XII International Phd Workshop OWD 2010, 23–26 October 2010
Total Page:16
File Type:pdf, Size:1020Kb
XII International PhD Workshop OWD 2010, 23–26 October 2010 Comparison of Safety Solutions in Industrial Ethernet Juraj Ľupták, Tomáš Ondrašina, University of Žilina Abstract meets the requirements for resistance to electrical In many cases the industrial communication noise, mechanical vibrations, temperature effects and systems is component part of system which partook has the required persistence. It is also a successful in safety critical process control. Undetected implementation in the section of communication corruption of data transmission can cause protocols which deals with the interoperability of considerable substantially damages within smart devices and other devices and a data equipments, environments or demands on human transmission among them, including the health and this is reason why system have to be management of these transmissions. It is not the designed so that guarantee required Safety Integrity only communication technology but it is a solution Level. Paper deals with summarization of safety of several producers, associations of producers and solutions in industrial Ethernet with orientation to users. Common to all of these solutions is that they communication profiles families: CPF 2, CPF 3 and are trying to use the Ethernet technology and the CPF 13. In the paper is underline the safety open TCP/IP protocol of the internet technology as well solution, which in the future will be compatible with and at the same time meet the demands placed on several types of safety products. the data collection and communication for operating and controlling processes, machines and lines. These 1. Introduction conclusions must adapt to the current solutions of industrial buses, from which they are derived [1]. Industrial communication networks are becoming a part of wide measuring and control systems. They are using the modern information technology. The industrial network is in many cases a part of a system, which takes place in the management of Safety-Related Critical Processes for example the management of certain manufacturing processes in mechanical engineering, chemical industry, nuclear power, traffic management. In this situation we cannot derivate the definition of safety mechanisms within a communication from general rules defined for commercial purposes. The system must be Fig.1. Industrial Ethernet in the automation designed to guarantee the required safety integrity environment. level SIL. Recently many different families of the The communication links among network industrial Ethernet networks occur. In the case of participants fig.1. are beside the model “client- industrial machines safety, production lines safety, server”, used mostly for the data exchange between ranged from control up to the automated two entities, using also protocols for efficient data production, enormous costs are given to the safety exchange among multiple participants. It means on the purpose of using several types of protocols based on the principle “publisher- communication networks. From this arise the effort subscriber” and “producer-consumer”. The data to find a safety communication profile which will be transfer occurs in a greater extent than in the office possible to use in any case. network and that is from a Byte up to hundred of MB transferred between the display panels and at the 2. Industrial Ethernet level of control computers. Industrial Ethernet is a successfully used IEEE According [2] safety standards EN 954-1, IEC 802.3 standard in the area of connectors, 61508 and DIN 19250th are currently most often transmission media and other circuit solution that used for the E / E / PE systems. When dividing 331 safety systems into categories, classes and levels, the Recently, the technology of industrial Ethernet is standards are based on the analysis of system risks becoming well known and modifications of the and define the security measures for the reduction of Safety Ethernet are developed. It is one of the most existing risks to a user acceptable level. Safety recent topics in the field of automation technology requirements for the system can be defined only if development in the industrial countries. It also the acceptable risk and risk associated with the covers the questions of data transmission within the controlled process is known. The safety standards industrial control systems. recommend to carry out the risk analysis in the initial stages of the life cycle of the system. That is to 2.2. Option to solve the security identify a relevant hazards resulting from an adverse protection in the industrial networks effects and determine the risk associated with the There is no absolute safety of any system. The process for the required security functions of the risks which arise during the operation can be system. eliminated only to a particular tolerable level. This IEC (International Electrotechnical Commission) can be achieved with the help of technical and with the increase number of industrial Ethernet administrative regulations. When ensuring trouble- variants standardized almost all its variations which free running of a safety-relevant system, technical have a national support and are used in practice. hardware or software restrictions are made. A There are ten variants of the industrial Ethernet degree of functional safety of a system and integrity network in documents like IEC/PAS (Publicly of a system security can be achieved with the Available Standard). They are shown in the table 1. application of the restrictions. (according to [3]). Table 1. Versions of the industrial Ethernet network 2.2.1. The Safety Communication Profile CIP Safety Standard Type IEC/PAS 62030 MODBUS - RTPS The Safety Communication Profile CIP Safety IEC/PAS 62405 Vnet/IP belongs to the second family of communication IEC/PAS 62406 TCnet profiles CPF2. It is designed for the SR applications IEC/PAS 62407 EtherCAT which are using the communication protocol CIP. It IEC/PAS 62408 Ethernet Powerlink is extending its competences by ensuring a simple IEC/PAS 62409 EPA transfer of a security relevant and irrelevant data one IEC/PAS 62410 SERCOS III by one and allows user to create a safety-relevant IEC/PAS 62411 PROFINET connection among two (producer/consumer IEC/PAS 62412 P – NET on IP connection between two security objects) or more IEC/PAS 62413 EtherNet/IP (producer/consumer connection among multiple security objects) applications and thus can provide a 2.1. Industrial Ethernet PROFINET high level of a safety integrity required in a safety- PROFINET technology is now getting to the relevant applications. forefront in the section of conventional industrial CIP Safety has an model of an application layer networks. It is gradually replacing the widespread and user profiles of devices expanded by a safety- PROFIBUS technology and it is becoming a relevant functions (see fig. 2.) . standard in a safety-related applications. The basic idea of safety-related communication is that the safety of a transfer must be operated by a trusted transmission system. PROFINET is an open industrial communication system. The first experiments with this system are dated back to the year 2002. It contains qualitatively new concept of communication based on the Ethernet industrial network and it is inspired by the experiences and the structure of PROFIBUS protocol [4]. Fig.2. Routing of safety-relevant data Several versions arose beside the PROFINET After adding the services of CIP Safety into the industrial network like in the industrial bus application and user layer, the security increase from PROFIBUS. They are listed as PROFINET CBA SIL 0 to SIL 3 when comparing with standard (Component Based Automation, it is also known as applications. The terminal safety relevant application PROFINET V1), PROFINET IO (Input/Output, objects ensure the integrity of security with the help PROFINET V2) and PROFINET IRT of specific safety-relevant functions [5]. (Isochronous Real Time, PROFINET V3) which use The safety protocol is located above the standard different communication channel. network protocol. The safety layers formulate the 332 safety-related message, sent the safety-related the memory elements of a network elements, the message, receive and decode new safety-related following security mechanisms are recommended for message. When the safety-related message is decoded the PROFIsafe profile: and verified the data are further transfered to the • Identification of the sender and recipient. safety-related application. • Serial number (virtual). • Data integrity check. • Time monitoring. 2.2.3. The safety communication profile openSAFETY This method of protection is used for the Sercos III, EtherNet / IP, Modbus-TCP, Powerlink, compatible for all Ethernet types. OpenSAFETY is open safety protocol also in the technical respects: • given the protocol's bus-independence, • Fig.3. Safety layer of the CIP Safety profile openSAFETY can be used with all fieldbuses, 2.2.2. The safety communication profile • industrial Ethernet solutions. PROFIsafe OpenSAFETY uses a frame with a uniform This method of protection is compatible for the format, no matter whether for payload data transfer, PROFIBUS or the PROFINET safety networks. or time synchronization purposes and for a PROFIsafe is the first open safety configuration. Frame length depends on the amount communication technology for globally distributed of data to be transferred. automated systems. It was designed on the basis of Safety nodes are solved on the network knowledge and experience from a railway signalling