JP2015197854A - Inspection support system and inspection support device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To eliminate a risk that sensor installation data having a possibility of including secret information on a customer may flow out if a system for inspecting a sensor is connected with a network.SOLUTION: In an inspection support system, a management device for receiving an alarm signal from sensors installed in a facility in which the plurality of sensors are installed for detecting change in a surrounding environment and outputting the alarm signal, a mobile terminal held by an inspection worker inspecting the sensors, and an inspection support device for having the mobile terminal give notice of alarm information on the basis of the alarm signal of the sensors reported by the management device are connected via a network and perform information communication such as an alarm. Encryption communication is performed when information on the sensor installation data is transmitted and received in relation to any of information communication between the management device, the inspection support device, and the mobile terminal. A transmission side of the encryption communication comprises an encryption unit to encrypt information, a reception side thereof comprises an encryption unit to decrypt the information, and thereby outflow of the installation data is prevented.

Description

  The present invention relates to an inspection support system and an inspection support apparatus.

Conventionally, when inspecting fire alarm equipment, two people, an inspection worker who uses a tester to apply gas and heat to the fire detector, and an inspection worker who checks and restores the alarm at the fire receiver, An inspection worker was required. The applicant has developed the technique of Patent Document 1 in which an inspection worker who applies gas or heat to the fire detector can perform the inspection work alone by performing the above-described notification confirmation and recovery using a portable terminal.
Patent Document 2 discloses an inspection support system that can efficiently perform inspection work by each worker even when the inspection work is shared by a plurality of inspection workers. In the above inspection support system, the fire detector to be inspected is set by the mobile terminal possessed by the inspection operator who performs the inspection work of the fire detector, and the alarm detector is subject to inspection for notification accompanying the alarm. It is performed in the mobile terminal and is not notified in other mobile terminals.
In addition, the mobile terminal stores installation data such as the installation location of the sensor and the floor plan of the property, and the inspection target setting screen when the inspection operator sets the sensor to be inspected from the mobile terminal is displayed. Referenced when displaying.

JP 2003-109137 A JP 2013-92993 A

  In the inspection support system, the portable terminal needs to store installation data in order to display the inspection target setting screen. For that purpose, it is conceivable to store the portable terminal directly connected to an inspection support apparatus or the like having installation data. However, the inspection support device has installation data for many properties in a wide area and can be managed, and it is maintained and managed by the system provider rather than being maintained for each operator performing the inspection. Therefore, it is difficult to connect a mobile terminal directly. Further, it is not preferable that the inspection support apparatus is directly connected to the support apparatus for each inspection operation.

Then, it is also conceivable to store all installation data related to the operator performing the inspection in the portable terminal. However, the installation data such as the installation location of the fire detector of the property and the floor plan of the property include facility information and may correspond to the confidential information of the customer. For example, from the installation data “XX development room” as the installation location, the existence of the development department of the device whose existence is kept secret by the customer's manufacturing company is revealed. It is a security problem to store such installation data in a mobile terminal for a large number of properties.
Then, although it is possible to transmit installation data to a portable terminal via a network, if the communication was intercepted, there was a possibility that the secret information of the customer might leak.

  Some receivers of fire alarm equipment have installation data such as the location of the fire detector and the floor plan of the property in order to display the location at the time of reporting. It is conceivable that the data is transmitted to the inspection support apparatus and registered in the database, or transmitted to the portable terminal via the inspection support apparatus. Furthermore, it is conceivable that the portable terminal is connected to a receiver at the site in a wired manner to receive the installation data, transmitted to the inspection support apparatus, and then transferred to another portable terminal. However, even in these cases, leakage of customer confidential information due to communication interception becomes a problem.

Further, the inspection support apparatus is usually provided with a firewall that is a protection means against unauthorized access like a general server. However, if the protection means is broken, installation data leaks. There was a fear.
As described above, when the inspection support system and the inspection support apparatus are connected to the network, there is a possibility that the installation data of the sensor that may contain the customer's confidential information may be leaked.

The present invention solves the above problems and is as follows.
A management device that receives a warning signal from a sensor installed in a facility where a plurality of sensors that detect changes in the surrounding environment and outputs a warning signal are installed, and an inspection operator that checks the sensor And an inspection support device that informs the mobile terminal of the notification information based on the notification signal of the sensor notified from the management device, and connected to each other via a network In an inspection support system that performs information communication such as
As for any of information communication between the management device, the inspection support device, and the mobile terminal, at least information related to installation data of the sensor is transmitted and received, and the information is encrypted on the transmission side of the encrypted communication. An inspection support system comprising an encryption unit for decrypting an encryption unit to be decrypted on the receiving side.

The invention of the present application has the following effects.
(1) Since the information exchanged via the network is encrypted, the confidential information of the customer does not leak out.
(2) Since the encrypted information is sent simultaneously with the decryption method, there is no need to hold the decryption method on the receiving side.
(3) The receiving side does not need to set the decoding method in advance.
(4) By performing double encryption, protection of secret information is further enhanced.
(5) Since the installation data of the sensor included in the apparatus is encrypted, the confidential information of the customer can be protected even if the installation data is stolen by unauthorized access.

The whole block diagram in embodiment of this invention. The figure explaining the internal structure of each apparatus in one Embodiment of this invention. The figure explaining operation | movement of the portable terminal, inspection assistance apparatus, and management apparatus in one Embodiment of this invention. The figure explaining operation | movement of the portable terminal, inspection assistance apparatus, and management apparatus in other embodiment of this invention. The figure explaining one Embodiment of the timing which transmits the decryption method information and encryption in this invention. The figure explaining one Embodiment of the timing which transmits the decryption method information and encryption in this invention. The figure explaining one Embodiment of the timing which transmits the decryption method information and encryption in this invention.

FIG. 1 is an overall configuration diagram in one embodiment of the present invention.
1 is an inspection support system, 2 is a fire alarm facility, 10 is an inspection support device (server), 20 is a portable terminal held by an inspection operator, 30 is a receiver, 40 is a communication terminal attached to the fire alarm facility, 50 Is a fire detector, 60 is a linked operation device such as a bell, fire door, shutter, smoke exhauster, etc., 1000 is a network, 70 including the receiver 30 and communication terminal 40 is a management device, 80 is an inspection worker's office building, etc. It is an installed inspection work management device. When managing by the portable terminal 20, the inspection work management apparatus 80 may not be provided.

Next, the internal configuration of each apparatus in FIG. 1 will be described with reference to FIG. In FIG. 2, the mobile terminal 20, the inspection support device 10, and the management device 70 are described in order from the top. The inspection support apparatus 10 is provided in the server. In FIG. 2, the configuration for communication such as the network 1000, the fire detector 50, and the interlocking operation device 60 are omitted.
In the present embodiment, the portable terminal 20 includes a non-notification sensor input reception unit 201, an inspection sensor input reception unit 202, an inspection sensor transmission unit 203, a non-notification sensor transmission unit 204, a notification unit 205, a determination reception unit 206, a cipher. The inspection support apparatus 10 includes a non-notification sensor display instruction unit 101, an inspection sensor display instruction unit 102, a restriction unit 103, an inspection sensor reception unit 104, an inspection registration unit 105, and a non-notification sensor reception unit. 106, a non-notification registration unit 107, a notification instruction unit 108, a notification detector reception unit 109, a notification registration unit 110, an encryption unit 111, and an encryption unit 112, and the management device 70 includes a linked operation restriction unit 701, a notification It has a signal receiving unit 702, an alarm detector information unit 703, an alarm detector transmitter 704, and an encryption unit 705. Although not shown in FIG. 2, communication between the non-notification detector display instruction unit 101 of the inspection support device 10 and the non-notification detector input reception unit 201 of the mobile terminal 20, the inspection sensor of the inspection support device 10 In order to encrypt the communication between the display instruction unit 102 and the inspection sensor input receiving unit 202 of the portable terminal 20, an encryption unit may be provided in the same manner.
In this embodiment, in the monitoring device 70, the alarm detector information unit 703 has a database that stores installation data such as a floor plan and an installation location associated with the address of the fire detector 50.

Next, the operation of this embodiment will be described with reference to FIG.
When the fire detector 50 issues an alarm due to the inspection act of the inspection operator (S101), an alarm signal is received by the alarm signal receiver 702 of the management device 70. This notification signal is specifically the address of the fire detector 50 and does not include installation data such as the installation location or floor plan of the property. The facility detector data section 703 has facility installation data. When the alarm signal is received by the management device 70, alarm information including the installation data of the fire detector 50 generated from the alarm detector information unit 703 is created (S102), and the alarm detector transmitter 704 is generated. And encrypted by the encryption unit 705 (S103). As specific examples of the notification information, the number and name of the property where the fire detector 50 has been installed, the address of the fire detector 50, the date and time of notification, the floor plan of the property, and the fire that has been issued. It includes data such as the location of the detector 50 and the name of the location such as “XX development room” where the fire detector 50 that has reported is installed.

  The encrypted notification information is transmitted by encrypted communication via the network 1000 (S104), decrypted by the encryption unit 111 of the inspection support apparatus 10 (S105), and received by the notification sensor receiving unit 109. The notification information is registered in the notification registration unit 110 and sent to the notification instruction unit 108 to determine notification (S106). Here, when registering in the alarm registration unit 110, all of the alarm information may be registered, but only some information such as the property number and name, the address of the fire detector 50, and the alarm date and time. May be registered. In the notification determination, it is determined whether or not the inspection is being performed, and if the inspection is being performed to which mobile terminal 20 should be transmitted. The notification information is encrypted again by the encryption unit 112 (S107), and then transmitted to the portable terminal 20 determined to be a transmission target by encrypted communication via the network 1000 (S108). In general, this communication includes wireless communication.

  In the portable terminal 20, it is decrypted by the encryption unit 207 (S109) and notified by the notification unit 205 (S110). At this time, the installation location display such as “XX Development Room” and the floor plan are displayed based on the installation data such as the installation location of the fire detector 50 and the floor plan of the property included in the notification information. Display the installation location including it.

Whether the fire alarm 50 being inspected by the inspection operator is reported by this display or whether the fire sensor 50 is in the area being inspected by another inspection operator who is inspecting at the same time. Or, it is possible to grasp whether the fire detector 50 is in an area where no one has inspected.
If the fire detector 50 is in an area where no one has inspected, the inspection operator can understand that it is an actual fire alarm. As an operator involved in maintenance of the fire alarm facility 1, it is desirable for the inspection operator to perform an initial response in the event of a fire, and it is significant that an actual fire is transmitted to the inspection operator.

  If it is confirmed that the alarm is for the fire detector 50 being inspected, the inspection operator inputs that fact. As a result, confirmation information is transmitted from the determination receiving unit 206 of the portable terminal 20 and registered in the notification registration unit 110 of the inspection support apparatus 10 via the network 1000. The confirmation information is, as a specific example, the number and name of the property where the confirmed fire detector 50 is installed, the address of the confirmed fire detector 50, and the confirmation date and time.

The inspection work is performed as described above, and the notification information and the confirmation information are registered in the notification registration unit 110. Therefore, the fact that the notification and the confirmation have been performed by both information is registered, and later Can check the status of inspection work.
Note that the function of the inspection support device 10 may be provided in the management device 70 so that the management device 70 and the mobile terminal 20 communicate directly via the network 1000.

In the present embodiment, the alarm detector information unit 703 is provided in the management device 70 to generate the alarm information to which the installation data is added. However, the alarm information is provided by providing it in the inspection support device 10. Also good. The operation will be described using this embodiment as another embodiment with reference to FIG.
As in FIG. 3, the alert signal (S201) received by the alert signal receiver 702 of the management device 70 is transmitted from the alert detector transmitter 704 in a format corresponding to the network 1000 (S202). When the alarm detector receiving unit 109 of the inspection support device 10 receives the alarm signal, it is registered in the alarm registration unit 110 and sent to an alarm detector information unit (not shown) provided in the inspection support device 10. Then, the alarm detector information section (not shown) having the installation data database of all facilities generates alarm information including the installation data related to the alarm detector (S203) and sends it to the notification instruction section 108. It is done. Subsequent operations are the same as those described with reference to FIG. 3, and notification is determined (S106). Transmission from the inspection support apparatus 10 to the portable terminal 20 is encrypted by the encryption unit 112 (S107) and is performed by encrypted communication (S108).
In this way, not all the transmissions by the network of the inspection support system are encrypted communications, but only a part of the transmissions may be encrypted communications. In other embodiments, the communication from the management device 70 to the inspection support device 10 is not encrypted, but there is no problem even if it is intercepted because the installation data is not included. That is, in the present embodiment, encryption communication is performed when transmission including at least sensor installation data that may correspond to the confidential information of the customer is performed.

In addition, when the inspection work is shared by a plurality of inspection workers as in Patent Document 2, the non-notification detector display instruction unit 101 and the inspection sensor display instruction in the inspection support apparatus 10 illustrated in FIG. The information output from the unit 102 may include the installation data of the fire detector 50 in the property and may be transmitted to the portable terminal 20 by encrypted communication to set the non-notification detector or the inspection detector.
The operation when the non-notification sensor is set is as follows.
Before starting the inspection work, non-notification registration is first performed.
A non-informing sensor designation screen is instructed from the non-informing sensor display instruction unit 101 of the inspection support apparatus 10 to the non-informing sensor input receiving unit 201 of the mobile terminal 20. Since this instruction includes installation data of the fire detector 50 in the property, it is encrypted by an encryption unit (not shown) before being output from the inspection support device 10. Then, encrypted communication is performed on the network 1000, and when it is received by the mobile terminal 20, it is decrypted by an encryption unit (not shown) and sent to the non-notification sensor input reception unit 201. If it does so, the screen for setting the fire detector 50 used as the said non-notification | report object regarding the applicable property will be displayed on the portable terminal 20 using the sent installation data. Specifically, for example, the installation status of the fire detector 50 is displayed on the screen of the portable terminal 20 by displaying the name of the inspection facility, the installation location such as “XX development room”, and the installation location including a floor plan. Is displayed, and a guidance “Specify a fire detector to be non-notified.” Or “Specify a fire detector in charge of another inspection worker.” Is displayed.
The inspection worker designates the fire detector 50 that the other inspection workers are in charge of. Then, the non-notification sensor transmitting unit 204 of the portable terminal 20 transmits the non-notification sensor to the non-notification sensor receiving unit 106 of the inspection support device 10 and the portable terminal 20 transmitted to the non-notification registration unit 107 of the inspection support device 10. Are registered as non-notification detector information in association with the fire detector 50 in charge of other inspection workers.

When the non-notification sensor information is registered in the non-notification registration unit 107, the operation is performed as follows when the inspection work is started.
When the alarm signal is received by the alarm signal receiver 702 of the management device 70 by the inspection, the alarm detector information is sent from the alarm detector transmitter 704 to the alarm detector receiver 109 of the inspection support device 10. Send. Then, the inspection support device 10 performs notification determination in light of the content of the non-notification sensor information of the non-notification registration unit 107, and the notification unit of the mobile terminal 20 in which the notification sensor is not associated with the non-notification sensor information. A notification instruction is issued from the notification instruction unit 108 to 205 and notified by the notification unit of the mobile terminal 20.
When the inspection operator confirms the notification, the inspection operator inputs a determination to the portable terminal 20. When the input is received by the determination receiving unit 206, determination information is transmitted to the inspection support device 10 and registered in the notification registration unit 107. Therefore, the information of the alarm detector and the notified / determined portable terminal 20 are registered as a set in the alarm registration unit 107, and the inspection status of the fire detector can be confirmed later.

Furthermore, the operation for setting the inspection sensor is as follows.
After the non-notification sensor is registered by another inspection operator, the inspection sensor input screen is displayed on the inspection sensor input reception unit 202 of the portable terminal 20 from the inspection sensor display instruction unit 102 of the inspection support device 10. Instruction is given.
Since the installation data of the fire detector 50 is sent at the time of non-notification registration, the installation data of the fire detector is not necessary for this instruction. Therefore, a configuration for encryption is not necessary. A screen for setting the fire detector 50 to be inspected with respect to the property on the portable terminal 20 is displayed in the same manner as the non-notification registration using the installation data sent at the time of non-notification registration. Specifically, for example, the name of the inspection facility and the installation status of the fire detector 50 are shown on the screen of the mobile terminal 20, and a guidance “Please specify the detector you want to inspect.” Is displayed.

  The inspection operator inputs an inspection sensor that he / she is in charge of inspection. Then, inspection sensor information is transmitted from the inspection sensor transmission unit 203 of the portable terminal 20 to the inspection sensor reception unit 104 of the inspection support device 10, and the inspection sensor information is registered in the inspection registration unit 105 of the inspection support device 10.

In the above embodiment, the registration of the inspection sensor is performed after the registration of the non-notification sensor, but the registration may be performed at the same time. At that time, the installation data is transmitted once by encrypted communication. Then, the non-notification sensor input screen and the inspection sensor input screen can be combined, or the non-notification sensor information and the inspection sensor information can be transmitted together.
Moreover, it is also possible to input only the inspection sensor information and register it as a non-notification sensor in another mobile terminal 20 from the information. Specifically, an inspection detector is set for the portable terminal 20 held by the inspection operator. The input for setting may be from the portable terminal 20 or from the inspection work management device 80. Moreover, you may set from the other portable terminal 20 which the leader of an inspection worker has. The other portable terminal 20 is registered as a non-notification sensor by setting the inspection sensor described above.

Next, examples of encrypted communication used in the present invention are shown in FIGS. 5 to 7, the left side represents the transmitting side encryption unit, and the right side represents the receiving side encryption unit.
There are various encryption and decryption methods, but an example of decrypting a cipher using the decryption method information is shown here. FIG. 5 shows a method for transmitting the decryption method information and the cipher in one communication from the transmission side encryption unit to the reception side encryption unit. The receiving side decrypts (decrypts) the cipher according to the decryption method information received simultaneously with the cipher. In this method, it is not necessary to set a decryption method or install dedicated software in advance on the receiving side for each cipher to be sent. Although this method is a method of simultaneously sending encryption and decryption method information, the risk of decryption can be reduced by using special information as the decryption method information. For example, if the decryption method information itself is encrypted by a unique method common to this system, the risk of being intercepted and decrypted is low.

  If it carries out like FIG. 6, the possibility of the decoding of the intercepted encryption communication will become lower. In this method, the cipher and the decryption method information of the next cipher to be sent next are sent together from the transmitting side encryption unit. The receiving side decrypts the cipher using the decryption method information received in the previous communication. Then, since the encryption and the decryption method information are not transmitted as the same communication signal, special decryption method information as shown in FIG. 5 is used, or the decryption method information itself is encrypted by a unique method common to this system. It is possible to reduce the risk of decryption without having to do so.

Further, FIG. 7 shows the case where the decoding method information is transmitted at the beginning when the network 1000 is connected to a device on the transmission side or the reception side. Since the decryption method information appears only once in the network, the possibility that the decryption method information is intercepted is low, and the possibility that the encryption is decrypted is small.
Furthermore, these encrypted communications are encrypted with a method such as certificate authentication that is generally used in the network 1000 after performing the first encryption unique to the inspection support system. It is more preferable.

  Even if the installation data on the network 1000 is encrypted so that it cannot be decrypted even if it is intercepted in this way, each device is connected to the network 1000, so there is a risk that the installation data will be stolen by someone being invaded. There is. Generally, a device on the network 1000 is provided with a firewall as a protection means. However, if the protection means is broken, installation data may leak out. Therefore, it is safer if the installation data is encrypted and stored in the apparatus. In particular, in the inspection support apparatus 10 that holds the installation data of all facilities as a database, it is preferable to store the installation data encrypted. Since installation data is used for each property, encryption can be operated efficiently if it is set for each property. Moreover, since the management apparatus 70 is also installed for each facility and may be targeted depending on the facility, it is preferable that the installation data stored in the management apparatus 70 is also encrypted. Although it is preferable to encrypt the installation data of the portable terminal 20, the installation data may be automatically deleted at the end of the work.

  1 inspection support system, 2 fire alarm equipment, 10 inspection support device, 20 portable terminal, 30 receiver, 40 communication terminal, 50 fire detector, 60 interlocking operation device, 70 management device, 80 inspection work management device, 1000 network, 101 Non-notification sensor display instruction section, 102 Inspection sensor display instruction section, 103 Restriction section, 104 Inspection sensor reception section, 105 Inspection registration section, 106 Non-notification sensor reception section, 107 Non-notification registration section, 108 Notification instruction 109, Alerting sensor receiver, 110 Alert registration part, 111 Encryption part, 112 Encryption part, 201 Non-notification sensor input reception part, 202 Inspection sensor input reception part, 203 Inspection sensor transmission part, 204 Notification sensor transmission unit, 205 notification unit, 206 determination reception unit, 207 encryption unit, 701 interlocking operation restriction unit, 702 notification signal A receiving unit, 703 an alarm detector information unit, 704 an alarm detector transmitter, and 705 an encryption unit.

Claims (7)

A management device that receives a warning signal from a sensor installed in a facility where a plurality of sensors that detect changes in the surrounding environment and outputs a warning signal are installed, and an inspection operator that checks the sensor And an inspection support device that informs the mobile terminal of the notification information based on the notification signal of the sensor notified from the management device, and connected to each other via a network In an inspection support system that performs information communication such as
As for any of information communication between the management device, the inspection support device, and the mobile terminal, at least information related to installation data of the sensor is transmitted and received, and the information is encrypted on the transmission side of the encrypted communication. An inspection support system comprising an encryption unit for decrypting an encryption unit to be decrypted on the receiving side. An inspection support system having a management device and a portable terminal,
The management device receives a notification signal from a sensor installed in a facility in which a plurality of sensors that detect a change in the surrounding environment and outputs a notification signal are installed, and generates the notification based on the notification signal. Sending information to the mobile terminal via a network,
The portable terminal is carried by an inspection operator who inspects the sensor, and in the inspection support system for notifying the notification information of the sensor received from the management device via the network,
An inspection characterized in that at least information related to the installation data of the sensor is transmitted and received by encryption communication, and an encryption unit for encrypting information is provided on the transmission side of encryption communication and an encryption unit for decryption is provided on the reception side. Support system.   4. The inspection support apparatus according to claim 3, wherein the information related to the installation data is included in notification information transmitted to the mobile terminal.   The inspection support system or the inspection support apparatus according to claim 1, wherein the encryption unit transmits the decryption method information and the encrypted information by one encryption communication.   The encryption unit on the transmitting side transmits the decryption method information of the encrypted information transmitted next time and the information encrypted so as to be decryptable by the decryption method transmitted last time, and the encryption unit on the receiving side transmits the received encryption The inspection support system or the inspection support apparatus according to claim 1, wherein the converted information is decoded based on the decoding method information received last time.   The inspection support system according to claim 1, wherein the encryption unit serving as a transmission side transmits decryption method information at the beginning of network connection of a device serving as a transmission side or a device serving as a reception side. Inspection support device.   The cipher unit performs cipher communication by performing second ciphering generally used in a network after first ciphering information to be transmitted. The inspection support system or inspection support apparatus described.

Images