JP2003150551A - Authentication inspection device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve products by eliminating various errors by operating a plant by a plurality of operators. SOLUTION: This authentication inspection device makes an authentication inspection on a plurality of users, and is characterized in performing authentication inspection when the authentication inspection on the whole users is operated by successively making the authentication inspection of the users such as making the authentication inspection on a first user, making the authentication inspection of a second user when this authentication inspection can be operated, and making the authentication inspection of a third user when this authentication inspection can be operated.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a certification inspection apparatus for performing a confirmation operation in an integrated production control system for large and medium scale plants.

[0002]

2. Description of the Related Art The conventional integrated production control system shown in FIG.
As shown in the reconfirmation dialog display of 6, the operation permission / inhibition was determined only by the confirmation operation by one user. Specifically, the confirmation operation was performed by the procedure shown below.

As shown in FIG. 16, when the operation object 100 is the steam flow rate control, the user name 101 and "Passw" are displayed as "Name" in the reconfirmation dialog display.
authentication check (password) 102, "Re"
The reason for change 103 is displayed as "ason". Further, two buttons are provided below “Reason”, one is a cancel button 104 and the other is an OK button 105.

In the integrated production control system,
Information is displayed on the screen of the instrument prompting the confirmation operation. First, the user name 10 who has entered the operation monitoring function HIS.
1 is displayed. Then, the process shifts to the authentication inspection (password), and the authentication inspection of the user name 101 is performed with the password.
If the password entered in "Password" is wrong, data operation cannot be performed. Further, there is an inspection by a fingerprint authentication device as an authentication inspection other than the password. The authentication check for the user can be useful for preventing unauthorized operators.

Next, the reason for the change (reason for change 103)
In "Reason". This change reason 103 remains as an operation record message in the file on the operation monitoring function HIS. And the displayed "Name",
If there is no problem in the items of "Password" and "Reason", the OK button 105 is pressed. If there is a problem, the cancel button 104 is pressed as appropriate to correct the item to be changed.

[0006]

By the way, in the case of very important instrument operation in the integrated production control system for large and medium-scale plants, not only the user who has entered the operation monitoring function HIS but also another user. There are cases where it is desirable to decide whether or not the operation is possible by a confirmation operation by two people (Fig.
7). This means that instead of deciding the operation propriety by the confirmation operation by one operator, the propriety of the operation should be decided by the judgment of two operators. For example, when the product of the plant is a medicine or food that is associated with human life, changing the set value is a very important operation. The setting operation in such a case requires a user I / F that decides whether or not to allow the confirmation by a plurality of people.

However, in the conventional integrated production control system for a large-scale plant, the operation of the plant can be operated by one user who is a user-in user, and thus it has been impossible to prevent a setting error or a judgment error by an operator. In addition, even if an important instrument operation is performed, data operation can be performed by one person's judgment. Further, in a pharmaceutical / food plant, it is dangerous to leave the confirmation operation to only one person's judgment, because the data operation has a great influence on the product (related to human life). Further, unless the strength of the role between the users exists, the concept of the approver does not exist. Therefore, if this happens, there is no mechanism for the approver to perform a confirmation operation, and an approval action cannot be performed.

The present invention has been made in view of the above circumstances, and is intended to eliminate various mistakes and improve plant products by operating important plant operations by two operators (users). It is an object of the present invention to provide a certification inspection device of.

[0009]

In order to achieve the above-mentioned object, an invention according to claim 1 is an authentication inspection apparatus for performing authentication inspection for a plurality of users, and sequentially performs the authentication inspection of users. It is characterized in that the operation is approved when the authentication inspection of all users is possible.

According to a second aspect of the present invention, in the operation monitoring device, an authentication inspection device for performing an authentication inspection for one user and an authentication inspection for the other user and determining whether or not a confirmation operation is permitted by both authentication inspections. And a means for determining whether the field device in the operation monitoring device is set to perform double authentication at the time of reconfirmation, and a means for performing double authentication at the time of reconfirmation. When the determination is made, a means for displaying an input screen for performing the authentication inspection by one user and the authentication inspection by the other user, and the one user inputting the input restriction on the input screen Means for authenticating the user password and a predetermined matter, and by the authentication inspection, canceling the input restriction of the part of the input screen which the other user should input,
A means for restricting the input of the part to be input by the one user, and a means for verifying the user password and the predetermined matter input by the other user to the part of the input screen where the input restriction is released. It is characterized by being provided.

Therefore, according to the invention described in claim 2,
The user password entered by the user (operator) who has entered the user and the specified item (reason for change) are checked, and the user password of another user (operator) and the specified item (reason for change) are checked. If the authentication inspection is OK, it is determined that the confirmation operation has been approved. Therefore, in the case of very important instrument operation such as medicine or food that is related to human life, confirmation operation by two operators can be performed, thereby eliminating setting mistakes or judgment mistakes and improving the quality of plant products. It is possible to let

According to the third aspect of the present invention, the authentication of one user and the authentication of the other user in the operation monitoring apparatus are performed, and the authentication is performed by both the authentication inspections to determine whether or not the confirmation operation is permitted. An inspection device, a means for determining whether the field device in the operation monitoring device is set to perform double authentication at the time of reconfirmation, and a setting for performing double authentication at the time of reconfirmation When it is determined that there is a means for displaying an input screen for performing an authentication inspection for one user and an authentication inspection for the other user, and to a location where the one user has released the input restriction on the input screen. A predetermined item that has been input and a means for performing an authentication inspection of the fingerprint of the one user, and the authentication inspection removes the input restriction of the part of the input screen that the other user should input, A means for restricting the input of the part that one user should input, a predetermined item input by the other user to the part of the input screen where the input restriction is released, and the fingerprint of the other user are inspected. Means and are provided.

Therefore, according to the invention described in claim 3,
The user (operator) who has entered the user performs the authentication inspection of the predetermined item (reason for change) and the fingerprint authentication of that user, and the authentication inspection of the predetermined item (reason for change) of another user (operator) and the authentication of that user. Fingerprint authentication is performed, and if both authentications (inspections) are OK, it is determined that the confirmation operation is permitted. In the invention described in claim 3, instead of the password of the invention described in claim 2, fingerprint authentication is performed to allow the confirmation operation by two operators, and it is possible to suppress the occurrence of various mistakes. It is possible to improve the plant operation.

Further, in the invention described in claim 4, in addition to the configuration described in claim 2 or 3, the other user can approve an item input to the input screen by the one user. It is characterized by being possible.

Therefore, according to the invention of claim 4,
If the other user can approve the operation of the one user and the user (one user) who is user-in to the operation monitoring function HIS is unfamiliar, the other authorized user can Enables user confirmation operation.

[0016]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings.

The confirmation operation performed by the two operators in the present invention is an authentication inspection device, and the authentication inspection device is
In order to protect the safety of plant operation, the following three functions are provided: "two-person confirmation operation", "user authentication inspection", and "approval act". Then, as a condition for outputting the authentication inspection device, the engineer sets “double authentication at reconfirmation” for the instrument in advance. Operation monitoring function When operating an instrument on the HIS, if "double authentication at reconfirmation" is set for the instrument,
It outputs a reconfirmation dialog with double authentication.

First, in the first function "confirmation operation by two people", the confirmation operation by the two users makes data entry only when the authentication inspection of the two users is OK. In FIG. 1, another user: suzuki 21 confirms the operation for the user: tanaka 11 who is user-in to the operation monitoring function HIS on the input screen 20.

Next, in the second function "user authentication check", an authentication check is performed on the user in order to identify the user (in order to prevent an unauthorized operator). As a method for identifying the user, there are an inspection using a password and an inspection using a fingerprint authentication device. If the authentication check is not OK, data operation cannot be performed. The double authentication of the present invention has a mechanism for sequentially performing an authentication check on two users.

In the third function, "approval act", when the user who is user-into the operation monitoring function HIS is unfamiliar, only a user who has the authority higher than the current user performs a confirmation operation (Name2). User confirmation operation). That is, in the present invention, as shown in FIG. 2, an approver can perform an approval action. The flow of processing of the authentication inspection device will be described below with reference to FIG.

Specifically, as shown in the flow chart at the time of starting the display of the reconfirmation dialog in FIG. 14A, first, the target instrument is "perform double authentication at reconfirmation" and "with authentication inspection". Will be determined (step S
1). If the determination result is "yes", the inspection determines whether or not it is a fingerprint (step S2). If the result of the determination is “Yes”, the reconfirmation dialog with double authentication for fingerprint inspection is displayed (step S3), then only the reason for changing Name1 is set to be enterable, and the rest is disabled (step S3). S4). Also, it is determined whether the inspection is a fingerprint (step S2), and if the result of the determination is “No”, a reconfirmation dialog with double authentication for password inspection is displayed (step S5) and only the password of Name1 and the reason for change are displayed. Input is set, and other input is disabled (step S6).

Further, it is determined whether "double authentication is performed at the time of reconfirmation" and "authentication inspection is performed" (step S1). If the result of the determination is "no", it is determined whether the authentication is a fingerprint ( Step S7). If the result of the judgment is “Yes”,
Display the reconfirmation dialog for fingerprint inspection (step S
8). In addition, the result of the judgment whether the authentication is a fingerprint is "No".
In the case of, the authentication determines whether or not it is a password (step S9). If the authentication is a password, a reconfirmation dialog for password verification is displayed (step S10). If the authentication is not a password, a reconfirmation dialog without authentication inspection is displayed (step S11).

Next, Nam when the authentication is a password
The confirmation operation of e1 will be described based on the flowchart shown in FIG. First, the operation monitoring function HIS
When the password of Name1 that is user-in is input (the input of the password and the input of the change reason, which is a predetermined item, is performed), it is determined whether or not the password authentication is OK (step S12). Judgment result "Yes" (O
In the case of K), Name1 has been determined and Na
Only the password of me2 and the reason for change are set to be enterable, and other inputs are disabled (input to Name1 is disabled) (step S13). If the result of the determination is “No”, an erroneous operation sound is emitted to prompt re-input of the Name1 password (step S14).

The confirmation operation of Name2 is shown in FIG.
A description will be given based on the flowchart shown in (3). First, when the user name and password of Name2 are input, it is determined whether or not the user belongs to a role category that can be approved (step S15). If the result of the determination is “No”, an erroneous operation sound is emitted, and the user name or password of Name2 is prompted again (step S18). If the result of the determination is “Yes”, it is determined whether or not the password authentication is OK (step S16). If the result of the determination is “No”, an erroneous operation sound is emitted, and the user name or password of Name2 is prompted again (step S1).
8). If the result of the determination is “Yes”, Name2 has also been determined, so it is regarded as confirmation operation OK (step S
17).

Embodiments of the present invention will be described below with reference to the drawings.

First, the flow of confirmation work in the embodiment in which the authentication check is a password will be described.

For example, a data entry operation is performed on a functional block in which the type of tag mark (instrument) is an important tag and the check of "double authentication at reconfirmation" is set at the engineering stage. To do. In this case, as shown in FIG. 3, a reconfirmation dialog with double authentication is displayed. At this point, input operation cannot be performed for Name2. The functional block is a calculation block that operates in the controller to control the field device.

Next, as shown in FIG. 4, the password (Password) of the user (Name1) who has entered the user is entered.
d) 12 and the reason for change (Reason) 13 After inputting "to start summer operation", press the OK button 24. Then, the authentication inspection of the user who has entered the user is performed. It should be noted that the user name (Name1) 11 of the user who has entered the user is already input, and it is not necessary to input it at this stage.

If the authentication check of the user who has entered the user is OK, the input restriction for Name2 is released (see FIG. 5). It is considered that Name1 is fixed, and the input related to Name1 is restricted (input is impossible).

Username 21 and password (Name) 22 of Name 2 and reason for change (Reason)
23 Enter "Confirmed" (see Fig. 6). Then, the OK button 24 is pressed. An authentication check is performed on the Name2 user. If the authentication check for Name2 is OK, data entry is performed in the function block.

Next, the flow of the confirmation work for the embodiment in which the authentication inspection is a fingerprint will be described.

For example, a data entry operation is performed on a functional block in which the type of tag mark (instrument) is an important tag and the check of "double authentication at reconfirmation" is set at the engineering stage. To do. A reconfirmation dialog with double authentication is displayed (see FIG. 7). At this point, input operation cannot be performed for Name2.

Reason for change regarding Name1 (Reaso
n) After inputting 32 "Begin summer operation", fingerprint authentication is performed (see FIG. 8). Note that the user name (Name1) 31 of the user who has entered the user is already input, and it is not necessary to input it at this stage. Then, if the authentication check of the user who has entered the user is OK, the input restriction for Name2 is released (see FIG. 9). It is considered that Name1 is fixed, and the input related to Name1 is restricted (input is impossible).

User name "suzuki" of Name2 4
Input 1 and the reason for change (Reason) 42 "Confirmed" (see FIG. 10). After that, fingerprint authentication is performed. N
If the fingerprint authentication of ame2 is OK, data entry is performed in the functional block.

The operation record of the re-confirmation dialog with double authentication remains in the operation record message as shown in FIG. In this way, by leaving an operation record of the reconfirmation dialog with double authentication, it is possible to facilitate later confirmation work.

A user of the integrated production control system for a large-scale plant is assigned a role classification (see FIG. 12). The role classification defines the authority for the plant to operate and monitor the plant. The authority means that the level of window monitoring, the level of window operation, the level of instrument monitoring, the level of instrument operation, and the like that can be assigned by the role are assigned. Windows and instruments have levels,
Only the level of the authorized role classification can be operated and monitored. The role classification includes S1 to S3 fixed to the system and U1 to U8 in which the user can freely define the authority.

In the role classification, since the user can freely define the authority, the authority of U1 <U8 is not necessarily the strength. In the first place, the role division is the division of authority over the plant, and does not represent the strength of the role. Therefore, the present invention incorporates the concept of approval into this role classification (see FIG. 13).

FIG. 15 is a block diagram of an embodiment of the authentication inspection apparatus according to the present invention. In FIG. 15, the determination means 51 determines whether or not the field device in the operation monitoring device is set to perform double authentication at the time of reconfirmation. Display means 52
Displays an input screen for performing an authentication inspection for one user and an authentication inspection for the other user when it is determined that double authentication is set at the time of reconfirmation. The authentication inspecting unit 53 inspects the user password and the predetermined item input by one of the users to the place where the input restriction on the input screen of the display unit 52 is released. Input means 54
Enters a user password, predetermined items, etc. in the input screen. The input restriction unit 55 releases the input restriction of the part of the input screen that the other user should input by the authentication inspection of the authentication inspection unit 53, and restricts the input of the part that one user should input. The authentication inspecting unit 56 inspects the user password and the predetermined item input by the other user to the location where the input restriction on the input screen is released. Note that FIG.
When the fingerprint of the user is input on the device of No. 5, the authentication inspection is performed in the same manner.

In the embodiment, the case where the authentication inspection is performed for two users has been described, but the authentication inspection may be performed for three or more users.

[0040]

According to the present invention, the reconfirmation dialog, which is a dialog for prompting the operator to perform a confirmation operation, has a double authentication function, and the reconfirmation dialog with double authentication is used by the user (operator) who has entered the user. And another user (operator) authentication inspection in
If both authentication inspections are OK, it is determined that the confirmation operation is permitted. Therefore, in the case of a very important instrument operation, a confirmation operation can be performed by two operators, whereby a setting error or a judgment error can be eliminated and the quality of a plant product can be improved. Further, the contents of the confirmation operation remain in the operation record message, which makes it easy to confirm later.

Further, the present invention is not limited to the confirmation operation by two operators, but the vertical relationship (approval) between the user (operator) who has entered the current operation monitoring function HIS and another user (operator). Whether or not to act) can be defined.

[Brief description of drawings]

FIG. 1 is an explanatory diagram of an authentication inspection device according to the present invention.

FIG. 2 is an explanatory diagram of an approval act of the authentication inspection device according to the present invention.

FIG. 3 is an explanatory diagram showing the authentication inspection device at the start when the authentication inspection is a password.

FIG. 4 is an explanatory diagram showing an authentication inspection device that performs an authentication inspection of Name1 when the authentication inspection is a password.

FIG. 5 is an explanatory diagram showing an authentication inspecting apparatus in which the input restriction of Name2 is released when the authentication inspection is a password.

FIG. 6 is an explanatory diagram showing an authentication inspection device that performs an authentication inspection of Name2 when the authentication inspection is a password.

FIG. 7 is an explanatory diagram showing the authentication inspection device at the start when the authentication inspection is a fingerprint.

FIG. 8 is an explanatory diagram showing an authentication inspection device that performs an authentication inspection of Name1 when the authentication inspection is a fingerprint.

FIG. 9 is an explanatory diagram showing an authentication inspection device in which the input restriction of Name2 is released when the authentication inspection is a fingerprint.

FIG. 10 is an explanatory diagram showing an authentication inspection device that performs an authentication inspection of Name2 when the authentication inspection is a fingerprint.

FIG. 11 is an explanatory diagram showing an operation record message that leaves an operation record of the authentication inspection device.

FIG. 12 is an explanatory diagram showing a user name and a role classification representing a user-defined image.

FIG. 13 is an explanatory diagram showing role divisions representing an image of approver role divisions and role divisions that can be approved.

FIG. 14 is a flowchart of an authentication inspection device.
(1) is a flow chart at the start of displaying the reconfirmation dialog. (2) is a flowchart at the time of confirmation operation of Name1 (in the case of a password). (3) is Name2
5 is a flowchart at the time of a confirmation operation (in the case of a password).

FIG. 15 is a configuration diagram of an embodiment of an authentication inspection device according to the present invention.

FIG. 16 is an explanatory diagram showing a normal reconfirmation dialog in the conventional integrated production control system.

FIG. 17 is an explanatory diagram of a case where operation propriety is decided by a confirmation operation by a plurality of operators.

[Explanation of symbols]

11, 31 Name1 (user) 21, 41 Name2 (user) 12, 22, password 13, 23, 32, 42 Reason for change

Claims (4)

[Claims] 1. An authentication inspection apparatus for performing an authentication inspection for a plurality of users, wherein the user's authentication inspection is sequentially performed, and when the authentication inspections of all the users are operable, the operation is approved. The characteristic inspection device. 2. An authentication inspecting device for performing an authentication inspection for one user and an authentication inspection for the other user in the operation monitoring device, and determining whether or not a confirmation operation is permitted by both authentication inspections. If it is determined that the field device in the device is set to perform double authentication at the time of reconfirmation, and if it is determined that it is set to perform double authentication at the time of reconfirmation, A means for displaying an input screen for performing an authentication check for the user and an authentication check for the other user; and authenticating a user password and a predetermined item input by the one user to a location where the input restriction on the input screen is released. Means for inspecting, and by the authentication inspection, removing the input restriction of the part of the input screen that the other user should input, and inputting the part that the one user should input An authentication inspection apparatus comprising: a means for performing a restriction; and a means for performing an authentication inspection for a user password and a predetermined item that the other user has input to a portion of the input screen where the input restriction has been released. 3. An authentication inspecting device for performing an authentication inspection for one user and an authentication inspection for the other user in the operation monitoring device, and determining whether or not a confirmation operation is permitted by both authentication inspections. If it is determined that the field device in the device is set to perform double authentication at the time of reconfirmation, and if it is determined that it is set to perform double authentication at the time of reconfirmation, A means for displaying an input screen for performing an authentication inspection by the user and an authentication inspection for the other user; a predetermined item input by the one user to a location where the input restriction on the input screen has been released; A unit for performing an authentication inspection of a user's fingerprint, and by the authentication inspection, an input restriction on a portion of the input screen to be input by the other user should be released, and the one user should input A means for restricting the input of a part, a predetermined item input by the other user to a part of the input screen where the input restriction is released, and a means for verifying the fingerprint of the other user. The characteristic inspection device. 4. The authentication inspection apparatus according to claim 2, wherein the other user is able to approve an item entered on the input screen by the one user.