An I/O server service interfaces with multiple containerized controller services each implementing the same control routine to control the same portion of the same plant. The I/O server service may provide the same controller inputs to each of the containerized controller services (e.g., representing measurements obtained by field devices and transmitted by the field devices to the I/O server service). Each containerized controller service executes the same control routine to generate a set of controller outputs. The I/O server service receives each set of controller outputs and forwards an “active” set to the appropriate field devices. The I/O server service may utilize a quality-of-service metric to determine which controller outputs and/or I/O channel is “active.” The I/O server service and other services, such as an orchestrator service, may continuously evaluate performance and resource utilization in the control system, and may dynamically activate and deactivate controller services as appropriate.

A method for controlling a grid of plants, wherein the method includes interconnecting distributed control systems via a network, providing a hierarchical tree structure having at least two levels (LN) for the network, assigning each distributed control system to a node of the tree structure, receiving a data request at a parent node control system, determining whether the data request is resolvable by the parent node control system, where a reply to the data request is sent if the data request can be resolved by the parent node, and where the data request is forwarded to at least one of the child nodes of the parent node if the data request is unresolvable by the parent node such that monitoring and controlling of the entire grid with respect to the inclusion of further units and the modification of already existing units is achieved in a flexible manner.

A setting apparatus according to an aspect of the present invention includes an authenticator configured to authenticate an operator using a setting apparatus, the setting apparatus performing a setting of an I/O module including a plurality of first connectors to which field devices are connectable and a second connector to which a controller controlling the field devices is connectable, and an authorizer configured to assign operation authorization to the operator authenticated by the authenticator on the basis of previously set authorization definition information, the operation authorization allowing the operator to perform at least one operation using the setting apparatus, the authorization definition information including first information and second information, the first information defining whether or not a change of input and output information of the field device connected to each of the first connectors is permitted, the second information defining whether or not a change of each item of the input and output information is permitted on the basis of a role of the operator.

A method for controlling a grid of plants, wherein the method includes interconnecting distributed control systems via a network, providing a hierarchical tree structure having at least two levels (LN) for the network, assigning each distributed control system to a node of the tree structure, receiving a data request at a parent node control system, determining whether the data request is resolvable by the parent node control system, where a reply to the data request is sent if the data request can be resolved by the parent node, and where the data request is forwarded to at least one of the child nodes of the parent node if the data request is unresolvable by the parent node such that monitoring and controlling of the entire grid with respect to the inclusion of further units and the modification of already existing units is achieved in a flexible manner.

A setting apparatus according to an aspect of the present invention includes an authenticator configured to authenticate an operator using a setting apparatus, the setting apparatus performing a setting of an I/O module including a plurality of first connectors to which field devices are connectable and a second connector to which a controller controlling the field devices is connectable, and an authorizer configured to assign operation authorization to the operator authenticated by the authenticator on the basis of previously set authorization definition information, the operation authorization allowing the operator to perform at least one operation using the setting apparatus, the authorization definition information including first information and second information, the first information defining whether or not a change of input and output information of the field device connected to each of the first connectors is permitted, the second information defining whether or not a change of each item of the input and output information is permitted on the basis of a role of the operator.