JP2011198236A - Plant monitoring support system, cloud service providing apparatus in the same, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To easily perform an assurance of maintainability of monitoring data and a recovery of the monitoring data from a communication blockade, when carrying out a control of maintenance of a plant via a cloud service.SOLUTION: A cloud service providing apparatus 30 manages monitoring data obtained by a data collecting device 10 based on unique identifying information assigned to each of a beneficiary device 20 and the data collecting device 10 and stores the monitoring data in a database (DB server 36). Then, when the cloud service providing apparatus 30 receives a query request for the monitoring data from the beneficiary device 20, the apparatus 30 authenticates an access based on the identifying information, processes the monitoring data read from the database, and transmits the monitoring data to the requesting beneficiary device 20.

Description

  The present invention relates to a plant monitoring support system, a cloud service providing apparatus in the system, and a program.

  In recent years, water purification plants, sewage treatment plant plants, and power plant plants, which are the lifelines of cities, have increased the amount of information they handle, which has led to demands for stable service functions and high reliability and operability. It became so. These plants are designed to maintain the safety and soundness of the facilities in accordance with various laws and regulations that have been established by themselves. Conventionally, many management apparatuses for managing the operation state of such a plant have been proposed and patent applications have been filed.

  For example, Patent Document 1 or Patent Document 2 described below relates to a management apparatus that inputs information generated in various plants to a computer, and that the computer monitors an operation state and a failure based on the input plant information. Technology is disclosed.

JP 2007-156653 A JP 2009-20787 A

  By the way, in the above-described plant, dedicated equipment and a management system are individually introduced and operated in units of machines. When these facilities and management systems are to be maintained and integrated remotely, it is necessary to develop a variety of interfaces because the facilities and management systems used at multiple machines are different. In addition, the system after installation becomes technically obsolete as the operation period elapses before the cost amortization period expires, and maintenance such as software updates and version upgrades as well as parts replacement is required. It is required each time, and the cost required for this is not negligible.

  In order to maintain the operation of the plant with high reliability, it is necessary to make it redundant and use it mainly in important parts of the system. To that end, the introduction of heavy systems and significant capital investment will put pressure on the plant operator's finances. For this reason, it is conceivable to achieve both high reliability and a reduction in maintenance cost by realizing plant maintenance management with a cloud service. By introducing a cloud service, it is possible to easily cope with an increase in machine space without increasing the load on already installed facilities. In addition, since the cloud data center performs software maintenance and version upgrades in a batch, the latest system can always be used on the plant side, and cost reduction required for maintenance can be expected.

  However, when the above-mentioned plant maintenance management is to be realized by a cloud service, the cloud data center handles the monitoring data of a plurality of users at a time, so it is necessary to ensure the integrity of the monitoring data between users. In addition, it is desired to construct a database and provide an application that can be easily recovered against communication data loss or loss of monitoring data in the event of a system failure.

  Therefore, the present invention has been made in view of the above-described problems, and ensuring the integrity of the monitoring data when the maintenance of the plant is to be realized by the cloud service, and the monitoring data when the communication is interrupted It is an object of the present invention to provide a plant monitoring support system, a cloud service providing apparatus, and a program for facilitating restoration.

  In order to solve the above-mentioned problem, a plant monitoring support system according to a first aspect of the present invention is a plant monitoring support system that supports monitoring of the operating state of plant equipment installed at each remote machine station, from the plant equipment. A data collection device that periodically collects, accumulates, and transmits monitoring data, a beneficiary device that obtains necessary monitoring data by inquiring the monitoring data, and the data collecting device perform first communication. Connected via a network, and connected to the beneficiary device via a second communication network, the monitoring data acquired via the first communication network, the beneficiary device and the data collection device Are managed based on the unique identification information assigned to each of them and stored in a database, from the beneficiary device to the second communication network When the monitoring data inquiry request is received via the network, the access authentication based on the identification information is performed, and when the access authentication is established, the monitoring data read from the database is processed, and the processed monitoring data is And a cloud service providing device that transmits to the beneficiary device that has received the inquiry request via the second communication network.

  According to the first invention, the cloud service providing device manages the monitoring data acquired from the data collection device based on the unique identification information assigned to each of the beneficiary device and the data collection device, and creates a database. To accumulate. When a monitoring data inquiry request is received from the beneficiary device, access authentication based on the identification information is performed, and the monitoring data read from the database is processed and transmitted to the beneficiary device that requested the inquiry. For this reason, the integrity of the monitoring data is ensured, and the monitoring data can be protected from reception, change, and falsification by a beneficiary without access authority. In addition, since monitoring data is stored and stored in both the data collection device and the cloud service providing device, it is possible to prevent loss of monitoring data by collecting data after communication is restored in the event of a communication abnormality or system abnormality. .

  A cloud service providing apparatus according to a second aspect of the present invention is connected to a data collection apparatus that periodically collects, accumulates, and transmits monitoring data from plant equipment via a first communication network, In a plant monitoring support system that is connected to a beneficiary device that makes an inquiry and obtains necessary monitoring data via a second communication network, and that supports monitoring of the operating state of the plant equipment installed at each remote machine station A cloud service providing device that transmits and receives the monitoring data based on a communication protocol defined between the first communication network and the data collection device and between the second communication network and the beneficiary device. A communication interface unit for performing the monitoring data transmitted and received via the communication interface unit A storage unit that accumulates in a predetermined storage area allocated as a source, and a control unit that controls the communication interface unit and the storage unit to support monitoring of the operating state of the plant equipment, The control unit manages the monitoring data acquired via the first communication network and the communication interface unit based on unique identification information assigned to each of the beneficiary device and the data collection device. A monitoring data storage processing unit for storing in the database allocated to a predetermined storage area of the storage unit, and a monitoring data inquiry request from the beneficiary device via the second communication network and the communication interface unit. When received, access authentication based on the identification information is performed, and when the access authentication is established, the database is Processing the monitoring data to be read from, including a monitoring data providing unit that transmits the processed the beneficiary device for which the inquiry requesting monitoring data via the second communication network and the communication interface unit.

  According to the second invention, the control unit manages the monitoring data based on the unique identification information assigned to each of the beneficiary device and the data collection device, accumulates it in the database, and monitors it from the beneficiary device. When a data inquiry request is received, access authentication based on the identification information is performed, and monitoring data read from the database is processed and transmitted to the beneficiary device that requested the inquiry. For this reason, the integrity of the monitoring data is ensured, and the monitoring data can be protected from reception, change, and falsification by a beneficiary without access authority. In addition, since monitoring data is stored and stored in both the data collection device and the cloud service providing device, it is possible to prevent loss of monitoring data by collecting data after communication is restored in the event of a communication abnormality or system abnormality. .

  In the second invention, when the monitoring data storage processing unit acquires the monitoring data by batch processing, the monitoring data storage processing unit receives a monitoring data mail transmitted from the data collection device via the first communication network as an attached file. Update the database. According to the present invention, the interface can be unified by using the attached file of the e-mail for collecting the monitoring data, and the flexible response to the increase in the machine field is facilitated. Further, the database can be constructed only by processing the e-mail transmitted from the data collection device, and the safety and reliability of the monitoring data by the e-mail can be ensured, and the cost performance of the entire system is improved.

  In the second invention, when the monitoring data provision processing unit acquires the monitoring data by real-time processing, when the query is received from the beneficiary device via the second communication network and access authentication is obtained, The received query is transmitted to the data collection device via the first communication network, and monitoring data based on the query is obtained from the data collection device via the first communication network to obtain the second communication network. To the beneficiary device that was requested via. According to the present invention, the monitoring data provision processing unit receives a query from the beneficiary device, authenticates access, acquires monitoring data based on the query from the data collection device, and transmits the monitoring data to the requested beneficiary device. Therefore, the beneficiary device can acquire monitoring data in real time only by creating a query.

  In the second invention, the monitoring data provision processing unit performs access authentication when receiving a query request for monitoring data based on a query from the beneficiary device via the second communication network, and the access authentication is established. The monitoring data obtained by searching the database is processed and transmitted to the beneficiary device requested through the second communication network. According to the present invention, when the monitoring data provision processing unit receives the monitoring data inquiry request based on the query from the beneficiary device, the access authentication is performed, and the monitoring data obtained by searching the database is processed and requested. Transmit to the beneficiary device. Therefore, the beneficiary terminal can acquire content necessary for plant monitoring, such as monitoring data for each data collection device, its history, and trends, in addition to the monitoring data, only by creating a query.

  A program according to a third aspect of the invention is executed on a computer, periodically collects and accumulates monitoring data from plant equipment, and is connected to a data collection device that transmits the data to the outside via a first communication network. Plant monitoring that is connected to a beneficiary device that inquires monitoring data and obtains necessary monitoring data via the second communication network, and that supports monitoring of the operating state of the plant equipment installed at each remote machine station A program used in a cloud service providing apparatus of a support system, wherein the monitoring data acquired via the first communication network is allocated to the beneficiary apparatus and the data collection apparatus. Managed based on the obtained unique identification information and allocated to the predetermined storage area of the storage unit. When the monitoring data storage processing to be stored in the network and the monitoring data inquiry request from the beneficiary device via the second communication network are received, access authentication is performed based on the identification information, and the access authentication is established. And processing the monitoring data read from the database, and executing the monitoring data providing process of transmitting the processed monitoring data to the beneficiary device that has made the inquiry request via the second communication network.

  According to the program of the third invention, the computer manages the monitoring data on the basis of the unique identification information assigned to each of the beneficiary device and the data collection device, and stores it in the database. When the monitoring data inquiry request is received, access authentication based on the identification information is performed, and processing for processing the monitoring data read from the database and transmitting it to the beneficiary device that has made the inquiry request is executed. For this reason, the integrity of the monitoring data is ensured, and the monitoring data can be protected from reception, change, and falsification by a beneficiary without access authority. In addition, since monitoring data is stored and stored in both the data collection device and the cloud service providing device, it is possible to prevent loss of monitoring data by collecting data after communication is restored in the event of a communication abnormality or system abnormality. .

  In the third invention, when the monitoring data storage process acquires the monitoring data in a batch process, the monitoring data storage process receives a monitoring data mail transmitted from the data collection device via the first communication network and sends the attached file. Includes processing to update the database. According to the present invention, the interface can be unified by using the attached file of the e-mail for collecting the monitoring data, and the flexible response to the increase in the machine field is facilitated. Further, the database can be constructed only by processing the e-mail transmitted from the data collection device, and the safety and reliability of the monitoring data by the e-mail can be ensured, and the cost performance of the entire system is improved.

  In the third invention, the monitoring data providing process receives a query from the beneficiary device via the second communication network and obtains access authentication when acquiring the monitoring data by real-time processing. The received query is transmitted to the data collection device via the first communication network, and monitoring data based on the query is obtained from the data collection device via the first communication network, and then transmitted via the second communication network. To the beneficiary device requested in step (b). According to the present invention, the beneficiary device can acquire monitoring data in real time only by creating a query.

  In the third invention, the monitoring data providing process performs access authentication when receiving a query request for monitoring data based on a query from the beneficiary device via the second communication network, and when the access authentication is established, Processing for processing the monitoring data obtained by searching the database and transmitting it to the beneficiary device requested through the second communication network. According to the present invention, the beneficiary terminal can acquire contents necessary for plant monitoring, such as monitoring data for each data collection device, its history, trends, etc. in addition to the monitoring data simply by creating a query. it can.

  Advantageous Effects of Invention According to the present invention, a plant monitoring support system that facilitates ensuring the integrity of monitoring data and facilitating recovery of monitoring data when communication is interrupted when plant maintenance is to be realized by a cloud service. , And a cloud service providing apparatus and program in the system.

It is a system configuration diagram for explaining the configuration of a plant monitoring support system according to an embodiment of the present invention. It is an operation | movement sequence diagram for demonstrating operation | movement of the blunt monitoring assistance system which concerns on embodiment of this invention. It is a block diagram for demonstrating the structure of the cloud service provision apparatus which concerns on embodiment of this invention. It is a figure which shows an example of the table structure of the database which the cloud service provision apparatus which concerns on embodiment of this invention has. It is a block diagram which shows the structure of the monitoring data collection apparatus which comprises the plant monitoring assistance system which concerns on embodiment of this invention. It is a flowchart which shows the monitoring data collection process of the cloud service provision apparatus which concerns on embodiment of this invention. It is a flowchart which shows the monitoring data inquiry process of the cloud service provision apparatus which concerns on embodiment of this invention. It is a figure which shows an example of the screen structure of the continuous monitoring screen produced | generated by the cloud service provision apparatus which concerns on embodiment of this invention. It is a figure which shows an example of the screen structure of the abnormality log | history screen produced | generated by the cloud service provision apparatus which concerns on embodiment of this invention. It is a figure which shows an example of the screen structure of the trend screen produced | generated by the cloud service provision apparatus which concerns on embodiment of this invention. It is a figure which shows an example of the screen structure of the form produced | generated by the cloud service provision apparatus which concerns on embodiment of this invention. It is a figure which shows an example of a screen structure of the data collection device information management screen produced | generated by the cloud service provision apparatus which concerns on embodiment of this invention.

  DESCRIPTION OF EMBODIMENTS Hereinafter, embodiments for carrying out the present invention (hereinafter referred to as embodiments) will be described in detail with reference to the accompanying drawings. Note that the same number is assigned to the same element throughout the description of the embodiment.

(Configuration of plant monitoring support system 100)
FIG. 1 is a system configuration diagram for explaining the configuration of a blunt monitoring support system according to an embodiment of the present invention. The plant monitoring system 100 is a system that supports maintenance and maintenance of a plant, and is a beneficiary device used by a beneficiary 2 that is a data collection device 10 installed in each of the machines 1A and 1B and a water and sewage business entity, for example. 20 and a cloud service providing apparatus 30.

The machines 1A and 1B include a plurality of GSAs 11 (Gadget
Service Adapter) is installed, and plant equipment (not shown) is connected to each GSA 11. The GSA 11 is connected to a cloud service providing apparatus 30 installed in the data center 3 via a closed network 50 that is a first communication network via network devices such as a hub 12 and a router 13. Hereinafter, the GSA 11, the hub 12, and the router 13 are collectively referred to as the data collection device 10. The data collection device 10 periodically collects and accumulates monitoring data from plant equipment (not shown), and transmits the collected data to the data center 3 where the external cloud service providing device 30 is installed. Here, the “closed network 50” refers to a network that can be used as if it is a private line, such as a VPN (Virtual Private Network).

  On the other hand, the beneficiary device 20 is configured by a PC or the like, for example, and is connected to the cloud service providing device 30 installed in the data center 3 via the open network 60 as the second communication network. The “open network 60” here refers to an IP (Internet Protocol) network. The beneficiary terminal 20 queries the monitoring data via the open network 60 and acquires the monitoring data and its processed data.

  The cloud service providing apparatus 30 is a server group that performs integrated management of plant monitoring data generated in each of the machines 1A and 1B, and processes and provides the information requested by the water and sewage business entity that is the user. In the present embodiment, the cloud service providing apparatus 30 includes a Web (World Wide Web) server 31, a mail server 32, a file server 33, a Com (Component Object Model) server 34, an APL (Application) server 35, And a DB (Data Base) server 36. These server groups 31 to 36 are commonly connected via an LAN (Local Area Network) together with an administrator terminal 37 and routers 38a and 38b.

  The cloud service providing apparatus 30 organically couples the server groups 31 to 36 as described above, so that the monitoring data acquired from the data collection apparatus 10 via the closed network 50 (first communication network) is received by the beneficiary. Managed based on the unique identification information assigned to each of the device 20 and the data collection device 10 and accumulated in a built-in database, and monitored data from the beneficiary device 20 via the open network 60 (second communication network). When the inquiry request is received, the access authority is authenticated based on the identification information, and when the authentication is established, the monitoring data read from the database is processed, and the processed monitoring data is referred to via the open network 60. The function which transmits to beneficiary apparatus 20 with which there existed is performed.

  The cloud service providing apparatus 30 monitors packets for security measures by interposing a gateway between the networks 50 and 60 described above.

(Operation of the plant monitoring support system 100)
FIG. 2 is an operation sequence diagram for explaining the operation of the blunt monitoring support system 100 according to the embodiment of the present invention. Here, the data flow among the data collection device 10, the server groups 31 to 36 constituting the cloud service providing device 30, and the beneficiary device 20 is shown. Hereinafter, the operation of the plant monitoring support system 100 shown in FIG. 1 will be described with reference to FIG.

  First, the procedure (steps S101 to S104) in which the cloud service providing apparatus 30 acquires monitoring data from the data collection apparatus 10 at predetermined time intervals and imports the monitoring data will be described. First, the data collection device 10 performs inter-processor communication with a process device via a serial communication path (not shown). As a result, the data collection device 10 acquires monitoring data at regular intervals and creates a database for each data collection device 10 installed in the machine place 1. Subsequently, the data collection device 10 creates an e-mail addressed to the cloud service providing device 30, attaches the acquired monitoring data to the e-mail for a predetermined period, and sends the cloud service providing device 30 via the closed network 50. To the mail server 32 (step S101).

  Note that the data collection device 10 uses APOP (Authenticated Post Office Protocol) to encrypt the received password when sending the e-mail with the monitoring data attached as a file.

  On the other hand, the file server 33 periodically makes an inquiry to the mail server 32 storing the e-mail with the monitoring data attached as a file (step S102). Then, the monitoring data is backed up along with the reception. The DB server 36 acquires the monitoring data received from the file server 33 by FTP (File Transfer Protocol) (step S103), and imports it into the DB server 36 to construct a database (step S104). The data structure of this database will be described later with reference to FIG. According to the above procedure, the monitoring data is stored and stored in the database by batch processing.

  Next, a procedure (steps S111 to S119) in which the beneficiary device 20 acquires monitoring data in real time via the open network 60 will be described. The beneficiary device 20 first creates a query Q1 (monitoring data acquisition query) for acquiring monitoring data, and transmits it to the Web server 31 of the cloud service providing device 30 (step S111). Upon receiving this request, the Web server 31 delivers the query Q1 to the APL server 35 in order to authenticate the access authority of the beneficiary device 20 (step S112). After the authentication is obtained (step S113), in the case of a real-time numerical inquiry, the query Q1 is delivered to the Com server 34 (step S114). If it is an inquiry action, the query Q1 is delivered to the DB server 36 (step S114). In the case of a real-time numerical inquiry, the Com server 34 issues a monitoring data acquisition request to the data collection device 10 via the closed network 50 using OPC-DA (OLE for Process Control-Data Access) (step S115). .

  The data collection apparatus 10 that has received the monitoring data acquisition request transmits the monitoring data corresponding to the monitoring data acquisition query Q1 to the Com server 34 via the closed network 50 (step S116). The Com server 34 that has received the monitoring data delivers the monitoring data to the APL server 35 (step S117). The APL server 35 processes the monitoring data, for example, generates screen information shown in FIG. 12 and transfers it to the Web server 31 (step S118). Upon receiving the processed data, the Web server 31 transmits the processed data to the beneficiary terminal 20 requested via the open network 60, and ends the procedure for acquiring the real-time monitoring data (step S119).

  Finally, a procedure (steps S121 to S126) in which the beneficiary device 20 inquires monitoring data from the cloud service providing device 30 via the open network 60 will be described. The beneficiary device 20 first creates an inquiry query Q2 for monitoring data and transmits it to the Web server 31 of the cloud service providing device 30 (step S121). Receiving this, the Web server 31 passes the inquiry query Q2 to the APL server 35 after authenticating the access authority (step S122).

  The APL server 35 that has received the inquiry query Q2 transfers the search request to the DB server 36 (step S123), and the DB server 36 that has received the search request searches the database based on the inquiry query Q2. The hit monitoring data is transmitted to the APL server 35 (step S124). In response to this, the APL server 35 processes the acquired monitoring data, for example, generates screen information shown in FIGS. 8 to 12 and transfers the screen information to the Web server 31 (step S125). And the web server 31 complete | finishes a monitoring data inquiry procedure by transmitting to the beneficiary apparatus 20 which requested | required via the open network 60 (step S126).

(Effect of plant monitoring support system 100)
According to the plant monitoring support system 100 of the present invention, the cloud service providing apparatus 30 has unique monitoring data acquired from the data collection apparatus 10 assigned to each of the beneficiary apparatus 20 and the data collection apparatus 10. Manage based on identification information and store in database. When the monitoring data inquiry request is received from the beneficiary device 20, access authentication based on the identification information is performed, and the monitoring data read from the database is processed and transmitted to the beneficiary device 20 that has made the inquiry request. For this reason, the integrity of the monitoring data is ensured, and the monitoring data can be protected from reception, change, and falsification by a beneficiary without access authority. In addition, since monitoring data is stored and stored in both the data collection device 10 and the cloud service providing device 30, in the unlikely event of a communication abnormality or system abnormality, it is possible to prevent loss of monitoring data by collecting data after communication is restored. Can do.

(Configuration of cloud service providing apparatus 30)
FIG. 3 is a block diagram for explaining the configuration of the cloud service providing apparatus according to the embodiment of the present invention. As illustrated in FIG. 3, the cloud service providing apparatus 30 includes a control unit 300, a communication interface unit 310, and a storage unit 320.

The communication interface unit (NIC 310) includes SMTP / APOP (Simple Mail Transfer Protocol / Authenticated Post Office Protocol), VPN (Virtual Private Network), HTTP (Hyper) defined between the closed network 50 and the data collection device 10. Text
It has a function for transmitting and receiving monitoring data based on a communication protocol such as Transfer Protocol (OPC), OPC-DA, or a protocol such as HTTPS (Hypertext Transfer Protocol Security) defined between the open network 60 and the beneficiary device 20. .

  The storage unit 320 has a function of accumulating monitoring data transmitted / received via the communication interface unit 310 in a predetermined storage area allocated as a monitoring data DB (Data Base). The storage unit 320 includes, for example, a nonvolatile storage device (nonvolatile semiconductor memory, hard disk device, optical disk device, etc.), a randomly accessible storage device (eg, SRAM, DRAM), or the like.

An example of the table structure of the monitoring data DB is shown in FIG. According to FIG. 4, the table items are “time stamp”, “value (actual data)”, “data state”, “item name”, “base value”, “full scale value”, “unit”, “data”. "Type" etc. The “time stamp” includes information such as the year, month, day, hour, minute, and second. The “value (actual data)” includes information such as a real-time process value. The “data state” includes data indicating validity and validity such as usable, unusable, maintenance state, and abnormal state value (actual data). “Item name” includes a Japanese item name. The “base value” and “full scale value” include numerical values. “Unit” includes, for example,%, Mpa, m ³ / h, and the like. The “data type” has a format such as Boolean, REAL, or int. Here, “time stamp” and “value (actual data)” are dynamically changing dynamic information, and values of other items are fixed information.

  The table items described above are managed in units of tenant IDs uniquely assigned to each beneficiary, thereby ensuring the integrity of monitoring data between users. Further, the above table items are similarly managed and accumulated in the data collection device 10, and the integrity of the monitoring data between the GSAs 11 is ensured by the GSA-ID uniquely assigned to each GSA 11.

  The control unit 300 has a function of controlling the communication interface unit 310 and the storage unit 320 to support monitoring of the operation state of the plant equipment. Specifically, the control unit 300 manages the monitoring data acquired via the closed network 50 and the communication interface unit 310 based on the unique identification information assigned to each of the beneficiary device 20 and the data collection device 10. And stored in a database assigned to a predetermined storage area of the storage unit 320. Further, the control unit 300 performs access authentication based on the identification information when receiving a monitoring data inquiry request from the beneficiary device 20 via the open network 60 and the communication interface unit 310, and monitors when the access authentication is established. The monitoring data read from the data DB is processed, and the processed monitoring data is transmitted to the beneficiary device 20 that has made the inquiry request via the open network 60 and the communication interface unit 310.

  Therefore, the control unit 300 includes a main control unit 301, a protocol processing unit 302, a monitoring data storage processing unit 303, an access authentication processing unit 304, a monitoring data provision processing unit 305, and an NTP (Network Time Protocol) management. 306, which are commonly connected to a bidirectional internal bus 307 including a plurality of lines for address, data, and control.

  The protocol processing unit 302 is connected to the data collection device 10 or the beneficiary terminal 20 via each of the closed network 50 and the open network 60 so that SMTP / APOP, HTTP / HTTPS, VPN, It has a function of performing switching control of these protocols so that communication protocols such as FTP and OPC-DA can be executed.

  The monitoring data storage processing unit 303 sets the monitoring data acquired via the communication interface unit 310 to unique identification information (tenant ID, GSA-ID) assigned to each of the beneficiary device 20 and the data collection device 10. And a function of accumulating in the monitoring data DB of the storage unit 320 based on the above. When the monitoring data provision processing unit 305 receives a monitoring data inquiry request from the beneficiary device 20 via the communication interface unit 310, the monitoring data provision processing unit 305 processes the monitoring data read from the monitoring data DB and communicates the processed monitoring data. The information is transmitted to the beneficiary device 20 that has received the inquiry request via the interface unit 310. At this time, the access authentication processing unit 304 authenticates the access authority based on the unique identification information assigned to each of the beneficiary device 20 and the data collection device 10, and when the authentication is obtained, an inquiry request is issued. Is permitted to provide monitoring data to the beneficiary device 10.

  The NTP management unit 306 has a function of acquiring accurate time information by GPS (Global Positioning System) or the like, and adjusting the internal clock (time adjustment) by referring to a lower-level host such as the data collection device 10 or the like. This makes it possible to monitor monitoring data synchronized with time with high reliability between remotely located devices.

  Note that the main control unit 301 has a unique identification that the control unit 300 assigns to the beneficiary device 20 and the data collection device 10 the monitoring data acquired via the closed network 50 and the communication interface unit 310. When it is managed based on information and accumulated in a database assigned to a predetermined storage area of the storage unit 320, or when a monitoring data inquiry request is received from the beneficiary device 20 via the open network 60 and the communication interface unit 310, When access authentication is performed based on the identification information and the access authentication is established, the monitoring data read from the monitoring data DB is processed, and the received monitoring request is received via the open network 60 and the communication interface unit 310. So as to execute the function of transmitting to the person device 20 A protocol processing unit 302, performs an access authentication processing section 303, the monitoring data storage processing unit 304, a monitoring data providing unit 305, the sequence control of the NTP management unit 306.

  The cloud service providing apparatus 30 is actually configured by organically coupling the server groups 31 to 36. However, each of the above-described configuration blocks is a group of functions of programs executed by the server groups 31 to 36. It is shown.

  The configuration of the data collection device 10 is shown in FIG. As shown in FIG. 5, the data collection device 10 includes, for example, a CPU and a main memory 110 (hereinafter referred to as a CPU / MMU 110), a PIO (Process I / O) 120, and a large-capacity storage such as a hard disk (HDD). A device 130, an operation device 140 such as an LCD (Liquid Crystal Display) touch panel, and a communication interface device (NIC) 150 are commonly connected to a system bus 160 including a plurality of lines for address, data, and control. And configured.

  The CPU / MMU 110 has a function of collecting, storing, and transmitting monitoring data, and a main control unit 111 and an event management unit 112 are shown in such a manner that a program for executing the data is expanded and shown as an internal configuration. And an accumulation processing unit 113 and an e-mail creation processing unit 114.

  The event management unit 112 is a functional block that acquires a definition designation created by the plant administrator operating the operation device 140. For example, the event management unit 112 receives time information and plant state change information as a definition command. The definition command received by the event management unit 112 is delivered to the main control unit 111. The main control unit 111 takes in the state of the plant as real-time information via the PIO 120 and the system bus 160 as monitoring data. Here, the monitoring data is in the form of, for example, analog data AI, digital data DI, and pulse data PI.

  The accumulation processing unit 113 accumulates the monitoring data in the monitoring data DB assigned to a predetermined area of the HDD 130 in a specified time, for example, in the form of analog data AI, digital data DI, and pulse data PI. In the monitoring data DB, field information including monitoring data is sequentially accumulated by the accumulation processing unit 113, and this field information is created and encrypted as an attached file by the e-mail creation processing unit 114, and the communication interface unit 150 is transmitted to the cloud service providing apparatus 30 via 150.

(Operation of cloud service providing device)
The operation of the cloud service providing apparatus 30 according to the embodiment of the present invention shown in FIG. 3 will be described below with reference to the flowcharts of FIGS.

  First, the monitoring data collection process will be described with reference to FIG. In the data collection device 10, the CPU / MMU 110 performs inter-processor communication with plant equipment at a predetermined time interval via a serial communication path (not shown). As a result, the main control unit 111 acquires monitoring data of the plant equipment via the PIO 120, constructs a monitoring data DB for each GSA 11, and imports the monitoring data to the built-in HDD 130. Here, the main control unit 111 activates an email creation process by the email creation processing unit 114. In response to this, the e-mail creation processing unit 114 creates an e-mail addressed to the cloud service providing apparatus 30, attaches the acquired monitoring data to the e-mail for a predetermined period, and sends it via the closed network 50. It transmits to the mail server 32 of the cloud service providing apparatus 30.

  In the cloud service providing apparatus 30, when monitoring data is collected by batch processing (step S201 “batch”), the above-described electronic mail is received via the communication interface unit 310 (step S202 “YES”). The data is transferred to the monitoring data storage processing unit 303 via the SMTP / APOP and the main control unit 301. In response to this, the monitoring data storage processing unit 303 refers to the storage unit 3220 and imports the received monitoring data into the monitoring data DB assigned to a predetermined area of the storage unit 320 (step S203).

  On the other hand, when the beneficiary device 20 acquires monitoring data in real time via the open network 60 (step S201 “real time”), the beneficiary device 20 creates a monitoring data acquisition query Q1 and performs cloud service via the open network 60. To the providing device 30. The control unit 300 (main control unit 301) that has received the monitoring data acquisition query Q1 via the communication interface unit 310 (step S204 “YES”) is a query that decodes the monitoring data acquisition query Q1 and acquires real-time numerical values. If this is the case (step S205 “numerical value”), this monitoring data acquisition query Q1 is delivered to the monitoring data provision processing unit 305.

  The monitoring data provision processing unit 305 that has received the monitoring data acquisition query Q1 requests the access authentication processing unit 304 to authenticate the access authority of the beneficiary device 20 based on the tenant ID included in the query. When the access authority processing unit 304 obtains the access authority authentication (“YES” in step S206), the monitoring data provision processing unit 305 selects the OPC-DA protocol via the protocol processing unit 302, and the data according to this protocol. A monitoring data acquisition request is issued to the collection device 10 via the closed network 50 (step S207).

  The data collection device 10 that has received the monitoring data acquisition request transmits the monitoring data corresponding to the monitoring data acquisition query Q1 to the cloud service providing device 30 via the closed network 60. The control unit 300 of the cloud service providing apparatus 30 that has received the monitoring data (step S208 “YES”), the main control unit 301 delivers the monitoring data to the monitoring data provision processing unit 305. In response to this, the monitoring data provision processing unit 305 processes the monitoring data, for example, generates screen information shown in FIG. 12 and transmits the screen information to the beneficiary terminal 20 requested via the open network 60 (step S209). ).

  When the received monitoring data acquisition query Q1 is an inquiry (step S205 “inquiry”), the monitoring data provision processing unit 305 follows the monitoring data inquiry process shown in the flowchart of FIG.

  Next, the monitoring data inquiry process will be described with reference to FIG. The beneficiary device 20 first creates a monitoring data query Q2 and transmits it to the cloud service providing device 30. In the control unit 300 that has received the monitoring data inquiry query (“YES” in step S301), the main control unit 301 activates the access authentication processing unit 304 and the beneficiary device 20 based on the tenant ID included in the monitoring data inquiry query Q2. Request authentication for access authority.

  When the access authorization processing unit 304 obtains access authority authentication (“YES” in step S302), the main control unit 301 activates the monitoring data provision processing unit 305, and the monitoring data provision processing unit 305 that has received this activates the monitoring data provision processing unit 305. Based on the search condition expression included in the monitoring data inquiry query Q2, the monitoring data DB in the storage unit 320 is searched (step S303). Then, the hit monitoring data is acquired (step S304 “YES”), and the acquired monitoring data is processed. In processing the monitoring data, for example, the monitoring data provision processing unit 305 generates the screen information shown in FIGS. 8 to 12 (step S305), and the beneficiary requested through the communication interface unit 310 and the open network 60 is received. It transmits to the apparatus 20 (step S306).

  An example of various screen structures in which the acquired monitoring data is processed by the monitoring data provision processing unit 305 and displayed on the monitor of the beneficiary device 20 is shown in FIGS. According to the “always monitoring screen” shown in FIG. 8, the beneficiary selects an arbitrary background diagram such as a map or piping system diagram with a mouse or the like, and drags and drops it from a GSA list (not shown), for example. Above, the symbol of the plant equipment connected to GSA can be arranged. It is also easy to add and delete symbols on the screen.

  Further, according to the “abnormal history screen” shown in FIG. 9, the abnormal history information is displayed as a list on the screen. At this time, the abnormal item is written in red and the failure recovery item is written in black. Then, if a “monitoring screen link button” (hidden on the display screen) that is assigned and displayed in the lower part of the screen is clicked, as shown in FIG. 9, the “always” of the corresponding GSA 11 of the selected item is displayed. It is possible to display a popup by linking to the “monitoring screen”.

  In addition, according to the “trend diagram screen” shown in FIG. 10, a beneficiary can select a desired measurement item within the range of data items constructed in the monitoring data DB, thereby creating a trend group and displaying a graph. It is. Here, it becomes easy to compare and monitor similar measurement items by displaying a plurality of items on the same graph. Further, according to the “form screen” shown in FIG. 11, it is possible to create a form template and display the data only by the beneficiary selecting an arbitrary measurement item. Once saved and registered, the template can be used any number of times, and it is easy to add or delete items within the range of data items built in the monitoring data DB.

  According to the “GSA information management screen” shown in FIG. 12, the GSA 11 connected to the system is displayed in a list, and the details of the GSA 11 selected by clicking the “display button” assigned and displayed at the bottom of the screen. Information can be popped up. As described above, the access authentication by the GSA-ID is performed when the “GSA information management screen” is displayed.

  The operator saves or outputs the displayed form by periodically displaying the “form screen” shown in FIG. 11 once / day or the like. If the symbol of the monitoring screen on the map changes to red at the time of abnormality, the “abnormality history screen” of the corresponding GSA is displayed by clicking the monitoring screen link button, and how much the standard is exceeded by checking the contents Can be determined. In this case, it can be handled as a basis for administrative guidance or as a maintenance document by saving a form or outputting a form.

(Effect of cloud service provision device)
According to the cloud service providing device 30 according to the embodiment of the present invention, the control unit 300 manages the monitoring data based on the unique identification information assigned to each of the beneficiary device 20 and the data collection device 10. When the monitoring data DB (storage unit 320) stores and receives the monitoring data inquiry request from the beneficiary device 20, the access authentication based on the identification information is performed, and the monitoring data read from the monitoring data DB is processed and inquired. Transmit to the beneficiary device 20 that requested it. For this reason, the integrity of the monitoring data is ensured, and the monitoring data can be protected from receiving, changing, and falsification of the monitoring data by a beneficiary without access authority. Moreover, since the monitoring data is stored and stored in both the data collection device 10 (HDD 130 in FIG. 4) and the cloud service providing device 30 (storage unit 320 in FIG. 3), the communication data should be communicated in the event of a communication abnormality or system abnormality By collecting data by the cloud service providing apparatus 30 after the return, loss of monitoring data can be prevented.

  Note that the program according to the embodiment of the present invention is executed on a computer (a group of servers 31 to 36 constituting the cloud service providing apparatus 30) as shown in FIG. A beneficiary device that is connected to the data collection device 10 that collects, accumulates, and transmits data to the outside via a first communication network (closed network 50), inquires the monitoring data, and obtains necessary monitoring data. 20 is a program used for the cloud service providing apparatus 30 of the plant monitoring support system 100 that is connected via the second communication network (open network 60) and supports the monitoring of the operating state of the plant equipment installed for each machine. is there. Then, as shown in the flowcharts of FIGS. 6 and 7, monitoring data acquired via the first communication network is assigned to the computer for each of the beneficiary device 20 and the data collection device 10. Monitoring data storage processing (steps S201 to S209 in FIG. 6) that is managed based on unique identification information and is stored in a database assigned to a predetermined storage area, and monitoring data from the beneficiary device 20 via the second communication network When the inquiry request is received, access authentication based on the identification information is performed, and when the access authentication is established, the monitoring data read from the database is processed, and the processed monitoring data is sent to the inquiry request via the second communication network. Monitoring data provision processing to be transmitted to the beneficiary device 20 (Steps S301 to S3 in FIG. 6), it is intended to run.

  According to the program according to the embodiment of the present invention, the computer manages the monitoring data based on the unique identification information assigned to each of the beneficiary device 20 and the data collection device 10 and stores it in the database. When the monitoring data inquiry request is received from the beneficiary device 20, the access authentication based on the identification information is performed, and the monitoring data read from the database is processed and transmitted to the beneficiary device 20 having the inquiry request. . For this reason, the integrity of the monitoring data is ensured, and the monitoring data can be protected from reception, change, and falsification by a beneficiary without access authority. In addition, since monitoring data is stored and stored in both the data collection device 10 and the cloud service providing device 30, in the unlikely event of a communication abnormality or system abnormality, it is possible to prevent loss of monitoring data by collecting data after communication is restored. Can do.

  As mentioned above, although this invention was demonstrated using embodiment, it cannot be overemphasized that the technical scope of this invention is not limited to the range as described in the said embodiment. It will be apparent to those skilled in the art that various modifications or improvements can be added to the above-described embodiments. Further, it is apparent from the scope of the claims that the embodiments added with such changes or improvements can be included in the technical scope of the present invention.

10 Data Collection Device 20 Beneficiary Terminal 30 Cloud Service Providing Device 40 Firewall 50 Closed Network (First Communication Network)
60 Open network (second communication network)
DESCRIPTION OF SYMBOLS 100 Plant monitoring assistance system 300 Control part 310 Communication interface part 320 Memory | storage part 301 Main control part 302 Protocol processing part 303 Monitoring data storage processing part 304 Access authentication processing part 305 Monitoring data provision processing part 306 NTP management part

Claims (9)

A plant monitoring support system for supporting monitoring of the operating state of plant equipment installed at each remote machine,
A data collection device that periodically collects, accumulates, and transmits monitoring data from the plant equipment, and
A beneficiary device that queries the monitoring data and obtains the necessary monitoring data;
The data collection device is connected via a first communication network and the beneficiary device is connected via a second communication network,
The monitoring data acquired via the first communication network is managed and stored in a database based on unique identification information assigned to each of the beneficiary device and the data collection device,
When a monitoring data inquiry request is received from the beneficiary device via the second communication network, access authentication based on the identification information is performed, and when the access authentication is established, monitoring data read from the database is A cloud service providing device that processes and transmits the processed monitoring data to the beneficiary device that has been inquired via the second communication network;
A plant monitoring support system comprising: Beneficial of collecting monitoring data from plant equipment periodically, accumulating and transmitting it to the outside via a first communication network, inquiring the monitoring data and obtaining necessary monitoring data A person apparatus is a cloud service providing apparatus in a plant monitoring support system that is connected via a second communication network and that supports monitoring of the operating state of the plant equipment installed at each remote machine station,
A communication interface unit for transmitting and receiving the monitoring data based on a communication protocol respectively defined between the first communication network and the data collection device, and the second communication network and the beneficiary device;
A storage unit that accumulates the monitoring data transmitted and received via the communication interface unit in a predetermined storage area assigned as a database;
A control unit that controls the communication interface unit and the storage unit to perform monitoring support of the operation state of the plant equipment,
The controller is
The storage unit manages the monitoring data acquired via the first communication network and the communication interface unit based on unique identification information assigned to each of the beneficiary device and the data collection device. A monitoring data accumulation processing unit for accumulating in the database assigned to the predetermined storage area;
When an inquiry request for monitoring data is received from the beneficiary device via the second communication network and the communication interface unit, access authentication based on the identification information is performed, and when the access authentication is established, Processing the monitoring data to be read out, and transmitting the processed monitoring data to the beneficiary device that has received an inquiry request via the second communication network and the communication interface unit;
A cloud service providing apparatus in a plant monitoring support system. The monitoring data storage processing unit
3. The database is updated by receiving a monitoring data mail transmitted from the data collection device via the first communication network when the monitoring data is acquired by batch processing, and updating the database. Cloud service provider. The monitoring data provision processing unit
When the monitoring data is acquired by real-time processing, a query is received from the beneficiary device via the second communication network, and when access authentication is obtained, the received query is transmitted via the first communication network. Transmit to the data collection device, acquire monitoring data based on the query from the data collection device via the first communication network, and transmit to the beneficiary device requested via the second communication network The cloud service providing apparatus according to claim 2. The monitoring data provision processing unit
Upon receiving a query request for monitoring data based on a query from the beneficiary device via the second communication network, access authentication is performed. When the access authentication is established, the monitoring data obtained by searching the database is processed. The cloud service providing apparatus according to claim 2, wherein the cloud service providing apparatus transmits the request to the beneficiary apparatus requested through the second communication network. A computer that is executed on a computer and periodically collects, accumulates, and transmits monitoring data from plant equipment and transmits the data to the outside is connected via a first communication network, and the monitoring data is inquired. A cloud service providing device of a plant monitoring support system that is connected to a beneficiary device that acquires monitoring data via a second communication network and that supports monitoring of the operating state of the plant equipment installed at each remote machine station. A program used,
In the computer,
The monitoring data acquired via the first communication network is managed based on unique identification information assigned to each of the beneficiary device and the data collection device, and a predetermined storage area of the storage unit Monitoring data storage processing to be stored in the database assigned to
When a monitoring data inquiry request is received from the beneficiary device via the second communication network, access authentication based on the identification information is performed, and when the access authentication is established, monitoring data read from the database is Monitoring data provision processing for processing and transmitting the processed monitoring data to the beneficiary device that has been inquired via the second communication network;
A program characterized by having executed. The monitoring data accumulation process includes:
The acquisition of the monitoring data by a batch process includes a process of receiving a monitoring data mail transmitted from the data collection device via the first communication network as an attachment and updating the database. Item 6. The program according to item 6. The monitoring data providing process includes:
When the monitoring data is acquired by real-time processing, a query is received from the beneficiary device via the second communication network, and when access authentication is obtained, the received query is transmitted via the first communication network. Transmit to the data collection device, acquire monitoring data based on the query from the data collection device via the first communication network, and transmit to the beneficiary device requested via the second communication network The program according to claim 6, further comprising a process. The monitoring data providing process includes:
Upon receiving a query request for monitoring data based on a query from the beneficiary device via the second communication network, access authentication is performed. When the access authentication is established, the monitoring data obtained by searching the database is processed. The program according to claim 6, further comprising: a process of transmitting to the beneficiary device requested through the second communication network.

Images