JP2006221255A - Method for managing authority of operation and its system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To accurately manage the authority of operation even if a different person is permitted to operate for a different operating device. <P>SOLUTION: An operating device RFID 103 capable of sending the identification information of an operating device (an operating button, an operating switch or the like)101 is provided correspondingly to the operating device 101. Also, an operator 001 is made to wear an operator RFID 106 that is capable of sending the identification information of the operator 001. When the operating device is operated the operating device RFID 103 and the operator RFID 106 are caused to send operating device information 202 and operator information 204, respectively. Upon reception of the information, a determination is made as to whether or not the operating device has been operated by the operator who has the authority to operate it (109). If he or she has the authority to operate it, operation signals for the pump or valve of a device 110 to be operated are validated. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an operation authority management method and system thereof, and for example, relates to operation authority management that allows only a person having an operation authority to operate an operation device provided on an operation panel or the like for operating various operation target devices. .

  For example, an operation panel for operating operation target devices such as pumps and valves constituting the plant is provided, and this operation panel is provided with operation buttons such as operation buttons and operation switches for operating the operation target devices. An operation command is transmitted to the operation target device by operating the operation device.

  As described above, the operation target devices include important devices and operation target devices that require security management. Therefore, the operation room in which the operation panel for operating these devices is installed has operation authority. In general, entry / exit management that allows only a certain operator to enter and operation authority management that is indirectly restricted by an operation procedure manual or security regulations are generally performed.

  Patent Document 1 proposes an operation authority management system for managing operations of important devices and devices that require security management. According to this, a database of personal device operation information is created in which a person who is permitted to operate a plant device is distinguished from a person who is not permitted. Then, when there is an operation request for the plant equipment, the operator is recognized and the personal equipment operation information of the operator is extracted from the database, and the operation of the operation request is performed only when the operator is an authorized person. The command is output to the plant equipment to prevent the operations of operators other than the operation authorized person. A method for identifying an operator who has made an operation request is performed by inserting an IC card in which personal information is recorded into a personal identification unit.

  As techniques for identifying an operator and managing registration and reception of operation data, there are known identification management of an operator using an IC card (Patent Document 2), personal authentication by fingerprint or retina collation, and the like ( Patent Document 3).

Japanese Patent No. 2994107 Japanese Patent Publication No. 7-69986 JP 2003-132032 A

  However, as described in Patent Document 1, according to the operator identification method for identifying an operator with an IC card, even if the inserted IC card belongs to an authorized person, another operator is identified after the identification. When the operating device is operated, it cannot be identified that a person other than the authorized person has operated. That is, there is a possibility that the inserted IC card and the actual operator do not correspond one-on-one. As a result, there is a problem that the operation target device is operated by an operation by an operator other than the operation authorized person.

  In particular, in the case of an operation panel in which a large number of operation devices with different operation permitters are arranged, it is conceivable that a plurality of operators with different operation authorities operate various operation devices simultaneously. For example, three operators (a, b, c) having operation authority for the operation device A are set, and two operators (a, b) having operation authority are set for the operation device B, and the operation device C It is assumed that one operator (a) having an operation authority is set. In this case, according to the operation authority management system described in Patent Document 1, after the operator c inserts the IC card, the operation is limited to the operation authority of the operator c. b cannot operate the operation devices B and C.

  Therefore, in the case described in Patent Document 1, in order to allow a plurality of operators having different operation authorities to operate simultaneously, it is necessary to construct an operation authority management system for each operation target device and each operation authority. There is a problem that it gets bigger.

  It is also possible for an operator with operating authority to replace the IC card, but it takes time to identify the operator and a plurality of operators with different operating authorities perform different operations at the same time. There is a problem that can not be done.

  As described above, according to the operation authority management in Patent Document 1, a large number of operation devices such as operation buttons and operation switches are provided on the operation panel, and the operation authority is set in multiple stages for these operation devices. In the case of a complicated operating environment in which a plurality of operators having different operating authorities operate simultaneously, there is a problem that the operating authority cannot be strictly managed.

  For example, in the case of a complicated operation environment as described above, it is conceivable to apply the personal authentication technique described in Patent Document 3, but it takes time for authentication and an authentication system such as a fingerprint is provided for each operation device. There is a problem that the system configuration becomes complicated and large-scale.

  An object of the present invention is to perform accurate operation authority management even when the operation permitter is different for each operation device.

  The above-mentioned problem is that an operating unit wireless identification means (RFID) capable of transmitting identification information of the operating unit corresponding to the operating unit (such as an operation button or an operating switch) is provided, and the identification information of the operator can be transmitted. When the operator wears an operator radio identification means (RFID) and the operator is operated, the operator radio identification means and the operator radio identification means have the identification information of the operator and the operator's identification information. Requesting transmission of identification information, receiving the transmitted identification information of the operating device and the identification information of the operator, determining whether or not the operating device has been operated by an operator having operating authority, This is achieved by enabling an operation signal to a pump, a valve or the like of the operation target device when the operator is an authorized operator.

  Further, the present invention provides an operation permission information storage unit that stores operation permission information in which an operator who has an operation authority to output an operation signal to an operation target device is associated with an operation device, and the operation device. It is determined whether the operation is an operation by an operator having the operation authority, and when the operation of the operation device is an operation by an operator having the operation authority, an operation signal of the operation device is output to the operation target device. In the operation authority management system having an operation permission judging means for permitting the operation, a controller wireless identification means that is provided corresponding to the operator and transmits the operator identification information, and the operator identification information worn by the operator is displayed. An operator wireless identification means for transmitting, and an operation information requesting means for wirelessly transmitting the operator identification information and a transmission request for the operator identification information in response to an operation signal output from the operator. The operation permission determination means receives the operation device identification information and the operator identification information transmitted from the operation device wireless identification means and the operator wireless identification means in response to a transmission request from the operation information request means. The operation permission information is collated to determine whether or not the operation device is operated by an operator having an operation authority.

  Since it has such characteristics, when the operating device is operated, the operation information requesting means immediately transmits a request for transmitting the operating device identification information and the operator identification information wirelessly, and immediately in response to this, The operating unit identification information and the operator identification information are transmitted from the operating unit radio identification unit and the operator radio identification unit. Therefore, the operation permission judging means is operated by an operator (operation authorized person) having the operation authority by receiving the transmitted operation device identification information and operator identification information and collating with the operation permission information. It can be determined whether or not.

  In particular, since a determination is made based on the operation unit identification information and the operator identification information transmitted from the operation unit wireless identification unit and the operator wireless identification unit at the timing when the operation unit is operated, a plurality of operation units are selected. Even if operated by a plurality of operators having different operation authorities, accurate operation authority management can be performed as long as they are not at the same time. Therefore, in an operation panel or the like provided with a large number of operation devices, when the operation authority for each operation device is set in multiple stages, a complex operation environment in which a plurality of operators with different operation authority operate at the same time. Even in this case, since the one-to-one relationship between the operator and the operation device can be secured, the operation authority management can be strictly performed.

  Further, the change of the operation authority for the operation device can be easily handled by rewriting the contents of the operation permission information storage means storing the operation permission information. Note that the operator's operation authority can be changed by rewriting the operator information (operation authority information) stored in the operator wireless identification means (RFID), and the remodeling range can be reduced.

  Furthermore, the relationship between the operation device and the operation target device can be changed by rewriting the operation device information (operation device identification information, operation target device information) stored in the operation device wireless identification means (RFID). The range of panel modifications can be reduced. In addition, since it can be applied to any system by changing the contents stored in the RFID of the operation device, standardization of the operation panel and cost reduction can be achieved.

  Furthermore, when taking over the operation to an operator having the same operation authority, a reliable and simple takeover operation can be achieved by using the RFID storing the operator information (operation authority information) as the takeover means.

  In the above case, the operating unit radio identification means enables the radio function only when the corresponding operating unit is operated, thereby preventing interference and ensuring a one-to-one relationship between the operator and the operating unit. preferable. In addition, it is preferable that the wireless function is enabled by the detection unit that detects the operation of the operation device because it is possible to further prevent interference. However, various methods for preventing interference are conceivable as described later. Is not to be done.

  The operator wireless identification means preferably has a wireless function enabled by identification information transmitted from the operator wireless identification means. However, various methods for preventing interference can be considered as described later. It is not limited.

  According to the present invention, it is possible to perform accurate operation authority management even when the operation authorized person is different for each operation device.

Hereinafter, an operation authority management system will be described based on an embodiment of the present invention.
(Embodiment 1)
FIG. 1 shows a configuration diagram of an operation authority management system according to an embodiment of the present invention. As shown in the figure, the operator 001 wears an operator RFID 106 that is an operator wireless identification means. The operation device 101 is connected to an operation device information reading request unit 102 and an operator information reading request unit 105. The operation device RFID 103 as the operation device wireless identification means is provided in association with the operation device 101, but is not necessarily provided integrally. The operation device RFID 103 is wirelessly connected to the operation device information reading request means 102 and the operation device identification means 104. Note that the operation device information reading request unit 102 and the operation device identification unit 104 are not necessarily integrated.

  The operator information reading request unit 105 and the operator RFID 106 are connected wirelessly. The operator RFID 106 and the operator identification means 107 are connected wirelessly. The operator information reading request unit 105 and the operator identification unit 107 are not necessarily integrated. The operation device identification unit 104, the operator identification unit 107, and the operation permission information storage unit 108 are connected to the operation permission determination unit 109. The operation permission determination unit 109 is connected to the operation target device 110.

  In such a configuration of the operation panel management system, the operation device 101 has a function of permitting communication of the operation device information read request signal 201 and / or communication of the operation device information 202 only during operation. Further, it has a function of transmitting an operation signal 301. As a means for realizing the function of permitting communication only at the time of operation, a method of changing the direction of the antenna of the operation device RFID 103, opening / closing a reception / transmission circuit, or passing / blocking electromagnetic waves of communication can be applied.

  The operation device information read request unit 102 has a function of receiving the operation signal 301 and transmitting an operation device information read request signal 201 for reading the operation device information 202 of the operated operation device 101.

  The operation device RFID 103 has a function of storing operation device information 202 unique to the operation device 101, receiving the operation device information read request signal 201, and transmitting the operation device information 202. The operation unit identification unit 104 has a function of receiving the operation unit information 202, identifying the operation unit 101, and transmitting the operation unit information 302.

  The operator information read request unit 105 has a function of receiving an operation signal 301 and transmitting an operator information read request signal 203 for reading the operator information 204 of the operator 001. In addition, there is an interference avoidance function that prevents the operator RFID of another operator from receiving the operator information read request signal 203. This function limits the strength of the operator information read request signal 203 so that other operator RFIDs cannot be received if the operator 101 and the other operator RFID are separated from each other, or the operator information read request This can be realized by limiting the direction in which the signal 203 is transmitted. However, it is not limited to these.

  The operator RFID 106 has a function of storing the operator information 204 unique to the operator 001, receiving the operator information reading request signal 203, and transmitting the operator information 204. When the operator RFID 106 is commonly used by operators having the same level of operation authority, the operator information 204 may be the operation authority level information. The operator identifying unit 107 has a function of receiving the operator information 204, identifying the operator 001, and transmitting the operator information 303.

  The operation permission information storage means 108 stores, as operation permission information 304, an operator who permits an operation for each operation device or an operation authority level for permitting an operation, and has a function of transmitting it as necessary. .

  The operation permission determination unit 109 receives the operation device information 302, the operator information 303, and the operation permission information 304, and when the operation device information 302 and the operator information 303 match the operation permission information 304, the operation command signal 305. It has a function to transmit.

  In the operation authority management system of this embodiment configured as described above, when the operator 001 operates the operation device 101, the operation device 101 transmits an operation signal 301. When the operation device information read request means 102 receives this operation signal 301, an operation device information read request signal 201 is transmitted. The operation device RFID 103 transmits operation device information 202 when the operation device information read request signal 201 is received. The operation device identification means 104 receives the operation device information 202, identifies the operation device 101, and transmits the operation device information 302.

  On the other hand, when the operator information read request means 105 also receives the operation signal 301, it transmits an operator information read request signal 203. The operator RFID 106 transmits the operator information 204 when the operator information read request signal 203 is received. The operator identifying means 107 receives the operator information 204, identifies the operator 001, and transmits the operator information 303.

  The operation permission information storage unit 108 normally transmits the operation permission information 304. The operation permission determination unit 109 receives the operation device information 302, the operator information 303, and the operation permission information 304, and transmits an operation command signal 305 when the operation device information 302 and the operator information 303 match the operation permission information 304. . The operation target device 110 receives the operation command signal 305 and operates.

  As described above, according to the present embodiment, the operation device RFID 103 capable of transmitting the identification information of the operation device is provided corresponding to the operation device 101, and the operator RFID 106 capable of transmitting the identification information of the operator 001 is provided. When the operator 001 is worn and the operator 101 is operated, the operator information 103 and operator information 204 are transmitted to the operator RFID 103 and the operator RFID 106, and the transmitted operator information 202 and operator information 204 are transmitted. It is received and it is determined whether or not the operation device 101 has been operated by an operator 001 having an operation authority.

  In other words, at the timing when the operation device 101 is operated, the operation device 101 and the operator 001 who operated the operation device 101 are simultaneously identified, treated as a pair of data, collated with the operation permission information 304, and if they match, an operation command Since the signal 305 is transmitted, the operation of the operation target device 110 can be prevented even if another operator without the operation authority of the operation device 101 operates.

  In addition, even when multiple operators with different operating authority operate different operating devices at the same time on an operation panel formed by arranging a number of operating devices with different operating authorities or operators with operating authority, At this timing, the controller and the operator who has operated it are identified, handled as a pair of data, and collated with the operation permission information 304, so that only the operation of the operation authorized person is valid. In particular, the time required to read RFID information is generally about several tens of milliseconds, and the operation command signal 305 can be processed in a short time from the operation of the operation device 101 to the transmission.

  In addition, if this embodiment is applied to an on-site operation panel of a plant, the operation is effective for an inspector having the operation authority, but the operation is not accepted even if an operator who does not have the operation authority operates. Is possible. That is, it is possible to strictly manage the operation authority of the operation device and the operation authorized person (or operation authority).

  In addition, according to the present embodiment, it is possible to rank the operation authority of the operation authorized person, it is possible to grant the operation authority step by step, and the RFID corresponding to the operation authority rank is used as an operation takeover tool. Is possible.

  Here, RFID of various shapes suitable for the operating device can be used for the operating device RFID 103 of the above embodiment. The operator RFID 106 can be an RFID formed in an IC card shape. In addition, a known positive RFID or passive RFID can be basically applied to the RFID. That is, the RFID includes a wireless communication unit, a memory that stores information such as identification information, a microcomputer that controls the wireless communication unit and the memory, and transmits information such as identification information via the wireless communication unit. And an antenna for receiving a reading request from the outside. And what built in the power supply of those components is called positive RFID, and what is produced | generated from the signal which received the power supply is called passive RFID.

  In the present embodiment, the operation device 101 has a function of permitting communication of the operation device RFID 103 only when operated. As the means for realizing this function, the above-described method can be applied. For example, the means for detecting that the operation device 101 is operated may include a means for displacing in conjunction with the operation of the operation device 101. Detection means such as a strain sensor or a switch for detecting movement can be provided, and the communication function of the operation device RFID 103 can be validated in conjunction with the detection means.

  Further, the operator RFID 106 cannot be linked to the operation device 101 like the operation device RFID 103. Therefore, the operator information reading request signal 203 cannot be set to be receivable when the operation device 101 is operated. On the other hand, if the reception is always possible, other operator RFIDs in the vicinity receive the operator information read request signal 203 and the operator identification information different from the correct operator is transmitted, and the operator identification means 107 May be misidentified.

Therefore, it is necessary to prevent other operator RFIDs from receiving the operator information read request signal 203 for the correct operator. Such an interference avoidance function includes the methods described above, but instead of them, an interference avoidance function described below can be provided. For example, the operator RFID 106 is worn on a part that can detect the movement of the operator 001 such as a finger, wrist, elbow, and shoulder, and the operator RFID 106 is provided with a strain sensor or the like to detect the movement of the operator 001 and detect the movement. The communication function of the operator RFID 106 can be validated by the signal. Further, the operator 001 may perform an operation so as to enable the communication function of the operator RFID 106 at the time of operation. Further, the communication function of the operator RFID 106 may be enabled by a signal for enabling the communication function of the operation device RFID 103 or the operation device information 202 transmitted from the operation device RFID 103. By doing in this way, the one-to-one relationship between the operator and the operating device can be further secured, and the reliability of operation authority management is improved.
(Embodiment 2)
FIG. 2 shows a configuration diagram of an operation authority management system according to another embodiment of the present invention. As shown in the figure, the difference from the embodiment of FIG. 1 is that an operation signal 301 output from the operation device 101 is output to the operation target device 110 via the signal control unit 111, and the signal control unit 111 is The opening / closing control is performed by the operation permission signal 306 output from the operation permission determining means 109. In addition, when the judgment of the operation permission judging means 109 is not permitted, the alarm notifying means 113 for issuing an alarm or notification to that effect is provided. Furthermore, the operation unit information 302 and the operator information 303 are recorded in the recording unit 112 so that an operation record is left. Since the other configuration is the same as that of the embodiment of FIG.

It is a block diagram of the operation authority management system of one Embodiment of this invention. It is a block diagram of the operation authority management system of other embodiment of this invention.

Explanation of symbols

001 Operator 101 Operator 102 Operator information read request means 103 Operator RFID
104 Operator identification means 105 Operator information reading request means 106 Operator RFID
107 operator identification means 108 operation permission information storage means 109 operation permission judgment means 110 operation target device 201 operation device information read request signal 202 operation device information 203 operator information read request signal 204 operator information 301 operation signal 302 operation device information 303 Operator information 304 Operation permission information 305 Operation command signal

Claims (5)

  An operating device wireless identification means capable of transmitting identification information of the operating device corresponding to the operating device is provided, and an operator wireless identification means capable of transmitting the identification information of the operator is worn by the operator. When operated, the operation radio identification unit and the operator radio identification unit are requested to transmit the identification information of the operation unit and the identification information of the operator, and the transmitted identification information of the operation unit and the An operation authority management method for receiving identification information of an operator and determining whether or not the operation device has been operated by an operator having an operation authority. Operation permission information storage means for storing operation permission information in which an operator who has an operation authority of an operation device that outputs an operation signal to an operation target device is associated with the operation device, and operation of the operation device is the operation authority An operation permission determination is made to determine whether or not the operation of the operation device is performed by an operator having the operation authority, and to permit the operation signal of the operation device to be output to the operation target device. In an operation authority management system having means,
Output from the operating device, operating device wireless identification means provided corresponding to the operating device and transmitting operating device identification information, operator wireless identification means worn by the operator and transmitting operator identification information, and An operation information requesting unit that wirelessly transmits a transmission request for the operator identification information and the operator identification information in response to an operation signal, and the operation permission determining unit responds to the transmission request of the operation information requesting unit. Then, the operation device identification information and the operator identification information transmitted from the operation device wireless identification means and the operator wireless identification device are received, and the operation device has the operation authority by collating with the operation permission information. An operation authority management system for determining whether or not an operation is performed by an operator.   The operation authority management system according to claim 2, wherein the operation unit wireless identification unit is enabled to have a wireless function only when the corresponding operation unit is operated.   The operation authority management system according to claim 2, wherein the wireless function of the operation unit wireless identification unit is validated by a detection unit that detects an operation of the operation unit.   The operation authority management system according to claim 2, wherein the wireless function of the operator wireless identification unit is validated by the identification information transmitted from the operating unit wireless identification unit.

Images