KR101739144B1 - Mobile apparatus having security function for maintenance of plc, and authentication method of mobile apparatus - Google Patents

Abstract

An authentication method for a mobile device and a mobile device having a security function for maintenance of a PLC is disclosed. A mobile device according to the present invention includes a first communication unit for performing wireless communication with a PLC, a second communication unit for performing wireless communication with the server, a storage unit for storing data transmitted from the first communication unit or the second communication unit, A controller for requesting an access right to the server and transmitting the data stored in the storage unit to the PLC via the first communication unit or transmitting the data stored in the storage unit to the server through the second communication unit . Accordingly, not only the data communication using the wireless communication is enabled, but also the security function can be improved, and the data stored in the PLC memory is quickly transmitted to the user, thereby providing an environment for facilitating the maintenance and repair of the PLC.

Description

[0001] MOBILE APPARATUS HAVING SECURITY FUNCTION FOR MAINTENANCE OF PLC [0002] AND AUTHENTICATION METHOD OF MOBILE APPARATUS [

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a mobile device and an authentication method thereof, and more particularly to a mobile device and a method of authenticating the same.

PLC (Programmable Logic Controller) is a product widely used in industrial control systems. It uses serial (RS232) communication or wired communication such as Ethernet to download user program to PLC or monitor PLC in operation. Especially, recently, devices equipped with wireless modules are wirelessly connected to each other to exchange data, but PLC has a drawback that it is difficult to use wireless communication which is weaker in security than wired communication due to its characteristic of an industrial control system. In order to update the PLC operating system or update the program, a dedicated device or a portable computer capable of wired connection is required. This is shown in Fig.

1, the PLC 5 is connected to the notebook computer 10 or the computer 15 using the wired communication cable 7, and the data of the PLC 5 memory is connected to the wired communication cable 7 ) To the dedicated devices (10, 15). Also, the update file in the notebook computer 10 or the computer 15, which is a dedicated device, is transmitted to the PLC 5 via the wired communication cable 7 to perform the update.

A method of upgrading the operating system of the PLC 5 connected with the wired communication cable 7 is shown in Fig.

First, a connection is requested to the PLC 5 (S20).

If the connection is not successful (S21-NO), it is confirmed whether or not the connection is reconnected (S22).

If the connection is successful (S21-YES), the model of the PLC 5 is inputted (S23). Thereafter, the actual PLC is compared with the model (S24), the operating system is downloaded and the PLC 5 is upgraded (S25). Finally, the connection with the PLC 5 is terminated (S26).

In this way, the dedicated devices (10, 15) can upgrade the operating system of the PLC (5) connected by the wired cable (7).

3 is a flowchart illustrating a process of storing data stored in a memory of the PLC 5 connected to the wired communication cable 7 and transmitting the data to the server.

First, a connection request is made to the PLC 5 (S30). If the connection is successful (S31-YES), a memory area to be copied is selected (S33). If the connection is not successful (NO at S31), it is determined whether or not the connection is reconnected (S32).

When a memory area to be copied is selected (S33), data is received and stored (S34). Thereafter, the connection with the PLC 5 is terminated (S35).

Although the subsequent processes are not shown, the dedicated devices 10 and 15 use the stored data for control of the PLC 5 or back up the PLC 5 data.

Since the PLC is connected to the Internet via a wired cable for security reasons, when a plurality of PLCs are used in one factory, there is a problem in that all the PLCs must be updated and updated in order to upgrade software such as the operating system . In addition, in order to update the software contained in the PLC, a dedicated device capable of transferring the corresponding software file to the PLC is required, and it is inconvenient to manually download the latest version of the software to the device, If the software file is not prepared in advance, it can not be updated.

In addition, PLC is a control system that performs specific tasks repeatedly, and should be able to analyze the problem when a PLC performs abnormally due to a manufacturing defect or software malfunction. To analyze these problems, it is necessary to connect a computer or a notebook directly to the PLC and analyze it in the field. If it is difficult to analyze in the field, it is necessary to copy and save the PLC memory in which the problem analysis data is stored.

However, since PLC products are often used in power plants and semiconductor companies that require high security policies, bringing in computers or laptops necessary for analyzing problems is complicated and problem analysis is delayed because the personnel must visit each time. In order to analyze the problem, even if the PLC memory is copied and saved as a file, the file can not be transferred quickly to the person in charge.

And the memory copy function for updating and maintaining the PLC software should be allowed only for authorized personnel. However, the conventional technology has a problem in that it is very vulnerable to security when a device storing a defrosting software or a PLC memory copy file is lost because a special security device is not provided.

SUMMARY OF THE INVENTION The present invention has been made in view of the above-described problems, and it is an object of the present invention to provide a mobile device and a mobile device authentication method capable of data communication with a PLC using wireless communication and improved security function.

It is another object of the present invention to provide a mobile device and a mobile device authentication method capable of maintaining and repairing a PLC easily by transmitting data stored in a PLC memory to a user quickly.

According to an aspect of the present invention, there is provided a mobile device connected to a PLC (Programmable Logic Controller) to perform an update of the PLC or to transmit memory information of the PLC to a server A first communication unit for performing wireless communication with the server; A second communication unit for performing wireless communication with the PLC; A storage unit for storing data transmitted from the first communication unit or the second communication unit; And a controller for requesting an access right to the server and transmitting the data stored in the storage unit to the PLC via the first communication unit when the access right is granted from the server, .

The second communication unit may perform wireless communication with the PLC using Bluetooth communication.

Also, the control unit may request the access right by transmitting the MAC address unique to the mobile device to the server.

Further, the control unit may request the access right by further transmitting the ID and the password to the server, in addition to the MAC address specific to the mobile device.

The data received from the first communication unit may be data for soft update of the PLC and the data received from the second communication unit may be data stored in the memory of the PLC.

According to another aspect of the present invention, there is provided a method of authenticating a mobile device that updates a PLC, the method comprising: requesting an access right to the server; Receiving a file for updating the PLC from the server when the access right is granted from the server; Wirelessly connecting to the PLC for data communication; And updating the wirelessly connected PLC using the received update file.

The step of requesting access to the server may include transmitting the MAC address unique to the mobile device to the server.

The wireless connection may be wirelessly connected to the PLC using Bluetooth communication.

In addition, the step of requesting access to the server may request an access right by further transmitting an ID and a password in addition to the MAC address.

According to another aspect of the present invention, there is provided an authentication method of a mobile device that transmits memory information stored in a PLC to a server, the authentication method comprising: Transmitting a MAC address of the MAC layer; Receiving and storing the memory information stored in the PLC when the access right is granted from the server; And transmitting the stored memory information to the server using Internet communication.

According to the authentication method of the mobile device and the mobile device according to the above configuration, not only the data communication with the PLC can be performed using the wireless communication, but also the security function can be improved. In addition, data stored in the PLC memory is quickly transmitted to the user, thereby providing an environment that facilitates maintenance and repair of the PLC.

BRIEF DESCRIPTION OF THE DRAWINGS Figure 1 is a diagram illustrating a software update and data backup system in the prior art,
4 is a flow diagram illustrating the operation of a mobile device in accordance with one embodiment of the present invention;
FIG. 5 is a flowchart illustrating a method of authenticating a mobile device according to an exemplary embodiment of the present invention,
6 is a diagram illustrating a configuration of a mobile device according to an embodiment of the present invention;
7 is a flowchart illustrating a method of authenticating a mobile device according to an embodiment of the present invention,
8 is a flowchart illustrating a method of authenticating a mobile device according to another embodiment of the present invention.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It is to be understood, however, that the invention is not to be limited to the specific embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention.

In the following description, well-known functions or constructions are not described in detail since they would obscure the invention in unnecessary detail.

4 is a flow diagram illustrating the operation of a mobile device in accordance with one embodiment of the present invention.

First, the user data is transmitted (S100). Here, the user data may be an ID or a password, but the user data in the present invention refers to a unique MAC (media access control) address. A user is a mobile device that relays data transmission between a PLC and a server.

That is, as a method for authenticating the mobile device, a unique MAC address is transmitted to the server (S100).

If the unique MAC address of the mobile device is not authenticated (S110), the user can not access the server or the PLC via the mobile device. The authentication of the MAC address is performed on the server side, and the server stores information on the user who is permitted to access in advance, and compares the MAC address transmitted from the user with the previously stored information to determine whether to allow access.

Upon receiving the authentication from the server (S110-YES), if the operation for software update is performed (S120), the software version is first selected (S122). That is, the software version for the software update of the PLC, and receives the file from the server (S124). The file is a file for updating with the corresponding version of the software.

Then, in step S126, a file transmitted from the server is downloaded to a PLC connected to the mobile device wirelessly, which is connected via Bluetooth in this case. Thereafter, the file stored in the mobile device is deleted (S128).

Thus, the mobile device performs the software update of the PLC according to the flow from step S120 to step S128.

Next, when the data in the PLC memory is copied (S130) instead of the software update (S120-NO), the data stored in the memory is received and stored (S132), and the copied file is transferred to the server (S134 ).

At this time, the reason for copying the data of the PLC memory and transferring it to the server, that is, backing up the data of the PLC memory, is to prevent the data from being lost if there is an error in the PLC. Therefore, it is determined whether there is an abnormality in the PLC (S136). If there is no abnormality (S136-NO), the stored temporary file may be deleted (S128). If there is an error (S136-YES), the stored contents of the PLC memory can be read back and transmitted to the server.

Finally, when it is not a software update but a memory copy but simply reads information of the PLC (S140), the mobile device reads the PLC information connected by Bluetooth and displays it to the user (S142).

5 is a flowchart illustrating a method of authenticating a mobile device according to an exemplary embodiment of the present invention.

First, the received user data is analyzed (S200). If the ID is not present or the password is wrong, the re-input is requested (S230). If not, the process returns to S230-NO (S230: NO) (S230-YES), the ID and the password are confirmed again.

After the confirmation process, the MAC address is confirmed (S240). The MAC address is data received from the mobile device, and the server stores MAC addresses to which the access right is to be granted. In the authentication process (S250), it is determined whether the received MAC address includes the received MAC address. If so, the access authority is granted (S260).

However, if the MAC address is not included, it is determined whether to change the access right (S270). If the MAC address is not included, the access right is requested to change in real time (S280).

The access right is changed or newly established (S290). In this way, the server authenticates through the MAC address received from the mobile device and grants or grants the access right. Also, by using such an authentication system, access to any mobile device that is not allowed to access can be prevented.

6 is a diagram illustrating a configuration of a mobile device according to an embodiment of the present invention.

6, the mobile device 300 according to an exemplary embodiment of the present invention includes a storage unit 310, a control unit 320, a first communication unit 330, and a second communication unit 340.

The storage unit 310 has a function of storing the software update file received from the server 400 or the memory data received from the PLC 500. [ In addition, the storage unit 310 stores a MAC address unique to the mobile device 300.

The first communication unit 330 has a function of wirelessly connecting the mobile device 300 and the server 400. The first communication unit 330 wirelessly connects the mobile device 300 and the server 400 wirelessly using Internet communication.

The second communication unit 340 performs wireless communication with the PLC 500. Since the data communication with the PLC 500 is mainly performed at a short distance, the second communication unit 340 can perform data communication using the Bluetooth communication. Since Bluetooth communication is a commonly used communication method, a detailed description thereof will be omitted here.

The control unit 320 requests the access right to the server 400 and the data stored in the storage unit 310 is transmitted to the server 400 through the first communication unit 330, To the PLC 500 through the second communication unit 340,

The control unit 320 stores the software update file received from the server 400 when the control unit 320 requests the access right to the server 400 and is granted the access right from the server 400 Unit 310 and transmits it to the PLC 500 through the second communication unit 340. [

When the server 400 requests access to the server 400 and the access right is granted from the server 400, the controller 320 transmits the memory data of the PLC 500 to the server 400, To the server 400 via the first communication unit 330 to perform data backup.

The control unit 320 transmits the MAC address unique to the mobile device 300 to the server 400 to request access authority. Accordingly, the server 400 grants an access right to the mobile device 300 through an authentication procedure as described with reference to FIG.

The control unit 320 may also request an access right by transmitting an ID and a password to the server 400 in addition to the MAC address unique to the mobile device 300. [

The mobile device 300 having such a configuration not only enables the update of the PLC software while enhancing the security, but also enables the backup of the PLC memory data.

7 is a flowchart illustrating a method of authenticating a mobile device according to an embodiment of the present invention.

First, the access right is requested to the server (S600).

If the access right is not granted from the server (S610-NO), the operation is terminated. If the access right is granted (S610-YES), the update file is received from the server (S620). Herein, the process of receiving the access right from the server is the same as that described above, and will not be described here.

When the update file is received (S620), the PLC is wirelessly connected (S630), and the software update of the PLC is performed (S640).

8 is a flowchart illustrating a method of authenticating a mobile device according to another embodiment of the present invention. 7 is an authentication method related to the PLC update, Fig. 8 is an authentication method related to PLC information backup.

Similarly, the access right is requested to the server (S700).

If the access authority is not granted from the server (S710-NO), the task is terminated. If the access authority is granted (S710-YES), the memory information is received from the PLC (S720). Herein, the process of receiving the access right from the server is the same as that described above, so it will be omitted.

Then, the received PLC memory information is transmitted to the server (S730).

Thus, if wireless communication is used with the authentication procedure from the server, data stored in the PLC memory is quickly transmitted to the user while improving the security function, thereby providing an environment that facilitates maintenance and repair of the PLC.

In addition, it is to be understood that the present invention is not limited to the above-described embodiments, and various changes and modifications may be made without departing from the scope of the present invention as defined by the appended claims. It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention.

300 .................................... Mobile device
310 ... ... ... ... ... ... ... ... ... ... ... ... ... ...
320 .......................................... Control
330 .......................................... First communication section
340 .................................. Second communication section
400 ....................................... Server
500 ........................................... PLC

Claims (10)

1. A mobile device connected wirelessly with a PLC to perform update of the PLC or transmit memory information of the PLC to a server,
A first communication unit for performing wireless communication with the server;
A second communication unit for performing wireless communication with the PLC;
A storage unit for storing data transmitted from the first communication unit or the second communication unit; And
A control unit for requesting an access right to the server and transmitting the data stored in the storage unit to the PLC via the second communication unit or transmitting the data stored in the storage unit to the server through the first communication unit; Including,
Wherein the data received from the first communication unit is data for updating the software of the PLC and the data received from the second communication unit is for backing up information stored in the memory of the PLC. The method according to claim 1,
And the second communication unit performs wireless communication with the PLC using the Bluetooth communication. The method according to claim 1,
Wherein,
And transmits the MAC address unique to the mobile device to the server to request the access authority. The method of claim 3,
Wherein the controller further transmits an ID and a password to the server in addition to the MAC address unique to the mobile device to request the access right. delete 1. A method for authenticating a mobile device that includes a first communication unit for performing wireless communication with a server and a second communication unit for performing wireless communication with a PLC,
Requesting an access right to the server;
Receiving a file for updating the PLC from the server through the first communication unit when the access right is granted from the server;
Wirelessly connecting to the PLC using the second communication unit for data communication; And
And updating the wirelessly connected PLC using the received update file.
The method according to claim 6,
Wherein the step of requesting access to the server comprises:
And transmitting the MAC address unique to the mobile device to the server. The method according to claim 6,
Wherein the wirelessly connecting comprises:
And wirelessly connecting to the PLC through a second communication unit using Bluetooth communication. 8. The method of claim 7,
Wherein the step of requesting access to the server comprises:
And further transmits an ID and a password in addition to the MAC address to request an access right. 1. A method of authenticating a mobile device having a first communication unit for performing wireless communication with a server and a second communication unit for performing wireless communication with a PLC and transmitting memory information stored in the PLC to a server,
Transmitting a unique MAC address through the first communication unit to request access to the server;
Receiving and storing memory information stored in the PLC through the second communication unit when the access right is given from the server; And
And transmitting the stored memory information to the server through a first communication unit using Internet communication.

Images