JP7229185B2 - Activation device, system control device, activation method and activation program - Google Patents

Description

TECHNICAL FIELD The present application relates to a boot device, a system control device, a boot method, and a boot program.

High security management is required for system controllers that monitor and control power plant systems, water purification plant systems, and the like. There is a two-stage authentication method as an authentication method for starting such a system control device. For example, a method is disclosed in which a first authentication unit performs authentication using authentication information including user attributes, and a second authentication unit performs authentication using an authentication method according to user attributes. In this authentication method, a security point is given to a successfully authenticated user, and the scope of the user's access rights is determined according to the security point (see Patent Document 1, for example).

JP 2011-253342 A

System controllers for various plant systems are required to have high security management and highly stable operation that prevents abnormal operations and unnecessary stoppages. In the conventional startup authentication method, access rights are only granted to users who are successfully authenticated, and users can launch any tools and programs within the scope of their access rights. can. Therefore, even within the scope of access rights, when a user starts multiple programs at the same time, unexpected interference between programs, unexpected changes in setting parameters, etc. may occur. As a result, problems such as abnormal operation and unnecessary stoppage of the system controller may occur.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems, and to provide an activation device that does not cause unexpected interference between programs, unexpected changes in setting parameters, etc. when multiple programs are activated at the same time. With the goal.

The activation device of the present application includes a first authentication unit that performs authentication using first account information entered by a user at the time of activation, and a second account information entered by the user that is different from the first account information after successful authentication by the first authentication unit. The user level is determined based on the second authentication unit that authenticates with two account information and the second account information that has been successfully authenticated by the second authentication unit, and one tool corresponding to the determined user level is activated. and a tool activating part, and one tool corresponding to the level is only one tool selected from a plurality of tools registered in advance corresponding to the user's level.

In the activation device of the present application, a first authentication unit performs authentication using first account information entered by a user at the time of activation, and after successful authentication by the first authentication unit , information entered by the user that is different from the first account information is provided. A second authentication section that authenticates with the second account information, and a user level is determined based on the second account information that has been successfully authenticated by the second authentication section, and one tool corresponding to the determined user level is provided. and a tool activation part to be activated, and one tool corresponding to the level is only one tool selected from a plurality of tools registered in advance corresponding to the user's level. programs, etc., are not started at the same time. Therefore, it is possible to avoid problems such as abnormal operation after startup and unnecessary stop.

1 is a configuration diagram of a system control device according to Embodiment 1; FIG. 4 is a flowchart of a method for starting the system control device according to Embodiment 1; FIG. 10 is a configuration diagram of a system control device according to Embodiment 2; 10 is a flow chart of a method for starting the system control device according to the second embodiment; 10 is a flow chart of a method for starting the system control device according to the second embodiment; FIG. 2 is a schematic diagram showing an example of hardware of the system control device according to the first and second embodiments; FIG.

Hereinafter, a system control device according to an embodiment for carrying out the present application will be described in detail with reference to the drawings. In each figure, the same reference numerals denote the same or corresponding parts.

Embodiment 1.
FIG. 1 is a configuration diagram of a system control device according to Embodiment 1. As shown in FIG. A system control device according to the present embodiment is a device used for monitoring and controlling, for example, a power plant system, a water purification plant system, or the like. A system control device 1 shown in FIG. 1 includes a control section 2 for monitoring and controlling a plant system to be controlled, and an activation section 3 for activating the system control device 1 . The control unit 2 includes various devices for monitoring and controlling the plant system to be controlled. The activation unit 3 determines the level of the user based on the authentication unit 4 that authenticates the account information entered by the user at the time of activation, and the account information that has been successfully authenticated by the authentication unit 4, and corresponds to the determined user level. and a storage unit 6 storing definition files and the like necessary for authenticating the account information input by the authenticating unit 4 .

Account information is, for example, an ID (Identification) for identifying a user and a password combined with this ID. A definition file is a file that defines and records the relationship between account information, user level, tools to be activated, and the like. In this embodiment, there are two user levels, a control user level and a management user level. A user determined to be at the control user level (hereinafter referred to as a control user) has the authority to execute the control program that operates the control unit, but does not have the authority to operate the system control device at the OS (Operating System) level. It is a user who does not have On the other hand, a user determined to be at the administrative user level (hereinafter referred to as an administrative user) is a user who has the authority to operate the system control device at the OS level.

A tool activation unit 5 activates one tool corresponding to the level of a user who has been successfully authenticated by the authentication unit 4 . Here, the tools include control programs that the control user has the authority to execute, OS-level management tools that the management user has the authority to operate, and the like.

FIG. 2 is a flow chart showing the activation method in the system control device 1 of this embodiment. In the system control device 1, when the power is turned on, the OS is started in step S11. Next, in the system control device 1, an authentication application is activated in step S12. Next, in step S13, the system control device 1 accepts the user's account information. In step S13, the system control device 1 requests the user to enter, for example, an ID and a password. Next, in step S14, the system control device 1 compares the input account information with the definition file stored in the storage unit 6, and authenticates the account information. In step S14, if the account information has not been authenticated (NO), the system control device 1 proceeds to step S15 and determines whether the number of times of failure to be authenticated is equal to or less than the allowable number of times. The allowable number of times is, for example, 3 times. In step S15, if the number of failed authentications is equal to or less than the allowable number of times (YES), the system control device 1 returns to step S13 and accepts the user's account information again. In step S15, if the number of unauthenticated times exceeds the allowable number of times (NO), the system control device 1 determines that the user who entered the account information is not permitted to start up the system control device 1, Proceeding to step S16, the system control device 1 is shut down.

If the account information is authenticated in step S14 (YES), the system control device 1 proceeds to step S17 and determines the user's level based on the authenticated account information and the definition file. Next, in step S18, the system control device 1 determines whether or not the user's level is the control user level. If it is determined in step S18 that the user level is the control user level (YES), the system controller 1 proceeds to step S21 and starts the control program. If it is determined in step S18 that the user level is not the control user level (NO), the system controller 1 proceeds to step S19 to determine whether the user level is the administrative user level. If it is determined in step S19 that the user level is the management user level (YES), the system control device 1 proceeds to step S20 and activates the management tool. A management tool is a tool for managing the system control device 1, and includes, for example, an OS desktop screen, a maintenance program used for maintaining the system control device 1, and the like. If it is determined in step S19 that the level of the user is not the administrative user level (NO), the system control device 1 allows the user who has been authenticated once in step S14 but has entered the account information to activate the system control device 1. is not permitted, and the process advances to step S16 to shut down the system control device 1 . Note that the order of determination of the user level in steps S18 and S19 may be changed.

In the system controller configured in this manner, the system controller cannot be activated unless the user who entered the account information at the time of activation is either the administrative user or the control user. In addition, since the administrative user can only start the management tool and the control user can only start the control program, multiple programs cannot be started at the same time. Therefore, there is no possibility that a plurality of programs or the like are started at the same time, causing unexpected interference between programs, unexpected changes in setting parameters, and the like. As a result, problems such as abnormal operation and unnecessary shutdown of the system controller can be avoided.

Further, since the activation method of the system control device of the present embodiment can be implemented by an authentication application that automatically starts up at the time of activation, this activation method can be implemented by adding a startup program for executing this authentication application to the system control device. can be realized. Therefore, the cost for introducing this startup method into an existing system control device can be minimized.

As for the control program that operates the control unit, there are a number of pre-registered programs corresponding to the level of the control user, but the control program that the control user can start at startup is one of them. is. As for the programs that can be started by the control user at startup, the management user can set one program out of a plurality of programs by starting the management tool in advance. It is preferable that the program that can be started by the control user at startup is only one program set by the administrative user out of the programs registered in advance corresponding to the level of the control user.

Further, the management tool is an OS desktop screen, a maintenance program, and the like. A management user can use this management tool to manage the entire system controller, change setting parameters, and set control programs that can be started by the control user.

In this embodiment, there are two user levels, a control user level and a management user level, but the number may be three or more. For example, a supervisory user level may be set in addition to a controlling user level and an administrative user level. A user determined to be a monitoring user level is a user who can only start a monitoring program for monitoring the operating status of the system control device, setting values and measured values of various devices.

Embodiment 2.
FIG. 3 is a configuration diagram of a system control device according to a second embodiment. The system control device according to the present embodiment requests the user for multi-step authentication at startup. The system control device 1 shown in FIG. 3 includes a control section 2 and an activation section 3 for activating the system control device 1, like the system control device of the first embodiment. The activation unit 3 performs authentication using the second account information input by the user through an authentication unit 4 that performs authentication using the account information entered by the user at startup, and a second authentication application that is different from the authentication application used by the authentication unit 4. A second authentication unit 7 and a tool launching unit 5 that discriminates a user's level based on the second account information successfully authenticated by the second authentication unit 7 and launches one tool corresponding to the discriminated user's level. and a storage unit 6 in which definition files and the like necessary for authenticating the account information input by the authentication unit 4 and the second account information input by the second authentication unit 7 are stored. The authentication unit 4 of the system control device 1 according to the present embodiment performs authentication using the account information input by the user at startup, and determines the user level based on the input account information.

The second authentication application is an application different from the authentication application used by authentication unit 4 . Also, the second account information is information different from the account information used for authentication by the authentication unit 4 .

Account information, user levels, tools to be activated, etc. in this embodiment are the same as those in the first embodiment. The system of the second account information may be a system combining the same ID and password as the account information used for authentication by the authentication unit 4, or may be a different system.

4 and 5 are flowcharts showing the activation method in the system control device 1 of this embodiment. The flowchart in FIG. 4 and the flowchart in FIG. 5 are one flowchart connected at points A and B shown in FIGS. 4 and 5, respectively. In this embodiment, in order to perform multi-step authentication at startup, it is set in advance to perform multi-step authentication by the management tool.

In the system control device 1, when the power is turned on, the OS is activated in step S31. Next, in the system control device 1, in step S32, a multi-step authentication setting application that requires multi-step authentication at startup and an authentication application used for first-step authentication are started. Next, in step S33, the system control device 1 accepts the user's account information. In step S33, the system control device 1 requests the user to enter, for example, an ID and a password. Next, in step S34, the system control device 1 compares the input account information with the definition file stored in the storage unit 6, and authenticates the account information. In step S34, if the account information has not been authenticated (NO), the system control device 1 proceeds to step S35 and determines whether the number of times of failure to be authenticated is equal to or less than the allowable number of times. The allowable number of times is, for example, 3 times. In step S35, if the number of failed authentications is equal to or less than the allowable number of times (YES), the system control device 1 returns to step S33 and accepts the user's account information again. In step S35, if the number of unauthenticated times exceeds the allowable number of times (NO), the system control device 1 determines that the user who entered the account information is not permitted to start up the system control device 1, Proceeding to step S36, the system control device 1 is shut down.

If the account information is authenticated in step S34 (YES), the system control device 1 proceeds to step S37 and determines the user's level based on the authenticated account information and the definition file. Next, in step S38, the system control device 1 determines whether or not the user's level is the control user level. If it is determined in step S38 that the user level is the control user level (YES), the system control device 1 proceeds to step S42 in FIG. 5 and activates the second authentication application used for the second stage authentication. do. If it is determined in step S38 that the user level is not the control user level (NO), the system controller 1 proceeds to step S39 to determine whether the user level is the administrative user level. If it is determined in step S39 that the user level is the administrative user level (YES), the system control device 1 proceeds to step S40 in FIG. If it is determined in step S39 that the user level is not the administrative user level (NO), the system control device 1 does not activate the system control device 1 for the user who has been authenticated once in step S34 but has entered the account information. is not permitted, and the process proceeds to step S36 to shut down the system control device 1.

In step S40 of FIG. 5, the system control device 1 determines whether or not the series of activation processes is multi-step authentication. If it is determined in step S40 that the series of activation processes is not multi-step authentication (NO), the system control device 1 proceeds to step S41 and activates the management tool. If it is determined in step S40 that the series of activation processes is multi-step authentication (YES), the system control device 1 proceeds to step S42. In step S42, the system control device 1 activates the second authentication application used for the second-stage authentication. Next, in step S43, the system control device 1 accepts the user's second account information. Next, in step S44, the system control device 1 compares the input second account information with the definition file stored in the storage unit 6, and authenticates the second account information. In step S44, if the second account information has not been authenticated (NO), the system control device 1 proceeds to step S45 and determines whether the number of times of failure to be authenticated is equal to or less than the allowable number of times. The allowable number of times is, for example, 3 times. In step S45, if the number of times the user has not been authenticated is equal to or less than the allowable number of times (YES), the system control device 1 returns to step S43 and accepts the user's second account information again. In step S45, if the number of unauthenticated times exceeds the allowable number of times (NO), the system control device 1 determines that the user who entered the account information is not permitted to start up the system control device 1, Proceeding to step S46, the system control device 1 is shut down.

In step S44, if the second account information is authenticated (YES), the system control device 1 proceeds to step S47 to determine the level of the user based on the authenticated second account information and the definition file. Next, in step S48, the system control device 1 determines whether or not the user's level is the control user level. If it is determined in step S48 that the user level is the control user level (YES), the system controller 1 proceeds to step S51 and starts the control program. If it is determined in step S48 that the user level is not the control user level (NO), the system controller 1 proceeds to step S49 to determine whether the user level is the administrative user level. If it is determined in step S49 that the user level is the management user level (YES), the system control device 1 proceeds to step S50 and activates the management tool. If it is determined in step S49 that the user level is not the administrative user level (NO), the system control device 1 activates the system control device 1 for the user who has been authenticated once in step S44 but has entered the second account information. Therefore, in step S46, the system controller 1 is shut down.

In the system controller configured in this manner, the system controller cannot be activated unless the user who entered the second account information at the time of activation is either the administrative user or the control user. Moreover, since the administrative user can only start the management tool and the control user can only start the control program, multiple programs cannot be started at the same time. Therefore, there is no possibility that a plurality of programs or the like are started at the same time, causing unexpected interference between programs, unexpected changes in setting parameters, and the like. As a result, problems such as abnormal operation and unnecessary shutdown of the system controller can be avoided.

In addition, the system control device of this embodiment performs multi-stage authentication at startup, so security is improved. In addition, in the system control device of the present embodiment, an example of two-step authentication has been shown, but by repeating the processing from step S33 to step S42, three or more steps of authentication can be performed.

In the present embodiment, the authentication application used for the first-stage authentication and the second authentication application used for the second-stage authentication are different applications, but they may be one application. A step of performing two-stage authentication may be set in a series of steps in one authentication application.

The activation unit 3 is composed of a processor 100 and a storage device 101, as shown in FIG. 6 as an example of hardware. The storage device includes a volatile storage device such as a random access memory and a non-volatile auxiliary storage device such as a flash memory (not shown). Also, an auxiliary storage device such as a hard disk may be provided instead of the flash memory. Processor 100 executes a program input from storage device 101 . In this case, the program is input from the auxiliary storage device to the processor 100 via the volatile storage device. Further, the processor 100 may output data such as calculation results to the volatile storage device of the storage device 101, or may store data in an auxiliary storage device via the volatile storage device.

Although this application describes various exemplary embodiments, the various features, aspects, and functions described in one or more embodiments are limited to the application of particular embodiments. can be applied to the embodiments alone or in various combinations.
Therefore, countless modifications not illustrated are envisioned within the scope of the technology disclosed in the present application. For example, modification, addition or omission of at least one component, extraction of at least one component, and combination with components of other embodiments shall be included.

1 system control device, 2 control unit, 3 activation unit, 4 authentication unit, 5 tool activation unit, 6 storage unit, 7 second authentication unit, 100 processor, 101 storage device

Claims (4)

a first authentication unit that authenticates with the first account information entered by the user at startup;
a second authentication unit that performs authentication using second account information entered by the user that is different from the first account information after successful authentication by the first authentication unit;
a tool activation unit that determines the level of the user based on the second account information successfully authenticated by the second authentication unit , and activates one tool corresponding to the determined level of the user ;
The activation device, wherein the one tool corresponding to the user's level is only one tool selected from a plurality of tools registered in advance corresponding to the user's level. A system control device comprising: a control unit for controlling a system to be controlled; and the activation device according to claim 1 ,
The user level is divided into a control user level and a management user level, and the plurality of tools registered in advance corresponding to the control user level are control programs that operate the control unit, and the management A system controller, wherein said plurality of tools pre-registered corresponding to user levels are management tools for managing said system controller. An activation method executed by an activation device,
a first authentication step of authenticating with the first account information entered by the user at startup;
a second authentication step of performing authentication using second account information entered by the user, which is different from the first account information, after successful authentication in the first authentication step;
a tool activation step of determining the level of the user based on the second account information successfully authenticated in the second authentication step , and activating one tool corresponding to the determined level of the user; a method,
A starting method, wherein the one tool corresponding to the user's level is only one tool selected from a plurality of tools registered in advance corresponding to the user's level. A boot program for causing a computer to function as a boot device,
a first authentication process for authenticating with the first account information entered by the user at startup;
a second authentication process of performing authentication with second account information entered by the user, which is different from the first account information, after successful authentication in the first authentication process;
a tool activation process for determining the level of the user based on the second account information successfully authenticated in the second authentication process and activating one tool corresponding to the determined level of the user; A startup program to be executed,
A starting program, wherein the one tool corresponding to the user's level is only one tool selected from a plurality of tools registered in advance corresponding to the user's level.

Images