KR20170118418A - The system for controlling and certifying using employee card and the method for the same - Google Patents

Abstract

The present invention relates to a mobile remote control system and method for measuring and controlling an automatic control panel using an employee card, and more particularly, to a remote control system and method for a remote control The mobile remote control system and method of the measurement and automatic control panel using the employee card having the advantage that the user ID and the password are not exposed to the outside and the security is improved due to the loss of the smart phone and the user's leaving .

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a mobile remote control system and method for measuring and controlling an automatic control panel using an employee card,

The present invention relates to a mobile remote control system and method for measuring and controlling an automatic control panel using an employee card, and more particularly, to a remote control system and method for a remote control The mobile remote control system and method of the measurement and automatic control panel using the employee card having the advantage that the user ID and the password are not exposed to the outside and the security is improved due to the loss of the smart phone and the user's leaving .

Switchgear is a device used for monitoring, controlling and protecting power systems. Inside the switchgear, circuit protection line section automatic switches, lightning arresters, power fuses, energy meters, and transformers are built in. These switchboards are installed inside or outside the building and are inspected by the manager at regular intervals.

However, the conventional switchgear is operated locally, and the manager must visit the place where the switchboard is installed, check that he / she has the control right by pressing the number key, etc., and make the visit and check the contents through the documents, And low accuracy.

In addition, when a dangerous situation is detected in the switchboard, the occurrence of a dangerous situation is notified only through the alarm and the speaker located in the switchboard, so that if the switchboard manager is located at a remote place from the installation place of the switchboard, (See Korean Patent Publication No. 10-2013-0137370).

This has been the same problem in the control system for photovoltaic power generation and the automatic control system for general electric facilities in addition to the switchboard.

In order to solve these problems, techniques for remotely controlling such a switchboard using a network-enabled online PC or a mobile device are provided, and a security device (VPN) is installed in order to operate the equipment securely from the risk of hacking The control from the outside is originally blocked.

In recent years, utilization has been increased, for example, by using mobile authentication. In addition, transactions such as online shops, public transportation systems, parking, vending machines, etc., .

However, remote authentication and access using mobile devices such as smart phones have intrinsic security vulnerabilities. As an online terminal, mobile devices are vulnerable to common hacking threats such as malicious software (viruses, Trojans, spyware, etc.) that can be easily installed wirelessly. Any authentication mechanism provided by the smartphone itself is inherently vulnerable because the smartphone's password, etc. must be stored in the main memory of the mobile device.

Mobile phones are traditionally not kept safe by customers in the same way as credit cards, and tend to be frequently lost or stolen.

In addition, there is a problem that a remote authentication attempt may continuously appear even in a situation where a user who has been qualified for the remote authentication loses his / her qualification.

On the other hand, chip-based credit cards, employee certificates, etc. are known as safe devices because they have a long history of preventing hacking without being connected to any network. As noted above, such a card may be used with a mobile device that is only a network terminal to provide a strong but simple means of performing the authentication mechanism, and in some cases even performs the transaction itself.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems, and it is an object of the present invention to provide a personal identification card (personal identification card) having a unique identification chip and a mobile device capable of recognizing the identification chip, And to provide a method of performing authentication and remote control of a server such as a server or a server for controlling authentication.

The present invention provides the following means for solving the above problems.

An employee card having an identification tag including URL address information, user ID information, and password information corresponding to the user ID information at the same time;

A tag reader for simultaneously reading the URL address information, the ID information, and the password information from the identification tag when the employee card is located within a predetermined distance; and a management server for storing the ID information and the password information in a server having the URL address A smartphone including a control module for transmitting and performing authentication after authentication;

And a HMI (Human Machine Interface) program for performing an authentication operation of a user possessing the employee card using the transmitted ID information and password information, and controlling each of the devices in the power plant through the HMI program And a log management unit for generating and storing log data based on user ID information for controlling the HNI control unit. The mobile remote control unit of the automatic control unit System and method.

In particular, the identification tag further comprises a user control level code,

The server may further include a control authority managing unit for checking the user control level code and determining operations that the user can perform.

In addition, the server periodically checks whether or not a dangerous situation has occurred with respect to the power plant, and when the occurrence of a dangerous situation is detected, the server confirms a necessary operation for resolving the dangerous situation, analyzes the log data, And a risk situation processing unit for inquiring whether or not the risk situation resolution job is processed through the terminal of the proper resolution person and proceeding with the processing of the risk situation resolution job.

Here, the log data may include at least one of user information, job content, job results, and job time.

The control authority management unit confirms the control authority in consideration of the security level and the control area of the user, and determines the tasks that the user can process.

The present invention provides an information processing system including an employee card having an identification tag including URL address information, user ID information, and password information corresponding to the user ID information at the same time, a smart phone having a tag reader and a control module installed therein, And a server for controlling the electric power facility by being connected externally, wherein when the employee card is located within a predetermined distance from the tag reader, the tag reader reads the URL address information, the ID information And reading the password information at the same time; A second step of the control module transmitting the ID information and the password information to a server having the URL address through the smart phone and requesting authentication of the access right; A third step of the server performing an authentication operation of the user having the employee card using the transmitted ID information and the password information, and controlling the devices in the power facility or monitoring the operation status; And a fourth step wherein the server generates and stores log data based on user ID information for controlling each of the devices in the power facility.

According to the present invention, the remote control of the power and control panel can be performed only by the simultaneous combination of the unique information included in the employee ID and the smartphone capable of reading the same. Thus, even if the user ID and password, And the security is improved.

In addition, since ID, password, and URL address are embedded in the employee ID card and the information is not stored in the smart phone, even if the smart phone is lost, the security problem due to leakage of information does not occur.

When the user tries to control remotely using the employee ID card, the corresponding log data is automatically remained, so that the responsibility and responsibility of who is connected and controlled can be reliably achieved.

In addition, since the corresponding ID information and the password information are not in the smartphone, there is no fear of hacking by the malicious code and the hacking tool.

Further, by performing the user control authorization operation additionally, the user having the control authority performs only the task of the control authority itself, so that the possibility of the accident occurring mainly when the inexperienced user performs the control operation beyond the capability is minimized do.

1 is a diagram for explaining a remote control system according to an embodiment of the present invention.
FIG. 2 is a diagram for explaining a control right for each user according to an embodiment of the present invention.
FIG. 3 is a diagram for explaining a user authentication and a control authorization method of a power facility according to an embodiment of the present invention.
4 is a diagram for explaining a power plant control method according to an embodiment of the present invention.
5 is a diagram for explaining a power plant control method according to an embodiment of the present invention.

Hereinafter, embodiments and examples of the present invention will be described in detail with reference to the accompanying drawings, which will be readily apparent to those skilled in the art to which the present invention pertains.

It should be understood, however, that the present invention may be embodied in many different forms and is not limited to the embodiments and examples described herein. In order to clearly illustrate the present invention, parts not related to the description are omitted, and similar parts are denoted by like reference characters throughout the specification.

Throughout this specification, when an element is referred to as "including " an element, it is understood that the element may include other elements as well, without departing from the other elements unless specifically stated otherwise.

As used herein, the terms "about," " substantially, "and the like are used herein to refer to or approximate the numerical value of manufacturing and material tolerances inherent in the stated sense, Accurate or absolute numbers are used to prevent unauthorized exploitation by unauthorized intruders of the mentioned disclosure. Also, throughout the present specification, the phrase " step "or" step "does not mean" step for.

Throughout this specification, the term "combination thereof" included in the expression of the machine form means one or more combinations or combinations selected from the group consisting of the constituents described in the expression of the machine form, And the like.

Throughout this specification, the description of "A and / or B" means "A or B, or A and B".

In order to solve the above problems, according to the present invention, there is provided a system for managing a watt-hour or photovoltaic power generation facility, which is capable of integrally managing a watt-hour and watt-hour facility installed in a plurality of places from the outside.

In particular, by providing a method of performing authentication of a mobile application using an employee card having a user identification chip such as NFC and RF-ID, the user authentication operation is automatically performed, thereby minimizing user effort and time for user authentication And an integrated management system for the switchboards. Also, it is possible to increase the efficiency and accuracy of the check by generating and storing log data for all of the work performed by the user, and to provide additional information of the additional information by using it later, and to provide the integrated management system do.

Further, by performing the user control authority checking operation additionally, the user having the control authority performs only as much work as the control authority of the user, thereby minimizing the possibility of the accident that occurs mainly when the inexperienced user performs the control work more than the capability A management server for a switchboard management system and an integrated management system for a switchboard management server are provided.

Hereinafter, the present invention will be described in detail with reference to the drawings.

The present invention provides the following means for solving the above problems.

An employee card having an identification tag including URL address information, user ID information, and password information corresponding to the user ID information at the same time; A tag reader for simultaneously reading the URL address information, the ID information, and the password information from the identification tag when the employee card is located within a predetermined distance; and a management server for storing the ID information and the password information in a server having the URL address A smartphone including a control module for transmitting and performing authentication after authentication; And a HMI (Human Machine Interface) program for performing an authentication operation of a user possessing the employee card using the transmitted ID information and password information, and controlling each of the devices in the power plant through the HMI program And a log management unit for generating and storing log data based on user ID information for controlling the HNI control unit. The mobile remote control unit of the automatic control unit System and method.

In particular, the identification tag may further include a user control level code, and the server may further include a control authority managing unit for checking the user control level code and determining operations that the user can perform.

In addition, the server periodically checks whether or not a dangerous situation has occurred with respect to the power plant, and when the occurrence of a dangerous situation is detected, the server confirms a necessary operation for resolving the dangerous situation, analyzes the log data, And a risk situation processing unit for inquiring whether or not the risk situation resolution job is processed through the terminal of the proper resolution person and proceeding with the processing of the risk situation resolution job.

Here, the log data may include at least one of user information, job content, job results, and job time.

The control authority management unit confirms the control authority in consideration of the security level and the control area of the user, and determines the tasks that the user can process.

The employee card 33 refers to a card-type identification card having an identification tag capable of storing schedule information through NFC or RF-ID, but is not limited thereto. Anything that can prove to be possible.

The tag reader 31 of the smart phone 30 is installed in the smart phone and is a device capable of recognizing NFC and RF-ID. In the case of a smart phone without the tag reader 31, The auxiliary device of the present invention may be used.

Generally, the control module 32 means an application application, and means a configuration that utilizes communication parts and calculation parts of a smart phone through software.

The tag reader 31 of the smart phone 30 stores a home page address (URL) (or an address of a server) to which connection is attempted, user ID information, password information, and a user's control level code. The key point of the present invention is that the user does not store important information such as URL information, user ID information, and password information, or stores it in a smart phone.

In the case of a smartphone, it is necessary to change a new one every 1.5 to 2 years, and if the information is lost in the smartphone or the user's memory when the user loses or leaves the user, There is a security problem such as the use of a person who does not exist. In addition, there is an advantage that the smart phone itself is free from hacking of the smart phone by the malicious code and the hacking tool by not providing the above information.

The tag reader 31 of the smartphone 30 reads the information from the employee card 33 under the control of the control module 32. [ Then, the control module 32 accesses the homepage located at the URL using the network based on the information, transmits the ID information and the password to the homepage using the network communication, Authentication is attempted.

That is, according to the present invention, since the user requests authentication through the mobile application only when both the employee card and the smartphone containing the authentication information stored in the unknown form are present at the same time, the present invention provides far more advanced security effects.

FIG. 1 is a diagram for explaining a management server 10 (briefly referred to as a server) of a power device according to an embodiment of the present invention.

1, the management server 10 of the power device includes a tag reader 11, a user authentication unit 12, a control authority management unit 13, an HMI (Human Machine Interface) control unit 14, An information sharing unit 15, a risk situation processing unit 16, an information sharing unit 17, a communication unit 18, a user interface 19, and the like.

Although the present invention is described as a power device, it should be understood as a concept that can include all types of electric power facilities such as a solar power generation control device, a switchboard control device, and a wind power generation control device.

Hereinafter, the function of each component will be described in more detail.

When the tags such as the RFID tag and the NFC tag approach within a preset distance, the tag readers 11 and 31 recognize the tag and read the user information stored in the tag. In the present invention, the smart phone 30 has been described as being built in, and it may be possible to directly control the tag reader of the power device by recognizing it offline.

The user authentication unit 12 acquires and stores information of users who can control and manage the power equipment 20, that is, user authentication information. Whenever the information transmitted from the smartphone 30 is read, the stored user information is compared with the user authentication information, and the user who performed the current tag recognition operation is confirmed as an authenticated user.

The control authority management unit 13 predefines and stores control authority for each user as shown in FIG. After confirming the control authority of the user, it is necessary to limit the contents of the work that can be processed according to the user control authority. That is, the control authority is subdivided according to the plurality of security levels and the control area, and accordingly, the contents of the work that the user can perform can be different.

The HMI control unit 14 includes an HMI program that can make a diagram of various devices of the power facility 20 and monitor and control the actual state of current machines so that the user can check the operation status of the power plant 20 Monitor, and perform necessary control tasks. It can be configured to be remotely controlled via the homepage with the URL.

The log management unit 15 generates and stores log data related to all the operations of the server 10. That is, the operations of the user authentication unit, the control authority management unit, the HMI control unit, and the risk situation processing unit are monitored, and the log data is generated and stored. In this case, the log data may include user information of a person who is connected through a smart phone and who is trying to work, work contents, work results, work hours, and the like.

The risk situation processing unit 16 is not necessarily required but is provided with a risk situation handling manual according to the embodiment and is provided with log data and various sensors (for example, an arc sensor, a discharge sensor, and a temperature sensor Etc.) from time to time. If a risk event is detected, the risk event handling manual is used to identify the action to be taken to resolve the risk situation, and then the log data is analyzed to select the user who can process the action most quickly and accurately. By providing the token having the risk processing right to the user terminal 30 which the selected user always has to carry out, the user can avoid the danger situation currently occurring at the place where the user himself / herself is present without having to visit the place where the server 10 is installed So that the work for resolving it can be carried out immediately.

The information sharing unit 17 shares information collected through each of the plurality of servers 10 so that the plurality of servers 10 can perform monitoring and control operations based on one database. For example, even if the user registers the user through only one of the plurality of servers 10, the remaining server 10 shares the information with the other server 10 so that the user can use the remaining server 10 as well. Also, a central management apparatus of one of the plurality of servers 10 is selected, and the HMI program update operation and the like can be collectively processed.

The communication unit 18 includes a local communication module (for example, RS232, RS422, RS5, SATA, USB, IEEE394, etc.), a remote communication module (an Ethernet communication module, To the other server 10, or to an external device.

The user interface 19 includes at least one of a control panel, a keyboard, a mouse, and a monitor, thereby performing a data input / output operation. That is, it acquires various control values inputted from the user, or informs the user of the operation state of the wartime control apparatus.

FIG. 3 is a view for explaining a user authentication and a control right confirmation method of a server according to an embodiment of the present invention.

When the user recognizes the employee card 33 containing the user information by using the smartphone 30 using the tag reader 31 in S11, the tag reader 31 reads the user information stored in the tag, And transmits it to the server 10, and the user authentication unit 12 in the server performs the user authentication operation (S12).

As a result of the operation in step S12, if the user who has performed the current tagging operation is confirmed to be a pre-registered user and the user authentication operation is successfully completed (S13), the control authority of the user is additionally checked, (S14).

Then, log data corresponding to the user authentication and control authority operation is generated and stored, and then the user authentication and control authority operation is terminated (S15).

4 is a diagram for explaining a power plant control method of a server according to an embodiment of the present invention.

When the user selects a specific job through the control module 32 of the smartphone and inputs a user control value (S21), the server 10 confirms the control right of the user and determines that the user has the right to process the job (S22).

When it is confirmed in step S22 that the power supply 20 has the processing right of the job (S23), the facility control signal corresponding to the user control value is generated and provided to the power facility 20, (S24).

After monitoring the operation result of the power facility 20, log data reflecting the control contents of the power facility 20 is generated and stored (S25).

A risk event processing method of a server according to another embodiment of the present invention will be described.

The present invention provides an information processing system including an employee card having an identification tag including URL address information, user ID information, and password information corresponding to the user ID information at the same time, a smart phone having a tag reader and a control module installed therein, And a server for controlling the electric power facility by being connected externally, wherein when the employee card is located within a predetermined distance from the tag reader, the tag reader reads the URL address information, the ID information And reading the password information at the same time; A second step of the control module transmitting the ID information and the password information to a server having the URL address through the smart phone and requesting authentication of the access right; A third step of the server performing an authentication operation of the user having the employee card using the transmitted ID information and the password information, and controlling the devices in the power facility or monitoring the operation status; And a fourth step wherein the server generates and stores log data based on user ID information for controlling each of the devices in the power facility.

The server 10 periodically checks the possibility of a danger based on the log data or the sensor installed in the power plant (S31).

If the probability of occurrence of a risk is greater than a predetermined value, the system detects the operation for eliminating the occurrence of the risk based on the predefined risk handling manual, searches the log data, Only data is selected. From the selected log data, we extract the number of operations per user and the number of successes of operations for the task of eliminating the risk situation. Based on this, we calculate the risk reduction index for each user. To be performed as a user to be performed (S32). In other words, the user who can handle the present risk situation most quickly and accurately is selected automatically based on the log data. The weight of the number of operations per user and the number of operations per user used in the calculation of the risk reduction index is determined by the system driving purpose So that it can be arbitrarily adjusted according to the environment.

And provides a message (e.g., a push message) having a token having a risk processing right to the smartphone 30 of the selected user. That is, the user is notified of the occurrence of a dangerous situation through the smartphone 30 of the selected user, and a message inquiring about whether or not to perform the dangerous situation removal operation is generated and provided (S33).

It will be understood by those of ordinary skill in the art that the foregoing description of the embodiments is for illustrative purposes and that those skilled in the art can easily modify the invention without departing from the spirit or essential characteristics thereof. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. For example, each component described as a single entity may be distributed and implemented, and components described as being distributed may also be implemented in a combined form.

The scope of the present invention is defined by the appended claims rather than the detailed description, and all changes or modifications derived from the meaning and scope of the claims and their equivalents should be interpreted as being included in the scope of the present invention .

10: server, 20: power equipment, 30: smartphone, 33: employee card

Claims (5)

An employee card having an identification tag including URL address information, user ID information, and password information corresponding to the user ID information at the same time;
A tag reader for simultaneously reading the URL address information, the ID information, and the password information from the identification tag when the employee card is located within a predetermined distance; and a management server for storing the ID information and the password information in a server having the URL address A smartphone including a control module that transmits and performs control after authentication;
And a HMI (Human Machine Interface) program for performing an authentication operation of a user possessing the employee card using the transmitted ID information and password information, and controlling each of the devices in the power facility through the HMI program And a log management unit for generating and storing log data based on user ID information for controlling the HMI control unit;
A mobile remote control system for measuring and automatic control panel using employee card including.
The method according to claim 1,
Wherein the identification tag further comprises a user control level code,
Wherein the server further comprises a control authority management unit for checking the user control level code and determining the tasks that the user can process.
Mobile Remote Control System for Measurement and Automatic Control Panel Using Employee Card.
The method of claim 2,
The server periodically checks whether or not a dangerous situation has occurred with respect to the electric power facility. When the occurrence of a dangerous situation is detected, the server confirms the work necessary for resolving the dangerous situation, analyzes the log data to select a suitable person for eliminating the dangerous situation, Further comprising a risk situation processing unit for inquiring whether or not a risk situation clearance job has been processed through the terminal of the terminal,
Mobile Remote Control System for Measurement and Automatic Control Panel Using Employee Card.
The method of claim 3,
The log data
Wherein the information includes at least one of user information, job content, job results, and job time.
Mobile Remote Control System for Measurement and Automatic Control Panel Using Employee Card.
An employee card having an identification tag including URL address information, user ID information, and password information corresponding to the user ID information at the same time, a smart phone having a tag reader and a control module installed therein, And a server for controlling the power equipment,
A first step of the tag reader simultaneously reading the URL address information, the ID information, and the password information from the identification tag when the employee card is located within a predetermined distance from the tag reader;
A second step of the control module transmitting the ID information and the password information to a server having the URL address through the smart phone and requesting authentication of the access right;
A third step of the server performing an authentication operation of the user having the employee card using the transmitted ID information and the password information, and controlling the devices in the power facility or monitoring the operation status;
And a fourth step of the server generating and storing log data based on user ID information for controlling each of the devices in the power facility.
Measuring using employee card and mobile remote control method of automatic control panel.

Images