ICALEPCS2015 - List of Authors (Golonka, P.)

Paper	Title	Page
MOPGF020	Detector and Run Control Systems for the NA62 Fixed-Target Experiment at CERN	125
	P. Golonka, R. Fantechi, M. Gonzalez-Berges, F. Varela CERN, Geneva, Switzerland V. Falaleev JINR, Dubna, Moscow Region, Russia N. Lurkin Birmingham University, Birmingham, United Kingdom R.F. Page University of Bristol, Bristol, United Kingdom
	The Detector and Run Control systems for the NA62 experiment, which started physics data-taking in Autumn of 2014, were designed, developed and deployed in collaboration between the Physics and Engineering Departments at CERN. Based on the commonly used control frameworks, UNICOS and JCOP, they were developed with scarce manpower while meeting the challenge of extreme agility, evolving requirements, as well as integration of new types of hardware. This paper presents, for the first time, the architecture of these systems and discusses the challenges and experience in developing and maintaining them during the first months of operation.
	Poster MOPGF020 [4.624 MB]
Export •	reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)

MOPGF021	Database Archiving System for Supervision Systems at CERN: a Successful Upgrade Story	129
	P. Golonka, M. Gonzalez-Berges, J. Hofer, A. Voitier CERN, Geneva, Switzerland
	Almost 200 controls applications, in domains like LHC magnet protection, cryogenics and vacuum systems, cooling-and-ventilation or electrical network supervision, have been developed and are currently maintained by the CERN Industrial Controls Group in close collaboration with several equipment groups. The supervision layer of these systems is based on the same technologies as 400 other systems running in the LHC Experiments (e.g. WinCC Open Architecture, Oracle). During the last two-year LHC Long Shutdown 1, the 200 systems have been successfully migrated from a file-based archiver to a centralized infrastructure based on Oracle databases. This migration has homogenized the archiving chain for all CERN systems, and at the same time has presented a number of additional challenges. The paper presents the design, the necessary optimizations and the migration process that allowed us to meet unprecedented data-archiving rates (unachievable for the previously used system), and liaise with the existing long-term storage system (LHC LoggingDB) to assure data-continuity.
	Poster MOPGF021 [3.510 MB]
Export •	reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)

MOPGF039	TIP: An Umbrella Application for all SCADA-Based Applications for the CERN Technical Infrastructure	184
	F. Varela, Ph. Gayet, P. Golonka, M. Gonzalez-Berges, J. Pache, P. Sollander CERN, Geneva, Switzerland L. Goralczyk AGH University of Science and Technology, Kraków, Poland
	The WinCC Open Architecture (OA) SCADA package and the controls frameworks (UNICOS, JCOP) developed at CERN were successfully used to implement many critical control systems at CERN. In the recent years, the supervision and the controls of many technical infrastructure systems (electrical distribution, cooling and ventilation, etc.) were rewritten to use this standard environment. Operators at the Technical Infrastructure desk, who monitor these systems, are forced to continuously switch between the applications that allow them to monitor these infrastructure systems. The Technical Infrastructure Portal (TIP) was designed and is being developed to provide centralized access to all technical infrastructure systems and extend their functionality by linking to a powerful localization system based on GIS. Furthermore, it provides an environment for operators to develop views that aggregate data from different sources, like cooling and electricity.
	Poster MOPGF039 [1.396 MB]
Export •	reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)

WEPGF010	Securing Access to Controls Applications with Apache httpd Proxy	705
	P. Golonka CERN, Geneva, Switzerland H.T.T. Kamarainen JAMK, Jyväskylä, Finland
	Many commercial systems used for controls nowadays contain embedded web servers. Secure access to these, often essential, facilities is of utmost importance, yet it remains complicated to manage for different reasons (e.g. obtaining and applying patches from vendors, ad-hoc oversimplified implementations of web-servers are prone to remote exploit). In this paper we describe a security-mediating proxy system, which is based on the well-known Apache httpd software. We describe how the use of the proxy made it possible to simplify the infrastructure necessary to start WinCC OA-based supervision applications on operator consoles, providing, at the same time, an improved level of security and traceability. Proper integration with the CERN central user account repository allows the operators to use their personal credentials to access applications, and also allows one to use standard user management tools. In addition, easy-to-memorize URL addresses for access to the applications are provided, and the use of a secure https transport protocol is possible for services that do not support it on their own.
	Poster WEPGF010 [1.824 MB]
Export •	reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)

WEPGF069	Integrating Web-Based User Interface Within Cern's Industrial Control System Infrastructure	861
	A. Voitier, P. Golonka, M. Gonzalez-Berges CERN, Geneva, Switzerland
	For decades the user interfaces of industrial control systems have been primarily based on native clients. However, the current IT trend is to have everything on the web. This can indeed bring some advantages such as easy deployment of applications, extending HMIs with turnkey web technologies, and apply to supervision interfaces the interaction model used on the web. However, this also brings its share of challenges: security management, ability to spread the load and scale out to many web clients, etc… In this paper, the architecture of the system that was devised at CERN to decouple the production WINCC-OA based supervision systems from the web frontend and the associated security implications are presented together with the transition strategy from legacy panels to full web pages using a stepwise replacement of widgets (e.g. visualization widgets) by their JavaScript counterpart. This evolution results in the on-going deployment of web-based supervision interfaces proposed to the operators as an alternative for comparison purposes.
	Poster WEPGF069 [0.980 MB]
Export •	reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)

Paper

Title

Page

Detector and Run Control Systems for the NA62 Fixed-Target Experiment at CERN

125

P. Golonka, R. Fantechi, M. Gonzalez-Berges, F. Varela
CERN, Geneva, Switzerland
V. Falaleev
JINR, Dubna, Moscow Region, Russia
N. Lurkin
Birmingham University, Birmingham, United Kingdom
R.F. Page
University of Bristol, Bristol, United Kingdom

The Detector and Run Control systems for the NA62 experiment, which started physics data-taking in Autumn of 2014, were designed, developed and deployed in collaboration between the Physics and Engineering Departments at CERN. Based on the commonly used control frameworks, UNICOS and JCOP, they were developed with scarce manpower while meeting the challenge of extreme agility, evolving requirements, as well as integration of new types of hardware. This paper presents, for the first time, the architecture of these systems and discusses the challenges and experience in developing and maintaining them during the first months of operation.

Poster MOPGF020 [4.624 MB]

Export •

reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)

MOPGF021

Database Archiving System for Supervision Systems at CERN: a Successful Upgrade Story

129

P. Golonka, M. Gonzalez-Berges, J. Hofer, A. Voitier
CERN, Geneva, Switzerland

Almost 200 controls applications, in domains like LHC magnet protection, cryogenics and vacuum systems, cooling-and-ventilation or electrical network supervision, have been developed and are currently maintained by the CERN Industrial Controls Group in close collaboration with several equipment groups. The supervision layer of these systems is based on the same technologies as 400 other systems running in the LHC Experiments (e.g. WinCC Open Architecture, Oracle). During the last two-year LHC Long Shutdown 1, the 200 systems have been successfully migrated from a file-based archiver to a centralized infrastructure based on Oracle databases. This migration has homogenized the archiving chain for all CERN systems, and at the same time has presented a number of additional challenges. The paper presents the design, the necessary optimizations and the migration process that allowed us to meet unprecedented data-archiving rates (unachievable for the previously used system), and liaise with the existing long-term storage system (LHC LoggingDB) to assure data-continuity.

Poster MOPGF021 [3.510 MB]

Export •

reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)

MOPGF039

TIP: An Umbrella Application for all SCADA-Based Applications for the CERN Technical Infrastructure

184

F. Varela, Ph. Gayet, P. Golonka, M. Gonzalez-Berges, J. Pache, P. Sollander
CERN, Geneva, Switzerland
L. Goralczyk
AGH University of Science and Technology, Kraków, Poland

The WinCC Open Architecture (OA) SCADA package and the controls frameworks (UNICOS, JCOP) developed at CERN were successfully used to implement many critical control systems at CERN. In the recent years, the supervision and the controls of many technical infrastructure systems (electrical distribution, cooling and ventilation, etc.) were rewritten to use this standard environment. Operators at the Technical Infrastructure desk, who monitor these systems, are forced to continuously switch between the applications that allow them to monitor these infrastructure systems. The Technical Infrastructure Portal (TIP) was designed and is being developed to provide centralized access to all technical infrastructure systems and extend their functionality by linking to a powerful localization system based on GIS. Furthermore, it provides an environment for operators to develop views that aggregate data from different sources, like cooling and electricity.

Poster MOPGF039 [1.396 MB]

Export •

reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)

WEPGF010

Securing Access to Controls Applications with Apache httpd Proxy

705

P. Golonka
CERN, Geneva, Switzerland
H.T.T. Kamarainen
JAMK, Jyväskylä, Finland

Many commercial systems used for controls nowadays contain embedded web servers. Secure access to these, often essential, facilities is of utmost importance, yet it remains complicated to manage for different reasons (e.g. obtaining and applying patches from vendors, ad-hoc oversimplified implementations of web-servers are prone to remote exploit). In this paper we describe a security-mediating proxy system, which is based on the well-known Apache httpd software. We describe how the use of the proxy made it possible to simplify the infrastructure necessary to start WinCC OA-based supervision applications on operator consoles, providing, at the same time, an improved level of security and traceability. Proper integration with the CERN central user account repository allows the operators to use their personal credentials to access applications, and also allows one to use standard user management tools. In addition, easy-to-memorize URL addresses for access to the applications are provided, and the use of a secure https transport protocol is possible for services that do not support it on their own.

Poster WEPGF010 [1.824 MB]

Export •

reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)

WEPGF069

Integrating Web-Based User Interface Within Cern's Industrial Control System Infrastructure

861

A. Voitier, P. Golonka, M. Gonzalez-Berges
CERN, Geneva, Switzerland

For decades the user interfaces of industrial control systems have been primarily based on native clients. However, the current IT trend is to have everything on the web. This can indeed bring some advantages such as easy deployment of applications, extending HMIs with turnkey web technologies, and apply to supervision interfaces the interaction model used on the web. However, this also brings its share of challenges: security management, ability to spread the load and scale out to many web clients, etc… In this paper, the architecture of the system that was devised at CERN to decouple the production WINCC-OA based supervision systems from the web frontend and the associated security implications are presented together with the transition strategy from legacy panels to full web pages using a stepwise replacement of widgets (e.g. visualization widgets) by their JavaScript counterpart. This evolution results in the on-going deployment of web-based supervision interfaces proposed to the operators as an alternative for comparison purposes.

Poster WEPGF069 [0.980 MB]

Export •

reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)