JP4994290B2 - Supervisory control terminal device - Google Patents

Description

  The present invention relates to a monitoring control terminal device operated by an operator permitted to operate in a plant monitoring control system.

  In the supervisory control terminal device of the plant supervisory control system, if an unauthorized intruder operates as an operator, or an inexperienced operator who is not authorized to operate it carelessly, Operation may be hindered. In order to prevent such a situation and improve safety, the supervisory control terminal device normally authenticates a legitimate operator who is permitted to operate and prevents an unauthorized operation by a person who is not permitted to operate. An authentication means is provided.

Conventional user authentication means include, for example, a method of determining presence / absence of an operation right based on an ID number of a wireless tag (IC tag) carried by an operator (Patent Document 1) or reading an ID card carried by an operator by card There is disclosed a method (Patent Document 2) that accepts only an operation at an operation level assigned to a corresponding ID number by performing authentication by inserting a personal identification number and inserting it into the apparatus. Furthermore, a method of authenticating using an operator's face image (Patent Document 3) is presented as operator identification information including biological information of the operator.
JP 2007-299228 A JP 7-13603 A JP 2006-323475 A

  However, in the authentication method using an authentication device such as an IC tag or an ID card as disclosed in Patent Document 1 and Patent Document 2, there is a risk of unauthorized use due to theft or loss of the IC tag or ID card. In addition, the operator must always carry an IC tag or an ID card, and there is an inconvenience and inconvenience that an operator cannot operate if he / she forgets to carry it.

  Further, in the face image authentication means as shown in Patent Document 3, when a third party displays an operator's face photograph on a video camera that is an operator identification information acquisition device, the third person is identified as the operator himself / herself. It may be misunderstood and it cannot be said that safety is high. Further, in these conventional examples, once authenticated, there is no checking means thereafter, and therefore, there is a problem that even if an operator who has been authenticated once is replaced with another operator or an unauthorized intruder, the operation can be performed. is there.

  The present invention has been made to solve the above-described problems, and does not have the trouble and inconvenience of carrying authentication devices such as an IC tag and an ID card, and can provide high authentication accuracy and high safety. An object is to provide a monitoring control terminal device.

The supervisory control terminal device according to the present invention is a supervisory control terminal device operated by an operator permitted to operate in the plant supervisory control system, and the facial image data, voiceprint data and weight data of each operator are registered. Video input means for capturing user registration data, face image data of a person who is about to start an operation, voice input means for capturing voice print data of a person who is about to start an operation, and weight data of the person who is about to start an operation And a user authentication unit that determines whether the person who is about to start the operation is an authorized operator, the user authentication unit includes the face image data acquired from the video input unit, Face authentication means for performing authentication by collating face image data registered in user registration data, voice print data acquired from voice input means, and user registration data Voice authentication means for performing authentication by collating voiceprint data registered in the data, and weight authentication means for performing authentication by collating the weight data acquired from the pressure sensor and the weight data registered in the user registration data. When the face image data match by the verification by the face authentication means, the operator who registered the face image data is authenticated as a temporary user, and then the voice authentication means and the weight authentication means register the user registration data. Verification is performed by using the temporary user's weight data and voiceprint data, and when the authentication is performed by all of the face authentication means, the voice authentication means, and the weight authentication means, it is determined that the operator is permitted to operate. Is completed and the operation is accepted.

  According to the present invention, authentication based on two pieces of biometric information of face image data and voiceprint data and further authentication based on body weight data are performed, so that an operator does not need to carry an authentication device and the erroneous recognition rate is low. It is possible to provide a monitoring control terminal device with high safety.

Embodiment 1 FIG.
Embodiment 1 of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing a configuration of a monitoring control terminal apparatus according to Embodiment 1 of the present invention. The monitoring control terminal device according to the first embodiment is a monitoring control terminal device that is operated by an operator who is permitted to operate in a plant monitoring control system that monitors and controls an energy plant such as a power plant. User authentication means 5 is provided for authenticating authorized authorized operators and preventing unauthorized operations by unauthorized persons.

  The configuration of the monitoring control terminal device according to the first embodiment will be described with reference to FIG. The “person who intends to start operation of the monitoring control terminal device” used in the following description includes both a legitimate operator who is permitted to operate and a person who is not permitted to operate. Authentication is to recognize that a person is a specific person (a legitimate operator permitted to operate here) as a result of collating and determining data for identifying an individual.

  The user registration data 1 is a database file in which personal data of each operator who is permitted to operate the monitoring control terminal device, specifically, face image data, voiceprint data, and weight data are registered. The user registration data 1 may include other personal data such as each operator's charge and operation authority.

  The video input means 2 is a device that captures in real time the face image data of a person who intends to start the operation of the monitoring control terminal device, and specifically comprises a video camera or a CCD camera. The face image data captured by the video input unit 2 is transmitted to the user authentication unit 5 and used for authentication by the face authentication unit. The face authentication means will be described later.

  The voice input means 3 is a device that captures voiceprint data of a person who intends to start operation of the supervisory control terminal device. Specifically, the voice input means 3 is a CRT device of the supervisory control terminal device or a desk on which the supervisory control terminal device is installed. Consists of a built-in microphone. The voiceprint data captured by the voice input means 3 is transmitted to the user authentication means 5 and used for authentication by the voice authentication means. The voice authentication means will be described later.

  The pressure sensor 4 is a device that captures the weight data of a person who is about to start the operation of the monitoring control terminal device, and is attached to the seat surface of the operation seat provided for the operator, and the operator is seated. Sometimes weigh. The pressurization sensor 4 at the operation seat and the monitoring control terminal device main body are connected by a cable, and the weight data captured by the pressurization sensor 4 is transmitted to the user authentication means 5 and used for authentication by the weight authentication means. The weight authentication means will be described later.

  The user authentication means 5 is a means for determining whether or not a person who intends to start the operation of the monitoring control terminal device is an authorized operator who is permitted to perform the operation. The face authentication means, the voice authentication means, and the weight authentication Have means. The face authentication unit performs authentication by comparing the face image data acquired from the video input unit 2 with the face image data registered in the user registration data 1. Note that authentication based on face image data (face authentication) recognizes the position, inclination, shape, etc. of the face or its part and authenticates whether or not the person is a specific person.

  The voice authentication means performs authentication by collating the voice print data acquired from the voice input means 3 with the voice print data registered in the user registration data 1. Note that voiceprint data authentication (speech authentication) uses voiceprint data that clearly represents differences in the shape and size of vocal organs (vocal tracts) and individual articulations of individual voiceprint data. It is to authenticate whether or not it is a specific person.

  Further, the weight authentication means performs authentication by comparing the weight data acquired from the pressure sensor 4 with the weight data registered in the user registration data 1. The user authentication means 5 determines that the person who is going to start the operation is a legitimate operator who is permitted to operate only when the face authentication means, the voice authentication means, and the weight authentication means are authenticated. Then, the authentication is completed and the operation of the monitoring control terminal device is accepted.

  Next, the operation of the user authentication means 5 will be described using the flowchart shown in FIG. When a person who intends to start operation of the monitoring control terminal device stands at a predetermined position or sits down at an operation seat, authentication by the user authentication means 5 is started (S1). First, the face image of the person who is about to start the operation is captured from the image input means 2 and input as face image data (S2). Subsequently, face image data (registration data) registered in the user registration data 1 is acquired (S3), and these are collated (S4). If there is registration data that matches the face image data acquired from the video input device 2, the user is authenticated as a temporary user. If there is no matching data, the process returns to the authentication start (S1) and the determination is performed again.

  Subsequently, the weight of the person who starts the operation, that is, the weight of the temporary user is acquired from the pressure sensor 4 attached to the seating surface of the operation seat and input as weight data (S5). Subsequently, the weight data (registration data) of the corresponding temporary user is acquired from the user registration data 1 (S6), and these are collated (S7). At the time of collation, an increase / decrease in the weight of the operator is taken into consideration, and a range of ± several% is considered with respect to the registered data. This width is set when the user registration data 1 is created. If the weight data of the temporary user matches the registered data, it can be authenticated again as a temporary user and proceed to the next authentication. If the weight data does not match, the process returns to the authentication start (S1) and the determination is performed again.

  Next, a screen for prompting voice input is displayed on the screen of the supervisory control terminal device (S8), and the voice data of the temporary user is fetched from the voice input means 3 and input as voiceprint data (S9). Subsequently, the voice print data (registration data) of the temporary user is acquired from the user registration data 1 (S10), and these are collated (S11). If the temporary user's voiceprint data matches the registered data, the face authentication means, the weight authentication means, and the voice authentication means have all been authenticated, so that the temporary user is authorized to operate. It determines with being an operator and completes authentication (S12). After the authentication is completed, the monitoring control terminal device is ready for use, and the operator can start the operation. If the voiceprint data do not match, the process returns to the authentication start (S1) and the determination is performed again.

  As described above, the monitoring control terminal device according to the first embodiment includes the user authentication unit 5 including the face authentication unit, the voice authentication unit, and the weight authentication unit, and uses two pieces of biometric information of face image data and voiceprint data. Since authentication and further authentication based on weight data are performed, the false recognition rate is extremely low, and a legitimate operator can be authenticated with high accuracy. Further, since it is not necessary to carry an authentication device such as an IC tag or an ID card, it is convenient for an operator, and there is no risk that the IC tag or ID card is lost or stolen and illegally used. Therefore, according to the first embodiment, it is possible to provide a monitoring control terminal device that has high authentication accuracy, is convenient for the operator, and has high safety. Note that either one or both of the user registration data 1 and the user authentication means 5 may be arranged in any server of the plant monitoring control system instead of the monitoring control terminal device.

Embodiment 2. FIG.
FIG. 3 is a block diagram showing the configuration of the supervisory control terminal apparatus according to Embodiment 2 of the present invention. In FIG. 3, the same or corresponding parts as in FIG. In the second embodiment, in the monitoring control terminal device configured in the same manner as in the first embodiment, when the operator leaves the operation seat after the authentication is completed, the operation is performed by another operator or an unauthorized intruder. This is further provided with a leaving authentication canceling means 6 for preventing this.

  In the second embodiment, it is always detected whether the operator is present or absent based on the pressure applied to the pressure sensor 4 attached to the seating surface of the operator seat (seat confirmation). . The information is transmitted to the authentication cancellation means 6 when leaving the seat in real time. The authentication cancellation means 6 at the time of leaving leaves the operator's seat for some reason after completing the authentication, and when the pressure sensor 4 has not been pressurized for a predetermined time and has exceeded a predetermined time, The authentication is canceled and the determination by the user authentication means 5 is performed again. That is, an operator whose authentication has been canceled due to leaving must be authenticated by following the same procedure as in the first embodiment.

  Next, using the flowchart shown in FIG. 4, the operation of the leaving authentication canceling means 6 will be described. Note that the flowchart shown in FIG. 4 shows a step following the authentication completion (S12) of the flowchart shown in FIG. 2 described in the first embodiment. When the operator starts the operation after the authentication is completed, the presence confirmation by the pressure sensor 4 is started (S13). The operator's weight is acquired from the pressure sensor 4 in real time and input as weight data (S14).

  When the weight data is input, that is, when the pressure sensor 4 is pressurized, it is determined that the person is present, and when there is no pressure, it is determined that the person is absent (S15). However, the pressurization in this case is a pressurization equivalent to the registered weight data, and for example, pressurization to the extent that a baggage is placed is absent. Further, it is determined whether the absence time has not exceeded a predetermined time set in advance (S16), and if it has exceeded, the authentication is canceled and the operation permission is canceled (S17). After the cancellation of authentication, authentication is performed again from the beginning (S1 to S12).

  According to the second embodiment, in addition to the same effect as the first embodiment, by providing the leaving authentication canceling means 6, when the operator leaves after the authentication is completed, other operators and unauthorized intrusions Therefore, it is possible to provide a more secure monitoring control terminal device. In addition, if it is determined that there is no pressurization even when weight data heavier than the registered weight data is acquired, the operator is attacked by the unauthorized intruder during the operation, and the unauthorized intruder immediately Even when the operator is restrained and the operation is started within a predetermined time, the unauthorized operation can be prevented.

Embodiment 3 FIG.
FIG. 5 is a block diagram showing a configuration of a monitoring control terminal apparatus according to Embodiment 3 of the present invention. 5 that are the same as or equivalent to those in FIG. In the third embodiment, the monitoring control terminal device configured in the same manner as in the first embodiment further includes weight recording means 7 for recording the operator's weight data at the time of authentication completion in the user registration data 1. Is.

  The weight recording means 7 writes the weight data acquired from the pressure sensor 4 to the user registration data 1 for the operator determined to be a legitimate operator by the user authentication means 5, and the weight data of this operator Is to be updated. Thus, by updating the weight data registered in the user registration data 1, it is possible to cope with daily weight changes of the operator.

  Next, the operation of the weight recording means 7 will be described using the flowchart shown in FIG. Note that steps S1 to S12 in the flowchart shown in FIG. 6 are the same as the flowchart shown in FIG. The weight recording means 7 writes the operator weight data acquired from the pressure sensor 4 in the user registration data 1 immediately before the completion of the authentication (S12) (S18). The updated weight data is used as registration data for authentication when the operator operates the monitoring control terminal device next time.

  According to the third embodiment, in addition to the same effects as those of the first embodiment, since the weight recording unit 7 is provided, it is possible to cope with the daily weight change of the operator. For this reason, it is possible to suppress the occurrence of an error that does not match the registered data and is not authenticated, and authentication can be performed with higher accuracy.

Embodiment 4 FIG.
FIG. 7 is a block diagram showing the configuration of the monitoring control terminal apparatus according to Embodiment 4 of the present invention. In FIG. 7, the same or corresponding parts as in FIG. In the fourth embodiment, in the monitoring control terminal device configured in the same manner as in the first embodiment, the pressure sensor 4 and the user authentication means 5 attached to the seat surface of the operation seat communicate with each other by a wireless communication method. Is.

  In the first embodiment, the monitoring control terminal device main body provided with the user authentication means 5 and the pressure sensor 4 attached to the operation seat are connected by a cable. There are drawbacks such as limitations, cable obstruction and difficulty in operating the operator. In the fourth embodiment, a wireless transmission unit 8 is connected to the pressure sensor 4, and a wireless reception unit 9 is connected to the user authentication unit 5, so that the user authentication unit 5 and the pressure sensor 4 communicate with each other by a wireless communication method. To do.

  The user authentication means 5 and the pressure sensor 4 are arranged so as to correspond one-to-one, and the wireless transmission unit 8 and the wireless reception unit 9 corresponding to each other have a common identification ID. Thereby, even if a plurality of monitoring control terminal devices are installed, data interference can be prevented. Note that the wireless communication method is not particularly limited.

  According to the fourth embodiment, in addition to the same effects as those of the first embodiment, the pressure sensor 4 and the user authentication means 5 attached to the seat surface of the operation seat communicate with each other by a wireless communication method. The restrictions on the movement range of the operator seat are relaxed, accidents such as the operator stepping on the cable can be prevented, and the operator can move easily, so that the operability is improved.

  In addition, although the said Embodiment 1-Embodiment 4 may each be implemented independently, by carrying out combining these, the monitoring control terminal device which is still easier to use and has high safety is obtained. is there.

  The present invention can be used as a monitoring control terminal device of a plant monitoring control system that monitors and controls an energy plant.

It is a block diagram which shows the structure of the monitoring control terminal device which concerns on Embodiment 1 of this invention. It is a figure which shows the operation | movement flowchart of the user authentication means of the monitoring control terminal device which concerns on Embodiment 1 of this invention. It is a block diagram which shows the structure of the monitoring control terminal device which concerns on Embodiment 2 of this invention. It is a figure which shows the operation | movement flowchart of the authentication cancellation means at the time of leaving of the monitoring control terminal device which concerns on Embodiment 2 of this invention. It is a block diagram which shows the structure of the monitoring control terminal device which concerns on Embodiment 3 of this invention. It is a figure which shows the operation | movement flowchart of the weight recording means of the monitoring control terminal device which concerns on Embodiment 3 of this invention. It is a block diagram which shows the structure of the monitoring control terminal device which concerns on Embodiment 4 of this invention.

Explanation of symbols

1 user registration data, 2 video input means, 3 audio input means, 4 pressure sensor,
5 user authentication means, 6 leaving authentication cancellation means, 7 weight recording means, 8 wireless transmission section,
9 Wireless receiver.

Claims (5)

A supervisory control terminal device operated by an operator authorized to operate in the plant supervisory control system,
User registration data in which face image data, voiceprint data, and weight data of each operator are registered; and video input means for capturing face image data of a person who is about to start an operation;
Voice input means for capturing voiceprint data of a person who is about to start operation;
A pressure sensor that captures the weight data of the person about to start the operation;
Comprising user authentication means for determining whether a person who is going to start an operation is an authorized operator,
The user authentication means includes face authentication means for performing authentication by comparing face image data acquired from the video input means and face image data registered in the user registration data; voiceprint data acquired from the voice input means; Voice authentication means for performing authentication by collating voiceprint data registered in the user registration data, and body weight for performing authentication by collating weight data acquired from the pressure sensor and weight data registered in the user registration data If the face image data is matched in the verification by the face authentication means, the operator who has registered the face image data is authenticated as a temporary user, and then the voice authentication means and the weight authentication means When the comparison with the weight data and voiceprint data of the temporary user registered in the user registration data, the face authentication unit, the voice authentication unit, and Serial When it is authenticated in all of the weighing authentication means determines that the operator who is permitted to operate to complete the authentication, monitoring controlling device, characterized in that for accepting the operation.   2. The monitoring control terminal device according to claim 1, wherein the pressure sensor is attached to a seating surface of an operation seat provided for an operator and is present due to a pressurization state of the operation seat. A monitoring control terminal device that detects whether the user is absent.   The monitoring control terminal device according to claim 2, wherein after the authentication is completed, when a state where no pressure is applied to the pressure sensor exceeds a predetermined time, the authentication by the user authentication unit is canceled and the determination is performed. A supervisory control terminal device, comprising: an authentication cancellation means for leaving the seat to redo.   3. The monitoring control terminal device according to claim 2, wherein the pressure sensor and the user authentication unit communicate with each other by a wireless communication method.   The monitoring control terminal device according to claim 1, wherein weight data acquired from the pressure sensor is added to the user registration data for an operator who is determined to be a valid operator by the user authentication unit. A supervisory control terminal device for writing and updating the weight data of the operator.

Images