JPH05272999A - Security system of monitoring device - Google Patents

Abstract

PURPOSE:To eliminate a need for controlling a key, at the same time avoid operation by a personnel who has no knowledge of a plant previously, and select and permit an operation mode according to the operator's knowledge. CONSTITUTION:In the monitoring device where at least a peripheral controller 4 is connected to a host computer 30 through an internal bus 2, a card reader 21 is connected to the peripheral controller and at the same time an operator identification information is registered to a card 22 which is fitted to the card reader previously. On the other hand, an operation mode table 31 for prescribing identification information and operation mode is provided at the monitor mainframe side. When the operator identification information of the card is received from the card reader, it is specified that the operator is a proper and promised operator according to the identification information of the table and the identification information and the operation right of the corresponding operation mode are given to the corresponding operator.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION The present invention relates to various plant equipment,
The present invention relates to a security system of a monitoring device used for public facilities and the like, and particularly to a security system of a monitoring device in which each operator operates in an appropriate operation mode.

[0002]

2. Description of the Related Art In general, a monitoring device for plant equipment, public facilities, etc. (hereinafter referred to as a plant) monitors the state of a process which changes from moment to moment, and, on the basis of the result of the monitoring, performs a necessary process operation. However, if the operation of this process is mistaken, the plant may not operate normally or may fall into a very dangerous state.

Therefore, in the above-described monitoring device, several operation modes are set and the range in which each operation mode can be operated is limited, and the operator's operation request is subject to such constraint conditions. The system that guarantees the maintenance of the plant is adopted by allowing the operation in one operation mode.

FIG. 8 is a diagram showing the configuration of a conventional monitoring device for selecting an operation mode using a key. This monitoring device
Internal bus 2 to host computer 1 which is the main body of the monitoring device
A display controller 3, a peripheral controller 4 and other controllers 5 are connected via the, and a keyboard 6, a lock mechanism circuit 7 and other peripheral devices 8 are further connected to the peripheral controller 4.

In this lock mechanism circuit 7, a cylinder 7b having a key insertion portion 7a as shown in FIG. 9 is used as a lock mechanism main body, and a lock mode LOCK, an operator mode OPR, and a supervisor are set according to the rotation angle of the key insertion portion 7a. The configuration is such that either operation mode SUP or engineering mode ENG is selected. Here, the lock mode LOCK means the operation prohibition mode, the operator mode OPR means the normal mode in which some general operations are possible, and the supervisor mode SUP is a higher operation than the operator mode OPR. The engineering mode ENG means a mode in which all operations are possible.

Therefore, according to the above monitoring device,
When necessary signals are sent from the keyboard 6, the lock mechanism circuit 7 and other peripheral devices 8 as required, the peripheral controller 4 receives signals from these constituent elements 6 to 8 or state changes, and the peripheral state signal 9 Is transmitted to the host computer 1. Upon receiving the peripheral state data 9 from the internal bus 2, the host computer 1 executes necessary processing according to the data content.

On the other hand, when the peripheral device 8 is controlled by the host computer 1 which is the main body of the monitoring device, a peripheral control signal is output from the host computer 1 and sent to the peripheral controller 4 via the internal bus 2. Here, the peripheral controller 4 determines the corresponding peripheral device 8 based on the peripheral control signal.
Command is issued to control the peripheral device 8.

Next, the operation mode is changed by changing the cylinder 7b.
A lock state signal 10 is output from the lock mechanism circuit 7 by inserting a key into the upper key insertion portion 7a and setting a required rotation angle, and then the key is removed to set the operation mode. Here, the peripheral controller 4 constantly reads the lock state signal 10 from the lock mechanism circuit 7, but when the lock state signal 10 changes, the change in the lock state is transmitted to the host computer 1.
The host computer 1, based on the operation mode in the locked state changed by the lock mechanism circuit 7,
As a result, it is permitted to operate the plant.

[0009]

Therefore, in the security system of the monitoring apparatus as described above, the operation mode is selected by using the key. The management of the key for selecting the mode controls the management of the entire plant. It is carried out by the person in charge. As a result, when a plurality of monitoring devices are used to monitor a plant, the responsible person must manage different keys for each monitoring device, and as the number of keys increases, key management becomes very difficult.

Further, when the operation mode selection method using the key is adopted, the operation mode is set so that a general operator can operate the plant to some extent during normal operation. There is a risk that you may accidentally operate the and get into a very dangerous state.

Further, in the operation mode selection method as described above, the cylinder 7b is rotated after the key is inserted into the key insertion portion 7a, and the electrical contact that makes mechanical contact is selected according to the rotation angle of the cylinder 7b. Since the contact selection mechanism is used, there is a physical limit to the number of operating modes that can be set, which in turn limits the number of operating modes of the monitoring device.

The present invention has been made in view of the above circumstances, and by permitting an operation mode while automatically recognizing a specific operator, key management becomes unnecessary and operation by a person who does not have knowledge of a plant is performed. It is an object of the present invention to provide a security system for a monitoring device that can avoid the above.

Another object of the present invention is to provide a security system for a monitoring device that facilitates analysis of the cause of abnormalities in the plant and the monitoring device and enables information exchange between operators. ..

[0014]

In order to solve the above-mentioned problems, the invention according to claim 1 has operator identification information in a peripheral controller connected to a host computer, which is the main body of the monitoring device, via an internal bus. A card reader that allows the insertion of a card is provided, and on the other hand, an operation mode table for setting identification information and operation right decision data that defines the operation mode is provided on the memory of the host computer side.

The host computer refers to the operation mode table on the basis of the operator identification information sent from the card reader, and if there is identification information corresponding to the operator identification information, the host computer is referred to the operator. The security system of the monitoring device is such that the right to operate the monitoring device main body is given based on the operation mode of the operation mode table corresponding to the identification information.

Next, in the invention according to claim 2, a card reader / writer capable of mounting a card having operator identification information and an operation history area is provided in the peripheral controller, while the memory on the host computer side is provided. An operation mode table for setting identification information and operation right decision data that defines the operation mode and a mailbox for recording mails between operators are provided on the top, and mail exchanges and operation history information are output as necessary. It is a security method of the monitoring device.

[0017]

Therefore, the invention corresponding to claim 1 has the above-mentioned means, whereby the operation mode table of the host computer is provided with the identification information and the operation mode for permitting the operation for each operator who is permitted to operate in advance. Since it is regulated, when the card possessed by the corresponding operator is attached to the card reader, the host computer refers to the operation mode table based on the operator identification information sent from the card reader, and identifies the operator identification information. The operation mode is searched for from the information, and the right to operate the monitoring device body, that is, the plant is given based on the operation mode, so that key management is no longer required as in the past, and a person who does not have knowledge of the plant operates it by mistake. This can be prevented in advance, and the number of operating mode settings can be arbitrarily increased.

In the invention according to claim 2, since the host computer is provided with the mailbox, if the operator identification information of a specific partner is attached and necessary information is stored between the operators, It is possible to exchange e-mails with each other, and by providing an operation history area on the card to record the plant status, operation details, operation time, etc., the operation history area can be used when there is an abnormality in the plant and monitoring equipment. The cause can be promptly analyzed from the contents of.

[0019]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing an embodiment of a security system of a monitoring device according to the present invention. The same parts as those in FIG. 8 are designated by the same reference numerals and their detailed description will be omitted.
That is, in the method of the present invention, the difference is that the following means are provided.

One of them is to connect a card reader 21 to the peripheral controller 4 and record information of the ID card 22, especially operator identification information (ID) 2 of the card holder.
3 is read and transmitted to the host computer 30 which can be the main body of the monitoring device.

Therefore, I possessed by each operator
Operator identification information 23, which is different for each operator, is written in the D cards 22 ,. This is
This means that the host computer 30 and the like cannot be operated unless the ID card 22 is attached to the card reader 21, and thus an operation by an outsider who does not have the ID card 22 or a person who does not have knowledge of the plant. Can be prevented.

The other one is that an operation mode table 31 for storing data for giving the plant operating right for each operator is provided on the memory in the host computer 30. Specifically, the operation mode table 31 includes, for example, as shown in FIG. 2, an identification information section 32 that defines identification information that identifies an operator and an operation mode section 26 that defines an operation mode for giving an operation right to the operator. It consists of Further, when a plant is monitored using a plurality of monitoring devices, the operation mode tables 31a and 31b in the host computers 30a and 30b, which are the main bodies of the respective monitoring devices, contain data that gives the right to operate the respective monitoring devices. It is stored. Specifically, as shown in FIG. 3, identification information sections 32a and 32b and operation mode sections 33a and 33 are provided for the respective host computers 30a and 30b.
b is registered.

Therefore, with the above-described operation mode table configuration, the operation mode can be finely specified in the operation mode table 31 on the memory in the host computer 30, and the operation mode can be finely selected for each operator. Is possible.

Further, the other one is the operator identification information 23 of the ID card 22 sent from the card reader 21 in the host computer 30 and the operation mode table 3.
The operation mode determining means determines the operation mode in accordance with the procedure shown in FIG. 4 by using the data for giving the operation right of 1. Next, the operation of the security system of the above monitoring device will be described.

When the operator operates the host computer 30, which is the main body of the monitoring device, the IC card 22 must be mounted on the card reader 21. If the IC card 22 is not attached to the card reader 21, the keyboard 6 and other peripheral devices 8 cannot be operated as far as the operation of the plant is concerned. However, it is possible to receive from the keyboard 6 or the peripheral device 8 or the like via the peripheral controller 4 to the host computer 23 one-sided data that is not related to plant operation or that is necessary for control.

In any case, when the peripheral controller 4 receives a signal from the keyboard 6, the card reader 21, the peripheral device 8 or the like, or detects a change in state, it sends the peripheral data signal 9 through the internal bus 2. To the host computer 30. Here, the host computer 30
When receiving the peripheral data signal 9 from the peripheral controller 4, performs the necessary processing according to the content of the signal. On the other hand, the host computer 30 sends a peripheral control signal when performing necessary control to the peripheral device 8, and the peripheral controller 4 receives the peripheral control signal and issues a command signal to the necessary peripheral device to perform control. I do. Next, the processing procedure of the operation mode determining means will be described with reference to FIG.

Now, when the operator mounts the IC card 22, the card reader 21 reads the operator identification (ID) 23 written in the ID card 22 and stores it as ID card information 24 in the host computer 30 via the peripheral controller 4. Send. Note that for security reasons, the IC card 22 is kept in the card reader 21 for a predetermined time.
It should be attached to the.

Therefore, the host computer 23 operates as shown in FIG.
It is judged whether or not the IC card information as shown in (1) is received (ST1), and if it is received, the peripheral controller 4
Then, it is confirmed whether or not the ID card 22 is attached to the card reader 21 (ST2). If the ID card 22 is not attached, the process proceeds to ST3, and the operation mode in which the operation is prohibited is set.

On the other hand, when it is confirmed in step ST2 that the IC card 22 is attached, the operation mode table 31 is searched based on the operator identification information 23 in the IC card information (ST4), and the operation mode table 31 is searched. It is determined whether or not the identification information section 32 has identification information corresponding to the operator identification information 23 (ST5). If there is no identification information corresponding to the operator identification information 23 in the operation mode table 31, the operation proceeds to ST3 and the operation mode is set to the operation prohibition.

At step ST5, if there is identification information corresponding to the operator identification information 23 in the operation mode table 24, the operation mode set in the operation mode section 33 corresponding to the corresponding identification information in the identification information section 25 is entered. The host computer 30 operates so that the operation in the corresponding operation mode can be performed.

Therefore, according to the above security method, the operator is recognized based on the operator identification information 23 read from the IC card 22, and the operation mode of the plant is referred to by referring to the identification information section 32 of the operation mode table 31. Therefore, a person who has knowledge of a certain operation mode of the plant can operate the plant without fail, and has the right to operate a specific monitoring device when monitoring the plant using a plurality of monitoring devices. Only the operator can be given the operating right of the plant, and the operating right of each monitoring device can be freely changed. This means that, for example, an operator who can operate only one monitoring device, an operator who can operate all monitoring devices, or periodically changing the operation right of the operator can ensure thorough security management and Safety management can be achieved.

Further, since the monitoring device cannot be operated when the IC card 22 is not attached, the IC card 22
It is possible to avoid operating the monitoring device by an outsider who does not have the. Further, if the values that can be set in the operation mode section 33 of the operation mode table 31 have a range, many operation modes can be set without being restricted by the operation modes.

Next, FIG. 5 is a diagram showing the structure of another embodiment of the present invention. This is provided with a card reader / writer 25 in place of the card reader 21 of FIG. An area for storing operator identification information 23 and an operation history area 26 for writing operation history information are provided as an IC card 22 to be attached to the writer 25, for example. On the other hand, on the host computer 30 side, in addition to the operation mode table 31, a mail box 32 is provided for the purpose of exchanging mail between operators.
Therefore, with the configuration as described above, the mail / history process shown in FIG. 6 and the operation start process shown in FIG. 7 can be performed in addition to the same process as in FIG.

First, in the mail / history processing routine shown in FIG. 6, the host computer 30 determines the operation mode based on the operator identification information from the card reader / writer 25, and then determines whether or not there is an operation by the operator. (ST11). Here, when it is determined that the operator's operation is performed, the host computer 30 transmits the plant state, the operator's operation content and the operation time, and the operation history area 26 of the IC card 22 is transmitted via the peripheral controller 4 and the card reader / writer 25. Sequentially write to (ST1
2).

Further, it is judged whether or not there is a mail transmission request (ST13), and if there is a mail transmission request, the mail sent from the peripheral controller 4 side under the specific operator identification data is received and the mailbox is received. Write to 32 (ST14).

Subsequently, it is judged whether or not a specific operator who is a transmission destination is currently operating himself or another monitoring device (ST15). Here, if the mail is currently being operated, the mail written in the mailbox 32 is transmitted to the display controller 2 or the peripheral device 8 of the corresponding monitoring device, and the mail is displayed on the display screen (ST16).

Therefore, as described above, by recording the operation contents of the operator and the state of the plant at that time in the IC card 22, it is possible to quickly analyze the cause when the abnormality of the monitoring device occurs. Further, even when a plant abnormality occurs, the cause can be sought by reading the operation content in the IC card and analyzing it.

Next, in the case of the general operation start processing shown in FIG. 7, after the IC card 22 is mounted on the card reader / writer 25, the operator is set in the operation mode table 31 based on the operator identification information 23 of the IC card 22. The operation mode of is determined (ST21). Where mailbox 3
If the identification information of the operator is registered in 2 (S
T22), the mail corresponding to the registered operator identification information is searched (ST23), and if the mail exists, the mail is sent to the display controller 2 or the peripheral device 8 related to the own monitoring device, and the mail is displayed on the display screen. Is displayed (ST
25). Therefore, in this case, by exchanging information between operators by e-mail, it is possible to accurately take over the work when the work is changed. The present invention can be variously modified and implemented without departing from the scope of the invention.

[0039]

As described above, the present invention has the following effects.

According to the first aspect of the present invention, since the operator is automatically recognized and the operation mode is determined, the key management is not required, the operation by a person who does not have knowledge of the plant can be avoided, and the operation of the operator can be avoided. The optimum operation mode can be selected according to the knowledge and the permission can be given.

Further, according to the second aspect of the present invention, the cause can be easily analyzed when the plant and the monitoring device are abnormal, and moreover, the information can be exchanged between the operators so that the work can be accurately taken over.

[Brief description of drawings]

FIG. 1 is a schematic configuration diagram illustrating an embodiment of a security system of a monitoring device according to claim 1.

FIG. 2 is an explanatory diagram for determining an operation mode from operator identification information of a card.

FIG. 3 is an explanatory diagram for determining an operation mode when there are a plurality of monitoring devices.

FIG. 4 is a diagram for explaining an operation procedure of the security method of the monitoring device shown in FIG.

FIG. 5 is a schematic configuration diagram for explaining another embodiment of the security system of the monitoring device according to claim 2;

FIG. 6 is a diagram illustrating a mail / operation history processing procedure.

FIG. 7 is a diagram illustrating an operation start processing procedure.

FIG. 8 is a schematic configuration diagram illustrating a security system of a conventional monitoring device.

FIG. 9 is a diagram showing a lock mechanism circuit applied to a security system of a conventional monitoring device.

[Explanation of symbols]

4 ... Peripheral controller, 6 ... Keyboard, 21 ... Card reader, 22 ... IC card, 23 ... Operator identification information, 25 ... Card reader / writer, 26 ... Operation history area, 30 ... Host computer (monitor device main body), 3
1 ... Operation mode table, 32 ... Mail box.

Claims (2)

[Claims] 1. A security system of a monitoring device, wherein at least a peripheral controller is connected to the monitoring device main body via an internal bus, and the monitoring device main body is operated in one operation mode among a plurality of operation modes. A card reader capable of mounting a card having operator identification information is provided on the other hand, and on the other hand, an operation mode table for setting operation right decision data that predefines the identification information and the operation mode is set in the memory of the monitoring device body side. The monitoring device main body host refers to the operation mode table by the operator identification information sent from the card reader, and if there is identification information corresponding to the operator identification information, the operation mode corresponding to the identification information is provided. A security method for a monitoring device characterized by permitting the operation right of the. 2. A security system of a monitoring device, wherein at least a peripheral controller is connected to the monitoring device main body via an internal bus, and the monitoring device main body is operated in one operation mode among a plurality of operation modes. Is provided with a card reader / writer capable of mounting a card having operator identification information and an operation history area, while the identification information and operation right decision data defining the operation mode are set on the memory on the host computer side. A monitoring characterized by providing an operation mode table and a mailbox for recording mail contents, exchanging mails through this mailbox, and recording and outputting operation history information in the operation history area of the card. Device security method.