Appendix B Design Criteria
1.3 SCADA System Overview
The simplified SCADA block diagram in Appendix A shows an overview of the complete SCADA system. Major elements include the following:
• DPW Business Network: This is an existing network used by DPW for management, administration, and general purpose computing and is expected to include an existing interface through an Internet Service Provider (ISP) to the Internet. Users on this
GNV310133631748(APPB).DOC/081640018 B-4
network including managers, planners and engineers need access to SCADA data to fulfill their responsibilities. Interface the business network to the SCADA system as follows:
1. Connect the business network to the firewall in the DPW Operations Data Center.
2. Except for virtual private network (VPN) traffic, limit business network traffic to the DPW Operations Data Center located on demilitarized zone (DMZ) network
established by the Firewall connecting the Business Network, the DPW Operations Data Center and the DPW Operations Network.
3. Other than VPN traffic block all traffic between the business network and the DPW Operations Network.
Provide SCADA historian and information server clients on business network
workstations requiring access to SCADA data. Provide VPN clients on business network workstations that will be used for direct connection to the SCADA system. Authenticate VPN users on the SCADA network.
• Operations Data Center: On the DMZ network established by the firewall, provide an Operations Data Center for central collection, storage and processing of near real-time and historical operations data from wastewater treatment plants and pump station collection systems, and for presenting up-to-date process information to users on the business network.
Locate the Operations Data Center in a physically secure location with access limited to those responsible for operation and maintenance of the data center. Provide both
adequate, reliable temperature and humidity control and reliable, quality electric power.
Also, provide uninterruptible power supply (UPS) capacity for maintaining control center operation for one hour.
Locate the following SCADA system components in the Operations Data Center:
1. The historian servers which collect information from scanners installed on operator workstations in each of the three control centers, store the information, and retrieve and reduce information for presentation to operators at operator workstations and to business network users via historian clients installed on business network
computers. On historian servers, also provide applications programming to reliably and efficiently extract selected historical information and load the historical
information into C-P’s Oracle relational database.
2. Information servers which collect up-to-date process information from each of the four control centers for presentation to operators at operator workstations and to business network users via information server clients installed on business network computers.
• The DPW Operations Network: Establish an Operations Network for interconnecting the four control centers and the Operation Data Center. Provide a network that allows adequately credentialed users connected to any of the four process control networks full monitoring and control access to all four control systems, and that supports VPN access to users connected to the business network.
GNV310133631748(APPB).DOC/081640018 B-5
Use wireline services, such as Multi-Protocol-Label-Switching (MPLS), provided by telephone companies with a minimum of 1.5 million bits per second (Mbps) symmetric capacity for each connection. Work with C-P in selecting the service and establishing a Service Level Agreement (SLA). Coordinate this work with the digital cellular network required for the collection system to both ease service management by C-P and take advantage of any available price reductions that might be available when both networks are provided by a single provider.
• The WWTP Distributed Control Systems: Provide an autonomous, self-sufficient Distributed Control System (DCS) for each of the three major WWTPs. Each DCS includes the following:
1. Control Center housing DCS servers and workstations. Use KVM extenders to support operator workstation interfaces in the control rooms. Locate the control centers in a physically secure location with access limited to those responsible for operation and maintenance of the control center. Provide both adequate, reliable temperature and humidity control and reliable, quality electric power. Because, plants do not have standby electric generators, provide UPS capacity for maintaining control center operation for one hour.
2. Control Rooms. Locate the keyboard, monitor, mouse and speakers for each workstation in a plant operations control room. Provide both adequate, reliable temperature and humidity control and reliable, quality electric power. Because, plants do not have standby electric generators, provide uninterruptible power supply (UPS) capacity for maintaining control room operation for one hour.
3. DCS Redundant Controllers. Distribute controllers throughout the plant in
temperature and humidity controlled electrical rooms Because, plants do not have standby electric generators, provide UPS capacity for maintaining controller operation for one hour. Select controller locations to provide a balance between installed cost and signal wire length. Where necessary to control installed costs, use remote input and output (I/O) for monitoring and control of systems with less critical monitoring and control requirements. Use the WWTP Design Criteria and WWTP I/O spreadsheet in appendices E and G in selecting signals for monitoring and control.
4. Redundant, Star Ethernet Network. Provide a redundant star network in accordance with DCS manufacturer standards. Locate redundant root switches in data and control centers. Locate redundant primary fan-out switches as needed in data and control centers, and controller cabinets.
• The Collection Control Systems: Provide a collection control system that provides local, autonomous, programmable logic controller (PLC) monitoring and control of each pump station, as well as remote monitoring and limited remote control from mobile wireless laptop workstations connected to the central Collection System Control Center.
The Collection Control System includes the following:
1. Local PLC Monitoring and Control. Local control panels housing a PLC and local human machine interface (HMI) with text and bar-graph displays and four-key menu-driven keypad data entry. Use the Pump Station Design Criteria and I/O spreadsheet in appendices D and F in selecting signals for monitoring and control.
GNV310133631748(APPB).DOC/081640018 B-6
Also, comply with applicable portions of the DPW Pump Station Design Standards.
Include battery backup power capable of maintaining the PLC and the communications interface in operation for 4-hours.
2. A Control Center housing HMI Servers and a DCS workstation. Relocate the existing control center from the Tier IV data center to a physically secure location with access limited to those responsible for operation and maintenance of the control center.
Provide both adequate, reliable temperature and humidity control and reliable, quality electric power. Configure the DCS workstation to use the existing HMI server’s object linking and embedding for process control (OPC) interface to connect to the active HMI server and provide Collection System monitoring and control from the distributed DCS system, as well as Collection System historical data collection.
Also, provide UPS capacity for maintaining control center operation for one hour.
3. Mobile Wireless Laptop Workstations. Provide hardened mobile wireless workstations for use by mobile operators and maintenance staff.
4. Digital Cellular Network. Convert the existing 1xRTT (1 times Radio Transmission Technology) digital cellular network to CDMA-FDD (Code Division Multiple Access with Frequency Division Duplex). Also, add a fixed end service (FES) at the control center to moved the network off the Internet and onto the providers private
network.
1.4 Terminology
Terminology and acronyms used in this Technical Memorandum are shown in Table 1-1.
TABLE1-1
Terminology And Acronyms
Term Or Acronym Meaning
ADO ActiveX Data Objects
API Applications Programming Interface
APPLICATION SOFTWARE Software to provide functions unique to this project and that are not provided by standard software alone. Configuring data bases, tables, displays, reports, parameter lists, ladder logic, and control strategies required to implement functions unique to this project
City City of Baton Rouge, Louisiana
CMMS Computerized Maintenance Management System
C-P City of Baton Rouge-East Baton Rouge Parish
DCS Distributed Control System
DMARC The point of demarcation for Verizon. It is the interface point where all facilities on one side are maintained by the Verizon and all facilities on the other are maintained by the City.
DMZ Demilitarized Zone
DPW City of Baton Rouge Department of Public Works
FES Fixed End Service
FIM Facilities Information Management
HMI Human Machine Interface
GNV310133631748(APPB).DOC/081640018 B-7
TABLE1-1
Terminology And Acronyms
Term Or Acronym Meaning
I/O Input/Output
IP Internet Protocol
ISP Internet Service Provider
KVM Keyboard, Video, Mouse
LAN Local Area Network
Mbps Million bits per second
MPLS Multi-Protocol Label Switching
OPC Object Linking and Embedding for Process Control
ORT Operational Readiness Test
OWS Operator Workstation
PAT Performance Acceptance Test
PLC Programmable Logic Controller
PICS Process Instrumentation and Control Systems
PROCESS MONITORING AND CONTROL SOFTWARE
Standard software packages, independent of the specific process control project on which they are used, which provide process monitoring, control and data collection capability.
RTU Remote Terminal Unit
SCADA Supervisory Control and Data Acquisition System-generally used in reference to system wide control and data acquisition system
SDT Staging Site Demonstration Test
SERVER Computer specifically designed for remote terminal operation and processing high volumes of I/O and simultaneous operations
SLA Service Level Agreement
STANDARD SOFTWARE Commercial Software packages that are independent of the project on which they are used. Standard software includes system software and process monitoring and control software.
SYSTEM SOFTWARE Application independent software developed by digital equipment manufacturers and software companies. Includes but is not limited to operating systems, programming languages such as C++, assemblers, file management utilities, text editors, debugging aides and diagnostics.
TELEMETRY Communication between central servers and remote facilities; includes such communication modes as frame relay, dedicated fiber optic or copper cable, UHF and spread spectrum radio, leased telephone line, autodialers, etc.
UPS Uninterruptible Power Supply
VERIZON Telephone company providing telephone services including plain old telephone, cellular, frame relay, Cellular Digital Packet Data [CDPD] or other telephone services.
VPN Virtual Private Network
WORKSTATION High-end personal computer for use by an operator in monitoring and controlling remote facilities.
WWTP Wastewater Treatment Plant
GNV310133631748(APPB).DOC/081640018 B-8