JP2008059237A - Plant management apparatus and plant management method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To reduce the labor of authentication or to strengthen security. <P>SOLUTION: When information for commanding signal output, concerned with control logic or plant control from an operation apparatus 11 is transmitted to a plant control apparatus 22 via a communications network 23 or transmitting information for commanding setting or a change concerned with the control logic by a maintenance tool 21, an RFID authenticating device 115 (215) enters the information of an ID storing medium, existing within a prescribed distance range in a non-contact state and periodically collates the entered ID information to execute authentication. According to the present invention, the labor for authentication is reduced, or security is strengthened. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a plant management apparatus and a plant management method, and more particularly to a plant management apparatus and a plant management method suitable for setting a plant control apparatus or commanding a signal output.

  A plant such as a power plant is controlled by a control device. In addition, in order to monitor and operate the control status of the plant, an operation device for monitoring operation is installed in a central operation room. The operator appropriately determines the plant state by monitoring the plant state using the monitoring operation device, and operates the plant via the monitoring operation device so that the plant state is always optimized. Repeat the operation.

  In addition, since the plant state may deteriorate and change depending on the years of use and environmental changes, a maintenance tool is set in order to change the setting value for the logic of the control device. Using the maintenance tool, it is possible to change the logic and set values by referring to the memory state of the logic.

  In the operation of the operation device for monitoring operation and the operation of the maintenance tool, it is necessary to manage the authority so that only a limited person can perform it. In order to recognize a person with limited authority, management is performed using information unique to an individual or management information that only the individual can know. For example, management is performed by authentication using a password or authentication using an ID card.

  Such authentication technology relating to plant control is described in, for example, Japanese Patent Application Laid-Open No. 10-149207.

JP 10-149207 A

In the above prior art, an authorized person is permitted to operate the operation device and maintenance tool for monitoring operation after authentication, but after authentication, the authentication result remains and the result is not cleared (deauthentication) As long as that authority is retained, there is a risk that it will be used by another person, for example, if he leaves the place with the authority retained. Also, if the authentication result is automatically cleared after changing the setting value so that it will not be used by others, if you want to continue to operate it, you must enter the password or read the ID card each time. Will not be. In addition, when a beginner or an inexperienced operator performs an operation under the guidance of an experienced operator during the training of a beginner or an inexperienced operator, he / she will rent his / her password or ID card and operate it. There is a risk that a record of password leakage or ID card usage history may appear as if it was operated.

  An object of the present invention is to solve at least one of the above problems, and to provide a plant management apparatus and a plant management method capable of reducing the labor of authentication or enhancing security.

  In order to achieve the above object, in the present invention, information for instructing setting or changing related to control logic or information for instructing signal output related to control logic or plant control is transmitted to the plant control apparatus via the network. The information stored in the ID storage medium within a predetermined distance range is read in a non-contact manner, the fetched ID information is periodically collated, and the setting, change, or signal output is performed according to the collation result. Configured.

  According to the present invention, the labor of authentication is reduced or security can be enhanced.

  An example of a plant apparatus operation monitoring system according to the present invention will be described with reference to FIG. The plant device operation monitoring system monitors process values, takes in information from an operation device 11 for operating on-site equipment, sensors, auxiliary machines, etc., performs arithmetic processing based on predetermined logic information, and performs plant processing. And a maintenance tool 21 having a function capable of changing a setting value for controlling a calculation state and a process value of a logic in the control device. 23 are connected to each other.

In a plant such as a power plant, an operation device 11 is installed for monitoring operation in a central operation room or the like so that an operator can monitor and operate plant information. The operator repeats the operation and monitoring of the plant control device 22 so as to always optimize the plant state based on the plant information. When performing the operation, the operator uses the operation device 11 while appropriately determining the plant state. The control device 22 is operated. On the other hand, since the plant state may deteriorate and change depending on the years of use or environmental changes, the maintenance tool 21 is installed. The operator can maintain the plant in an optimal state by appropriately changing the preset setting values and signal values according to the plant state through the maintenance tool 21. The setting value can be changed during plant operation, and the plant state can be determined and changed to an appropriate value.

  The maintenance tool 21 includes a display device 211, an arithmetic processing device 212, a mouse 213 for operating a screen, a computer device having a keyboard 214 for inputting numerical values and the like, and an RFID authentication device 215 (RFID: Radio) for authenticating operation authority. It may be configured by Frequency Identification (which performs recognition and certification using radio waves). The operation device 11 includes a display device 111, an arithmetic processing device 112, a computer 113 having a mouse 113 for operating a screen, a keyboard 114 for inputting numerical values and the like, and an RFID authentication device 115 for authenticating operation authority. Good. The operation device 11 is usually arranged in the central operation room. The maintenance tool 21 and the plant control device 22 are installed in a central operation room or a location adjacent thereto.

  As shown in FIG. 3, the RFID authentication devices 115 and 215 are devices that transmit and receive signals to and from the personal authentication wireless IC tag 311 by radio waves and read the unique ID of the operator 312. For example, the maintenance tools 21 and cables are used. Connected. The ID is read periodically, and the ID of the read result is transmitted to the maintenance tool 21. The maintenance tool 21 analyzes the received ID and determines whether the setting value can be changed as the operation authority of the operator 312.

  According to this example, for example, when the operator 312 changes the set value of the signal in the maintenance tool 21, the changed set value is transmitted to the plant control device 22 via the communication network 23. When the operator 312 outputs an operation signal in the operation device 11, the output operation signal is transmitted to the plant control device 22 via the communication network 23.

  With reference to FIG. 2, a configuration example of the maintenance tool and the RFID authentication devices 115 and 215 and a flow of an ID signal will be described. The maintenance tool 21 includes a display device 211 that displays a screen for changing set values, an arithmetic processing device 212, a mouse 213 for operating screens and inputting data, and a keyboard 214.

As described above, the setting value is changed by using the maintenance tool 21 connected to the plant control device 22. The maintenance tool 21 refers to the memory state of the plant control device 22 that is calculating the logic. The plant information can be appropriately determined, and when the operation signal is actually output, the operation device 11 is used to output the operation signal to the operation end in the remote place. In the operation of the maintenance tool 21, since the change of the set value is directly related to the change of the signal directly, if an incorrect value is entered by any chance, it may lead to equipment failure or a major accident. Therefore, only a person who has been determined to be able to change the set value can perform sufficient knowledge and determination. In the operation of the operation device 11, a person who can perform the operation is an operator who has been trained or trained, or a beginner or an inexperienced operator who performs the operation while receiving guidance from the operator. Even when a beginner or an inexperienced operator performs an operation, an operator who has received education and training and gives experience gives an operation instruction while appropriately determining the plant state. In this way, the only person who operates the plant is the person who is judged to have sufficient knowledge and judgment.

  Therefore, authentication is performed using the RFID authentication devices 115 and 215.

The RFID authentication device 215 (the RFID authentication device 115 is configured in the same manner) analyzes an antenna unit 215B that transmits and receives radio waves, a circuit for transmitting and receiving radio waves from the antenna, and information on received radio waves and transmits information to other devices. It is comprised from the RFID reader part which comprises the circuit to perform.
The RFID authentication device 215 periodically transmits radio waves from the antenna unit 215B and waits for a response from the wireless IC tag. When the personal authentication wireless IC tag 311 is within the radio wave reception range, the ID is transmitted by radio wave in response to the radio wave transmitted from the antenna unit 215B. The antenna unit 215B receives the transmitted radio wave and transmits a signal to the RFID reader unit 215A. The RFID reader unit 215A analyzes the transmitted signal and obtains the ID of the wireless IC tag 311 for personal authentication. The acquired ID is transmitted to the IO processing unit 212D of the arithmetic processing unit 212 connected by a cable or the like. The ID received by the IO processing unit 212D is once sent to the main memory 212B, and is processed by the CPU 212A to match the ID stored in the disk 212C. Further, the operation authority information corresponding to the ID is stored in the disk 212C, and if the sent ID matches the ID in the disk 212C, the operation authority information is also transmitted to the main memory 212B. Processed by the CPU 212A. The processed result is used for a function setting value changing function of the maintenance tool.

FIG. 3 shows an example of the installation position of the maintenance tool and the position of the operator, and the range in which the radio wave transmitted from the RFID authentication apparatus reaches will be described. The display device 211 is installed on the disk 41 and is generally installed at a position where the operator 312 can easily recognize the screen information. A mouse 213 for operating the screen is installed in front of the display device 211 in order to perform an operation while viewing the screen of the display device 211. Needless to say, the operation device can be operated by an input device such as a touch panel or a trackball.

The RFID authentication device 215 is installed so that the radio wave reaches a place operated by the operator, and sets the reachable range of the radio wave by adjusting the output of the radio wave. Since the operator 312 operates using the mouse 213, it is desirable to install the operator 312 near the mouse 213. In addition, the reachable range of radio waves is determined by taking into account the case where an experienced operator 322 and a beginner or inexperienced operator 312 perform operations at the same time.
For example, it is possible to set an authenticable range in which a plurality of 321 can be recognized.

  For example, the radio wave reachable range is optimally 1.0 m, preferably 1.5 m, and 2.0 m is practical. Further, the reach distance may be variable, or may be variable according to the ID storage medium.

  With reference to FIGS. 4 and 5, a procedure for changing the set value with the maintenance tool 21 will be described. Although the description will be made with the maintenance tool 21, the same applies to the operation device 11.

  The maintenance tool 21 includes a display device 211, a keyboard 214 for inputting data such as numerical values, a mouse 213 for operating a screen and a button in the screen, and an arithmetic processing device 212.

In step S101, the display device 211 of the maintenance tool 21 displays a setting value change screen in which the “current setting value” display area and “setting value after change” can be input. In step S102, the operator 312 inputs a set value in the “set value after change” input area, and in step S103, either “change execution” or “cancel” can be selected. If the operator 312 selects “Cancel”, the process is terminated. If the operator 312 selects “change execution”, processing for changing to the set value input by the operator 312 is started in step S102. In step S104, an operation authority confirmation process is performed. Details of the operation authority confirmation processing will be described with reference to FIG. This operation authority confirmation process is periodically performed, for example, every 200 msec as steps S101 to S108. That is, the analysis results of the RFID authentication devices 115 and 215 are referred to at a cycle of 200 msec or the like, and the authentication result “valid” or “invalid” is determined.

  In step S105, the operation authority confirmation result in step S104 is determined. If the operation authority relating to the setting value change is valid, the setting value changing process is performed in step S106. If the determination result is invalid in step S105, an error message indicating that the operation authority is invalid is displayed in step S107. In step S108, the processing relating to the setting value change is terminated and the setting after the change is made. After clearing the value, return to the original value and finish the process.

  The operation authority confirmation process will be described with reference to FIGS. Here, as in the case of FIG. 5, a case where the setting value is changed by the maintenance tool 21 will be described.

  In step S201, the RFID authentication device 215 connected to the arithmetic processing device 212 of the maintenance tool 21 periodically transmits a radio wave (for example, every 50 msec) and waits for a response from the personal authentication wireless IC tag 311. In step S202, if the personal authentication wireless IC tag 311 is within the radio wave reception range, the ID is transmitted by radio wave in response to the radio wave. The transmitted radio wave is analyzed, and the ID of the wireless IC tag 311 for personal authentication is acquired. If the ID cannot be acquired, the authentication result is invalidated because there is no valid ID. When the ID is acquired, in step S203, the value in the authority database of the arithmetic processing unit 212 is compared with the acquired ID. If the operation authority of the ID acquired as a result of the collation is valid in step S204, the authentication result is validated. If the operation authority is not given, the authentication result for this ID is invalidated, and in step S205, the ID of the personal authentication IC tag 321 of the operator 322 other than the personal authentication wireless IC tag 311 is determined in step S202. In step S203, the ID acquired again is compared with the value of the authority database, and the process is continued. In step S205, when the authority of all acquired IDs has been confirmed, the authentication result is invalidated because there is no valid operation authority. Since the wireless IC tag 331 for personal authentication of the operator 332 is out of the authenticable range, the processes in steps S201 and S202 are not performed.

  Next, a second embodiment will be described. In the second embodiment, step 203 shown in FIG. 6 is defined in detail.

  In the second embodiment, as shown in FIG. 7, the radio wave reachable range of the RFID authentication apparatus 215 is set in two stages. For example, the team head authenticable range is set to 2.0 m and the operator recognizable range is set to 1.0 m. And As a result, those within the range of the 2.0 m radio wave receiving network are recognized as team leader IDs, and those within the 1.0 m radio wave receiving network are recognized as operator IDs.

  Here, in the second embodiment, the operation authority stored in the disk 212C is stored as shown in the allowable ID area shown in FIG.

  For example, when the ID analyzed by the RFID reader unit 215A is “00001” as the operator ID (the ID detected within the radio wave reach range of 1.0 m), the operator ID 803 in the allowable ID area 801 Search each item and find a match. When the ID of the personal authentication wireless IC tag 311 is “00001”, the item 804 in the column 814 is referred to, and “the authority is established when B is established” corresponding to the condition is satisfied. The referring operator is determined to be authorized personal authentication wireless IC (authentication result “valid”). If the ID analyzed by the RFID reader unit 215A does not match any of the operator IDs 803 in the allowable ID area 801, it is determined that there is no authority.

On the other hand, for example, when the ID analyzed by the RFID reader unit 215A is “00101” as the operator ID (the ID detected within the radio wave reach range of 1.0 m), the operator in the allowable ID area 801 Since each item of ID 803 is searched and matched, the condition is “authorized if Aand B is established” corresponding to the item 804 in the column 811, and further, the team leader ID (analyzed by the RFID reader unit 215 A) The ID detected within the radio wave arrival range of 2.0 m and the personal authentication wireless IC tag 321) will be referred to. That is, as the group leader ID is indicated in the item 802 of the column 811 in the allowable ID area 801,
If “00001” is satisfied, the condition is satisfied, and it is determined that the operator (the wireless IC tag for personal authentication 311) bringing the RFID is authorized (authentication result “valid”). On the other hand, if the team leader ID is not “00001,” it is determined that there is no authority (authentication result “invalid”). As shown in FIG. 9, the history of the authentication result is recorded in a predetermined area of the disk 212C together with the operator ID (and the team leader ID) of the operator when the operation authority is given to the operator.

  The example of the present invention has been described above, but it will be understood by those skilled in the art that the present invention is not limited to the above-described example, and various modifications are possible.

  As described above, in this embodiment, authentication of the operation authority at the time of signal output is performed automatically and efficiently, and a plurality of operators can operate with appropriate operation authority at the same time. The operation authority authentication is performed before the maintenance tool that is operated by the authorized person or in the state where the monitoring operation can be performed in front of the operation device, and is continuously performed immediately before and after the operation. It is desirable that Therefore, authentication using radio such as RFID is applied.

  In the maintenance tool 21 and the operation device 11, an operation person performs an operation such as displaying a corresponding screen in order to actually output a signal. An operation that does not output a signal can be performed even by an unskilled beginner or an inexperienced operator. These screens and the screens that output the operation signals are separated from each other by, for example, dividing the screens into windows from the viewpoint of preventing erroneous operations. When actually outputting a signal, the corresponding screen is displayed, and further, a value such as a set value is entered in the corresponding location, and preparations for outputting the operation signal are completed. Thereafter, the corresponding button is pressed as an execution command to output a signal, but immediately after the button is pressed, if an authentication process using RFID is performed and the authentication process is correctly performed, an operation signal is output. The control device receives the output operation signal and performs arithmetic processing. If an unauthorized person presses the execution command button, an error is detected in the authentication process, and the set value is not output. In addition, when the authentication signal of a beginner or an inexperienced operator and an experienced operator are simultaneously recognized by RFID authentication, the operation of the beginner or inexperienced operator or an experienced person under the management of the experienced operator Authenticate and allow execution when operating. It goes without saying that the operation output is performed within the reach of an experienced operator by outputting RFID radio waves only in a limited area. Further, when the operator moves out of the radio wave area, the authentication authority is automatically canceled, and a person without authority cannot output an operation command. Thereby, it becomes possible to operate without being aware of the authentication act.

  As described above, the setting value is changed without being aware of the authentication action only by the person having the operation authority changing the setting value.

It is explanatory drawing for demonstrating the example of the plant apparatus operation monitoring system by this invention. It is a figure which shows the example of a structure of a maintenance tool and an RFID authentication apparatus, and the flow of an ID signal. It is a figure which shows the example of the installation position of a maintenance tool, and an operator's position, and shows the example of the range which the electromagnetic wave transmitted from RFID authentication apparatus reaches. It is a figure which shows the example of a manual screen which changes a setting value with a maintenance tool, and an operator's operation procedure. It is a figure which shows the structural example which shows the flow of the setting value change process by this invention. It is a figure which shows the structural example which shows the flow of the operation authority confirmation process by this invention. The figure which shows the example of the range which the electromagnetic wave transmitted from the RFID authentication apparatus in a 2nd Example reaches. The figure which shows the memory content of an allowable ID area. The figure which shows the memory content in a history area.

Explanation of symbols

DESCRIPTION OF SYMBOLS 11 ... Operation apparatus, 21 ... Maintenance tool, 22 ... Plant control apparatus, 23 ... Communication network, 111, 211 ... Monitor, 112, 212 ... Arithmetic unit, 113, 213 ... Mouse, 114, 214 ... Keyboard, 115, 215 ... RFID authentication apparatus, 311 ... wireless IC tag for personal authentication, 312 ... operator.

Claims (9)

  An ID within a predetermined distance range in a plant management apparatus that transmits information for instructing setting or changing related to the control logic or information for instructing signal output related to the control logic or plant control to the plant control apparatus via the network. There is provided a means for capturing information in a storage medium in a non-contact manner and a means for periodically collating the captured ID information, and information for instructing the setting, changing or signal output according to the collation result is provided. A plant management device that is transmitted.   The plant management apparatus according to claim 1, further comprising a unit that permits transmission of the command information based on the collation result.   In Claim 1, the information which instruct | indicates the setting or change which concerns on the said control logic, or the information which instruct | indicates the signal output which concerns on control logic or plant control sets the setting value of the said logic, or is set in the said logic A plant management apparatus for changing a set value of a process signal or a signal in a logic.   In Claim 1, the information which instruct | indicates the setting or change which concerns on the said control logic, or the information which instruct | indicates the signal output which concerns on a control logic or plant control is an operation signal in operation of the valve of a plant, or an auxiliary machine. A characteristic plant management device.   5. The plant management apparatus according to claim 3, further comprising means for displaying a logic state in the plant control apparatus.   2. The plant management apparatus according to claim 1, wherein a predetermined distance range in which the information in the ID storage medium is read in a non-contact manner is variable.   The plant management apparatus according to claim 6, wherein the predetermined distance range is changed according to information in the ID storage medium.   2. The plant management apparatus according to claim 1, wherein the authentication result is stored as a history. The information of the ID storage medium within a predetermined distance range is captured in a non-contact manner, the captured ID information is periodically collated, and the setting related to the control logic is performed on the plant controller via the network according to the collation result or A plant management method for transmitting information for instructing a change, or information for instructing a signal output related to control logic or plant control.

Images