JP2017010298A - Maintenance and inspection support system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a maintenance and inspection support system which utilizes a mobile terminal, reduces a risk for external outflow of data, and has high safety.SOLUTION: A control device 1 encrypts monitoring data to be transmitted to a mobile terminal 2 to transmit the encrypted monitoring data 5 to the mobile terminal 2 by wide-area radio communication through a wide-area high-speed radio communication base station 3, and to transmit a decryption key 6 for decrypting the encrypted monitoring data 5 to the mobile terminal 2 by short-range radio communication through a short-range low-speed radio communication base station 4. It causes a large amount of monitoring data to be easily transmitted in a short time, and prevents the decryption key 6 from leaking to the outside due to interception of the wide-area high-speed radio communication so as not to decrypt the monitoring data.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a maintenance / inspection support system using a mobile terminal.

  As a system that supports plant facility monitoring and maintenance / inspection work, there is a system that brings a mobile terminal to a plant site and displays monitoring data of a monitoring target facility provided from a server on its screen. For example, in Patent Document 1, a board symbol or board name of a facility to be monitored is photographed by a camera, the photographed image is converted into a character string by an optical character reader, and a related monitoring screen is specified. The screen data is acquired from the WEB server and displayed on the display device immediately.

  In the maintenance / inspection support system using the mobile terminal as described above, the server transmits data such as monitoring data to the mobile terminal by wide area wireless communication. At that time, the server encrypts and transmits the data in order to keep the confidentiality of the information, and further transmits a decryption key for decrypting the encrypted data by wide area wireless communication.

JP 2014-153734 A

  In the conventional maintenance and inspection system, when the decryption key is leaked due to interception of wide area wireless communication, there is a possibility that the encrypted data may be decrypted. Further, when short-range wireless communication is used without using wide-area wireless communication, it is difficult to transmit a large amount of data because the bandwidth is narrow.

  The present invention has been made to solve the above-described problems, and an object of the present invention is to obtain a highly safe maintenance / inspection support system capable of reducing the risk of data leaking to the outside.

  A maintenance / inspection support system according to claim 1 of the present invention includes a control device that holds monitoring data of a facility to be monitored, a mobile terminal having display means for displaying monitoring data acquired from the control device, the control device, and the mobile terminal A maintenance / inspection support system comprising a wide-area wireless communication base station that mediates wide-area wireless communication between and a short-range wireless communication base station that mediates short-range wireless communication between a control device and a mobile terminal. The apparatus encrypts the monitoring data to be transmitted to the mobile terminal with an encryption key, transmits the encrypted monitoring data to the mobile terminal by wide area wireless communication, and decrypts the encrypted monitoring data The key is transmitted to the mobile terminal by short-range wireless communication.

  A maintenance / inspection support system according to claim 3 of the present invention acquires a monitoring data from a control device that holds monitoring data of the monitoring target equipment, a mobile terminal having a display means for displaying the monitoring data, and the control device. A data server that transmits to a mobile terminal, a wide area wireless communication base station that mediates wide area wireless communication between the data server and the mobile terminal, and a near field wireless communication base that mediates near field wireless communication between the data server and the mobile terminal A data server, wherein the data server encrypts the monitoring data to be transmitted to the mobile terminal with an encryption key, transmits the encrypted monitoring data to the mobile terminal by wide area wireless communication, A decryption key for decrypting the encrypted monitoring data is transmitted to the mobile terminal by short-range wireless communication.

  According to the maintenance / inspection support system according to claim 1 of the present invention, the control device transmits the encrypted monitoring data to the mobile terminal by wide-area wireless communication, and transmits the decryption key by short-range wireless communication. As described above, it is possible to easily transmit a large amount of monitoring data in a short time, and to prevent the decryption key from leaking to the outside due to the interception of wide area wireless communication and suppressing the decryption of the monitoring data. Therefore, it is possible to reduce the risk of monitoring data being leaked outside.

  According to the maintenance / inspection support system according to claim 3 of the present invention, the data server transmits the encrypted monitoring data to the mobile terminal by wide-area wireless communication and transmits the decryption key by short-range wireless communication. As described above, it is possible to easily transmit a large amount of monitoring data in a short time, and to prevent the decryption key from leaking to the outside due to the interception of wide area wireless communication and suppressing the decryption of the monitoring data. Therefore, it is possible to reduce the risk of monitoring data being leaked outside.

It is a figure which shows the whole structure of the maintenance inspection assistance system which concerns on Embodiment 1 of this invention. It is a figure which shows the flow of a process by the control apparatus and mobile terminal of the maintenance inspection assistance system which concern on Embodiment 1 of this invention. It is a figure which shows the flow of a process by the control apparatus and mobile terminal of the maintenance inspection assistance system which concern on Embodiment 2 of this invention. It is a figure which shows the whole structure of the maintenance inspection assistance system which concerns on Embodiment 3 of this invention. It is a figure which shows the whole structure of the maintenance inspection assistance system which concerns on Embodiment 4 of this invention.

Embodiment 1 FIG.
Below, the maintenance inspection support system which concerns on Embodiment 1 of this invention is demonstrated based on drawing. FIG. 1 shows the overall configuration of the maintenance / inspection support system according to the first embodiment. The maintenance / inspection support system 100 according to the first embodiment is a facility to be monitored using a mobile terminal 2 that can be brought into the field by a worker in, for example, a thermal power plant, a nuclear power plant, a chemical plant, or a large-scale factory. Monitoring and maintenance inspection. In the first embodiment, a case where plant equipment is a monitoring target will be described as an example.

  The maintenance / inspection support system 100 holds monitoring data of the plant equipment to be monitored, controls the plant equipment based on the monitoring data, and display means 26 for displaying the monitoring data acquired from the control device 1. , A wide-area high-speed wireless communication base station 3 that is a wide-area wireless communication base station that mediates wide-area wireless communication between the control device 1 and the mobile terminal 2, and a proximity between the control device 1 and the mobile terminal 2. A short-distance low-speed wireless communication base station 4 that is a short-distance wireless communication base station that mediates distance wireless communication.

  In the first embodiment, the control device 1 and the mobile terminal 2 perform wide-area high-speed wireless communication with each other via the wide-area high-speed wireless communication base station 3 and short-range low-speed wireless communication with each other via the short-range low-speed wireless communication base station 4. Perform wireless communication. Wide-area high-speed wireless communication uses, for example, a wide-area wireless LAN or a cellular phone line. Short-distance low-speed wireless communication includes, for example, Bluetooth (registered trademark) with a communication distance of 10 m or less, and a communication distance of several centimeters to several meters. RFID, infrared communication having a communication distance of about 5 m to 10 m, and the like are used, but the communication method is not limited to these.

  The control device 1 includes a first wireless communication unit 11 for communicating with the wide area high-speed wireless communication base station 3, a second wireless communication unit 12 for communicating with the short-range low-speed wireless communication base station 4, and monitoring data Monitoring data storage means 13 for storing the data, and key storage means 14 for storing the encryption key for encrypting the monitoring data and the decryption key 6 corresponding thereto.

  The control device 1 also has an encryption unit (not shown) that encrypts the monitoring data with an encryption key. Since this encryption means is based on a well-known technique and is not directly related to the present invention, the description thereof is omitted. The encryption key is a parameter given to the calculation procedure defined by the encryption method when encrypting data. Even if the same monitoring data is encrypted using the same method, different encryption keys are used. Monitoring data 5 is obtained. In order to decrypt the encrypted monitoring data 5, a decryption key 6 paired with the encryption key is required.

  The control device 1 configured as described above encrypts the monitoring data to be transmitted to the mobile terminal 2 with the encryption key, and transmits the encrypted monitoring data 5 to the wide area wireless communication via the wide area high speed wireless communication base station 3. To the mobile terminal 2. Further, the control device 1 transmits a decryption key 6 for decrypting the encrypted monitoring data 5 to the mobile terminal 2 by short-range wireless communication via the short-range low-speed wireless communication base station 4.

  On the other hand, the mobile terminal 2 includes a first wireless communication unit 21 for communicating with the wide area high-speed wireless communication base station 3, a second wireless communication unit 22 for communicating with the short-range low-speed wireless communication base station 4, Monitoring data storage means 23 for storing the encrypted monitoring data 5 acquired by the first wireless communication means 21 and decryption key storage means 24 for storing the decryption key 6 acquired by the second wireless communication means 22. And.

  Furthermore, the mobile terminal 2 includes an input unit 25 such as a touch panel for an operator to input various information and a display unit 26 such as a liquid crystal display for displaying monitoring data. The mobile terminal 2 includes a control unit such as a CPU that controls each unit of the mobile terminal 2 and a decryption unit (all not shown) that decrypts the encrypted monitoring data 5 using the decryption key 6. However, since all are based on well-known techniques and are not directly related to the present invention, description thereof is omitted.

  Next, the flow of processing by the control device 1 and the mobile terminal 2 will be described using the flowchart of FIG. First, in step S <b> 10, the control device 1 reads the monitoring data to be transmitted this time from the monitoring data storage unit 13 as preparation for transmitting the monitoring data to the mobile terminal 2. The worker can request necessary monitoring data from the control device 1 by using the mobile terminal 2. Subsequently, in step S20, the monitoring data to be transmitted to the mobile terminal 2 is encrypted with the encryption key.

  Next, in step S30, the second wireless communication unit 12 of the control device 1 transmits the decryption key 6 corresponding to the encryption key used for encryption to the mobile terminal 2 by short-range low-speed wireless communication. Subsequently, in step S40, the second wireless communication means 22 of the mobile terminal 2 acquires the decryption key 6 by short-range low-speed wireless communication.

  Next, in step S50, the first wireless communication unit 11 of the control device 1 transmits the encrypted monitoring data 5 to the mobile terminal 2 by wide area high speed wireless communication. Subsequently, in step S <b> 60, the first wireless communication unit 21 of the mobile terminal 2 acquires the encrypted monitoring data 5 by wide area high-speed wireless communication and stores it in the monitoring data storage unit 23.

  Further, in step S 70, the encrypted monitoring data 5 stored in the monitoring data storage unit 23 is decrypted with the decryption key 6. Through the above processing, the worker can view necessary monitoring data on the display means 26 of the mobile terminal 2.

  In the first embodiment, the short-range low-speed wireless communication base station 4 is installed in the vicinity of the control device 1 and the area where the decryption key 6 can be received is limited. The worker carrying the mobile terminal 2 needs to stay within the communication range of the short-range low-speed wireless communication base station 4 in order to receive the decryption key 6.

  As a reference example of the present invention, instead of the method of transmitting the decryption key 6 by short-range wireless communication, a method of performing decryption using the decryption key recorded in the distribution, There is also a method of carrying the storage in which the key 6 is recorded and reading the decryption key 6 by connecting the mobile terminal 2 and the storage when receiving the encrypted monitoring data 5.

  As described above, according to the first embodiment, the control device 1 transmits the encrypted monitoring data 5 to the mobile terminal 2 by the wide area high speed wireless communication, and sends the decryption key 6 to the short range low speed wireless communication. Since it is transmitted by communication, a large amount of monitoring data can be easily transmitted in a short time, and the decryption key 6 is leaked to the outside due to interception of wide area high-speed wireless communication, and the monitoring data is decrypted. This can be suppressed. Therefore, according to the first embodiment, it is possible to obtain the maintenance / inspection support system 100 with high safety that can reduce the risk of the monitoring data flowing out.

Embodiment 2. FIG.
Since the overall configuration of the maintenance / inspection support system 100 according to Embodiment 2 of the present invention is the same as that of Embodiment 1 described above, FIG. The control device 1 according to the second embodiment has a function of changing the encryption key used when encrypting the monitoring data every predetermined time. That is, the decryption key 6 for decrypting the encrypted monitoring data 5 is also changed every predetermined time.

  The flow of processing by the control device 1 and the mobile terminal 2 in the second embodiment will be described using the flowchart of FIG. In FIG. 3, the same step numbers are assigned to the same processes as those in the flowchart of FIG. 2 described in the first embodiment. First, in step S <b> 10, the control device 1 reads the monitoring data to be transmitted this time from the monitoring data storage unit 13 as preparation for transmitting the monitoring data to the mobile terminal 2.

  Subsequently, in step S11, it is determined whether or not a predetermined time set in advance has elapsed since the previous encryption key change. If the predetermined time has elapsed in step S11 (YES), the process proceeds to step S12, the encryption key is changed, and the process proceeds to step S20. On the other hand, if the predetermined time has not elapsed in step S11 (NO), the process proceeds to step S20 as it is. Steps S20 to S70 are the same as those in the flowchart of FIG.

In order to further suppress the outflow of the monitoring data, the control device 1 transmits only new monitoring data to the mobile terminal 2 each time, and the mobile terminal 2 receives only the minimum necessary monitoring data for displaying the trend. It is desirable that the other decrypted monitoring data is set to be discarded. Further, when the decryption key 6 cannot be obtained, the analysis of the encryption method can be suppressed by adding a function that makes the operation of the mobile terminal 2 impossible.

  According to the second embodiment, in addition to the same effects as those of the first embodiment, the encryption key is illegally copied by changing the encryption key for encrypting the monitoring data every predetermined time. Even when the decryption key 6 is leaked to the outside, it is possible to suppress the outflow of the monitoring data within a predetermined time.

Embodiment 3 FIG.
FIG. 4 shows the overall configuration of the maintenance / inspection support system according to Embodiment 3 of the present invention. 4 that are the same as or equivalent to those in FIG. 1 are assigned the same reference numerals, and descriptions thereof are omitted. The mobile terminal 2A of the maintenance / inspection support system 101 according to the third embodiment includes an in-terminal storage 27 that is a storage unit in which the startup encrypted data 7 is stored. About another structure, it is the same as that of the maintenance inspection support system 100 which concerns on the said Embodiment 1 and Embodiment 2, and has the same function.

  The mobile terminal 2A in the third embodiment stores the activation encrypted data 7 in the in-terminal storage 27, acquires the activation decryption key 8 distributed by the short-range low-speed wireless communication base station 4, The activation decryption key 8 is activated only when the activation encrypted data 7 can be decrypted. That is, when starting up the mobile terminal 2 </ b> A, the worker needs to be within the communication range of the short-range low-speed wireless communication base station 4.

  In addition, the activation decryption key 8 acquired by the mobile terminal 2A is set to be deleted every predetermined time. Therefore, in order to use the mobile terminal 2A continuously, it is necessary to obtain the activation decryption key 8 distributed from the short-range low-speed wireless communication base station 4 at every predetermined time.

  For example, when the predetermined time is set to 1 hour, the worker who uses the mobile terminal 2A acquires the activation decryption key 8 and activates the mobile terminal 2, and again after 1 hour, the short-range low-speed wireless Unless the activation decryption key 8 distributed from the communication base station 4 is acquired, the mobile terminal 2 cannot be operated. Therefore, when using the mobile terminal 2A continuously for 1 hour or longer, the worker needs to stay in or near the communication area of the short-range low-speed wireless communication base station 4.

  According to the third embodiment, in addition to the same effects as those of the first and second embodiments, the use range of the mobile terminal 2A can be limited, and the mobile terminal 2A can be used outside the monitoring area. Can be suppressed within a predetermined time, and thus the outflow of monitoring data can be suppressed.

Embodiment 4 FIG.
FIG. 5 shows the overall configuration of a maintenance / inspection support system according to Embodiment 4 of the present invention. 5 that are the same as or equivalent to those in FIG. 1 are assigned the same reference numerals, and descriptions thereof are omitted. The maintenance / inspection support system 102 according to the fourth embodiment includes a data server 9 that transmits monitoring data acquired from the control device 1 </ b> A to the mobile terminal 2. The data server 9 has a function of holding not only monitoring data but also all terminal data transmitted to the mobile terminal 2 and distributing it to the mobile terminal 2.

  The control device 1A according to the fourth embodiment includes monitoring data storage means 13 for storing monitoring data and monitoring data transmission means 15 for transmitting monitoring data to the data server 9. The monitoring data can be transmitted from the control device 1A to the data server 9 using a general wired or wireless network such as a LAN.

  The data server 9 (for example, a Web server) includes a first wireless communication unit 91 for communicating with the wide area high-speed wireless communication base station 3 and a second wireless communication unit for communicating with the short-range low-speed wireless communication base station 4. 92. The data server 9 and the mobile terminal 2 perform wide-area high-speed wireless communication with each other via the wide-area high-speed wireless communication base station 3 and also perform short-range low-speed wireless communication with each other via the short-range low-speed wireless communication base station 4.

  The data server 9 also includes terminal data storage means 93 for storing terminal data (including monitoring data) transmitted to the mobile terminal 2, an encryption key for encrypting the terminal data, and corresponding to this. A key storage means 94 for storing the decryption key 6 and an encryption means 95 for encrypting the terminal data with the encryption key.

  In the first embodiment, the short-range low-speed wireless communication base station 4 is installed in the vicinity of the control device 1. However, in the fourth embodiment, as shown in FIG. The low-speed wireless communication base stations 4 are connected to each other via a wired network, and the mobile terminal 2 can obtain the decryption key 6 from any short-distance low-speed wireless communication base station 4.

  Next, the flow of processing by the control device 1A, the data server 9, and the mobile terminal 2 will be described. The control device 1 </ b> A transmits the monitoring data stored in the monitoring data storage unit 13 to the data server 9 by the monitoring data transmission unit 15. The data server 9 acquires monitoring data by monitoring data acquisition means (not shown) and stores it in the terminal data storage means 93.

  The encryption means 95 of the data server 9 encrypts the terminal data to be transmitted to the mobile terminal 2 with the encryption key. Subsequently, the second wireless communication means 92 of the data server 9 transmits the decryption key 6 for decrypting the encrypted terminal data 10 to the mobile terminal 2 by short-range low-speed wireless communication. Further, the first wireless communication means 91 of the data server 9 transmits the encrypted terminal data 10 to the mobile terminal 2 by wide area high speed wireless communication.

  On the other hand, the second wireless communication unit 22 of the mobile terminal 2 acquires the decryption key 6 by short-range low-speed wireless communication and stores it in the decryption key storage unit 24. Further, the first wireless communication means 21 of the mobile terminal 2 acquires the encrypted terminal data 10 by wide area high-speed wireless communication and stores it in the terminal data storage means 28. Subsequently, the mobile terminal 2 decrypts the encrypted terminal data 10 stored in the terminal data storage means 28 with the decryption key 6. Through the above processing, the worker can view necessary terminal data on the display means 26 of the mobile terminal 2.

  In the fourth embodiment, as in the second embodiment, the encryption key used when the data server 9 encrypts the terminal data may be changed every predetermined time. Similarly to the third embodiment, the mobile terminal 2A including the in-terminal storage 27 in which the startup encrypted data 7 is stored may be employed.

  According to the maintenance / inspection support system 102 according to the fourth embodiment, in addition to the same effects as those in the first to third embodiments, the terminal data transmitted to the mobile terminal 2 is collectively encrypted. Therefore, the transmission of terminal data to the mobile terminal 2 is made efficient. It should be noted that the present invention can be freely combined with each other within the scope of the invention, and each embodiment can be appropriately modified or omitted.

  The present invention can be used as a maintenance / inspection support system that supports monitoring of plant facilities and maintenance / inspection work.

1, 1A control device, 2, 2A mobile terminal, 3 wide area high speed wireless communication base station,
4 Short-range low-speed wireless communication base station 5 Encrypted monitoring data 6 Decryption key
7 Start-up encrypted data, 8 Start-up decryption key, 9 Data server,
10 encrypted terminal data, 11, 21, 91 first wireless communication means,
12, 22, 92 Second wireless communication means, 13, 23 Monitoring data storage means,
14, 94 key storage means, 15 monitoring data transmission means, 24 decryption key storage means,
25 input means, 26 display means, 27 in-terminal storage,
93 terminal data storage means, 95 encryption means,
100, 101, 102 Maintenance check support system

Claims (5)

A control device for holding monitoring data of a monitoring target facility, a mobile terminal having display means for displaying the monitoring data acquired from the control device, and a wide area wireless that mediates wide area wireless communication between the control device and the mobile terminal A maintenance inspection support system comprising a communication base station, and a short-range wireless communication base station that mediates short-range wireless communication between the control device and the mobile terminal,
The control device encrypts monitoring data to be transmitted to the mobile terminal with an encryption key, transmits the encrypted monitoring data to the mobile terminal by wide area wireless communication, and decrypts the encrypted monitoring data A maintenance / inspection support system, comprising: transmitting a decryption key for transmission to the mobile terminal by short-range wireless communication.   The maintenance / inspection support system according to claim 1, wherein the control device changes an encryption key for encrypting the monitoring data every predetermined time. A control device for holding monitoring data of the monitoring target equipment; a mobile terminal having a display means for displaying the monitoring data; a data server for acquiring monitoring data from the control device and transmitting the monitoring data to the mobile terminal; the data server; A maintenance / inspection support system comprising: a wide-area wireless communication base station that mediates wide-area wireless communication between mobile terminals; and a short-range wireless communication base station that mediates near-field wireless communication between the data server and the mobile terminal. There,
The data server encrypts monitoring data to be transmitted to the mobile terminal with an encryption key, transmits the encrypted monitoring data to the mobile terminal by wide area wireless communication, and decrypts the encrypted monitoring data A maintenance / inspection support system, comprising: transmitting a decryption key for transmission to the mobile terminal by short-range wireless communication.   4. The maintenance inspection support system according to claim 3, wherein the data server changes an encryption key for encrypting the monitoring data every predetermined time. The mobile terminal stores activation encryption data in a storage means, obtains an activation decryption key distributed by the short-range wireless communication base station, and uses the activation decryption key to obtain an activation encryption key. 5. The maintenance / inspection support system according to claim 1, wherein the maintenance / inspection support system is activated only when the encrypted data can be decrypted. 6.

Images