11第十一章DeltaV安全性解說(shuō)

EMERSON

Process

Management

Educational

ServicesCopyrighted

Material

/

Duplication

ProhibitedDeltaV安全性目標(biāo)EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-2通過(guò)本模塊的學(xué)習(xí)，您將能夠了解：參數(shù)、域和功能的安全性用戶組功能鎖Flexlock的應(yīng)用電子簽名工作站選項(xiàng)DeltaV數(shù)據(jù)庫(kù)的導(dǎo)出AMSDeltaV功能鎖和密鑰EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-3通過(guò)使用功能鎖和密鑰，DeltaV系統(tǒng)實(shí)現(xiàn)參數(shù)、域、功能和電子簽名的安全性。DeltaV功能鎖和密鑰EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-4·

Control

—向操作員分配需要寫入或修改參數(shù)的功能鎖，以控制過(guò)程。例:MODE,SP,OUT·

Restricted

Control

—向管理者和工程師分配用于組態(tài)過(guò)程參數(shù)或域的功能鎖Example:

BKCAL_IN,

FF_ENABLE,RESTART_ENABLE·

Tuning

—分配給維護(hù)技術(shù)人員和管理者用于整定過(guò)程性能的功能鎖Example:

GAIN,

RESET,

HI_LIMDeltaV功能鎖和密鑰EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-5System

Records

—分配影響系統(tǒng)記錄的功能鎖例:ENABDiagnostic

—向影響系統(tǒng)的診斷信息的參數(shù)和域分配的功能鎖Alarms

—向影響報(bào)警處理的參數(shù)和域分配的功能鎖 例:HORN,MACK,NALMUser

Lock

1到10

—可分配給允許實(shí)現(xiàn)定制安全方案的參數(shù)和域的功能鎖Batch

Operate

—允許用戶通過(guò)此密鑰能夠操作DeltaVBatch系統(tǒng)分配的功能鎖DeltaV功能鎖和密鑰EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-6Build

Recipe

—允許用戶通過(guò)此密鑰使用配方工作室Can

Calibrate

—允許用戶通過(guò)此密鑰使用AMS設(shè)備組態(tài)和標(biāo)定功能Can

Configure

—允許用戶通過(guò)此密鑰更改組態(tài)數(shù)據(jù)庫(kù)Can

Download

—允許用戶向控制網(wǎng)絡(luò)中的節(jié)點(diǎn)下裝組態(tài)System

Admin

—允許用戶通過(guò)此密鑰訪問(wèn)數(shù)據(jù)庫(kù)管理共苦，以創(chuàng)建、復(fù)制和重命名數(shù)據(jù)庫(kù)。參數(shù)安全性通過(guò)DeltaV

Explorer訪問(wèn)Parameter

Security

Properties

對(duì)話框：System

Configuration

Setup

Security

Parameter

SecurityPropertiesEMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-7參數(shù)安全性EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-8“可寫”參數(shù)已經(jīng)分配有功能鎖。在Properties對(duì)話框允許改變功能鎖的分配。域安全性通過(guò)DeltaV

Explorer訪問(wèn)Field

Security

Properties對(duì)話框：System

Configuration

Setup

Security

Field

SecurityPropertiEMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-9域安全性EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-10“可寫”參數(shù)已經(jīng)分配有功能鎖。在Proerties對(duì)話框允許改變功能鎖的分配。功能安全性通過(guò)DeltaV

Explorer訪問(wèn)Function

Security

Properties對(duì)話框System

Configuration

Setup

Security

Function

SecurityPropertiesEMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-11功能安全性EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-12“可寫”功能已經(jīng)分配有功能鎖。在Properties

對(duì)話框允許改變功能鎖的分配。User

Manager可從DeltaV

Explorer界面通過(guò)選擇

User

Manager

按鈕戶管理器。此時(shí)出現(xiàn)DeltaV

User

Manager對(duì)話框：訪問(wèn)DeltaV用EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-13用戶管理器EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-14如上圖所示的DeltaV

User

Manager

對(duì)話框允許添加或刪除用戶和用戶組用戶屬性EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-15在用戶窗口的空白區(qū)域點(diǎn)擊鼠標(biāo)右鍵并從下拉菜單中選擇New，可訪問(wèn)DeltaVGeneralUser的屬性窗口。當(dāng)出現(xiàn)NewUser窗口時(shí)，General選項(xiàng)卡處于選中狀態(tài)。用戶屬性EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-16使用如上圖所示的New

User

對(duì)話框的General選項(xiàng)卡，可添加和標(biāo)識(shí)用戶。注:按幫主按鈕可獲得特定對(duì)象的詳細(xì)信息用戶屬性在用戶窗口的空白區(qū)域點(diǎn)擊鼠標(biāo)右鍵并從下拉菜單中選擇New，可訪問(wèn)DeltaVGeneralUser的屬性窗口。當(dāng)出現(xiàn)NewUser窗口時(shí)，General選項(xiàng)卡處于選中狀態(tài)。EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-17用戶屬性EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-18使用如上圖所示的New

User對(duì)話框的General選項(xiàng)卡，可添加和標(biāo)識(shí)用戶。注：按幫主按鈕可獲得特定對(duì)象的詳細(xì)信息用戶屬性從NewUser對(duì)話框選擇Advanced選項(xiàng)卡，可訪問(wèn)Advanced用戶窗口。EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-19用戶屬性EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-20使用New

User對(duì)話框上的Advanced選項(xiàng)卡，可更改用戶賬戶和密碼狀態(tài)。高級(jí)用戶使用New

User對(duì)話框上的Advanced選項(xiàng)卡，可更改用戶賬戶和密碼狀態(tài)。EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-21高級(jí)用戶EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-22使用New

User對(duì)話框上的Advanced選項(xiàng)卡，可更改用戶賬戶和密碼狀態(tài)。屬性組EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-23在Group窗口中雙擊某個(gè)Groups，可訪問(wèn)DeltaV

Properties

For

Group窗口。當(dāng)此窗口出現(xiàn)時(shí)，General選項(xiàng)卡處于選中狀態(tài)。屬性組EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-24使用如上圖所示的Properties

For

Group對(duì)話框，可添加或修改組。使用General選項(xiàng)卡可輸入用戶組的名稱和描述。組成員從Properites

For

Group對(duì)話框選擇Members選項(xiàng)卡，可訪問(wèn)Members窗口。EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-25組成員用Properties

For

Group對(duì)話框上的Members選項(xiàng)卡，可添加或刪除成員，從而修改用戶組。注:按幫主按鈕可獲得特定對(duì)象的詳細(xì)信息EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-26組密鑰從Properties

For

Group對(duì)話框選擇Keys選項(xiàng)卡，可訪問(wèn)Keys窗口。EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-27組密鑰用Properties

For

Group對(duì)話框上的Keys選項(xiàng)卡，可向當(dāng)前被創(chuàng)建或修改的組授予密鑰或從組刪除密鑰。注:按幫主按鈕可獲得特定對(duì)象的詳細(xì)信息EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-28FlexlockFlexLock僅允許具有必要權(quán)限的用戶訪問(wèn)桌面，從而提供一個(gè)安全的操作環(huán)境。當(dāng)用戶登錄DeltaV時(shí)，會(huì)自動(dòng)運(yùn)行DeltaV

FlexLock應(yīng)用程序。FlexLock可使用的桌面有Windows桌面和DeltaV桌面。具有Windows桌面訪問(wèn)權(quán)限的用戶可以使用XP操作系統(tǒng)和Deltav桌面。不具有Windows桌面訪問(wèn)權(quán)限的用戶只能使用DeltaV桌面。Windows桌面訪問(wèn)權(quán)限涵蓋所有DeltaV程序以及WindowsXp中可用的所有程序。DeltaV桌面權(quán)限把用戶限制于DeltaV

Operate和其它相關(guān)應(yīng)用程序，為了保證您的環(huán)境的安全性，應(yīng)考慮僅為操作員授予DeltaV桌面訪問(wèn)權(quán)限，為組態(tài)工程師授予

訪問(wèn)DeltaV桌面和Windows桌面的權(quán)限。EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-29FlexlockEMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-30當(dāng)用戶等處時(shí)，登錄的下一個(gè)用戶會(huì)到FlexLock應(yīng)用程序的DeltaV桌面按鈕可用。這表明當(dāng)前用戶已切換到DeltaV桌面。當(dāng)沒(méi)有Windows桌面訪問(wèn)權(quán)限的任何用戶試圖切換到Windows桌面時(shí)，會(huì)受到一條消息，提示其缺少正確的權(quán)限，并提示輸入管理員名稱和密碼。如果輸入正確的管理員密碼，F(xiàn)lexLock會(huì)把用戶切換到Windows桌面。如果希望從Windows桌面退出FlexLock應(yīng)用程序，可選擇：Start

DeltaV

Engineering

FlexLock此時(shí)將返回到DeltaV桌面重要：無(wú)法從DeltaV桌面退出FelxLock應(yīng)用程序練習(xí)–定義用戶EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-31此練習(xí)需要您完成下列任務(wù)：任務(wù)1:創(chuàng)建具有OPERATE權(quán)限和廠區(qū)限制的用戶任務(wù)2：創(chuàng)建具有TUNE

權(quán)限的用戶任務(wù)3：下裝并驗(yàn)證練習(xí)–定義用戶EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-32第一步：創(chuàng)建具有OPERSTE權(quán)限和下列屬性的用戶：名稱

OperatorA全名

Alpha

Operator密碼

operatora權(quán)限

僅適用于PLANT_AREA_A的OPERSTE權(quán)限第二步：創(chuàng)建具有TUNE權(quán)限和下列屬性的用戶：名稱

Supervisor1全名

Sarge

Supervisor密碼

supervisor1權(quán)限

Sitewide

TUNE權(quán)限和下裝能力練習(xí)–定義用戶EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-33第三步：下裝工作第四步：通過(guò)登錄XP來(lái)驗(yàn)證a.

關(guān)閉所有應(yīng)用程序

b.開(kāi)始

關(guān)機(jī)

注銷當(dāng)前用戶并以新用戶登錄第五步：驗(yàn)證每個(gè)新用戶的功能注:如果用戶不具有Windows桌面訪問(wèn)權(quán)限，在選擇注銷按鈕之前可按Ctrl/Delete鍵主工程師站軟件EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-34包含的功能組態(tài)數(shù)據(jù)庫(kù)組態(tài)軟件包在線控制工作室連續(xù)歷史庫(kù),≤250個(gè)參數(shù)診斷事件記錄

FlexlockDeltaV

Operate雙顯示器過(guò)程歷史視圖可添加的選項(xiàng)Basic

BatchOPC服務(wù)，250個(gè)數(shù)據(jù)值

OPC

MirrorOPC歷史服務(wù)器

OPC報(bào)警與事件遠(yuǎn)程客戶端AMS只能設(shè)備管理器（客戶端服務(wù)器）不允許的選項(xiàng)歷史參數(shù)庫(kù),>250個(gè)參數(shù)

DeltaV

Web服務(wù)器OPC服務(wù)器,>250

data個(gè)數(shù)值用于應(yīng)用站的遠(yuǎn)程接入服務(wù)器（RAS）包含有相應(yīng)的系統(tǒng)授權(quán)MPC

OperatePredictInspect

with

InSightTune

with

InSight配方工作室批量操作員界面工程師站軟件EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-35可添加的選項(xiàng)Tune

with

InSightOPC歷史服務(wù)器AMS只能設(shè)備管理器診斷事件記錄

FlexlockDeltaV

Operate雙顯示器過(guò)程歷史視圖配方工作室包含的功能組態(tài)軟件包在線控制工作室連續(xù)歷史庫(kù),≤250個(gè)參數(shù)

Inspect

with

InSightBasic

BatchAdvance

BatchProfessional

Batch組態(tài)審核跟蹤(版本管理)組態(tài)數(shù)據(jù)庫(kù)

連續(xù)歷史庫(kù),>250個(gè)參數(shù)DeltaV

Connect-Bailey接口OPC服務(wù)器,250或>250個(gè)數(shù)據(jù)值

OPC

MirrorOPC

PagerOPC報(bào)警與事件用于應(yīng)用展或主工程師站的遠(yuǎn)程接入服務(wù)器（RAS）不允許的選項(xiàng)包含有相應(yīng)的系統(tǒng)授權(quán)MPC

OperatePredictNeural配方工作室批量操作員界面應(yīng)用站軟件EMERSON

Process

Management

–

Educational

ServicesCourse

7009

-

Rev

7

-

2/1/04Copyrighted

Material

/

Duplication

Prohibited10-36可添加的選項(xiàng)組態(tài)工作室軟件包在線控制工作室

Tune

with

Insight診斷事件記錄

DeltaV

Operate過(guò)程歷時(shí)視圖配方歷史視圖配方工作室遠(yuǎn)程客戶端AMS只能設(shè)備管理器包含的功能連續(xù)歷史庫(kù),≤250個(gè)參數(shù)

DeltaV

InspectFlexlockBasic

BatchAdvance

BatchProfessional

Batch組態(tài)審核跟蹤l(版本管理l)組態(tài)數(shù)據(jù)庫(kù)連續(xù)歷史庫(kù),>250個(gè)參數(shù)DeltaV

Connect-Bailey接口DeltaV

InspectDeltaV

Web服務(wù)器OPC服務(wù)器,250

o或>250個(gè)數(shù)據(jù)值

OPC

MirrorOPC