JP2003345429A - System and method for remote control - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system and a method for remote control which keeps convenience and security of a network on a user side without requiring a specific protocol and with less time and cost to be requested for a control. <P>SOLUTION: The system comprises a target device to be controlled 10; an area network 12 connected to the target device 10; a control computer 20 for controlling the target device 10 from outside of the area network 12; a communication network 33 for connecting between the target device 10 and the control computer 20 not through the area network 12; a communication network 35 connected to the control computer 20; and a router 18 for selectively rejecting signals from the communication network 35 to the area network 12 while keeping communication from the area network 12 to the communication network 35 while keeping communication from the communication network 35 to the area network 12, the control computer 20 sends a process starting signal to the target device 10 through the communication network 33, and the control computer 20 and the target device 10 start communication for controlling through the communication network 35 with the starting signal as an opportunity. <P>COPYRIGHT: (C)2004,JPO

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a remote management system and a remote management method.

[0002]

2. Description of the Related Art Conventionally, in order to manage and maintain equipment located at a customer's site, an administrator of the device goes to the customer site and checks whether the device is operating properly. Conservation was performed when it was not appropriate.

[0005] However, in order to reduce the labor of the administrator and to provide the maintenance service of the equipment more quickly, a remote management system has been devised which manages the equipment at the customer without visiting the customer. In the remote management system, the administrator's computer accesses the equipment installed at the customer's site via the Internet or telephone line,
Manage the status of the device.

FIGS. 4A to 4E are schematic diagrams showing a conventional remote management system. Each of the remote management systems shown in FIGS. 4 (A) to 4 (E) manages the target device 10 installed on the customer side and the administrator device outside the customer. And a management computer 20 that is used to perform the operations.

In the remote management system shown in FIGS. 4A and 4B, a target device 10 and a management computer 20 are connected to a telephone line 30 via demodulators (hereinafter referred to as modems) 15 and 25, respectively. Alternatively, it is connected to the mobile telephone network 33. Thereby, the target device 10 and the management computer 20 can communicate through the telephone line 30 or the mobile telephone network 33.

In the remote management system shown in FIGS. 4C to 4E, the target device 10 and the management computer 20 communicate via the Internet 35.

In the remote management system shown in FIG. 4C, the target device 10 is connected to an area network on the customer side, for example, a LAN (Local Area Network) 12, and a transmission route determination device (hereinafter, referred to as a router) 17 is provided.
And the management computer 2 through the Internet 35
0 can be communicated.

In the remote management system shown in FIG. 4D, an equipment area network 13 is provided independently of other area networks. The target device 10 is connected to the facility area network 13 and can communicate with the management computer 20 via the Internet 35.

The remote management system shown in FIG. 4E has a security function (hereinafter referred to as a firewall) for selectively removing signals entering the area network 12 instead of the router 17 of the remote management system shown in FIG. ). FIG.
FIG. 4C shows another configuration of the remote management system of FIG.
Is the same as the configuration of the remote management system.

[0010]

In the remote management system shown in FIG. 4A, when a large amount of data is transmitted between the target device 10 and the management computer 20, the telephone line is connected for a long time. There is a need to. FIG.
In the remote management system (B), the target device 10 and the management computer 2
FIG. 4 (A) when the amount of data to be communicated with 0 is large.
Communication time is required as with the remote management system. Therefore, in the remote management system shown in FIGS. 4A and 4B, communication time and communication cost increase.

In recent years, it has been possible to always connect at a fixed price by a communication path or a communication system different from a telephone line and a mobile telephone network, and to perform broadband transmission (so-called broadband).
2. Description of the Related Art The Internet, which allows a large amount of data to be communicated in a short time, has become widespread. From FIG. 4 (C) to FIG.
The remote management system (E) uses the Internet under such circumstances. Therefore, FIG.
4 (E) can reduce communication time and communication cost.

However, as in the remote management system shown in FIG.
In such a case, unauthorized access from the Internet to the customer's area network 12 becomes a problem.

Therefore, it is conceivable to separate the facility area network 13 from the customer-side area network 12 as in the remote management system shown in FIG. When the facility area network 13 is separated from the customer-side area network 12, unauthorized access to the area network 12 is prevented, and security is improved. However, the customer cannot communicate from the terminal connected to the area network 12 to the facility area network 13. Therefore, it is inconvenient for the customer side that the facility area network 13 and the customer side area network 12 are separated.

When a router 18 with a security function is provided as in the remote management system shown in FIG. 4E, data cannot be transmitted to the area network 12 from outside. Therefore, it is necessary to set a unique protocol so that the management computer 20 can pass through the router 18 with the security function and the area network 12. In addition, it is necessary to adjust the firewall function of the router 18 so that data according to this unique protocol can pass through the router 18.

Therefore, an object of the present invention is to eliminate the need for a unique protocol, secure the convenience of customers and the security of the area network on the customer side, and do not require the time and cost required for management and maintenance. A remote management system and a remote management method are provided.

[0016]

According to an embodiment of the present invention, there is provided a remote management system capable of transmitting and receiving signals, and comprising: a target device to be managed; an area network connected to the target device; A first computer that is provided outside the area network and manages the target device, and a first communication that communicably connects the target device and the management computer without passing through the area network; A network, a second communication network communicably connected to the management computer, and a second communication network installed between the area network and the second communication network. A method for selectively removing a signal entering the area network from the second communication line while maintaining communication to a network. Device with a security function, the management computer transmits a processing start signal for starting the management processing of the target device to the target device through the first communication network, triggered by the processing start signal, The management computer and the target device perform communication for management through the second communication line network, the device with security function, and the area network.

Preferably, the target device transmits a first request to the management computer through the device with security function, the area network and the second communication line network in response to the processing start signal,
The management computer returns a second request as a response to the first request, a second request to the target device through the second communication line network, the device with security function, and the area network, The target device, through the area network, the device with security function and the second communication network, state data indicating the state of the target device,
The information is transmitted to the management computer as a response to the second request.

The management computer transmits maintenance data for maintaining the target device to the target device based on the status data through the second communication line network, the device with security function, and the area network. May be configured.

Preferably, the second communication network is an Internet network for interconnecting networks, and the first request, the second request, the status data and the security data are transmitted according to HTTP. .

[0020] At least one of the first request, the second request, the status data and the security data may be encrypted and transmitted to the second communication network. .

A remote management method according to an embodiment of the present invention is capable of transmitting and receiving signals and includes a target device to be managed, an area network connected to the target device, and an external device outside the area network. A management computer for managing the target device, a first communication line network communicably connecting the target device and the management computer without passing through the area network, A second communication network communicably connected to a computer, and installed between the area network and the second communication network to maintain communication from the area network to the second communication network; Device with a security function for selectively removing a signal entering the area network from the second communication line In the remote management system including: a transmission step of transmitting a processing start signal for the management computer to start the management processing of the target device to the target device through the first communication line network; At an opportunity, the management computer and the target device include a management step of performing communication for management through the second communication line network, the device with security function, and the area network.

Preferably, in the managing step, the target device sends a first request to the management computer through the device with security function, the area network, and the second communication line network in response to the processing start signal.
Transmitting the request, and the management computer transmits a second request as a response to the first request.
Returning the request to the target device through the second communication line network, the device with security function, and the area network, wherein the target device is the device with the area network, the device with security function, and the second device. Transmitting status data indicating the status of the target device to the management computer as a response to the second request via a communication network.

In the management step, after the management computer receives the status data, the management computer transmits the status data through the second communication line network, the device with security function, and the area network based on the status data. Maintenance data for maintaining the target device may be transmitted to the target device.

Preferably, the second communication network is an internet network for interconnecting networks, and the first request, the second request, the status data and the security data are transmitted according to HTTP. .

[0025] At least one of the first request, the second request, the status data or the security data may be encrypted and transmitted to the second communication network.

[0026]

Embodiments of the present invention will be described below with reference to the drawings. Note that the present embodiment does not limit the present invention. In the drawings, the same components are denoted by the same reference numerals.

FIG. 1 shows a schematic diagram of a remote management system 100 according to an embodiment of the present invention. The remote management system 100 includes a target device 10 that can transmit and receive signals and is a target of management, an area network 12 connected to the target device 10, and an area network 1
2 and a management computer 20 for managing the target device 10.

The remote management system 100 includes a portable telephone network 33 communicably connected between the target device 10 and the management computer 20 without passing through the area network 12, and an Internet communicably connected to the management computer 20. 35.

Further, the remote management system 100
Installed between the area network 12 and the Internet 35,
And a router 18 with a security function (hereinafter, simply referred to as a router 18) for selectively removing a signal entering the area network 12 from the Internet 35 while maintaining communication with the router 18.

Target device 10 and management computer 20
Is connected to the telephone line 30 via the modems 15 and 25, respectively.
Alternatively, it is connected to the mobile telephone network 33.

As described above, the remote management system 100
Is a communication path between the target device 10 and the management computer 20 via the mobile phone network 33 and the Internet 35.
Has a communication path via

The target device 10 is, for example, various industrial devices such as machine tools, robots, injection molding machines, wire electric discharge machines, printing machines, electric presses, and PLCs (Programmable Logic Controllers) used in these industrial devices. And so on.

Communication from the target device 10 to the management computer 20 in the remote management system 100 may be either wired or wireless, and may be electrical communication or optical communication. Note that this communication is preferably wired optical communication from the viewpoint of being able to communicate a large amount of data at high speed, but may be electric communication or wireless communication from the viewpoint of equipment costs and communication costs.

The connection from the router 18 or the management computer 20 to the Internet 35 uses a communication path different from that of the mobile phone network 33. The communication path is, for example, an electric communication cable or an optical communication cable. Note that the connection from the router 18 or the management computer 20 to the Internet 35 may be made using a different communication method using the same communication path as the mobile phone network 33. As the communication method, for example, ISDN (Integrated Servo
vices Digital Network) and ADSL (AsymmetricDigit)
al Subscriber Line).

The Internet 35 is an HTTP (Hypertext Tr)
Ansfer Protocol) is used to communicate by request and response thereto. In the present embodiment,
The connection to the Internet 35 is always possible at a fixed price, and a large amount of data can be communicated in a short time by broadband transmission.

The firewall of the router 18 prevents unauthorized access to the area network 12 by selectively removing signals entering the area network 12 from the Internet 35. On the other hand, since the access from the area network 12 to the Internet 35 is not removed, the communication from the area network 12 to the Internet 35 is not restricted. The firewall of the router 18 may be, for example, a packet filtering type or a proxy server type.

The area network 12 has a CSMA / C
TCP / I using Ethernet (registered trademark) of D system
P (Transmission Control Protocol / Internet Protoc
ol) is preferably available.

The form telephone network 33 is based on packet communication for transmitting data in packets of a predetermined capacity.

As described above, the remote management system 100 according to the present embodiment uses a known communication network, but is provided with a plurality of communication networks having different communication paths or communication systems.

FIG. 2 is a schematic diagram of a remote management system 200 using a telephone line 30 instead of the mobile telephone network 33 of the remote management system 100 shown in FIG. Other components of the remote management system 200 include:
It is the same as each component of the remote management system 100. The remote management system 200 operates in the same manner as the remote management system 100, and can obtain the same effects. As described above, the alternative means of the mobile phone network 33 is not particularly limited, and is a means capable of performing communication without passing through the area network 12 or the router 18.

Next, while explaining the operation of the remote management system 100, a remote management method according to the embodiment of the present invention will be described.

FIG. 3 is a flowchart of a remote management method according to the embodiment of the present invention. First, in the remote management system 100, the management computer 20 transmits a processing start signal for starting the management processing of the target device 10 to the target device 10 through the mobile phone network 33 (S1).
0). The processing start signal is transmitted from the mobile phone network 33 and the modem 1
Pass through 5 and 25. Therefore, since the processing start signal does not need to pass through the router 18, the processing start signal is not removed by the firewall of the router 18. The processing start signal is transmitted to the area network 1
2, the security of the area network 12 is maintained. Further, the processing start signal indicates that the target device 1
It is sufficient that 0 is a signal that triggers transmission of a request through the Internet 35. Therefore, a small amount of data is sufficient for the processing start signal without depending on the data amount. The processing start signal is, for example, a signal that turns on the switch of the target device 10 and causes the target device 10 to transmit a request.

Next, the target device 10 is the management computer 2
The first request is sent to the server 0 (S20). The first request is made through the area network 12 through the router 18.
Reach Here, the router 18 is the area network 1
The first request passes to the Internet 35 because it does not restrict communication from 2 to the outside. The first request may be, for example, a URL transmitted as a request to browse an HTTP home page.

Next, the management computer 20 receives the first request from the Internet 35, and as a response, the management computer 20 sends a second request for requesting data on the operation state of the target device 10 to the target device 1.
0 (S30). The second request is transmitted as a response to the first request. Therefore, the second request can pass through to the area network 12 without being removed by the firewall of the router 18.

Next, the target device 10 receives the second request, and transmits the operation state data of the target device 10 to the management computer 20 as a response to the second request (S40). The status data of the target device 10 is various parameters indicating the current state of the target device 10, such as the operating time of the machine tool, the processing progress status, various alarms, a processing program or the like, the contact state of the PLC, various alarms, and the sequence program. And so on.

Next, the management computer 20 sets the target device 1
The status data of 0 is received, and it is determined whether the target device 10 is in an appropriate status (S50). For example, it is determined whether the state data of the target device 10 is within a range of a predetermined specification. If the state data is within the range of the specification, it is determined that the target device 10 is in an appropriate state. If the state data is out of the range of the specification, the target device 10 is not in the appropriate state. to decide.

When it is determined that the target device 10 is in an appropriate state, the remote management method according to the present embodiment ends, and enters a standby state until the next remote management method is executed. When executing the next remote management method, this remote management method is repeated from S10.

Next, when it is determined that the target device 10 is not in an appropriate state, that is, when it is determined that any part of the target device 10 has some problem, the management computer 20 sets the Internet 35 The data for maintenance is transmitted to the target device 10 through (S60). The maintenance data is stored in the target device 1 based on the status data of the target device 10.
This is data for maintaining 0. For example, a correction parameter, a correction program, a state change command, and the like.

Next, the target device 10 receives the maintenance data, and the target device 10 is adjusted based on the maintenance data (S70). The adjustment of the target device 10 may be manually performed by the customer, or the target device 10 may automatically adjust. The adjustment of the target device 10 is, for example, replacement of a tool of a machine tool, replacement of a part of a machine tool, replenishment of lubricant of the machine tool, and the like. When the target device 10 is secured, the remote management method according to the present embodiment ends, and the system enters a standby state until the next remote management method is executed. When executing the next remote management method, this remote management method is repeated from S10.

This remote management method may be executed periodically (for example, every week, every month, or every year). Further, the administrator may arbitrarily execute the remote management method.

The remote management system 200 shown in FIG.
Operates similarly to the remote management system 100,
The difference is that the processing start signal is transmitted through the telephone network 30 in S10.

The remote management system 100 or 2
The process start signal, status data or security data communicated at 00 may be encrypted and sent to the Internet 35. As an encryption method, for example, V
PN (Virtual Private Network), SSL (Secure So
cket Layer), an electronic signature, and the like.

The components of the remote management systems 100 and 200 according to the present embodiment use existing components, and the setting of each component (for example, the router 18)
It is not necessary to change the firewall settings. Therefore, according to the remote management systems 100 and 200,
Unlike the conventional system shown in FIG. 4E, it does not require a unique protocol, and does not require the trouble of changing the setting of the components. Further, since no special device is required, no additional equipment cost is required.

The remote management systems 100 and 200
Two communication networks are used. Therefore, the remote management systems 100 and 200 transmit only a relatively small-capacity processing start signal through the mobile phone network 33 or the telephone line 30 and transmit relatively large-capacity status data and maintenance data through the Internet 35. Can be. By selectively using two communication network networks in this way, the communication cost is reduced as compared with the conventional communication network shown in FIGS. 4 (A) and 4 (B).
Can be suppressed lower than the system shown in FIG.

According to the present embodiment, the area network 12 is connected to the Internet 35 through the router 18 having a firewall function. Therefore, the remote management systems 100 and 200 according to the present embodiment
Has no security problem as in the conventional system shown in FIG. 4 (C), and security is maintained. Further, security can be further improved by encrypting the processing start signal, the status data, or the security data according to the present embodiment.

According to the present embodiment, the conventional FIG.
Since the area network 12 does not need to be separated from the target device 10 as in the system shown in FIG. 1, convenience on the customer side is not impaired.

The remote management systems 100 and 20
0 communicates status data or security data using the HTTP protocol, so that not only text data but also status data or security data such as audio and video may be communicated as HTML format data.

[0058]

According to the present invention, the remote management system and the remote management method according to the present invention do not require a unique protocol, ensure the customer's convenience and the security of the customer's area network, and manage and maintain the network. The time and cost required for

[Brief description of the drawings]

FIG. 1 is a schematic diagram of a remote management system 100 according to an embodiment of the present invention.

FIG. 2 is a schematic diagram of a remote management system 200 according to the embodiment of the present invention.

FIG. 3 is a flowchart of a remote management method according to the embodiment of the present invention.

FIG. 4 is a schematic diagram showing a conventional remote management system.

[Explanation of symbols]

100, 200 remote management system 10 Applicable devices 12 area network 15, 25 modem 18 Router with security function 20 Management computer 30 telephone lines 33 Mobile phone network 35 Internet

Claims (10)

[Claims] 1. A target device that can transmit and receive signals and is a target of management, an area network connected to the target device, and provided outside the area network to manage the target device. A first communication line network communicably connecting the target device and the management computer without passing through the area network, and a second communication network communicably connected to the management computer. A communication line network, installed between the area network and the second communication line network, while maintaining communication from the area network to the second communication line network, A device with a security function for selectively removing signals entering the area network, wherein the management computer A process start signal for starting a management process of the target device is transmitted to the target device through a network, and the management computer and the target device are connected to the second communication network by the process start signal. A remote management system for performing communication for management through the device with security function and the area network. 2. The target device transmits a first request to the management computer through the device with security function, the area network and the second communication line network in response to the processing start signal. The computer returns a second request as a response to the first request to the target device through the second communication line network, the device with security function, and the area network, and returns the second request to the target device. Transmits status data indicating the status of the target device through the area network, the device with security function, and the second communication line network to the second
The remote management system according to claim 1, wherein the remote management system transmits the request to the management computer as a response to the request. 3. The management computer, via the second communication line network, the device with security function, and the area network, stores maintenance data for maintaining the target device based on the status data. The remote management system according to claim 2, wherein the data is transmitted to the remote management system. 4. The second communication line network is an Internet network for interconnecting networks, wherein the first request, the second request, the status data and the security data are transmitted according to HTTP. The remote management system according to any one of claims 1 to 3, wherein: 5. The method according to claim 1, wherein at least one of said first request, said second request, said status data and said security data is encrypted and transmitted to said second communication network. The remote management system according to claim 4, wherein 6. A target device that can transmit and receive signals and is a target of management, an area network connected to the target device, and provided outside the area network to manage the target device. A first communication line network communicably connecting the target device and the management computer without passing through the area network, and a second communication network communicably connected to the management computer. A communication line network, installed between the area network and the second communication line network, while maintaining communication from the area network to the second communication line network, A device with a security function for selectively removing a signal entering the area network. Transmitting a processing start signal for starting a management process of the target device to the target device through the first communication line network; and the management computer and the target being triggered by the process start signal A management step of performing communication for management with a device through the second communication line network, the device with security function, and the area network. 7. The management step, wherein the target device sends a first request to the management computer through the device with security function, the area network, and the second communication line network in response to the processing start signal. And the management computer returns a second request as a response to the first request to the target device through the second communication line network, the device with security function, and the area network. The target device transmits status data indicating a status of the target device to the second network through the area network, the device with security function, and the second communication network.
Transmitting the request to the management computer as a response to the request. 8. In the management step, after the management computer receives the status data, the management computer transmits the status data to the status data through the second communication line network, the device with security function, and the area network. The remote management method according to claim 7, wherein maintenance data for maintaining the target device is transmitted to the target device based on the data. 9. The second communication line network is an Internet network interconnecting networks, wherein the first request, the second request, the status data and the security data are transmitted according to HTTP. The remote management method according to any one of claims 6 to 8, wherein: 10. The system according to claim 1, wherein at least one of said first request, said second request, said status data and said security data is encrypted and transmitted to said second communication network. The remote management method according to claim 9, wherein