JP7117675B1 - data management system - Google Patents

Abstract

A data management system that guarantees the authenticity of data without involving the user in the process of putting together integrated data for creating an audit trail in a server. A data management system (1) transfers first data including log data and second data including important production data to production facility control means (operating equipment (10), PC (11)) for driving and operating a production facility (100). Temporarily stored, the first data and the second data are communicated to the server 300 at a timing set according to the production facility, and all the first data and the second data are individually or integrally Integrate into integrated data that is general-purpose format data. [Selection drawing] Fig. 1

Description

TECHNICAL FIELD The present invention relates to a data management system that allows a server computer (hereinafter referred to as a server) to integrally manage production-related data such as operation logs, action logs, and environment logs related to production equipment. More specifically, the present invention relates to a data management system that allows a server to integrally manage operation log data and important production data that are generated as a result of the operation of control means for production equipment.

More specifically, regardless of whether or not the control means for production equipment is controlled by a general-purpose OS, in particular, regardless of whether or not the data generated by the production equipment is readable general-purpose format data, all data is acquired by the server at a timing according to the characteristics of the production equipment. In the server, the present invention also relates to a data management system that automatically integrates all data for compiling an audit trail report as a single readable general-purpose data whose authenticity is guaranteed.

When a non-standard product is found in an article, for example, a drug, it is audited to find out where the problem occurred in the manufacturing, transportation, storage, etc., and at what point in time and how much the non-standard product was generated. In the past, audits were based on data output to paper media to prevent data falsification, but in recent years there has been a shift to audits based on electronic data due to requests to reduce the burden of investigations.

In addition to user login authentication data, operation log data such as operation time and operation details, operation log data such as production speed generated by driving individual production equipment, raw material type / blend, temperature related to production equipment・Important production data, including environmental log data such as humidity and pressure, are extracted along with the audit trail to investigate the cause of non-standard products.

In the field of office work, many applications are used on general-purpose OSs of personal computers. Each application is updated in response to the update of the general-purpose OS. On the other hand, in the field of production control, a microcomputer equipped with only a microprocessor and memory is operated by a touch screen device (hereinafter referred to as an operation device), etc., and the operations necessary for production equipment are processed in a fixed procedure. There are many.

In the field of production, it is also possible to manage production using a PC using an application that runs on a general-purpose OS. However, when the general-purpose OS is updated, it is troublesome to check whether or not a problem occurs. Difficult to switch to

Many production facilities are driven by the above-mentioned operation devices, and by executing operation programs and data management programs designed based on algorithms specific to each manufacturer, log data and important production data are converted into data other than general-purpose format data. Obfuscated format data generated by the manufacturer's own algorithm, generated in the operation device.

The applicant of the present application has provided, in Patent Document 1, a technique of a repeater that communicates various information generated by the operating device to a server. The operation log data and important production data are communicated from the operating device to the server via the communication means via the relay device, or transferred to the server via a portable storage means, such as a USB memory, and stored as audit trail data. It had been.

Various types of data generated by production equipment are generated as text data, general-purpose format data such as CSV data, or obfuscated format data that cannot be easily read by humans. In the case of obfuscated format data, it is decrypted into general format data and used as the basis for creating an audit trail.

If the data generated by production equipment is made obfuscated data that is difficult for humans to read and falsify as it is, there is an advantage that falsification of data is difficult and authenticity is easily secured as data for audit trail. In the case of such obfuscated format data, users of individual production equipment can use a decryption application based on the decryption rules provided by each production equipment manufacturer to create general-purpose formats that can be viewed and edited by people, such as text data and CSV data. I had the data decrypted.

General-purpose format data of production equipment was collected on a server and organized as a single piece of data for creating an audit trail of the entire production equipment. However, there was room for users to be involved in the process of collecting data in different obfuscated formats from multiple production facilities, decoding it into general format data, and putting it together as data for creating an audit trail. is not necessarily guaranteed.

Patent Literature 2 discloses a technology of a data management system that satisfies simultaneity, which is one requirement of audit trail data. The data management system is provided with means for regulating the operation of the device, and if any of the device, the server, or the communication means does not function, the operation of the device is regulated so as not to generate a processing record due to the operation of the device, and is used as an audit trail. The data is stored only on the server.

According to this technology, simultaneity is strictly considered, and a record is left only in the server at the same time as the audit trail data is generated, thereby ensuring the simultaneity of the audit trail data. However, among production facilities, there are facilities that generate hundreds of pieces of important production data per minute. It also puts a lot of load on the server.

Also, even if a data management system is developed to be applied to a specific production plant, whether or not it is suitable for the production environment where it is applied depends on the control of the production plant's communication capacity, server capacity, production equipment itself, etc. Since it relies on means capability, there is also the problem that it is difficult to completely confirm suitability only by application tests within the developers of the data management system.

Patent Literature 3 discloses a technique of analyzing output log information and outputting a report in which operations and action records are translated into a simple natural language. Specifically, to make it easier for users without specialized knowledge to understand the log information, add necessary data to the log information, exclude part of the log information table from processing, and only the necessary data is to be translated into natural language.

According to this technology, since part of the log data is modified, it is impossible to reproduce genuine data without omission. In addition, the technology is not suitable for production systems because it does not take into account important production data, which is a huge amount of data.

Patent Literature 4 discloses a technique for accumulating information from a web server in a log collection server. According to this technology, a timetable for transmitting log data from a web server to a log collection server is provided, and a transmission interval such as "every minute" is set, or a starting point such as "every five minutes from 9:00 am" and It is said that the load on the log server can be reduced by setting the transmission interval and dispersing the transmission timing.

However, important production data are generated at timings different from the generation timing of operation logs, for example, at various timings that differ depending on the production process such as raw material preparation, tableting, tableting, etc., and a large number of various types of information are generated. be. Therefore, there is a problem that it is difficult to achieve both reduction of the load on the server and timely acquisition of essential data simply by setting the transmission interval.

In addition, although it is said that a format unification means is provided for unifying differences in formats based on differences in operating systems, it merely deals with differences in general-purpose OSs. Since it was only to unify differences in log output character codes, etc., in response to differences in general-purpose OS, it is said that it is not possible to respond to obfuscated data generated by multiple operation devices with different algorithms depending on the manufacturer of the production equipment. There were also issues.

Patent Document 1: Japanese Patent Application No. 2021-559204 Patent Document 2: Japanese Patent Application Publication No. 2021-140288 Patent Document 3: Japanese Patent Application Publication No. 2017-49962 Patent Document 4: Japanese Patent Application Publication No. 2004-295303

The problem to be solved by the present invention is to provide a data integration system in which the authenticity of the data is guaranteed without the involvement of the user in the process of putting together the integrated data for creating an audit trail on the server. be.

A data management system according to a first aspect of the present invention includes a plurality of production facilities, communication means, and a server, and log data relating to the operation of the production facilities and important production data relating to the production of goods are stored in the server. In a data management system to be managed, the log data and its occurrence time are treated as first data, the production important data and its occurrence time are treated as second data, and the first data and second data are sent to the server through the communication means. A data management system to be acquired, wherein the production facility comprises production facility control means, the production facility control means comprises data processing means and storage means, the data processing means stores first data and The second data and the second data are temporarily stored in the storage means, and the server includes data integration means and server storage means, and the data integration means is the first data and the first data communicated from the production facility control means. 2 data are communicated to the server through the communication means at the timing set according to each production facility, and all the first data and second data are made into general-purpose format data individually or integrally. It is characterized by being integrated into the integrated data and stored in the server storage means.

The production equipment control means of the first invention may be a PC that drives the production equipment by means of a general-purpose OS, may be the operating device, or may be a mixture of both. Moreover, the algorithm by which the operation device is operated may not be unified, and a plurality of operation devices may be operated by different algorithms.

The data generated by the control means for production equipment may be readable general-purpose format data, or may be obfuscated format data that is difficult to artificially process. The data generated by the control means for production equipment is temporarily stored in the storage means forming the control means for production equipment, and is transmitted to and acquired by the server at the timing set according to the production equipment. The timing of causing the server to communicate may be set according to the characteristics of the production equipment, the first data, and the second data.

"According to the production facility" specifically means, taking a pharmaceutical factory as an example, whether it is day shift or night shift, mixing lots of raw materials for drugs, the number of divisions of drug sheets, the number of belting divisions of drug sheets, etc. , it may be set according to the division of production in each production facility. Since the first data is log data for which an operation command is issued after login and after login, the first data may be communicated with the server for each login, but is not limited to this.

As for the second data, the timing to be communicated to the server may be set according to the type and amount of generated important production data. If the important production data is a huge number of finely divided data, it is sufficient to set the timing at which a predetermined amount of data is gathered and have the server communicate the data.

When adding a repeater to an operation device that has been used in the past and making it communicate with the server, in order to reduce the need to modify the operation device, it is recommended to send all temporarily stored data to the server each time communication is performed. can be The data to be temporarily stored may be temporarily stored within the temporary storage capacity by deleting old data and adding new data, but is not limited to this. Of the temporarily stored data, the data communicated with the server may be deleted at predetermined timings.

On the other hand, when introducing new production equipment, in order to detect minor defects in the production process at an early stage, limit the defects, and correct the defects at an early stage, we set the production limit to a small amount at the beginning. However, as the production progresses smoothly, the division of production for communicating data may be expanded.

Also, the first data and the second data may be individual integrated data, or the first data and the second data may be integrated data. If it is made into individual integrated data, it is easy to create an audit trail report according to the characteristics of the data. Easy to track relationships with data.

According to the first aspect of the present invention, since the first data and the second data are communicated at the timing set according to the characteristics of the production equipment, the communication load is less likely to be applied, and the data can be transmitted without undergoing artificial processing. The authenticity of the data is high because it is automatically retrieved to the server, and all data is stored in the server in a readable general-purpose format, making it easy to create audit trail reports. Play.

A second invention of the present invention is the data management system of the first invention, characterized in that any one of the production facility control means is an operating device that is not controlled by a general-purpose OS.

According to the second invention, the production facility control means provided in any of the production facilities is an operating device that is not driven by a general-purpose OS. Since the production equipment can be driven by operation equipment with different algorithms developed exclusively for each production equipment, there is no need to replace the operation equipment with a PC, and even the operation equipment that has been used in the past can be used as it is. , the temporarily stored data can be automatically acquired by the server, and an audit trail report with high authenticity can be created.

A third invention of the present invention is the data management system of the first or second invention, wherein the server further comprises data decryption means, and decrypts either the first data or the second data acquired by the server. is obfuscated data based on an algorithm specific to the production equipment, the data decoding means decodes the obfuscated data acquired by the server into general-purpose data, and then integrates the data into the integrated data. , is stored in the server storage means.

According to the third invention, even if one of the first data and the second data is obfuscated data that is difficult for humans to read and falsification as it is, in other words, encrypted data, in the server converts obfuscated format data into readable general format data and integrates it, so it is easy to create an audit trail report from the integrated data.

In order to decode the data into general-purpose format data, a decoding application based on the decoding rule provided by the manufacturer of the operating device may be used as the decoding means and stored in advance in the server storage means. The decryption application may be associated with the production equipment in advance and identified from the production equipment ID given to the data, but is not limited to this.

The general-purpose data may be text data, CSV data, or any other human-readable and editable format, and may be converted between general-purpose data. According to the third invention, even if there is obfuscated format data, it is converted into general-purpose format data in the server, so that the data generated by the operation device is made obfuscated format data, and the room for falsification is reduced. It has the effect of being able to

A fourth aspect of the present invention is the data management system according to the third aspect, wherein the server includes adding means to the data decoding means, and the adding means adds a new decoding application. there is

According to the fourth invention, when a user introduces production equipment of a new manufacturer, it is possible to easily add a decryption application corresponding to the production equipment. As a result, even when the production equipment of a new manufacturer is introduced, the data management system can be modified only slightly, and the data management system can be highly versatile.

A fifth invention of the present invention is the data management system according to the first to fourth inventions, wherein the timing for communicating the second data is set according to a predetermined lot suitable for production equipment. Characterized by

According to the fifth invention, the second data is communicated to the server at the timing corresponding to the predetermined lot suitable for the production facility. The "predetermined lot suitable for production equipment" may be a lot that must be discarded together with the defective product when one defective product is generated, but is not limited to this. The predetermined lot may be set to a reasonable lot by comparing with predetermined lots of other production facilities.

According to the fifth invention, if the lot is set to a small amount, the defect rate can be reduced according to the production equipment, and if the lot is set to a large amount, the load on communication means, etc. due to frequent data transmission can be reduced. It is possible to construct a suitable data management system within the capabilities of communication means.

A sixth invention of the present invention is the data management system according to the first to fifth inventions, characterized in that the server comprises timing changing means, and the timing changing means is capable of changing the timing. there is

According to the sixth invention, the timing at which data is communicated to the server can be changed by the timing changing means provided in the server. When new production equipment is introduced, the data communication timing of other production equipment can be changed according to the occurrence of defective products, making it possible to manage the data of the entire production equipment line without difficulty. Effective.

A seventh invention of the present invention is the data management system according to the first to sixth inventions, wherein the communication means includes regular time acquisition means, and the regular time acquisition means acquires the genuine regular time. The communication means is characterized in that, when the first data and the second data are communicated with the server, each data is communicated with the regular time added thereto.

According to the seventh invention, even if there is a difference in the internal time of the operation device or PC that controls each production facility, the time series of all data can be stored accurately. This makes it possible to make the integrated data more reliable and genuine data.

An eighth aspect of the present invention is the data management system according to the seventh aspect, wherein the data integration means comprises duplicate data determination means and duplicate display means, and the determination means determines whether the first data or the second data For data, when the occurrence time is common and the normal time is different, the first data or the second data to which the old normal time is assigned is determined as duplicate data, and the duplicate display means overlaps the duplicate data. After being displayed, all the first data and the second data are stored in the server as integrated data, and the integrated data for creating an audit trail is created by excluding the duplicate data from the integrated data. .

According to the eighth invention, even if a power failure occurs during data communication, the server stores the faulty data including the partially lost data due to the power failure. However, since all duplicated data is judged based on the normal time and the older duplicated data is displayed in duplicate, even if all the data including the defective data are integrated into the integrated data, the duplicated data can be identified. is easy to remove.

Since the integrated data before creating the audit trail report is all data that has not been falsified, the authenticity of the integrated data is guaranteed. In addition, since integrated data for audit trail creation is created by excluding redundant data, an effect is obtained that an audit trail report can be easily created.

According to the first aspect of the present invention, since the first data and the second data are communicated at the timing set according to the characteristics of the production equipment, it is difficult to impose a communication load, and the data is transmitted without undergoing artificial processing. Since the data is automatically acquired by the server, the authenticity of the data is high, and since all data is stored in the server in readable general-purpose format data, it is easy to create an audit trail report, which is an unprecedented advantageous effect. play.
・According to the second invention, there is no need to replace the operation device with a PC, and even the operation device that has been used conventionally can be used as it is. The effect is that it is possible to create an audit trail report with a high

・According to the third invention, even if there is obfuscated format data, it is converted to general-purpose format data in the server, so the data generated by the operation device is made obfuscated format data, reducing the possibility of falsification. It has the effect of being able to
- According to the fourth aspect of the present invention, even if production equipment of a new manufacturer is introduced, the data management system can be modified only slightly, and the data management system can be highly versatile. can.
・According to the fifth aspect of the present invention, if the lot is set to a small amount, the defect rate can be reduced according to the production equipment, and if the lot is set to a large amount, the load on communication means due to frequent data transmission is reduced. Therefore, it is possible to construct a suitable data management system within the capabilities of existing communication means.

・According to the sixth aspect of the present invention, when new production equipment is introduced, the data communication timing of other production equipment can be changed according to the occurrence of defective products. As a whole, there is an effect that data can be managed without difficulty.
- According to the seventh invention of the present invention, even if there is a difference in the internal time of the operation device or PC that controls each production facility, the time series of all data can be stored accurately, Integrated data can be made more reliable and true data.
- According to the eighth aspect of the present invention, since the integrated data before creating the audit trail report is all data that has not been falsified, the authenticity of the integrated data is guaranteed. In addition, since data without duplication can be easily collected by using the duplication display as a clue, there is an effect that it is easy to create an audit trail report.

A schematic diagram of a production line (Example 1). Explanatory drawing of data communication timing (Example 1). Block diagram of the system (Example 1). Example of integrated data (Example 1). A specific example of integrated data (Example 1). The block diagram of a duplicate display means (Example 2). Example of duplicate data (Example 2). Example of duplicate display (Example 2). The flow chart of data processing (Example 2).

A plurality of production facilities communicate with a server by means of communication, and the data generated by each production facility is temporarily stored in the form of data generated by each production facility in a device that operates the production facility, and is adapted to the characteristics of the production facility. I made it communicate with the server at the appropriate timing. Then, the server stores all the data as genuine and single integrated data in readable general-purpose format. From the integrated data, it is easy to extract and arrange a part of it and create an unrewritable audit trail report.

In Example 1, a data management system 1 applied to a chemical production line will be described with reference to FIGS. 1 to 5. FIG. FIG. 1 shows an example of a production line. FIG. 2 shows an example of timing for communicating data to the server. FIG. 3 shows a block diagram of the data management system 1. As shown in FIG. FIG. 4 shows an explanatory diagram of integrated data, and FIG. 5 shows a specific example of integrated data.

In the production line, a plurality of production facilities 100 with shared functions are arranged in the order of production steps as indicated by arrows (see FIG. 1). In the data management system 1 , each production facility 100 communicates with a server 300 via communication means 200 . The communication means 200 may be connected to a wireless LAN through a Wi-Fi connection, or may be connected through a wire through an Ethernet connection, and the communication standard is not limited.

For example, login information transmitted from a worker's portable operating device by short-range wireless communication may be received by the receiving unit of the operating device and logged in, and the operating device may be operated to generate important production data. . A regular time acquisition means 400 is connected to the communication means so that the regular time is also acquired when the server acquires data.

At least one of the production equipment control means for driving and controlling the production equipment 100 may be the operating device 10 for operating a microcomputer, and the other production equipment control means may be the PC 11 or the like. The server 300 acquires all of the first data and second data, including the first data and second data temporarily stored in the operation device 10, and stores integrated data in readable general format data. be.

In the PTP sheet production line, a drug compounding machine 12 (see the dashed line in FIG. 1) is arranged upstream, a tablet filling machine 13 that packs tablets into the PTP sheet, an inspection machine 14 that inspects for missing tablets, and a stacking of the PTP sheets. The strapping machine 15 and the like for binding by hand are arranged in the order of the production process (see FIG. 1). Each production facility 100 communicates the first data and the second data to the server at timing suitable for the production facility by means of timing changing means (see FIGS. 2 and 3) for changing the timing of data communication to the server 300. I am letting

Here, in order to facilitate understanding of the present invention, with reference to FIG. is the second data, and the timing for communicating data to the server for each production facility will be specifically described. In FIG. 2, the timing for generating data can also be changed.

The drug blender 12 inputs a large amount of drug raw materials to form tablets by a predetermined unit amount, but the opportunity to generate the first data is limited to when the device is operated or when the formulation is changed. The production important data relating to the drug compounding machine, which is the second data, is generated by measuring a predetermined amount of the drug raw materials to be mixed and setting one production unit to be compounded as one lot. Both the 1st data and the 2nd data can be communicated to the server once for each production unit that becomes a new mixing lot. may be set to let the server communicate.

The tablet filling machine 13 puts the tablets manufactured in the upstream process into the depressions of the PTP sheet, thermally welds the moisture-proof sheet, and fills the tablets. The first data of the tablet filling machine can be generated at the start of work, at the time of changing the shape of the PTP sheet, at the time of operation or change such as changing the heat welding temperature, etc., and it is sufficient to communicate with the server once a day. Just do it.

On the other hand, the second data may be generated for each number of PTP sheets that can be produced from the predetermined number of tablets forming one production unit in the upstream pharmaceutical compounding machine. For example, if the number of tablets in one production unit is 20,000, and 10 tablets are packed per sheet, the generation timing should be set to 2,000 PTP sheets. When changing the thermal welding conditions, the set number may be changed to a smaller value such as 500 so that the second data is generated at short intervals. The second data may be communicated to the server each time one production unit of tablets is packed.

The inspection machine 14 inspects the PTP sheet for missing tablets, missing tablets, and the like using a surveillance camera. The first data may be generated when the operator operates the inspection machine or when the inspection speed is changed, and may be acquired by the server once a day.

On the other hand, the second data is generated by inspecting all PTP sheets. In order to reduce the defect rate, 100 PTP sheets are sent to the server as one lot for inspection, and if any defect occurs, the defective product is eliminated downstream. If no defects occur, it is preferable to change the communication to the server for each of a plurality of lots, for example, every two lots, and change the timing for communicating the second data to the server according to the defect rate. In addition, if the production line is set to automatically stop when a defective product is detected, the second data may be communicated each time the production facility stops.

The first data of the strapping machine 15 may be generated at the time of operation such as starting work or changing the tension of strapping, and the data may be communicated to the server at the time of operation or setting change. The second data for the strapping machine may be generated by generating a preset number of bundles, for example, 1,000 bundles as one lot, and communicating the data to the server simultaneously with the communication of the first data. Alternatively, the number of sheets loaded on the strapping machine at the same time, for example, 20 sheets, may be treated as one lot, and the second data may be generated and communicated to the server each time.

The above examples of the drug compounding machine, tablet filling machine, inspection machine, and strapping machine are merely examples, and both the first data and the second data can reduce the defect rate in the production line and exhibit high production efficiency. Thus, data may be generated and communicated to the server at arbitrary timing according to the characteristics of the production equipment.

For the first data, it is possible to select between operation and operation change, and for the second data, a predetermined number of tablets packed, a predetermined number of inspections, a predetermined number of It is preferable to be able to arbitrarily change the timing of the acquisition by the server, such as setting the number of bundles to one unit (predetermined lot). Each piece of data may be communicated at a preset timing or when a specific operation such as a data communication operation or a production facility stop operation is performed.

Here, the overall configuration of the data management system 1 will be described with reference to FIG. The data management system 1 includes a plurality of production facilities 100 including a tablet filling machine 13, an inspection machine 14, a banding machine 15, etc., a communication means 200, a server 300, and a regular time acquisition means 400.

The tablet filling machine 13 manufactured by Company A is a production facility that is driven by a microcomputer 16 and operated by an operating device 10 conventionally incorporated in a production line. communicated with the server. The inspection machine 14 manufactured by Company B is driven by a microcomputer 18 and operated by an operating device 19 in the same manner as the tablet filling machine, but it is an operating device with built-in communication means 20 . A strapping machine 15 manufactured by Company C is operated by a PC 11 that communicates with a server via a built-in communication means 21 .

The touch panel screen device forming the operation device 10 or the like may be provided with control means 22 , storage means 23 , input/output means 24 and display means 25 . Each production facility includes a production facility driving section 26 such as a transfer machine and a heat welding machine driven by a microcomputer or PC, and a production important data acquisition section 27 for acquiring production important data.

The server 300 includes control means 30 consisting of a central processing unit and server storage means 31 consisting of a hard disk or the like. The control means 30 functions as data integration means, timing change means, and data decoding means, and also functions as additional means for data decoding means forming new decoding applications.

The server storage means 31 stores the first data, the second data, or the integrated data of the first data and the second data as a whole, and decodes the obfuscated format data generated by each production facility into general format data. It functions as storage means for decoding applications and storage means for storing timing information for communicating data from each production facility to the server (see FIG. 3).

The communication means 200 may communicate via a wireless LAN, and the communication standard is not limited, but a wired connection via an Ethernet connection is preferable because the communication is stable. A regular time acquisition means 400 is connected to the communication means, acquires the true regular time, and when the server acquires the data communicated from the production equipment, the regular time is also stored in the server. (See FIGS. 1 and 5). The regular time acquisition means may be any of a GPS functioning as a satellite radio clock, a radio clock, a time calibration server, etc., and is not limited.

Each production facility 100 has a different generated data format based on an algorithm that differs from manufacturer to manufacturer. The tablet filling machine 13 generates data in machine language format data consisting of binary data in accordance with Company A's standards, and the inspection machine 14 complies with Company B's standards in obfuscated format data encrypted so that it cannot be easily read by humans. to generate the data. The strapping machine 15 generates data in general format data such as text format data by an application driven by a general purpose OS (see FIG. 4).

The steps up to the integration of the data generated by each production facility 100 by the server 300 will be specifically described with reference to FIG. The first data and second data generated by the tablet filling machine are acquired by the server 300 (see the broken line in FIG. 4A) as they are as the machine language format data 40 . In the server, the machine language format data is decoded by a decoding application based on the algorithm of company A, and the first data and the second data are made into general-purpose format data, respectively.

The data including the first data and the second data generated by the inspection machine is not only machine language format data, but also obfuscated format data 41 that has undergone obfuscation processing so that it cannot be easily deciphered by humans. . Therefore, in the server, the encrypted data is decrypted by a decryption application that renders the encrypted data readable based on the algorithm of Company B, and the first data and the second data are converted into general-purpose format data. Since all the data generated by the strapping machine (C) is the general-purpose data 42, it is communicated to the server without being subjected to data decoding processing.

In the server, the first data and second data of the tablet filling machine, the inspection machine, and the banding machine, which are all general-purpose format data, are integrated as integrated data. When integrating data, the data should be integrated using the data generation time 50, the production equipment ID 51 that identifies the production equipment, and the normal time 52 at which the data was acquired by the server as an index (see the ▼ mark in FIG. 5). .

FIG. 4A shows an example in which the first data and the second data are separately integrated. An example of integration is simply shown in FIG. 4(B). Here, for easier understanding, a specific example of integrated data will be described with reference to FIG.

5A shows an example of integrated data of the first data, FIG. 5B shows an example of integrated data of the second data, and FIG. 5C shows the first data and the second data. is shown as an example of integrated data in which Each of the first data and the second data is composed of an index for distinguishing the data (see the ▼ mark in each figure in FIG. 5) and other arbitrary information. The arbitrary information of the first data is, for example, the user ID 53, and operation contents 54 such as login, logoff, and speed change operation. be done.

5A to 5C, the occurrence time 50, the production equipment ID 51, and the regular time 52 are stored as essential information forming an index (see ▼ mark in FIG. 5). Of course, if the time is controlled so that the occurrence time 50 and the regular time 52 match, only either the occurrence time or the regular time may be used as an index. The first data including the log data and the time of occurrence integrally stores user information such as a user ID and operation details such as login and speed change (see FIG. 5A).

The second data including the important production data and the time of occurrence stores data such as temperature, humidity, normal, defective, etc., but user information such as the user ID 53 involved in the data generation may be stored. (See FIG. 5(B)). The integrated data obtained by integrating the first data and the second data may be obtained by integrating the first data and the second data in chronological order (see FIG. 5(C)). In the integrated data integrated as one, it is easy to analyze the relationship between the log data and the important production data in chronological order.

The data integrating means converts the respective first data into normal times b1, b2, b3, b, . In order, they can be integrated into integrated data of only the first data. Even if the internal time of each production facility, for example, the internal time of production facility A and that of production facility B are different, and the occurrence time is different from the true time, the data is received by the server based on the true regular time. Thus, the data generated by the production equipment A and the production equipment B can be organized in the order of data generation.

Similarly, the data integration means can integrate the respective second data in the order of the regular time, using the time of occurrence, the production equipment ID, and the regular time as indexes (see FIG. 5(B) with the ▼ mark). . Even when the data integration means integrates the first data and the second data to create integrated data, the data may be integrated in the same order of regular time (see FIG. 5(C)). When creating an audit trail report, it is sufficient to extract data within the necessary range from the entire integrated data and create it.

In a second embodiment, a data management system 2 in which data integration means is provided with duplicate data determination means and duplicate display means will be described with reference to FIGS. 6 to 9. FIG. FIG. 6 shows a block diagram of the data management system 2. As shown in FIG. FIG. 7 shows a diagram for explaining data in a state in which data is repeatedly communicated from one operation device and becomes duplicated data.

FIG. 8 shows a diagram for explaining an example of overlapping processing due to power down or the like. FIG. 8(A) shows integrated data obtained by integrating defective second data, FIG. 8(B) shows genuine second data without defects, and FIG. 8(C) shows defective data. Integrated data obtained by integrating authentic second data with second data is shown. FIG. 9 shows a flow chart of data processing of the data management means.

In the data management means 2, in the server 300 communicating with a plurality of production facilities 100 indicated by broken lines, the data integration means comprises duplicate data determination means 60 and duplicate display means 61 (see FIG. 6). The judging means judges whether or not the communicated data is duplicated data, based on the regular time assigned to each unit of data when data in units constituting the first data or the second data is communicated to the server. Let When data determined to be duplicated data is included in the integrated data, the duplicate display means causes the entire data of the unit (lot) including the determined data to be duplicated and displayed (see FIG. 7).

A conventional operating device may only have a function of collectively communicating temporarily stored data, like the tablet filling machine exemplified in the first embodiment. For example, there is an operating device that temporarily stores data for three days and deletes data older than three days in order. In the case of such an operation device, since the duplicated data becomes enormous, it is preferable to add a duplication indication 62 to the data so that it can be easily deleted from the integrated data (see the shaded area in FIG. 7).

In addition, even if part of the specified unit amount of data is not normally sent or received due to power failure, communication failure, etc., that unit of data will be automatically re-transmitted to the server after the communication failure, etc. is recovered. This may result in duplicate data. Here, for ease of understanding, a specific description will be given with reference to FIG. 8 by taking as an example the second data in which the amount of data collected as one unit is communicated.

For example, when the server receives the data with the data generation times a3 to a60 as one unit at the normal time b6, a loss 63 occurs in part of the data in a60 due to power failure (Fig. 8 (A ) see the dashed line in the figure). When such defective data is transmitted, the communication means retransmits the complete data at the next timing (b8), and the data in that unit is rereceived (see FIG. 8(B)). Then, in the integrated data, defective data (received at the regular time b6) with a part of the data missing and genuine data (received at the regular time b8) are redundantly recorded (Fig. 8 ( C) see figure).

Here, with regard to data decoding processing, integration processing, and duplication determination processing, procedures for integrating data and duplicating display will be described with reference to the flow shown in FIG. FIG. 9A shows a flow diagram of data decoding processing and integration processing, and FIG. 9B shows a flow diagram of duplication determination processing.

The data temporarily stored in the operation device or PC for operating each production facility is communicated to the server through the communication means at the timing set for each (S100). When the server receives each data, the normal time obtained from the GPS is given by the communication means (S110). Next, based on the production equipment ID of the received data, it is determined whether or not the data is obtained from the production equipment that requires decryption processing (S120).

When it is determined in step 120 that decryption is necessary, the data decryption means reads the decryption application corresponding to the production equipment ID from the server storage means (S130), decrypts the data, and decrypts it into general-purpose format data. (S140). When it is determined at step 120 that the production facility ID does not require decryption, the process proceeds to data integration processing (S150). The data integration means integrates the general-purpose format data (S150), and the integrated data is stored in the server storage means (S160).

Duplication determination processing is performed on the integrated data. The timing at which the duplication determination process is performed is not limited, and may be performed at predetermined intervals set in advance or at an appropriate time before the integrated data for audit trail creation is created. The duplication determination process is started (S200), and the determination means uses the production equipment ID and the time of occurrence of the acquired new data (see FIG. 8B) as indexes to determine whether or not the data is duplicated data (S210). ). When it is determined that the data is duplicated data, it is determined which regular time is newer (S220).

For example, in the data shown in FIG. 8(C), since the generation time of the unit data from a3 to a60 overlaps with the production facility ID, the regular time of b8, which is newer than b6, is stored in the unit. The data is determined to be genuine data, and the data of the unit received at b6 with the old regular time is determined to be duplicate data.

In step 220, for duplicated data in which the old regular time is stored, the data of that unit is displayed duplicated (S230), and the process proceeds to data integration processing (S240). Specifically, the unit data generated from A3 to A60 received by B6 is given an overlap indication 62 (see FIG. 8(C)). On the other hand, the data of the unit for which the regular time is determined to be new in step 220 is integrated into the integrated data without overlapping display (S240).

When it is determined in step 210 that the equipment ID and the time of occurrence are different, the process proceeds directly to step 240 to execute data integration processing. When all the data are integrated into the integrated data, the duplication determination process ends (S250). Although omitted in the flow chart, duplicated data displayed in duplicate may be deleted from the integrated data (see FIG. 7) according to the storage capacity of the server storage means. The timing of data deletion is not limited, and may be deleted at any timing after data integration.

When creating an audit trail report, you can exclude duplicate data from the new integrated data and write an unrewritable audit trail report. Of course.

In addition, as in the case of introducing new production equipment, if there is no corresponding column in the integrated data to store the new type of important production data, a new information column is added to the database in the data integration process, and the new information column is added to the database. For other lines that were recorded before the addition of , the added information column item should be left blank.

(others)
・In the first embodiment, a production line with three types of production equipment that temporarily store either machine language format data, obfuscated format data, or general-purpose format data has been described, but the data format is not limited. Of course.
- In this embodiment, an example in which the server is provided with the data decryption means has been explained, but if general-purpose format data is temporarily stored in all the production equipment, the data decryption means, etc. may be omitted. Of course.
- The embodiments disclosed this time are illustrative in all respects and should be considered not restrictive. The technical scope of the present invention is not limited to the above description, but is indicated by the scope of claims, and is intended to include all modifications within the scope and meaning equivalent to the scope of claims.

1, 2 ... data management system,
DESCRIPTION OF SYMBOLS 100... Production equipment, 200... Communication means, 300... Server, 400... Regular time acquisition means,
DESCRIPTION OF SYMBOLS 10... Manipulator, 11... PC, 12... Pharmaceutical preparation machine, 13... Tablet filling machine, 14... Inspection machine,
15... Banding machine, 16, 18... Microcomputer, 17... Repeater,
19... Operation device, 20, 21... Communication means, 22... Control means, 23... Storage means,
24... input/output means, 25... display means, 26... production equipment driving section,
27... production important data acquisition unit, 30... control means, 31... server storage means,
40... Machine language format data, 41... Obfuscated format data, 42... General purpose format data,
50...occurrence time, 51...production equipment ID, 52...regular time,
53 User ID, 54 Operation content, 55 Arbitrary information of the second data,
60... Judgment means, 61... Duplicate display means, 62... Duplicate display, 63... Missing

Claims (8)

A data management system that includes a plurality of production equipment, communication means, and a server, and causes the server to manage log data relating to the operation of the production equipment and important production data relating to the production of goods,
A data management system in which the log data and the time of occurrence thereof are set as first data, the important production data and the time of occurrence thereof are set as second data, and the server acquires the first data and the second data through the communication means. hand,
the production facility comprises control means for the production facility;
The production equipment control means comprises data processing means and storage means,
the data processing means temporarily stores the first data and the second data in the storage means;
a server comprising data integration means and server storage means;
The data integration means communicates the first data and the second data communicated from the production equipment control means to the server through the communication means at a timing set according to each production equipment, The first data and the second data are individually or integrally integrated into integrated data made into general-purpose format data and stored in the server storage means;
A data management system characterized by: Any of the production equipment control means is an operating device that is not controlled by a general-purpose OS,
The data management system according to claim 1, characterized by: the server further comprising data decryption means;
If either the first data or the second data acquired by the server is obfuscated data by an algorithm unique to the production equipment,
The data decoding means decodes the obfuscated format data acquired by the server into general format data, integrates it into the integrated data, and stores it in the server storage means.
3. The data management system according to claim 1 or 2, characterized by: said server comprising additional means to said data decryption means;
the means for adding causes a new decryption application to be added;
4. The data management system according to claim 3, characterized by: The timing for communicating the second data is the timing according to the predetermined lot suitable for the production equipment.
5. The data management system according to any one of claims 1 to 4, characterized in that: a server comprising timing changing means,
wherein the timing changing means is capable of changing the timing;
6. The data management system according to any one of claims 1 to 5, characterized by: the communication means comprises normal time acquisition means,
The regular time acquisition means acquires the genuine regular time,
When the communication means causes the server to communicate the first data and the second data, the communication means adds the regular time to each data and causes the data to be communicated.
7. The data management system according to any one of claims 1 to 6, characterized by: The data integration means comprises duplicate data determination means and duplicate display means,
the determining means determines that the first data or the second data to which the old normalized time is assigned is duplicated data when the first data or the second data has the same occurrence time but different normalized times;
After the duplicate display means duplicates the display of the duplicate data,
All of the first data and the second data are stored in a server as integrated data, and integrated data for creating an audit trail is created by excluding the duplicate data from the integrated data.
8. The data management system according to claim 7, characterized by:

Images