General Specifications

Transcription

1 General Specifications LHS5170 Access Administrator Package (FDA:21 CFR Part 11 compliant) GS 33K10D40-50E GENERAL The Food and Drug Administration (FDA) issues 21 CFR Part 11 (Electronic Records; Electronic Signatures) for providing criteria of acceptance by FDA that electronic records and electronic signatures are equivalent to paper records and handwritten signatures executed on paper. This regulation enables to use of electronic technology for approvals. Two major functions are required to be FDA:21 CFR Part 11 compliant for control systems, which are the Access Control Functions and the Audit Trail Management Functions. Access Control Function (Personnel Authentication) To protect systems and data from any break-ins To control individual operations by authenticating an operator, a system engineer, a user of report package, and a recipe engineer Audit Trail Management Function Automatically record the history of Operation, Recipe Creation, Report Maintenance, and System Maintenance (When, Who, What, How, Why, Where) Regarding CENTUM VP, four major categories can be considered for 21 CFR Part 11 compliant : Operation and Monitoring Function (for operators); System View/Builder (for system engineers); Report Package (for report users); Recipe Management Function (for recipe engineers). This GS covers 21 CFR Part 11 compliant of System View/ Builder; Recipe Management Function. The operator management is included in the LHS1100 and LHM1101 Standard Operation and Monitoring Function. For details of FDA:21 CFR Part 11 compliant function in Report package, refer to LHS6530 Report Package (GS 33K05J20-50E). Report User Management Recipe Engineer Management System Engineer Management PC Master Recipe Management PC PC Application Program Management Ethernet Operator Management Operation Management Control Recipe Management HIS HIS Console Type Control network FCS Controller HIS: Human Interface Station FCS: Field Control Station F01E.ai Figure CENTUM VP System Configuration Yokogawa Electric Corporation , Nakacho, Musashino-shi, Tokyo, Japan Tel.: Fax.: GS 33K10D40-50E Copyright Aug (YK) 2nd Edition June 12, 2013 (YK)

2 2 FUNCTION SPECIFICATIONS Function Overview The following shows positions of access control function and audit trail management function. Engineer Authentication <Access Control> System View/ Recipe Management Start Start Audit Trail Management Viewer Builder Modification Record Detail Display (View Mode) Audit Trail Log Start Download Record Reference Modification Record Viewer Start Save Audit Trail Management Database Modification File Database Start General Text Editor Project <Audit Trail Management> F02E.ai Figure Positions of Access Control Function and Audit Trail Management Function

3 3 An Example of System Configuration A recipe management function runs on VP Batch systems. Recipe Management Recipe Data (Master Recipe) Recipe Management Function Engineering Engineering Function Project Database Control network Ethernet Save Restore Audit Trail Data Archived-PC Log Data Auxiliary Storage Device(*1) HIS Modification File Database FCS Audit Trail Save Audit Trail Reference *1: Tape or other removable media Figure An Example of System Configuration One PC which is dedicated to the audit trail data must be prepared. Operation and Monitoring function, Recipe Management Function, and Engineering Function (etc.) cannot be installed in the PC. Additionally, a server PC is used to store audit trail data in some system configurations. It depends on the total number of PCs in which Builder Function or Recipe Management Package is installed. For details, see Integrated Production Control System CENTUM VP System Overview (GS 33K01A10-50E, GS 33K01A20-50E). For the project with Recipe Management Function, the Audit Trail Management for Engineering Function and Recipe Management Function can be performed by only one PC with Audit Trail data-saved. System Administrator After the package is installed, various setting must be done to use Access Control Function and Audit Trail Management Function. An engineer who actual performs Engineering cannot set them. Only system administrators can set these requirements. (A system administrator is any person authorized to administer PCs.) The roles of a system administrator are shown below: System Administrator Network Administration Specify and edit the engineer security file Resister engineer name Setting the authority in each engineer group Specify and change the Audit Trail Management-database s location Start/Stop of Audit Trail Management Backup the data when the database of Audit Trail Management is full and delete the modification file. View the current records in the Audit Trail Management database. F03E.ai

4 4 Access Restriction Settings The following table lists the functions set by the system administrator. The table includes the required items in the LHS1100 and LHM1100 Standard Operation and Monitoring Function and LHS6530 Report Package. In addition, access-control requirement functions are classified into the following four: A: User ID registration management handling of user IDs and passwords B: Access control setting conditions for accessing the system C: Password policy Password setting conditions, etc. D: Windows direct access PC desktop environment A B C D User group Set location Optional packages required Security builder (*2) HIS group HIS utility (each HIS) Not required (included in standard applications) Engineering group (system builder, recipe builder, report builder) (*1) Access control utility (each PC) LHS5170 packages for FDA 21CFR Part 11 Function User ID registration and deletion X (*3) X Authorization setting for each user ID X (*3) X Password management (Local control/common control) X Automatic user logoff /automatic screen lock X X Check illegal logon attempts X (*3) X User lockout X X User ID release during lockout X X Password resetting X X Reconfirmation with double authentication X (*3) Biometric authentication (fingerprint authentication) X Optional Check expiration date of passwords X (*3) X Check obsolete passwords X X Check password-length X X Automatic logon Windows X (*3) X CENTUM desktop X (*3) X *1: LHS6530 Report Package is separately needed to perform report functions. *2: Registration and authorization of the engineer are needed as well as the system administrator authorization (PC administrator authorization) to operate the security builder. *3: The System administrator authorization is needed.

5 5 System Engineer Management (System View/Builder) Access Control Can limit the access to the project-database for each system engineer. This enables to clearly define the separate roles. For instance, system engineer A can modify the drawing files from one to ten of FCS0101. System engineer B cannot modify FCS data but can create, delete, and modify the graphic of entire HIS. Access Controllable Unit Access Control can be specified for each PC. Applicable Project of Access Control Access Control can perform on the default or the current project. It cannot perform on the user-defined project. System Engineer Group and System Engineer A system engineer group is a fundamental unit for specifying the authorities to perform engineering. All system engineers must belong to one of the groups and register the engineer name (ID); password; legal name. A system engineer can perform an engineering depending on the authority its group entitled. SYSTEM_GR GRAPHIC_GR A group for the graphic creator Cannot belong to multiple groups F04E.ai Figure An Example of System Engineers and Groups The Scope of Authority The minimum unit for entitling authorities to a system engineer group is a builder unit as the graphic or the drawing. The Authority Types Read: Can read files. If only Read is entitled, cannot select Overwrite and Save or Download on Builder. Cannot create an engineer group without Read authority. Write: Can write into files. Can also Save and Download the existing files. Create: Can create and delete an object on System View. To create a station or to delete a window, need to be entitled this authority.

6 6 System Engineer Authentication and Authority Check This verifies identity and if the system engineer has the authority to perform the job. Table System Engineer Authentication and the Timing of Authority Check Timing Engineer Authentication Authority Check Logging onto System View X Creating and Deleting a project (etc.) on System View (*2) X Starting Builder X Overwriting and Saving in Builder (*1) (*3) Downloading in Builder (*1) X Logging off from System View X: Will be performed. : Not performed. *1: When starting up Builder, System View will check the authority for Write. If the engineer does not have the authority, it is started in Read Only mode, so this person actually will not be able to select the menu. *2: Will be checked if the builder is with download function. *3: Will be checked if the builder is without download function. Audit Trail Management The modified engineering data is automatically saved in the pre-defined database. Recording the Audit Trail Log simultaneously enables to view WHEN; WHO; WHAT; HOW; WHY; WHERE (the data is modified). Detailed information of WHAT and HOW can be viewed as well. Selecting the modification file and starting Builder in View mode enables to display the differences in various-colored (Note: Some of Builders cannot display the differences. For details, refer to the Table Builder View Mode Functions ). Audit Trail Management Policy (Recording Timing) The Audit Trail Management data is saved only when engineering that affects the product quality is performed (downloading to current machine). Simultaneously, the data is saved in the Audit Trail Log file. Applicable Project of Modified Data Save Modified data of default or current project is saved, but the engineering data of user-defined project will not be saved. Not Applicable Builder Fieldbus Tools, OPC GS 33K10D40-50E June 12,

7 7 Table Builder View Mode Functions (1/2) Project Hierarchy Project Common BATCH FCS Builder Name Supported Functions Difference Display Other Functions Station Configuration X System-fixed Status Character String X Security X Alarm Priority X Alarm Processing Table X Alarm Status Character String X Block Status Character String X Plant Hierarchy X Engineering Unit Symbol X Switch Position Label X Multiple Project Connection X Operation Mark X Status Change Command Character String X State Transition Matrix X Process Management Configuration X Unit Common Block X Common Block X Product Control Train X FCS Constants X Process Cell X SEBOL SFC Sequence Unit Procedure IOM (other than Fieldbus) (*1) Fieldbus (*2) Communication Input/Output X Global Switch X Common Switch X Communication Input/Output Tag X Annunciator X Signal Event X Operator Guide X Print Message X Drawing Start Detail Function Block Overview (*3) Start Detail Function Block Detail (*4) Drawing/Logic Chart Status Display (option) X: Supported : Partly supported : Not supported *1: Cannot display the differences of the detailed setting information for each terminal. *2: Cannot display the differences of the block parameters of Fieldbus blocks. *3: Cannot display the differences of the details of each function block. *4: Cannot display the differences of the Sequence tables, General-purpose calculation formula, Logic chart, SFC, and SEBOL.

8 8 Table Builder View Mode Functions (2/2) HIS Project Hierarchy STN Builder Name Supported Functions Difference Display Other Functions Function Key Assignment X Sequence Message Request X HIS Constants X Panel Set X Scheduler X Trend Acquisition Pen Assignment Graphic Help Taglist Builders (Operator Guide Message) X Taglist Builders (Print Message) X Taglist Builders (Sequence Message) X Taglist Builders (Tag Name) X Taglist Builders (Area Name) X X: Supported : Not supported Recipe Engineer Management (Recipe Management) Access Control Can limit the access to create and modify Master Recipe for each recipe engineer. Access Controllable Unit Access Control can be specified for each PC. Applicable Project of Access Control Access Control can perform on all projects. Project attribute does not affect. Recipe Engineer Group and Recipe Engineer A recipe engineer group is a fundamental unit for specifying the authorities to operate recipe management functions. All recipe engineers must belong to one of the groups and register the recipe engineer name; password; and legal name. A recipe engineer can operate recipe management functions depending on the authority its group entitled. The Scope of Authority The maximum unit for entitling authorities to a recipe engineer group is a project, and the minimum unit is a recipe. The subgroup is not in the authority scope.

9 9 The Authority Types Engineers are entitled to use the following authorities. Read (*1): Start Recipe Builder/Recipe Procedure Builder for viewing recipes and recipe operations. The Recipe View and the Recipe Builders start up in read-only mode. Write: Create and edit recipes and recipe operations. Deleting and downloading of the recipes and recipe operations are not allowed. Create, delete, and edit of a project and a recipe group are not allowed. Delete: Delete recipes and recipe operations. Downloading a recipe is not allowed. Create, delete, and edit a project and a recipe group are not allowed. Download: Download recipes from Recipe View and Recipe Builders. Create, delete, and edit a project and a recipe group are not allowed. Engineering (*2): Create, delete, and edit a project and a recipe group. Delete all recipe operations. Start Recipe Builder/ Recipe Procedure Builder for viewing recipes. Create, edit, delete, and download a recipe are not allowed. *1: All recipe engineers are automatically entitled Read authority and cannot set the authority scope. *2: Engineering authority can be used in combination with recipe-related authorities such as Read, Write, Delete and Download. (i.e. A recipe engineer with Engineering and Download authorities) Recipe Engineer Authentication and Authority Check This verifies identity and if the recipe engineer has the authority to perform the job. Table Recipe Engineer Authentication and the Timing of Authority Check Timing Recipe Engineer Authentication Authority Check Logging onto Recipe View X Creating and Deleting a project/ a recipe group on Recipe View Change of property X X Deleting all recipe operations Creating and Deleting a recipe/recipe operation on Recipe View X Starting Builder X Overwriting and Saving in Builder X Downloading X X Logging off from Recipe View X: Will be performed. : Not Performed. Audit Trail Management The modified recipe data is automatically saved in the pre-defined database. Recording the Audit Trail Log simultaneously enables to view WHEN; WHO; WHAT; HOW; WHY; WHERE (the data is modified). Detailed information of WHAT and HOW can be viewed as well. Selecting the modification file and starting Builder in View mode enables to display the differences in various-colored (Note: Some of Builders cannot display the differences. For details, refer to the Table Builder View Mode Functions). Audit Trail Management Policy (Recording Timing) The Audit Trail Management data is saved only when engineering that affects the product quality is performed (modifying recipe-related engineering definition or downloading recipe to recipe server). Simultaneously, the data is saved in the Audit Trail Log file. Applicable Project of Modified Data Save The modification file of all projects is saved. Table Builder View Mode Functions Project Hierarchy Recipe Builder Name Supported Functions Difference Display Other Functions Recipe Builder X Recipe Procedure Builder X: Supported : Not Supported GS 33K10D40-50E June 12,

10 10 OPERATING ENVIRONMENT Hardware requirements Hardware requirements for running Access Administrator Package are the same as for LHS5100, LHM5100 Standard Builder Function package. Recommend to prepare a PC with proper hard disk capacity (40 GB or larger) for Audit Trail database. Also prepare an external storage medium for making backup of Audit Trail database. Software requirements Supported Windows OS and Service Pack are the same as for LHS5100, LHM5100 Standard Builder Function operating environment. Access Administrator Package (FDA:21 CFR Part 11 compliant) can be used with LHS5100/LHM5100 Standard Builder Function. This package can also be used with LHS6530 Report Package or LHS5166 Recipe Management Package. To convert Audit Trail database to PDF file, Adobe Acrobat is required. Refer to LHS5100, LHM5100 Standard Builder Function package (GS 33K10D10-50E) software requirements for the supported versions of Adobe Acrobat. MODELS AND SUFFIX CODES Model Suffix Codes Description Access Administrator Package LHS5170 (FDA:21 CFR Part 11 compliant) [Media model: LHSKM50-V11] -V Software License 1 Always1 1 English version Note: LHS5110 Access Control Package is included in this package, so it is not required. ORDERING INFORMATION Specify model and suffix codes. TRADEMARKS CENTUM is a registered trademark of Yokogawa Electric Corporation. Other product and company names appearing in this document are trademarks or registered trademarks of their respective holders. Subject to change without notice.