JP2023125538A - Analysis apparatus, analysis management system, and program - Google Patents

Abstract

To provide an analysis apparatus capable of preserving confidentiality of samples in analyzing the samples in accordance with a request for analysis from a remote place, an analysis management system, and a program.SOLUTION: An analysis apparatus includes: an acquisition unit which acquires a specific value of a first confidential level that represents confidentiality of a sample to be analyzed; a setting unit which sets, on the apparatus for analyzing the sample, a specific value of a second confidential level corresponding to the specific value of the first confidential level acquired by the acquisition unit, the second confidential level representing confidentiality of the apparatus; a functionality modification unit which modifies, when the specific value of the second confidential level set by the setting unit is equal to or higher than a threshold, functionality of the apparatus so as to restrict a part of the functionality related to display and operation; and an analysis processing unit which automatically analyzes the sample to be analyzed, under the functionality of the apparatus.SELECTED DRAWING: Figure 8

Description

The present invention relates to an analysis device, an analysis management system, and a program.

In a business format in which analysis is contracted out over a network, in order for a client to request analysis without worrying about information leakage, it is necessary to manage access to the sample itself and analysis information from the time the request is made until the receipt of the results. In particular, a high level of confidentiality is required for analyzes related to new products and product defects.

Patent Document 1 discloses that in an analysis center that has an analysis device that is remotely operated based on an external operation signal to analyze a sample and output analysis result data representing the analysis result, an analysis device is connected to the analysis device. A communication system in which a server computer used by a customer and a client computer used by a customer who wishes to analyze a sample using the analysis device are communicably connected to each other via a communication network, A method for supporting the use of the analysis device by the customer, the server computer transmitting the operation signal to the analysis device in response to receiving the operation signal from the client computer, Thereby, the first step is to operate the analysis device according to the customer's will, and in response to the input of the analysis result data from the analysis device, the server computer transfers the analysis result data to the client. A method for supporting use of an analyzer is disclosed, which includes a second step of transmitting information to a computer.

Patent Document 2 discloses a system that includes one or more analyzers that can be accessed by a plurality of users, and an approval means that is connected to each of the analyzers through a line and that can approve the results obtained by the analyzer. Disclosed is an analysis system equipped with the above-mentioned analysis device, in which the results obtained by the analysis device are approved by either the analysis device or the approval means.

Japanese Patent Application Publication No. 2002-181828 JP2012-168050A

However, because there are many on-site analysts at the analysis center where the analyzer is located, and unspecified on-site analysts can operate the analyzer, conventional remote analysis systems cannot protect the confidentiality of samples. Difficult to maintain sexuality. On the other hand, when an abnormality occurs, it is desirable to proceed with analysis efficiently while receiving support from on-site analysts.

For example, the technique described in Patent Document 1 is a technique for remotely sharing an analyzer, but Patent Document 1 does not mention a method for ensuring confidentiality of a sample.

Further, the technology described in Patent Document 2 describes a method for managing access to a device based on the authority of an analyst. With this management method, when an on-site analyst provides assistance when automatic analysis cannot be continued, authentication is performed based on the authority of the on-site analyst. Therefore, even if the on-site analyst with high authority wants to achieve high confidentiality, he or she can operate the equipment and obtain information about the sample, making it impossible to ensure the confidentiality of the sample. .

An object of the present invention is to provide an analysis device, an analysis management system, and a program that can maintain the confidentiality of a sample when analyzing the sample in response to an analysis request from a remote location.

The analyzer of the present disclosure includes an acquisition unit that acquires a specific value of a first security level representing a high degree of confidentiality of a sample to be analyzed, and a device that analyzes the sample to be analyzed to determine the confidentiality of the device. a setting unit configured to set a specific value of the second security level that is a second security level representing a height and corresponds to a specific value of the first security level acquired by the acquisition unit; If the specific value of the set second security level is equal to or higher than the threshold, a function changing unit that changes the function of the own device so as to restrict some functions related to display and operation; and an analysis processing section that automatically analyzes the sample to be analyzed under the function.

The analysis management system of the present disclosure includes a setting reception unit that receives the setting of the first security level value from the requester for the sample related to the analysis request, and a setting reception unit that receives the setting of the first security level value for the sample related to the analysis request, and an analysis management device that manages the value of the set first security level; and an analysis device of the present disclosure, wherein the acquisition unit of the analysis device is configured to A specific value of the first security level of the target sample is obtained from the database of the analysis management device.

The program of the present disclosure includes a computer, an acquisition unit that acquires a specific value of a first confidentiality level representing the level of confidentiality of a sample to be analyzed, and a device that analyzes the sample to be analyzed to determine the confidentiality of the device. a setting unit configured to set a specific value of the second security level that is a second security level representing the height of the security level and corresponds to a specific value of the first security level acquired by the acquisition unit; To function as a function changing unit that changes the function of the own device so as to restrict some functions related to display and operation when the specified value of the set second security level is equal to or higher than a threshold value. This is the program.

According to the present invention, the confidentiality of a sample can be maintained when analyzing a sample in response to an analysis request from a client located in a remote location.

1 is a schematic diagram showing an example of the configuration of an analysis management system according to an embodiment of the present invention. FIG. 1 is a block diagram showing an example of the hardware configuration of each part of the analysis management system according to the embodiment of the present invention. It is a chart showing an example of a table of analysis request information stored in a DB. FIG. 1 is a functional block diagram showing an example of the functional configuration of an analysis device according to an embodiment of the present invention. It is a flowchart which shows an example of an analysis procedure. It is a flowchart which shows an example of the flow of "sample registration processing." It is a flowchart which shows an example of the flow of "analysis processing." 2 is a flowchart illustrating an example of the flow of "analysis device function change processing." 12 is a chart showing an example of a table showing display contents of an analysis device and display availability according to the device security level. 12 is a chart showing an example of a table showing operation items of the analysis device and whether or not operations are possible according to the device security level. FIG. 3 is a schematic diagram showing an example of an operation screen of the analyzer. FIG. 7 is a schematic diagram showing another example of the operation screen of the analyzer. It is a flowchart which shows an example of the flow of "post-analysis processing." It is a flowchart which shows an example of an abnormality treatment procedure.

Hereinafter, an example of an embodiment of the present invention will be described in detail with reference to the drawings.

<Analysis management system>
First, the overall configuration of the analysis management system will be explained. The analysis management system of the present disclosure is a system that uses an analysis device to analyze a sample under the management of a server that is an analysis management device in response to an analysis request from a client located in a remote location.

FIG. 1 is a schematic diagram showing an example of the configuration of an analysis management system according to an embodiment of the present invention.
As shown in FIG. 1, the analysis management system includes a server 10 that centrally manages the entire system, an analyzer 20 that analyzes samples, a client terminal 40 used by client R, and a remote analyst RA. It is equipped with an analyst terminal 50 and a transport device 60 that transports a container V containing a sample. Note that the requester R may also correspond to the remote analyst RA.

The server 10 may be located within an analysis center or may be located on a cloud. The analysis device 20 and the transport device 60 are located within the analysis center. Each of the server 10, analysis device 20, client terminal 40, analyst terminal 50, and transport device 60 can communicate with each other via a wired or wireless network N, such as a LAN (Local Area Network) or the Internet. The information exchange, instructions, inquiries, etc. necessary for the analysis management system are performed through the network N. For example, the transport device 60 is controlled by the server 10 via the network N to transport the sample.

In this embodiment, a sample confidentiality level indicating the level of confidentiality of the sample is set for the sample. The sample confidentiality level is represented by multiple levels of values. In this embodiment, it is assumed that the level is represented by three values: low level, high level, and super high level. The server 10 receives the setting of the sample confidentiality level from the requester R, and stores and manages analysis request information including the set sample confidentiality level in a database (hereinafter abbreviated as "DB") 18.

The analysis device 20 is shared by the remote analyst RA and the local analyst LA, and is capable of remote control/observation and automatic analysis by the remote analyst RA, as well as direct operation/observation by the local analyst LA. It also supports manual analysis. Here, manual analysis is an analysis method in which analytical actions such as adjusting parameters of the analyzer 20 are performed manually while looking at analysis data, and automatic analysis is an analysis method that automates these actions.

The remote analyst RA remotely controls the transport device 60 via the server 10, grips the container V containing the sample with the sample gripping section 67, transports it to the analyzer 20, and controls the sample loading/unloading section 32 of the analyzer 20. A sample is taken out from the container V by remote control, and the sample is set in the analyzer 20 for automatic analysis. On the analyst terminal 50 of the remote analyst RA, the operation screen of the analyzer 20 is displayed in an operable manner, and various information such as the chamber interior image, analysis conditions, and measurement results are displayed. Further, the remote analyst RA may perform the analysis act (that is, manual analysis) himself via the analyst terminal 50. On the other hand, the on-site analyst LA performs sample attachment/detachment and analysis via the operation input section 26 and display section 28 provided in the analysis device 20.

The server 10 assigns an analyst in charge of analysis work to the sample. The analyst in charge may be a local analyst LA or a remote analyst RA. In this embodiment, the server 10 assigns a remote analyst RA to a sample with a high sample confidentiality level, and assigns an on-site analyst LA or a remote analyst RA to a sample with a low sample confidentiality level.

In this embodiment, the analyzer 20 is also set with a device security level corresponding to the sample security level. The functions of the analysis device 20 are changed, such as the information displayed and the contents that can be operated changed, depending on the set device security level. Specifically, when the sample security level is high, a high device security level is set, and the functions of the analyzer 20 are changed so as to limit some functions related to display and operation.

For example, if the sample confidentiality level is high, physical access (e.g., sample removal, contact, observation, etc.) by anyone other than the analyst in charge (i.e., on-site analyst LA) is prohibited in order to maintain sample confidentiality. In addition, informational access (for example, reading (information leakage) and writing (falsification) of unnecessary sample information, reading and writing of information related to analysis such as observation results and observation conditions, etc.) is prohibited.

Note that the sample is sealed in a container V. In the case of samples with a high level of confidentiality, the container V used for transportation may also be sealed so that it cannot be easily opened. The container V may be opened and closed by the sample attachment/detachment section 32. Moreover, the container V may be lockable, in which case only an operator or device with a key can unlock the container V. Further, identification information (hereinafter referred to as "ID") is given to the sample and container V, so that they can be individually identified. As described later, this information is managed by the DB 18 as analysis request information.

(Hardware configuration)
Here, the hardware configuration of each device will be explained.
FIG. 2 is a block diagram showing an example of the hardware configuration of each part of the analysis management system according to the embodiment of the present invention. As shown in FIG. 2, the server 10, the analysis device 20, the client terminal 40, and the transport device 60 are communicably connected via a network N.

-server-
The server 10 is an information processing device such as a server computer, and includes a CPU (Central Processing Unit) 12, a memory 14, a storage section 15, a communication section 16, and various databases (hereinafter abbreviated as "DB") 18. ing. The CPU 12 , the memory 14 , the storage section 15 , the communication section 16 , and various DBs 18 are connected to each other via the bus 11 so as to be able to communicate with each other.

CPU12 is a central processing unit. The memory 14 is comprised of RAM (Random Access Memory) and temporarily stores programs and data as a work area. The storage unit 15 includes a ROM (Read Only Memory), an HDD (Hard Disk Drive), an SSD (Solid State Drive), etc., and stores various programs including an operating system and various data.

The CPU 12 reads a program from the storage unit 15 and executes the program using the memory 14 as a work area. Further, the CPU 12 controls each of the above-mentioned units and performs various arithmetic processing according to a program stored in the storage unit 15.

The communication unit 16 is an interface for communicating with other devices. The various DBs 18 are databases that manage analysis request information, and manage the analysis request information separately into analysis request information before analysis and analysis request information that has been analyzed (ie, history information).

For example, as shown in FIG. 3, analysis request information can be managed in the form of a table 80. Each analysis request is given a request ID for identifying the analysis request, and each sample is given a sample ID for identifying the sample. In the table 80, a container ID for identifying a container, an analysis ID for identifying an analysis, a requester, an analyst, an analysis date and time, and a sample confidentiality level are stored in association with the request ID and sample ID. ing. Note that these management items are just examples and are not limited to these. As will be described later, analysis results and restriction functions related to the display and operation of the analysis device 20 may also be stored as analysis request information.

-Analysis equipment-
The analyzer 20 is an analyzer equipped with an information processing function, and includes a CPU 22, a memory 24, a storage section 25, an operation input section 26, a display section 28, a communication section 30, a sample attachment/detachment section 32, and an analysis processing section 34. ing. The CPU 22, the memory 24, the storage section 25, the operation input section 26, the display section 28, the communication section 30, the sample attachment/detachment section 32, and the analysis processing section 34 are connected to each other via the bus 21 so as to be able to communicate with each other. .

The CPU 22, memory 24, storage section 25, and communication section 30 are the same as the CPU 12, memory 14, storage section 15, and communication section 16 of the server 10. The CPU 22 controls each of the above sections and performs various arithmetic operations according to a program stored in the storage section 25.

The operation input unit 26 is a device for inputting various information, such as a keyboard or a switch provided on the operation panel of the analyzer. The display unit 28 is a device for displaying various information, such as a display provided on the operation panel of the analyzer. Further, by employing a touch panel display as the display section 28, which accepts operation input from an operation screen, it may also function as the operation input section 26.

The sample attachment/detachment section 32 is a device for attaching/detaching a sample to/from the analyzer 20 . The sample loading/unloading section 32 sets the sample in the analyzer 20 in a state where it can be analyzed, and after the analysis is completed, removes the sample from the analyzer 20 to make it in a state where it cannot be analyzed. The analysis processing section 34 is a device that performs an analysis operation on the set sample.

-Remote terminal-
A client terminal 40 and an analyst terminal 50 are provided as remote terminals. Since both have the same configuration, the configuration of the client terminal 40 will be explained here. Furthermore, if client R corresponds to remote analyst RA, both are the same device.

The client terminal 40 is an information processing device such as a personal computer, and includes a CPU 42, a memory 44, a storage section 45, an operation input section 46, a display section 48, and a communication section 49. The CPU 42 , the memory 44 , the storage section 45 , the operation input section 46 , the display section 48 , and the communication section 49 are connected to each other via the bus 41 so that they can communicate with each other.

The CPU 42, memory 44, storage section 45, and communication section 49 are the same as the CPU 12, memory 14, storage section 15, and communication section 16 of the server 10. The CPU 42 controls each of the above sections and performs various calculation processes.

The operation input unit 46 is a device, such as a keyboard or a mouse, for inputting various information. The display unit 48 is, for example, a device such as a display or a printer for outputting various information.

-Transport device-
The transport device 60 is a transport robot and includes a CPU 62 , a memory 64 , a storage section 65 , a transport processing section 66 , a sample gripping section 67 , a camera 68 , and a communication section 69 . The CPU 62 , the memory 64 , the storage section 65 , the transport processing section 66 , the sample gripping section 67 , the camera 68 , and the communication section 69 are connected to each other via the bus 61 so that they can communicate with each other.

The CPU 62, memory 64, storage section 65, and communication section 69 are the same as the CPU 12, memory 14, storage section 15, and communication section 16 of the server 10. The CPU 62 controls each of the above-mentioned units according to instructions from the server 10, and also performs various calculation processes.

The transport processing unit 66 is a device that performs a process of transporting a container V in which a sample is stored by autonomous running. The sample gripping section 67 is a device for gripping a sample to the analyzer. The camera 68 takes images of the surroundings of the transport device 60. Further, the camera 68 may function as a reader for reading the container ID added to the container V.

The transport processing unit 66 recognizes the container V in which the sample is stored based on the image obtained from the camera 68, grips the container V in which the sample is stored by the sample gripping unit 67, and transports the container V to the analysis device 20. At the same time, after the analysis is completed, the sample gripping section 67 grips the container V in which the sample is stored and transports it to a predetermined position.

(Analysis equipment)
Here, the functional configuration of the analyzer 20 will be explained.
FIG. 4 is a functional block diagram showing an example of the functional configuration of the analysis device 20 according to the embodiment of the present invention. As shown in FIG. 4, the analyzer 20 includes a sample confidentiality level acquisition unit 70 that acquires the sample confidentiality level (hereinafter referred to as "sample confidentiality level") from the DB 18 of the server 10, and a sample confidentiality level acquisition unit 70 that acquires the sample confidentiality level of the sample to be analyzed. A device security level setting unit 72 that sets the security level of the analyzer 20 (hereinafter referred to as “device security level”) according to the level, and changes the function of the analyzer 20 according to the set device security level. A function changing section 74 is provided. When the CPU 22 of the analyzer 20 executes a program for "analysis processing" to be described later, each functional section of the sample security level acquisition section 70, the device security level setting section 72, and the function change section 74 is realized.

<Analysis procedure>
Next, the analysis procedure will be explained. Below, a case will be described in which a remote analyst RA performs automatic analysis.

FIG. 5 is a flowchart showing an example of the analysis procedure.
Upon receiving an analysis request from the client terminal 40, the server 10 first issues a request ID and a sample ID to manage the request and the sample, and stores them in the DB 18 (ST1). Note that, as described later, the sample confidentiality level is also set here. When an analysis request is received, the analysis request is assigned to the analyst in charge. Here, it is assumed that the sample confidentiality level is high and the analysis request is assigned to the remote analyst RA.

A remote analyst RA in charge of analysis accesses the server 10 from the analyst terminal 50. When accessed from the analyst terminal 50 of the remote analyst RA, the server 10 issues an analysis ID and stores it in the DB 18 (ST2). A remote analyst RA in charge of analysis accesses the analysis device 20 using the analysis ID, acquires analysis environment data of the analysis device 20, and sends it to the server 10. The server 10 stores the analysis environment data of the analysis device 20 received from the analyst terminal 50 in the DB 18 (ST3).

The client encloses the sample to be analyzed in a container to which a sample ID and container ID are added, and sends it to the analysis center. When a sample arrives at the analysis center, for example, the transport device 60 uses a reader to read the sample ID and container ID and sends them to the server 10. The server 10 stores the time and position information of receiving the sample ID and container ID from the transport device 60 in the DB 18 in order to enable tracking of the container V containing the sample (ST4, ST5). The container V containing the sample is stored at a predetermined storage location until analysis.

When the analysis time comes, the transport device 60 transports the sample to be analyzed to the analyzer 20 (ST6). The sample attachment/detachment section 32 of the analyzer 20 opens the container V, takes out the sample, and attaches the sample to the analyzer 20 in a state where it can be analyzed (ST7). The analyzer 20 starts analysis, and the remote analyst RA observes the progress of the analysis (ST8). When the analysis is completed, the sample loading/unloading section 32 of the analyzer 20 takes out the sample from the analyzer 20 (ST9). Then, the transport device 60 transports the sample taken out to a predetermined location (ST10).

In this embodiment, the steps from ST6 to ST10 are automatically performed by the analyzer 20. Among these procedures, the procedures from ST7 to ST10 will be described in detail below as "analysis processing" and "post-analysis processing."

<Program>
Next, various programs executed by the server 10 and the analysis device 20 will be explained. Here, programs for executing each of "sample registration processing,""analysisprocessing," and "post-analysis processing" will be described. Note that the "abnormality handling" procedure may also be executed by the CPU of the server 10 or the analysis device 20.

<Sample registration process>
FIG. 6 is a flowchart showing an example of the flow of the "sample registration process." The “sample registration process” program is executed by the CPU 12 of the server 10. For example, the requester uses the browser installed on the requester terminal 40 to access the website of the analysis service provided by the server 10, and clicks a button on the initial screen (not shown) to start the analysis request. When the button is pressed, the server 10 is requested to accept the analysis request, and the "sample registration process" is started.

First, in step S100, the CPU 12 displays a registration reception screen on the client terminal 40. In subsequent step S102, the CPU 12 receives input of request information. The requester enters request information such as name and contact information (destination to send analysis results), analysis information such as the type of analysis required, analysis reservation date and time, and sample information such as sample shape and weight as request information. do.

Next, in step S104, the CPU 12 estimates the confidentiality level of the sample by referring to the client's past request history stored in the DB 18. When clients themselves set the confidentiality level of samples, they tend to select the same confidentiality level each time, depending on the client's confidence in the analysis service. For example, if "very high level" is often selected based on past request history, the confidentiality level of the sample is estimated to be "very high level", and if "low level" is often selected, then , the sensitivity level of the sample is estimated to be "low level".

Next, in step S106, the CPU 12 displays a setting screen for setting the sample confidentiality level on the client terminal 40, and accepts the setting of the sample confidentiality level. The setting screen displays options for selecting one of multiple values for the sample confidentiality level (low level, high level, super high level). For example, the option representing the sample confidentiality level estimated in step S104 may be highlighted as the recommended confidentiality level. The requester may select the recommended confidentiality level or may select another confidentiality level.

By presenting a recommended confidentiality level based on request trends obtained from the requester's historical information, the requester can check whether it is the same or different from the intended sample confidentiality level when selecting a sample confidentiality level. and the sample confidentiality level can be set without fail.

Next, in step S108, the CPU 12 issues a request ID and a sample ID. Next, in step S110, the CPU 12 associates the input request information (for example, client information, analysis information, sample information), sample ID, and set sample confidentiality level with the request ID as analysis request information, and stores it in the DB 12. Register. Next, in step S112, the CPU 12 displays a registration completion screen on the client terminal 40, and ends the routine.

<Analysis processing>
FIG. 7 is a flowchart showing an example of the flow of "analysis processing".
The “analysis processing” program is executed by the CPU 22 of the analysis device 20. At a predetermined time (for example, several minutes to several tens of minutes before the scheduled analysis date and time) for a specific analysis request, the server 10 specifies the sample ID and container ID and sends the sample to be analyzed (hereinafter referred to as , referred to as the "target sample").

The transport device 60 identifies a container V enclosing a sample whose sample ID and container ID match from a predetermined storage location, grips it in a sample gripping section 67, and transports it to the analyzer 20. The CPU 22 of the analyzer 20 starts "analysis processing" when the arrival of the sample to be analyzed is detected based on the sample ID and container ID.

First, in step S200, when the target sample arrives, the CPU 22 instructs the sample attachment/detachment section 32 to set the target sample. The sample attachment/detachment section 32 sets the target sample in a state ready for analysis in accordance with instructions. Next, in step S202, the CPU 22 acquires the security level of the target sample from the DB 18.

Next, in step S204, the CPU 22 executes "analyzer function change processing". Simply put, in the "analyzer function change process", a device security level is set according to the sample security level set by the client, and the function of the analyzer 20 is changed according to the set device security level. . For example, some display items may be hidden, sample removal operations may be prohibited, and operation input may be prohibited.

Finally, in step S206, the CPU 22 instructs the analysis processing unit 34 to perform analysis operations (eg, various measurement processes), and ends the routine. If the sample security level and the device security level are high, the analysis operation is performed in confidential mode. For example, due to a function change, a part of the display is erased from the display unit 28, and the analysis operation is executed by the analysis processing unit 34 in a state where various operations by the operation input unit 26 are disabled.

(Analyzer function change processing)
Here, the "analysis device function change process" will be described in detail with reference to FIG.
First, in step S300, the CPU 22 sets an apparatus security level based on the sample security level of the acquired target sample. For example, if the sample security level is expressed in three levels: low level, high level, and ultra-high level, the device security level will also be expressed in three levels, low level, high level, and ultra-high level, depending on the sample confidentiality level. It is expressed as the value of Next, in step S302, the CPU 22 obtains a default function change according to the device security level.

Next, in step S304, the CPU 22 displays the default function change to the remote analyst RA and accepts the modification. That is, it is possible to customize the default function change according to the device security level. Furthermore, customization of default function changes may be suggested based on history information involving the requester R, remote analyst RA, or local analyst LA, or default function changes may be automatically customized. Since it is assumed that support from local analysts will be required in the event of an abnormality, some functions can be left unchanged through customization.

It should be noted that acceptance of modifications to the default function change may be performed via the server 10, for example, at the time of sample registration.

Next, in step S306, the CPU 22 changes the function of the analyzer 20 to reflect the modification to the default function change, and ends the routine.

Function changes of the analyzer 20 can be broadly divided into function changes that limit the information displayed on the display section 28 of the analyzer 20, and function changes that limit operations via the operation input section 26 of the analyzer 20. There is. Due to these restrictions, for a sample with a high sample confidentiality level, physical access and informational access from anyone other than the remote analyst RA is prohibited, and the confidentiality of the sample is maintained.

Functional changes that limit displayed information include, for example, items displayed on the display unit 28 when the device security level is high (e.g., the status of the analyzer, information regarding the sample, information related to analysis, and analysis results). Changes such as not displaying part or all of the image (for example, filling it with black or gray, applying a mosaic), or displaying other information on the display section 28 (for example, dummy video, dummy data, snow noise, etc.) are possible. Can be mentioned. When displaying irrelevant information such as a dummy image, there is an advantage that the confidentiality of the sample can be maintained without being noticed by the on-site analyst.

Functional changes that restrict operations include, for example, when the device security level is high, prohibiting operations that change the state of the analyzer 20, prohibiting operations related to attaching and detaching a sample, prohibiting operations related to observing a sample, and prohibiting operations related to display contents. Examples include prohibiting operations, turning off the display device, closing the sample observation window, and cutting off all operational input.

The higher the device security level, the less information is displayed and the fewer items can be operated. For example, some or all of the exemplified function change items may be set as "default function change", and exclusion items may be specified as appropriate through the above-described customization. Note that changing the functions of the analyzer 20 does not involve rewriting the operation manual for the analyzer 20, so it is necessary to follow the procedures stipulated in the manual for operable items as well.

(Specific example of functional change)
Using scanning electron microscope (SEM) analysis as an example, an example of changing functions depending on the device security level will be explained. FIG. 9 is a chart showing an example of a table showing display contents of the analysis device and whether or not display is possible according to the device security level. The device security level is expressed in three levels: low level, high level, and extremely high level. In the figure, the low level is abbreviated as "low," the high level as "high," and the very high level as "high+." Regarding the operation screen of the analyzer, please refer to the operation screen 82 shown in FIG. 11 and the operation screen 84 shown in FIG. 12.

Items that indicate the status of the analyzer include an indicator that indicates the operating status, an indicator that indicates the on/off status of the electron beam (see Figure 12), an indicator that indicates whether the sample is in the analyzer, and the operation of the instrument. Numerical values related to the state (for example, the degree of vacuum of each part, etc., see FIG. 11) are illustrated. In this example, the display of numerical values related to the operating status of the apparatus regarding the sample is prohibited only when the apparatus security level is extremely high. These numerical values are set depending on the sample and may reflect the characteristics of the sample, so it is preferable to hide them.

Examples of items representing information regarding the sample include a sample identifier and a sample chamber interior image (see FIG. 11). In this example, when the device security level is high, only the display of the sample chamber image is prohibited, and when the device security level is extremely high, the display of both the sample identifier and the sample chamber image is prohibited. Since the external appearance of the sample can be seen from the sample chamber image, it is preferable to hide the sample chamber image. Furthermore, by hiding the sample identifier, the sample can be anonymized.

Examples of items representing information related to analysis (i.e., analysis conditions, parameter groups set to obtain analysis results, see Figure 12) include items that do not depend on the sample, such as stage position, and items that depend on the sample, such as accelerating voltage. ing. In this example, when the device security level is high, only the display of the sample-dependent accelerating voltage is prohibited, and when the device security level is very high, both the sample-dependent accelerating voltage and the sample-independent stage position are prohibited. Display is prohibited. Sample-dependent information is more preferably hidden than sample-independent information.

Items representing analysis results include the progress of the analysis (for example, the number of images taken and expected completion time), measurement results (for example, SEM images (see Figure 12), energy dispersive X-ray spectroscopy (EDS) images, etc.) (information obtained through analysis) is exemplified. In this example, when the device security level is high, only the display of measurement results is prohibited, and when the device security level is very high, the display of both measurement results and analysis progress is prohibited. Sample analysis results are highly confidential information and are preferably hidden. It is not desirable to display measurement results even if the device security level is low.

FIG. 10 is a chart showing an example of a table showing operation items of the analysis device and whether or not operations are possible according to the device security level. The device security level is expressed in three levels: low level, high level, and extremely high level.

Examples of operations for changing the state of the analyzer 20 include changing the operating state, turning on/off the electron beam, and setting the degree of vacuum. Examples of operations related to attaching and detaching a sample include setting a sample and taking out a sample. Examples of operations related to sample observation include setting observation conditions (eg, accelerating voltage, working distance), and moving the stage. As an example of an operation related to display contents, changing display items is exemplified. In this example, all these operations are prohibited when the device security level is high level and very high level.

<Post-analysis processing>
FIG. 13 is a flowchart showing an example of the flow of "post-analysis processing". The 20 CPUs 22 of the analyzer start "post-analysis processing" when the analysis operation by the analysis processing section 34 is completed.

First, in step S220, the CPU 22 instructs the sample attachment/detachment section 32 to take out the target sample. The sample attachment/detachment section 32 takes out the target sample and makes it unanalyzable. The sample attachment/detachment section 32 may re-enclose the sample in the container V if the sample needs to be returned.

Next, in step S222, the CPU 22 cancels the setting of the device security level. By canceling the setting of the device security level, the analysis device 20 is initialized and the changed functions are restored. Finally, in step S224, the CPU 22 transmits the analysis results to the client terminal 40, the analyst terminal 50, or the server 10, and ends the routine.

Note that when the analysis results are transmitted to the server 10, the server 10 stores the analysis results in the DB 18 and reports the analysis results to the client R. Further, when the analysis result is transmitted to the analyst terminal 50, the analysis result is reported to the client R from the remote analyst RA.

Further, the sample taken out is stored in a container V and transported by a transport device 60. In this case, when the analyzer 20 notifies the server 10 of the completion of the analysis, the server 10 specifies the sample ID and container ID and instructs the transport device 60 to transport the target sample. The analyzer 20 authenticates the transport device 60 using the sample ID and container ID, and permits transport of the target sample. The transport device 60 grips the target sample using a sample gripping section 67 and transports it to a predetermined location.

<Abnormal treatment>
If an abnormality occurs during automatic analysis of a sample and automatic analysis cannot be continued, support from a local analyst is required from the standpoint of efficiency of automatic analysis. Here, cases in which automatic analysis cannot be continued include cases in which the results obtained by the analyzer are not desirable results, or cases in which some kind of operation is required in response to an abnormality detected by the apparatus. For example, in the case of SEM analysis, this may be the case where an unclear image is obtained due to improper setting of observation conditions, or the case where the parameters of the electron beam exceed a permissible threshold.

Samples with a low sample confidentiality level can be handled by on-site analysts. For samples with a high sample security level, temporarily lower the device security level below the sample security level to allow on-site analysts to work on the sample. The client or remote analyst may decide whether or not to lower the device security level and to what level the device security level should be lowered, taking into account the details of the abnormality, sample confidentiality, efficiency, etc. However, the determination may be made automatically by the server 10 or the analysis device 20.

The procedure for troubleshooting is briefly shown below.
FIG. 14 is a flowchart showing an example of an abnormality treatment procedure.
As shown in FIG. 14, when the occurrence of an abnormality is detected (step S400), it is determined whether the sample confidentiality level is low (step S402). If the sample confidentiality level is low, the process advances to step S412. If the sample confidentiality level is high or extremely high, the remote analyst RA is notified of the occurrence of an abnormality (step S404).

Next, it is determined whether treatment by the local analyst LA is possible (step S406). If it is difficult for the local analyst LA to take action, the remote analyst RA, who is the analyst in charge, remotely takes care of the abnormality (step S408), and when the abnormality action is completed, the remote analyst RA notifies the user that the abnormality action has been completed. (Step S410), and automatic analysis is restarted (Step S422).

On the other hand, if the local analyst LA can take action, the above-described device security level is reset, and the device security level is set to a low level (step S418). If the sample security level is determined to be low in step S402 and if the device security level is reset to low in step S418, then the local analyst LA is requested to take abnormality measures (step S412). The local analyst LA performs abnormality treatment (step S414).

When the abnormality treatment is completed, the local analyst LA notifies the user that the abnormality treatment has been completed (step S416). After the abnormality treatment is completed, the device security level is reset again, the device security level is returned to a high level or an extremely high level (step S420), and automatic analysis is restarted (step S422).

The above abnormality handling procedure may be executed by the CPU of the server 10 or the analysis device 20. In this case, the client or remote analyst may decide whether or not the on-site analyst LA can take action, that is, whether or not to lower the security level of the device, or the server 10 or the analysis device 20 may make the determination automatically.

For example, when the sample confidentiality level is high or extremely high, the server 10 or the analyzer 20 estimates the reliability of the local analyst from historical information, and estimates that the reliability of the local analyst is higher than a predetermined threshold. If the reliability of the on-site analyst is below the threshold, the device security level will be lowered to a low level, but if the reliability of the on-site analyst is below the threshold, the device security level will be maintained at a high or ultra-high level, giving priority to maintaining sample confidentiality. You can also do this. For example, if the local analyst is a person affiliated with a competitor, the reliability of the local analyst is low and the device confidentiality level is maintained at a high or very high level.

As described above, in this embodiment, a confidentiality level is set for the sample, and when the sample confidentiality level is high, physical access and informational access to the analyzer 20 is restricted during sample analysis. Confidentiality can be maintained. For example, even if the local analyst LA has high authority, operation of the analysis device 20 and access to sample information are restricted. On the other hand, since only "some" functions related to display and operation are limited and the remaining functions are maintained, the operational status of the analyzer 20 can be grasped from the outside.

In addition, in this embodiment, a recommended sample confidentiality level is proposed based on historical information, so when selecting a sample confidentiality level, the requester can check whether it is the same as or different from the intended sample confidentiality level. The sample confidentiality level can be set without any errors.

Further, in this embodiment, default function changes are prepared in advance according to the device security level, but since the default function changes can be customized, it is possible to flexibly set the functions to be restricted.

Furthermore, in this embodiment, if an abnormality occurs during automatic analysis, the security level of the device is lowered and support from the local analyst can be received, completely eliminating the involvement of the local analyst. The efficiency of automatic analysis can be improved compared to the case where In other words, it is possible to achieve both analysis efficiency and confidentiality.

<Modified example>
Note that the configurations of the analysis device, analysis management system, and program described in each of the above embodiments are merely examples, and it goes without saying that changes may be made without departing from the spirit of the present invention.

For example, in the above embodiment, when the sample confidentiality level is expressed in three levels: low level, high level, and ultra-high level, the device confidentiality level is also expressed as low level, high level, and ultra-high level according to the sample confidentiality level. Although it is assumed that the level is expressed in three stages, this correspondence relationship is just an example. The device security level may be determined from the sample security level based on a predetermined correspondence between each sample security level and each device security level.

Furthermore, it is only an example that the security level is divided into several levels, and the device security level may be set to two levels, low level and high level. In this case, the correspondence between the three sample security levels and the two device security levels is determined in advance.

Further, in the above embodiment, the analysis device 20 side executes the “analysis processing” and “post-analysis processing,” but the analysis device 20 executes only the analysis operation, and the server 10 side executes the “analysis processing” and “post-analysis processing.” ” and “post-analysis processing.” In this case, the analysis device 20 changes its functions according to instructions from the server 10.

10 Server 18 DB
20 Analyzer 26 Operation input section 28 Display section 32 Sample attachment/detachment section 34 Analysis processing section 40 Client terminal 50 Analyst terminal 60 Transport device 70 Sample confidentiality level acquisition section 72 Device confidentiality level setting section 74 Function change section 80 Table 82 Operation screen 84 Operation screen LA Local analyst N Network R Client RA Remote analyst

Claims (12)

an acquisition unit that acquires a specific value of a first confidentiality level indicating a high degree of confidentiality of the sample to be analyzed;
With respect to the own device that analyzes the sample to be analyzed, the second security level is a second security level representing a high level of security of the device and corresponds to a specific value of the first security level acquired by the acquisition unit. a setting section for setting a specific value of the confidentiality level;
a function changing unit that changes the function of the own device so as to restrict some functions related to display and operation when the specific value of the second security level set by the setting unit is equal to or higher than a threshold; ,
an analysis processing unit that analyzes the sample to be analyzed under the function of its own device;
An analysis device equipped with. 1 . The function change unit performs at least one of a function change that hides part of the information displayed on the display unit and a function change that prohibits a part of the operation via the operation input unit. Analyzer described in . The function change that hides part of the information displayed on the display section displays some or all of the display items, including the status of the own device, information about the sample to be analyzed, information related to analysis, and analysis results. The analyzer according to claim 2, wherein the analyzer does not. The function change that hides part of the information displayed on the display section may be performed by displaying part or all of information unrelated to the analysis target sample, including dummy images, dummy data, and snow noise. The analysis device according to claim 2. The function change that prohibits some of the operations via the operation input section includes prohibition of operations that change the state of the own device, prohibition of operations related to attachment and detachment of the sample to be analyzed, prohibition of operations related to observation of the sample to be analyzed, and display. Any one of claims 2 to 4, which is one or more selected from the group consisting of prohibiting operations related to content, turning off the display unit, closing the sample observation window, and blocking all operation inputs. The analysis device according to item 1. The analysis device according to any one of claims 1 to 5, wherein the function restricted by the function changing unit is a function predetermined for the value of the second security level. The analysis device according to claim 6, wherein the predetermined function is customizable. The setting unit is configured to set the specific number of the first security level acquired by the acquisition unit based on a predetermined correspondence relationship between the plurality of values of the first security level and the plurality of values of the second security level. The analysis device according to any one of claims 1 to 7, for determining a specific value of the second security level corresponding to a value. 1 . The setting unit changes the specific value of the second security level to a lower value and resets the changed value when an abnormality occurs in the own device during automatic analysis. The analysis device according to any one of claims 1 to 9. a setting reception unit that receives the setting of the first security level value from the requester for the sample related to the analysis request; and a database that stores the set first security level value in association with identification information of the sample related to the analysis request. an analysis management device that manages the value of the set first security level;
The analysis device according to any one of claims 1 to 9,
Equipped with
The acquisition unit of the analysis device acquires a specific value of the first security level of the sample to be analyzed from the database of the analysis management device.
Analysis management system. History information of analysis requests is stored in the database of the analysis management device,
The analysis management device further includes an estimation unit that estimates the value of the first confidentiality level of the sample based on the request tendency obtained from the history information of the client,
The setting reception unit displays the plurality of values of the first security level as options and receives the setting of the value of the first security level from the client, the first security level estimated by the estimation unit. Highlight sensitivity level values,
The analysis management system according to claim 10. computer,
an acquisition unit that acquires a specific value of a first confidentiality level indicating the degree of confidentiality of the sample to be analyzed;
With respect to the own device that analyzes the sample to be analyzed, the second security level is a second security level representing a high level of security of the device and corresponds to a specific value of the first security level acquired by the acquisition unit. a configuration part for setting a specific value of the confidentiality level;
a function changing unit that changes the function of the own device so as to restrict some functions related to display and operation when the specific value of the second security level set by the setting unit is equal to or higher than a threshold;
A program to function as