JP2015069336A - Data loss prevention device and plant monitoring system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a data loss prevention device capable of preventing loss of plant data.SOLUTION: According to an embodiment, a data loss prevention device 2 is connected to a network 4 where plant data is transmitted from a plant control calculator to a data management device. The data loss prevention device includes a monitoring unit that monitors data flowing through the network and extracts plant data whose transmission source address indicates the plant control calculator and whose transmission destination address indicates a data management device; and a storage unit that stores the plant data extracted by the monitoring unit.

Description

  Embodiments described herein relate generally to a data loss prevention apparatus and a plant monitoring system.

  The operation data accumulated in the plant operation data management device is used to manage long-term trends and analyze plant performance, thereby verifying the power generation efficiency and soundness of the plant. Since the plant operation data management device is a device that does not directly contribute to the plant operation, the plant operation data management device is not duplexed and is configured by a single system. Conventionally, when a planned outage such as periodic inspection of plant operation data management device, aging update, etc., or sudden outage such as hardware failure, data storage processing software abnormality, etc., single system system There was a problem that defects occurred.

Japanese Patent Laid-Open No. 7-210243

  The problem to be solved by the present invention is to provide a data loss prevention device and a plant monitoring system capable of preventing loss of plant data.

  According to this embodiment, the data loss prevention apparatus is connected to a network through which plant data transmitted from the plant control computer to the data management apparatus is transmitted. The data loss prevention apparatus intercepts data flowing through the network, and from the intercepted data, an intercept unit that extracts the plant data in which the transmission source address indicates the plant control computer and the transmission destination address indicates the data management apparatus And a storage unit for storing the plant data taken out by the interception unit.

The schematic block diagram of the plant monitoring system which concerns on 1st Embodiment. The block block diagram of the data management apparatus by 1st Embodiment. The block block diagram of the data loss prevention apparatus by 1st Embodiment. The block block diagram of the data loss prevention apparatus by 2nd Embodiment. The block block diagram of the data loss prevention apparatus by the modification of 2nd Embodiment. The block block diagram of the data loss prevention apparatus by 3rd Embodiment. The block block diagram of the data loss prevention apparatus by 4th Embodiment.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  (First Embodiment) FIG. 1 shows a schematic configuration of a plant monitoring system according to a first embodiment. As shown in FIG. 1, the plant monitoring system includes a data management device 1 and a data loss prevention device 2, and is connected to a control computer 30 of the plant 3 via a network 4. As the network 4, a network in which a transmission packet reaches a plurality of connected computers such as a repeater HUB and a switching HUB with a monitoring function is used. Here, it is assumed that addresses A1, A2, and A3 are assigned in advance to the data management device 1, the data loss prevention device 2, and the control computer 30 in the network 4, respectively.

  The plant 3 is, for example, a power plant, and the control computer 30 monitors the output, rotation speed, steam pressure, steam temperature, and the like of the steam turbine, and acquires it as plant data. The control computer generates a packet including the plant data, sets the own station address (address A3) as the transmission source address, and transmits the address (address A1) of the data management device 1 as the transmission destination address.

  FIG. 2 shows a block configuration of the data management apparatus 1. As shown in FIG. 2, the data management device 1 includes a receiving unit 10, a recording unit 11, a storage unit 12, and an analysis unit 13. The receiving unit 10 receives a packet in which the address (address A1) of the local station is set as the transmission destination address among the packets flowing through the network 4. As a result, the data management device 1 can receive a packet from the control computer 30 including plant data.

  The recording unit 11 writes the plant data included in the packet transmitted from the control computer 30 in the storage unit 12. For the storage unit 12, for example, a hard disk drive can be used.

  The analysis unit 13 extracts plant data from the storage unit 12 based on a data display instruction input from an operator via an input unit (not shown), and displays the plant data on a display unit (not shown). The data display instruction input from the operator includes, for example, a display target and a display period. The analysis unit 13 performs a graph creation process using the plant data extracted from the storage unit 12, creates a trend graph and the like, and displays the trend graph on the display unit.

  When a failure occurs in the data management apparatus 1 and the entire apparatus stops, the recording of plant data in the storage unit 12 stops. Further, the recording of plant data in the storage unit 12 also stops when a disk failure in the storage unit 12 or a software failure in the data recording process of the recording unit 11 occurs. In the present embodiment, a data loss prevention device 2 shown in FIG. 1 is provided in order to prevent data loss due to such stoppage of plant data recording.

  FIG. 3 shows a block configuration of the data loss prevention apparatus 2. The data loss prevention device 2 includes an intercept unit 20, a restoration unit 21, a recording unit 22, and a storage unit 23. The intercepting unit 20 receives (intercepts) all packets flowing through the network 4 using a sniffing technique, sets the source address to the address of the control computer 30 (address A3), and sets the destination address. A packet in which the address (address A1) of the data management device 1 is set is taken out. As a result, the data loss prevention device 2 can acquire a packet transmitted from the control computer 30 to the data management device 1.

  The restoring unit 21 restores the original communication content using the data (packet) extracted by the intercepting unit 20. Since different types of communication (for example, plant sensor data and diary log data) are performed by dividing the packet between the control computer 3 and the data management device 1, the restoration unit 21 appropriately connects the packets. At the same time, the original communication content is restored.

  The recording unit 22 records the plant data restored by the restoration unit 21 in the storage unit 23. The storage unit 23 can be a nonvolatile semiconductor memory such as a flash memory or a hard disk drive.

  The data loss prevention apparatus 2 can record the plant data transmitted from the control computer 30 to the data management apparatus 1 while the plant data recording process in the data management apparatus 1 is stopped. Therefore, loss of plant data can be prevented.

  Moreover, since the memory | storage part 12 of the data management apparatus 1 needs to preserve | save the plant data for 5 to 10 years, big storage capacity is required. On the other hand, the storage unit 23 of the data loss prevention device 2 is required because it can store the plant data for the time during which the plant data recording process in the data management device 1 is stopped (for example, about 3 days to 1 week). The storage capacity is smaller than that of the storage unit 12, and the data loss prevention apparatus 2 can be made compact. When the capacity of the recorded data reaches a predetermined value, the storage unit 23 deletes the oldest data and records the latest data.

  Further, since the data loss prevention device 2 intercepts data transmitted from the control computer 30 to the data management device 1, the device configuration of the control computer 30 when installing the data loss prevention device 2. There is no need to change.

  Thus, according to this embodiment, loss of plant data can be prevented while suppressing costs.

  (Second Embodiment) FIG. 4 shows a block configuration of a data loss prevention apparatus 2 according to a second embodiment. The data loss prevention apparatus 2 is different from the data loss prevention apparatus 2 according to the first embodiment shown in FIG. 3 in that a transmission state monitoring unit 24 and a reception unit 25 are further provided.

  The transmission state monitoring unit 24 monitors the transmission state between the data management device 1 and the control computer 3, the transmission between the data management device 1 and the control computer 3 is interrupted, and the cause is the data management device 1. It is determined whether or not. For example, the transmission state monitoring unit 24 executes ping, transmits a response request (echo request) packet to the data management device 1, and if a response (echo reply) packet is not returned from the data management device 1, a failure or the like. Thus, the data management device 1 is stopped, and it is determined that the transmission between the data management device 1 and the control computer 3 is interrupted.

  Alternatively, the intercepting unit 20 receives a packet in which the address (address A1) of the data management device 1 is set as the transmission source address and the address (address A3) of the control computer 30 is set as the transmission destination address, that is, from the data management device 1. Processing to extract a response packet to the control computer 3 is performed. The transmission state monitoring unit 24 monitors the packets taken out by the intercepting unit 20, and the packet is transferred from the data management device 1 to the control computer 3 despite the packet transfer from the control computer 3 to the data management device 1. When the response packet is not transmitted, it is determined that the data recording process or the data receiving process in the data management apparatus 1 has failed and the transmission between the data management apparatus 1 and the control computer 3 is interrupted. To do.

  When the transmission between the data management device 1 and the control computer 3 is interrupted and the cause is an abnormality in the data management device 1, the data management device 1 responds to the packet transmission from the control computer 3. As a result, the control computer 3 stops the data transmission process, and data does not flow to the network 4.

  Therefore, in this embodiment, the transmission state monitoring unit 24 monitors the transmission state between the data management device 1 and the control computer 3, and the transmission between the data management device 1 and the control computer 3 is interrupted. If it is determined that the cause is the data management apparatus 1, the receiving unit 25 responds to the control computer 3 instead of the data management apparatus 1 based on the determination result. Specifically, the data loss prevention device 2 switches its own address (address A2) to the address (address A1) of the data management device 1, and the reception unit 25 performs data reception processing. The receiving unit 25 receives a packet in which the address of the control computer 30 (address A3) is set as the source address and the address (address A1) after switching to the destination address is set, and the response packet is sent to the control computer 30. Send. That is, the data loss prevention device 2 performs transmission with the control computer 3 as if it were the data management device 1.

  As a result, the control computer 3 continues data transmission, and data flows through the network 4 in the same manner as when the data management apparatus 1 is operating normally.

  The receiving unit 25 restores communication contents by connecting received packets as necessary. When the receiving unit 25 performs the data receiving process, the data intercepting process by the intercepting unit 20 and the data restoring process by the restoring unit 21 are stopped.

  The collecting unit 22 records the plant data received by the receiving unit 25 in the storage unit 23.

  When the transmission state monitoring unit 24 detects that the failure in the data management device 1 is resolved and the operation of the data management device 1 is resumed, the data loss prevention device 2 changes its address from address A1 to address A1. Returning to A2, the data receiving process by the receiving unit 25 is stopped, and the data intercepting process by the intercepting unit 20 and the data restoring process by the restoring unit 21 are resumed.

  As described above, when transmission between the data management device 1 and the control computer 3 is interrupted due to a factor on the data management device 1 side, the data management device 2 switches its own address to the address of the data management device 1. By impersonating the data management device 1, data from the control computer 3 can be continuously received, and loss of plant data can be prevented.

  In the said 2nd Embodiment, when the data management apparatus 1 is operate | moving normally, in the data management apparatus 2, plant data is stored in the memory | storage part 23 through the interception process by the interception part 20, and the decompression | restoration process by the decompression | restoration part 21. It was recorded. However, when the data management device 1 is operating normally, the plant data is recorded in the storage unit 12 of the data management device 1, and no data is lost even if the storage is not performed in the storage unit 23. Therefore, as shown in FIG. 5, when the restoration unit 21 is omitted and the data management device 1 is operating normally, data is not recorded in the storage unit 23, and data management is performed due to a factor on the data management device 1 side. When transmission between the apparatus 1 and the control computer 3 is interrupted, the recording unit 22 may record the plant data received via the receiving unit 25 in the storage unit 23. With this configuration, the capacity of the storage unit 23 can be suppressed.

  (Third Embodiment) FIG. 6 shows a block configuration of a data loss prevention apparatus 2 according to a third embodiment. The data loss prevention apparatus 2 is different from the data loss prevention apparatus 2 according to the first embodiment shown in FIG. 3 in that a complementing unit 26 and an input unit 27 are further provided.

  In the first embodiment, since the plant data is recorded in the storage unit 12 of the data management device 1 and the storage unit 23 of the data loss prevention device 2, a failure occurs in the data management device 1 and the storage unit 12 Even if recording of plant data is stopped, loss of plant data can be prevented. However, the plant data whose data recording to the storage unit 12 is stopped is recorded only in the storage unit 23, and the data management device 1 cannot refer to the plant data in the meantime.

  The complementing unit 26 of the present embodiment extracts data from the storage unit 23 and transmits it to the data management device 1. Thereby, in the data management apparatus 1, the plant data in which data recording is stopped can be supplemented, and the plant data for a desired period can be referred to.

  The data period to be complemented is input by the operator via the input unit 27. For example, a keyboard or a mouse can be used for the input unit 27. The complementing unit 26 extracts the plant data for the period input via the input unit 27 from the storage unit 23 and transmits the plant data to the data management device 1.

Thus, according to this embodiment, loss of plant data can be prevented, and plant data for a desired period can be easily referred to in the data management device 1.
(Fourth Embodiment) FIG. 7 shows a block configuration of a data loss prevention apparatus 2 according to a fourth embodiment. The data loss prevention apparatus 2 is different from the data loss prevention apparatus 2 according to the second embodiment shown in FIG. 4 in that a complementing unit 26 is further provided.

  Similar to the third embodiment, the complementing unit 26 retrieves data from the storage unit 23 and transmits the data to the data management device 1 to supplement the plant data in which data recording is stopped in the data management device 1.

  In the present embodiment, the transmission status monitoring unit 24 performs a data recording stop period in the data management apparatus 1 (a period in which transmission between the data management apparatus 1 and the control computer 3 is interrupted due to a factor on the data management apparatus 1 side). Is detected and notified to the complementing unit 26. The complementing unit 26 takes out the plant data of the data recording stop period notified from the transmission state monitoring unit 24 from the storage unit 23 and transmits it to the data management device 1.

  Thus, according to this embodiment, loss of plant data can be prevented, and plant data for a desired period can be easily referred to in the data management device 1. In addition, the automatic data complement prevents the user from missing a data complement request and eliminates the need for the user to monitor the data loss situation, thereby reducing the user load.

  At least a part of the plant monitoring system described in the above-described embodiment may be configured by hardware or software. When configured by software, a program for realizing at least a part of the functions of the plant monitoring system may be stored in a recording medium such as a flexible disk or a CD-ROM, and read and executed by a computer. The recording medium is not limited to a removable medium such as a magnetic disk or an optical disk, but may be a fixed recording medium such as a hard disk device or a memory.

  Further, a program that realizes at least a part of the functions of the plant monitoring system may be distributed via a communication line (including wireless communication) such as the Internet. Further, the program may be distributed in a state where the program is encrypted, modulated or compressed, and stored in a recording medium via a wired line such as the Internet or a wireless line.

  Although several embodiments of the present invention have been described, these embodiments are presented by way of example and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the scope of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are included in the invention described in the claims and the equivalents thereof.

DESCRIPTION OF SYMBOLS 1 Data management apparatus, 2 Data loss prevention apparatus, 3 Plant, 10 Receiving part, 11 Recording part, 12 Storage part, 13 Analysis part, 20 Interception part, 21 Restoration part, 22 Recording part, 23 Storage part, 30 Control computer

Claims (6)

A data loss prevention device connected to a network through which plant data transmitted from a plant control computer to a data management device is transmitted,
Intercepting the data flowing through the network, from the intercepted data, the source address indicates the plant control computer, and an intercepting unit for extracting the plant data where the destination address indicates the data management device,
A storage unit for storing the plant data extracted by the interception unit;
A data loss prevention device comprising: The transmission state between the plant control computer and the data management device is monitored, and when the transmission between the plant control computer and the data management device is interrupted, the factor that the transmission is interrupted is the data A transmission state monitoring unit for determining whether or not an abnormality has occurred in the management device;
When the transmission state monitoring unit determines that transmission between the plant control computer and the data management device is interrupted due to the occurrence of an abnormality in the data management device, the transmission source address indicates the plant control computer, A receiving unit that receives the plant data whose transmission destination address indicates the data management device, and that makes a response to the plant control computer;
Further comprising
The data loss prevention apparatus according to claim 1, wherein the storage unit stores the plant data received by the receiving unit.   A period during which transmission between the plant control computer and the data management apparatus is interrupted due to the occurrence of an abnormality in the data management apparatus is notified from the transmission state monitoring unit, and the plant data corresponding to the notified period is stored in the storage The data loss prevention device according to claim 2, further comprising a complementing unit that extracts the data from the unit and transmits the data to the data management device.   The data loss prevention device according to claim 2 or 3, wherein the data interception process by the interception unit is stopped while the reception unit is receiving plant data. An input unit for receiving an input of a data supplement period;
A complement unit that takes out the plant data corresponding to the data supplement period from the storage unit and transmits it to the data management device;
The data loss prevention apparatus according to claim 1, further comprising: A data management device for storing plant data transmitted from the plant control computer;
A data loss prevention device according to any one of claims 1 to 5,
A plant monitoring system comprising:

Images