Can the operator enter the system via the DCS control panel to modify data?

It depends on the type of data information in question: 1. The data information that can be modified by the operator via the controls generally does not affect the normal operation of the system; 2. Important data information in the DCS, such as configuration data, must be modified using specialized configuration software, and ordinary operators do not have access to such tools. 3. It is possible that the operator modified the system’s data information using the operational privileges of the system engineer, but this should not affect the normal operation of the system; it may only cause deviations in quality.

Parameters can be modified through the operator station, unless that parameter is designed to be altered by the operator and requires manual intervention for such changes; only in such cases can the operator modify it. Other parameters do not allow the operator to make any changes to them – even if they access the control panel, they are unable to modify those parameters (proper permission assignments are made during DCS planning and configuration). Even if changes are made at the operator station, it still can’t be downloaded, right? If the operator uses the engineer station and has the engineer’s permissions, then of course changes can be made.

I disagree with the statement above. The original poster on floor 1, please clarify your question: what software are you using (including hardware, software version, operating system)? Some software has bugs, and we use conventional methods to test whether the keyboard is locked; actual operators take different approaches. I’ve encountered people who manage to get inside. When asked the system manufacturer, they said they had also not noticed this issue.

It is entirely possible; in the system we use, every action performed by the operator on the computer is recorded. When an operator realizes that they have made a mistake, they try not to let others find out, so as to avoid things like fines. There is thus a “motivation” to alter data records. Being able to gain access to the DCS system is like a competition between cat and mouse to see who’s stronger; if the protection measures of the DCS system are effective, ordinary people cannot get in, unless they are agents like those in movies. Also, the administrator passwords for conventional DCS systems are prone to being leaked, and maintenance engineers fail to change these passwords in a timely manner. In this way, it is easy for operators to access the system backend. Therefore, for a more reliable protection system, a dual-lock mechanism combining software locking and hardware locking can be adopted.

There are two possibilities. One is that he hasn’t exited engineer mode, and the other is that he knows the engineer password.

In fact, each operation station of a DCS has an operation log, which records all actions taken by anyone at any time. DCS maintenance personnel can review these records to determine whether someone has accessed the engineer level. Of course, if the DCS maintenance staff reveal the password while performing system maintenance, others may be able to gain access to the engineer mode; therefore, it is necessary for system maintenance personnel to change the password after a certain period of time

The issue wasn’t clarified – which parameters need to be modified? Modifying parameters online does not require a DOWNLOAD. It’s just that during the next DOWNLOAD, if you don’t upload it, the changes will be lost. It has returned to the original parameters again. There are two possibilities: 1. The scope of the operator’s permissions. 2. The engineer’s password is leaked or they forget to log out.

It is understood that the control panel used by the operator consists of hidden letter keys, and some letters are not yet included. In this way, if the engineer permission password is set properly, even if the operator knows that password, it will not be possible to enter the engineer mode just by using the operation panel – is that correct?

Let’s talk more about this knowledge

There is permission to enter the DCS to modify data. Only engineers or configuration personnel with appropriate permissions can access the DCS configuration interface.

It’s possible; even operators can be computer experts, and software passwords can be easily cracked. The Windows password here has been changed too

I don’t think so. Operators generally don’t touch the computer casually, let alone change its parameters. They can’t afford to incur losses due to accidental actions; they’re aware of that. Unless they’re looking for some excitement after having had their fill~~:lol :lol

One is that he hasn’t exited engineer mode, and the other is that he knows the engineer password

Typically, DCS systems keep records of operator actions; as long as this function is enabled, it is possible to determine when certain operations were performed.

Operators cannot change parameters; only operation records are kept – these are two different concepts

The status of different system operation stations varies; some are smaller in size. In practice, an operation station can also serve as an engineer station, though an engineer’s password is required to access the system for making modifications. Otherwise, it’s impossible to get in. Similarly, as long as the operator knows the engineer’s access password, they can modify the system; in other words, it’s a matter of permissions

What I encountered was the DCS system from Shanghai FOXBORO. The operator accessed the configuration interface through the alarm screen, changed the AIN module to manual mode, and then we changed it back in the same way; this must be a BUG

It shouldn’t be possible. Besides, the operator doesn’t dare to change the data casually, unless that operator knows more than the instruments themselves

The original poster didn’t ask this clearly enough, right? Change a certain parameter? ? ? Let me ask first, what kind of DCS is yours? Many parameters can actually be modified on the operation screen, and some plants differentiate the operation permissions for DCS during configuration. Several DCS systems I’ve worked with allow certain parameters to be adjusted at the operator level.