Keyword: PLC
Paper Title Other Keywords Page
MOCOAAB03 The Spiral2 Control System Progress Towards the Commission Phase controls, interface, EPICS, database 8
 
  • E. Lécorché, P. Gillette, C.H. Haquin, E. Lemaître, G. Normand, C.H. Patard, L. Philippe, D.T. Touchard
    GANIL, Caen, France
  • J.F. Denis, F. Gougnaud, J.-F. Gournay, Y. Lussignol
    CEA/DSM/IRFU, France
  • P.G. Graehling, J.H. Hosselet, C. Maazouzi
    IPHC, Strasbourg Cedex 2, France
  
  The commissioning of the Spiral2 Radioactive Ion Beams facility at Ganil will soon start, so requiring the control system components to be delivered in time. Yet, parts of the system were validated during preliminary tests performed with ions and deuterons beams at low energy. The control system development results from the collaboration between Ganil, CEA/IRFU, CNRS/IPHC laboratories, using appropriate tools and approach. Based on Epics, the control system follows a classical architecture. At the lowest level, Modbus/TCP protocol is considered as a field bus. Then, equipment are handled by IOCs (soft or VME/VxWorks) with a software standardized interface between IOCs and clients applications on top. This last upper layer consists of Epics standard tools, CSS/BOY user interfaces within the so-called CSSop Spiral2 context suited for operation and, for machine tunings, high level applications implemented by Java programs developed within a Spiral2 framework derived from the open-Xal one. Databases are used for equipment data and alarms archiving, to configure equipment and to manage the machine lattice and beam settings. A global overview of the system is therefore here proposed.  
slides icon Slides MOCOAAB03 [3.205 MB]  
 
MOCOAAB05 Keck Telescope Control System Upgrade Project Status controls, EPICS, software, hardware 15
 
  • J.M. Johnson, J.A. Mader, K.T. Tsubota
    W.M. Keck Observatory, Kamuela, USA
  
  The Keck telescopes, located at one of the world’s premier sites for astronomy, were the first of a new generation of very large ground-based optical/infrared telescopes with the first Keck telescope beginning science operations in May of 1993, and the second in October of 1996. The components of the telescopes and control systems are more than 15 years old. The upgrade to the control systems of the telescopes consists of mechanical, electrical, software and network components with the overall goals of improving performance, increasing reliability, addressing serious obsolescence issues and providing a knowledge refresh. The telescope encoder systems will be replaced to fully meet demanding science requirements and electronics will be upgraded to meet the needs of modern instrumentation. The upgrade will remain backwards compatible with remaining Observatory subsystems to allow for a phased migration to the new system. This paper describes where Keck is in the development processes, key decisions that have been made, covers successes and challenges to date and presents an overview of future plans.  
slides icon Slides MOCOAAB05 [2.172 MB]  
 
MOCOBAB02 Integration of PLC with EPICS IOC for SuperKEKB Control System controls, LLRF, EPICS, interface 31
 
  • J.-I. Odagiri, K. Furukawa, T.T. Nakamura
    KEK, Ibaraki, Japan
  
  Recently, more and more PLCs are adopted for various frontend controls of　accelerators. It is common to connect the PLCs with higher level control layers by the network. As a result, control logic becomes dispersed over separate layers, one of which is implemented by ladder programs on PLCs, and the other is implemented by higher level languages on frontend computers. EPICS-based SuperKEKB accelerator control system, however, take a different approach by using FA-M3 PLCs with a special CPU module (F3RP61), which runs Linux and functions as an IOC. This consolidation of PLC and IOC enables higher level applications to directly reach every PLC placed at frontends by Channel Access. In addition, most of control logic can be implemented by the IOC core program and/or EPICS sequencer to make the system more homogeneous resulting in easier development and maintenance of applications. This type of PLC-based IOCs are to be used to monitor and control many subsystems of SuperKEKB, such as personnel protection system, vacuum system, RF system, magnet power supplies, and so on. This paper describes the applications of the PLC-based IOCs to the SuperKEKB accelerator control system.  
slides icon Slides MOCOBAB02 [1.850 MB]  
 
MOMIB06 Personnel Protection of the CERN SPS North Hall in Fixed Target Primary Ion Mode ion, proton, extraction, target 66
 
  • T. Hakulinen, J. Axensalva, F. Havart, S.C. Hutchins, L.K. Jensen, D. Manglunki, P. Ninin, P. Odier, S.B. Reignier, J.P. Ridewood, L. Søby, C. Theis, F. Valentini, D. Vaxelaire, H. Vincke
    CERN, Geneva, Switzerland
  
  While CERN's Super Proton Synchrotron (SPS) is able to deliver both secondary proton and primary ion beams to fixed targets in the North Area, the experimental areas (North Hall) are widely accessible during beam. In ion mode all normal safety elements involved in producing secondary beams are removed, so that an accidental extraction of a high-intensity proton beam into the North Hall would expose personnel present there to a radiation hazard. This has required an injector reconfiguration restricting operation to either ions or protons. However, demands for operational flexibility of CERN accelerators have led to a need to mix within the same SPS super-cycle both high-intensity proton cycles for LHC or HiRadMat and ion cycles for the North Area. We present an active interlock designed to mitigate this hazard: Beam Current Transformers are used to measure the level of beam intensity, and if above a set threshold, pulsing of the extraction septa is vetoed. The safety function is implemented by means of two logically equivalent but diverse and separate interlock chains. This interlock is expected to be in place once the SPS resumes operation after the first Long Shutdown in 2014.  
slides icon Slides MOMIB06 [0.236 MB]  
poster icon Poster MOMIB06 [4.250 MB]  
 
MOMIB07 An OPC-UA Based Architecture for the Control of the ESPRESSO Spectrograph @ VLT controls, software, hardware, interface 70
 
  • R. Cirami, V. Baldini, I. Coretti, S. Cristiani, P. Di Marcantonio, M. Mannetta, P. Santin
    INAF-OAT, Trieste, Italy
  • D. Mégevand
    Université de Genève, Observatoire Astronomique, Versoix, Switzerland
  • F. Zerbi
    INAF-Osservatorio Astronomico di Brera, Merate, Italy
  
  ESPRESSO is a fiber-fed, cross-dispersed, high-resolution echelle spectrograph for the ESO Very Large Telescope (VLT). The instrument is designed to combine incoherently the light coming from up to 4 VLT Unit Telescopes. To ensure maximum stability the spectrograph is placed in a thermal enclosure and a vacuum vessel. Abandoning the VME-based technologies previously adopted for the ESO VLT instruments, the ESPRESSO control electronics has been developed around a new concept based on industrial COTS PLCs. This choice ensures a number of benefits like lower costs and less space and power consumption requirement. Moreover it makes possible to structure the whole control electronics in a distributed way using building blocks available commercially off-the-shelf and minimizing in this way the need for custom solutions. The main adopted PLC brand is Beckhoff, whose product lineup satisfies the requirements set by the instrument control functions. OPC-UA is the chosen communication protocol between the PLCs and the instrument control software, which is based on the VLT Control Software package.  
slides icon Slides MOMIB07 [0.419 MB]  
poster icon Poster MOMIB07 [32.149 MB]  
 
MOPPC022 Remote Control of Heterogeneous Sensors for 3D LHC Collimator Alignment controls, alignment, LabView, target 103
 
  • C. Charrondière, P. Bestmann, T. Feniet
    CERN, Geneva, Switzerland
  
  Periodically the alignment of LHC collimators needs to be verified. Access for personnel is limited due to the level of radiation close to the collimators. The required measurements precision must be comparable to the other equipment in the LHC tunnel, meaning 0.15 mm in a sliding window of 200 m. Hence conventional measurements would take 4 days for a team of 3 people. This presentation covers the design, development and commissioning of a remotely controlled system able performs the same measurements in 1 h with one operator. The system includes the integration of a variety of industrial devices ranging from position sensors, inclination sensors to video cameras, all linked to a PXI system running LabVIEW. The control of the motors is done through a PLC based system. The overall performance and user experience are reported.  
poster icon Poster MOPPC022 [19.665 MB]  
 
MOPPC024 An Event Driven Communication Protocol for Process Control: Performance Evaluation and Redundant Capabilities controls, status, framework, Windows 111
 
  • J.O. Ortola Vidal, E.B. Blanco Vinuela, M. Boccioli, T.N. Nunes da Rocha
    CERN, Geneva, Switzerland
  
  The CERN Unified Industrial Control System framework (UNICOS) with its Continuous Control Package (UNICOS CPC) is the CERN standard solution for the design and implementation of continuous industrial process control applications. The in-house designed communication mechanism, based on the Time Stamp Push Protocol (TSPP) provides event driven high performance data communication between the control and supervision layers of a UNICOS CPC application. In its recent implementation of full redundant capabilities for both control and supervision layers, the TSPP protocol has reached maturity. This paper presents the design of the redundancy, the architecture, the current implementation as well as a comprehensive evaluation of its performance for SIEMENS PLCs in different test scenarios.  
poster icon Poster MOPPC024 [7.161 MB]  
 
MOPPC026 Bake-out Mobile Controls for Large Vacuum Systems controls, vacuum, status, software 119
 
  • S. Blanchard, F. Bellorini, P. Gomes, H.F. Pereira
    CERN, Geneva, Switzerland
  • L. Kopylov, S. Merker, M.S. Mikheev
    IHEP, Moscow Region, Russia
  
  Large vacuum systems at CERN (Large Hadron Collider, the Low Energy Ion Rings…) require bake-out to achieve ultra-high vacuum specifications. The bake-out cycle is used to decrease the outgassing rate of the vacuum vessel and to activate the Non-Evaporable Getter (NEG) thin film. Bake-out control is a Proportional-Integral-Derivative (PID) regulation with complex recipes, interlocks and troubleshooting management and remote control. It is based on mobile Programmable Logic Controller (PLC) cabinets, fieldbus network and Supervisory Control and Data Acquisition (SCADA) application. CERN vacuum installations include more than 7 km of baked vessels; using mobile cabinets reduces considerably the cost of the control system. The cabinets are installed close to the vacuum vessels during the time of the bake-out cycle. Mobile cabinets can be used in all the CERN vacuum facilities. Remote control is provided by fieldbus network and SCADA application.  
poster icon Poster MOPPC026 [3.088 MB]  
 
MOPPC027 The Control System of CERN Accelerators Vacuum [LS1 Activities and New Developments] controls, vacuum, linac, software 123
 
  • P. Gomes, F. Antoniotti, F. Bellorini, S. Blanchard, J-P. Boivin, J. Gama, G. Girardot, G. Pigny, B. Rio, H. Vestergard
    CERN, Geneva, Switzerland
  • L. Kopylov, S. Merker, M.S. Mikheev
    IHEP, Moscow Region, Russia
  
  After 3 years of operation, the LHC entered its first Long Shutdown period (LS1), in February 2013. Major consolidation and maintenance works will be performed across the whole CERN’s accelerator chain, in order to prepare the LHC to restart at higher energy, in 2015. The rest of the accelerator complex shall resume in mid-2014. We report on the recent and on-going vacuum-controls projects. Some of them are associated with the consolidations of the vacuum systems of LHC and of its injectors; others concern the complete renovation of the controls of some machines; and there are also some completely new installations. Due to the wide age-span of the existing vacuum installations, there is a mix of design philosophies and of control-equipment generations. The renovation and the novel projects offer an opportunity to improve the Quality Assurance of vacuum controls by: identifying, documenting, naming and labelling all pieces of equipment; minimising the number of equipment versions with similar functionality; homogenising the control architectures, while converging to a single software framework.  
poster icon Poster MOPPC027 [67.309 MB]  
 
MOPPC030 Developments on the SCADA of CERN Accelerators Vacuum controls, vacuum, software, database 135
 
  • F. Antoniotti, S. Blanchard, M. Boccioli, P. Gomes, H.F. Pereira
    CERN, Geneva, Switzerland
  • L. Kopylov, S. Merker, M.S. Mikheev
    IHEP, Moscow Region, Russia
  
  During the first 3 years of LHC operation, the priorities for the vacuum controls SCADA were to attend to user requests, and to improve its ergonomics and efficiency. We now have reached: information access simplified and more uniform; automatic scripts instead of fastidious manual actions; functionalities and menus standardized across all accelerators; enhanced tools for data analysis and maintenance interventions. Several decades of cumulative developments, based on heterogeneous technologies and architectures, have been asking for a homogenization effort. The Long Shutdown (LS1) provides the opportunity to further standardize our vacuum controls systems, around Siemens-S7 PLCs and PVSS SCADA. Meanwhile, we have been promoting exchanges with other Groups at CERN and outside Institutes: to follow the global update policy for software libraries; to discuss philosophies and development details; and to accomplish common products. Furthermore, while preserving the current functionalities, we are working on a convergence towards the CERN UNICOS framework.  
poster icon Poster MOPPC030 [31.143 MB]  
 
MOPPC031 IEPLC Framework, Automated Communication in a Heterogeneous Control System Environment controls, framework, software, hardware 139
 
  • F. Locci, S. Magnoni
    CERN, Geneva, Switzerland
  
  Programmable Logic Controllers (PLCs, PXI systems and other micro-controller families) are essential components of CERN control's system. They typically present custom communication interfaces which make their federation a difficult task. Dependency from specific protocols makes code not reusable and the replacement of old technology a tedious problem. IEPLC proposes a uniform and hardware independent communication schema. It automatically generates all the resources needed on master and slave side to implement a common and generic Ethernet communication. The framework consists of a set of tools, scripts and a C++ library. The JAVA configuration tool allows the description and instantiation of the data to be exchanged with the controllers. The Python scripts generate the resources necessary to the final communication while the C++ library, eventually, allows sending and receiving data at run-time from the master process. This paper describes the product by focusing on its main objectives: the definition of a clear and standard communication interface; the reduction of user’s developments and configuration time.  
poster icon Poster MOPPC031 [2.509 MB]  
 
MOPPC033 Opening the Floor to PLCs and IPCs: CODESYS in UNICOS controls, software, framework, hardware 147
 
  • J. Rochez, E.B. Blanco Vinuela, M. Koutli, T. Petrou
    CERN, Geneva, Switzerland
  
  This paper presents the integration of a third industrial platform for process control applications with the UNICOS (Unified Industrial Control System) framework at CERN. The UNICOS framework is widely used in many process control domains (e.g. Cryogenics, Cooling, Ventilation, Vacuum…) to produce highly structured standardised control applications for the two CERN approved industrial PLC product families, Siemens and Schneider. The CoDeSys platform, developed by the 3S (Smart Software Solution), provides an independent IEC 6131-3 programming environment for industrial controllers. The complete CoDeSys based development includes: (1) a dedicated Java™ module plugged in an automatic code generation tool, the UAB (UNICOS Application Builder), (2) the associated UNICOS baseline library for industrial PLCs and IPCs (Industrial PC) CoDeSys v3 compliant, and (3) the Python-based templates to deploy device instances and control logic. The availability of this development opens the UNICOS framework to a wider community of industrial PLC manufacturers (e.g. ABB, WAGO…) and, as the CoDeSys control Runtime works in standard Operating Systems (Linux, W7…), UNICOS could be deployed to any IPC.  
poster icon Poster MOPPC033 [4.915 MB]  
 
MOPPC040 A Hazard Driven Approach to Accelerator Safety System Design - How CLS Successfully Applied ALARP in the Design of Safety Systems controls, factory, operation, radiation 172
 
  • E. D. Matias, M. Benmerrouche, G. Cubbon, A. Hodges, H. Zhang
    CLS, Saskatoon, Saskatchewan, Canada
  
  All large scale particle accelerator facilities end up utilising computerised safety systems for the accelerator access control and interlock system including search lockup sequences and other safety functions. Increasingly there has been a strong move toward IEC 61508 based standards in the design of these systems. CLS designed and deployed its first IEC 61508 based system nearly 10 years ago. The challenge has increasingly been to manage the complexity of requirements and ensure that features being added into such systems were truly requirements to achieve safety. Over the past few years CLS has moved to a more structured Hazard Analysis technique that is tightly coupled and traceable through the design and verification of its engineered safety systems. This paper presents the CLS approach and lessons learned.  
 
MOPPC042 Machine Protection System for the SPIRAL2 Facility controls, target, beam-losses, diagnostics 178
 
  • C. Berthe, E. Lécorché, M.H. Moscatello, G. Normand
    GANIL, Caen, France
  
  The phase 1 of the SPIRAL2 facility, the extension project of the GANIL laboratory, is under construction in Caen, France. The accelerator is based on a linear solution, mainly composed of a normal conducting RFQ and a superconducting linac. One of its specificities is to be designed to accelerate high power deuteron and heavy ion beams from 40 to 200kW, and medium intensity heavy ion beams as well to a few kW. A Machine Protection System, has been studied to control and protect the accelerator from thermal damages for a very large range of beam intensities and powers. This paper presents the technical solutions chosen for this system which is based on two technical subsystems: one dedicated to thermal protection which requires a first PLC associated with a fast electronic system and a second dedicated to enlarged protection which is based on a safety products.  
poster icon Poster MOPPC042 [2.220 MB]  
 
MOPPC052 ESS Bilbao Interlock System Approach interlocks, EPICS, controls, ion 206
 
  • D.P. Piso, I. Arredondo, M. Eguiraun, S. Varnasseri
    ESS Bilbao, Zamudio, Spain
  
  Funding: ESS Bilbao
This paper describes the approach used at ESS Bilbao initiative for the implementation of the Interlock System. The system is divided into two parts depending on the required speed for the system response: Slow Interlocks (>100 msec.) and Fast Interlocks (<100 msec.). Besides, both interlocks parts are arranged in two layers: Local Layer and Master Layer. The Slow Interlocks subsystem is based on PLCs. This solution is being tested in the ESS Bilbao ECR ion source with positive results and the first version design is now complete for the LEBT system. For the Fast Interlocks local layer part, a solution based on NI cRIO has been designed and tested. In these tests a maximum response time of 3.5 μs. was measured for analog acquisition, threshold comparison and signal generation. For digital signals the maximum time response of a similar process was 500 nsec. . These responses are considered valid for the standard need of the project. Finally, to extract information from the interlocks system and monitor it, the Modbus/EPICS interface is used for Slow Interlocks, while EPICS output is produced by NI cRIO. Hence, it is planned to develop a light pyQT solution to perform this task. 		 
 
MOPPC055 Revisiting CERN Safety System Monitoring (SSM) monitoring, network, database, status 218
 
  • T. Hakulinen, P. Ninin, R. Nunes, T.R. Riesco
    CERN, Geneva, Switzerland
  
  CERN Safety System Monitoring (SSM) is a system for monitoring state-of-health of the various access and personnel safety systems at CERN since more than three years. SSM implements monitoring of different operating systems, network equipment, storage, and special devices like PLCs, front ends, etc. It is based on the monitoring framework Zabbix, which supports alert notifications, issue escalation, reporting, distributed management, and automatic scalability. The emphasis of SSM is on the needs of maintenance and system operation, where timely and reliable feedback directly from the systems themselves is important to quickly pinpoint immediate or creeping problems. A new application of SSM is to anticipate availability problems through predictive trending that allows to visualize and manage upcoming operational issues and infrastructure requirements. Work is underway to extend the scope of SSM to all access and safety systems managed by the access and safety team with upgrades to the monitoring methodology as well as to the visualization of results.  
poster icon Poster MOPPC055 [1.537 MB]  
 
MOPPC058 Design, Development and Implementation of a Dependable Interlocking Prototype for the ITER Superconducting Magnet Powering System interface, software, plasma, controls 230
 
  • M. Zaera-Sanz
    GSI, Darmstadt, Germany
  • J. Burdalo Gil, I. Romera, R. Schmidt, M. Zerlauth
    CERN, Geneva, Switzerland
  
  Based on the experience with an operational interlock system for the superconducting magnets of the LHC, CERN has developed a prototype for the ITER magnet central interlock system in collaboration with ITER. A total energy of more than 50 Giga Joules is stored in the magnet coils of the ITER Tokamak. Upon detection of a quench or other critical powering failures, the central interlock system must initiate the extraction of the energy to protect the superconducting magnets and, depending on the situation, request plasma disruption mitigations to protect against mechanical forces induced between the magnet coils and the plasma. To fulfil these tasks with the required high level of dependability the implemented interlock system is based on redundant PLC technology making use of hardwired interlock loops in 2-out-of-3 redundancy, providing the best balance between safety and availability. In order to allow for simple and unique connectivity of all client systems involved in the safety critical protection functions as well as for common remote diagnostics, a dedicated user interface box has been developed.  
 
MOPPC059 Refurbishing of the CERN PS Complex Personnel Protection System controls, network, interface, radiation 234
 
  • P. Ninin, D. Chapuis, F. Chapuis, Ch. Delamare, S. Di Luca, J.L. Duran-Lopez, T. Hakulinen, L. Hammouti, J.-F. Juget, T. Ladzinski, B. Morand, M. Munoz-Codoceo, E. Sanchez-Corral Mena, F. Schmitt, G. Smith, R. Steerenberg, F. Valentini
    CERN, Geneva, Switzerland
  
  In 2010, the refurbishment of the Personnel Protection System of the CERN Proton Synchrotron complex primary beam areas started. This large scale project was motivated by the obsolescence of the existing system and the objective of rationalizing the personnel protection systems across the CERN accelerators to meet the latest recommendations of the regulatory bodies of the host states. A new generation of access points providing biometric identification, authorization and co-activity clearance, reinforced passage check, and radiation protection related functionalities will allow access to the radiologically classified areas. Using a distributed fail-safe PLC architecture and a diversely redundant logic chain, the cascaded safety system guarantees personnel safety in the 17 machine of the PS complex by acting on the important safety elements of each zone and on the adjacent upstream ones. It covers radiological and activated air hazards from circulating beams as well as laser, and electrical hazards. This paper summarizes the functionalities provided, the new concepts introduced, and, the functional safety methodology followed to deal with the renovation of this 50 year old facility.  
poster icon Poster MOPPC059 [2.874 MB]  
 
MOPPC061 Achieving a Highly Configurable Personnel Protection System for Experimental Areas radiation, status, interface, controls 238
 
  • F. Havart, D. Chapuis, R. Nunes, D. Vaxelaire
    CERN, Geneva, Switzerland
  
  The personnel protection system of the secondary beam experimental areas at CERN manages the beam and access interlocking mechanism. Its aim is to guarantee the safety of the experimental area users against the hazards of beam radiation and laser light. The highly configurable, interconnected, and modular nature of those areas requires a very versatile system. In order to follow closely the operational changes and new experimental setups and to still keep the required level of safety, the system was designed with a set of matrices which can be quickly reconfigured. Through a common paradigm, based on industrial hardware components, this challenging implementation has been made for both the PS and SPS experimental halls, according to the IEC 61508 standard. The current system is based on a set of hypotheses formed during 25 years of operation. Conscious of the constant increase in complexity and the broadening risk spectrum of the present and future experiments, we propose a framework intended as a practical guide to structure the design of the experimental layouts based on risk evaluation, safety function prescriptions and field equipment capabilities.  
poster icon Poster MOPPC061 [2.241 MB]  
 
MOPPC068 Operational Experience with a PLC Based Positioning System for a LHC Extraction Protection Element controls, operation, software, dumping 254
 
  • C. Boucly, J. Borburgh, C. Bracco, E. Carlier, N. Magnin, N. Voumard
    CERN, Geneva, Switzerland
  
  The LHC Beam Dumping System (LBDS) nominally dumps the beam synchronously with the passage of the particle free beam abort gap at the beam dump extraction kickers. In the case of an asynchronous beam dump, an absorber element protects the machine aperture. This is a single sided collimator (TCDQ), positioned close to the beam, which has to follow the beam position and beam size during the energy ramp. The TCDQ positioning control is implemented within a SIEMENS S7-300 Programmable Logic Controller (PLC). A positioning accuracy better than 30 μm is achieved through a PID based servo algorithm. Errors due to a wrong position of the absorber w.r.t. the beam energy and size generates interlock conditions to the LHC machine protection system. Additionally, the correct position of the TCDQ w.r.t. the beam position in the extraction region is cross-checked after each dump by the LBDS eXternal Post Operational Check (XPOC). This paper presents the experience gained during LHC Run 1 and describes improvements that will be applied during the LHC shutdown 2013 – 2014.  
poster icon Poster MOPPC068 [3.381 MB]  
 
MOPPC082 Automated Verification Environment for TwinCAT PLC Programs interface, hardware, simulation, undulator 288
 
  • A. Beckmann
    XFEL. EU, Hamburg, Germany
  
  The European XFEL will have three undulator systems SASE1, SASE2, and SASE3 to produce extremely brilliant, ultra-short pulses of x-rays with wavelengths down to 0.1 nm. The undulator gap is adjustable in order to vary photon beam energy. The corresponding motion control is implemented with industrial PCs running Beckhoff TwinCAT Programmable Logic Controllers (PLCs). So far, the functionality of the PLC programs has been verified on system level with the final hardware. This is a time-consuming manual task, but may also damage the hardware in case of severe program failures. To improve the verification process of PLC programs, a test environment with simulated hardware has been set up. It uses a virtual machine to run the PLC program together with a verification program that simulates the behavior of the hardware. Test execution and result checking is automated with the help of scripts, which communicate with the verification program to stimulate the PLC program. Thus, functional verification of PLC programs is reduced to running a set of scripts, without the need to connect to real hardware and without manual effort.  
poster icon Poster MOPPC082 [0.226 MB]  
 
MOPPC094 ARIEL Control System at TRIUMF – Project Update controls, EPICS, ISAC, Linux 318
 
  • R.B. Nussbaumer, D. Dale, D.B. Morris, K. Negishi, J.J. Pon, J.E. Richards, G. Waters, P.J. Yogendran
    TRIUMF, Canada's National Laboratory for Particle and Nuclear Physics, Vancouver, Canada
  
  The Advanced Rare Isotope & Electron Linac (ARIEL) facility at TRIUMF, scheduled for Phase 1 completion in 2014, will use a control system based on EPICS. Discrete subsystems within the accelerator, beamlines and conventional facilities have been clearly identified. Control system strategies for each identified subsystem have been developed, and components have been chosen to satisfy the unique requirements of each system. The ARIEL control system will encompass methodology already established in the TRIUMF ISAC & ISAC-II facilities in addition to adoption of a number of technologies previously unused at TRIUMF. The scope includes interface with other discrete subsystems such as cryogenics and power distribution, as well as complete subsystem controls packages.  
 
MOPPC104 Design and Implementation of Sesame's Booster Ring Control System controls, booster, EPICS, network 352
 
  • Z. Qazi, A. Ismail, I. Saleh
    SESAME, Allan, Jordan
  • P. Betinelli-Deck
    SOLEIL, Gif-sur-Yvette, France
  • M.T. Heron
    Diamond, Oxfordshire, United Kingdom
  
  SESAME is a synchrotron light source under installation located in Allan, Jordan. It consists of 2.5 GeV storage-ring, a 800 MeV Booster-Synchrotron and a 22 MeV Microtron as Pre-Injector. SESAME succeeded to get the first beam from Microtron, the booster is expected to be commissioned by the end of 2013, the storage-ring by the end of 2015 and the first beam-lines in 2016. This paper presents building of control systems of SEAME booster. EPICS is the main control-software tool and EDM for building GUIs which is being replaced by CSS. PLCs are used mainly for the interlocks in the vacuum system and power-supplies of the magnets, and in diagnostics for florescent screens and camera- switches. Soft IOCs are used for different serial devices (e.g. vacuum gauge controllers) through Moxa terminal servers and Booster power supplies through Ethernet connection. Libera Electron modules with EPICS tools (IOCs and GUIs) from Diamond Light Source are used for beam position monitoring. The timing System consists of one EVG and three EVR cards from Micro Research Finland (MRF). A distributed version control repository using Git is used at SESAME to track development of the control subsystems.  
poster icon Poster MOPPC104 [1.776 MB]  
 
MOPPC106 Status Report of RAON Control System controls, EPICS, timing, vacuum 356
 
  • S. Ryu, S. Choi, D. Jeon, J.H. Lee
    IBS, Daejeon, Republic of Korea
  
  The RAON is a new heavy ion accelerator under construction in South Korea, which is to produce a variety of stable ion and rare isotope beams to support various researches for the basic science and applied research applications. To produce the isotopes to fulfill the requirements we have planed the several modes of operation scheme which require fine-tuned synchronous controls, asynchronous controls, or both among the accelerator complexes. The basic idea and development progress of the control system as well as the future plan are presented.  
poster icon Poster MOPPC106 [1.403 MB]  
 
MOPPC120 Commissioning Status of NSLS-II Vacuum Control System vacuum, controls, EPICS, linac 389
 
  • H. Xu, H.-C. Hseuh, S. Leng, D. Zigrosser
    BNL, Upton, Long Island, New York, USA
  
  The National Synchrotron Light Source II (NSLS-II) is a state-of-the-art 3 GeV third generation light source currently under integrated testing and commissioning at Brookhaven National Laboratory. The vacuum systems are monitored by vacuum gauges and ion pump current. The gate valves are controlled by programmable logic controllers (PLC) using voting scheme. EPICS application codes provide the high level monitoring and control through the input-output controllers. This paper will discuss the commissioning status of the various aspects of vacuum control system.  
poster icon Poster MOPPC120 [0.648 MB]  
 
MOPPC138 Continuous Integration for Automated Code Generation Tools controls, software, framework, target 431
 
  • I. Prieto Barreiro, W. Booth, B. Copy
    CERN, Geneva, Switzerland
  
  The UNICOS* (UNified Industrial COntrol System) framework was created back in 1998 as a solution to build object-based industry-like control systems. The Continuous Process Control package (CPC**) is a UNICOS component that provides a methodology and a set of tools to design and implement industrial control applications. UAB** (UNICOS Application Builder) is the software factory used to develop UNICOS-CPC applications. The constant evolution of the CPC component brought the necessity of creating a new tool to validate the generated applications and to verify that the modifications introduced in the software tools do not create any undesirable effect on the existing control applications. The uab-maven-plugin is a plug-in for the Apache Maven build manager that can be used to trigger the generation of the CPC applications and verify the consistency of the generated code. This plug-in can be integrated in continuous integration tools - like Hudson or Jenkins – to create jobs for constant monitoring of changes in the software that will trigger a new generation of all the applications located in the source code management.
* "UNICOS a framework to build industry like control systems: Principles & Methodology".
** "UNICOS CPC6: Automated code generation for process control applications".
 
poster icon Poster MOPPC138 [4.420 MB]  
 
TUCOBAB01 A Small but Efficient Collaboration for the Spiral2 Control System Development controls, EPICS, software, GUI 498
 
  • E. Lécorché, C. Berthe, F. Bucaille, P. Gillette, C.H. Haquin, E. Lemaître, J.M. Loyant, G. Normand, C.H. Patard, L. Philippe, R.J.F. Roze, D.T. Touchard, A.H. Trudel
    GANIL, Caen, France
  • J.F. Denis, F. Gougnaud, J.-F. Gournay, Y. Lussignol, A. Roger, R. Touzery
    CEA/DSM/IRFU, France
  • P.G. Graehling, J.H. Hosselet, C. Maazouzi
    IPHC, Strasbourg Cedex 2, France
  
  The Spiral2 radioactive ion beam facility to be commissioned in 2014 at Ganil (Caen) is built within international collaborations. This also concerns the control system development shared by three laboratories: Ganil has to coordinate the control and automated systems work packages, CEA/IRFU is in charge of the “injector” (sources and low energy beam lines) and the LLRF, CNRS/IPHC provides the emittancemeters and a beam diagnostics platform. Besides the technology Epics based, this collaboration, although being handled with a few people, nevertheless requires an appropriate and tight organization to reach the objectives given by the project. This contribution describes how, started in 2006, the collaboration for controls has been managed both from the technological point of view and the organizational one, taking into account not only the previous experience, technical background or skill of each partner, but also their existing working practices and “cultural” approaches. A first feedback comes from successful beam tests carried out at Saclay and Grenoble; a next challenge is the migration to operation, Ganil having to run Spiral2 as the other members are moving to new projects  
slides icon Slides TUCOBAB01 [2.747 MB]  
 
TUPPC040 Saclay GBAR Command Control software, linac, controls, positron 650
 
  • P. Lotrus
    CEA, Gif-sur-Yvette, France
  • G.A. Durand
    CEA/DSM/IRFU, France
  
  The GBAR experiment will be installed in 2016 at CERN’s Antiproton Decelerator, ELENA extension, and will measure the free fall acceleration of neutral antihydrogen atoms. Before construction of GBAR, the CEA/Irfu institute has built a beam line to guide positrons produced by a Linac (linear particle accelerator) through either a materials science line or a Penning trap. The experiment command control is mainly based on Programmable Logical Controllers (PLC). A CEA/Irfu-developed Muscade SCADA (Supervisory Control and Data Acquisition) is installed on a Windows 7 embedded shoebox PC. It manages local and remote display, and is responsible for archiving and alarms. Muscade was used because it is rapidly and easily configurable. The project required Muscade to communicate with three different types of PLCs: Schneider, National Instruments (NI) and Siemens. Communication is based on Modbus/TCP and on an in-house protocol optimized for the Siemens PLC. To share information between fast and slow controls, a LabVIEW PC dedicated to the trap fast control communicates with a PLC dedicated to security via Profinet fieldbus.  
poster icon Poster TUPPC040 [1.791 MB]  
 
TUPPC046 Control Using Beckhoff Distributed Rail Systems at the European XFEL controls, hardware, photon, software 669
 
  • N. Coppola, J. Tolkiehn, C. Youngman
    XFEL. EU, Hamburg, Germany
  
  The European XFEL project is a 4th generation light source producing spatially coherent 80fs short photon x-ray pulses with a peak brilliance of 1032-1034 photons/s/mm2/mrad2/0.1% BW in the energy range from 0.26 to 24 keV at an electron beam energy 14 GeV. Six experiment stations will start data taking in fall 2015. In order to provide a simple, homogeneous solution, the DAQ and control systems group at the European XFEL are standardizing on COTS control hardware for use in experiment and photon beam line tunnels. A common factor within this standardization requirement is the integration with the Karabo software framework of Beckhoff TwinCAT 2.11 or TwinCAT3 PLCs and EtherCAT. The latter provides the high degree of reliability required and the desirable characteristics of real time capability, fast I/O channels, distributed flexible terminal topologies, and low cost per channel. In this contribution we describe how Beckhoff PLC and EtherCAT terminals will be used to control experiment and beam line systems. This allows a high degree of standardization for control and monitoring of systems.
Hardware Technology - POSTER 		 
poster icon Poster TUPPC046 [1.658 MB]  
 
TUPPC054 A PLC-Based System for the Control of an Educational Observatory controls, instrumentation, interface, operation 691
 
  • V. Baldini, R. Cirami, I. Coretti, P. Di Marcantonio, S. Galeotta, G. Iafrate, M. Mannetta, P. Santin
    INAF-OAT, Trieste, Italy
  
  An educational project that aims to involve young students in astronomical observations has been developed in the last decade at the Basovizza branch station of the INAF-Astronomical Observatory of Trieste. The telescope used is a 14” reflector equipped with a robotic Paramount ME equatorial mount and placed in a non-automatic dome. The new-developing control system is based on Beckhoff PLC. The control system will mainly allow to remotely control the three-phase synchronous motor of the dome, the switching of the whole instrumentation and the park of the telescope. Thanks to the data coming from the weather sensor, the PLC will be able to ensure the safety of the instruments. A web interface is used for the communication between the user and the instrumentation. In this paper a detailed description of the whole PLC-based control system architecture will be presented.  
poster icon Poster TUPPC054 [3.671 MB]  
 
TUPPC070 Detector Controls for the NOvA Experiment Using Acnet-in-a-Box controls, detector, monitoring, interface 740
 
  • D.J. Nicklaus, L.R. Carmichael, D. Finstrom, B. Hendricks, CA. King, W.L. Marsh, R. Neswold, J.F. Patrick, J.G. Smedinghoff, J. You
    Fermilab, Batavia, USA
  
  In recent years, we have packaged the Fermilab accelerator control system, Acnet, so that other instances of it can be deployed independent of the Fermilab infrastructure. This encapsulated "Acnet-in-a-Box" is installed as the detector control system at the NOvA Far Detector. NOvA is a neutrino experiment using a beam of particles produced by the Fermilab accelerators. There are two NOvA detectors: a 330 ton ‘‘Near Detector'' on the Fermilab campus and a 14000 ton ‘‘Far Detector'' 735 km away. All key tiers and aspects of Acnet are available in the NOvA instantiation, including the central device database, java Open Access Clients, erlang front-ends, application consoles, synoptic displays, data logging, and state notifications. Acnet at NOvA is used for power-supply control, monitoring position and strain gauges, environmental control, PLC supervision, relay rack monitoring, and interacting with Epics PVs instrumenting the detector's avalanche photo-diodes. We discuss the challenges of maintaining a control system in a remote location, synchronizing updates between the instances, and improvements made to Acnet as a result of our NOvA experience.  
poster icon Poster TUPPC070 [0.876 MB]  
 
TUPPC102 User Interfaces for the Spiral2 Machine Protection System beam-losses, controls, rfq, software 818
 
  • L. Philippe, P. Gillette, G. Normand
    GANIL, Caen, France
  
  Spiral2 accelerator is designed to accelerate protons, deuterons, ions with a power from hundreds of Watts to 200kW. Therefore, it is important to monitor and anticipate beam losses to maintain equipment integrities by triggering beam cuts when beam losses or equipment malfunctions are detected; the MPS (Machine Protection System) is in charge of this function. The MPS has also to monitor and limit activations but this part is not addressed here. Linked to the MPS, five human machine interfaces will be provided. The first, “MPS” lets operators and accelerator engineers monitor MPS states, alarms and tune some beam losses thresholds. The second “beam power rise” defines successive steps to reach the desired beam power. Then, “interlock” is a synoptic to control beam stops state and defaults; the “beam losses” one displays beam losses, currents and efficiencies along the accelerator. Finally, “beam structure” lets users interact with the timing system by controlling the temporal structure to obtain a specific duty cycle according to the beam power constraints. In this paper, we introduce these human machine interfaces, their interactions and the method used for software development.  
poster icon Poster TUPPC102 [1.142 MB]  
 
TUCOCA04 Formal Methodology for Safety-Critical Systems Engineering at CERN software, operation, site, interface 918
 
  • F. Valentini, T. Hakulinen, L. Hammouti, T. Ladzinski, P. Ninin
    CERN, Geneva, Switzerland
  
  A Safety-Critical system is a system whose failure or malfunctioning may lead to an injury or loss of human life or may have serious environmental consequences. The Safety System Engineering section of CERN is responsible for the conception of systems capable of performing, in an extremely safe way, a predefined set of Instrumented Functions preventing any human presence inside areas where a potential hazardous event may occur. This paper describes the formal approach followed for the engineering of the new Personnel Safety System of the PS accelerator complex at CERN. Starting from applying the generic guidelines of the safety standard IEC-61511, we have defined a novel formal approach particularly useful to express the complete set of Safety Functions in a rigorous and unambiguous way. We present the main advantages offered by this formalism and, in particular, we will show how this has been effective in solving the problem of the Safety Functions testing, leading to a major reduction of time for the test pattern generation.  
slides icon Slides TUCOCA04 [2.227 MB]  
 
TUCOCA07 A Streamlined Architecture of LCLS-II Beam Containment System radiation, distributed, controls, diagnostics 930
 
  • E. Carrone, M.D. Cyterski, J.M. Murphy, F. Tao
    SLAC, Menlo Park, California, USA
  
  With the construction of LCLS-II, SLAC is developing a new Beam Containment System (BCS) to replace the aging hardwired system. This system will ensure that the beam is confined to the design channel at an approved beam power to prevent unacceptable radiation levels in occupable areas. Unlike other safety systems deployed at SLAC, the new BCS is distributed and has explicit response time requirements, which impose design constraints on system architecture. The design process complies with IEC 61508 and the system will have systematic capability SC3. This paper discusses the BCS built on Siemens S7-300F PLC. For those events requiring faster action, a hardwired shutoff path is provided in addition to peer safety functions within PLC; safety performance is enhanced, and the additional diagnostic capabilities significantly relieve operational cost and burden. The new system is also more scalable and flexible, featuring improved configuration control, simplified EPICS interface and reduced safety assurance testing efforts. The new architecture fully leverages the safety PLC capabilities and streamlines design and commissioning through a single-processor single-programmer approach.  
slides icon Slides TUCOCA07 [1.802 MB]  
 
TUCOCA10 Improvements in the T2K Primary Beamline Control System controls, power-supply, EPICS, status 940
 
  • K. Nakayoshi, Y. Fujii, K. Sakashita
    KEK, Tsukuba, Japan
  
  T2K is a long-baseline neutrino oscillation experiment in Japan. We report recent improvements in the T2K primary beamline control system. The first improvement is a new interlock system for current fluctuations of the normal-conducting (NC) magnet power supplies. To prevent the intense beam from hitting the beamline equipment due to a current fluctuation in a magnet power supply, we continuously monitor the power supply output current using digital-panel-meters. The second improvement is a new PLC-based control system for the NC magnet power supplies. We will also discuss the actual implementation of these improvements.  
slides icon Slides TUCOCA10 [2.595 MB]  
 
THPPC004
 CODAC Standardisation of PLC Communication EPICS, software, controls, Ethernet 1097
 
  • S. Pande, F. Di Maio, B. Evrard, K. Mahajan, P. Sawantdesai, A. Simelio, A. Wallander, I. Yonekawa
    ITER Organization, St. Paul lez Durance, France
  
  As defined by the CODAC Architecture of ITER, a Plant System Host (PSH) and one or more Slow Controllers (SIEMENS PLCs) are connected over a switched Industrial Ethernet (IE) network. An important part of Software Engineering of Slow Controllers is the standardization of communication between PSH and PLCs. Based on prototyping and performance evaluation, Open IE Communication over TCP was selected. It is implemented on PLCs to support the CODAC data model of ‘State’, ‘Configuration’ and ‘Simple Commands’. The implementation is packaged in Standard PLC Software Structure(SPSS) as a part of CODAC Core System release. SPSS can be easily configured by the SDD Tools of CODAC. However Open IE Communication is restricted to the PLC CPUs. This presents a challenge to implement redundant PLC architecture and use remote IO modules. Another version of SPSS is developed to support communication over Communication Processors(CP). The EPICS driver is also extended to support redundancy transparent to the CODAC applications. Issues of PLC communication standardization in the context of CODAC environment and future development of SPSS and EPICS driver are presented here.  
 
THPPC013 Configuration Management of the Control System controls, TANGO, software, database 1114
 
  • V.H. Hardion, J.J. Jamroz, J. Lidón-Simon, M. Lindberg, A.M. Milán, A.G. Persson, D.P. Spruce
    MAX-lab, Lund, Sweden
  
  The control system of big research facilities like synchrotron involves a lot of work to keep hardware and software synchronised to each other to have a good coherence. Modern Control System middleware Infrastructures like Tango use a database to store all values necessary to communicate with the devices. Nevertheless it is necessary to configure the driver of a PowerSupply or a Motor controller before being able to communicate with any software of the control system. This is part of the configuration management which involves keeping track of thousands of equipments and their properties. In recent years, several DevOps tools like Chef, Puppet, Ansible or SpaceMaster have been developed by the OSS community. They are now mandatory for the configuration of thousands of servers to build clusters or cloud servers. Define a set of coherent components, enable Continuous Deployment in synergy with Continuous Integration, reproduce a control system for simulation, rebuild and track changes even in the hardware configuration are among the use cases. We will explain the strategy of MaxIV on this subject, regarding the configuration management.  
poster icon Poster THPPC013 [4.620 MB]  
 
THPPC027 A New EPICS Device Support for S7 PLCs EPICS, controls, interface, software 1147
 
  • S. Marsching
    Aquenos GmbH, Baden-Baden, Germany
  
  S7 series programmable logic controllers (PLCs) are commonly used in accelerator environments. A new EPICS device support for S7 PLCs that is based on libnodave has been developed. This device support allows for a simple integration of S7 PLCs into EPICS environments. Developers can simply create an EPICS record referring to a memory address in the PLC and the device support takes care of automatically connecting to the PLC and transferring the value. This contribution presents the concept behind the s7nodave device support and shows how simple it is to create an EPICS IOC that communicates with an S7 PLC.  
poster icon Poster THPPC027 [3.037 MB]  
 
THPPC032 Embedded EPICS Controller for KEK Linac Screen Monitor System controls, linac, EPICS, Linux 1150
 
  • M. Satoh, K. Furukawa, K. Mikawa, T. Suwada
    KEK, Ibaraki, Japan
  • T. Kudou, S. Kusano
    Mitsubishi Electric System & Service Co., Ltd, Tsukuba, Japan
  
  The screen monitor (SC) of the KEK linac is a beam diagnostics device to measure transverse beam profiles with a fluorescent screen. The screen material is made of 99.5% Al2O3 and 0.5% CrO3, with which a sufficient amount of fluorescent light can be obtained when electron and positron beams impinge on the screen. the fluorescent light with a camera embedded with a charge-coupled device (CCD), the transverse spatial profiles of the beam can be easily measured. Compact SCs were previously developed in 1995 for the KEKB project. About 110 compact SCs were installed into the beam line at that time. VME-based computer control system was also developed in order to perform fast and stable control of the SC system. However, the previous system becomes obsolete and hard to maintain. Recently, a new screen monitor control system for the KEK electron/positron injector linac has been developed and fully installed. The new system is an embedded EPICS IOC based on the Linux/PLC. In this paper, we present the new screen monitor control system in detail.  
 
THPPC037 EPICS-based Control System for New Skew Quadrupole Magnets in J-PARC MR controls, EPICS, status, quadrupole 1168
 
  • K.C. Sato
    JAEA/J-PARC, Tokai-Mura, Naka-Gun, Ibaraki-Ken, Japan
  • S. Igarashi
    KEK, Ibaraki, Japan
  • N. Kamikubota, J. Takano, S. Yamada, N. Yamamoto
    J-PARC, KEK & JAEA, Ibaraki-ken, Japan
  • S.Y. Yoshida
    Kanto Information Service (KIS), Accelerator Group, Ibaraki, Japan
  
  In J-PARC Main Ring (MR), a control system for new skew quadrupole magnets has been constructed. This system is based on EPICS　(Experimental Physics and Industrial Control System). The system comprises a YOKOGAWA F3RP61-2L (a PLC controller running Linux), a function generator (Tektronix AFG3000), and a commercial bipolar-DC Amplifier. The function generator is controlled using VXI-11 protocol over Ethernet, and the amplifier is connected to PLC I/O modules with hardwire. Both devices are controlled by the F3RP61-2L. The Function Generator produces a ramp waveform at each machine cycle of 2.48 seconds. The DC amplifire drives the magnet. The control system for skew quadrupole magnets was developed in 2012, and has been in opeation since January, 2013.  
poster icon Poster THPPC037 [1.027 MB]  
 
THPPC057 Validation of the Data Consolidation in Layout Database for the LHC Tunnel Cryogenics Controls Package controls, database, cryogenics, operation 1197
 
  • A. Tovar, C. Balle, E.B. Blanco Vinuela, C. Fluder, E. Fortescue-Beck, P. Gomes, V. Inglese, M. Pezzetti
    CERN, Geneva, Switzerland
  
  The control system of the Large Hadron Collider cryogenics manages over 34,000 instrumentation channels which are essential for populating the software of the PLCs (Programmable Logic Controller) and SCADA (Supervisory Control and Data Acquisition) responsible for maintaining the LHC at the appropriate operating conditions. The control system specification's are generated by the CERN UNICOS (Unified Industrial Control System) framework using a set of information of database views extracted from the LHC layout database. The LHC layout database is part of the CERN database managing centralized and integrated data, documenting the whole CERN infrastructures (Accelerator complex) by modeling their topographical organization (“layouts”), and defining their components (functional positions) and the relationships between them. This paper describes the methodology of the data validation process, including the development of different software tools used to update the database from original values to manually adjusted values after three years of machine operation, as well as the update of the data to accommodate the upgrade of the UNICOS Continuous Process Control package(CPC).  
 
THPPC076 Re-Engineering Control Systems using Automatic Generation Tools and Process Simulation: the LHC Water Cooling Case controls, simulation, operation, interlocks 1242
 
  • W. Booth, E.B. Blanco Vinuela, B. Bradu, L. Gomez Palacin, M. Quilichini, D. Willeman
    CERN, Geneva, Switzerland
  
  This paper presents the approach used at CERN (European Organization for Nuclear Research) for the re-engineering of the control systems for the water cooling systems of the LHC (Large Hadron Collider). Due to a very short, and therefore restrictive, intervention time for these control systems, each PLC had to be completely commissioned in only two weeks. To achieve this challenge, automatic generation tools were used with the CERN control framework UNICOS (Unified Industrial Control System) to produce the PLC code. Moreover, process dynamic models using the simulation software EcosimPro were developed to carry out the ‘virtual’ commissioning of the new control systems for the most critical processes thus minimizing the real commissioning time on site. The re-engineering concerns around 20 PLCs managing 11000 Inputs/Outputs all around the LHC. These cooling systems are composed of cooling towers, chilled water production units and water distribution systems.  
poster icon Poster THPPC076 [4.046 MB]  
 
THPPC080 Testing and Verification of PLC Code for Process Control controls, framework, software, factory 1258
 
  • E.B. Blanco Vinuela, B. Fernández Adiego, A. Merezhin
    CERN, Geneva, Switzerland
  
  Functional testing of PLC programs has been historically a challenging task for control systems engineers. This paper presents the analysis of different mechanisms for testing PLCs programs developed within the UNICOS (Unified Industrial COntrol System) framework. The framework holds a library of objects, which are represented as Function Blocks in the PLC application. When a new object is added to the library or a correction of an existing one is needed, exhaustive validation of the PLC code is needed. Testing and formal verification are two distinct approaches selected for eliminating failures of UNICOS objects. Testing is usually done manually or automatically by developing scripts at the supervision layer using the real control infrastructure. Formal verification proofs the correctness of the system by checking weather a formal model of the system satisfies some properties or requirements. The NuSMV model checker has been chosen to perform this task. The advantages and limitations of both approaches are presented and illustrated with a case study, validating a specific UNICOS object.  
poster icon Poster THPPC080 [3.659 MB]