KR101575796B1 - Supervisory Remote Control System and Method for security information management thereof - Google Patents

Abstract

The present invention relates to a supervisory remote control system and a security information management method thereof. The supervisory remote control system comprises: a communication module which is connected to an external communication network; and a CPU module which stores a PLC program and security information and transmits the security information to the communication module in a preset situation.

Description

[0001] The present invention relates to a remote monitoring control system and a security information management method thereof,

The present invention relates to a remote monitoring control system and a security information management method thereof.

Programmable Logic Controller is a core control device widely applied in automation field. It is composed of one CPU module for processing logic operation, a plurality of I / O modules connected to various sensors and control outputs, and a special module And a CPU module for communicating with the CPU. These programmable logic controllers are applied to various industrial fields, and are especially applied to remote monitoring and control systems that remotely monitor and control various equipment in the industrial field.

Programmable logic controllers are becoming increasingly used in place of gate arrays or standard cell ASICs as they become more and more densified, lower cost, and faster.

The conventional programmable logic controller has security information only in a module for communication, or has a separate module for security. Alternatively, as shown in Patent Document 1, a semiconductor memory device is used to implement data security storage, and a logical memory space is divided to store data to be protected.

A programmable logic controller must have a separate storage device inside for security purposes. If there is no storage device, the information stored by power off or system reset may be lost. In addition, the programmable logic controller must re-enter security information when a security module fails or is replaced, even if there is a separate storage device inside. Also, if a security module of a programmable logic controller is forcibly replaced by an intruder, system control privileges may be lost.

Patent Document 1: Korean Patent Laid-Open Publication No. 10-2006-0055434

The present invention can provide a remote monitoring and control system for storing a PLC program and security information together for security communication with the outside and a security information management method thereof.

The remote monitoring control system according to an embodiment of the present invention includes a communication module for connecting to an external communication network; And a CPU module for storing the PLC program and the security information, and transmitting the security information to the communication module in a preset situation.

Here, the communication module may include: a first internal data transmission / reception unit for transmitting / receiving data to / from the CPU module; An external data transmitting and receiving unit transmitting and receiving data to and from an external communication network; A security information management unit for storing security information received from the CPU module; And a communication service performing unit for controlling the first internal data transmitting and receiving unit and the external data transmitting and receiving unit and performing secure communication according to the security information received from the security information managing unit.

The CPU module may further include: a second internal data transmission / reception unit for transmitting the PLC program and security information to the communication module; A program driver for driving the PLC program; And a program storage unit for storing the program and the security information.

The program storage unit may store the PLC program, the parameter of the PLC program, and the security information in a space where the PLC program is stored.

The CPU module may further include a program backup unit for backing up the PLC program and the security information.

Also, the remote monitoring and control system according to an embodiment of the present invention includes a control module connected to an external device; A power module for supplying power to the communication module, the CPU module, or the control module; And a program creating module for creating the PLC program and the security information.

The program creating module may further comprise: a program creating unit for creating the PLC program; A security information creating unit for creating the security information; And a data transmission / reception unit for transmitting the PLC program and the security information to the CPU module.

The CPU module may transmit security information to the communication module at a time when power is supplied to the CPU module, when the status of the CPU module changes from stop to driving, or when the security module receives the security information.

A security management method for a remote monitoring and control system according to an embodiment of the present invention includes the steps of: (a) creating a PLC program in a program creation module; (b) creating security information in a program creating module; (c) transmitting and storing the PLC program and the security information to the CPU module; And (d) transmitting the PLC program and the security information to the communication module in a preset situation.

Here, in (a), the program creating section of the program creating module can create the PLC program in a sequence program format.

In (b), the security information creating unit of the program creating module can create the security information using the PLC program method.

In (d), the security module transmits security information to the communication module at a time when the CPU module receives power from the CPU module, when the status of the CPU module changes from stop to driving, or when the security module receives the security information .

The present invention can provide a remote monitoring and control system for storing a PLC program and security information together for security communication with the outside and a security information management method thereof.

1 is a block diagram showing a configuration of a far-sight monitoring and control system according to an embodiment of the present invention.
2 is a block diagram showing a configuration of a program creating module of a remote monitoring control system according to an embodiment of the present invention.
3 is a block diagram showing a configuration of a CPU module of a remote monitoring control system according to another embodiment of the present invention.
4 is a flowchart illustrating a security management method for a remote monitoring and control system according to an embodiment of the present invention.

The present invention may be embodied in many other forms without departing from its spirit or essential characteristics. Accordingly, the embodiments of the present invention are to be considered in all respects as merely illustrative and not restrictive.

The terms first, second, etc. may be used to describe various components, but the components should not be limited by the terms.

The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be referred to as a second component, and similarly, the second component may also be referred to as a first component.

And / or < / RTI > includes any combination of a plurality of related listed items or any of a plurality of related listed items.

It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, .

On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise.

In the present invention, the terms "comprises ", " comprising "," having ", and the like are intended to specify the presence of stated features, integers, Steps, operations, elements, components, or combinations of elements, numbers, steps, operations, components, parts, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs.

Terms such as those defined in commonly used dictionaries are to be interpreted as having a meaning consistent with the contextual meaning of the related art and are to be interpreted as either ideal or overly formal in the sense of the present application Do not.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings, wherein like or corresponding elements are denoted by the same reference numerals, and a duplicate description thereof will be omitted.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing a configuration of a far-sight monitoring and control system according to an embodiment of the present invention.

Referring to FIG. 1, a remote monitoring and control system according to an embodiment of the present invention may include a communication module 100, a CPU module 200, a control module 300, and a power module 400.

The communication module 100 can be connected to an external communication network. In addition, the communication module 100 may receive security information from the CPU module 200 and perform a function as a secure communication module. The communication module 100 may include a first internal data transmission / reception unit 110, an external data transmission / reception unit 120, a communication service execution unit 130, and a security information management unit 140.

The first internal data transmitting and receiving unit 110 can transmit and receive data to and from the CPU module 200. At this time, the first internal data transmitting and receiving unit 110 can transmit and receive the encrypted data in a predetermined manner.

The external data transmitting and receiving unit 120 can transmit and receive data to and from the external communication network. At this time, the external data transmitting and receiving unit 120 can transmit and receive data according to a preset standard. The external data transmitting and receiving unit 120 can perform secure communication under the control of the communication service performing unit 130.

The communication service performing unit 130 may control the first internal data transmitting and receiving unit 110 and the external data transmitting and receiving unit 120 and may perform secure communication according to the security information received from the security information managing unit 140. [

The security information management unit 140 may store the security information received from the CPU module 200. [ In addition, the security information management unit 140 may provide security information that is stored to encrypt data transmitted and received with an external communication network.

The CPU module 200 can provide the PLC program and the security information to the communication module 100. To this end, the CPU module 200 can store preset PLC programs and security information. Here, the CPU module 200 can transmit security information to the communication module 100 in a preset state. The CPU module 200 may include a second internal data transmission / reception unit 210, a program driving unit 220, and a program storage unit 230.

The second internal data transmission / reception unit 210 can transmit the PLC program and the security information to the communication module 100. In addition, the second internal data transmission / reception unit 210 can receive data from the communication module 100.

The program driving unit 220 can drive the PLC program stored in the program storage unit 230. [ For example, the program drive unit 220 can invoke and execute a PLC program.

The program storage unit 230 may store preset PLC programs, PLC program parameters, and security information. Here, the program storage unit 230 may store a PLC program in a sequence program format, parameters and security information of the PLC program. At this time, the program storage unit 230 may store the security information in the same storage location as the PLC program of the sequence program format. For example, the program storage unit 230 may sequentially store the security information # 1 to #N between the sequence programs # 1 to #N (where N is a natural number). The program storage unit 230 may include a static random access memory (SRAM) or a flash memory.

In addition, the program storage unit 220 may store the headers of the PLC program, the parameters of the PLC program, and the security information together in a PBT (Program Block Table). The PBT can be stored in a predetermined structure in a fixed memory area.

Here, the program storage unit 220 may store the PLC program and the security information in different types. For example, the program storage unit 220 may check the type of the PLC program and the security information according to the information stored in the header of the PLC program and the security information, respectively, and store the PLC program and the security information in the preset storage block.

The security information stored in the program storage unit 230 may include security setting data, encryption key information, or user information. The security setting data may include an encryption method such as Basic 128 RAS and Basic 256, and IP address / MAC address filtering information. Also, the encryption key information may include a certificate or the like. In addition, the user information may include a user name, a password, a usage right, and the like.

The program storage unit 230 may download and store the PLC program and the security information from the program creation module. For example, the program storage unit 230 can receive (download) the PLC program from the program creation module using the CIMON PLC program. At this time, the program creation module can create and transmit the PLC program in the sequence program format. In addition, the program creation module can write the predefined security information in the PLC program format and transmit it to the program storage unit 230. [

The CPU module 200 can transmit security information to the communication module 100 in a preset state. For example, when the CPU module 200 is powered on, when the state of the CPU module 200 changes from stop to driving, or when security information is received from the program creating module, The security information can be transmitted to the mobile terminal 100.

The control module 300 may be connected to an external device. Here, the control module 300 may provide power to the external device. A plurality of such control modules 300 may be installed for connection with various devices.

The power module 400 can supply power to the communication module 100, the CPU module 200, or the control module 300. Such a power module 400 may receive a garden from an external power supply or may store its own power. For example, the power module 400 may include a battery.

Meanwhile, the remote monitoring and control system according to an embodiment of the present invention may further include the program creation module 500 shown in FIG.

2 is a block diagram showing a configuration of a program creating module of a remote monitoring control system according to an embodiment of the present invention.

Referring to FIG. 2, the program creation module 500 can create a PLC program and security information. Here, the program creating module 500 may include a program creating unit 510, a security information creating unit 520, and a data transmitting / receiving unit 530.

The program creating unit 510 can create a PLC program in a sequence program format. For example, the program creating unit 510 can create a PLC program using a CIMON PLC program.

The security information creating unit 520 can create security information in a PLC program format. For example, the security information creating unit 520 may specify the type of security information, store it in the header, and store the security related content in the remaining part to create the security information.

The data transmission / reception unit 530 can transmit the PLC program and the security information to the CPU module 200. [ Also, the data transmission / reception unit 530 can receive a response signal from the CPU module 200. [

The program creation module 500 can replace both of the PLC program and the security information, thereby creating a separate device for creating the security information.

The remote surveillance control system according to an embodiment of the present invention can securely store security information in the CPU module. Also, the remote monitoring and control system according to an embodiment of the present invention can block the external risk to the security information by receiving the encrypted security information from the CPU module of the communication module. In addition, the remote monitoring and control system according to an embodiment of the present invention can easily receive security information through the program creation module because it stores security information in the form of a sequence program.

3 is a block diagram showing a configuration of a CPU module of a remote monitoring control system according to another embodiment of the present invention.

3, the CPU module of the remote monitoring control system according to another embodiment of the present invention includes a second internal data transmission / reception unit 210, a program driving unit 220, a program storage unit 230, and a program backup unit 240).

Here, each of the second internal data transmission / reception unit 210, the program driving unit 220, and the program storage unit 230 has been described above with reference to FIG. 1, and thus redundant description will be omitted.

The program backup unit 240 may store a backup copy of the PLC program or the security information, respectively. The program backup unit 240 can transmit and receive data to and from the program storage unit 230. [ Accordingly, the program backup unit 240 may provide the program storage unit 230 with the PLC program or the security information backed up when the program storage unit 230 is abnormally generated. In addition, the program backup unit 240 may manage the security information together with the program storage unit 230 to enhance the security of the CPU module 200 from an external risk.

4 is a flowchart illustrating a security management method for a remote monitoring and control system according to an embodiment of the present invention.

Referring to FIG. 4, a security information management method of a remote monitoring and control system according to an embodiment of the present invention includes steps of creating a PLC program (S10), creating security information (S20) (S30), and transmitting the PLC program and security information (S40).

In step S10, a PLC program can be created in the program creation module. At this time, the program creating module can create the PLC program in the sequence program format in the program creating section. For example, the program creating section can create a PLC program using a CIMON PLC program.

In step S20, security information can be created in the program creating module. At this time, the program creating module can create the security information in the PLC program format in the security information creating section. For example, the security information creation unit may insert security information # 1 to security information #N of the security information sequentially between the sequence programs # 1 to #N (where N is a natural number) of the PLC program to create security information have.

In step S30, the program creating module transmits the PLC program and the security information to the CPU module through the data transmitting and receiving unit, and the PLC program and the security information can be stored in the program storing unit in the CPU module.

In step S40, the CPU module can transmit the PLC program and security information to the communication module. At this time, the CPU module can transmit security information to the communication module at the time when power is supplied to the CPU module, when the state of the CPU module changes from stop to driving, or when security information is received from the program creating module.

The security management method of the remote monitoring and control system according to the embodiment of the present invention can reduce the additional cost of the apparatus for creating the security information by creating both the PLC program and the security information in the program creating module. Also, the security management method of the remote monitoring and control system according to an embodiment of the present invention can securely store the PLC program and the security information in the sequence program format in the CPU module.

Although the preferred embodiments of the present invention have been disclosed for illustrative purposes, those skilled in the art will appreciate that various modifications, additions and substitutions are possible, without departing from the scope and spirit of the invention as disclosed in the accompanying claims. In addition, it is a matter of course that various modifications and variations are possible without departing from the scope of the technical idea of the present invention by anyone having ordinary skill in the art.

100: Communication module
110: first internal data transmission /
120: External data transmission /
130:
140: security information management unit
200: CPU module
210: a second internal data transmission /
220:
230: Program storage unit
240: program backup unit
300: control module
400: power module
500: Program creation module
510: Program creation section
520: security information creating unit
530: Data transmission /

Claims (12)

A communication module for connecting with an external communication network; And
A CPU module for storing the PLC program and the security information, and transmitting the security information to the communication module in a predetermined situation;
≪ / RTI >
The CPU module
A second internal data transmission / reception unit for transmitting the PLC program and security information to the communication module;
A program driver for driving the PLC program; And
Storing the PLC program, the parameters of the PLC program and the security information together, storing the PLC program and the security information in different types, checking the type of the PLC program and the security information, A program storage unit for storing each of the PLC program and the security information in a block;
The remote monitoring control system comprising:
The method according to claim 1,
The communication module
A first internal data transmission / reception unit for transmitting / receiving data to / from the CPU module;
An external data transmitting and receiving unit transmitting and receiving data to and from an external communication network;
A security information management unit for storing security information received from the CPU module; And
A communication service execution unit for controlling the first internal data transmission / reception unit and the external data transmission / reception unit and performing secure communication according to the security information received from the security information management unit;
Wherein the remote monitoring control system comprises:
delete delete The method according to claim 1,
Wherein the CPU module further comprises a program backup unit for backing up the PLC program and the security information.
The method according to claim 1,
A control module connected to an external device;
A power module for supplying power to the communication module, the CPU module, or the control module; And
Further comprising a program creating module for creating the PLC program and the security information.
The method according to claim 6,
The program creation module
A program creating unit for creating the PLC program;
A security information creating unit for creating the security information; And
A data transmission / reception unit for transmitting the PLC program and the security information to the CPU module;
Wherein the remote monitoring control system comprises:
The method according to claim 6,
Wherein the CPU module transmits security information to the communication module at a time when power is supplied to the CPU module, when the status of the CPU module changes from stop to driving, or when the security module receives the security information. Control system.
(a) creating a PLC program in a program creating module;
(b) creating security information in a program creating module;
(c) the program creation module transmits the PLC program and the security information to the CPU module, and the CPU module stores the PLC program, the parameter of the PLC program, and the security information together in the program storage section, Storing the PLC program and the security information in different types, storing the PLC program and the security information in a preset storage block by checking the type of the PLC program and the security information; And
(d) transmitting the PLC program and the security information to the communication module by the CPU module in a preset situation;
And a security management system for managing security of the remote monitoring and control system.
10. The method of claim 9,
(A), the program creating section of the program creating module creates the PLC program in a sequence program format.
10. The method of claim 9,
(B), the security information creating unit of the program creating module creates the security information in the PLC program format.
10. The method of claim 9,
In the step (d), when the CPU module receives power from the CPU module, when the status of the CPU module changes from stop to drive mode, or when the security module receives the security information from the program creating module, And transmits the security information to the communication module.

Images