JP2013182320A - Information processor, information processing method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To achieve fine access control by absorbing a difference between inter-item dependence and the presence/absence of the reference authority of a user for each item when the generation of the numerical data of a certain item depends on other items.SOLUTION: A virtual measurement point information input/output part 3 inputs the reference request of numerical data from a user. Even when the generation procedure of the numerical data of an item as the object of a reference request whose reference authority belongs to the user depends on the generation procedure of the numerical data of other items whose reference authorities do not belong to the user, a constitution information access control part 7 generates the numerical data of the item as the object of a reference request by using the numerical data generation procedure of the other items without presenting the numerical data of the other items, and presents the numerical data of the item as the object of the reference request to the user.

Description

The present invention relates to a technology for managing data reference authority.
In the following, description will be given by taking as an example the case of managing the reference authority for measurement data such as power consumption.

In a conventional measurement data management device that manages sensor data such as power consumption and measurement equipment, in order to grasp the energy consumed for each member of the organization and equipment, using actual measurement points and virtual measurement points, Configuration information for managing the measured energy consumption by an organization or owned equipment is introduced (for example, Patent Document 1).
The actual measurement point is an actual measurement device that actually performs measurement and accumulates measurement data.
A virtual measurement point is a virtual measurement point provided as a unit for calculating and managing measurement data that is not actually measured, such as the sum or distribution of measurement data at actual measurement points. .

In addition, a method is also disclosed in which the measured energy consumption is tabulated using a time division such as a production time zone and a division such as equipment or organization (for example, Patent Document 2).
Regarding the method of batch management of data measured by multiple sites such as buildings and factories, it shows a method of converting the measurement data recorded in a separate format for each site to the same format and managing them collectively in the data center. (For example, Patent Document 3).
In addition, if the organization for which energy consumption is counted is a tenant that occupies a small section of the building, the building administrator can grasp the energy consumption of the entire building, while each tenant A method of performing access management of measurement data in order to enable the aggregation of energy consumption of only the sections is disclosed (for example, Patent Document 4).

JP 2004-340595 A Japanese Patent Laid-Open No. 2003-256761 JP 2009-238178 A JP 2007-133468 A

In the conventional technique, although the access right to the actual measurement point can be managed, the access right to the configuration information including the virtual measurement point cannot be managed.
When trying to perform the same access control as a real measurement point for a virtual measurement point, the problem is that a correct value cannot be obtained when using a virtual measurement point or a real measurement point without access rights in the calculation of the virtual measurement point There is.
For example, when the numerical data of the virtual measurement point 2 is used for the calculation for obtaining the numerical data of the virtual measurement point 1, if the user A does not have the access right of the virtual measurement point 2, the virtual measurement point 1 is accessed. Even if the user has the right, the calculation of the virtual measurement point 1 cannot be performed, and the numerical data of the virtual measurement point 1 cannot be presented to the user A.
Therefore, in a building where a plurality of tenants occupy, for example, there are the following problems.

(1) It is difficult to control access to a tenant (user) occupying a building that presents the power consumption of the small section in which the tenant occupies but does not present the power consumption of the entire building.
For example, if a virtual measurement point is provided in a small section of the tenant and the power consumption of the small section is calculated using the power consumption of the entire building, the tenant has the authority to reference the power consumption of the entire building. Since there is no, the power consumption of the tenant's small section cannot be presented.
On the other hand, in order to present the power consumption of the small section to the tenant, it is necessary to give the tenant the authority to refer to the power consumption of the entire building.

(2) Although the power consumption of the entire common part of the building is presented to the tenant, it is difficult to control access such that what kind of equipment is in the common part is not presented to the tenant.
For example, if a virtual measurement point is provided for the entire common area and the power consumption of the entire common area is calculated as the total power consumption of the devices in the common area, the tenant will have a reference to the power consumption of each individual device. Since there is no authority, the power consumption of the entire common part cannot be presented.
On the other hand, in order to present the power consumption of the entire common part to the tenant, it is necessary to give the tenant the authority to refer to the power consumption of individual devices.

(3) Although the power consumption of lighting among the power consumption of the tenant is presented to the tenant, it is difficult to control access such that the power consumption of the lighting of the entire building is not presented.
For example, if a virtual measurement point is provided in the lighting of a small section of the tenant and the power consumption of the lighting of the small section is calculated using the power consumption of the lighting of the entire building, the lighting of the entire building Since there is no reference authority for the power consumption of the tenant, the power consumption of the lighting of the tenant's small section cannot be presented.
On the other hand, in order to present the power consumption of the lighting of the small section to the tenant, it is necessary to give the tenant the authority to refer to the power consumption of the lighting of the entire building.

  As represented by the above (1) to (3), in the conventional technique, it is difficult to perform fine access control necessary for a plurality of interested parties to use the same configuration information. .

  The present invention has been made in view of such problems, and when the generation of numerical data of an item depends on other items, the dependency between items and the presence or absence of the user's reference authority for each item The main object is to obtain a configuration capable of absorbing the difference and finely controlling access.

An information processing apparatus according to the present invention includes:
A numerical data generation procedure information storage unit that stores numerical data generation procedure information indicating a numerical data generation procedure that is a procedure for generating numerical data for each item, and a plurality of items is indicated.
A plurality of users are indicated, and for each user, an authority information storage unit that stores numerical data reference authority information that indicates whether or not numerical data reference authority exists for each item indicated in the numerical data generation procedure information;
A reference request input unit for inputting a numerical data reference request from any user;
Based on the numerical data reference authority information, the reference requesting user who made the reference request extracts an item having a reference authority for numerical data as a processing target item, and based on the numerical data generation procedure information, the extracted processing target item In accordance with a numerical data generation procedure, a numerical data generation unit that generates numerical data of the processing target item;
A data presentation unit that presents the numerical data of the processing target item generated by the numerical data generation unit to the reference request user;
The numerical data generation procedure information storage unit is
The numerical data generation procedure of any item stores numerical data generation procedure information that depends on the numerical data generation procedure of other items,
The numerical data generator is
Even if the reference requesting user does not have the authority to reference numeric data for the other item when the numeric data generation procedure of the extracted processing target item depends on the numeric data generation procedure of the other item , Generating the numerical data of the processing target item according to the numerical data generation procedure of the other item and the numerical data generation procedure of the processing target item,
The data presentation unit
In the process in which the numerical data generation unit generates numerical data of the item to be processed, when the reference requesting user uses a numerical data generation procedure of another item that is not authorized to reference numerical data, the other item The numerical data of the processing target item is presented to the reference requesting user without presenting the numerical data.

  According to the present invention, the numerical value of the item to be processed using the numerical data generation procedure of the item for which the user does not have the reference authority without presenting the numerical data of the item for which the user does not have the reference authority to the user. Data can be generated and numerical data of the processing target item can be presented to the user, and fine access control can be performed.

FIG. 3 is a diagram illustrating a configuration example of a measurement data management device according to the first embodiment. FIG. 3 is a diagram illustrating an example of a measurement data management configuration according to the first embodiment. FIG. 3 is a diagram illustrating an example of a measurement data management configuration according to the first embodiment. FIG. 3 is a diagram illustrating a hardware configuration example of a measurement data management device according to the first embodiment. The figure which shows the relationship between the structure information which concerns on Embodiment 1, virtual measurement point information, and measured value information. FIG. 3 is a diagram illustrating an example of configuration information according to the first embodiment. FIG. 3 shows a structure of configuration information according to the first embodiment. FIG. 4 shows a structure of a group according to the first embodiment. FIG. 3 is a diagram showing a level structure according to the first embodiment. FIG. 4 shows a structure of virtual measurement point information according to the first embodiment. FIG. 4 is a diagram illustrating an example of a virtual measurement point syntax tree according to the first embodiment. FIG. 3 is a diagram showing a structure of measurement value information according to the first embodiment. FIG. 3 shows a structure of user information according to the first embodiment. FIG. 4 shows a structure of access control information according to the first embodiment. FIG. 4 is a flowchart showing an operation example of the measurement data management apparatus according to the first embodiment. FIG. 4 is a flowchart showing search processing for leaf nodes of configuration information nodes according to the first embodiment. FIG. 6 is a flowchart showing a virtual measurement point syntax tree creation process according to the first embodiment. FIG. 4 is a flowchart showing a calculation process of a virtual measurement point syntax tree according to the first embodiment. FIG. 4 is a diagram illustrating a configuration example of a measurement data management device according to a second embodiment. The figure which shows the structure of the access control information which concerns on Embodiment 2. FIG. The figure which shows the example of the logic operation analysis tree for analyzing the extended selection condition which concerns on Embodiment 2. FIG. FIG. 9 is a flowchart showing an extension selection process according to the second embodiment. FIG. 9 is a flowchart showing processing for acquiring a configuration information node set from a logical operation analysis tree according to the second embodiment. FIG. 9 is a flowchart showing configuration information node extraction processing according to the second embodiment. FIG. 4 shows a structure of virtual measurement point information according to the first embodiment.

Embodiment 1 FIG.
In this embodiment and the following embodiments, the existence of configuration information, reference of virtual measurement points, and access control for acquiring a subset of configuration information are realized for configuration information for managing actual measurement points and virtual measurement points. A measurement data management device and the like will be described.
As described above, the actual measurement point is an actual measurement device that actually performs measurement and accumulates measurement data.
A virtual measurement point is a virtual measurement point provided as a unit for calculating and managing measurement data that is not actually measured, such as the sum or distribution of measurement data at actual measurement points. .

FIG. 1 is a configuration diagram of a measurement data management apparatus 1 in the present embodiment.
The measurement data management device 1 corresponds to an example of an information processing device.

  The measurement data management device 1 includes a measurement data collection unit 2, a virtual measurement point information input / output unit 3, a configuration information input / output unit 4, a user information input / output unit 5, an access control information input / output unit 6, and a configuration information access control unit 7. The data storage area 14.

The virtual measurement point information input / output unit 3 inputs a measurement value reference request from the application program 24.
The virtual measurement point information input / output unit 3 may input a measurement value reference request from the user who uses the measurement data management device 1 via the application program 24 in the measurement data management device 1, or the operation terminal 27 ( A measurement value reference request may be input from the user using FIG. 2) via the application program 24 in the operation terminal 27.
The virtual measurement point information input / output unit 3 inputs a measurement value (numerical data) as a response to the reference request from the configuration information access control unit 7 and outputs the measurement value to the application program 24.
That is, the virtual measurement point information input / output unit 3 presents the measurement value to the user who uses the measurement data management device 1 via the application program 24 in the measurement data management device 1, and the application program in the operation terminal 27. The measured value is presented to the user who uses the operation terminal 27 via 24.
The virtual measurement point information input / output unit 3 corresponds to an example of a reference request input unit and a data presentation unit.
A user who has made a reference request is also referred to as a reference request user.

The configuration information access control unit 7 includes a measurement value information management unit 8, a virtual measurement point information management unit 9, a configuration information management unit 10, a user information management unit 11, an access control information management unit 12, and an access control unit 13. The information stored in the data storage area 14 is managed.
The configuration information access control unit 7 corresponds to an example of a numerical data generation unit.

The data storage area 14 includes measurement value information 15, virtual measurement point information 16, configuration information 17, user information 18, and access control information 19, and stores information held by the measurement data management device 1.
The measurement value information 15 is information shown in FIG. 12, for example.
The virtual measurement point information 16 is information shown in FIG. 10, for example.
The configuration information 17 is information shown in FIG. 7, for example.
The user information 18 is information shown in FIG. 13, for example.
The access control information 19 is information shown in FIG. 14, for example.
The virtual measurement point information 16 is information indicating a plurality of virtual measurement points (items) and a procedure (numerical data generation procedure) for generating a measurement value (numerical data) for each virtual measurement point. This corresponds to an example of data generation procedure information.
Further, the access control information 19 is information for each virtual measurement point (configuration information ID) as a virtual measurement point reference right as a virtual measurement point reference right for each of a plurality of users. This corresponds to an example of numerical data reference authority information.
The data storage area 14 corresponds to an example of a numerical data generation procedure information storage unit and an authority information storage unit.

The application program 24 makes a request to the virtual measurement point information input / output unit 3, the configuration information input / output unit 4, the user information input / output unit 5, and the access control information input / output unit 6 of the measurement data management apparatus 1, and uses the result. It is a higher-level application program.
The application program 24 may be an application program installed in the measurement data management apparatus 1 or an application program installed in an operation terminal 27 (FIG. 2) described later.

FIG. 2 shows a measurement data management configuration by the measurement data management apparatus 1.
The base device 20 (hereinafter simply referred to as the base 20) includes a measurement data transmission unit 21 that transmits measurement data collected to the measurement data management device 1 and measurement value information 23 that stores measurement data collected by the measurement device 25. A data storage area 22 for storing data and a measurement data receiving unit 26 for storing data in measurement value information are provided.
The base 20 and the measuring device 25 may be one or plural.
The operation terminal 27 includes an application program 24 and makes a reference request to the measurement data management apparatus 1.
Further, as described above, the application program 24 may exist in the measurement data management apparatus 1.

FIG. 3 shows a measurement data management configuration different from that of FIG.
In FIG. 3, a plurality of bases 20 have a hierarchical configuration.
That is, the measurement data receiving unit 26 of the upper base 20 receives the measurement data from the measurement data transmission units 21 of the plurality of lower bases 20.

The above-described measurement data management apparatus 1 is a computer, and each element of the measurement data management apparatus 1 can execute processing by a program.
Further, the program can be stored in a storage medium so that the computer can read the program from the storage medium.

FIG. 4 is a diagram illustrating a hardware configuration example of the measurement data management device 1.
An arithmetic device 401, an external storage device 402, a main storage device 403, and a communication device 404 are connected to the bus 405.
The arithmetic device 401 is a CPU (Central Processing Unit) that executes a program.
The external storage device 402 is, for example, a ROM (Read Only Memory) or a hard disk.
The main storage device 403 is a normal RAM (Random Access Memory).
The communication device 404 is a communication card compatible with normal Ethernet (registered trademark).
The program is normally stored in the external storage device 402, and is loaded into the main storage device 403 and sequentially read into the arithmetic device 401 for processing.
The program is a program that realizes a function described as “˜unit” (except for “numerical data generation procedure information storage unit” and “authority information storage unit”) shown in FIG.
The data storage area 14 shown in FIG. 1 is realized by, for example, the external storage device 402.
Further, an operating system (OS) is also stored in the external storage device 402, and at least a part of the OS is loaded into the main storage device 403. ”Is executed.
In the description of the first and second embodiments, “determination of”, “extraction of”, “comparison of”, “update of”, “setting of”, “registration of”, “ Information, data, signal values, and variable values indicating the results of the processing described as “selection of”, “search for”, “generation of”, “input of”, “output of”, etc. It is stored in the device 403 as a file.
Further, the encryption key / decryption key, random number value, and parameter may be stored in the main storage device 403 as a file.

4 is merely an example of the hardware configuration of the measurement data management apparatus 1, and the hardware configuration of the measurement data management apparatus 1 is not limited to the configuration illustrated in FIG. There may be.
For example, an output device such as a display or an input device such as a mouse / keyboard may be connected to the bus 405.

  Further, the information processing method according to the present invention can be realized by the procedure shown in the flowcharts of the present embodiment and the following embodiments.

The base 20 and the operation terminal 27 are also computers.
Communication between the measurement data management device 1, the site 20, and the operation terminal 27 is performed by the communication device 404.

Hereinafter, the operation of the measurement data management apparatus 1 will be described with reference to FIG.
Details of each operation will be described in detail with reference to flowcharts.

  The measurement value information management unit 8 stores the measurement data collected by the measurement data collection unit 2 that collects measurement data measured at a plurality of bases 20 in the measurement value information 15, extracts the measurement data, and outputs the result. return.

  The virtual measurement point information management unit 9 receives a request for reference, addition, update, or deletion of the virtual measurement point information 16 and receives a request from the virtual measurement point information input / output unit 3 that outputs the result. Extraction and addition, update, and deletion of virtual measurement point information 16 are performed, a virtual measurement point syntax tree is created from the definition of the virtual measurement point by syntax tree analysis, an operation is performed based on the virtual measurement point syntax tree, and the result is returned To do.

  The configuration information management unit 10 receives a request for reference, addition, update, or deletion of the configuration information 17, receives a request from the configuration information input / output unit 4 that outputs the result, and receives a notification from the configuration information access control unit 7. The information 17 is extracted and the configuration information is added, updated, and deleted, the configuration information node is expanded, the leaf node of the subtree having the configuration information node as the root node is extracted, and the result is returned.

  The user information management unit 11 receives a request for reference, addition, update, or deletion of the user information 18 and receives a request from the user information input / output unit 5 that outputs the result, and extracts the user information 18 or adds the user information 18. Update, delete, and return the result.

  The access control information management unit 12 receives a request for reference, addition, update, or deletion of the access control information 19 and receives a request from the access control information input / output unit 6 that returns the result. The information 19 is added, updated, or deleted, and the result is returned.

  The access control unit 13 performs access control on the configuration information 17 from the configuration information 17 and the user information 18.

  Next, a data structure used in this embodiment will be described.

FIG. 5 shows the relationship between the configuration information trees 501, 502, virtual measurement point information 507, and measurement value information 509.
The configuration information has a plurality of configuration information trees such as configuration information trees 501 and 502.
The configuration information tree is a tree structure composed of nodes called configuration information nodes.
The configuration information node includes a normal node 503 having a parent node and a child node, a root node 504 having no parent node, and a leaf node 505 having no child node.
Each configuration information node (normal node 503, root node 504, leaf node 505) is associated with one virtual measurement point 508 of the virtual measurement point information 507.
A plurality of configuration information nodes such as configuration information nodes 505 and 506 may point to one virtual measurement point 508.
The configuration information node is associated with zero or more virtual measurement points 508 of the virtual measurement point information 507 and zero or more actual measurement points of the measurement value information 509 by the virtual measurement point definition (FIG. 10).

FIG. 6 shows an example of the configuration information 17.
In FIG. 6, there are two configuration information trees.
The configuration information tree shown in FIG. 6 is a specific example of the configuration information trees 501 and 502 in FIG.
A configuration information tree having the configuration information node 601 as a root node indicates the arrangement of areas and devices in the building.
The configuration information node 601 indicates a virtual measurement point indicating the power consumption of the entire building, and its child node 602 indicates a virtual measurement point indicating the power consumption of the building 1F and the node 603 indicates the power consumption of the building 2F.
1F and 2F are divided into north and south floors, and virtual measurement points indicating illumination and power consumption of the PC exist on each floor.
A configuration information tree having the configuration information node 610 as a root node indicates the type of device.
The configuration information node 610 indicates a virtual measurement point indicating the power consumption of the entire device, and its child node indicates a virtual measurement point indicating the power consumption of the illumination 611 and the PC 612.
Each of the illumination 611 and the PC 612 has four child nodes indicating virtual measurement points.
The configuration information node 606 of the arrangement information configuration tree (upper part of FIG. 6) and the configuration information node 613 of the device information configuration tree (lower part of FIG. 6) point to the same virtual measurement point.
In addition, (1)-(5), (8)-(11), (101), and (102) of FIG. 6 have shown virtual measurement point ID shown in FIG.

FIG. 7 is a diagram illustrating an example of a storage format of the configuration information 17.
The configuration information 17 is stored in the data storage area 14.
The configuration information 17 includes a configuration information ID 701, a parent ID 702, a group ID 703, a level 704, a virtual measurement point ID 705, and a configuration information node name 706.
The configuration information ID 701 is an identifier for uniquely identifying the configuration information node.
The configuration information ID 701 needs to be assigned so as not to overlap.
The parent ID 702 indicates the configuration information ID 701 of the parent node of the tree structure, and is blank when the parent ID 702 does not exist.
The group ID 703 sets to which configuration information tree the configuration information node belongs.
Level 704 records what depth the configuration information node is from the root node of the configuration information tree.
The virtual measurement point ID 705 is an identifier of the virtual measurement point indicated by the configuration information node.
The configuration information node name 706 records the name of the configuration information node.

FIG. 8 is a diagram illustrating an example of a storage format of the group structure.
The group is stored in the data storage area 14.
The group ID 801 is an identifier for uniquely identifying a group.
The group ID 801 needs to be assigned so as not to overlap.
The group name 802 records the name of the group.

FIG. 9 is a diagram illustrating an example of a storage format of the level structure.
The level is stored in the data storage area 14.
The group ID 901 is an identifier of the target configuration information tree.
Only the group ID 901 that can be specified as the group ID 801 of the group can be specified.
A level 902 indicates the depth of the configuration information tree indicated by the group ID 901.
The level name 903 stores the name of the level indicated by the group ID 901 and the level 902.

FIG. 10 is a diagram illustrating an example of a storage format of the structure of the virtual measurement point information 16.
The virtual measurement point information 16 is information stored in the data storage area 14.
The virtual measurement point information 16 includes a virtual measurement point ID 1001 and a virtual measurement point definition 1002.
The virtual measurement point ID 1001 is a unique identifier assigned to each virtual measurement point.
The virtual measurement point ID 1001 needs to be assigned so as not to overlap.
The virtual measurement point definition 1002 indicates a definition formula composed of an actual measurement point, a virtual measurement point, a numerical value, and an operator.
For example, “# 1” indicates the actual measurement point ID of the measurement value information.
The virtual measurement point indicates, for example, “$ 1” and the virtual measurement point ID of the virtual measurement point information.
The numerical value indicates a value such as “0.5”, and the operators are “+”, “−”, “×”, “÷”, and describes an actual measurement point, a virtual measurement point, and an operation between the numerical values.
The virtual measurement point definition 1002 needs to include one or more actual measurement points.
Further, it is assumed that the virtual measurement point definition 1002 has been confirmed by the virtual measurement point information input / output unit 3 to be calculated at the time of registration.
The operator may be any operator as long as all the calculation results of data types that can be described in the data type 1206 of the measurement value information 15 are defined.
In the calculation of the actual measurement point and the actual measurement point, the measurement values having the same or close occurrence times are calculated.
For the calculation when the measurement cycles are different, the actual measurement points with a short cycle are thinned out to match the actual measurement points with a long cycle.
Any method may be used for selecting measurement points having similar generation times and calculating measurement points having different periods.
For example, there is a method of interpolating the measurement values at measurement points with a long cycle and matching them to actual measurement points with a short cycle.
The calculation of the virtual measurement point is performed after the virtual measurement point syntax tree is created by expanding until the calculation of the actual measurement point.

In this way, the virtual measurement point definition 1002 shows a procedure for generating numerical data corresponding to each virtual measurement point.
For example, the virtual measurement point definition 1002 of the virtual measurement point with the virtual measurement point ID: 4 is “$ 8 + $ 9”, and the virtual measurement point definition 1002 with the virtual measurement point ID: 8 and the virtual measurement point ID: 9 is used. The virtual measurement point definition 1002 of the virtual measurement point with the virtual measurement point ID: 4 is dependent on the virtual measurement point definition 1002 with the virtual measurement point ID: 8 and the virtual measurement point ID: 9.
For example, the virtual measurement point definition 1002 of the virtual measurement point with the virtual measurement point ID: 5 is “$ 2 + $ 4”, and the virtual measurement point definition 1002 of the virtual measurement point with the virtual measurement point ID: 4 is As described above, it depends on the virtual measurement point definition 1002 of the virtual measurement point ID: 8 and the virtual measurement point ID: 9.
Thus, the virtual measurement point definition 1002 of a certain virtual measurement point (ID: 5) depends on the virtual measurement point definition 1002 of another virtual measurement point (ID: 4), and the other virtual measurement point (ID: 4). The virtual measurement point definition 1002 is dependent on the virtual measurement point definition 1002 of another virtual measurement point (ID: 8, 9), and the dependency relationship of the virtual measurement point definition 1002 is chained. There is a case.
When there is such a dependency relationship chain of the virtual measurement point definition 1002, as will be described later, the configuration information access control unit 7 sets the virtual measurement point (for example, ID: 8, 9) located at the end of the chain. The virtual measurement point definition 1002 of each virtual measurement point is traced in order from the virtual measurement point definition 1002, and the numerical value of the virtual measurement point (for example, ID: 5) for which a reference request is made is obtained.
Even when the virtual measurement point definition 1002 of the virtual measurement point for which the reference requesting user does not have the reference authority is included in the chain, the configuration information access control unit 7 has the reference requesting user having the reference authority. A virtual measurement point definition 1002 of no virtual measurement points can be executed.

FIG. 11 shows an example of a virtual measurement point syntax tree.
FIG. 11 is a virtual measurement point syntax tree of the definition of the virtual measurement point whose virtual measurement point ID is 5 in the structure of FIG.
The virtual measurement point syntax tree is a binary tree in which leaf nodes are actual measurement points or numerical values, and other nodes are operators.
When an operator can take parameters of three or more terms, it is not necessarily a binary tree.
The operation result of the virtual measurement point syntax tree is an operation measurement value composed of (occurrence time, measurement value, data type).
In the calculation of the actual measurement point and the numerical value, all the measurement value information of the actual measurement point is calculated with the numerical value, and the calculation result becomes the calculated measurement value.
Numerical values and numerical operations are the same as ordinary arithmetic operations, and the operation results are numerical values.
The calculation method is an example, and any calculation may be performed as long as the calculation result is a calculation measurement value.

FIG. 12 is a diagram illustrating an example of a storage format of the structure of the measurement value information 15.
The measurement value information 15 is information stored in the data storage area 14.
The measurement value information 15 includes a line number 1201, an actual measurement point ID 1202, an occurrence time 1203, a collection time 1204, a measurement value 1205, and a data type 1206.
The row number 1201 is a value that increases by 1 every time the measurement value 1205 is added, and is a serial number for data management, and is not necessarily required if the addition order can be held by another method.
The actual measurement point ID 1202 is a unique identifier assigned to each measurement device.
The actual measurement point ID 1202 needs to be assigned so as not to overlap.
The occurrence time 1203 indicates the time when the measurement value 1205 is measured by the measuring device.
The collection time 1204 is the time when the measurement value 1205 is added to the measurement value information 15, and is not essential information as long as the occurrence time 1203 is recorded.
The measured value 1205 records a value measured by the measuring device.
The data type 1206 indicates whether the measured value 1205 is a numerical value, 1-bit information such as ON / OFF, or a character string.
As for the data type, any data type may be used as long as an operation between the data types can be defined.
The structure of the measurement value information 23 for each base is the same as the structure of the measurement value information 15.

FIG. 13 is a diagram illustrating an example of a storage format of the structure of the user information 18.
User information 18 is stored in the data storage area.
The user information 18 includes a user ID 1301, a user name 1302, and authentication information 1303.
The user ID 1301 is a unique identifier assigned to each user.
The user ID 1301 needs to be assigned so as not to overlap.
The user name 1302 records the name of the user.
The authentication information 1303 stores identification information such as a password for using the user ID.
As for the authentication method, any method other than those described above may be used.

FIG. 14 is a diagram showing an example of the storage format of the structure of the access control information 19.
Access control information 19 is stored in the data storage area 14.
The access control information 19 includes a user ID 1401, a configuration information ID 1402, a configuration information reference right 1403, and a virtual measurement point reference right 1404.
The configuration information reference right 1403 and the virtual measurement point reference right 1404 are set as “◯” when the user ID 1401 permits the access right to the configuration information ID 1402 and “X” when not permitted.
The codes set in the configuration information reference right 1403 and the virtual measurement point reference right 1404 may be any codes as long as the presence or absence of the access right can be distinguished.
The configuration information reference right 1403 is a right that allows the application program 24 (user) to refer to the existence of the node.
That is, the configuration information reference right 1403 indicates whether or not the user can refer to node name information.
On the other hand, the virtual measurement point reference right 1404 indicates whether or not the application program 24 (user) can refer to the numerical value (actual measurement value or calculated measurement value) of the virtual measurement point ID indicated by the configuration information node.
As shown in FIG. 14, when the configuration information reference right 1403 is “◯”, the virtual measurement point reference right 1404 is either “◯” or “×”.
On the other hand, when the configuration information reference right 1403 is “x”, the virtual measurement point reference right 1404 is always “x”.

  Hereinafter, based on the flowchart shown in FIG. 15, the acquisition of the measurement value information 15 using the selection condition for the configuration information 17 of the measurement data management device 1 will be described.

It is assumed that the configuration information ID 701, the group ID 703, and the level 704 of the configuration information 17 can be specified as selection conditions for the configuration information 17.
As the selection condition, for example, “configuration information ID is equal to 101”, “group ID is 2 or less”, “configuration information ID is equal to 1 and level is equal to 2”, or the like is designated.
The selection condition is included in the reference request.
The reference request also includes the user ID of the requesting user.
The reference request may be input to the virtual measurement point information input / output unit 3 from the user who uses the measurement data management apparatus 1 via the application program 24 in the measurement data management apparatus 1, or the operation terminal 27 (FIG. 2). ) May be input to the virtual measurement point information input / output unit 3 via the application program 24 in the operation terminal 27.
The virtual measurement point information input / output unit 3 outputs the selection condition and user ID included in the reference request to the configuration information management unit 10.

In step S101, the configuration information management unit 10 receives a selection condition and a user ID.
In step S102, the configuration information management unit 10 searches the configuration information 17 using the selection condition received in step S101, and acquires a configuration information node set including one or more corresponding configuration information nodes.

In step S103, the user ID for which the access control unit 13 requested an operation to each configuration information node from the configuration information node set and the access control information 19 is the configuration information reference right and the virtual measurement point reference right is “◯”. And only the corresponding configuration information node is extracted.
As described above, when the virtual measurement point reference right 1404 is “O”, the configuration information reference right 1403 is also “O”, so the access control unit 13 determines whether the virtual measurement point reference right 1404 is “O”. The configuration information node may be extracted by paying attention only.
Note that the configuration information node (that is, the virtual measurement point) extracted by the access control unit 13 in step S103 corresponds to an example of the processing target item.

  In step S104, a determination is made to abort the operation when the configuration information node extracted in step S103 does not exist.

In step S105, the configuration information management unit 10 executes a process of expanding the leaf node of each configuration information node.
Details of the processing will be described later based on the flowchart of FIG.

In step S106, the virtual measurement point information management unit 9 receives the virtual measurement points referred to by the leaf nodes of the configuration information node set, analyzes the definition of each virtual measurement point, and generates a virtual measurement point syntax tree for each.
Details of the processing will be described later based on the flowchart of FIG.

In step S107, the virtual measurement point information management unit 9 receives a set of virtual measurement point syntax trees and performs an operation by tracing each virtual measurement point syntax tree.
Details of the processing will be described later based on the flowchart of FIG.

  In step S108, the virtual measurement point information management unit 9 adds the calculation results obtained in step S107 for each configuration information node, and returns the calculation measurement value.

  Thereafter, the virtual measurement point information input / output unit 3 acquires the calculated measurement value from the virtual measurement point information management unit 9, and sends the acquired calculated measurement value to the requesting user (reference requesting user) via the application program 24. Present.

  Hereinafter, based on the flowchart shown in FIG. 16, the process of expanding the configuration information node in S105 of FIG. 15 into leaf nodes will be described.

In step S201, the configuration information management unit 10 checks whether a child node of the configuration information node exists.
If there is a child node, the configuration information management unit 10 proceeds to step S202. If there is no child node, the configuration information management unit 10 determines that the child node is a leaf node, and returns the leaf node in step S205.
In step S202, the configuration information management unit 10 acquires all child nodes of the configuration information node.
In step S <b> 203, the configuration information management unit 10 recursively executes a process of expanding the leaf node to the child node acquired in step S <b> 202.
In step S204, the leaf node list obtained in step S203 is returned.

  Hereinafter, based on the flowchart shown in FIG. 17, the process of creating a virtual measurement point syntax tree from the leaf node in S106 of FIG. 15 will be described.

In step S301, the virtual measurement point information management unit 9 refers to the virtual measurement point information 16 and acquires a virtual measurement point definition 1002.
In step S302, the virtual measurement point information management unit 9 interprets the constituent elements of the virtual measurement point definition 1002 as an actual measurement point ID, a virtual measurement point ID, a numerical value, and an operator.
The interpretation procedure will be described by taking the virtual measurement point ID “5” stored in the virtual measurement point information of FIG. 10 as an example. The virtual measurement point definition of the virtual measurement point ID “5” is “$ 2- $ 4”.
In this case, “$ 2” is interpreted as a virtual measurement point ID “2”, “−” is interpreted as “−” indicating subtraction of an operator, and “$ 4” is interpreted as a virtual measurement point ID “4”.

In step S303, the virtual measurement point information management unit 9 creates a virtual measurement point syntax tree based on the interpretation result in step S302.
FIG. 11 is an example of a virtual measurement point syntax tree.
A procedure for creating a virtual measurement point syntax tree will be described taking the virtual measurement point ID “5” stored in the virtual measurement point information of FIG. 10 as an example.
First, a tree structure having the operator “−” as a root node and “$ 2” and “$ 4” as child nodes is created.
Since “$ 2” is the virtual measurement point ID, the virtual measurement point definition “# 2” of the virtual measurement point ID “2” of the virtual measurement point information in FIG. 10 is acquired, and “$ 2” is set to “# 2”. And replace.
Similarly, since “$ 4” is the virtual measurement point ID, the virtual measurement point definition “$ 8 + $ 9” of the virtual measurement point ID “4” of the virtual measurement point information in FIG. 10 is acquired.
The virtual measurement point definitions of “$ 8” and “$ 9” are “# 5” and “# 6”, respectively.
A tree structure having these as “+” child nodes is created and replaced with “$ 4” to create a virtual measurement point syntax tree shown in FIG.

In step S304, the virtual measurement point information management unit 9 proceeds to step S305 when one or more virtual measurement points exist, and proceeds to step S307 when there is no virtual measurement point.
In step S305, the virtual measurement point information management unit 9 executes a process of recursively calling the virtual measurement point information management unit 9 for each virtual measurement point.
In step S306, the virtual measurement point information management unit 9 performs a merging process for replacing the virtual measurement point syntax tree returned in step S305 with the virtual measurement point syntax tree.
In step S307, the virtual measurement point syntax tree is returned.

  Hereinafter, based on the flowchart shown in FIG. 18, a process of calculating by tracing the virtual measurement point syntax tree in S <b> 107 of FIG. 15 will be described.

  In step S401, when the root node of the virtual measurement point syntax tree is a measurement value or a calculation measurement value, the process proceeds to S404. Otherwise, the operator search in S402 is performed.

In step S402, the virtual measurement point information management unit 9 traces the virtual measurement point syntax tree from the left child by depth-first search, and acquires the operator at the deepest position.
In step S403, the virtual measurement point information management unit 9 acquires a child node of the operator acquired in step S402, and replaces the operator node with the result of the calculation.
In step S404, the virtual measurement point information management unit 9 returns the measurement value or the calculated measurement value in the root node.

The operation of the present embodiment will be described using the configuration information in FIGS. 6 and 7, the user information in FIG. 13, the access control information in FIG. 14, and the virtual measurement point information in FIG.
Here, for convenience of explanation, the virtual measurement point information of FIG. 25 is used.
In the virtual measurement point information of FIG. 25, the virtual measurement point definition 1002 of the virtual measurement point ID: 5 is set to “$ 10 + $ 11”.
The virtual measurement point definition 1002 with the virtual measurement point ID: 10 is “# 7”, and the virtual measurement point definition 1002 with the virtual measurement point ID: 11 is “# 8”.

  First, with reference to FIGS. 6, 7, 13, 14, and 25, the preconditions of the user's access right, each area, and the dependency relationship of the virtual measurement point definition 1002 of each device will be described.

Suppose company A is in the north floor of the first floor of the building.
The employee of company A has the user ID “101” (FIG. 13).
In the configuration information tree having the configuration information node 601 in FIG. 6 as a root node, “Lighting_1” 606 (configuration information ID: 8), “PC_1” 607 (configuration information ID: 9), ”604 (configuration information ID: 4) and“ South floor ”605 (configuration information ID: 5), which is a shared space, have employees of company A have the configuration information reference right and the virtual measurement point reference right“ ◯ ”. (FIG. 14).
As shown in FIG. 25, the virtual measurement point definition 1002 of “South Floor” 605 (virtual measurement point ID: 5) is “$ 10 + $ 11”, and the calculated measurement value of “South Floor” 605 is “ It is obtained by adding the actual measurement values of “illumination_2” 608 (virtual measurement point ID: 10) and “PC_2” 609 (virtual measurement point ID: 11) which are child nodes of the “south floor” 605.
“Lighting_2” 608 (configuration information ID: 10) and “PC_2” 609 (configuration information ID: 11), which are child nodes of “South Floor” 605, are outside the jurisdiction of Company A. The configuration information reference right and the virtual measurement point reference right are set to “x” (FIG. 14).

  Here, an example will be described in which employees of Company A totalize the power consumption of “North Floor” 604 and “South Floor” 605 on the first floor.

First, an employee of Company A transmits a reference request to the virtual measurement point information input / output unit 3 of the measurement data management device 1 using the operation terminal 27, for example.
This reference request is, for example, an inquiry for determining the power consumption of each floor on the first floor in the last month.

The virtual measurement point information input / output unit 3 passes the selection condition to the configuration information access control unit 7 and requests to extract only those accessible by the employee of the company A from the configuration information nodes that match the selection condition. .
The configuration information access control unit 7 selects “north floor” 604 and “south floor” 605 on the first floor as configuration information nodes that match the selection conditions in the configuration information management unit 10, and an employee of company A accesses the access control unit 13. Both are selected as possible configuration information nodes.

Next, the configuration information management unit 10 expands the selected configuration information node to the leaf node.
As described above, the employee of Company A has the configuration information reference right and the virtual measurement point reference right for “lighting_1” 605 and “PC_1” 606 which are child nodes of “north floor” 604, but “south floor” ”Has no configuration information reference right or virtual measurement point reference right for“ lighting_2 ”608 and“ PC_2 ”609 which are child nodes of“ 605 ”.
Since the access judgment in the access control unit 13 is only for the configuration information node, the inquiry of the employee of the company A is also expanded to the child node of the south floor 605 in the configuration information management unit 10.
The virtual measurement point information management unit 9 can be operated regardless of the access right of the configuration information node.
The selection result is obtained by adding the measurement values of “lighting_1” 605 and “PC_1” 606 as the calculation measurement values of “north floor” 604 for each occurrence time, and “lighting” as the calculation measurement value of “south floor” 605. _2 ”608 and“ PC_2 ”609 are added together for each occurrence time.

The employee of company A can request arbitrary aggregation for the selection result.
The employees of company A can see the measured values or the calculated measured values of “north floor” 604 and “south floor” 605 obtained by the virtual measuring point information management unit 9, so that the company A can perform the calculation in the middle. Can calculate using “illumination_2” 608 and “PC_2” 609 for which no employee has the right to refer to virtual measurement points.

That is, the virtual measurement point definition 1002 of the “south floor” 605 where the employee of the company A has a virtual measurement point reference right is changed to “lighting_2” 608 and “PC_2” 609 where the employee of the company A does not have the virtual measurement point reference right. The configuration information access control unit 7 executes the virtual measurement point definition 1002 of “illumination_2” 608 and “PC_2” 609 even if it depends on the virtual measurement point definition 1002. The virtual measurement point definition 1002 of “605” is executed, and the calculated measurement value of “South floor” 605 is derived.
Then, the virtual measurement point information input / output unit 3 presents the calculated measurement value of the “south floor” 605 to which the employee of the company A has a virtual measurement point reference right to the employee of the company A. The measurement value of “PC — 2” 609 is not presented to the employees of company A.
The virtual measurement point information input / output unit 3 presents the calculation measurement value of the “north floor” 604 and the calculation measurement value of the “south floor” 605 to the employee of the company A. As shown in FIG. 6, the nodes of “North Floor” 604, “Lighting_1” 605, and “PC_1” 606 may be displayed hierarchically.

As described above, in this embodiment, the configuration information reference right and the virtual measurement point reference right are set for the configuration information including the real measurement points and the virtual measurement points.
For this reason, even if a virtual measurement point that is not permitted access rights that cannot be referred to by record-based access control is included in the calculation target, the calculation result of the virtual measurement point for which the virtual measurement point reference right is set is referenced. Fine-grained virtual measurement point access control such as permission can be realized.

In this embodiment,
Means for extracting a configuration information node by a configuration information management unit using a selection condition based on elements of the configuration information from the configuration information;
Measurement value information for storing data of actual measurement equipment, virtual measurement point information for storing virtual measurement values obtained by calculation of measurement value information, configuration information for storing relationships between virtual measurement points, and configuration information The access control unit uses the access control information to access the configuration information node based on the access control information that stores the access right to the virtual measurement point and the access control unit that performs access control of the configuration information using the access control information. Means for determining
The measurement data management apparatus provided with a means for the virtual measurement point management unit to perform the calculation defined in the virtual measurement point information has been described.

In the present embodiment,
The measurement data management apparatus provided with means for the access control unit to determine the access right to the configuration information node using the configuration information reference right that permits reference to the configuration information has been described.

In the present embodiment,
The measurement data management apparatus provided with means for the access control unit to determine the access right to the configuration information node using the virtual measurement point reference right that permits the reference of the virtual measurement point associated with the configuration information has been described.

In the present embodiment,
The measurement data management apparatus provided with means for the access control unit to determine the access right to the configuration information node using the combination of the configuration information reference right and the virtual measurement point reference right has been described.

In the present embodiment,
In a measurement data management method in which a measurement data management device having an arithmetic device, an external storage device, and a main storage device performs access control to configuration information including virtual measurement points,
The measurement data management device accepting a selection condition comprising a combination of elements of configuration information;
The measurement data management apparatus acquires a corresponding configuration information node set using a selection condition;
The measurement data management device performing an access right determination that configuration information can be referred to each configuration information node of the configuration information node set and that a virtual measurement point definition can be referred to;
The measurement data management device acquires a leaf node of a configuration information node that has passed the access right determination;
The measurement data management device analyzing a virtual measurement point definition referred to by the acquired configuration information node;
The measurement data management device calculates based on the analysis result;
A measurement data management method has been described in which the measurement data management device includes a step of processing a calculation result to obtain a calculation measurement value.

In the present embodiment,
Receiving a selection condition comprising a combination of elements of configuration information;
Obtaining a corresponding set of configuration information nodes using a selection condition;
A step of determining access rights to the elements of the configuration information node set;
Obtaining a leaf node of the configuration information node that has passed the access right determination;
Analyzing a virtual measurement point definition referred to by the acquired configuration information node;
A step of calculating based on the analysis result;
A program has been described which includes a step of processing a calculation result to obtain a calculation measurement value, and when the computer executes, the computer functions as a measurement data management device.

Embodiment 2. FIG.
In the second embodiment, a logical operation right is introduced in addition to the configuration information reference right and virtual measurement point reference right, and a subset of the configuration information such as “total power consumption of devices belonging to the floor and lighting of Company A” is obtained. Realize access control for desired operations.
A subset of configuration information is specified by an extended selection condition based on a combination of a selection condition and a logical operation.

FIG. 19 is a configuration diagram of the measurement data management device 1 according to the second embodiment.
19 adds a configuration information logic operation unit 28 that performs a logical operation between configuration information nodes in addition to FIG.

FIG. 20 is a diagram showing an example of a storage format of the access control information 19 according to the present embodiment.
Access control information 19 is stored in the data storage area 14.
The access control information 19 includes a user ID 1401, a configuration information ID 1402, a configuration information reference right 1403, a virtual measurement point reference right 1404, and a logical operation right 1405.
The configuration information reference right 1403, the virtual measurement point reference right 1404, and the logical operation right 1405 are set as “◯” when the user ID 1401 permits the access right to the configuration information ID 1402, and “X” when not permitted.
The codes set in the configuration information reference right 1403, the virtual measurement point reference right 1404, and the logical operation right 1405 may be any codes as long as the presence or absence of the access right can be distinguished.
The configuration information reference right 1403 is a right that allows the application program 24 (user) to refer to the existence of a node, as in the first embodiment.
The virtual measurement point reference right 1404 is a right that allows the application program 24 (user) to refer to the numerical value of the virtual measurement point ID indicated by the configuration information node, as in the first embodiment.
The logical operation right 1405 is a right to permit a logical operation for obtaining a product set and union of virtual measurement points referred to by leaf nodes of the configuration information node.
In other words, the logical operation right 1405 executes the logical operation of the virtual measurement point definition 1002 (FIG. 10) of the virtual measurement point indicated by the configuration information ID 1402 and the virtual measurement point definition 1002 (FIG. 10) of the other virtual measurement point. The presence or absence of authority is indicated for each user.

FIG. 21 is an example of a logical operation analysis tree for interpreting the extended selection condition.
The logical operation analysis tree is composed of a binary tree having a selection condition as a child node of the logical operation, for example.
By providing a logical operation as a child node of the logical operation, a plurality of logical operations can be handled.
In the present embodiment, the reference request from the user includes a plurality of selection conditions and includes logical operators (AND, OR, etc.) for the plurality of operation conditions.
The logical operator “AND” shown in the root node of FIG. 21 is a logical operator included in the reference request, and “selection condition (1)” and “selection condition (2)” as child nodes are also included in the reference request. The selection conditions included.
A plurality of selection conditions and logical operators included in the reference request are collectively referred to as an extended selection condition.

  Hereinafter, based on the flowchart shown in FIG. 22, the acquisition of the measurement value information 15 accompanied by the logical operation using the extended selection condition for the configuration information 17 of the measurement data management apparatus 1 will be described.

In step S <b> 501, the configuration information management unit 10 receives an extended selection condition from the virtual measurement point information input / output unit 3.
In step S502, the configuration information management unit 10 analyzes the extended selection condition to generate a logical operation analysis tree (FIG. 21).
In step S503, the configuration information logic operation unit 28 acquires a configuration information node set from the logic operation analysis tree.
Details of the processing will be described later based on the flowchart shown in FIG.

In step S504, it is determined whether the configuration information node set has been returned. If it has been returned, the process proceeds to step S505, and if it has not been returned, the process proceeds to step S508.
In step S505, a virtual measurement point definition tree is created by referring to the virtual measurement point definition for each configuration information node.
In step S506, the virtual measurement point information management unit 9 calculates a virtual measurement point using the virtual measurement point syntax tree.
In step S507, the calculated measurement values are added for each combination of the configuration information nodes obtained in step S504, and the calculated measurement values are returned.
Note that step S505 is equivalent to steps S105 and S106 of FIG. 15, step S506 is equivalent to step S107, and step S507 is equivalent to step S108.

  Hereinafter, based on the flowchart shown in FIG. 23, processing for acquiring a configuration information node set from the logical operation analysis tree in S503 of FIG. 22 will be described.

In step S601, the configuration information logical operation unit 28 determines whether the root node of the logical operation analysis tree is a selection condition or a configuration information node set, and if it is neither the selection condition nor the configuration information node set (in the case of a logical operator). If it is a selection condition or a configuration information node set, the process advances to S610 to the logical operation execution process of S602.
In step S602, the configuration information logical operation unit 28 follows the logical operation analysis tree from the left, and acquires the logical operation node at the deepest position.
In step S603, the configuration information logical operation unit 28 extracts a selection condition or a configuration information node set that is a target of the logical operation.
In step S604, the configuration information logical operation unit 28 extracts a configuration information node set in consideration of the logical operation right for the left logical operation target.
Details of the processing will be described later based on the flowchart shown in FIG.
In step S605, a configuration information node set taking into account the logical operation right is similarly extracted from the right logical operation target.
Details of the processing will be described later based on the flowchart shown in FIG.
In step S <b> 606, the configuration information logic operation unit 28 selects only the combinations in which “O” is set for one or both of the virtual measurement point reference rights from the combinations of the left and right configuration information node sets. .
If “○” is set as the virtual measurement point reference right on both the left and right, the union can also be handled.

In step S607, if the combination obtained in step S606 exists, the process proceeds to step S608, and if not, the process is terminated without returning the configuration information node set as not applicable.
In step S608, the configuration information logic operation unit 28 removes duplicates from the corresponding combinations.
In step S609, the configuration information logical operation unit 28 replaces the logical operation that is the operation target with the extracted configuration information node set, and updates the logical operation analysis tree.
This configuration information node set is treated as having “O” set in the configuration information reference right, virtual measurement point reference right, and logical operation right.
In step S610, if the root node of the analysis tree is a selection condition, the process proceeds to step S611, and if not, the process proceeds to step S612.
In step S611, the configuration information logic operation unit 28 extracts a configuration information node set from the selection condition.
In step S612, the configuration information logic operation unit 28 returns the configuration information node set.

  Hereinafter, based on the flowchart shown in FIG. 24, the process of extracting the configuration information node set in consideration of the logical operation right from the selection conditions or the configuration information node set in S604 and S605 of FIG. 22 will be described.

In step S701, the configuration information logic operation unit 28 checks whether the extraction target is a selection condition. If the selection target is the selection condition, the process proceeds to step S702. If not, the process proceeds to step S706.
In step S702, the configuration information logic operation unit 28 extracts configuration information nodes using the selection condition.
In step S703, the configuration information logic operation unit 28 selects only the configuration information nodes having the configuration information reference right and the logic operation right from the extracted configuration information nodes.
In step S704, if there is at least one configuration information node extracted in step S703, the process proceeds to step S705. Otherwise, the process ends without returning the configuration information node set.
In step S705, the configuration information management unit 10 expands the leaf nodes of the configuration information node according to the flowchart shown in FIG.
In step S706, the configuration information node set is returned.

  The operation of the present embodiment will be described using the configuration information in FIGS. 6 and 7, the user information in FIG. 13, the access control information in FIG. 20, and the virtual measurement point information in FIG.

The employee of Company A is assumed that “O” is set as the logical operation right for the configuration information node having the configuration information reference right and the virtual measurement point reference right in the configuration information tree having the configuration information node 601 as the root node. (FIG. 20).
Further, in the configuration information tree having the configuration information node 608 as a root node, reference is made only to “device” 610 (configuration information ID: 101), “lighting” 611 (configuration information ID: 102), and “PC” 612. Assume that “O” is set for the right and the logical operation right (FIG. 20).
At this time, the employee of Company A is set to be unable to obtain the power consumption occupied by the lighting of the entire building with reference to “lighting” 611.
On the other hand, as described above, for the “North Floor” 604 (configuration information ID: 4) and the shared “South Floor” 605 (configuration information ID: 5) in which Company A resides, The configuration information reference right, virtual measurement point reference right, and logical operation right are set to “◯”.
In addition, for the employee of company A, the configuration information reference right and logical operation right of “lighting” 611 are set to “◯” (virtual measurement point reference right is “x”).
For this reason, the power consumption amount occupied by the “illumination” 611 in the “north floor” 604 and the “south floor” 605 can refer to a set of virtual measurement points referenced from the configuration information node of the illumination.
Since employees of company A can limit the configuration information node to a referenceable range, there is no problem even if the acquisition of a subset is permitted.

The configuration information access control unit 7 according to the present embodiment analyzes the extended selection conditions of the company A employee, and as a result, the company A employee has both the virtual measurement point reference right and the logical operation right “north floor” 604. (Configuration information ID: 4) and “South floor” 605 (Configuration information ID: 5) are extracted.
Furthermore, “illumination” 611 (configuration information ID: 102) for which an employee of company A has at least a logical operation right is extracted.
Then, based on the logical operator included in the extended selection condition, a logical operation is performed between the virtual measurement point definitions 1002 of each extracted virtual measurement point, and according to the new virtual measurement point definition obtained as a result of the logical operation. , The amount of power consumed by “lighting” 611 in each of “north floor” 604 and “south floor” 605 is calculated.
In the example of FIG. 25, the configuration information access control unit 7 performs an AND operation between “$ 8 + $ 9” of the virtual measurement point ID: 4 and “$ 8 + $ 10 +...” Of the virtual measurement point ID: 102. To derive “$ 8” as a new virtual measurement point definition.
Similarly, the configuration information access control unit 7 performs an AND operation between “$ 10 + $ 11” of the virtual measurement point ID: 5 and “$ 8 + $ 10 +...” Of the virtual measurement point ID: 102. Then, “$ 10” is derived as a new virtual measurement point definition.
Thereafter, as in the first embodiment, the configuration information access control unit 7 derives “# 5” from “$ 8” and derives “# 7” from “$ 10”.
Then, the actual measurement value of “# 5” as the power consumption amount occupied by the “lighting” 611 in the “north floor” 604 is used, and the actual measurement value “# 7” as the power consumption amount occupied by the “lighting” 611 in the “south floor” 605 is set. Returns the measured value.
In the present embodiment, as in the first embodiment, the virtual measurement point definition of the virtual measurement point for which the reference requesting user does not have the virtual measurement point reference right can be executed.
As in the first embodiment, the calculated measurement value or the actual measurement value of the virtual measurement point for which the reference request user does not have the virtual measurement point reference right is not presented to the reference request user.

As described above, in this embodiment, in addition to the configuration information reference right and the virtual measurement point reference right, the logical operation right is set for the configuration information including the real measurement point and the virtual measurement point.
As a result, it is possible to realize fine access control such that a configuration information node that does not have a virtual measurement point reference right and cannot be directly referenced is acquired as a subset with a configuration information node that has a virtual measurement point reference right.

In this embodiment,
Means for the configuration information logic unit to obtain a subset of the configuration information;
A measurement data management apparatus has been described that includes means for an access control unit to determine an access right for an operation using a logical operation right that permits an operation for obtaining a subset of configuration information.

In the present embodiment,
Means for determining an access right to the configuration information node by the access control unit using a combination of the configuration information reference right and the virtual measurement point reference right;
Means for the configuration information logic unit to obtain a subset of the configuration information;
A measurement data management apparatus has been described that includes means for an access control unit to determine an access right for an operation using a logical operation right that permits an operation for obtaining a subset of configuration information.

In the present embodiment,
A step in which the measurement data management device receives an extended selection condition that is a combination of a selection condition composed of a combination of elements of configuration information and a logical operation;
The measurement data management device analyzes the extended selection conditions and separates them into selection conditions and logical operations;
The measurement data management device acquires a corresponding configuration information node set using a selection condition;
The measurement data management device performs access right determination that the configuration information can be referred to the configuration information for each configuration information node of the configuration information node set and that the logical operation of the configuration information is possible;
The measurement data management device performs an access right determination that a virtual measurement point definition can be referred to a set of configuration information node sets subject to logical operation; and
The measurement data management device acquires a leaf node of the configuration information node that has passed the access right determination;
The measurement data management device performs a logical operation on the acquired leaf node set;
A step in which the measurement data management device analyzes a virtual measurement point definition referred to by the acquired configuration information node;
A step in which the measurement data management device calculates based on the analysis result;
The measurement data management device processes the calculation result to obtain a calculation measurement value;
The measurement data management method provided with was explained.

  In the first and second embodiments, the case where the reference authority for the measurement data such as the power consumption of the building is managed has been described as an example. However, the target numerical data is not limited to this.

  DESCRIPTION OF SYMBOLS 1 Measurement data management apparatus, 2 Measurement data collection part, 3 Virtual measurement point information input / output part, 4 Configuration information input / output part, 5 User information input / output part, 6 Access control information input / output part, 7 Configuration information access control part, 8 Measurement value information management unit, 9 Virtual measurement point information management unit, 10 Configuration information management unit, 11 User information management unit, 12 Access control information management unit, 13 Access control unit, 14 Data storage area, 15 Measurement value information, 16 Virtual measurement point information, 17 configuration information, 18 user information, 19 access control information, 20 bases, 21 measurement data transmission unit, 22 data storage area, 23 measurement value information, 24 application program, 25 measurement equipment, 26 measurement data reception unit 27 Operation terminal 28 Configuration information logic operation part.

Claims (12)

A numerical data generation procedure information storage unit that stores numerical data generation procedure information indicating a numerical data generation procedure that is a procedure for generating numerical data for each item, and a plurality of items is indicated.
A plurality of users are indicated, and for each user, an authority information storage unit that stores numerical data reference authority information that indicates whether or not numerical data reference authority exists for each item indicated in the numerical data generation procedure information;
A reference request input unit for inputting a numerical data reference request from any user;
Based on the numerical data reference authority information, the reference requesting user who made the reference request extracts an item having a reference authority for numerical data as a processing target item, and based on the numerical data generation procedure information, the extracted processing target item In accordance with a numerical data generation procedure, a numerical data generation unit that generates numerical data of the processing target item;
A data presentation unit that presents the numerical data of the processing target item generated by the numerical data generation unit to the reference request user;
The numerical data generation procedure information storage unit is
The numerical data generation procedure of any item stores numerical data generation procedure information that depends on the numerical data generation procedure of other items,
The numerical data generator is
Even if the reference requesting user does not have the authority to reference numeric data for the other item when the numeric data generation procedure of the extracted processing target item depends on the numeric data generation procedure of the other item , Generating the numerical data of the processing target item according to the numerical data generation procedure of the other item and the numerical data generation procedure of the processing target item,
The data presentation unit
In the process in which the numerical data generation unit generates numerical data of the item to be processed, when the reference requesting user uses a numerical data generation procedure of another item that is not authorized to reference numerical data, the other item An information processing apparatus that presents numerical data of the processing target item to the reference requesting user without presenting the numerical data. The numerical data generator is
If the numerical data generation procedure of the extracted processing target item depends on the numerical data generation procedure of the other item, execute the numerical data generation procedure of the other item, The information processing apparatus according to claim 1, wherein numerical data of the processing target item is generated according to a numerical data generation procedure of the processing target item using an execution result. The numerical data generator is
The numerical data generation procedure of the item to be processed depends on the numerical data generation procedure of another item, the numerical data generation procedure of the other item depends on the numerical data generation procedure of another other item, and the processing When the numerical data generation procedure of a plurality of other items is chained starting from the numerical data generation procedure of the target item, the reference requesting user has the authority to refer to the numerical data for the other items included in the chain. Even if not, generate numerical data of the processing target item according to the numerical data generation procedure of the other items included in the chain and the numerical data generation procedure of the processing target item,
The data presentation unit
In the process in which the numerical data generation unit generates numerical data of the item to be processed, when the reference requesting user uses numerical data generation procedures for a plurality of other items that are not authorized to reference numerical data, The information processing apparatus according to claim 1, wherein the numerical data of the processing target item is presented to the reference requesting user without presenting numerical data of other items. The numerical data generator is
When the numerical data generation procedure of a plurality of other items is chained starting from the numerical data generation procedure of the item to be processed, each item is traced sequentially from the numerical data generation procedure of the item located at the end of the chain. According to the numerical data generation procedure of the processing target item, using the execution result of the numerical data generation procedure of the other item on which the numerical data generation procedure of the processing target item directly depends The information processing apparatus according to claim 3, wherein numerical data of the processing target item is generated. The authority information storage unit
The plurality of users are indicated, and for each user, the presence or absence of reference authority for name information corresponding to the item stores name reference authority information indicated for each item indicated in the numerical data generation procedure information,
The numerical data generator is
The reference requesting user extracts items having both a reference authority for numerical data and a reference authority for name information as processing target items based on the numerical data reference authority information and the name reference authority information. Information processing apparatus in any one of 1-4. The numerical data generation procedure information storage unit is
Stores numerical data generation procedure information indicating the numerical data generation procedure for each item for a plurality of hierarchical items,
The data presentation unit
Presenting the numerical data of the processing target item,
The name information corresponding to the processing target item and the name information corresponding to other items for which the reference requesting user has a reference authority for the name information are presented in a hierarchical manner. Information processing device. The authority information storage unit
The plurality of users are indicated, and for each user, the logical operation authority information shown for each item shown in the numerical data generation procedure information is stored for the presence or absence of the logical operation execution authority of the numerical data generation procedure,
The reference request input unit
Enter a numeric data reference request that contains logical operators,
The numerical data generator is
Based on the numerical data reference authority information and the logical operation authority information, the reference requesting user who made the reference request has both the numerical data reference authority and the logical operation execution authority, and the reference requesting user at least logically The items having the authority to execute the operation are extracted, and the logical operation is performed between the numerical data generation procedures of each extracted item based on the logical operator included in the reference request, and the result of the logical operation is obtained. The information processing apparatus according to claim 1, wherein the numerical data is generated according to a new numerical data generation procedure. The numerical data generator is
When the new numerical data generation procedure depends on the numerical data generation procedure of any item, even if the reference requesting user does not have the authority to refer to the numerical data for the item, Generate numerical data according to the numerical data generation procedure and the new numerical data generation procedure,
The data presentation unit
In the process in which the numerical data generation unit generates numerical data in accordance with the new numerical data generation procedure, when the reference requesting user uses a numerical data generation procedure for an item for which the numerical data reference authority is not authorized, The information processing apparatus according to claim 7, wherein the numerical data generated by the numerical data generation unit is presented to the reference requesting user without presenting the numerical data. The numerical data generator is
The new numerical data generation procedure depends on the numerical data generation procedure of any item, the numerical data generation procedure of the item depends on the numerical data generation procedure of other items, and the new numerical data generation procedure If the numerical data generation procedure for multiple items is chained starting from, the item included in the chain even if the reference requesting user does not have the authority to refer to the numerical data for the item included in the chain Numerical data is generated in accordance with the numerical data generation procedure of and the new numerical data generation procedure,
The data presentation unit
In the process in which the numerical data generation unit generates numerical data in accordance with the new numerical data generation procedure, when the reference requesting user uses a numerical data generation procedure of a plurality of items for which the numerical data reference authority does not exist, The information processing apparatus according to claim 7 or 8, wherein the numerical data generated by the numerical data generation unit is presented to the reference requesting user without presenting numerical data of a plurality of items. The numerical data generation procedure information storage unit is
As the plurality of items, a plurality of virtual measurement points provided as units for managing energy consumption in a building are shown, and numerical data of energy consumption is generated for each virtual measurement point. Stores numerical data generation procedure information indicating the numerical data generation procedure,
The authority information storage unit
A plurality of users are indicated, and for each user, the presence or absence of reference authority for numerical data of energy consumption stores numerical data reference authority information indicated for each virtual measurement point indicated in the numerical data generation procedure information,
The numerical data generator is
Based on the numerical data reference authority information, a reference requesting user who made the reference request extracts a virtual measurement point having an authority to refer to numerical data of energy consumption as a processing target virtual measurement point, and the numerical data generation procedure information Based on the numerical data generation procedure of the processing target virtual measurement point extracted based on, the numerical data of the energy consumption of the processing target virtual measurement point is generated,
The data presentation unit
Presenting numerical data of energy consumption of the processing target virtual measurement point generated by the numerical data generation unit to the reference requesting user,
The numerical data generation procedure information storage unit is
The numerical data generation procedure of one of the virtual measurement points stores numerical data generation procedure information that depends on the numerical data generation procedure of the other virtual measurement points,
The numerical data generator is
When the numerical data generation procedure of the extracted processing target virtual measurement point depends on the numerical data generation procedure of another virtual measurement point, the reference requesting user sets the numerical value of energy consumption for the other virtual measurement point. Even if you do not have the data reference authority, the numerical data of the energy consumption of the processing target virtual measurement point according to the numerical data generation procedure of the other virtual measurement point and the numerical data generation procedure of the processing target virtual measurement point Produces
The data presentation unit
In the process in which the numerical data generation unit generates the numerical data of the energy consumption of the processing target virtual measurement point, the numerical data of the other virtual measurement points for which the reference requesting user is not authorized to reference the numerical data of the energy consumption When the generation procedure is used, the numerical data of the energy consumption of the processing target virtual measurement point is presented to the reference requesting user without presenting the numerical data of the energy consumption of the other virtual measurement point. The information processing apparatus according to claim 1, wherein the information processing apparatus is an information processing apparatus. A numerical data generation procedure information storage unit that stores numerical data generation procedure information indicating a numerical data generation procedure that is a procedure for generating numerical data for each item, and a plurality of items is indicated.
A plurality of users are indicated, and each user has an authority information storage unit that stores numerical data reference authority information that indicates whether or not numerical data reference authority exists for each item indicated in the numerical data generation procedure information. An information processing method performed by a computer,
A reference request input step in which the computer inputs a reference request for numerical data from any user;
Based on the numerical data reference authority information, the computer extracts, as a processing target item, an item for which the reference request user who made the reference request has numerical data reference authority, and extracted based on the numerical data generation procedure information In accordance with a numerical data generation procedure for the processing target item, a numerical data generation step for generating numerical data of the processing target item;
The computer has a data presentation step of presenting the numerical data of the processing target item generated by the numerical data generation step to the reference requesting user,
In the numerical data generation procedure information storage unit,
Numeric data generation procedure information is stored in which the numerical data generation procedure of any item depends on the numerical data generation procedure of other items,
In the numerical data generation step,
When the numeric data generation procedure of the extracted processing target item depends on the numeric data generation procedure of another item, the reference requesting user does not have the authority to reference numeric data for the other item However, the computer generates the numerical data of the processing target item according to the numerical data generation procedure of the other item and the numerical data generation procedure of the processing target item,
In the data presentation step,
In the process of generating the numerical data of the processing target item in the numerical data generation step, when the reference requesting user uses a numerical data generation procedure of another item for which the numerical data reference authority is not used, the computer, An information processing method comprising presenting numerical data of the processing target item to the reference requesting user without presenting numerical data of the other item. A numerical data generation procedure information storage unit that stores numerical data generation procedure information indicating a numerical data generation procedure that is a procedure for generating numerical data for each item, and a plurality of items is indicated.
A plurality of users are indicated, and each user has an authority information storage unit that stores numerical data reference authority information that indicates whether or not numerical data reference authority exists for each item indicated in the numerical data generation procedure information. On the computer,
A reference request input step in which the computer inputs a reference request for numerical data from any user;
Based on the numerical data reference authority information, the computer extracts, as a processing target item, an item for which the reference request user who made the reference request has numerical data reference authority, and extracted based on the numerical data generation procedure information In accordance with a numerical data generation procedure for the processing target item, a numerical data generation step for generating numerical data of the processing target item;
The computer performs a data presentation step of presenting the numerical data of the processing target item generated by the numerical data generation step to the reference requesting user,
In the numerical data generation procedure information storage unit,
Numeric data generation procedure information is stored in which the numerical data generation procedure of any item depends on the numerical data generation procedure of other items,
In the numerical data generation step,
When the numeric data generation procedure of the extracted processing target item depends on the numeric data generation procedure of another item, the reference requesting user does not have the authority to reference numeric data for the other item However, the computer causes the numerical data of the processing target item to be generated according to the numerical data generation procedure of the other item and the numerical data generation procedure of the processing target item,
In the data presentation step,
In the process of generating the numerical data of the processing target item in the numerical data generation step, when the numerical data generation procedure of the other item for which the reference requesting user does not have the authority to reference the numerical data is used, the computer, A program for causing the reference requesting user to present numerical data of the processing target item without presenting numerical data of the other items.

Images