JP2007226405A - Monitoring control system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a monitoring control system allowing a general-purpose computer having been used except for a human interface to be easily used as the human interface. <P>SOLUTION: The computer 7 having been used except for the human interface is used as a substitution when the human interface 4 fails, and hence has a network interface and external storage device. External storage media storing an operating system of the computer, a setting required for communication with a monitoring control server 1 and an application for accessing the monitoring control server such as a Web browser, and access authority information to the monitoring control system is inserted into the external storage device of the computer 7, and is started by the information on the external storage media. Thus, the computer 7 can be easily used as the human interface, an adverse influence by computer virus is prevented, and appropriate access restriction can be performed. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a monitoring control system for plants such as water and sewage facilities.

  A monitoring control system that performs monitoring control of a plant such as a water and sewage system by connecting a human interface to a network is already well known (for example, see Non-Patent Document 1 and Non-Patent Document 2). By making it possible to use a Web browser that runs on a general-purpose computer as a human interface for the control system, it has become possible to monitor and control the plant from anywhere without installing special software on the general-purpose computer. .

On the other hand, a technique for starting a general-purpose computer using an OS stored in an external medium such as a CD-ROM without using an OS (operating system) stored in a hard disk built in the general-purpose computer is already known. (For example, see Non-Patent Document 3 and Non-Patent Document 4), there is no example in which such a technique is applied to a general-purpose computer used as a human interface of a supervisory control system that performs supervisory control of a plant.
Takatsu et al., “Monitoring and Control System for Water and Sewerage Systems”, Toshiba Review Vol. 55 No. 6, 2000, p5-9 Tonozuka, “Development of Water and Sewerage Monitoring and Control System Technology”, Toshiba Review Vol. 56 No. 10, 2001, p15-17 "LinuxMagazine", ASCII, December 2002 “I / O”, Engineering, January 2003

  As mentioned above, it became possible to monitor and control the plant from anywhere using a general-purpose computer, but the general-purpose computer is more prone to failure than the industrial computer used in the conventional monitoring and control system, resulting in monitoring. The reliability of the human interface of the control system is decreasing.

  On the other hand, the advantage of enabling monitoring control of a plant using a Web browser installed on a general-purpose computer is that monitoring control can be performed without installing the monitoring control system program and data in the computer. . In this way, since installation of programs and data is not required, if the human interface fails, it is possible to use a computer that was used for purposes other than supervisory control, such as office work, as a substitute for the failed human interface. become.

  However, when a computer used for purposes other than supervisory control is used as a human interface of a supervisory control system, there are the following problems.

  (1) In order to connect to the network of the supervisory control system, it is necessary to change the setting related to the computer network. Depending on the skill of the operator, the setting cannot be performed correctly or to connect to the office network. It may not be possible to restore the original settings.

  (2) When a computer used for purposes other than supervisory control is infected with a computer virus, it is expected that the computer virus will adversely affect the supervisory control system.

  (3) By making the computer used for purposes other than supervisory control accessible to the supervisory control system, it is not impossible for anyone other than authorized persons to access the supervisory control system. Or operate a plant to be monitored.

  Further, when a computer used for purposes other than supervisory control is used as the human interface of the supervisory control system, if the computer is started using an OS stored in an external medium such as a CD-ROM, There is a problem that data other than authorized persons may be peeped at or may operate a plant to be monitored by accessing the monitoring control system.

  Therefore, the present invention has been made in view of the above-described points so that a general-purpose computer used for a purpose other than the human interface of the supervisory control system can be easily used as the human interface of the supervisory control system. In addition, the monitoring control system can be accessed without changing the settings of the OS and applications installed on the general-purpose computer, the adverse effects of computer viruses can be prevented, and access to the appropriate monitoring control system can be restricted. An object is to provide a supervisory control system.

In order to achieve the above object, the present invention provides:
In the supervisory control system that performs supervisory control of the plant,
An external storage medium containing an operating system for starting the computer, information for accessing the monitoring control server of the monitoring control system, an application for accessing the monitoring control system, and access authority information for the monitoring control system; ,
A computer having a network interface connectable to the network of the supervisory control system and capable of starting from an external storage medium;
And a monitoring control server capable of restricting access to the functions of the monitoring control system based on access authority information transmitted from a human interface constituted by the computer.

  According to the present invention, a general-purpose computer that has been used for purposes other than the human interface of the supervisory control system can be easily used as the human interface of the supervisory control system. In this case, the monitoring control system can be accessed without changing the settings of the OS and applications installed in the general-purpose computer, the adverse effects of computer viruses can be prevented, and access to the appropriate monitoring control system can be restricted. Can do.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. In the following drawings, the same symbols indicate the same or corresponding parts.

(Embodiment 1)
Embodiment 1 of the present invention will be described with reference to FIG.

  In FIG. 1, the monitoring control server 1 receives a function of collecting plant information from a controller 2 and a sensor 3 arranged in the plant, and a device operation command and a set value change command issued by a plant monitor from the human interface 4. In response, an operation command or a set value change command is output to the necessary equipment. The human interface 4 is used exclusively for monitoring control applications, and is usually connected to a network 5 or a network 6 that accesses the monitoring control server 1. The network 5 is, for example, a network dedicated to monitoring control, and the network 6 is, for example, a general network in a monitoring office.

  In the human interface 4, network settings necessary for connection to the monitoring control server 1 are set. The human interface 4 reads information necessary for plant monitoring from the monitoring control server 1 and displays it on the screen. Operation of plant equipment, setting of control target values, and the like can be performed from a screen for displaying plant information displayed on the human interface 4.

  When the human interface 4 becomes unusable for some reason or when it is desired to increase the number of human interfaces 4, the computer 7 used for purposes other than supervisory control such as office work is connected to the network 5 or 6. It is used as a substitute for the human interface 4.

  A computer 7 used as a human interface of the supervisory control system has a network interface for connecting to the network 5 or 6 and a CD-ROM or the like in which information necessary for operating the computer 7 as a human interface is stored. It is necessary to have an external storage device for booting from the external storage medium. An internal medium such as a hard disk is connected to the computer 7, and the network settings and applications before use for monitoring control are stored in the hard disk. When the startable external medium is not inserted, the computer 7 starts up from the internal medium and starts up with the settings before use for the monitoring control system.

  In order to use the computer 7 as a supervisory control system human interface with the above system configuration, an external storage medium is inserted into the external storage device of the computer 7 and the computer 7 is activated by information stored in the external storage medium. It is assumed that the computer 7 is set to be activated by using information stored in the external storage medium preferentially when the external storage medium is inserted in the external storage device. The external storage medium includes an operating system of the computer, settings necessary for connecting to the network 5 or 6 to communicate with the monitoring control server 1, and an application for accessing the monitoring control server such as a Web browser. The access authority information of the supervisory control system is stored. The computer 7 reads the operating system from the external storage medium, and starts up in a state where the network setting for accessing the monitoring control server 1 is completed.

  In the external storage medium, the expiration date of the external storage medium can be set. When the expiration date of the external storage medium has expired, a setting for accessing the monitoring control server 1 is performed in the startup process of the computer 7. Do not. The computer 7 activated from the external storage medium is not allowed to access the internal storage medium of the computer 7.

  By starting the Web browser and accessing the monitoring control server 1 on the computer 7 activated by the information of the external storage medium, a procedure for using the computer 7 as a human interface of the monitoring control system is started. The monitoring control server 1 is provided with a program called an applet created for monitoring control, for example. The applet is read from the Web browser by the computer 7 and is operated by the computer 7, and the monitoring screen is displayed by the Web browser. Can see.

  When the computer 7 starts to access the monitoring control server 1, the monitoring control server 1 receives the monitoring control server access information stored on the external storage medium of the computer 7, and accesses and permits the computer 7 to the monitoring control server 1. Determine the operation.

  The access information includes all or any of information on an accessible monitoring control server, information that can be acquired by accessing the monitoring control server, and information that can be set by accessing the monitoring control server.

  If the monitoring control server 1 that has received the access request does not have its own information in the information of the accessible monitoring control server stored in the external storage medium of the computer 7, the monitoring control server 1 responds to the access request from the computer 7. Do not respond. When the access information stored in the external storage medium has the right to access the monitoring control server within the validity period, the monitoring control server 1 acquires it from the monitoring control server set in the external storage medium of the computer 7 The access to the monitoring control server 1 is permitted to the computer 7 by applying restrictions on information that can be set and information that can be set.

  As described above, according to the present embodiment, the computer 7 is started based on the information recorded in the external storage medium, and the access setting to the monitoring control server is automatically performed. The general-purpose computer used for the application can be used as a human interface of the monitoring control system.

  Further, even when the internal storage medium of the computer 7 used for the human interface is infected with a computer virus, the computer 7 is started only by the information of the external storage medium so that the internal storage medium is not accessed. It is possible to prevent the virus that infects the internal storage medium from being activated.

  Furthermore, by restricting access to the monitoring control server based on the access right information recorded on the external storage medium, if the access right to be recorded on the external storage medium is set in advance, Even when a large number of unspecified people access the monitoring and control system, it is possible to ensure a certain level of security.

(Embodiment 2)
A second embodiment of the present invention will be described with reference to FIG.

  In the present embodiment, the monitoring control server 1 has an external function in addition to the function of determining whether the access information from the computer 7 activated by the information in the external storage medium possessed by the monitoring control server 1 of the first embodiment is correct. Even when the information stored in the storage medium is correct information, a setting is made so that access can be denied based on the ID information of the external storage medium. Access permission / prohibition information for each ID information can be freely set in the monitoring control server 1 by the administrator of the monitoring control system.

  An ID unique to the external storage medium is stored in the external storage medium for starting the computer 7 as a human interface of the monitoring control system.

  In the present embodiment configured as described above, when there is an access from the computer 7, the monitoring control server 1 receives the ID of the external storage medium in addition to the operation of the first embodiment. The ID recorded in the external storage medium and the access permission / prohibition information for each ID of the external storage medium set in the monitoring control server 1 are compared to determine whether to permit access from the computer 7.

  As described above, by permitting access based on the ID recorded on the external storage medium, if the external storage medium is lost or stolen, or the person in charge moves to access the plant If the external storage medium is no longer valid, immediate access can be prohibited by setting access prohibition for the ID of the target external storage medium in the monitoring control server even if the external storage medium is within the expiration date.

  Even if the external medium is within the expiration date, it is possible to set the access prohibition, so that it is possible to prohibit the access to the plant of an unauthorized person without waiting for the expiration date of the external storage medium.

(Embodiment 3)
Embodiment 3 of the present invention will be described with reference to FIG.

  In the present embodiment, as in the case of the first and second embodiments, the expiration date of the medium, the accessible monitoring control server, information that can be acquired from the monitoring control server, and information that can be set in the monitoring control server are stored in the external storage medium. ID information unique to the external storage medium is recorded, and the monitoring control server 1 reads the information and controls access from the computer 7. Furthermore, in the present embodiment, the external storage medium creation computer 8 connected to the monitoring control server 1 or to the network 5 or the network 6 has a function of creating an external storage medium.

  In the present embodiment configured as described above, the monitoring control server 1 or the external storage media creation computer 8 stores the operating system and network settings to be recorded on the external media. The monitoring control server 1 or the external media creation computer 8 has a function of editing accessible server information, external media expiration date information, information that can be acquired from the monitoring control server, and information that can be set in the monitoring control server. It can be freely edited by the supervisor of the supervisory control system. The ID of the external storage medium can be freely edited, or can be automatically generated by the monitoring control server 1 or the external storage medium creation computer 8.

  After editing the information, the monitoring control server 1 or the external media creation computer 8 writes (transfers) the operating system, network settings, and edited access information to an external storage medium such as a CD-R or DVD-R. ) Create a bootable external storage medium. As an operating system to be stored in the external storage medium, it is preferable to use an operating system that can select items to be installed in order to reduce the storage capacity. For example, Linux or the like is used.

  The ID information written in the external storage medium is stored in the monitoring control server 1. When the computer 7 is started as a human interface using the created external storage medium and the monitoring control server 1 is accessed, the monitoring control server 1 uses the access information recorded on the external storage medium of the computer 7 to generate the computer 7. Determine whether to allow access from.

  As described above, by enabling the creation of an external storage medium for starting up the computer as a human interface, when the external storage medium is invalidated in the second embodiment, a new external storage medium can be immediately created by the administrator himself / herself. You will be able to create and distribute the media to those who have newly granted access. In the first embodiment or the second embodiment, the administrator can freely set the access restriction to the monitoring control system, and the administrator can ensure the desired security.

(Embodiment 4)
A fourth embodiment of the present invention will be described with reference to FIG.

  In the monitoring control system of the third embodiment, the operating system to be written (transferred) to the external storage medium is stored in the monitoring control server 1 or the external storage medium creation computer 8. When the supervisory control system is delivered, the operating system that writes (transfers) to the external storage media includes drivers for peripheral devices such as network interfaces, displays, printers, etc. that are used for general computers at that time. ing.

  However, since the monitoring control system is used for a long period of time, the driver of the peripheral device included in the operating system stored in the monitoring control server 1 or the external storage medium creation computer 8 will be stored in the new computer after several years. May become unusable. When using the latest general-purpose computer as a human interface for the monitoring and control system several years after the delivery of the monitoring and control system, the computer will function properly if the external storage media does not include a driver that supports the latest hardware. It cannot start up and cannot be used as a human interface.

  Therefore, in the present embodiment, the monitoring control server 1 or the external storage media creation computer 8 is connected via the network 11 to the distribution server 10 of the organization that is under contract for maintenance of the monitoring control system such as the manufacturer or maintenance company of the monitoring control system. To do. The distribution server 10 stores an operating system for storing an external storage medium including the latest peripheral device driver for a computer used as a human interface by a supervisory control system administrator.

  In the present embodiment configured as described above, the monitoring control server 1 or the external storage medium creation computer 8 is connected to the distribution server 10 at the time of external storage medium creation or at an arbitrary timing, so that the operating system information is stored. If it is updated, the latest operating system is read from the computer and stored in the monitoring control server 1 or the external storage medium creation computer 8. Rather than accessing the distribution server 10 from the monitoring control server 1 or the external storage media creation computer 8, the distribution server 10 periodically distributes the latest operating system to the monitoring control server 1 or the external media creation computer 8. It is possible that

  As a method for storing the latest operating system in the monitoring control server 1 or a computer for creating an external storage medium, an organization contracted for maintenance of the monitoring control system, such as a manufacturer or maintenance company of the monitoring control system, periodically installs it. However, there are drawbacks in that the installation work is time-consuming, and it is difficult to update to the latest information in a timely manner, resulting in high costs.

  When several years have passed since the monitoring and control system was delivered, when creating an external storage medium for starting the human interface that runs on the latest computer at that time, instead of the operating system at the time of delivery of the monitoring and control system, the distribution server The latest operating system received from 10 is stored in the external storage medium. As a result, even if the peripheral devices used in general computers change, it is possible to always create an external storage medium that incorporates the latest peripheral device drivers. Instead of a computer, the latest computer can be used as a human interface.

  As described above, since it is possible to create an external storage medium that incorporates the latest peripheral device driver, the supervisor of the supervisory control system during the period from the start of the supervisory control system to the replacement, It becomes possible to create an external storage medium that can use the latest computer as a human interface of the supervisory control system. Even if the human interface breaks down, it is no longer necessary to prepare a computer having the same specifications as when the supervisory control system was delivered, so that it is not necessary to prepare a human interface computer as a repair product.

The figure which shows the structure of the monitoring control system which concerns on Embodiment 1, 2 of this invention. The figure which shows the structure of the monitoring control system which concerns on Embodiment 3 of this invention. The figure which shows the structure of the monitoring control system which concerns on Embodiment 4 of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Monitoring control server 2 ... Controller 3 ... Sensor 4 ... Human interface 5, 6, 11 ... Network 7 ... Computer 8 ... Computer for external storage media creation 10 ... Distribution server

Claims (4)

In the supervisory control system that performs supervisory control of the plant,
An external storage medium containing an operating system for starting the computer, information for accessing the monitoring control server of the monitoring control system, an application for accessing the monitoring control system, and access authority information for the monitoring control system; ,
A computer having a network interface connectable to the network of the supervisory control system, and capable of booting from the external storage medium;
A monitoring control system comprising: a monitoring control server capable of restricting access to the functions of the monitoring control system based on the access authority information transmitted from a human interface configured by the computer. The monitoring control system according to claim 1,
Even when the information stored in the external storage medium for the human interface to access the monitoring control server is normal, the access can be denied by changing the setting on the monitoring control server side. Monitoring control system. In the supervisory control system according to claim 1 or 2,
An external storage medium containing an operating system for starting the computer, information for accessing the monitoring control server of the monitoring control system, an application for accessing the monitoring control system, and access authority information for the monitoring control system A monitoring control system comprising an external storage medium creation means for editing access authority to the monitoring control system stored in the external storage medium. The supervisory control system according to claim 3,
A monitoring control system, wherein the external storage medium creating means can receive an operating system stored in the external storage medium from a server outside the monitoring control system via a network.

Images