Clear control authority · local override that always works · unattended-site ready

Remote and Local Control With No Ambiguity About Who Has the Machine

Every machine that can be operated from two places needs an unambiguous answer to one question: who has control right now. Innova Technologies engineers the local and remote control hierarchy, the transfer logic between them, and the local override that has to work when everything else does not.
Industrial hydraulic power unit with pumps and motors

Control

Having two places to operate a machine is a safety design problem before it is a convenience feature.

Plants add remote operation for good reasons. Sites get consolidated into fewer control rooms, units end up in locations nobody wants to stand next to, and stations become unattended. What follows is a control hierarchy that grew rather than got designed: a local panel, a unit HMI, a plant-wide control, and a SCADA master, each capable of issuing commands, with the arbitration between them living partly in logic, partly in a selector switch, and partly in a procedure taped to the cabinet door.

 

Innova Technologies engineers that hierarchy explicitly. Control authority is held by exactly one station at a time, indicated identically at every station, and transferred through a defined request-and-accept sequence rather than by whoever moves a switch first. Setpoints track on the inactive stations so transfer is bumpless. Local control retains the authority it needs for maintenance and emergency action regardless of what the remote station is doing, and the machine’s protective functions answer to neither.

Hydraulic valve manifold and control block

The Problem

The dangerous condition is not losing remote control. It is two people believing they have it.

Loss of communications to a remote site is a well-understood failure that most systems handle. The harder failure is ambiguity: a maintenance technician working at the local panel while an operator two hundred kilometers away still holds an active setpoint, a unit that accepts a remote start while a local lockout was assumed to be in force, or a transfer that completes on one station’s display but not the other’s. These are not exotic scenarios. They are the predictable result of a control hierarchy that was extended one project at a time.

The second problem is what happens on communication loss, which is a design decision that frequently gets omitted. Should the unit hold its last setpoint indefinitely, ramp to a defined safe state, shut down, or continue running autonomously on local control? All four are correct in some context and wrong in others, and the answer depends on the process, the site staffing, and how long a realistic outage lasts. A system that simply holds the last value because nobody specified otherwise will eventually hold it through a condition change that mattered.

The third pressure is that remote operation and remote access are not the same thing, and conflating them creates exposure. Operational remote control across a plant network is a different risk profile from vendor diagnostic access across an external boundary. Innova Technologies engineers both, with the segmentation, controlled paths, and logging that separate them properly, which is also where the balance of plant network architecture scope connects.

Capabilities

Remote and local control capabilities

Click any capability to expand the full technical detail.

Control Authority Hierarchy and Transfer Logic

A defined hierarchy establishes which station may command the machine, with authority held by one station at a time and transfer executed through request and accept rather than unilateral capture. Setpoint tracking on inactive stations makes every transfer bumpless, and current authority is displayed identically at the local panel, the unit HMI, and the remote station so nobody has to infer it.

Communication Loss Behavior

Fail-safe behavior on loss of communications is specified explicitly per unit and per site: hold, ramp to a defined state, shut down, or continue autonomously on local control, with timeouts and re-establishment logic to match. The behavior is documented in the control narrative and exercised at factory acceptance test rather than discovered during an outage.

Local Control Panel and Maintenance Authority

The local panel retains the authority required for maintenance, commissioning, and emergency action independent of remote status, including local lockout that is positively indicated remotely and cannot be overridden from the control room. Local operation is designed as a complete capability rather than as a degraded fallback, because that is how it is used during outages.

Unattended and Remote Site Operation

For genuinely unattended sites, local control is engineered to start, regulate, protect, and shut down without instruction, with the remote station providing supervision, dispatch, and exception handling. Multi-station coordination over satellite or cellular links is proven in Innova's multi-plant work, where the platform scales from a single turbine to coordinated multi-station control.

Redundant Operator Interfaces

Unit-level and plant-level interfaces present the same data model, the same graphics standard, and the same alarm set, so an operator moving between them is not translating. Interface redundancy is engineered so that loss of one station, one server, or one network path does not remove the ability to see and control the machine.

Secure Remote Access, Separated From Remote Operation

Diagnostic and support access is engineered separately from operational remote control, with network segmentation, defined and logged access paths, and firewall rules. Innova Technologies, formerly Petrotech, has long provided remote troubleshooting and diagnostic support alongside 24-hour telephone support, and the architecture that makes that safe is engineered as part of the scope rather than assumed.

SCADA and Plant-wide control system Integration

Integration with plant-wide control system and SCADA uses standard protocols including Modbus TCP, OPC UA, DNP3, EtherNet/IP, PROFIBUS, and FOUNDATION Fieldbus, depending on the existing infrastructure. The unit control system remains an independent controller capable of full automatic operation without the supervisory system, which is what makes remote operation a convenience rather than a dependency.

Alarm Routing, Annunciation, and Escalation

Alarms are routed to where someone is actually present, with escalation paths for unattended hours, acknowledgment tracked across stations so an alarm answered remotely is visibly answered locally, and first-out capture preserved regardless of which station was in control when the event occurred.

Why Innova Technologies

Control hierarchy designed by the people who wrote the trip logic underneath it

Innova Technologies, formerly Petrotech, brings 50+ years of turbomachinery control experience, with remote monitoring, control, and diagnostic support delivered as part of the control scope across gas turbines, steam turbines, hydro turbines, compressors, generators, and reciprocating engines. Control authority design is one of those areas where the right answer depends entirely on knowing what the machine does when a command arrives at the wrong moment, which is knowledge that comes from owning the sequence and protection logic.

Protection answers to neither station

Protective functions and independent overspeed and over temperature remain on dedicated hardware with hardwired trip paths, unaffected by which station holds control authority. Authority arbitration governs commands, never protection.

Communication loss behavior is a decision, not a default

Every unit gets an explicit specification for what happens when the link drops, agreed during engineering, written into the control narrative, and demonstrated at factory acceptance test.

Open architecture, no vendor lock-in

Built on a commercially available control hardware platform with documented IEC 61131-3 logic and standard protocols. Authority logic, timeouts, and fail-safe states are visible and maintainable by your engineers rather than buried in a proprietary configuration.

Technical Resources

Engineering documentation for remote and local control

Peer-reviewed white papers and application briefs from real installations.

What Happens During Control System Commissioning?

Control Panel Design for Harsh Industrial Environments

The Future of Turbomachinery Control Systems

FAQ

Frequently asked questions

Can an operator in the control room take control while someone is working at the machine?
Not if the system is engineered correctly. Local lockout is asserted at the machine, positively indicated at every remote station, and cannot be cleared remotely. Transfer of control authority requires acceptance at the station receiving it, so authority cannot be captured unilaterally. This is the single most important requirement in a local and remote design, and it should be verified during factory acceptance test with your own personnel watching.
Whatever you specified, which is the point. The options are hold last setpoint, ramp to a defined state, shut down, or continue running autonomously on local control, and the right answer depends on the process, how long an outage realistically lasts, and whether anyone can reach the site. We will make you choose during engineering rather than let the system default to holding last value.
Almost always yes, because unattended does not mean unvisited. Somebody eventually goes there to commission, maintain, or troubleshoot, and that person needs full local capability rather than a degraded view. Local control is engineered as a complete capability for exactly that reason.
No, and keeping them separate matters. Remote operation is an operational path across your own network with its own authority rules. Remote support access crosses an external boundary for diagnostics. They get different segmentation, different access controls, and different logging. Conflating them is a common finding in OT security audits.
Yes, provided the existing unit control can expose the status and accept the commands the hierarchy requires. Where it cannot, the honest answer is that the authority logic will be partial and we will say which machines are fully covered and which are supervised only, rather than implying uniform capability across a mixed fleet.

Two control stations, one answer to who has the machine.

From authority and transfer logic on an existing control system to a full local and remote scope for unattended sites, we engineer the hierarchy and the failure behavior deliberately.

Featured

Open, documented, maintainable control.

IEC 61131 standardized logic your team can support without OEM lock-in.

Don’t see your industry?

Your machinery application is likely in our scope.

If your equipment runs and your downtime costs more than the controls do, let’s talk

Single-source

One team, drawing to startup.

Engineering, fabrication, installation, and commissioning under one contract.
FORMERLY PETROTECH

A New Name for the Company We've Become.

SAME PEOPLE.
SAME ENGINEERING EXPERTISE.
BROADENED HORIZONS.

A MESSAGE FROM JOHN KAZOUR, CEO

Welcome to Innova Technologies

To our customers and partners,

For more than 50 years, our team has helped customers keep critical operations running. We built our reputation as Petrotech by taking responsibility for control systems on important rotating machinery.

As more industries came to us with similar challenges across power generation, compression, and hydro applications, our engineering team kept finding ways to solve them. Eventually, the business outgrew the Petrotech name.

We are entering our next chapter as Innova Technologies. The new name reflects the full scope of our work as a rotating machinery control systems specialist. We engineer controls around the machine, deliver complete projects from design through commissioning, and provide support that stays with the problem until it is solved.

Our name is changing, but the people, engineering experience, and commitment behind the work continue. Our responsibility to active projects and installed systems carries forward under the Innova Technologies name. Your current contacts remain the right place to start, and we will communicate directly if an administrative record requires an update.

We appreciate the trust you have placed in us over the decades, and we look forward to continuing that work as Innova Technologies.

John Kazour

CEO, Innova Technologies