JP2006195621A - User authentication method, user authentication device and equipment management method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a user authentication method, a user authentication device and the like, capable of ensuring both the operability and security of a plant control system. <P>SOLUTION: This authentication method comprises steps of transmitting a user ID from a transmitting device 7 carried by a user to an ID reader 6 provided in the plant control system; executing user authentication in the plant control system based on the user ID read by the ID reader 6; and detecting that the user accesses the ID reader 6. The step of executing the user authentication may be executed when the access of the user to the ID reader 6 is detected. This method may further comprise steps of accepting an operation to the plant control system of the user that is the object of user authentication; and storing the accepted operation in a storage part 31 as operation history in association with the user ID read by the ID reader 6. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a user authentication method for performing user authentication in a plant control system, a plant operation support system, and the like, a user authentication apparatus, and a device management method for managing devices constituting the plant control system.

  2. Description of the Related Art A plant control system is known that controls field devices of a plant via field controllers that are appropriately distributed according to the scale of the plant. In the plant control system, in addition to the plant operation by automatic control, the operation of the plant and the construction of the system can be executed by the operation of the operator.

  When operating on a plant control system, it is necessary to check whether the operator performing the operation is a person authorized in advance or to record what operation has been performed in order to maintain security. is there. Therefore, the operator needs to perform user authentication to make the system recognize that he is an authorized person when performing the operation. In this user authentication, the operator inputs a user account and password assigned to the operator to the system. The same applies to a case where an operation is performed on a plant operation support system that supports plant operation.

  Patent Document 1 describes an authentication inspection device that performs authentication inspection for a plurality of users on a screen.

JP 2003-150551 A

  However, in the conventional user authentication method, there is a possibility that the operator forgets the password or is decrypted by a third party. In addition, there is a security problem that it is difficult to prevent an operation performed by a third party impersonating the user after logon or user authentication.

  In addition, as the security of the system is increased, the number of times of user authentication increases, and the operator must input his / her account and password many times. As a result, there is a problem that troublesome operation for user authentication is increased.

  Furthermore, in general, an input device such as a keyboard is used to input an account and a password. However, there are many environments in which an input device cannot be installed at an actual plant site, and the application range is limited. In addition, the system administrator needs to manage user accounts and passwords, which increases system operation costs.

  The objective of this invention is providing the user authentication method, user authentication apparatus, etc. which can make the operativity and security of a plant control system compatible.

The user authentication method of the present invention is a user authentication method for performing user authentication in a plant control system, wherein a user ID is transmitted from a transmission device carried by the user to an ID reader provided in the plant control system; And executing user authentication in the plant control system based on the user ID read by the ID reader.
According to this user authentication method, a user ID is transmitted from a transmission device carried by the user, and user authentication is executed based on the user ID read by the ID reading device. Therefore, a complicated operation is required for user authentication. do not do.

A step of detecting that the user has approached the ID reader, wherein the step of executing the user authentication is performed when it is detected that the user has approached the ID reader. Also good.
In this case, since user authentication is executed when it is detected that the user has approached the ID reader, the operation burden for user authentication can be reduced.

A step of accepting an operation on the plant control system of a user who is a target of the user authentication, a step of storing the accepted operation as an operation history in association with the user ID read by the ID reader; , May be provided.
In this case, since the accepted operation is stored as an operation history in association with the user ID read by the ID reader, the operation history can be used as an audit trail.

A step of receiving an operation on the plant control system by a user who is a target of the user authentication, and a step of storing in advance an operation environment for receiving the operation on the plant control system in association with the user ID. In the step of receiving an operation on the plant control system, the operation environment stored in association with the user ID of the user who receives the operation may be called.
In this case, when an operation on the plant control system is received, the operation environment stored in association with the user ID of the user who receives the operation is called, so that an optimal operation environment for the user can be ensured.

A step of detecting that the user subject to user authentication has exited from the operation position with respect to the plant control system, and plant control when it is detected that the user subject to user authentication has exited from the predetermined position. And a step of rejecting an operation on the system.
In this case, when it is detected that the user subject to user authentication has exited from the predetermined location, the operation to the plant control system is rejected, so a third party pretending to be the user subject to user authentication Unauthorized operation due to can be prevented. In addition, the method of detecting that the user who became the object of user authentication left | separated from the operation position with respect to a plant control system is not limited. Moreover, the method to refuse operation with respect to a plant control system is not limited.

The user authentication device according to the present invention is a user authentication device that performs user authentication in a plant control system, and transmits a user ID from a transmission device carried by the user to an ID reader provided in the plant control system. And authentication means for executing user authentication in the plant control system based on the user ID read by the ID reader.
According to this user authentication device, since the user ID is transmitted from the transmission device carried by the user and the user authentication is executed based on the user ID read by the ID reading device, a complicated operation is required for the user authentication. do not do.

Proximity detection means for detecting that the user has approached the ID reading device, and the authentication means authenticates the user when the proximity detection means detects that the user has approached the ID reading device. May be executed.
In this case, since user authentication is executed when it is detected that the user has approached the ID reader, the operation burden for user authentication can be reduced.

Operation accepting means for accepting an operation on the plant control system of the user who is the object of the user authentication, and the accepted operation are stored as an operation history in association with the user ID read by the ID reader. Operation history storage means.
In this case, since the accepted operation is stored as an operation history in association with the user ID read by the ID reader, the operation history can be used as an audit trail.

An operation accepting means for accepting an operation on the plant control system of a user subject to user authentication, and an environment storage means for preliminarily storing an operation environment for accepting the operation on the plant control system in association with the user ID. The operation accepting unit may call the operation environment stored in association with the user ID of the user who accepts the operation.
In this case, when an operation on the plant control system is received, the operation environment stored in association with the user ID of the user who receives the operation is called, so that an optimal operation environment for the user can be ensured.

When it is detected that a user who has been subject to user authentication has exited from an operation position with respect to the plant control system and a user who has been subject to user authentication has exited from a predetermined position. And an operation refusal means for refusing an operation on the plant control system.
In this case, when it is detected that the user subject to user authentication has exited from the predetermined location, the operation to the plant control system is rejected, so a third party pretending to be the user subject to user authentication Unauthorized operation due to can be prevented. In addition, the method of detecting that the user who became the object of user authentication left | separated from the operation position with respect to a plant control system is not limited. Moreover, the method to refuse operation with respect to a plant control system is not limited.

The device management method of the present invention is a device management method for managing devices constituting a plant control system, wherein a step of accepting writing of information related to the device to an electronic tag attached to the device is written to the electronic tag. And a step of accepting reading of the information.
According to this device management method, writing and reading of information related to the device with respect to the electronic tag attached to the device is accepted, so that the device can be appropriately managed using the electronic tag.

  According to the present invention, since the user ID is transmitted from the transmission device carried by the user and the user authentication is executed based on the user ID read by the ID reader, no complicated operation is required for the user authentication. Therefore, the operability and security of the plant control system can be made compatible.

  Hereinafter, an embodiment of a user authentication method according to the present invention will be described with reference to FIGS.

  FIG. 1 is a block diagram showing a configuration of a plant control system to which a user authentication method of the present embodiment is applied.

  As shown in FIG. 1, the plant control system integrates a field controller 2 appropriately distributed in the plant according to the scale of the plant in which the field device 1 is arranged, and the field device 1 through the field controller 2. And an operation monitoring device 3 for controlling the operation. The field controller 2 and the operation monitoring device 3 are connected to each other via a communication bus 5, and process control in the plant is automatically executed. In addition, the process control status can be monitored via the operation monitoring device 3, and by using the operation monitoring device 3 as an operation terminal, operation of the plant, construction of a plant control system, or data to the field device 1 can be obtained. Operations such as setting can be executed.

  The operation monitoring device 3 is provided with a storage unit 31. The storage unit 31 stores an authentication table necessary for user authentication and a history table for recording an operation history of the operator.

  As shown in FIG. 1, the operation monitoring device 3 is connected to an ID reading device 6 constituting an RFID (Radio Frequency Identification) system, and the ID reading device 6 is installed close to the operation monitoring device 3.

  An operator who operates the plant control system carries a transmitter 7 (FIG. 1) that transmits each user ID as an electromagnetic wave signal. The transmission device 7 can be incorporated in, for example, an ID card or a key holder carried by the operator. When the operator approaches the transmission device 7, the ID reading device 6 performs communication with the transmission device 7 and receives the user ID of the athlete. The operation inspection device 3 detects the approach of the operator via the ID reading device 6 by the above communication, acquires the operator's user ID, and automatically performs login processing.

  The transmission device 7 may be an active method with a built-in power supply or a passive method with no built-in power supply.

  FIG. 2 is a block diagram functionally showing a configuration for executing the user authentication method of the present embodiment.

  In FIG. 2, a user ID transmission unit 101 transmits a user ID from a transmission device carried by the user to an ID reading device 6 provided in the plant control system as an electromagnetic wave. The authentication unit 102 performs user authentication in the plant control system based on the user ID read by the ID reader 6.

  The authentication unit 102 performs user authentication when the approach detection unit 103 detects that the user has approached the ID reader 6.

  The operation accepting unit 104 accepts an operation on a plant control system by a user who has been subject to user authentication. The operation history storage unit 105 stores the operation received by the operation receiving unit 104 as an operation history in association with the user ID read by the ID reader 6.

  The environment storage unit 106 stores in advance an operation environment for accepting operations on the plant control system in association with the user ID. And the operation reception means 104 calls the operation environment memorize | stored matched with the user ID of the said user who receives operation.

  In addition, the exit detection means 107 detects that the user who is subject to user authentication has exited from the operation position for the plant control system. The operation refusal unit 108 rejects an operation on the plant control system when it is detected that the user subject to the user authentication has left the predetermined position.

  The user ID transmission unit 101 is configured as a function of the transmission device 7 (FIG. 1). In addition, the authentication unit 102, the approach detection unit 103, the operation reception unit 104, the operation history storage unit 105, the environment storage unit 106, the exit detection unit 107, and the operation rejection unit 108 are configured as functions of the operation monitoring device 3 (FIG. 1). Is done.

  Next, user authentication processing in the plant control system (FIG. 1) will be described. FIG. 3 is a flowchart showing a user authentication processing procedure in the plant control system. The processing procedure of FIG. 3 is executed based on the control of the operation monitoring device 3.

  In step S1 of FIG. 3, it is determined whether or not the ID reader 6 has received the user ID from the transmitter 7, and the process proceeds to step S2 after waiting for the determination to be affirmative. When the operator approaches the ID reading device 6, that is, when the operator approaches the operation monitoring device 3, the determination in step S1 is affirmed. This process corresponds to the function of the approach detection means 103 (FIG. 2).

  In step S <b> 2, the operation monitoring device 3 acquires the operator's user ID, refers to the authentication table stored in the storage unit 31, confirms registration of the user ID, and executes login processing. This process corresponds to the function of the authentication unit 102 (FIG. 2).

  Next, in step S3, it is determined whether or not to log off. Here, it is determined whether or not the ID reading device 6 has become unable to receive the user ID from the transmission device 7. Therefore, when the operator leaves the ID reading device 6, that is, when the operator leaves the operation monitoring device 3, the determination in step S3 is affirmed. In this case, a logoff process is executed in step S10, the acceptance of the operation to the operation monitoring device 3 is rejected, and the process returns to step S1. Steps S3 and S10 correspond to the functions of the exit detection means 107 and the operation rejection means 108 (FIG. 2), respectively.

  If the determination in step S3 is negative, it is determined in step S4 whether or not the operator is going to perform an operation that requires a predetermined authority. As will be described later, if the user has this authority, the operation is permitted. If the user does not have this authority, the operation is prohibited. If the determination in step S4 is affirmed, the process proceeds to step S5. If the determination is negative, the process returns to step S3.

  In step S5, the authority of the operator corresponding to the user ID acquired in step S2 is acquired with reference to the authentication table stored in the storage unit 31 of the operation monitoring device 3. In the authentication table, authority given to an operator corresponding to each user ID, that is, permitted operations are defined. Next, in step S6, it is determined whether or not the operator is permitted to perform the operation as a result of the process in step S5.

  If the determination in step S6 is affirmed, the process proceeds to step S7, and the operation of the operator for the operation monitoring device 3 is accepted. This process corresponds to the function of the operation receiving means 104 (FIG. 2).

  Next, in step S8, the operation accepted in step S7 is recorded in the history table, stored in the storage unit 31, and the process returns to step S3. In the history table, the user ID of the operator and the received operation are recorded in association with each other. This processing corresponds to the function of the operation history storage unit 105 (FIG. 2).

  On the other hand, if the determination in step S6 is negative, the process proceeds to step S9, the acceptance of the operation is prohibited, and the process returns to step S3.

  As described above, according to the user authentication method of the present embodiment, the user authentication is executed using the RFID system by communication between the ID reader 6 and the transmitter 7, so that the operator can use his / her password, etc. You are freed from the duty to remember. Also, there is no risk of the password being cracked by a third party. Furthermore, since the logout process is automatically executed when the operator leaves the operation monitoring device 3 used as the operation terminal, it is possible to prevent a third party from performing an unauthorized operation thereafter.

  Moreover, in the said embodiment, user authentication can be performed, without request | requiring operation, such as an account for user authentication, and password input, to an operator. For this reason, even in a system in which user authentication is executed in various situations to improve security, operability is not sacrificed. Therefore, both high security and high operability can be achieved.

  Furthermore, since an input device such as a keyboard is not required for user authentication, it is possible to install an operation terminal for accepting operations even in an environment where it is difficult to install an input device. Moreover, since a special operation for user authentication is not required, for example, the burden on an operator who is unfamiliar with key input can be greatly reduced.

  Furthermore, for the system administrator, security-related tasks such as issuance and management of accounts and passwords are reduced. As a result, the system operation cost can be reduced.

  In the present embodiment, the operation history of the operator is recorded as a history table. For this reason, it is possible to accumulate work contents such as driving operations and system construction by the operator, and it is possible to manage the work contents for each operator by periodically checking this information. Further, it becomes possible to grasp the movement line of the athlete from the accumulated work contents, and based on that, the work environment such as the arrangement of the operation terminals can be improved.

  In addition, there is a desktop environment where each operator can easily work. Therefore, the setting information of each desktop environment may be stored in the system, for example, in the storage unit 3 of the operation monitoring apparatus 3. In this case, the setting information can be read out at the time of login, and the desktop environment of the operation terminal to be operated can be switched to a preset desktop environment. A similar mechanism can be realized in an operating environment other than the desktop environment. In this case, the operating environment and the user ID of the operator may be stored in association with each other. The operator can always work in the best operating environment for himself without any special operation. Note that the processing for storing the operation environment corresponds to the function of the environment storage unit 106 (FIG. 2).

  In the embodiment described above, the operation history is stored only for operations that require a certain authority (step S8 in FIG. 3). However, the operation history may be stored regardless of the necessity of authority.

  Further, the operation content to which the user authentication method according to the present invention is applied is not limited. For example, the user authentication method according to the present invention is also applied to the setting of data values for field devices, the reading operation of data set in field devices, the confirmation operation of alarms and messages generated in the plant control system, etc. Can do. For these operations, an operation history may be stored.

  Furthermore, the RFID system can also be used for management of equipment constituting the plant control system.

  FIG. 1 shows an example in which an electronic tag 8 is attached to the field device 1. Maintenance information and device information of the corresponding field device 1 can be written in the electronic tag 8 using a predetermined writing device (writer) or the like. Further, recorded information can be read using a predetermined reading device (reader) or the like. Based on such information, it is possible to incorporate abnormality monitoring or equipment failure monitoring logic during operation into the plant control system. Maintenance history and alarm occurrence history for the field device 1 may be recorded in the electronic tag 8. By recording these histories on the electronic tag 8, it becomes possible to appropriately manage the device to which the electronic tag 8 is attached.

  The scope of application of the present invention is not limited to the above embodiment. The present invention can be widely applied to scenes where user authentication is required in a plant control system.

The block diagram which shows the structure of the plant control system to which the user authentication method of this embodiment is applied. The block diagram which shows the structure for performing the user authentication method of this embodiment functionally. The flowchart which shows the process sequence of the user authentication in a plant control system.

Explanation of symbols

3 Operation Monitoring Device 6 ID Reading Device 7 Transmitting Device 8 Electronic Tag 31 Storage Unit 101 User ID Transmission Unit 102 Authentication Unit 103 Approach Detection Unit 104 Operation Accepting Unit 105 Operation History Storage Unit 106 Environmental Storage Unit 107 Exit Detection Unit 108 Operation Rejecting Unit

Claims (11)

In a user authentication method for performing user authentication in a plant control system,
Transmitting a user ID from a transmitter carried by the user to an ID reader provided in the plant control system;
Executing user authentication in the plant control system based on the user ID read by the ID reader;
A user authentication method comprising: Detecting that the user has approached the ID reader;
The user authentication method according to claim 1, wherein the step of executing the user authentication is executed when it is detected that the user has approached the ID reader. A step of accepting an operation on the plant control system of a user who is a target of the user authentication;
Storing the received operation as an operation history in association with the user ID read by the ID reader;
The user authentication method according to claim 1, further comprising: A step of accepting an operation on the plant control system of a user who is a target of the user authentication;
An operation environment for receiving the operation on the plant control system is stored in advance in association with the user ID;
With
The user authentication method according to claim 1, wherein in the step of receiving an operation on the plant control system, the operation environment stored in association with a user ID of the user who receives the operation is called. Detecting that the user subject to the user authentication has left the operation position for the plant control system;
Rejecting an operation for the plant control system when it is detected that the user subject to the user authentication has left the predetermined position;
The user authentication method according to claim 1, further comprising: In a user authentication device that performs user authentication in a plant control system,
User ID transmission means for transmitting the user ID from a transmission device carried by the user to an ID reader provided in the plant control system;
Authentication means for executing user authentication in the plant control system based on the user ID read by the ID reader;
A user authentication device comprising: Comprising an approach detection means for detecting that the user has approached the ID reader;
The user authentication device according to claim 6, wherein the authentication unit performs user authentication when the approach detection unit detects that the user has approached the ID reading device. Operation accepting means for accepting an operation on the plant control system of the user who is the object of the user authentication;
Operation history storage means for storing the received operation as an operation history in association with the user ID read by the ID reader;
The user authentication device according to claim 6 or 7, further comprising: Operation accepting means for accepting an operation on the plant control system of the user who is the object of the user authentication;
An environment storage means for preliminarily storing an operation environment for receiving the operation on the plant control system in association with the user ID;
With
The user authentication apparatus according to claim 6 or 7, wherein the operation accepting unit calls the operation environment stored in association with the user ID of the user who accepts the operation. Exit detection means for detecting that the user subject to user authentication has exited from the operation position for the plant control system;
An operation refusal means for refusing an operation on the plant control system when it is detected that the user subject to the user authentication has left the predetermined position;
The user authentication device according to any one of claims 6 to 9, further comprising: In an equipment management method for managing equipment constituting a plant control system,
Accepting writing of information related to the device to the electronic tag attached to the device;
Receiving the reading of the information written in the electronic tag;
A device management method comprising:

Images