JP7023218B2 - Plant monitoring and control equipment and plant monitoring and control system - Google Patents

Description

The present application relates to a plant monitoring control device and a plant monitoring control system.

In the conventional plant monitoring and control system, instead of reusing physical keys or passwords and authentication means that may be stolen, the operator is identified and authorized using the operator's biometric information, and the operator prepared in advance. There is a system that restricts the operation of the operator based on the operation authority information of (see, for example, Patent Document 1).
Further, a system has been proposed in which authentication is performed using the face data of an operator photographed by a camera and only operations that have the operation authority of the operator are permitted (see, for example, Patent Document 2).
In addition, using both the ID card and biometric information as the authentication means for the operator, the operation authority can be changed according to each case where both are authenticated, only the ID card is authenticated, and both are not authenticated. (See, for example, Patent Document 3).

Japanese Unexamined Patent Publication No. 2006-323475 (Page 3, Fig. 1) Japanese Unexamined Patent Publication No. 2008-181293 (Page 3, Fig. 1) Japanese Unexamined Patent Publication No. 2017-91384 (Page 3, Fig. 1)

However, despite the restrictions on the equipment that can be operated by each operator, the plant information is displayed uniformly to all operators, and it is unnecessary beyond the range of operation authority of the currently operating operator. There was a problem that various information was displayed. Displaying unnecessary information can lead to operational errors due to operator misunderstandings, which can cause serious damage to the plant under control.

This application discloses a technology for solving the above-mentioned problems, and enhances security by suppressing unnecessary information display while restricting operations for each operator by face recognition. The purpose is to obtain a plant monitoring and control device and a plant monitoring and control system that prevent erroneous operation.

The plant monitoring and control device disclosed in the present application is
A plant monitoring and control device that monitors and controls each of the above-mentioned equipment in a plant having a plurality of equipment.
An imaging unit that photographs the face of a person who intends to use the plant monitoring and control device, and a photographing unit.
An operator information management table that records the IDs of multiple operators, the names of the operators, the names of the authority groups to which the operators belong, and the face data of the operators.
An authority group table for recording the authority group name, the device group name that can be operated by the operator belonging to the authority group name, and the monitoring screen group name that can be displayed to the operator belonging to the authority group name.
A device group name in which each device is grouped, a device group table for recording the device number of each device belonging to the device group name, and a device group table.
A monitoring screen group name in which a part of a plurality of monitoring screens for monitoring each device is grouped, a monitoring screen group table for recording the monitoring screen number of the monitoring screen belonging to the monitoring screen group name, and a monitoring screen group table.
The face data of the person who intends to use the plant monitoring and control device photographed by the photographing unit is compared with the face data of each operator stored in the operator information management table, and both match. With the operator collation unit that determines whether or not to do
An operation command unit that selects the equipment that can be operated by the operator certified by the operator collation unit from the authority group table and the equipment group table.
From the authority group table and the monitoring screen group table, the monitoring screen that the operator authenticated by the operator collation unit has the right to use is selected and displayed on the display device as a list of available monitoring screens. It is equipped with a display processing unit.

The plant monitoring and control system disclosed in this application is
The above plan, monitoring and control device,
With multiple of the above equipment
It is equipped with a process control device that controls a plurality of the above-mentioned devices.
The process control device is connected to the plant monitoring control device via a network.
Each of the devices is connected to the process control device via a network.

According to the plant monitoring and control device and the plant monitoring and control system disclosed in the present application, the operation authority of the device is not the authentication unit such as a physical key and a password that may be easily diverted, but the face data authentication peculiar to the operator. And can operate and monitor only the equipment for which each operator is authorized. As a result, it is possible to suppress the display of information outside the authority to the operator, enhance security, and prevent erroneous operation.

It is a block diagram which shows the structure of the plant monitoring control system which concerns on Embodiment 1. FIG. It is a block diagram which shows the structure of the plant monitoring control apparatus which concerns on Embodiment 1. FIG. It is a figure which shows the configuration example of the operator information management table which concerns on Embodiment 1. FIG. It is a figure which shows the structural example of the authority group table which concerns on Embodiment 1. FIG. It is a figure which shows the structural example of the equipment group table which concerns on Embodiment 1. FIG. It is a figure which shows the configuration example of the monitoring screen group table which concerns on Embodiment 1. FIG. It is a figure which shows the structural example of the alarm group table which concerns on Embodiment 1. FIG. It is a flowchart which shows the operation of the plant monitoring control apparatus which concerns on Embodiment 1. FIG. It is a flowchart which shows the operation of the plant monitoring control apparatus which concerns on Embodiment 2. It is a block diagram which shows the structure of the plant monitoring control system which concerns on Embodiment 3. It is a block diagram which shows the structure of the plant monitoring control system which concerns on Embodiment 4. FIG.

Embodiment 1.
Hereinafter, the plant monitoring and control system according to the first embodiment will be described with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of a plant monitoring and control system 100.
FIG. 2 is a block diagram showing the configuration of the plant monitoring control device 30.
As shown in FIG. 1, the plant monitoring and control system 100 includes a plant monitoring and control device 30, process control devices 5A and 5B, and plant equipment 6A, 6B, 6C, and 6D. The plant monitoring control device 30 and the process control devices 5A and 5B are connected by a control network 7 as a communication circuit. Further, the process control devices 5A and 5B and the devices 6A to 6D are connected by field networks 8A and 8B as communication circuits.

Further, as shown in FIG. 2, the plant monitoring control device 30 includes a photographing unit 31A, a display device 31B, and an input device 31C. The operator 4 monitors and controls the devices 6A to 6D by using the plant monitoring and control device 30.

The process control devices 5A and 5B collect process data from the devices 6A to 6D constituting the plant, and output control commands to the devices 6A to 6D. The plant monitoring and control device 30 is a user interface with the operator 4, and the operation command input to the plant monitoring and control device 30 by the operator 4 is transmitted to the process control devices 5A and 5B via the control network 7. .. The results calculated by the process control devices 5A and 5B based on the operation command are transmitted to the devices 6A to 6D via the field networks 8A and 8B, and the control of the devices 6A to 6D is executed.

Further, the plant monitoring control device 30 receives the process data of the devices 6A to 6D collected by the process control devices 5A and 5B via the field networks 8A and 8B via the control network 7 and displays them on the display device 31B. do. The plant monitoring and control device 30 uses a general PC (Personal Computer) and includes a CPU (Central Processing Unit), a memory, an external storage device, a display device 31B such as a monitor, and an input device 31C such as a mouse and a keyboard.

Hereinafter, other configurations of the plant monitoring control device 30 will be described.
The photographing unit 31A is a device that photographs the face of a person who intends to use the plant monitoring control device 30. The operator information storage unit 33 is used to record and store the operator information in the operator information management table 38 in advance.
FIG. 3 is a diagram showing a configuration example of the operator information management table 38.
The driver information management table 38 stores the ID of the driver 4, the name of the driver, the name of the authority group to which the driver 4 belongs, and the face data of the driver 4 photographed by the photographing unit 31A.

The group definition unit 35 is used to define each record of the authority group table 39, the device group table 39a, the alarm group table 39c, and the monitoring screen group table 39b.

FIG. 4 is a diagram showing a configuration example of the authority group table 39.
In the authority group table 39, the authority group name, the equipment group name of the plant that can be operated by the operator 4 belonging to the authority group name, and the monitoring screen group name that can be displayed to the operator 4 belonging to the authority group name, The alarm group name that can be displayed to the operator 4 belonging to the authority group name is recorded.

FIG. 5 is a diagram showing a configuration example of the device group table 39a.
In the equipment group table 39a, the equipment group name in which the equipment is grouped and the equipment number of the equipment of the plant belonging to the equipment group name are recorded.

FIG. 6 is a diagram showing a configuration example of the monitoring screen group table 39b.
In the monitoring screen group table 39b, a monitoring screen group name obtained by grouping a part of a plurality of monitoring screens for monitoring each device 6A to 6D and a monitoring screen number of the monitoring screen belonging to each monitoring screen group name are displayed. Record.

FIG. 7 is a diagram showing a configuration example of the alarm group table 39c.
The alarm group name and the alarm ID belonging to the alarm group name are recorded in the alarm group table 39c.

The operator collation unit 34 compares the face data of the person who intends to use the plant monitoring control device 30 photographed by the photographing unit 31A with the face data of the operator 4 stored in the operator information management table 38. Then, it is determined whether or not both match.

The display processing unit 37 controls the display content and the alarm display content on the monitoring screen based on the authority of the operator 4 authenticated by the operator collation unit 34. Further, the operation command unit 36 transmits an operation command to the process control devices 5A and 5B based on the authority of the operator 4 authenticated by the operator collation unit 34.

Next, the operation of the plant monitoring control device 30 will be described.
FIG. 8 is a flowchart showing the operation of the plant monitoring control device 30.

First, the photographing unit 31A acquires the face data of the person (person) who is going to use the plant monitoring control device 30 (step S01). Next, the operator collation unit 34 searches the operator information management table 38 for the operator 4 that matches the face data of the person (step S02).

If the operator 4 that matches the face data does not exist, the person is not a regular operator, and the plant monitoring control device 30 does not accept the subsequent operation command (step S03). If there is a matching operator 4, the operator collation unit 34 sets the operable device group name, the displayable monitoring screen group name, and the displayable alarm group name corresponding to the authority of the operator 4 in the authority group table. Obtained from 39 (step S04). Here, it is assumed that the operator 4 authenticated by the operator collation unit 34 is the operator ABC of ID 0001 shown in FIG. The operator ABC belongs to the authority group "1".

As shown in FIG. 4, the device groups that can be operated by the operator belonging to the authority group 1 are a1 and a2. Therefore, when the operator ABC operates the device (step S05), the operation command unit 36 selects only the device whose device number is A01, A02, A03, A04 from the authority group table 39 and the device group table 39a. Then, the display processing unit 37 displays the display on the display device 31B as an operation target. When the operator operates the devices A01 to A04, the operation command unit 36 transmits an operation command to the process control devices 5A and 5B (step S06).

When the operator ABC intends to display the monitoring screen by the screen expansion operation (step S07), the display processing unit 37 displays the monitoring screen to which the operator ABC has the usage authority in the authority group table 39 and the monitoring screen group. Only the monitoring screens B001 to B008 that are selected by using the table 39b and belong to the displayable monitoring screen groups b1, b2, and b3 are displayed on the display device 31B as a list of available monitoring screens (step S08). When the operator ABC selects any of the monitoring screens b1, b2, and b3, the display processing unit 37 displays the monitoring screen on the display device 31B (step S09).

When the plant monitoring control device 30 receives an alarm regarding an abnormality of the devices 6A to 6D detected by the process control devices 5A and 5B and displays the alarm on the display device 31B (step S10), the display processing unit 37 operates. Whether or not the member ABC has the authority to receive the display of the alarm is determined by using the authority group table 39 and the alarm group table 39c (step S11), and if the member ABC does not have the display authority, the alarm is not displayed (step S11). Step S12). If there is a display authority, the alarm is displayed on the display device 31B (step S13).

As described above, according to the plant monitoring control device 30 and the plant monitoring control system 100 according to the first embodiment, the face data authentication peculiar to the operator is not performed by the authentication unit such as the physical key and the password which may be easily diverted. Allows the individual operator 4 to operate and monitor only the authorized equipment and receive only the authorized alarm. As a result, it is possible to provide a plant monitoring system that can suppress the display of information outside the authority to the operator, enhance security, and prevent erroneous operation.

Embodiment 2.
Hereinafter, the plant monitoring and control device and the plant monitoring and control system according to the second embodiment will be described with reference to the drawings, focusing on the parts different from the first embodiment.
FIG. 9 is a flowchart showing the operation of the plant monitoring and control device according to the second embodiment.
In the second embodiment, when the photographing unit 31A acquires the face data of the operator 4 at all times or at predetermined intervals, and the operator collation unit 34 determines that the operator 4 has left the seat or has changed to another person. , The operator 4 is forcibly logged out and the operation is terminated (step S041-NO).

When the same operator returns to the seat and intends to continue the operation, it is necessary to perform the process from the acquisition of the face data (step S01) again.

As described above, according to the plant monitoring control device and the plant monitoring control system according to the second embodiment, the face data of the operator is acquired at all times or at predetermined intervals, and when the operator 4 leaves the seat or changes to another person. In addition, by forcibly logging out, it is possible to prevent the leakage of confidential information of the plant by a person other than the authorized operator and to prevent the operation of the equipment.

Embodiment 3.
Hereinafter, the plant monitoring control device and the plant monitoring control system according to the third embodiment will be described with reference to the drawings, focusing on the parts different from the first and second embodiments.
FIG. 10 is a block diagram showing the configuration of the plant monitoring and control system 300.

The same components as those in the first embodiment are designated by the same reference numerals. The plant monitoring and control system 300 includes a client 9 that operates the plant monitoring and control device 330, which is connected to the plant monitoring and control device 330 via the information network 10.

As described above, the plant monitoring and control system 300 is a system in which the client 9 and the information network 10 are added to the plant monitoring and control system described in the first embodiment or the second embodiment.

The display device 31B, the input device 31C, and the photographing unit 31A are connected to the client 9, and the face data of the operator 4 is acquired by the client 9.

The acquired face data is transmitted to the plant monitoring and control device 330 via the information network 10. All the processes after step S02 in the first embodiment and FIG. 8 are performed by the plant monitoring control device 330 that has received the face data. Although the client 9 is installed in the monitoring and control room, the client 9 may be installed in a remote location by using a public LAN instead of a local LAN for the information network.

As described above, according to the plant monitoring and control device and the plant monitoring and control system 300 according to the third embodiment, the plant monitoring and control system 300 with enhanced security can be operated even at a place away from the plant.

Embodiment 4.
Hereinafter, the plant monitoring and control device and the plant monitoring and control system according to the fourth embodiment will be described with reference to the drawings, focusing on the parts different from the third embodiment.
FIG. 11 is a block diagram showing the configuration of the plant monitoring and control system 400.

The same components as those in the third embodiment are designated by the same reference numerals. The plant monitoring and control system 400 is a system in which a mobile terminal 11 operated by the operator 4B and an access point 12 are added to the plant monitoring and control system 300 described in the third embodiment. The mobile terminal 11 includes a display device such as a display, a camera (shooting unit), and an input unit such as a touch panel. The access point 12 is connected to the information network 10, and the mobile terminal 11 can wirelessly communicate with the access point 12.

Since the mobile terminal 11 has a built-in camera, it is possible to transmit face data to the plant monitoring control device 330 as in the third embodiment. By having the mobile terminal 11, the operator 4B can monitor and control the devices 6A to 6D constituting the plant other than the monitoring and control room. For example, it is possible to issue an operation command while directly checking the operation of the device 6D on site.

As described above, according to the plant monitoring and control device and the plant monitoring and control system 400 according to the third embodiment, the operator 4B does not go back and forth between the client 9 and the devices 6A to 6D in the monitoring and control room, and the devices 6A to 6D. 6D operation becomes possible, and work time can be shortened.

Although the present application describes various exemplary embodiments and examples, the various features, embodiments, and functions described in one or more embodiments are applications of a particular embodiment. It is not limited to, but can be applied to embodiments alone or in various combinations.
Therefore, innumerable variations not exemplified are envisioned within the scope of the techniques disclosed in the present application. For example, it is assumed that at least one component is modified, added or omitted, and further, at least one component is extracted and combined with the components of other embodiments.

100,300,400 Plant monitoring and control system,
30,330 Plant monitoring and control device, 31A imaging unit, 31B display device,
31C input device, 33 operator information storage unit, 34 operator collation unit,
35 Group Definition Department, 36 Operation Command Department, 37 Display Processing Department,
38 Operator information management table, 39 Authority group table,
39a equipment group table, 39b monitoring screen group table,
39c alarm group table, 4,4B, ABC operator,
5A, 5B process control device, 6A-6D equipment, 7 control network,
8A, 8B field network, 9 clients, 10 information networks,
11 mobile terminals, 12 access points.

Claims (6)

A plant monitoring and control device that monitors and controls each of the above-mentioned equipment in a plant having a plurality of equipment.
An imaging unit that photographs the face of a person who intends to use the plant monitoring and control device, and a photographing unit.
An operator information management table that records the IDs of multiple operators, the names of the operators, the names of the authority groups to which the operators belong, and the face data of the operators.
An authority group table for recording the authority group name, the device group name that can be operated by the operator belonging to the authority group name, and the monitoring screen group name that can be displayed to the operator belonging to the authority group name.
A device group name in which each device is grouped, a device group table for recording the device number of each device belonging to the device group name, and a device group table.
A monitoring screen group name in which a part of a plurality of monitoring screens for monitoring each device is grouped, a monitoring screen group table for recording the monitoring screen number of the monitoring screen belonging to the monitoring screen group name, and a monitoring screen group table.
The face data of the person who intends to use the plant monitoring and control device photographed by the photographing unit is compared with the face data of each operator stored in the operator information management table, and both match. With the operator collation unit that determines whether or not to do
An operation command unit that selects the equipment that can be operated by the operator certified by the operator collation unit from the authority group table and the equipment group table.
From the authority group table and the monitoring screen group table, the monitoring screen that the operator authenticated by the operator collation unit has the right to use is selected and displayed on the display device as a list of available monitoring screens. A plant monitoring and control device equipped with a display processing unit. It is provided with an alarm group table that records an alarm group name and an alarm ID belonging to the alarm group name.
The authority group table has an alarm group name that can be displayed to each operator belonging to the authority group name.
The display processing unit determines whether or not the operator authenticated by the operator collation unit has the authority to receive an alarm regarding an abnormality that has occurred in each of the devices, using the authority group table and the alarm group table. The plant monitoring and control device according to claim 1, wherein the alarm is displayed on the display device when the determination is made using the above. The photographing unit acquires the face data of the operator at all times or at predetermined intervals, and the operator collation unit forces the operator when it is determined that the operator has left the seat or has changed to another person. The plant monitoring control device according to claim 1 or 2, wherein the operation is terminated by logging out. The plant monitoring and control device according to any one of claims 1 to 3.
With multiple of the above equipment
It is equipped with a process control device that controls a plurality of the above-mentioned devices.
The process control device is connected to the plant monitoring control device via a network.
Each of the devices is a plant monitoring and control system connected to the process control device via a network. The plant monitoring and control system according to claim 4, further comprising a client that is connected to the plant monitoring and controlling device via a network and operates the plant monitoring and controlling device. The plant monitoring and control system according to claim 5, further comprising a mobile terminal having the photographing unit and the display device, which is connected to the plant monitoring and control device via a network.

Images