JP2011065265A - Information management system, programmable display, and server device for managing information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information management system which is small in constraint when constructing a system, and which is high in both convenience and security when a programmable display transmits information to a server device for information management. <P>SOLUTION: This information management system includes: a plurality of programmable displays 1; and a server device 2 for information management. The programmable displays 1 are communicatively connected through the Internet 4 to the server 2 for information management. The programmable display 1 includes an interface part 12 for transmitting data by the HTTP to the server device 2 for information management, and data transmitted from the programmable display 1 to the server device 2 for information management includes information for specifying the transmission source. The server 2 for information management includes a CPU 21 for determining the validity of the received data based on the information for specifying the transmission source. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an information management system including a plurality of programmable display devices and an information management server device that manages information related thereto, and a programmable display device and an information management server device used in the information management system.

  2. Description of the Related Art Conventionally, in an information management system including a plurality of programmable displays and an information management server device that manages information related thereto, the information management server device and the client device that can access the information management server device are connected via the Internet. In some cases, a plurality of programmable displays are connected to an information management server device that manages information related to them by a dedicated network (LAN) (see, for example, Patent Document 1).

International Publication No. 01/69334 (Fig. 1) JP 2001-5746 A (FIG. 1, paragraph 0031)

  In a conventional information management system, a plurality of programmable displays and an information management server device that manages information related to them are connected to the same LAN, so the installation location of the information management server device is limited to the LAN area. Thus, the management target of the information management server device is limited to information about programmable displays connected to the same LAN. In other words, in the conventional information management system, there are large restrictions in constructing the system.

  Therefore, it is conceivable that the information management server device is provided on the Internet so that the information management server device and the programmable display device communicate with the Internet. However, the programmable display device connected to the LAN has information on the Internet. When data is transmitted to the management server device, there is a possibility that data transmission cannot be performed due to a firewall normally provided in the LAN. If a firewall becomes an obstacle, it can be dealt with by setting up a relay server or changing the firewall settings, but such a countermeasure has the disadvantage that it requires appropriate expertise. Furthermore, it is often considered that firewall configuration changes themselves are not allowed from a security perspective.

  In addition, when a programmable display connected to the LAN transmits data to an information management server device on the Internet, the data flows on the Internet, so ensuring security is a problem.

  Patent Document 2 discloses a file transfer system that transfers an electronic file from a transmission client to a reception client via a transfer server. The file transfer system disclosed in Patent Document 2 is complicated to install a transfer server. That is, the transfer server of the file transfer system disclosed in Patent Document 2 corresponds to a relay server, and is completely different from the information management server device of the information management system described above.

  In view of the above situation, the present invention has an information management system that has less restrictions on constructing a system and has high convenience and security when a programmable display device transmits data to an information management server device. It is an object of the present invention to provide a programmable display and an information management server device used in a management system.

  In order to achieve the above object, an information management system according to the present invention includes a plurality of programmable displays and an information management server device, and the programmable display communicates with the information management server device via the Internet. An information management system to be connected, wherein the programmable display has a communication means for performing data transmission to the information management server device by HTTP or a protocol that is an extension of HTTP, and from the programmable display The data transmitted to the information management server device includes information that can identify the transmission source, and the information management server device manages the information management from the programmable display device based on the information that can identify the transmission source. And determining means for determining the validity of the data transmitted to the server device.

  Furthermore, from the viewpoint of ensuring security more reliably, a password is included in the data transmitted from the programmable display to the information management server device, and the determination means can identify the transmission source and the information You may make it determine the correctness of the data transmitted to the said information management server apparatus from the said programmable display based on a password.

  In order to achieve the above object, the programmable display device according to the present invention is a programmable display device capable of communicating with the information management server device via the Internet, and includes data to the information management server device. Communication means for performing transmission using HTTP or an extended protocol of HTTP is provided, and data transmitted from the programmable display device to the information management server device includes information that can identify the transmission source.

  In order to achieve the above object, an information management server device according to the present invention is an information management server device capable of communicating with a programmable display device via the Internet, and includes the information from the programmable display device. A determination unit configured to determine validity of data transmitted from the programmable display device to the information management server device based on information that can identify a transmission source included in data transmitted to the management server device; Like that.

  According to the present invention, the programmable display has a communication means for performing data transmission to the information management server device using HTTP or a protocol that is an extension of HTTP. The data can be transmitted from the device to the information management server device on the Internet, and convenience is improved. Further, according to the present invention, the information management server device can manage information from the programmable display device based on information that can identify a transmission source included in data transmitted from the programmable display device to the information management server device. Since the determination unit for determining the validity of the data transmitted to the server device is provided, security can be ensured.

It is a figure showing an example of 1 composition of an information management system concerning the present invention. It is a figure which shows the directory structure of HDD which the server apparatus for information management comprises. It is a flowchart which shows operation | movement when the server apparatus for information management receives the data transmitted from a programmable display or local PC. It is a flowchart which shows the transmission operation | movement of the alarm information of a programmable display. It is a flowchart of an alarm information reception process. It is a flowchart of a logging transmission process. It is a flowchart of a logging information reception process. It is a flowchart of a file upload process. It is a flowchart of the preservation | save process of the uploaded file.

  Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a diagram showing a configuration example of an information management system according to the present invention.

  The information management system shown in FIG. 1 includes a plurality of programmable displays 1 and an information management server device 2 that manages information transmitted from them.

  A certain administrator (one company, one office, one factory, etc.) may inappropriately leak data from the LAN (Local Area Network) 3 and the LAN 3 to the Internet 4 or inappropriate from the Internet 4 to the LAN 3. A firewall 5, a programmable display 1, a PLC 6, and a device 7 that prevent inflow of data are provided in a specific area. In FIG. 1, only the LAN 3 for one administrator, the firewall 5, the programmable display 1, the PLC 6, and the device 7 are shown, but the server device for information management 2 is a programmable display for one administrator. It is not limited to managing only information transmitted from 1, but may manage information transmitted from the programmable display 1 for a plurality of managers.

  The programmable display 1 can communicate with the information management server device 2 via the LAN 3, the firewall 5, and the Internet 4.

  The PLC 6 executes the control program (ladder program) created by the user to capture the state of the input device 7 at every predetermined scan time such as several tens of ms, and to output the device. 7 is given a control instruction.

  Examples of the input device 7 include a switch and a sensor, and examples of the output device 7 include a lamp and a bulb. These various devices 7 are arranged in required parts of various target systems such as a production line.

  Next, the configuration of the programmable display device 1 will be described. The programmable display 1 includes a CPU (Central Processing Unit) 11, interface units 12 and 13, SRAM (Static RAM) 14, FEPROM (Flash Erasable and Programmable ROM) 15, DRAM (Dynamic RAM) 16, and display. A device 17 and a touch panel 18 are provided.

  As will be apparent from the description below, the interface unit 12 functions as an example of “communication means” in the claims.

  The interface unit 12 is a communication control unit for the programmable display device 1 to communicate with the information management server device 2, and is connected to the Internet 4 through the LAN 3 and the firewall 5. The interface unit 12 is configured to perform network communication using HTTP (Hyper Text Transfer Protocol).

  The interface unit 13 is a communication control unit for the programmable display device 1 to communicate with the PLC 6. The interface unit 13 performs serial communication using a communication protocol according to the manufacturer and model of the PLC 6 when the PLC 6 is a model that performs serial communication, and performs network communication when the PLC 6 is a model that performs network communication. Configured to do.

  The SRAM 14 is a data memory that stores data obtained from the PLC 6 and data generated by the programmable display 1.

  Sampling data is an example of data obtained from the PLC 6. The sampling data is data obtained by the PLC 6 from the device 7 and is stored in the SRAM 14 in the order of generation.

  Examples of data generated by the programmable display 1 include alarm data, line graph data, and operation log data.

  The alarm data is information regarding the alarm. When the CPU 11 receives that a predetermined alarm bit in the PLC 6 is turned on, the CPU 11 creates contents (messages) and the like regarding the alarm set in advance for the alarm bit together with the issue time (reception time). The line graph data is data for displaying a line graph. The CPU 11 creates line graph data based on the sampling data. The operation log data is data relating to the user's operation history with respect to the programmable display 1, and details of operations performed by the user on the programmable display 1 (login, logout, touch operations on the screen, etc.) and operator information ( Name, affiliation, etc.) and the time of occurrence.

  The FEPROM 15 stores screen data, display / control programs, communication protocol data, communication programs, protocol conversion programs, ladder programs, ladder processing programs, and the like. These various data and programs may be stored in the FEPROM 15 in advance, or may be read from a storage medium such as a CD-ROM by the storage medium playback unit so that the program display 1 is provided with a storage medium playback unit. It may be stored in the FEPROM 15 in advance. These various data and programs may be transferred from the information management server device 2 to the programmable display 1 and stored in the FEPROM 15, for example.

  The screen data is data of a screen (user screen) displayed on the display device 17, data of a base screen, data of imaged parts such as switches and lamps, and processing instruction words given to each part. (Tag).

  The above tag is created for each event to be executed on the base screen. Basically, the file number of the base screen on which the display control operation is to be executed and the operation to be executed on this base screen. An event name for specifying the content and a reference information including one or more data referred to for each execution event are provided as a set. For example, when the tag is a display tag that displays a part graphic corresponding to the content of a predetermined device address in a predetermined screen area (display coordinate range), the reference information includes a coordinate range (X, Y) for display. And a file number for specifying a display target and a predetermined device address indicating a predetermined state of the display target. When the tag is an input tag, the reference information includes an effective input coordinate range (X, Y) and a device address where the input result is written.

  The DRAM 16 is a work memory used for temporary storage of data exchanged with the PLC 6 in addition to being used for work during arithmetic processing such as display control.

  The display device 17 is preferably a thin display device such as a liquid crystal display device, an EL display device, or a plasma display device.

  The touch panel 18 is an input device arranged on the display screen of the display device 17 in order to perform touch input on the display screen of the display device 17.

  Next, the configuration of the information management server device 2 will be described. The information management server device 2 includes a CPU 21, an interface unit 22, a RAM 23, a ROM 24, and an HDD (Hard Disk Drive) 25.

  As will be apparent from the description below, the CPU 21 functions as an example of the “determination unit” in the claims.

  The CPU 21 manages information transmitted from the programmable display device 1 by controlling the operation of the information management server device 2 as a whole.

  The interface unit 22 is a communication control unit for the information management server device 2 to communicate with the programmable display 1 and is connected to the Internet 4. The interface unit 22 is configured to perform network communication using HTTP.

  The RAM 23 is a work memory in which a work area of the CPU 21 is set.

  The ROM 24 stores communication protocol data, a communication program, and the like.

  The HDD 25 is a large-capacity storage device, and its directory structure is, for example, as shown in FIG. A plurality of “programmable display ID” directories are contained in the “manager ID (identification)” directory. Each “programmable display ID” directory has “country identification code”, “company”, and “installation location” indicating the location of the programmable display as property information. Each “programmable display ID” directory includes an “alarm” directory, a “logging” directory, a “file” directory, a “communication log” directory, and the like. The “Alarm” directory stores data related to the alarm monitoring function, the “Logging” directory stores data related to the logging function, and the “File” directory stores files related to the file transfer function. And communication log data related to network communication are stored in the “communication log” directory. The administrator ID is a unique value that is different for each administrator, and the programmable display ID is a unique value that is different for each programmable display. Therefore, each programmable display 1 can be specified by an administrator ID and a programmable display ID.

  In addition to the information management server device 2 configured as described above, a local PC (Personal Computer) 8 and a base station 9 are also connected to the Internet 4. The base station 9 can wirelessly communicate with a mobile terminal 10 such as a mobile phone.

  Next, an operation when the information management server device 2 having the above configuration receives data transmitted from the programmable display device 1 will be described with reference to a flowchart shown in FIG. The data transmitted by HTTP from the programmable display 1 includes its own programmable display ID, a password, and information (function information) indicating which function of the information management system is related to data in the header part. Thus, after the encryption process is performed, it is transmitted by HTTP.

  When the CPU 21 of the information management server device 2 receives the data transmitted by the HTTP from the programmable display device 1, the CPU 21 performs a decoding process on the received data (step S10). Then, the CPU 21 of the information management server device 2 determines whether there is a problem in the validity of the received data based on the programmable display ID and password included in the header portion of the received data ( Step S20).

  If there is a problem with the validity of the received data (eg, the programmable display ID is different from the preset format or the password is different) (YES in step S20), the CPU 21 of the information management server device 2 Then, the fact that there is an error in the programmable display ID or password is returned to the transmission source (step S30), and the operation of the flowchart shown in FIG.

  On the other hand, if there is no problem with the validity of the received data (NO in step S20), the CPU 21 of the information management server device 2 determines the function related to the received data, and performs processing according to the determination result. (Step S40), and the operation of the flowchart shown in FIG.

  Hereinafter, as an example of functions of the information management system shown in FIG. 1, an alarm monitoring function, a logging function, and a file transfer function from the programmable display 1 to the information management server device 2 will be sequentially described.

  First, the alarm monitoring function will be described. When the programmable display 1 creates alarm data or changes the type of alarm data, the programmable display 1 starts the operation of the flowchart shown in FIG. The CPU 11 of the programmable display 1 creates alarm information by performing an encryption process on the alarm data including a header portion including its programmable display ID, password, and function information. This alarm information is transmitted by the interface unit 12 to the information management server device 2 via the LAN 3, the firewall 5, and the Internet 4 as an HTTP command (step S110).

  The information management server device 2 that has received the alarm information performs the operation of the flowchart shown in FIG. 3, and performs alarm information reception processing in step S40. A flowchart of the alarm information reception process is shown in FIG.

  In the alarm information reception process, first, the CPU 21 of the information management server device 2 determines whether or not the alarm information transmission source programmable display device is registered based on the header portion of the received alarm information and the directory structure shown in FIG. Is determined (step S210). If the transmission source programmable display is not yet registered (NO in step S210), a “programmable display ID” directory corresponding to the transmission source programmable display is newly created, and the transmission source programmable display is newly registered. (Step S220), and then the process proceeds to Step S230. On the other hand, if the transmission source programmable display has already been registered (YES in step S210), the process directly proceeds to step S230. In step S230, the CPU 21 of the information management server device 2 updates the alarm list data stored in the “alarm” directory in the “programmable display ID” directory corresponding to the transmission source programmable display, and then The alarm information reception process ends.

  The alarm list stored in the information management server device 2 can be confirmed on the Internet, for example, by logging in to the alarm list display page from the local PC 8 using application software such as a known Web browser. . Further, the information management server device 2 may deliver an e-mail notifying the update of the alarm list to a registered e-mail address (for example, the e-mail address of the mobile terminal 10) when the alarm list is updated. .

  Next, the logging function will be described. The programmable display device 1 repeatedly performs logging information transmission processing. A flowchart of the logging transmission process is shown in FIG. The programmable display 1 stores the sampling data obtained from the PLC 6 or the operation log data generated by itself in the SRAM 14 (step S310). Then, a predetermined condition (for example, the data storage amount in step S310 reaches a predetermined value, the data storage time in step S310 reaches a predetermined time, a predetermined number of steps are executed by the control of the programmable display 1) ) Is established, the CPU 11 of the programmable display 1 performs an encryption process on the sample data or operation log data to which a header portion including its programmable display ID, password, and function information is added. To create logging information. The logging information is transmitted to the information management server device 2 via the LAN 3, the firewall 5, and the Internet 4 by the HTTP command by the interface unit 12 (step S320). When the logging information is transmitted and the logging information transmission process is completed, a new logging information transmission process is started.

  The information management server device 2 that has received the logging information performs the operation of the flowchart shown in FIG. 3, and performs a logging information reception process in step S40. A flowchart of the logging information receiving process is shown in FIG.

  In the logging information reception process, first, the CPU 21 of the information management server device 2 stores the information in the “logging” directory in the “programmable display ID” directory corresponding to the transmission source programmable display based on the received logging information. The sampling data or operation log data included in the logging information is added to the logging file (step S410), and then the process proceeds to step S420. In step S420, the CPU 21 of the information management server apparatus 2 lists the files related to the sampling data or operation log data stored in the “logging” directory in the “programmable display ID” directory corresponding to the transmission source programmable display. The data is updated and the logging information reception process is terminated.

  The file list related to sampling data or operation log data stored in the information management server device 2 is, for example, a file list display page related to sampling data or operation log data from the local PC 8 using application software such as a known Web browser. It is possible to check on the Internet by logging in, and to select a desired file from the file list display page regarding sampling data or operation log data and download it to the local PC 8.

  According to the logging function described above, the sampling data and operation log data of the programmable display 1 can be stored in the information management server device 2 via the Internet 4.

  Finally, a file transfer function from the programmable display device 1 to the information management server device 2 will be described. The programmable display device 1 starts the file upload process shown in FIG. 8 when the file storage destination is set in the information management server device 2 by the user operation of the touch panel 18 and execution of file storage is instructed. The CPU 11 of the programmable display 1 performs an encryption process on the file to be uploaded with a header including its own programmable display ID, password, and function information, and uses an HTTP command for information management. By transmitting to the server device 2, the file is uploaded to the information management server device 2 (step S510). The information management server device 2 that has received the HTTP command performs the operation of the flowchart shown in FIG. 3, and performs the process of the full chart shown in FIG. 9 in step S40. That is, the CPU 21 of the information management server device 2 includes the received HTTP command in the “file” directory in the “programmable display ID” directory corresponding to the transmission source programmable display, based on the received HTTP command. The stored file is saved (step S610).

  In the information management system shown in FIG. 1 having the various functions described above, data is transmitted from the programmable display device 1 to the information management server device 2 on the Internet by HTTP. In the general setting of the firewall 5, the port is opened for HTTP. Therefore, in the information management system shown in FIG. 1 having the various functions described above, the programmable display 1 can be used without performing particularly difficult settings for the firewall. Data transmission to the information management server device 2 on the Internet becomes possible, and convenience is improved. Moreover, since the validity of the data which the information management server apparatus 2 received is determined using the header part containing programmable display ID, security can be ensured.

  As mentioned above, although embodiment which concerns on this invention was described, the range of this invention is not limited to this, A various change can be added and implemented in the range which does not deviate from the main point of invention.

  For example, in the above-described embodiment, the validity of the data received by the information management server device 2 is determined by the programmable display ID and the password, but the password is not included in the header portion, and the information is obtained only by the programmable display ID. The validity of the data received by the management server device 2 may be determined. On the other hand, other elements (for example, access ID, country identification code, etc.) are included in the header part, and the validity of the data received by the information management server device 2 by the programmable display ID and the other elements is correct. Sex may be determined.

  For example, in the above-described embodiment, the interface units 12 and 22 perform network communication using HTTP. However, instead of HTTP, a protocol that extends HTTP may be used, or a protocol that extends HTTP or HTTP. Other protocols with open ports may be used as well as general firewall settings.

  Note that the HTTP command is a GET command or a POST command by HTTP communication.

1 Programmable Display 2 Information Management Server 3 LAN
4 Internet 5 Firewall 6 PLC
7 Device 8 Local PC
9 Base station 10 Mobile terminal 11 CPU
12, 13 Interface unit 14 SRAM
15 FEPROM
16 DRAM
17 Display device 18 Touch panel 21 CPU
22 Interface unit 23 RAM
24 ROM
25 HDD

Claims (4)

An information management system comprising a plurality of programmable displays and an information management server device, wherein the programmable display is communicably connected to the information management server device via the Internet,
The programmable display device has communication means for performing data transmission to the information management server device by HTTP or an extended protocol of HTTP,
Information that can identify the transmission source is included in the data transmitted from the programmable display to the information management server device,
The information management server device includes a determination unit that determines validity of data transmitted from the programmable display to the information management server device based on information that can identify the transmission source. Information management system. A password is included in data transmitted from the programmable display to the information management server device,
The determination unit determines the validity of data transmitted from the programmable display to the information management server device based on information that can identify the transmission source and the password. The information management system described. A programmable display capable of communicating with an information management server device via the Internet,
Communication means for performing data transmission to the information management server device using HTTP or a protocol that is an extension of HTTP,
The programmable display device characterized in that the data transmitted from the programmable display device to the information management server device includes information capable of specifying the transmission source. A server device for information management capable of communicating with a programmable display via the Internet,
Validity of data transmitted from the programmable display to the information management server device based on information that can identify a transmission source included in data transmitted from the programmable display to the information management server device An information management server device comprising a determination means for determining whether or not.

Images