JP2001022403A - Security managing method and monitoring controller - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a security managing method which can minutely set a restriction on an operation that respective operators execute with respect to a monitoring/operation picture and which can easily change a restriction content. SOLUTION: A monitoring/operation picture 6 generated and displayed based on a resource database 5, is constituted so that an operation restriction condition on whether a key which is set for a screen setting resource file at every operator and is generated on the monitoring/operation picture 6, is reflected on a resource database 5 at the time of the display of the monitoring/operation picture 6 and an operational restriction is given on the operation of the operator with respect to the monitoring/operation picture 6.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a security management method and a monitoring control device suitable for use in a system for monitoring and controlling an unmanned substation in an electric power system, for example.

[0002]

2. Description of the Related Art In a conventional supervisory control device, especially a remote supervisory control system in a power system, any operator can use all the functions of the supervisory control system.

[0003] In recent years, many monitoring and control systems other than the power system have a function of restricting the authority of monitoring operation according to the level of an administrator.

FIG. 5 is a block diagram showing a configuration of a plant monitoring and control device disclosed in, for example, Japanese Patent Application Laid-Open No. 6-195101. In FIG. 5, 27 is a memory card in which card data including predetermined manager information and plant control information is input to the magnetic stripe unit 28, 19 is an input unit which reads the card data input to the memory card 27,
Reference numeral 20 denotes a memory unit for classifying card data read by the input unit 19 into manager information or plant control information, and stores them in an address table or a security table, respectively. 23 outputs an operation control signal to plant equipment based on the card data. An operation unit 21 is a determining unit that determines a controllable range for plant equipment based on a previously input determination condition.

A control unit 22 outputs an operation control signal when the determination unit 21 outputs a control permission signal. The storage unit 22 stores monitoring control information for each control range in the plant and information of a manager. A card data reading device for reading card data of a memory card, a judging device for judging a controllable range for various control ranges based on the read card data, and outputting a control signal to an operation unit and a control device according to the judging conditions. A control signal output control means, and a management level is determined based on the card data by reading a memory card by a card reader, and stored in the storage device based on the determined management level. The controllable device information is read out, and based on the operable device information, the operation unit 23 and the control unit 23 are controlled. Control signal is output to the device. The operation unit 23 controls the operation unit 23 so that only the operable device can be operated by the control signal.

[0006]

Since the conventional supervisory control device is configured as described above, it only restricts the output of the control signal to the supervisory control object. It is impossible to make detailed restrictions on a wide range of operations of the monitoring and control system, such as addition, deletion, change, and upper and lower limits of operation monitoring values. Therefore, there is a problem that the range of the constraint cannot be flexibly changed.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-described problems, and can flexibly set restrictions on the operation of each operator, and can easily change the contents of restrictions. It is an object of the present invention to obtain a security management method and a monitoring control device with improved security.

[0008]

According to the security management method of the present invention, the operation target screen is set in a screen setting resource file for each operator of the operation target screen generated and displayed based on the resource database. The operation constraint condition for each operator is reflected in the resource database when the operation target screen is displayed, and an operation restriction is imposed on the operation of the operator on the operation target screen.

[0009] The security management method according to the present invention comprises:
The operation target screen is displayed instead of the login screen only when the operator specific information entered on the login screen by the operator matches the operator specific information of the previously created login management file. It is.

[0010] The security management method according to the present invention comprises:
The restriction condition as to whether or not the button created on the monitoring / operation screen can be pressed is set for each operator.

[0011] The security management method according to the present invention comprises:
Restrictions on whether or not the operator can call the maintenance / correction screen when the operator performs maintenance / correction of the operation record and status record data of the monitoring control target, or press the maintenance / correction execution button are set for each operator. It is something to do.

[0012] The security management method according to the present invention comprises:
Calling a correction screen when an operator modifies equipment data accompanying addition, deletion, or change of equipment to be monitored and controlled, or sets restrictions on whether or not a correction execution button can be pressed for each operator It is like that.

[0013] The security management method according to the present invention comprises:
For each operator, the upper and lower limit setting screen for the function to set the upper and lower limit values for the operation monitoring of the status of the equipment to be monitored and controlled, or the restrictions on whether the upper and lower limit value setting execution buttons can be pressed are set for each operator. It is something to set.

According to the monitoring control apparatus of the present invention, an operation target screen generated and displayed based on a resource database is set in a screen setting resource file for each operator, and is set for each operator of the operation target screen. The operation constraint conditions described above are reflected in the resource database when the operation target screen is displayed, and operation restriction imparting means is provided to impose operational restrictions on the operation of the operator on the operation target screen.

According to the monitoring control apparatus of the present invention, the monitoring / operation screen generated and displayed based on the resource database is created on the monitoring / operation screen set in the screen setting resource file for each operator. An operation constraint that reflects an operation constraint condition as to whether or not a button can be pressed, in the resource database when the monitoring / operation screen is displayed, and imposes an operational constraint on an operator's operation on the monitoring / operation screen. This is provided with an application means.

According to the monitoring control device of the present invention, a maintenance / correction screen generated and displayed based on a resource database when maintenance / correction of operation records and status record data of a monitoring / control target is performed for each operator The call for the maintenance / correction screen set in the screen setting resource file or the operation constraint condition as to whether or not the maintenance / correction execution button can be pressed is reflected in the resource database when the maintenance / correction screen is displayed. In addition, an operation constraint providing means for providing an operation constraint on the operation of the operator on the maintenance / correction screen is provided.

According to the monitoring control device of the present invention, a correction screen generated and displayed based on a resource database when equipment data is corrected in accordance with addition, deletion, or change of equipment to be monitored and controlled is provided for each operator. The operation restriction conditions for each operator as to whether or not the correction screen set in the screen setting resource file can be pressed or whether the correction execution button can be pressed are reflected in the resource database when the correction screen is displayed. And an operation constraint imparting means for imposing an operational constraint on the operator's operation on the correction screen.

The monitoring control device according to the present invention is generated and displayed on the basis of the resource database when setting the upper and lower limit values for the function for setting the operation monitoring upper and lower limit values of the status of the equipment to be monitored and controlled. For the upper / lower limit value setting screen, call the upper / lower limit value setting screen set in the screen setting resource file for each operator, or set an operation constraint condition as to whether or not the upper / lower limit value setting execution button can be pressed. An operation constraint providing means for reflecting the upper and lower limit value setting screen on the resource database at the time of displaying the upper and lower limit value setting screen and imposing operational restrictions on the operation of the operator on the upper and lower limit value setting screen.

[0019]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below. Embodiment 1 FIG. FIG. 1 is an explanatory diagram showing the configuration of a monitoring control device to which the security management method according to the first embodiment is applied. In FIG. 1, reference numeral 1 denotes a login screen on which a user (operator) name and a password can be input. Reference numeral 2 denotes a screen / login management daemon process (operation constraint assigning means) which resides in a memory and manages various screen displays and login. Reference numeral 3 denotes a login management file in which an operator-specific name and password are written. Reference numeral 4 denotes a screen setting resource file for each operator, which is stored in a separate file for each operator. Reference numeral 5 denotes a resource database, the contents of which are reflected when a screen is generated. 6
Denotes a monitoring / operation screen (operation target screen), from which the operator executes monitoring control of the monitoring target. Reference numeral 7 denotes a control unit to be monitored and controlled, and 8 denotes an input / output unit.

Next, the operation will be described. In this monitoring control device, an operator inputs a name and password unique to an operator on a login screen 1 and notifies the screen / login management daemon process 2 of the name and password. Then, the login screen 1 is hidden and the monitoring / operation screen 6 is displayed only when both contents match.

In the monitoring and control system, an OSF (Open Software) operating on an X-Window system as a GUI (graphical user interface) is provided.
eFoundation) / Motif (Open G)
(hereinafter referred to as Motif) or the like. For example, with Motif, various parts such as buttons necessary for forming a screen can be created. Motif is based on an object-oriented programming style. For example, if the shape and color of parts are described in a text file format and reflected in a resource database, which is a common resource, the contents can be reflected at the time of screen display. . When a button is created on the screen, resource setting such as pressing / non-pressing can be realized by the same method. Therefore, whether or not the button created on the screen can be pressed is set by describing a text file. Can be.

When the login is successful, the screen setting resource file 4 prepared for each operator who has logged in is reflected in the resource database 5. The monitoring / operation screen 6 is generated and displayed based on the contents of the resource database 5. The screen setting resource file 4 describes a setting of whether or not a button to be pressed when a control signal is transmitted from the monitoring / operation screen 6 to the control unit 7 can be pressed.

Therefore, according to the first embodiment, it is possible to control whether or not a button created on the screen can be pressed for each logged-in operator, and to control each operator to monitor and control the object. Can be easily set. In addition, the change of the executable state can be dealt with only by modifying the text file, and the security management method and the monitoring control device can be easily changed without changing or adding the program.

Embodiment 2 FIG. In the first embodiment, a case has been described in which permission / prohibition is managed for operation control (pressing a button created on a screen) for a facility to be monitored and controlled.
In the security management method and the monitoring control device according to the second embodiment, the maintenance / correction screen is called when the operation record and the status record data of the monitoring / control target are maintained / corrected.
Alternatively, by setting whether or not the maintenance / correction execution button can be pressed, a mechanism can be provided for each operator to manage recording data retention and whether or not correction can be performed.

FIG. 2 shows a log-in screen 1, a screen / log-in management daemon process 2, a log-in management file 3 and a setting resource file 4 shown in FIG.
FIG. 13 is an explanatory diagram illustrating a configuration of a monitoring and control device according to the second embodiment added to a correction function. 2, the same or corresponding parts as those in FIG. 1 are denoted by the same reference numerals, and description thereof will be omitted. In FIG. 2, reference numeral 5a denotes a resource database in which a setting resource file 4 in which whether or not a data editing start button is pressed is set for each operator is reflected; 8a, an input / output unit for inputting a monitoring data type; A screen (maintenance / modification screen) 10 is a monitoring data editing daemon process, 11 is a monitoring data recording file, 12 is a recording data printing process, and 13 is a printer.

Next, the operation will be described. The monitoring data editing daemon process 10 is resident in the memory, and the input / output unit 8
a monitoring data recording file 11
To save. From the recording data editing screen 9, the monitoring data recording file 11 can be opened, maintained, and corrected. In the second embodiment, whether or not the data editing start button on the recording data editing screen 9 can be pressed is set in the setting resource file 4. If the setting resource file 4 for the logged-in operator is reflected in the resource database 5a at the timing when the operator logs in from the login screen 1, when the recording data editing screen 9 is displayed, the data editing start button is pressed. Pressability is set.

If the setting resource file 4 sets whether or not a button for starting the recording data printing process 12 on the recording data editing screen 9 can be pressed, the printing process is performed when the recording data editing screen 9 is displayed. Whether or not the start button can be pressed is set.

As described above, according to the second embodiment, it is possible to obtain a security management method and a monitoring control device capable of managing whether or not maintenance and correction of recording data can be performed for each operator.

Embodiment 3 In the first embodiment, a case has been described in which permission / prohibition is managed for operation control (pressing a button created on a screen) for a facility to be monitored and controlled.
In the third embodiment, when the equipment data is corrected in accordance with the addition, deletion, or change of the equipment to be monitored and controlled, a correction screen is called, or whether or not a correction execution button is pressed is set. It is possible to provide a function of managing whether or not the equipment data can be modified with the addition, deletion, or change of the equipment to be monitored and controlled.

FIG. 3 shows the login screen 1 shown in FIG.
Configuration of the security management method according to the third embodiment in which a login management daemon process 2, a login management file 3, and a setting resource file 4 are added to a function of modifying equipment data accompanying addition, deletion, and change of monitoring-controlled equipment. FIG. 3, the same or corresponding parts as those in FIG. 1 are denoted by the same reference numerals, and description thereof will be omitted.
In FIG. 3, reference numeral 5b denotes a resource database in which the setting resource file 4 in which the pressing of the edit start button on the equipment database editing screen (modification screen) 14 is set is reflected, 14 is an equipment database editing screen, and 15 is an equipment database. It is.

Next, the operation will be described. The equipment database 15 is used for screen generation and the like when monitoring is performed by the monitoring and control system. When adding, deleting, or changing equipment to be monitored and controlled, the same processing must be performed on the equipment database 15 as well. No. When adding, deleting, or changing equipment to be monitored and controlled in the equipment database 15, the equipment is edited from the equipment database editing screen 14.

In the third embodiment, whether or not the editing start button on the equipment database editing screen 14 can be pressed is set in the setting resource file 4. If the setting resource file 4 for the logged-in operator is reflected in the resource database 5 at the timing when the operator logs in from the log-in surface 1, the editing start button is pressed when the equipment database editing screen 14 is displayed. Availability is set.

As described above, there is an effect that a security management method capable of managing whether or not the equipment data can be corrected in accordance with the addition, deletion, or change of the equipment to be monitored and controlled for each operator is obtained.

Embodiment 4 In the first embodiment, a case has been described in which permission / prohibition is managed for operation control (pressing a button created on a screen) for a facility to be monitored and controlled.
For the function to set the operation monitoring upper limit value and the lower limit value of the state of the monitoring control target equipment, call the upper / lower limit value setting screen, or by setting whether the upper / lower limit value setting execution button can be pressed, the operation monitoring upper limit value, A function for managing whether a lower limit can be set or not can be provided.

FIG. 4 shows the login screen 1, the screen / login management daemon process 2, the login management file 3 and the setting resource file 4 shown in FIG. FIG. 14 is an explanatory diagram showing the configuration of a security management method and a monitoring control device according to the fourth embodiment when added to a setting function. FIG.
In FIG. 7, the same or corresponding parts as those in FIG. 1 are denoted by the same reference numerals, and description thereof is omitted. In FIG. 4, reference numeral 5c denotes a resource database reflecting the setting resource file 4 in which whether or not the upper / lower limit value setting execution button on the upper / lower limit monitoring surface 16 is pressed is set, and 16 denotes an upper / lower limit monitoring screen (upper / lower limit setting screen). ), 17 are upper / lower limit monitoring setting data, 18 is monitoring /
It is a data upper / lower limit monitoring daemon process.

Next, the operation will be described. The monitoring data upper / lower limit monitoring daemon process 18 is resident in the memory, and receives data of the monitored and controlled equipment from the input / output unit 8. When the received data exceeds the operation monitoring upper limit value and the lower limit value of the state of the equipment to be monitored and controlled set by the operator, the monitoring data upper / lower limit monitoring daemon process 18 notifies the upper / lower limit monitoring screen 16 and notifies the operator. Inform the person to that effect. The upper and lower limit values of the operation monitoring of the equipment to be monitored and controlled are set on the upper and lower limit monitoring screen 16, and the upper and lower limit monitoring setting data 1 are set.
7 is stored.

Monitoring data upper and lower limit monitoring daemon process 1
Reference numeral 8 refers to the upper / lower limit monitoring setting data 17 to monitor the state of the monitored and controlled equipment. Whether the upper / lower limit value setting execution button on the upper / lower limit monitoring screen 16 can be pressed is set in the setting resource file 4. At the timing when the operator logs in from the login screen 1, the setting resource file 4 for the logged-in operator is stored in the resource database 5c.
When the upper and lower limit monitoring screen 16 is displayed, whether or not the setting execution button can be pressed is set.

As described above, according to the fourth embodiment, it is possible to obtain a security management method and a monitoring control device capable of managing whether or not the continuous monitoring upper and lower limits can be set for each operator.

[0039]

As described above, according to the present invention, the operation target screen generated and displayed based on the resource database is set in the screen setting resource file for each operator. The operation constraint conditions for each operator are reflected in the resource database when the operation target screen is displayed, and an operation restriction is imposed on the operation of the operator with respect to the operation target screen. For every operation performed on the target screen, constraints can be set finely for each operator,
Further, there is an effect that the contents of the restriction can be easily changed.

According to the present invention, only when the operator-specific information input on the login screen by the operator matches the operator-specific information of the previously created login management file, the operation object is replaced with the login screen. Since the screen is displayed, it is possible to set restrictions on operators who perform operations and detailed restrictions for each operator for all operations performed by each operator on the operation target screen. There is an effect that contents can be easily changed.

According to the present invention, the restriction condition as to whether or not the button created on the monitoring / operation screen can be pressed is set for each operator, so that the monitoring / operation performed by each operator is performed. For the pressing operation of the button created on the screen,
There is an effect that restrictions can be set finely for each operator, and the contents of the restrictions can be easily changed.

According to the present invention, it is determined whether or not the maintenance / correction screen can be called when the operator performs maintenance / correction of the operation record and the status record data of the monitoring control target, or the maintenance / correction execution button can be pressed. Are set for each operator, so that the operator can maintain and correct the operation record and the status record data of the monitoring / control target when the operator
There is an effect that a restriction can be set for each operator in detail for the call of the correction screen or the pressing operation of the maintenance / correction execution button, and the restriction contents can be easily changed.

According to the present invention, it is determined whether or not the operator can call the correction screen when the operator corrects the equipment data accompanying the addition, deletion, or change of the equipment to be monitored or controlled, or can press the correction execution button. Restriction conditions are set for each operator, so it is possible to call up a correction screen when the operator performs equipment data correction accompanying addition, deletion, or change of equipment to be monitored and controlled, or to press the correction execution button. On the other hand, it is possible to set restrictions in detail for each operator, and it is possible to easily change the contents of the restrictions.

According to the present invention, it is determined whether or not it is possible to call the upper / lower limit value setting screen for the function for setting the operation monitoring upper and lower limit values of the state of the equipment to be monitored or controlled, or press the upper / lower limit value setting execution button. The upper and lower limit value setting screen for the function to set the operation monitoring upper and lower limit values of the state of the monitored and controlled equipment, or the upper and lower limit value setting execution button It is possible to finely set restrictions for each operator with respect to the pressing operation, and to easily change the contents of the restrictions.

According to the present invention, the operation target screen generated and displayed based on the resource database is set in the screen setting resource file for each operator, and the operation restriction for each operator for the operation target screen is set. The conditions are reflected in the resource database when the operation target screen is displayed, and an operation restriction imparting unit is provided to impose operational restrictions on the operation of the operator with respect to the operation target screen. It is possible to finely set restrictions on every operation performed on the target screen for each operator, and it is also possible to easily change the contents of restrictions.

According to the present invention, the monitoring / operation screen generated and displayed based on the resource database includes:
Set in the screen setting resource file for each operator,
The operation restriction condition regarding whether or not the button created on the monitoring / operation screen can be pressed is reflected in the resource database when the monitoring / operation screen is displayed, and the operation of the operator on the monitoring / operation screen is performed. Since the system is provided with an operation constraint imparting unit that imposes operational constraints, it is possible to set detailed constraints for each operator with respect to the pressing operation performed by each operator on the button created on the monitoring / operation screen. In addition, there is an effect that the contents of the restriction can be easily changed.

According to the present invention, the maintenance / correction screen generated and displayed based on the resource database when the operation record and the status record data of the monitoring control object are maintained / corrected is used for setting the screen for each operator. Call for the maintenance / modification screen set in the resource file,
Alternatively, the operation constraint condition as to whether or not the maintenance / correction execution button can be pressed is reflected in the resource database when the maintenance / correction screen is displayed, and the operational constraint on the operation of the operator on the maintenance / correction screen is set. The system is configured to include an operation constraint assigning means for assigning, so that the operator can maintain and record the operation record and the state record data of the monitoring control target.
It is possible to finely set restrictions for each operator for calling the maintenance / correction screen at the time of correction or pressing the maintenance / correction execution button, and has the effect of easily changing the details of the restrictions.

According to the present invention, when an equipment data is modified in accordance with addition, deletion, or change of equipment to be monitored and controlled, a modification screen generated and displayed based on the resource database is set for each operator. Call for the correction screen set in the resource file for operation, or operation constraint conditions for each operator as to whether or not the correction execution button can be pressed, are reflected in the resource database when the correction screen is displayed, and the correction is performed. Since the system is provided with an operation restriction assigning unit that imposes operational restrictions on the operation of the operator on the screen, corrections are made when the operator modifies equipment data in accordance with addition, deletion, and change of equipment to be monitored and controlled. Restrictions can be set for each operator for calling the screen or pressing the correction execution button. Further it is also easily effect.

According to the present invention, the upper and lower limit values generated and displayed based on the resource database when setting the upper and lower limit values for the function for setting the operation monitoring upper and lower limit values of the state of the equipment to be monitored and controlled. For the setting screen, call the upper / lower limit value setting screen set in the screen setting resource file for each operator, or set the upper / lower limit value setting execution operation constraint condition as to whether or not pressing the upper / lower limit value setting execution button is possible. When the lower limit value setting screen is displayed, the resource database is reflected, and the apparatus is provided with an operation constraint assigning means for assigning an operational constraint on the operation of the operator on the upper / lower limit value setting screen. Call the upper / lower limit value setting screen for the function to set the operation monitoring upper and lower limit values, or press the upper / lower limit value setting execution button. Finely constraint can be set, also it has the effect of enabling easily be changed constraints contents.

[Brief description of the drawings]

FIG. 1 is an explanatory diagram illustrating a configuration of a monitoring control device to which a security management method according to a first embodiment of the present invention is applied;

FIG. 2 is an explanatory diagram illustrating a configuration of a monitoring control device according to a second embodiment of the present invention.

FIG. 3 is an explanatory diagram showing a configuration of a security management method according to a third embodiment of the present invention.

FIG. 4 is an explanatory diagram showing a configuration of a security management method and a monitoring control device according to a fourth embodiment of the present invention.

FIG. 5 is a block diagram showing a configuration of a conventional plant monitoring and control device.

[Explanation of symbols]

1 Login screen, 2 screen / login management daemon process (operation constraint assigning means), 3 login management file, 4 screen setting resource file, 5, 5a, 5
b, 5c resource database, 6 monitoring / operation screen, 9 recording data editing screen (maintenance / modification screen), 14
Equipment database edit screen (correction screen), 16 upper / lower limit monitoring screen (upper / lower limit value setting screen).

Claims (11)

[Claims] 1. An operation restriction condition for each operator for the operation target screen, which is set in a screen setting resource file for each operator of the operation target screen generated and displayed based on a resource database, is set in the operation mode. A security management method that reflects the resource database when the target screen is displayed, and imposes operational restrictions on the operation of the operator on the operation target screen. 2. The operation target screen is displayed instead of the login screen only when the operator specific information input on the login screen by the operator matches the operator specific information of the login management file created in advance. 2. The security management method according to claim 1, wherein the security management is performed. 3. The operation restriction condition according to claim 1, wherein the operation restriction condition is a restriction condition for each operator as to whether or not a button created on the monitoring / operation screen can be pressed. Security management methods. 4. An operation constraint condition is to call a maintenance / modification screen when an operator performs maintenance / correction of operation record and status record data of a monitoring control object, or to determine whether a maintenance / correction execution button can be pressed. 3. The security management method according to claim 1, wherein the constraint condition is a constraint condition for each operator. 5. An operation constraint condition is to determine whether or not a correction screen can be called when an operator corrects equipment data in accordance with addition, deletion, or change of equipment to be monitored or controlled, or whether a correction execution button can be pressed. The security management method according to claim 1, wherein the constraint condition is a condition for each operator. 6. An operation restriction condition is to call an upper / lower limit value setting screen for a function for setting an operation monitoring upper limit value and a lower limit value of the state of the monitored and controlled equipment, or to press an upper / lower limit value setting execution button. 2. A constraint condition for each operator regarding the condition.
Or the security management method according to claim 2. 7. An operation target screen generated and displayed based on a resource database, the operation restriction condition for each operator of the operation target screen set in a screen setting resource file for each operator, A monitoring control device comprising an operation constraint providing unit for reflecting the operation target screen on the resource database when the operation target screen is displayed, and for imposing operational restrictions on an operation of the operator on the operation target screen. 8. A monitoring / operation screen generated and displayed based on a resource database can be pressed by a button set on the monitoring / operation screen set in a screen setting resource file for each operator. A monitoring unit comprising an operation constraint providing unit for reflecting an operation constraint condition regarding whether or not the operation is performed on the resource database when the monitoring / operation screen is displayed, and imposing operational restrictions on an operation of the operator on the monitoring / operation screen. Control device. 9. A maintenance / correction screen generated and displayed based on a resource database when maintenance / correction of operation record and status record data of a monitoring control target is set in a screen setting resource file for each operator. When the maintenance / correction screen is displayed, the operation / restriction condition as to whether or not the maintenance / correction execution button can be pressed is reflected in the resource database when the maintenance / correction screen is displayed. A monitoring and control device including an operation constraint imparting unit that imposes operational constraints on an operation of an operator. 10. A modification screen generated and displayed based on a resource database when modifying equipment data in accordance with addition, deletion, or change of equipment to be monitored and controlled, in a screen setting resource file for each operator. The operation restriction conditions for each operator as to whether the set correction screen is called or whether or not the correction execution button can be pressed are reflected in the resource database when the correction screen is displayed, and the operator for the correction screen is displayed. A monitoring and control apparatus comprising an operation constraint imparting unit for imposing an operational constraint on the operation of (1). 11. An upper / lower limit value setting screen generated and displayed based on a resource database when setting upper / lower limit values for a function for setting an operation monitoring upper limit value and a lower limit value of a state of a facility to be monitored and controlled. Calling the upper / lower limit value setting screen set in the screen setting resource file for each operator, or operating constraint conditions as to whether or not the upper / lower limit value setting execution button can be pressed, the upper / lower limit value setting screen A monitoring control device comprising an operation constraint providing means for reflecting the upper and lower limit value setting screen with an operation constraint on an operation of an operator on the upper / lower limit value setting screen at the time of display.