JP4748326B2 - Distributed control system - Google Patents

Description

  The present invention is configured by distributing a plurality of control devices such as a programmable controller (hereinafter referred to as “PLC”) and a remote I / O terminal of a PLC and connecting them via a field network. The present invention relates to a distributed control system.

  2. Description of the Related Art A distributed control system configured by distributing a plurality of control devices such as PLCs and PLC remote I / O terminals and connecting them via a field network is conventionally known.

  This type of distributed control system, especially a distributed control system that requires a high degree of reliability (for example, a distributed control system including a safety PLC that satisfies IEC61508 and EN standards, a safety remote I / O terminal, a safety controller, etc.) ), When an operation mode change request with a password is received via the field network, each of a plurality of control devices and the password set in the operation mode change request and the self-set password are set. A process for executing the operation mode change specified by the operation mode change request is provided on the condition of matching with the above.

  Here, as the “type of operation mode change”, for example, when the control device for which the operation mode is to be changed is a PLC, a change to the program operation mode, a change to the program stop mode, a configuration lock ( Changes to configuration data change rejection) mode, changes to configuration unlock (configuration data change permission) mode, changes to reset mode, and the like.

  Then, in a tool device (generally configured by installing a predetermined tool software in a personal computer) connected directly to the field network or indirectly via a PLC, a predetermined operation with a password input is performed, By sending out an operation mode change request (frame) with a password and type designation on the network, the operation mode change of the designated type in the control device that is the destination of the operation mode change request can be performed remotely. ing.

As a prior art somewhat related to the present invention, a system for verifying a configuration in a safety unit such as a safety controller or a remote safety terminal is conventionally known (for example, see Patent Document 1).
JP 2006-302229 A

  However, in such an operation mode changing method via the conventional tool device, the tool software installed on the personal computer is used. It is necessary to become familiar with complicated operation procedures such as "Starting tool software" and "Execution of necessary commands", and it is difficult for field workers to respond immediately unless they receive sufficient education. There is a problem that it is easy to make mistakes.

  In addition, in order to send the necessary operation mode change request to the fieldbus, it is necessary to input the password of the control device to which the operation mode change request is sent from the personal computer. Even when applied to safety applications that do not like mode change, it is necessary to disclose the password that should be kept secret to the field worker in order to entrust the operation to the field worker, which is not preferable for system management. There is also a problem that said.

The present invention has been made paying attention to the above-mentioned problems, and the object of the present invention is that a field worker does not use a tool device in which tool software is installed on a personal computer and uses a receiving station. The operation mode of one or more control devices that are positioned as, and without making the on- site worker aware of the authority information such as passwords set for each of these control devices, without fail and without error The object is to provide a distributed control system that can be collectively changed by operation.

  Other objects and operational effects of the present invention will be easily understood by those skilled in the art by referring to the following description of the specification.

  It is considered that the above technical problem can be solved by a distributed control system having the following configuration.

  That is, the distributed control system is configured by distributing a plurality of control devices such as PLCs and PLC remote I / O terminals and connecting them via a field network.

  When each of the plurality of control devices receives an operation mode change request with a password via the field network, the password assigned to the operation mode change request is collated with the password set in itself. There is a process for executing the operation mode change specified by the operation mode change request on the condition of coincidence.

  As a result, in the tool device connected directly or indirectly to the field network, a predetermined operation with password input is performed, and an operation mode change request including a password designation and type designation is sent to the field network, whereby the operation mode is set. The operation mode change of the specified type of the control device that is the transmission destination of the change request can be executed by remote operation.

  At least one of the control devices is positioned as a transmission station for the operation mode change request, and the other control devices are positioned as reception stations for the operation mode change request.

  The control device positioned as the transmitting station is provided with “authorization information storage means” and “operation mode change request transmission means” having the following specific functional configuration.

  That is, the “authorization information storage unit” stores the operation mode change authority information corresponding to each of one or more receiving stations that need to change the operation mode.

  The “operation mode change request transmitting means” generates an operation mode change request including the type designation in response to the operation mode change command including the predetermined type designation, and includes the type designation thus generated. In response to an operation mode change request, a password included in the authority information for changing the operation mode of each receiving station stored in the authority information storage means is automatically added to each receiving station to the field network. Execute the sending action.

  According to such a configuration, it is necessary to change the operation mode without any authority information input operation by giving an operation mode change command including type designation to the control device serving as the transmission station. Because it is possible to execute a specified type of operation mode change in each of the one or more receiving stations in a batch by remote operation, without using a tool device that has tool software installed on a personal computer, In addition, the operating mode of one or more control devices positioned as receiving stations can be used without causing the operator, such as the operator, to be aware of the authority information such as passwords set for each of the control devices. It is possible to make a batch change by remote operation reliably and without error.

  At this time, as the authority information storage means, a memory card that can be detachably attached to a control device positioned as a transmission station, a handy tool that is cable-connected to a control device positioned as a transmission station If a removable memory card or a non-volatile memory element that can be removably mounted on a circuit board with a built-in control device positioned as a transmitting station is adopted, the memory card or the non-volatile memory element can be used. As long as it is removed, no password will be attached to the generated operation mode change request even if an operation mode change command including type designation is given to the control device serving as the transmitting station. By storing memory cards and non-volatile memory elements on the administrator's side, it is possible to ensure that inadvertent operation mode change processing is performed by field workers. It is possible to avoid.

  Further, prior to the operation mode change request transmission operation, the operation mode change request transmission means acquires a device type from a control device as a transmission destination, and the device type included in the authority information includes the acquired device type. When the two match, the operation mode change request transmission operation for the control device is executed. When the two do not match, the operation mode change request transmission operation for the control device is skipped. If the control device for which the operation mode is to be changed is replaced with another device for some reason, it will be found prior to sending the operation mode change request with password. It is not confirmed that an operation mode change command is sent to such a control device that has been mistakenly replaced. It is possible to prevent the.

  In addition, as a condition for generating an operation mode change command including the type designation, the operation of a predetermined switch provided in the control device serving as the transmission station, the addressing to the control device serving as the transmission station Examples include receiving a predetermined command via a field network, performing a predetermined operation in a tool device connected to a control device serving as the transmission station, and the like.

  Further, if each control device serving as the receiving station is provided with a notification means for notifying the execution status of the operation mode changing operation including type designation to the control device serving as the transmitting station, the operation mode In the control device of each receiving station scheduled to be changed, it can be confirmed in the control device of the transmitting station whether or not the scheduled operation mode change processing has been performed correctly.

  Furthermore, the type of operation mode change includes a change to program operation mode, a change to program stop mode, a change to configuration lock mode, a change to configuration unlock mode, or a change to reset mode. It may be included.

  According to this invention, the operation mode change is required without any authority information input operation by giving an operation mode change instruction including type designation to the control device serving as the transmission station. Because it is possible to execute a specified type of operation mode change in each of one or more receiving stations by remote operation, it can be received without using a tool device that has tool software installed on a personal computer. The operation mode of one or more control devices positioned as a station can be confirmed without making the on-site operator, who is the operator, aware of the authority information such as passwords set for each control device. In addition, it is possible to make a batch change by remote operation without error.

  Hereinafter, a preferred embodiment of a distributed control system according to the present invention will be described in detail with reference to the accompanying drawings.

  A system configuration diagram showing an example of a distributed control system to which the present invention is applied is shown in FIG. A distributed control system to which the present invention is applied is configured by distributing a plurality of control devices such as PLCs and PLC remote I / O terminals and connecting them via a field network. In the illustrated example, two PLCs 1 a and 1 b and four remote I / O terminals 2 a to 2 d are connected by a field network (hereinafter simply referred to as “network”) 3. Each of the PLCs 1a and 1b is configured as a building block type PLC in this example, and includes a CPU unit 10, a communication unit 11, and two I / O units 12 and 12, respectively. Yes.

  As is well known to those skilled in the art, the CPU unit 10 of the PLC includes a user program memory for storing a user program, and a system program memory for storing a system program for realizing a function as a PLC. In addition, an I / O memory for storing input / output data, a system setting memory for storing various system settings, and the like are provided.

  Further, the system program reads I / O memory output data and sends it to the I / O unit 12, I / O refresh processing that reads the input data of the I / O unit 12 and writes it to the I / O memory, A user program is executed by referring to input / output data of the I / O memory, and a user program execution process for rewriting the contents of the I / O memory by the execution result, acceptance of a user operation, transmission of a display signal, a tool device, And peripheral service processing for performing communication with a remote I / O terminal.

  In this peripheral service processing, by appropriately communicating with the remote I / O terminals 2a to 2d via the communication unit 11, transmission of output data to the remote I / O terminal and input data from the remote I / O terminal are performed. And so on. Further, by communicating with a tool device (not shown) connected to the network 3, various known peripheral service processes such as a user program rewrite process, an edit process, and a monitor process are realized.

  In addition, in each of the PLCs 1a and 1b and the remote I / O terminals 2a to 2d constituting the control device, when an operation mode change request frame transmitted from the tool device (not shown) to the network 3 is received, the operation is performed. A function is provided for executing the operation mode change designated by the operation mode change request on condition that the password assigned to the mode change request matches the password set in the self.

Here, the term "type of operation mode change" is, for example in the case of a PLC, change to the mode of operation of the program, changes to the pro-gram of the stop mode, (change denial of configuration data) configuration lock It means a change to a mode, a change to a configuration unlock (configuration data change permission) mode, a change to a reset mode, or the like.

  In the present invention, the operation mode can be changed without the presence of a tool device in which tool software is installed on a personal computer and without a password input operation. At least one of the devices is positioned as a transmission station for the operation mode change request, and other control devices are positioned as reception stations. The control device positioned as the transmission station includes “authorization information storage means” and “ An operation mode change request transmission unit ”is provided.

  Here, the authority information storage means stores the operation mode change authority information in series corresponding to each of one or two or more receiving stations that need to change the operation mode.

  The operation mode change request transmitting means generates an operation mode change request including the type designation in response to the operation mode change command including the predetermined type designation, and includes the type designation thus generated. In response to an operation mode change request, a password included in the authority information for changing the operation mode of each receiving station stored in the authority information storage means is automatically added to each receiving station to the field network. It is comprised so that the operation | movement to send out may be performed.

  In the example of FIG. 1, the PLC 1a is positioned as an operation mode change request transmitting station, and the other PLC 1b and the four remote I / O terminals 2a to 2d are positioned as operation mode change request receiving stations.

  The PLC 1a holds the above-described operation mode change authority information. Various methods are conceivable for causing the PLC 1a to hold the operation mode change authority information.

  In the example shown in FIG. 2, the card slot 10c is provided on the CPU unit 10 side, while the memory card 4 inserted in the card slot 10 stores the operation mode change authority information 4a in advance. By attaching the card 4 to the card slot 10c, the CPU unit 10 is made to hold the authority information for changing the operation mode.

  In the example of FIG. 3, the connector 10 c is provided on the CPU unit 10 side, and the handy tool 5 is connected to the connector 10 c via a cable to change the operation mode with respect to the card slot 5 a provided in the handy tool 5. By mounting the memory card 4 in which the authority information 4a is stored, the CPU unit 10 can hold the frame configuration data.

  In the example of FIG. 4, a nonvolatile memory 6 composed of a package memory is provided on a circuit board in the CPU unit 10 in a fixed or detachable manner. By writing the authority information for changing the operation mode using the tool device at another location, it is possible to cause the CPU unit 10 to hold the frame configuration data.

  As described above, when the control device positioned as the transmission station for the operation mode change request is a PLC, various configurations can be adopted as a method for holding the operation mode change authority information. In the following description, it is assumed that the operation mode change authority information is held by the method shown in FIG.

  1 to 4, reference numeral 10-1 denotes various operation mode changes (for example, a change to a program operation mode, a change to a program stop mode, a configuration lock (configuration data change rejection) mode. Is an operation mode change instruction switch for instructing change to configuration, configuration unlock (change permission to change configuration data) mode, or change to reset mode. Can be configured. Reference numeral 10-2 denotes an operation mode change target changeover switch for switching the operation mode change target between the own device and the entire network. The operation of these switches will be described in detail later with reference to a flowchart.

  As is well known to those skilled in the art, a hardware block diagram of the CPU unit 10 and the communication unit 11 is shown in FIG. 5 just in case. As shown in the figure, in the CPU unit 10, a memory card interface 1001, a nonvolatile memory 1002, a RAM 1003, an MPU block 1004, a bus control unit 1008, a display unit 1005, a setting unit 1006, and a USB interface 1007 are provided. It has been.

  The memory card interface 1001 corresponds to the card slot 10c described above. The nonvolatile memory 1002 is a general term for a system program memory, a user program memory, an I / O memory, a system setting memory, and the like. The “operation mode change authority information” noted in the present invention is the nonvolatile memory 1002. Mainly stored. The RAM 1003 is used as a work area. The MPU block 1004 includes an MPU and an ASIC, and operates according to the system program read from the nonvolatile memory 1002, thereby realizing the functions of the IO refresh processing, user program execution processing, and peripheral service processing described above. To do. The bus control unit 1008 manages data exchange with the communication unit 11. A display unit 1005 controls the operation of a display lamp and a numerical display (not shown) provided on the outer surface of the CPU unit. The setting unit 1006 is used for various setting operations, and in connection with the present invention, the operation mode change instruction switch 10-1 and the operation mode change target changeover switch 10-2 described above are included. Yes. The USB interface 1007 is provided for connecting a USB cable to the CPU.

  On the other hand, the communication unit 11 includes a nonvolatile memory 1101, a RAM 1102, an MPU block 1103, a bus control unit 1107, a display unit 1104, a setting unit 1105, and a communication physical layer 1106.

  The nonvolatile memory 1101 stores a system program or the like for realizing a function as a communication unit. The RAM 1102 functions as a work area. The MPU block 1103 implements a function as a communication unit by reading and executing various system programs from the nonvolatile memory 1101. The bus control unit 1107 is used for data exchange with the CPU unit 10. The display unit 1104 is used for display control of various lamps provided on the outer surface of the communication unit 11. The setting unit 1105 includes, for example, a DIP switch and is used for setting a node address and a communication speed. The communication physical layer 1106 is provided for realizing communication operation with other control devices (PLC, remote I / O terminal, etc.) via the network 3.

  A system program for realizing processing described later with reference to the flowcharts of FIGS. 8 to 11 and FIG. 14 is stored in the nonvolatile memory 1002 in the CPU unit 10 and executed by the MPU block 1004.

  Next, a hardware block diagram of the remote I / O terminal 2 is shown in FIG. As shown in the figure, the remote I / O terminal 2 is provided with an I / O circuit 201, an MPU block 202, a communication physical layer 203, a nonvolatile memory 204, a display unit 205, and a setting unit 206, respectively. Yes.

  The I / O circuit 201 is used for capturing an input signal from an external terminal block and sending an output signal to the external terminal block. The MPU block 202 performs overall control of the entire remote I / O terminal, and implements various functions necessary as a remote I / O terminal by executing a system program stored in the nonvolatile memory 204. The communication physical layer 203 is connected to the network 3 and is used for transmission / reception of input / output data to / from an upper PLC. As described above, the nonvolatile memory 204 stores a system program and is also used as a buffer area for input data fetched from the I / O circuit 201 and output data to be output to the I / O circuit 201. Is done. The display unit 205 is used for display control of a lamp or the like provided on the outer surface of the remote I / O terminal. The setting unit 206 includes, for example, a DIP switch or the like, and is used for setting the node address and communication speed of the remote I / O terminal.

  Next, the data structure of “operation mode change authority information” stored in the memory card 4 (see FIGS. 2 and 3) or the nonvolatile memory 6 (see FIG. 4) will be described with reference to FIG.

  In other words, the “operation mode change authority information” means that the operation mode of the control device (in the case of FIG. 1, PLC 1b, four remote I / O terminals 2a to 2d) positioned as a receiving station is remotely controlled. When changing all at once, the operation mode change request frame sent out on the network 3 from the control device (PLC 1a in the case of FIG. 1) assigned as the source station was issued by a person having a legitimate authority. This means information provided for authentication.

  This operation mode change authority information basically includes a node address, a device type, and a password. Then, in the memory card 4 (see FIGS. 2 and 3) or the non-volatile memory 6 (see FIG. 4) functioning as the storage means for the operation mode change authority information, as shown in FIG. A storage area is provided for each control device, and the above-described operation mode change authority information is stored in these storage areas.

  Note that at the end of the series of operation mode change authority information, a check code (for example, a redundancy check code, a hash code, a check code, etc.) is used to confirm the reliability of the data stored in the memory card 4 or the nonvolatile memory 6. Signature code) is stored.

  Here, the “node address” is an address for uniquely specifying the control device on the network. The operation mode change request frame is transmitted to this node address. Further, as will be described later, when the operation mode change target is “entire network” and the operation mode is changed for the own device, it is recognized by this node address that the operation mode change target is the own device. .

  The “device type” is a code representing the type of control device. For example, it is configured by the type of equipment such as general-purpose discrete I / O, communication adapter, safety network controller, safety discrete I / O, manufacturer, product code, and the like.

  The “password” is a code determined by the creator of the setting information. For example, if this password is set in a hierarchical structure according to the level of the administrator, the operation mode change process itself is not activated. Although it is left to the worker, it is possible to select a device that actually changes the operation mode by appropriately setting the password level.

  Next, the operation of the system of the present invention based on the hardware configuration and data structure described above will be sequentially described in detail with reference to the flowcharts of FIGS.

  Of the entire processing of the CPU 10 of the PLC 1a serving as the transmission station, only the initial stage processing when the operation mode change command is given is extracted and shown in FIG. As is well known, in the PLC CPU unit, after initial processing immediately after the power is turned on, I / O refresh processing and command execution are performed while performing a prescribed hardware check in common processing. Processing and peripheral service processing are executed cyclically. In peripheral service processing, communication processing with other control devices, processing according to various input operations, and the like are executed. In the process according to the various input operations, when the operation of the operation mode change instruction switch 10-1 by the field worker or the like is detected, the process shown in the flowchart of FIG. 8 is started.

  In the figure, when processing is started, first, an operation mode change instruction is accepted based on the operation content of the operation mode change instruction switch 10-1 (step 101). Subsequently, a series of “operation mode change authority information” is read from the storage area in the memory card 4 (see FIG. 7A) (step 102), and the check code stored at the end of the area is confirmed. (Step 103), it is determined whether or not the data obtained by appropriately processing the series of data matches the check code stored in the memory (Step 104).

  Here, if the data obtained by processing the series of “operation mode change authority information” and the check code do not match (NO in step 104), the lamp provided on the outer surface of the CPU unit is caused to blink. The abnormal process is executed (step 108). On the other hand, if it is determined that the data obtained by processing the series of “operation mode change authority information” matches the check code (YES in step 104), then, the operation mode change target changeover switch 10- Two operating states are referenced.

  Here, when the operation state of the operation mode change target changeover switch 10-2 is determined to be the own device (step 105 “own device”), the process proceeds to FIG. 14 and the restoration process of the own device is executed. On the other hand, if it is determined that the entire network is present (step 105 “entire network”), the process proceeds to FIG. 9 to execute a restoration process for the entire network.

  As described above, in the illustrated embodiment, prior to the start of the operation mode change process, the reliability of the data (operation mode change authority information) read from the memory card is automatically checked based on the check code. In addition, by setting the operation mode change target changeover switch 10-2 provided in the CPU unit 10 to either “own device” or “entire network”, a restore process related only to the own device and a network including the own device The entire operation mode changing process can be executed alternatively.

  Next, flowcharts (No. 1 to No. 3) showing details of the operation mode changing process of the entire network are shown in FIG. 9 to FIG. When the processing is started in FIG. 9, first, in step 201, it is determined whether or not the operation mode change processing has been completed for all control devices on the network. Here, if it is determined that all devices have been completed (YES in step 201), an end process is executed, and for example, a lamp (not shown) provided on the outer surface of the CPU unit is displayed in a predetermined manner (step 209). ).

  On the other hand, if it is determined that the operation mode change processing has not been completed for all the devices (step 201 NO), then the operation mode change authority information for one control device is read ( Step 202), by referring to the node address included in the operation mode change authority information, it is determined whether it is the data of the own device or the data of the other device (step 203). If it is determined that the data is from another device (NO in step 203), the process proceeds to step 204, where a device type transmission request command is sent to the target device, and the device from the target device is based on the response. The type is acquired (step 204).

  Subsequently, the device type acquired from the target device and the device type read from the memory card are collated (identity determination) (step 205). Here, if it is determined that they do not match (NO in step 205), it is estimated that there is a possibility that the control device on the network is mistakenly replaced with another model at the time of replacement. Immediately executing the abnormality process (step 208), the fact is displayed in a predetermined manner on a lamp (not shown) provided on the outer surface of the CPU unit, so that the user is notified.

  On the other hand, when the device type acquired from the target device matches the device type read from the memory card (step 205 YES), the operation mode change request which is the main part of the present invention is subsequently made. Transition to the transmission process (step 206) is performed.

  Details of the operation mode change request transmission process (step 206) are shown in FIG. As shown in the figure, in the operation mode change request transmission process, first, the operation mode types to be requested for change are “program operation mode”, “program stop mode”, “configuration lock mode”, “configuration lock mode”. It is determined whether the mode is "Relation unlock mode", "Reset mode", or "Other" (step 301).

  When the judgment result is one of “program operation mode”, “program stop mode”, “configuration lock mode”, “configuration unlock mode”, or “reset mode”, the program operation Start request (with password) creation processing (step 302), program stop request (with password) creation processing (step 303), configuration lock request (with password) creation processing (step 304), configuration unlock Either the request (with password) creation processing (step 305) or the reset request (with password) creation processing (step 306) is executed, and the created operation mode change requests are respectively set to the operation mode. Change target Destined to become the node address, and be sent out onto the network 3 (step 308).

  On the other hand, when the determination result is none of the above, an abnormality process (step 307) is immediately executed to display a lamp (not shown) provided on the outer surface of the CPU unit in a predetermined manner. This is notified to the user.

  On the other hand, FIG. 13 shows a flowchart of processing in the device that has received the operation mode change request. As shown in the figure, in the device that has received the operation mode change request, first, the password attached to the operation mode change request is compared with the password set in itself (step 501). If the passwords do not match (NO in step 501), an abnormal response is immediately created and transmitted to the transmitting station that is the transmission source of the operation mode change request (step 505). On the other hand, when both passwords match (step 501 YES), the operation mode changing process which is the main part of the present invention is executed (step 502).

  Details of the operation mode change process (step 502) are shown in FIG. As shown in the figure, in the operation mode change process, first, the requested operation mode types are “program operation mode”, “program stop mode”, “configuration lock mode”, “configuration unconfiguration”. It is determined whether the mode is “lock mode”, “reset mode”, or “other” (step 401).

  When the judgment result is one of “program operation mode”, “program stop mode”, “configuration lock mode”, “configuration unlock mode”, or “reset mode”, the program operation One of start processing (step 402), program stop processing (step 403), configuration lock processing (step 404), configuration unlock processing (step 405), and reset processing (step 406) is executed. The target operating mode change is achieved. On the other hand, when the determination result is none of the above, an abnormality process (step 407) is immediately executed to display a lamp (not shown) provided on the outer surface of the CPU unit in a predetermined manner. This is notified to the user.

  Returning to FIG. 13, when the operation mode change process (step 502) is completed, it is subsequently determined whether or not the operation mode change has been completed normally (step 503). Here, when it is determined that the operation is normally completed (step 503 YES), a normal response is created and transmitted to the source station that is the transmission source of the operation mode change request (step 504). If determined (NO in step 503), an abnormal response is created and transmitted to the transmitting station that is the transmission source of the operation mode change request (step 505).

  Then, returning to FIG. 9, the response is confirmed on the side of the transmitting station (step 207). When it is determined that the response is normal (step 207 “normal”), the process returns to the beginning and the same for the next device. When it is determined that an abnormal response or time-out is detected while the process is executed (step 207 NO), the abnormality process (step 208) is immediately executed to indicate that fact on the outer surface of the CPU unit. By displaying the lamp not to be used in a predetermined manner, this is notified to the user, and thereafter, the process returns to the beginning and the same processing relating to the next device is executed.

  On the other hand, in the flowchart of FIG. 9, when it is determined that the authority information of the own device is obtained as a result of checking the node address (YES in Step 203), the process proceeds to FIG. It is determined whether they match (step 210) or whether the password of the own device matches the read password (step 211). Here, if both the determination results are affirmative (steps 210 YES and 211 YES), the operation mode changing process (step 212) described above with reference to FIG. 12 is executed.

  After that, if this operation mode change process (step 212) ends normally (step 213 YES), the process returns to the beginning of the flowchart of FIG. The device type of the machine does not match the read value (NO in step 210), the password of the machine does not match the read password (NO in step 211), or the operation mode change process (step 212) ends normally. If not (NO in step 213), the abnormality process (step 214) is immediately executed, and a lamp (not shown) provided on the outer surface of the CPU unit is displayed in a predetermined manner to that effect. And then return to the beginning of the flowchart of FIG. Similar processing related vessel is performed.

  Next, details of the operation mode change process of the own device executed when it is determined that the operation mode change target is the own device in the flowchart of FIG. 8 will be described with reference to the flowchart of FIG.

  When the process is started in the figure, first, the authority information of the own machine is searched based on the node address of the own machine read from the memory card (step 601), and then the authority information of the own machine is searched. Is read (step 602). That is, the authority information already stored in the own device is read out.

  Subsequently, in step 603, collation (identity determination) between the own device type and the device type read from the memory card is performed (step 603). If they do not coincide with each other (NO in step 403), the process proceeds to step 608, where abnormality processing is executed, and a lamp (not shown) provided on the outer surface of the CPU unit, for example, is displayed in a predetermined manner.

  If it is determined in step 603 that the device type of the own device and the device type read from the memory card match (YES in step 603), the process proceeds to step 604, where the password and the memory of the own device are stored. The password read from the card is verified (step 604). If they do not match (NO in step 604), the process proceeds to step 608, and similar abnormality processing is executed.

  If it is determined in step 604 that both match (YES in step 604), the process proceeds to step 605, where the unique ID of the own device and the unique ID read from the memory card are collated (identity determination). ) Is performed. If it is determined that the two match (step 405 YES), the operation mode changing process described above with reference to FIG. 12 is executed (step 605).

  After completion of the operation mode change process (step 605), it is determined whether or not the operation mode change has been completed normally (step 606). In contrast to step 607), in the case of an abnormal end (NO in step 606), the process proceeds to step 608, where an abnormal process is executed. For example, a lamp (not shown) provided on the outer surface of the CPU unit is predetermined. Is displayed. Thereafter, an end process (step 607) is executed.

  As described above, in the control system of this embodiment, the operation mode change target changeover switch 10-2 provided on the outer surface of the CPU is set on the own machine side on the PLC side positioned as the transmission station. As a result, the operation mode change process can be executed by operating the operation mode change command switch 10-1 only on its own device without affecting other control devices on the network.

  Finally, an example of the operation mode transition mode in the distributed control system in this embodiment will be described with reference to FIG. As shown in the figure, according to the distributed control system of this embodiment, (1) the operation mode change from the program “operation” to the program “stop” in the unlock operation mode (M12), and the program “stop”. Change of operation mode from program “operation” (M22), (2) Change of operation mode from program “operation” to program “stop” in lock operation mode (M21), change from program “stop” to program “operation” Operation mode change (M22), (3) Operation mode change from program “stop” in unlock operation mode to program “stop” in lock operation mode (M31), program “stop” in lock operation mode to unlock operation mode Change of operation mode to program "stop" in (M32), ( ) Operation mode change from program “operation” in unlock operation mode to program “operation” in lock operation mode (M41), operation mode from program “operation” in lock operation mode to program “operation” in unlock operation mode Various operation mode changes such as change (M42) are possible.

  As described above, according to the distributed control system of this embodiment, the operation mode change authority corresponding to each of the operation mode change target devices separately using the tool device or the like in advance in the memory card 4 or the nonvolatile memory 6. As long as the information is stored, the operation mode change command switch 10 is then incorporated by incorporating the memory card 4 or the non-volatile memory 6 into a control device (for example, PLC) positioned as a transmission station. The operation of -1 allows the control device to automatically transmit an operation mode change request frame to the control device or the entire network, without requiring a separate password input operation. Automatic change of operation mode for those control devices without any trouble It is possible to 's.

  For this reason, it is no longer necessary to bring the tool device to the site as before, or to instruct field workers in advance how to use the tool device. Can also be executed by other workers.

  Moreover, as a right information storage means, a memory card that can be detachably attached to a control device positioned as a transmission station, and a handy tool that is cable-connected to a control device positioned as a transmission station The memory card that can be mounted on the memory or the nonvolatile memory element that can be detachably mounted on the circuit board with built-in control equipment positioned as the transmitting station is employed. As long as it is removed, no password will be attached to the generated operation mode change request even if an operation mode change command including type designation is given to the control device serving as the transmitting station. By storing memory cards and non-volatile memory elements on the administrator's side, it is possible to ensure that inadvertent operation mode change processing is performed by field workers. It is possible to avoid.

  Prior to the operation mode change request transmission operation, the device type is acquired from the control device that is the transmission destination, and the device type acquired in this way is compared with the device type included in the authority information. Sometimes (step 205 YES), while the operation mode change request transmission operation for the control device is executed (step 206), when both do not match (step 205 NO), the operation mode change request transmission operation for the control device is skipped. If the control device that is the target for changing the operation mode is replaced with another device for some reason, the operation mode change request with password is transmitted prior to transmission. Because it turns out that it was mistakenly replaced That the operation mode change command to the patronage device is sent can be prevented.

  In addition, since each control device serving as a receiving station is provided with a notification means for notifying the execution status of the operation mode changing operation including type designation to the control device serving as a transmitting station (step 504). 505) It can be confirmed in the control device of the transmitting station whether or not the planned operation mode change processing has been correctly performed in the control device of each receiving station scheduled to change the operation mode (step 207).

  Further, on the side of the control device serving as the transmission station, not only the operation mode change command switch 10-1, but also the operation mode change target changeover switch 10-2 is provided so that the restore target can be selected between the own device and the entire network. Therefore, it is necessary to change the operation mode for the entire network even though it is necessary to change the operation mode only for the own device. The operation mode can be changed after narrowing down.

  In the above embodiment, the operation mode change processing command is performed based on the operation mode change command switch 10-1 provided on the transmission station side, but the control device on the transmission station side is, for example, a PLC. In such a case, a flag controlled by the execution result of the user program is provided in a predetermined memory, and the operation mode changing process is started or connected to the PLC via communication according to the on / off timing of this flag. Even if an operation mode change command switch is provided on the remote I / O unit side and an operation signal of this switch is transmitted to the PLC via communication, the operation mode change process on the PLC side is activated. Effects can be obtained.

  In the above embodiment, the operation mode change authority information is stored in the PLC. However, other control devices (for example, a remote I / O terminal, safety, etc.) connected to this kind of industrial network are used. Of course, it may be provided in a network controller or the like.

  Further, in the above embodiment, the process for executing the operation mode change is incorporated in the CPU unit of the PLC positioned as the transmission station, but when the control device serving as the transmission station is a PLC, The unit into which such software is to be incorporated is not necessarily limited to the CPU unit, but may of course be provided in the communication unit itself or in various other high-function units.

  According to this invention, the operation mode change is required without any authority information input operation by giving an operation mode change instruction including type designation to the control device serving as the transmission station. Because it is possible to execute a specified type of operation mode change in each of one or more receiving stations by remote operation, it can be received without using a tool device that has tool software installed on a personal computer. The operation mode of one or more control devices positioned as a station can be confirmed without making the on-site operator, who is the operator, aware of the authority information such as passwords set for each control device. In addition, it is possible to make a batch change by remote operation without error.

1 is a system configuration diagram illustrating an example of a distributed control system to which the present invention is applied. It is explanatory drawing (the 1) in the case of hold | maintaining authority information only to one PLC. It is explanatory drawing (the 2) in the case of hold | maintaining authority information only to one PLC. It is explanatory drawing (the 3) in the case of making authority information hold | maintain only to one PLC. It is a block diagram which shows the hardware constitutions of a CPU unit and a communication unit. It is a book figure which shows the hardware constitutions of a remote I / O terminal. It is explanatory drawing which shows the data structure of the authority information for operation mode change. It is a flowchart which shows the process in the control apparatus used as a transmission station. It is a flowchart (the 1) of a batch operation mode change process. It is a flowchart (the 2) of a batch operation mode change process. It is a flowchart (the 3) of a batch operation mode change process. It is a flowchart of an operation mode change process. It is a flowchart of the process in the apparatus which received the operation mode change request. It is a flowchart of the operation mode change process of a self-machine. It is operation mode transition explanatory drawing.

Explanation of symbols

1a PLC positioned as a source station
1b PLC positioned as receiving station
2a to 2d Remote I / O terminals positioned as receiving stations 3 Network 4 Memory card 4a Operation mode change authority information 5 Handy tool 5a Card slot 6 Non-volatile memory 6a Operation mode change authority information 10 CPU unit 10-1 Operation mode Change command switch 10-2 Operation mode change target changeover switch 10a Display unit 10b Operation unit 10c Card slot 11 Communication unit 12 I / O unit 1001 Memory card interface 1002 Non-volatile memory 1003 RAM
1004 MPU block 1005 Display unit 1006 Setting unit 1007 USB interface 1008 Bus control unit 1101 Non-volatile memory 1102 RAM
1103 MPU block 1104 Display unit 1105 Setting unit 1106 Communication physical layer 1107 Bus control unit 201 I / O circuit 202 MPU block 203 Communication physical layer 204 Non-volatile memory 205 Display unit 206 Setting unit

Claims (5)

A plurality of control devices such as PLCs and PLC remote I / O terminals are distributed and connected via a field network.
Each of the plurality of control devices includes
When an operation mode change request with a password is received via the field network, it is classified by the operation mode change request on condition that the password attached to the operation mode change request matches the password set for itself. A process for executing the specified operation mode change is set up , and by sending an operation mode change request with a password and including a type specification to the field network, the control device to which the operation mode change request is sent is sent. the type changes in the specified operation mode in a distributed control system executable by remote control,
Positioning at least one of the control devices as an operation mode change request transmitting station, and positioning the other control device as an operation mode change request receiving station,
In the control device positioned as the transmitting station,
Authority information storage means for storing operation mode change authority information including a password corresponding to each of one or more receiving stations that require operation mode change;
Operation of a predetermined switch provided on the control device serving as the transmission station, or reception of a predetermined command addressed to the control device serving as the transmission station via the field network, or becoming the transmission station A change command generation means for generating an operation mode change command including a type designation by performing a predetermined operation in the tool device connected to the control device;
In response to an operation mode change command including a predetermined type designation being generated, an operation mode change request including the type designation is generated, and the authority for the generated operation mode change request including the type designation is generated. An operation mode change request transmission for automatically adding a password included in the authority information for operation mode change of each receiving station stored in the information storage means and sending it to each receiving station to the field network Means are provided,
As a result, even in a distributed control system on the premise that a predetermined operation involving password input is performed by a tool device connected directly or indirectly to the field network, the field worker is accompanied by any authority information input operation. it not, distributed control, wherein the changing of the operation mode type specification in each operation mode change the required one or more receiving stations, and can be executed collectively by remote control system.   The authority information storage means is detachably attachable to a handheld tool cable-connected to a control device positioned as a transmission station, a memory card that can be detachably mounted to a control device positioned as a transmission station The distributed control system according to claim 1, wherein the distributed control system is a non-volatile memory element that can be detachably mounted on a memory card that can be mounted or a circuit board with a built-in control device positioned as a transmitting station. .   Prior to the operation mode change request transmission operation, the operation mode change request transmission means obtains a device type from a control device as a transmission destination, and collates the device type thus obtained with a device type included in authority information. However, when both match, the operation mode change request transmission operation for the control device is executed. When both do not match, the operation mode change request transmission operation for the control device is skipped. The distributed control system according to claim 1.   Each of the control devices serving as the receiving station is provided with a notification means for notifying the execution status of the operation mode change operation including the type designation to the control device serving as the transmitting station. The distributed control system according to claim 1.   The type of operation mode change includes a change to program operation mode, a change to program stop mode, a change to configuration lock mode, a change to configuration unlock mode, or a change to reset mode. The distributed control system according to claim 1, wherein:

Images