Author: Golonka, P.
Paper Title Page
MOPGF020 Detector and Run Control Systems for the NA62 Fixed-Target Experiment at CERN 1
 
  • P. Golonka, R. Fantechi, M. Gonzalez-Berges, F. Varela
    CERN, Geneva, Switzerland
  • V. Falaleev
    JINR, Dubna, Moscow Region, Russia
  • N. Lurkin
    Birmingham University, Birmingham, United Kingdom
  • R.F. Page
    University of Bristol, Bristol, United Kingdom
 
  The Detector and Run Control systems for the NA62 experiment, which started physics data-taking in Autumn of 2014, were designed, developed and deployed in collaboration between the Physics and Engineering Departments at CERN. Based on the commonly used control frameworks, UNICOS and JCOP, they were developed with scarce manpower while meeting the challenge of extreme agility, evolving requirements, as well as integration of new types of hardware. This paper presents, for the first time, the architecture of these systems and discusses the challenges and experience in developing and maintaining them during the first months of operation.  
poster icon Poster MOPGF020 [4.620 MB]  
 
MOPGF021 Database Archiving System for Supervision Systems at CERN: a Successful Upgrade Story 1
 
  • P. Golonka, M. Gonzalez-Berges, J. Hofer, A. Voitier
    CERN, Geneva, Switzerland
 
  Almost 200 controls applications, in domains like LHC magnet protection, cryogenics and vacuum systems, cooling-and-ventilation or electrical network supervision, have been developed and are currently maintained by the CERN Industrial Controls Group in close collaboration with several equipment groups. The supervision layer of these systems is based on the same technologies as 400 other systems running in the LHC Experiments (e.g. WinCC Open Architecture, Oracle). During the last two-year LHC Long Shutdown 1, the 200 systems have been successfully migrated from a file-based archiver to a centralized infrastructure based on Oracle databases. This migration has homogenized the archiving chain for all CERN systems, and at the same time has presented a number of additional challenges. The paper presents the design, the necessary optimizations and the migration process that allowed us to meet unprecedented data-archiving rates (unachievable for the previously used system), and liaise with the existing long-term storage system (LHC LoggingDB) to assure data-continuity.  
poster icon Poster MOPGF021 [3.505 MB]  
 
MOPGF039 TIP: An Umbrella Application for all SCADA-Based Applications for the CERN Technical Infrastructure 1
 
  • F. Varela, Ph. Gayet, P. Golonka, M. Gonzalez-Berges, J. Pache, P. Sollander
    CERN, Geneva, Switzerland
  • L. Goralczyk
    AGH University of Science and Technology, Kraków, Poland
 
  The WinCC Open Architecture (OA) SCADA package and the controls frameworks (UNICOS, JCOP) developed at CERN were successfully used to implement many critical control systems at CERN. In the recent years, the supervision and the controls of many technical infrastructure systems (electrical distribution, cooling and ventilation, etc.) were rewritten to use this standard environment. Operators at the Technical Infrastructure desk, who monitor these systems, are forced to continuously switch between the applications that allow them to monitor these infrastructure systems. The Technical Infrastructure Portal (TIP) was designed and is being developed to provide centralized access to all technical infrastructure systems and extend their functionality by linking to a powerful localization system based on GIS. Furthermore, it provides an environment for operators to develop views that aggregate data from different sources, like cooling and electricity.  
poster icon Poster MOPGF039 [1.392 MB]  
 
WEPGF010 Securing Access to Controls Applications with Apache httpd Proxy 1
 
  • P. Golonka
    CERN, Geneva, Switzerland
  • H.T.T. Kamarainen
    JAMK, Jyväskylä, Finland
 
  Many commercial systems used for controls nowadays contain embedded web servers. Secure access to these, often essential, facilities is of utmost importance, yet it remains complicated to manage for different reasons (e.g. obtaining and applying patches from vendors, ad-hoc oversimplified implementations of web-servers are prone to remote exploit). In this paper we describe a security-mediating proxy system, which is based on the well-known Apache httpd software. We describe how the use of the proxy made it possible to simplify the infrastructure necessary to start WinCC OA-based supervision applications on operator consoles, providing, at the same time, an improved level of security and traceability. Proper integration with the CERN central user account repository allows the operators to use their personal credentials to access applications, and also allows one to use standard user management tools. In addition, easy-to-memorize URL addresses for access to the applications are provided, and the use of a secure https transport protocol is possible for services that do not support it on their own.  
poster icon Poster WEPGF010 [1.819 MB]  
 
WEPGF069 Integrating Web-Based User Interface Within Cern's Industrial Control System Infrastructure 1
 
  • A. Voitier, P. Golonka, M. Gonzalez-Berges
    CERN, Geneva, Switzerland
 
  For decades the user interfaces of industrial control systems have been primarily based on native clients. However, the current IT trend is to have everything on the web. This can indeed bring some advantages such as easy deployment of applications, extending HMIs with turnkey web technologies, and apply to supervision interfaces the interaction model used on the web. However, this also brings its share of challenges: security management, ability to spread the load and scale out to many web clients, etc… In this paper, the architecture of the system that was devised at CERN to decouple the production WINCC-OA based supervision systems from the web frontend and the associated security implications are presented together with the transition strategy from legacy panels to full web pages using a stepwise replacement of widgets (e.g. visualization widgets) by their JavaScript counterpart. This evolution results in the on-going deployment of web-based supervision interfaces proposed to the operators as an alternative for comparison purposes.  
poster icon Poster WEPGF069 [0.975 MB]