INDUSTRIAL INSTRUMETATION AND

CONTROL SYSTEMS

Lecture 11. Industrial

Protocols

Assoc. Prof. Dr. BUI Dang Thanh

School of Electronic & Electrical Engineering,
Hanoi University of Science and Technology
1 Dai Co Viet road, Ha Noi, Viet Nam

7/27/2023 Buidangthanh.3i@gmail.com 1
Presentation Outline

❑General concept of protocol

❑Requirements for industrial protocols
❑ModBus
❑CAN
❑Foundation FieldBus
❑ProfiBus
❑AS-i
❑Industrial Ethernet
❑Some typical wireless communication protocols (ZigBee, Wifi, LoRa,
GPRS, ...)

7/27/2023 Buidangthanh.3i@gmail.com 2
What is a protocol ?

❑ A protocol is a language (consist of rules and proceduces) that

is used by systems that wish to communicate with one another.
❑ If two systems wish to communicate with one another, they
need to speak the same language (or protocol).
❑ When two systems use two different protocols, making sure
that two systems are trying to talk have the same protocol
installed.
❑ Typical protocols found in industrial networks today, such as:
PROFIBUS, MODBUS, CAN, FOUNDATION FIELDBUS, ASI,
INDUSTRIAL ETHERNET, …

1-3
Architectural structure of a protocol layer

user of protocol user of protocol

service interface service interface

service offered
protocol entity by the protocol entity
protocol

message encoding Protocol message encoding

service interfaces of lower layer

communication service used by the protocol
(offered by the lower layer)

1-4
 Link Layer protocol

user of protocol user of protocol

Link layer
service interface send/receive user data block (reliably)

protocol entity protocol entity

message encoding Protocol message encoding

Physical layer
service interface data blocks containing SEL, Poll, datablock, ack, nack
communication service of physical layer
send/receive a block of data

1-5
 Relevant Standards Bodies
• ISO (www.iso.org)
• An agency of the United Nations.
• Collaborates standards development for information technology.
• ITU (www.itu.int)
• UN treaty agency that sets telecommunications standards.
• ITU-T (Telecommunications section)
• ANSI (www.ansi.org)
• American National Standards Institute: the US national standards body.
• Coordinates and accredits standards development across the US.
• IEEE (www.ieee.org)
• US based international professional organization.
• Among other things, develops standards.
• IETF / IRTF
• Internet Engineering Task Force (www.ietf.org)
• Internet Research Task Force (www.irtf.org)
• EIA (www.eia.org)
• Electronic Industries Alliance
• E.g.; standards for wiring and interconnection

1-7
Requirements for Industrial Protocols

❑Simple: easy for low-end processing systems

❑Standardization of protocols: Need to be recognized by international
organizations
❑Built-in effective error detection and correction methods: Due to the
industrial protocol applied in environments with a lot of
electromagnetic interference
❑High speed of accessing parameters during transmission: Due to the
need to update parameters from field devices to the controller almost
simultaneously

7/27/2023 Buidangthanh.3i@gmail.com 8
Modbus

❑ Historical
❑ Modbus and the ISO model
❑ The physical layer
❑ The link layer
❑ The application layer
❑ Profiles
❑ Strong points weak points

7/27/2023 Buidangthanh.3i@gmail.com 9
Modbus Historical

The DoD is funding a project on

TCP - IP 1960 Ethernet
'' packet switching ''

Realization by the ARPANET network (IBM) 1970 Version expérimentale d ’ Ethernet

définis par XEROX

1975 Principes d’Ethernet définis par XEROX

Starting the INTERNET: Protocols 1980 Première spécification d ’Ethernet par

TCP / IP have their current forms XEROX, DEC et INTEL

Version 2 des spécifications d ’Ethernet

1982
TCP / IP becomes the standard of networks 1983
long distances Normalisation IEEE 802.3 des réseaux
1985
CSMA/CD

15% growth rate 1987

1996
Modbus
60% growth rate
Schneider Transparent factory
1999

7/27/2023 Buidangthanh.3i@gmail.com 10
Modbus
Modbus and the OSI model

BootP
7 APPLICATION Modbus HTTP FTP ---
DHCP
7
6 PRESENTATION EMPTY
6 PRESENTATION VIDE
5 SESSION EMPTY
5 SESSION VIDE
4 TRANSPORT EMPTY
4 TRANSPORT VIDE
3 NETWORK EMPTY
3 RESEAU VIDE
Serial Line
2 LINK = LLC + MAC
Master/Slave
2 LIAISON = LLC + MAC

1 PHYSICAL RS-232 RS-485

7/27/2023 Buidangthanh.3i@gmail.com 11
 Modbus
The physical layer

Medium : Armored twisted pair

2 or 4 wires (if power supply)

Topology : Type bus

With short taps and end of line resistance 120 ohms

Distance maximum : 1000 m

With any of the serial line implementations, a wide range of baud rates from 1.2
kbps to 115 kbps are allowed, but all implementations must at least support 9.6
kbps and 19.2 kbps. The default rate is 19.2 kbps.

7/27/2023 Buidangthanh.3i@gmail.com 12
Modbus
Example of architecture

7/27/2023 Buidangthanh.3i@gmail.com 13
Modbus
The link layer

The Protocol Data Unit (PDU) consists of four elements. Most Modbus
implementations only use a subset of all the available function codes. The
data structure may change depending upon the function code. Wrapping
the Modbus PDU is an address field and an error check field. The address
field only contains slave addresses or the broadcast address. The master
address is not required and not referenced since this is a master.

A slave address field and error check wrap a Modbus PDU

7/27/2023 Buidangthanh.3i@gmail.com 14
Modbus
The link layer

The actual framing of Modbus over Serial Line messages depends

on whether ASCII or RTU transmission mode is used.

RTU framing is more condensed than ASCII framing

ASCII framing requires start-of-frame and end-of-frame characters

7/27/2023 Buidangthanh.3i@gmail.com 15
Modbus
The application layer

Some common Modbus application layer function codes include:

▪ Read Coils: Used to read the status of discrete output coils.

▪ Read Discrete Inputs: Used to read the status of discrete input contacts.
▪ Read Holding Registers: Used to read the contents of holding registers.
▪ Read Input Registers: Used to read the contents of input registers.
▪ Write Multiple Coils: Used to write multiple output coil statuses.
▪ Write Multiple Registers: Used to write multiple holding register values.

7/27/2023 Buidangthanh.3i@gmail.com 16
Modbus

The application layer

7/27/2023 Buidangthanh.3i@gmail.com 17
Modbus
Profiles

▪ Modbus RTU/TCP: These profiles define the basic Modbus protocol for
serial communication (Modbus RTU) and Ethernet communication
(Modbus TCP). Modbus Master/Slave (Client/Server): This profile defines
the roles and responsibilities of devices in a Modbus network.
▪ Modbus ASCII: This profile specifies the use of ASCII characters for
representing data in Modbus messages.
▪ Modbus over Serial Line (RS-232/RS-485): This profile focuses on the use
of Modbus over serial communication interfaces such as RS-232 and RS-
485.

7/27/2023 Buidangthanh.3i@gmail.com 18
Modbus
Strong points – Weak points
Strengths Weaknesses
◼ Low implementation Cost ◼ Need to write the program to access a
variable.

◼ Relaltivement lent

◼ No direct communication from slave to

slave.

7/27/2023 Buidangthanh.3i@gmail.com 19
Ethernet TCP/IP Modbus

❑ Historical
❑ Ethernet TCP / IP Modbus and the ISO model
❑ The physical layer
❑ The link layer
❑ The application layer
❑ Profiles
❑ Strong points - Weak points

7/27/2023 Buidangthanh.3i@gmail.com 20
Ethernet TCP/IP Modbus
Ethernet TCP / IP Modbus and the OSI model
Ethernet only covers the first 2 layers of the OSI model
BootP
7 APPLICATION Modbus HTTP FTP ---
DHCP
7
6 PRESENTATION VIDE
6 PRESENTATION VIDE
5 SESSION VIDE
5 SESSION VIDE
4 TRANSPORT TCP
VIDE
4 TRANSPORT VIDE
3 NETWORK IP
VIDE
3 RESEAU VIDE
2 LINK = LLC + MAC CSMA/CD
2 LIAISON = LLC + MAC CAN 2.0 A et B + ISO 11898

1 PHYSICAL Ethernet
CAN 2.0 A et B =V2 ou11898-1
ISO 802.3 et 2

7/27/2023 Buidangthanh.3i@gmail.com 21
Ethernet TCP/IP Modbus
The physical layer

Topology: Free
Bus, star, tree, or ring

Distance maximum : Fonction du médium et du débit

Minimum : 200 m en 100 base TX
Maximum : 40 000 m en 10 base F

Débit : 10 Mbits/s - 100 Mbits/s - 1 Gbits/s

1 Gbits/s utilisé en bureautique

Nbre max équipements : Fonction du médium

Minimum : 30 par segment sur 10 base 2
Maximum : 1024 sur 10 base T ou 10 base F

7/27/2023 Buidangthanh.3i@gmail.com 22
Ethernet TCP/IP Modbus
Transmission supports

Ethernet is available on three types of medium:

Name Description Debit Long. Max stations /

max segment

Coaxial 10 base 5 Thick Ethernet 10 Mb/s 500 m 100

Cable
10 base 2 Thin Ethernet 10 Mb/s 185 m 30

Armored 10 base T Twisted pair 10 Mb/s 100 m 1024

twisted pair
100 base TX Twisted pair 100 Mb/s 100 m ???
cat. 5

Optical fiber 10 base F 2 fibres 10 Mb/s 2000 m 1024

100 base FX 2 fibres 100 Mb/s 2000 m ???

7/27/2023 Buidangthanh.3i@gmail.com 23
Ethernet TCP/IP Modbus
The twisted pair
Increasingly used even in 100 Mbps

UTP - Isolated pairs of copper wires joined in twist.

Multiple color-coded pairs encased in a
plastic folder
Faster than coaxial cable
STP - Inseparable pairs wrapped in a shielding with foil
Category 5 (Cat 5) - Most common in networks
IT
Cat 5 = 100 Mbps (under specification)
Cat 3 = 10 Mbps

Uses RJ45 connectivity

7/27/2023 Buidangthanh.3i@gmail.com 24
Ethernet TCP/IP Modbus
The optical fiber
Optical fiber is appreciated for its safety aspect (absence of electric currents), its small
footprint and its immunity to noise and electromagnetic interference.

They allow to have longer segment lengths (max 2 km)

Often serve as arteries

Includes three parts:

Core - Support glass or plastic light path

Sheath - Glass tube that brings back any light

parasite in the core.

Protective coating - Protects the core and the optical sheath

Multimode fiber is the most used because it is less expensive
and easier to use.

7/27/2023 Buidangthanh.3i@gmail.com 25
Ethernet TCP/IP Modbus
Example of architecture
Redundant Optical Ring 200 Mbit / s Full-duplex

Switch Switch Switch

Premium

Transceiver
Optical fiber

Quantum
Hub Transceiver
Optical loop

Hub

Quantum Momentum Magelis Momentum Altivar 58 Altistart 48 Altivar 38 Momentum Altivar 58

7/27/2023 Buidangthanh.3i@gmail.com 26
Ethernet TCP/IP Modbus
Transport network link layers
Media access method: CSMA / CD
Carrier Multiple Access Sense with Collision Detection
The stations are listening to the transmission medium and waiting for it to be free to transmit.
If a collision is detected, each station continues to transmit so that the collision is seen by the entire
network.
The stations re-transmit their message after a time of random duration.

Determinism: Solved by Segmentation

Charge rate <10%

Method of transmission: By packet

or IP datagrams from 64 to 1500 bytes

Maximum size of payload: 1442 bytes per packet (APDU)

Transmission security: CRC32 at link layer level.

Acknowledgment TCP layer level
Response Application Level (UNITE / Modbus)
7/27/2023 Buidangthanh.3i@gmail.com 27
Ethernet TCP/IP Modbus
The main application protocols

HTTP: HyperText Transfer Protocol = Web

Transfer of files in HTML format

FTP: File Transfer Protocol

File transfer according to server client model

SNMP: Simple Network Management Protocol

Network management: configuration, monitoring, administration

DNS: Domain Name Service

Translates the symbolic name of a network node into an IP address

7/27/2023 Buidangthanh.3i@gmail.com 28
Ethernet TCP/IP Modbus
Application Protocols

BOOTP: Bootstrap Protocol

Assignment IP address by a server

TELNET: Interfacing terminals with half duplex equipment

ASCII format encompassed

UNITE: Protocol based on the server client model created by Telemecanique

MODBUS: Protocol based on the client-server model created by Modicon

I / O scanning: Periodic I / O refreshed by automatic sending of Modbus requests.

7/27/2023 Buidangthanh.3i@gmail.com 29
Ethernet TCP/IP Modbus
Transparent Ready Implementation Classes
The implementation classes define a list of services to implement to ensure
interoperability of Schneider Transparent Ready products.

These classes are defined for 4 families of equipment:

◼Controllers: PLC, digital controls ...
◼ Devices: Drives, Motor Starters, Robots, Remote I / O
◼ Footbridges:
◼ HMI / SCADA

The implementation classes are identified by

a letter A to Z concerning WEB services
followed by a number 00 to 99 concerning the user and communication services
and an ASCII suffix for the physical layer.

7/27/2023 Buidangthanh.3i@gmail.com 30
 Ethernet TCP/IP Modbus
The implementation class
Web services level

A : without Web A : without Web

B : Web Basic Z : Web Basic
C : Web Configurable Y : Web Regular Example of Implementation Class: A10
D : Web Active X : Web Active
Web
A05 A00
Web services
E : Web Distributed W : Web Distributed

services
server client User Net. Global Faulty device I/O TR Gateway
servicesMangt data^replacement scanner
functions
User & communication level servicesm

00 : without Modbus SNMPNDDSDHCPTFTP FTP SMTP

HTTP HTTPModbus Canopen
Modbus
MIB

protocols
01 : modbus Basic access UDP
50 TCP80 502
05 : modbus Regular access
IP
10 : modbus on TCP-IP basic access
RS485 Can
20 : modbus on TCP-IP management access Ethernet and IEEE 802.3 layer
30 : modbus on TCP-IP added values access
40 : distributed control on TCP-IP

Examples : A10-Eth10/100 Modbus on Ethernet TCP-IP (10/100 Mbs), no Web

A05-SL-RS485 Modbus on RS485, no Web
A00-Can for Can Open : profiles to be defined
C30-Eth100 Modbus on Ethernet TCP-IP (100 Mbs) + com & Web services

7/27/2023 Buidangthanh.3i@gmail.com 31
Ethernet TCP/IP Modbus
Services Web

Server Web Client

Maintenance Monitoring Diag Doc Conf

B R B R E B R E B R B Server
A : without Web
Web level A Web level A B : Web Basic
C : Web Configurable
Web level B Web level Z
D : Web Active
E : Web Distributed
Web level C Web level Y

Web level D Web level X

Client
A : without Web
Z : Web Basic
Y : Web Regular
X : Web Active
W : Web Distributed
optional mandatory

7/27/2023 Buidangthanh.3i@gmail.com 32
Ethernet TCP/IP Modbus
User Services and Communication
Com
User & Communication with TCP-IP without
TCP-IP
Net Mgt Bd. Mgt
Modbus
Messaging
IOSc FDR Net Mgt
(Modbus) (SNMP)
Glob Data
B R B R
Modbus
Messaging
Net Mgt
(Modbus)
B R E
B R E an B B R B R E B
Communication level 01 B
Communication level 05

Communication level 10

Communication level 20

Communication level 30

optional mandatory

7/27/2023 Buidangthanh.3i@gmail.com 33
Ethernet TCP/IP Modbus
Strong points - Weak points

Strong points Weak points

◼ Open to standard customers ◼ Expensive connection accessories

◼ Schneider offer ◼ No possibility connection security

products

◼ Level of integration in PL7

◼ Integration cost

7/27/2023 Buidangthanh.3i@gmail.com 34
Thank you for your attention!

7/27/2023 Buidangthanh.3i@gmail.com 35