Control Systems Supervision

1
Control Systems Supervision

• Bruce Flockhart ? CERN IT/CO
• Supervision of Production Computers
• September 23rd 2003

2
Detector Control System (DCS)

• Will be developed over the next 2-3 years in
  common for the four LHC experiments and will
  require
• Remote boot (Re)Installation of O/S specific
  soft installation etc.
• Monitoring agents for correct operation
• Review possibility for specific info from soft
  (DAQ)
• Secure access
• Intelligent HMI interface for alarms

3
IT-CO Equipment

• Two major technical systems are currently being
  prepared by IT/CO for the common use of the LHC
  experiments
• Detector Safety System (DSS)
• Gas Control System (GCS)
• Both systems monitor and control delicate
  experimental equipment and are connected through
  TechNet.

4
IT-CO Equipment

• Detector Safety System (DSS)
• PLC based monitoring of LHC detectors and
  experimental equipment, including racks.
• Composed of a PLC Front End for the safety part
  and a PC running PVSS for the Back End display
  and control
• DSS will operate on a private LAN and is attached
  to the Technical Network through a Gateway PC
• DSS must be very reliable and highly available!

5
DSS Equipment

• DSS Software environment
• Siemens STEP 7
• Windows XP
• PVSS
• Windows Terminal Services for monitoring
• DSS Future Development
• Remote monitoring of DSS hardware
• Access to DSS from CERN network for equipment
  status and readout

6
DSS LAYOUT
Front-end
Back-end
Control Room
Gateway
DSS COM
NTP Server Oracle DB
CERN LAN
7
Gas System

• GAS Controls
• The LHC experiment Gas Control System aims at
  providing LHC experiments with a unique control
  system (supervision and process control layers)
  for the 23 gas systems of the four LHC
  experiments
• Several other related gas projects now underway

8
Gas System

• Schneider PLC based system
• Structured network for local communications
• PCs for local display and control
• PVSS used for interfacing
• PLCs are all directly on Ethernet
• Possibility of Gateway interface to TechNet

9
(No Transcript)
10
General Requirements

• Ability to use NICE environment to set up Windows
  PCs
• Possibility to custom load specific OS
  configuration
• Use of NICE GP Deny Groups to prevent
  installation of unwanted NICE applications
• Ability to load specific software on target PCs
• Load virus scans to run as required
• Prevent unwanted operator messages and system
  updates
• Controlled access to equipment for software
  updates

11
Specific Requirements

• Allow normal access for authorized users
• For local access
• From CERN and TechNet networks
• Prevent any unauthorized access to controlled
  equipment
• Unintentional access
• Deliberate system hacking from inside or outside
  of the CERN site
• Virus or Trojan ingress

12
Network Access
Internet

CERN Firewall
CERN LAN
Fuse

• DSS
• Back End

• DSS
• Front End

TechNet
DSS PLC

• Private Network