Barry Baker P. Eng. Asset Data Integration Field Device Communication Protocols

Similar documents
Process Control and Automation using Modbus Protocol

ModScan A SCADA MODBUS Network Scanner. Mark Bristow mark.bristow@gmail.com

Modbus and ION Technology

Barry Baker, P.Eng. Pipeline SCADA Local vs. Hosted SCADA

Modbus and ION Technology

Kepware Technologies Optimizing KEPServerEX V5 Projects

Monitoring & Control of Small-scale Renewable Energy Sources

Advantages of the DNP3 Communications Protocol in Water and Wastewater Telemetry Systems. By Vishal Prakash

eztcp Technical Document Modbus/TCP of eztcp Caution: Specifications of this document may be changed without prior notice for improvement.

FOXBORO. I/A Series SOFTWARE Product Specifications. I/A Series Intelligent SCADA SCADA Platform PSS 21S-2M1 B3 OVERVIEW

Using MODBUS for Process Control and Automation

APNT#1168 Modbus - Establishing Communications Hints

Modbus Communications for PanelView Terminals

Semaphore T BOX Applications in Data Center Facilities

WISE-4000 Series. WISE IoT Wireless I/O Modules

PROFIBUS AND MODBUS: A COMPARISON

AutoLog ControlMan. Remote Monitoring & Controlling Service

Using Industrial IoT (IIoT)Technology

Secure SCADA Communication Protocol Performance Test Results

Your remote sites at your fingertips?

SCADA. The Heart of an Energy Management System. Presented by: Doug Van Slyke SCADA Specialist

Comparison of protocols used in remote monitoring: DNP 3.0, IEC & Modbus

Flexy-ble M2M router for remote access and data services. Industrial M2M Router.

How To Use Safety System Software (S3)

Benefits of a Modern SCADA Protocol DNP3 vs Modbus

Modicon M340 The all-in-one PAC

NSTB. AGA 12, Part 2 Performance Test Plan. Mark Hadley, Kristy Huston Pacific Northwest National Laboratories. November National SCADA Test Bed

Wireless Communications for SCADA Systems Utilizing Mobile Nodes

Technical Bulletin. Arista LANZ Overview. Overview

From Fieldbus to toreal Time Ethernet

SCADAPack E DNP3 Technical Reference

SCADA Systems. Make the most of your energy. March 2012 / White paper. by Schneider Electric Telemetry & Remote SCADA Solutions

A DNP3 Protocol Primer

Kepware Whitepaper. Enabling Big Data Benefits in Upstream Systems. Steve Sponseller, Business Director, Oil & Gas. Introduction

New Remote Intelligent Gateway and Secure Socket Layer Validation Procedure

Chapter 2 - The TCP/IP and OSI Networking Models

Modbus Protocol. PDF format version of the MODBUS Protocol. The original was found at:

19 Comparison of Ethernet Systems

TOP Server DNP 3.0 Suite. Background & Best Practices

PowerLogic ION7550 / ION7650

Component Based Rapid OPC Application Development Platform

SCADA Questions and Answers

PLCs and SCADA Systems

R-Win. Smart Wireless Communication Management System

SCADA System Fundamentals

How to Choose the Right Industrial Firewall: The Top 7 Considerations. Li Peng Product Manager

White Paper. Technical Capabilities of the DF1 Half-Duplex Protocol

Complete SCADA solution for Remote Monitoring and Control

SEMANTIC SECURITY ANALYSIS OF SCADA NETWORKS TO DETECT MALICIOUS CONTROL COMMANDS IN POWER GRID

ION Tips and Tricks. Q&A Session PowerLogic ION Users Conference 2009

Power Industry Communication Protocol Features and Benefits

A Data Collection Revolution?

Holistic View of Industrial Control Cyber Security

SCADA PROTOCOLS AND COMMUNICATION TRENDS

An Introduction to SCADA-ICS System Security. Document Number IG-101 Document Issue 0.1 Issue date 03 February 2015

SCADA System Security. ECE 478 Network Security Oregon State University March 7, 2005

Niagara IT Manager s Guide

RIG Acceptance Test (RAT) Procedures

The Advantages of an Integrated Factory Acceptance Test in an ICS Environment

Secure Networks for Process Control

Modicon Modbus Protocol Reference Guide. PI MBUS 300 Rev. J

Connecting UniOP to Telemecanique PLC s

IT Security and OT Security. Understanding the Challenges

NEW GENERATION PROGRAMMABLE AUTOMATION CONTROLLER

for both the Verbatim Gateway and Catalyst Autodialer EtherNet Options

The product. SIMAC a machine simulator. Plan. Presentation of the simulation. Simulation, why? What : SIMAC product. Page 1 SIMAC

Energy Management System CANBUS Interface Specification

Broadband Networks. Prof. Dr. Abhay Karandikar. Electrical Engineering Department. Indian Institute of Technology, Bombay. Lecture - 29.

Characterizing Performance of Enterprise Pipeline SCADA Systems

Whitepaper Introduction to remote control systems and remote maintenance systems for system monitoring

Substation Automation Systems. Nicholas Honeth

OPEN MODBUS/TCP SPECIFICATION

SCADAPack E ISaGRAF 3 User Manual

Production in the Cloud

Linear Motion and Assembly Technologies Pneumatics Service. Industrial Ethernet: The key advantages of SERCOS III

Frequently Asked Questions

Kokii BatteryDAQ. BMS Software Manual. Battery Analyzer Battery DAS

SECTION CONTROL SOFTWARE

Product Overview. Dream Report. OCEAN DATA SYSTEMS The Art of Industrial Intelligence. User Friendly & Programming Free Reporting.

Data and Command Encryption for SCADA

SICAM PAS - the Key to Success Power Automation compliant with IEC and your existing system

WHITE PAPER. SCADA Systems

SiteCelerate white paper

Lecture 12: Network Management Architecture

Dream Report vs MS SQL Reporting. 10 Key Advantages for Dream Report

ROC Protocol Specifications Manual

CF & IoT Protocol Support

DNP Master Ethernet Driver Help Kepware Technologies

SCADAvantage Network Topology System software products

Four Ways High-Speed Data Transfer Can Transform Oil and Gas WHITE PAPER

The Advantages of Enterprise Historians vs. Relational Databases

Using Logix5000 Controllers as Masters or Slaves on Modbus

CX-Supervisor CX-MODBUS TCP

Evaluating the Accuracy of Maxim Real-Time Clocks (RTCs)

Keywords: Process control systems, Modbus protocol, passive network scanning

Eliot SA Embeds ichip in Mobile Terminals for IP- Based GSM and GPRS Fleet Management Solutions

MODBUS MASTER/SLAVE Serial and Ethernet Communication Server

Overcoming IP Address Issues with GPRS Remote Monitoring and Alarm Systems

Ranch Networks for Hosted Data Centers

TIME TO RETHINK PERFORMANCE MONITORING

Transcription:

Barry Baker P. Eng. Asset Data Integration Field Device Communication Protocols

WELCOME! Some housekeeping items before we get too far (and forget!) Upon satisfactory completion of this course, you will receive CEU and/or CPE credits. Phoenix Contact is an authorized provider of CEUs licensed through the International Association for Continuing Education and Training (IACET). Satisfactory completion requirements are as follows: Beginning of session sign in sheet and pre-test End of session post test and class evaluation After completion of the course, the instructor will submit the class information to the corporate office training department. CEU certificates will be mailed to each participant that fulfills the course requirements (meaning we need your mailing address!) 2 10/3/2013

Presentation Outline 1. Trihedral Introduction (Make sure you have completed Pre-test) 2. Overview 3. SCADA Protocol Types 4. SCADA Protocol Comparison Report-by-Exception vs. Poll-for-Current methods DNP3 vs. Modbus IEC 61870-5-101 & -104 5. Protocol Tuning for Efficiency Coalescing data Controlling message size 6. Summary 7. Q & A 8. Post-test 3 10/3/2013

Trihedral Introduction Trihedral was founded in 1986 as an HMI (Human Machine Interface) software provider. Our software, VTS and VTScada, is installed in thousands of applications worldwide, via direct and indirect sales. The oil & gas sector is largely served via OEM s who re-label the software as their own to serve a variety of specific applications. Trihedral has an active engineering group that has written literally hundreds of communication drivers over the years. These range from custom developments for OEM equipment to implementations of standards and their evolution. Some of these activities take place using published protocols while others are created via reverse engineering for closed or obsolete hardware. While many communications drivers are specific to their equipment or niche system implementation, there is some commonality to designs. We would like to share with you the overall efficiency considerations and design possibilities that are possible. 4 10/3/2013

Overview Selection of a SCADA protocol for communication with remote sites can have a large impact on overall system performance and operational integrity. General Considerations Accuracy of information Ongoing cost of data retrieval Update rates for displays Bandwidth limitations A typical SCADA communication scenario 5 10/3/2013

- Part 1 - SCADA Protocol Comparison 6

SCADA Protocol Classification The majority of SCADA protocols can be classified as one of the two following types Poll-for-current-readings (e.g. Modbus, DF1) Report-by-exception or Change of State (e.g. BSAP, DNP3, IEC 60870-5-101). Selection of the correct protocol for a SCADA application will help to ensure Timely data updates Rapidly changing field conditions are not missed Events from several sites can be analyzed on a common time base Controlled costs for communication links Poll for Current Readings Report-by-exception Report-by-exception 7 10/3/2013

Poll-for-Current-Readings Protocols Most originated in the PLC environment Upside Easier to configure communications Downside Inefficient. Each poll retrieves all requested field device values. Most do not capture rapidly changing states of operation Most do not include time-stamping of data at the field device Note: Poll rate must be equal or less than the minimal acceptable SCADA display update rates for Alarming Logging Caution!! SSS Increased costs $$$ (infrastructure or pay-per-use ) Increased data transfer Increased bandwidth Increased polling rates 8 10/3/2013

Report-by-Exception Protocols Two major variants Poll-for-exception Unsolicited-report-by-exception DNP3 supports both variants DNP3 IEC 60870/DNP3 Upside Standardized data types Millisecond duration event capturing (time stamped data) Data logging (SOE) in the field device Data quality attributes Two-pass control operations Reduced bandwidth requirement due to less data transfer Downside Complicated to configure communications May be more expensive for hardware support 9 10/3/2013 Bonus Time-stamped event data storage has the added advantage of logging data locally. This provides continuous data gathering during comm interruptions.

Sample Performance Comparison Single Field Device 30 analog channels Ave 5 values changing/30 sec 50 digital channels Ave 1 value changing/30 sec Comm link 30 sec display data updates Min 5 sec resolution for logging changes 1010/3/2013

Modbus RTU Protocol Performance Must read ALL data every 5 seconds to meet specification for logging, regardless of how many values actually changed 2 read messages every 5 seconds (one per each of 2 data types)* Total of 93 bytes every 5 seconds Total of 65.3k/hr Display update specification of 30 seconds will be met by the 5 second polling rate *Improvements to this will be covered later in the presentation 1110/3/2013 www.modbus.org

DNP3 Protocol Performance Assuming that data will be classified by type Analogs as class 2 Digitals as class 1 Device polled for class 1 and class 2 data every 30 seconds All data time-stamped at the device and logged to the Historian with timestamp Meets the 5 sec logging accuracy requirements In practice, timestamps can have millisecond resolution Integrity Poll requests present state of all values periodically. Ensures devices are OK Modbus 65.3kB/hr DNP3 20.7kB/hr In this case DNP offers the same information with 68% less data transfer! Total data requirements with hourly integrity poll is 20.7kB/hr www.dnp.org 1210/3/2013

DNP3 (RBE) vs. Modbus (Poll for Current) Conclusions DNP3 can use a lower bandwidth communication channel to accomplish the same time resolution as Modbus Applications requiring time correlated data from multiple sites (e.g. leak detection) will benefit from DNP3 s time-stamped events Communication outages to devices using Modbus will result in a loss of all readings for the duration of the outage Communication outages to devices using DNP3 will result in loss of displayed data only for the duration of the outage. Logged events will accumulate in the device during the outage and be read & logged after the outage completes 1310/3/2013

Report by Exception Protocols comparison DNP3 (North America) vs. IEC 60870-5 (Europe) IEC 60870-5 available in two versions -101 for serial communication links -104 for TCP/IP communication links IEC 60870-5 provides similar functionality to that described for DNP3 Time stamped data in devices Poll for exceptions Data quality attributes Well defined data types similar performance as well VS. 1410/3/2013

- Part 2 Protocol Tuning for Efficiency 15

Modbus Protocol Tuning Modbus is the most widely used industrial & SCADA protocol in use today Many new and legacy SCADA applications continue to use Modbus Typical configuration scenarios can result in inefficient communication Slower polling rates Higher data throughput requirements The following examples will illustrate two scenarios where Modbus configuring tuning can be used to reduce poll rates and data throughput requirements 1610/3/2013

A Review Modbus Variations Modbus ASCII designed for serial implementations inefficient ASCII message format seldom used Modbus designed for RTU serial implementations similar to ASCII message format but using efficient binary encoding most common implementation of Modbus Dick Morley Modbus Plus proprietary Modicon industrial network seldom used outside of local control (in plant) configurations Open Modbus TCP designed for TCP/IP networks enhancements for non deterministic network response times using same application layer message encoding as Modbus RTU 1710/3/2013

Example #1 Read of 4 Data Types using Modbus RTU Premise Multiple reads are typically required for multiple data types in SCADA to RTU communication. Simple changes can significantly reduce the number of poll messages. Requirement - Read the following from a remote device using Modbus RTU protocol 40 Digital Status Outputs & Internal Status 30 Digital Status Inputs 20 Analog Outputs & Internal Registers 10 Analog Inputs Typical messaging Requires 4 query/response messages every poll interval: Read Coils 0x01 query + response total 18 bytes Read Discrete Inputs 0x02 query + response total 18 bytes Read Holding Registers 0x03 query + response total 53 bytes Read Input Registers 0x04 query + response total 33 bytes Summary 122 bytes/poll interval With 10 sec poll interval 30.1 MB/month 1810/3/2013

Example #1 - Re-configured for Efficiency Re-configure remote device & SCADA to place all required poll data in contiguous holding registers in device Minimal RTU configuration required to realize savings SCADA need only support extraction of status values packed into words Before efficiency redesign 122 bytes/poll After efficiency redesign 83 bytes/poll The same data can now be read in a single query/response Read Input Registers 0x04 query + response total 83 bytes Using contiguous registers in the device results in 32% less data transfer Result: Simple changes can realize: cost savings for pay per byte communication systems faster effective polling in shared communication channel systems (e.g. RF) 1910/3/2013

Example #1 Read of 4 Data Types using Open Modbus/TCP TCP-based protocols require large overhead packets. Data can be put into contiguous registers as with Modbus RTU. Same requirements Minimal RTU configuration required to realize savings SCADA need only support extraction of status values packed into words Before efficiency redesign 473 bytes/poll After efficiency redesign 171 bytes/poll If we take into account the TCP/IP overhead: Four separate messages use a total of 473 bytes One single combined messages uses 171 bytes Using contiguous registers in the device results in 64% less data transfer! Result: Minimizing the number of messages is far more important when using TCP/IP-based protocols. 2010/3/2013

However Sometimes reducing the number of messages is not always the best choice. Let s reconsider example 1 2110/3/2013

Example #2 Reducing Message Size Premise - If SCADA protocols automatically transfer the largest data blocks possible, inefficient communications can result if portions of data in the block are not required. This example requires SCADA to read the following registers from a field device: Equipment 1 is represented by 30 registers starting at 40100 Equipment 1 is represented by 20 registers starting at 40200 To read the entire set of registers in a single message, would result in a request + response size of 253 bytes. Result: If two smaller read requests are used we can reduce the total data size per poll to 126 bytes. One message for 30 bytes starting at 40100 (73 bytes) One message for 20 bytes starting at 40200 (53 bytes) Before efficiency redesign 253 bytes/poll After efficiency redesign 126 bytes/poll Using smaller message sizes results in 50% less data transfer 2210/3/2013

Example #2 but with Open Modbus/TCP Using Open Modbus/TCP the same scenario A total of 120 registers can be read in a single message resulting in a request + response size of 342 bytes Breaking the message into two blocks results in: One message for 30 bytes starting at 40100 (162 bytes) One message for 20 bytes starting at 40200 (142 bytes) Result: Note that in this example, the size of the TCP headers impacts on the overall message size so the reduction is not as pronounced as the Modbus RTU example Before efficiency redesign 342 bytes/poll After efficiency redesign 304 bytes/poll Using smaller message sizes results in only 11% less data transfer 2310/3/2013

Applicability of Examples to Other Protocols The principals Using continuous register addressing in field devices Using appropriate block sizes can be applied to any other protocol that supports block memory reads A few examples Allen Bradley (Rockwell) DF1 GE SNP Omron Hostlink Limitations are the same as when using Modbus Some extra programming of remote devices is required to compact the data SCADA must be able to extract status information from words SCADA must be able to define the maximum size of data blocks read from devices 2410/3/2013

Summary Part 1 Report by exception protocols provide a number of distinct advantages over poll for readings protocols, including: Accurately time stamped data from remote devices Reduced telecom data throughput requirements No loss of event data during communication outages Part 2 Legacy poll-for-exception protocols such as Modbus will continue to be used for some time due to their simplicity and entrenched user base. Poll-for-exception systems can be tuned to provide greater communication link efficiencies. This can lead to lower cost for pay-for-use communication links or higher poll frequencies. 25

Q&A Your turn to speak! 2610/3/2013

Post-test Did we teach you anything (useful)? 2710/3/2013