote R m+1 ; sending an acknowledgement signal through the communications link from the next successive remote R m+1 to the present system master R m when the control-transfer command signal is found valid; and accepting supervisory control of the communications link by the next successive remote R m+1 from the present master R m whereby the next successive remote R m+1 becomes the present master R m .

Claim 47

In a control system for controlling an industrial process of the type that includes a plurality of remote units each connected to an associated input/output device and interconnected through a communications link and in which each remote is assigned a unique position in a predetermined succession order, 0, 1, 2, 3, . . . m, . . . n, and each remote accepts supervisory control of the communications link on a master for the moment basis in accordance with the succession order, a method for transferring supervisory control of the communications link from a present system master R m to the first successive remote R m+1 comprising the steps of: transmitting a control-transfer command signal through the communications link from the present system master R m to the next successive remote R m+1 ; evaluating the validity of the control-transfer command signal at the next successive remote R m+1 ; sending an acknowledgement signal through the communications link from the next successive remote R m+1 to the present system master R m when the control-transfer command signal is found valid; and accepting supervisory control of the communications link by the next successive remote R m+1 from the present master R m whereby the next successive remote R m+1 becomes the present master R m .

Claim 48

In a control system for controlling an industrial process of the type that includes a plurality of remote units each connected to an input/output device and interconnected through a common communications link and in which each remote is assigned a unique position in a predetermined succession order, 0, 1, 2, 3, . . . m, . . . n, and in which each remote accepts supervisory control of the communications link on a master for the moment basis and in which each remote includes a settable variable transfer-monitor timer, a method for sequentially transferring supervisory control of the communications link from the present master R m to the next successive remote R m+1 in the succession order and for transferring supervisory control of the communications link from the present system master R m to the second successive remote R m+2 in the event the next successive remote R m+1 fails to accept supervisory control from the present system master R m comprising the steps of: transmitting a control-transfer command signal through the communications link from the present system master R m to the next successive remote R m+1 ; setting the transfer-monitor timer of at least the second successive remote R m+2 to a time-out interval based on a function of the successive remote's position relative to the present system master R m ; said method in a normal mode of operation comprising the further steps of: (1) evaluating the validity of the control-transfer command signal at the next successive remote R m+1 ; (2) sending an acknowledgement signal through the communications link from the next successive remote R m+1 to the present system master R m when the control-transfer command signal is found valid; and (3) accepting syspervisory control of the communications link by the first successive R m+1 from the present system master; said method in an abnormal method of operation comprising the further step of: accepting supervisory control of the communications link by the second successive remote R m+2 when the transfer-monitor timer of the second successive remote R m+2 times-out before the first successive remote R m+1 accepts supervisory control of the communications link.

Claim 49

In a control system for controlling an industrial process of the type that includes a plurality of remote units each connected to an input/output device and interconnected through a common communications link and in which each remote is assigned a unique position in a predetermined succession order, 0, 1, 2, 3, . . . m, . . . n, and in which each remote accepts supervisory control of the communications link on a master for the moment basis and in which each remote includes a settable variable transfer-monitor timer, a method for sequentially transferring supervisory control of the communications link from the present master R m to the next successive remote R m+1 in the succession order and for transferring supervisory control of the communications link from the present system master R m to the second successive remote R m+2 in the event the next successive remote R m+1 fails to accept supervisory control from the present system master R m comprising the steps of: transmitting a control-transfer command signal through the communications link from the present system master R m to the next successive remote R m+1 ; setting the transfer-monitor timer of at least the second successive remote R m+2 to a time-out interval based on a function of the successive remote's position relative to the present system master R m ; said method in a normal mode of operation comprising the further steps of: (1) evaluating the validity of the control-transfer command signal at the next successive remote R m+1 ; (2) sending an acknowledgement signal through the communications link from the next successive remote R m+1 to the present system master R m when the control-transfer command signal is found valid; and (3) accepting syspervisory control of the communications link by the first successive R m+1 from the present system master; said method in an abnormal method of operation comprising the further step of: accepting supervisory control of the communications link by the second successive remote R m+2 when the transfer-monitor timer of the second successive remote R m+2 times-out before the first successive remote R m+1 accepts supervisory control of the communications link.

Claim 50

In a control system of the type having a plurality of process control remotes interconnected through a communications link with each remote assigned a unique position in a predetermined succession order and each remote exercising supervisory control of the communication link on a revolving master basis, a method for transferring supervisory control of the communications link from a present system master to the next successive remote in the succession order comprising the steps of: transmitting a control-transfer command signal along the communication link from the present system master to the next successive remote in the succession order; receiving and evaluating the validity of the control-system command signal at the next successive remote; and accepting supervisory control of the communication link by the next successive remote from the present master if the control-transfer command signal is found valid by the next successive remote, whereby the next successive remote becomes the present system master.

Claim 51

In a control system of the type having a plurality of process control remotes interconnected through a communications link with each remote assigned a unique position in a predetermined succession order and each remote exercising supervisory control of the communication link on a revolving master basis, a method for transferring supervisory control of the communications link from a present system master to the next successive remote in the succession order comprising the steps of: transmitting a control-transfer command signal along the communication link from the present system master to the next successive remote in the succession order; receiving and evaluating the validity of the control-system command signal at the next successive remote; and accepting supervisory control of the communication link by the next successive remote from the present master if the control-transfer command signal is found valid by the next successive remote, whereby the next successive remote becomes the present system master.

Claim 54

The system for controlling an industrial process claimed in claim 42, wherein: each remote includes means for evaluating the validity of a received control-transfer block and for responding to a validly received control-transfer block by sending an acknowledgement signal to the transmitting remote to conclude the transfer of supervisory control.

Claim 55

The system for controlling an industrial process claimed in claim 43, wherein: said evaluating means is operable to respond to an invalidly received control-transfer block by sending a non-acknowledgement signal to the transmitting remote.

Claim 56

The system for controlling an industrial process claimed in claim 44, wherein: the transmitting remote in response to a non-acknowledgement signal to retransmit said control-transfer block.