KR20180079130A - Information collection and analysis system for industrial network monitor and remote control - Google Patents

Abstract

The present invention relates to an information collection and analysis system for monitoring and remotely controlling an industrial network field, which comprises: a remote access device (RAD) (100); a remote manager terminal (300) for requesting a security-based intelligent diagnosis web server (200) for a remote access; and a security-based intelligent diagnosis web server (200) for transmitting the request for the remote access to the RAD (100). Therefore, remote support and security maintenance for extending a lifetime and preventing errors of a system can be performed.

Description

TECHNICAL FIELD [0001] The present invention relates to an information collecting and analyzing system for on-site industrial network monitoring and remote control,

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information collecting and analyzing system for on-site industrial network monitoring and remote control, and more particularly, Providing a remote control device and system for providing an integrated management solution of network equipment by utilizing big data related to a failure of the equipment through a remote access device (RAD) and a management wireless Internet channel (3G, etc.) And to an information gathering and analyzing system for on-site monitoring and remote control of an industrial network.

Routers and other expensive industrial network devices are equipped with console ports for equipment development, diagnosis, testing and control, and most of these console ports communicate mainly through the RS232 interface.

However, since RS232 communication method has a maximum communication distance of 15m and is a 1: 1 communication method, it is possible to access the console port only at the site where the corresponding equipment exists, thus causing a limit to smooth maintenance.

Also, in the field of technology, there is a need to develop products related to maintenance / repair of remote industrial network equipment. In other words, there is an urgent need for a new industrial network management capable of remote support for error prevention and life span through improvement of high-priced equipment maintenance method in the case of a company that has undertaken the construction and restoration business of various industrial network systems.

In other words, the Internet, which was mainly used in the past PCs, has been expanded due to the explosive increase in smartphone penetration rate. Now, the Internet is connected to all things around, including home appliances including industrial machinery, do.

IoT (Internet of Things) technology, which is a technology that generates, collects, shares, and utilizes information connected to the Internet through all things, is a technology that forms intelligent relationships by exchanging information with each other in environments including network services. If you use it, it is analyzed that there will be a breakthrough change.

In addition, due to the necessity of remote access through a separate internet channel utilizing IoT technology, existing RAS needs to maintain a separate dedicated line for fault handling, so that it is quite expensive and utilizes 3G / 4G communication Remote access is expected to save a lot of money, and system access through the console is for authorized administrators only, so proper security support is required.

Korean Patent Registration No. 10-1267415 entitled " A Mutual Authentication Scheme with a Key Agreement for an Industrial Wireless Network and the Method thereof " Korean Patent Laid-Open Publication No. 10-2016-0141113 entitled " Industrial network system based on wire / wireless network and operating method thereof "

SUMMARY OF THE INVENTION The present invention has been made in view of the above problems, and it is an object of the present invention to provide a system and a method for remotely maintaining and maintaining security for error prevention, And to provide an information gathering and analysis system for industrial network field monitoring and remote control.

In addition, the present invention relates to a system and method for exchanging information between an Internet service provider (ISP) and an Internet service provider (ISP), in which all objects are connected to the Internet to generate, collect, share and utilize information And to provide an information gathering and analyzing system for on-site monitoring and remote control of an industrial network to utilize the technology.

In addition, according to the present invention, since the need for remote access through a separate Internet channel using the IoT technology is required, it is necessary to maintain a separate dedicated line for the fault handling in the case of the existing RAS, , It is expected that much cost savings will be achieved if remote access is possible. Since system access through console is for authorized administrators only, it is necessary to collect and analyze information for industrial network site monitoring and remote control so that appropriate security support can be provided. System.

However, the objects of the present invention are not limited to the above-mentioned objects, and other objects not mentioned can be clearly understood by those skilled in the art from the following description.

In order to achieve the above object, an information collecting and analyzing system for on-site industrial network monitoring and remote control according to an embodiment of the present invention includes a RAD (Remote Access Device) 100; A remote administrator terminal 300 that makes a remote access request to a security-based intelligent diagnostic web server 200 that is a server that knows information of a RAD (Remote Access Device) 100; And a security-based intelligent diagnostic web server 200 for transmitting a remote access request to a remote access device (RAD) 100; And a RAD (Remote Access Device) 100 that receives only a request from the security-based intelligent diagnostic web server 200 receives the information of the remote administrator terminal 300 and transmits a connection ready response to a security-based intelligent diagnosis The intelligent diagnostic web server 200 transmits the approval information to the remote administrator terminal 300. The authentication server 300 receives authentication information from the authentication server 300,

At this time, in the information collecting and analyzing system for on-site industrial network monitoring and remote control according to another embodiment of the present invention, the remote administrator terminal 300 receiving the RAD access information transmits the RAD (Remote Access Device) 100 ).

In addition, in an information collecting and analyzing system for on-site industrial network monitoring and remote control according to another embodiment of the present invention, a RAD (Remote Access Device) 100 transmits a final access confirmation to a remote administrator terminal 300 According to the transmission, transmission is made so that the remote worker can start the management work.

In addition, in an information gathering and analyzing system for on-site monitoring and remote control of an industrial network according to another embodiment of the present invention, a RAD (Remote Access Device) 100 is characterized in that security is enhanced by applying IPv6Sec do.

According to the embodiment of the present invention, the information collecting and analyzing system for on-site monitoring and remote control of industrial networks is a system for improving the maintenance life of the industrial network system by improving the maintenance method of high- And remote support and error prevention for error prevention.

In addition, according to another embodiment of the present invention, an information collecting and analyzing system for on-site monitoring and remote control of an industrial network includes an Internet (IoT-Internet), a technology for creating, of Things) technology to network services, it is possible to exchange information with each other to form an intelligent relationship.

In addition, according to another embodiment of the present invention, an information collecting and analyzing system for on-site monitoring and remote control of an industrial network is provided with a remote access service through a separate Internet channel using IoT technology, Because it needs to maintain a separate dedicated line for fault handling, it can be expected to save a lot of money if remote access is possible by using 3G / 4G communication, which is a very high cost and object internet communication technology. System access through console is for authorized administrators only This provides the appropriate security support effect.

1 is a diagram illustrating an information gathering and analyzing system for on-site monitoring and remote control of an industrial network according to an embodiment of the present invention.
2 is a flowchart illustrating an automatic baud rate (ABR) for automatically detecting a baud rate used in an information gathering and analyzing system for on-site monitoring and remote control of an industrial network according to an embodiment of the present invention.
3 illustrates an access session management method of a RAD (Remote Access Device) 100 without a display device implementing a UI screen in an information gathering and analyzing system for on-site industrial network monitoring and remote control according to an embodiment of the present invention Fig.
4 is a block diagram of hardware (H / W) of a RAD (Remote Access Device) 100 in an information gathering and analyzing system for on-site monitoring and remote control of an industrial network according to an embodiment of the present invention.
5 is a view for explaining 3G / 4G communication modules used in an information collecting and analyzing system for on-site monitoring and remote control of an industrial network according to an embodiment of the present invention.
FIG. 6 is a diagram for explaining a WiFi module 160a used in an information collecting and analyzing system for on-site monitoring and remote control of an industrial network according to an embodiment of the present invention.
7 is a low-power circuit diagram of a low power power device 170 among hardware (H / W) of a remote access device (RAD) 100 according to an embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, a detailed description of preferred embodiments of the present invention will be given with reference to the accompanying drawings. In the following description of the present invention, detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

In the present specification, when any one element 'transmits' data or signals to another element, the element can transmit the data or signal directly to the other element, and through at least one other element Data or signal can be transmitted to another component.

1 is a diagram illustrating an information gathering and analyzing system for on-site monitoring and remote control of an industrial network according to an embodiment of the present invention. 1, an information gathering and analyzing system for on-site monitoring and remote control of an industrial network includes a remote access device (hereinafter, referred to as "RDA") 100 and a security-based intelligent diagnostic web server 200 Thereby providing an intelligent network equipment management system through a remote access device (RAD)

Here, the RAD (Remote Access Device) 100 includes a remote RAD inquiry / access module 110, an intelligent diagnostic inquiry module 120, a console manager module 130, a wireless session manager module 140, a command line interface ) Processing manager module 150 to perform functions of a remote RAD inquiry / access, an intelligent diagnosis inquiry, a console manager, a wireless session manager, and a CLI processing manager.

The intelligent network management server 200 includes a data management and intelligent diagnostic / prediction module 210, a session management module 220, a RAD management module 230, a service management module 240, And a UI providing module 250 to perform functions of data management, intelligent diagnosis / prediction, session management, RAD management, service management, and UI.

Meanwhile, the console manager module 130, which performs a console connection protocol in the RAD (Remote Access Device) 100, executes a serial communication PnP (Plug-and-Play) for each device and performs RS232 serial communication standard And protocol setting parameters (Baud Rate, Framing, Hand-shake, etc.) are different from each other.

More specifically, since the RAD (Remote Access Device) 100 does not have a UI (user interface) of the displays at all, when the power is turned on to connect to the console port, the Baud Rate And a console manager module 130 including manager software (S / W) for automatically setting other parameters based on an automatic baud rate (ABR) technology to be automatically detected and setting serial communication automatically when a cable is connected .

2 is a diagram showing an ABR algorithm implemented by the console manager module 130. FIG.

The wireless session manager module 140, which performs the 3G Session Manager function in the RAD (Remote Access Device) 100, performs a Session ALG (Application Level Gateway) function.

More specifically, the RAD (Remote Access Device) 100 can not apply the TCP / IP communication server in the 3G terminal due to the characteristics of the 3G / LTE. Therefore, after the TCP session is opened in the 3G terminal, (S / W) that maintains a session with an administrator terminal after receiving a dummy data sending mechanism and TCP / IP environment information of a terminal of a remote administrator who knows the session information through a server, And a module 140.

3 is a view for explaining an access session management method of a RAD (Remote Access Device) 100 without a display device implementing a UI screen. Referring to FIG. 3, when the remote administrator terminal 300 requests a remote access to the security-based intelligent diagnostic web server 200, which is a server that knows information of the RAD (Remote Access Device) 100 (S1) The intelligent diagnostic web server 200 transmits a remote access request to the remote access device (RAD) 100 (S2). Accordingly, the RAD (Remote Access Device) 100 receiving only the request of the security-based intelligent diagnostic web server 200 knows the information of the remote administrator terminal 300 and transmits a connection ready response to the security- (S3). Accordingly, the security-based intelligent diagnostic web server 200 transmits approval information to the remote administrator terminal 300 (S4).

The remote administrator terminal 300 that has received the RAD access information makes an attempt to connect to the RAD (Remote Access Device) 100 by using the corresponding information (S5), and the RAD (Remote Access Device) Upon transmission of the connection confirmation to the remote administrator terminal 300 (S6), transmission is performed and the remote worker can start the management task.

The RAD (Remote Access Device) 100 can be operated as a private address, and if IPv6 is applied to the whole, it can be operated more efficiently and security can be further enhanced by applying IPv6Sec.

And a CLI processing manager module 150 including a CLI processing engine software (S / W) in a RAD (Remote Access Device) 100. The CLI processing manager module 150 will be described. That is, in order to manage the intelligent network, the remote administrator terminal 300 periodically generates the network operation information, and generates the CLI command based on the contents requested by the security-based intelligent diagnostic web server 200. Accordingly, the CLI processing manager module 150 of the RAD (Remote Access Device) 100 receives the CLI command from the remote administrator terminal 300 through the console port and returns a response to the remote administrator terminal 300 . Accordingly, the remote administrator terminal 300 transmits the response returned from the CLI processing manager module 150 to the security-based intelligent diagnostic web server 200.

Next, the components of the security-based intelligent diagnostic web server 200, which is an intelligent network device management server, will be described in detail.

First, the RAD management module 230 collectively manages the status (operational status, upgrade status) of the RAD (Remote Access Device) 100 of each site, takes appropriate measures if necessary, Management.

Next, the session management module 220 includes a RAD session processing engine to implement a software (S / W) program carried by the security-based intelligent diagnostic web server 200 in FIG. 3, and a RAD (Remote Access Device) The authentication function of the remote administrator terminal 300 and the key management supporting the one-time password function for the session are performed in order to enhance security such as authentication for the access of the terminal 100.

4 is a block diagram of hardware (H / W) of a RAD (Remote Access Device) 100 in an information gathering and analyzing system for on-site monitoring and remote control of an industrial network according to an embodiment of the present invention. Referring to FIG. 4, the hardware (H / W) of the RAD (Remote Access Device) 100 will be described. As shown in FIG. 4, the wireless session manager module 140 of the RAD (Remote Access Device) 100 can be applied to a 3G / 4G communication module (chip for 3G / 4G) accommodating IPv6.

As shown in FIG. 5, currently applicable 3G / 4G communication modules can use products such as Cinterion, Sierra Wireless, Telit and SIMCom. In this case, the 3G / 4G communication modules have various form factors such as Mini PCI Express, B2B, LGA, Interface can provide SPI, I2C, USB and so on. However, the applicable modules for IPv6 are Sierra Wireless, Huawei, and u-blox, and appropriate modules can be selected considering the platform that accommodates each form factor.

4, the WiFi module 160a may be applied to the hardware (H / W) of the RAD (Remote Access Device) 100 in the information collecting and analyzing system for on-site industrial network monitoring and remote control according to the present invention have.

The WiFi module 160a optimizes the RF performance so that field workers can reliably access the network equipment in a poor MDF (Main Distribution Frame) environment such as a basement and transmits the external environment factors such as concrete. 802.11a or 802.11.ac should be avoided and 802.11 b / g / n should be applied.

In addition, the WiFi module 160a is preferably designed to have the lowest EVM and current consumption for 256-QAM and IEEE 802.11n systems, as well as apply the high-power amplifier 160a for concrete transmission if necessary. In this case, the WiFi module 160a can deliver a high linear output of up to 23dBm with 1.75% dynamic EVM during bandwidth modulation (5V and 320mA supply current) and only 350mA of supply current for 802.11g / n applications It is desirable to provide a 25dBm linear output at 3% EVM.

Such a design of the WiFi module 160a greatly extends the range of 802.11b / g / n WLAN and MIMO systems, and also has the lowest current consumption at the maximum 256-QAM data transmission rate.

6 is a diagram showing a circuit diagram of the high power amplifier 160a for transmitting concrete, if necessary, in the WiFi module 160a.

7 is a low-power circuit diagram of the low power power device 170 among hardware (H / W) of a RAD (Remote Access Device) 100 according to an embodiment of the present invention. Referring to FIG. 7, the low power power device 170 is a power device that can stably supply in a harsh environment. In this case, a battery discharge monitoring circuit may be mounted in consideration of the possibility of power discharge due to the battery being left for a long time.

Accordingly, the low power power device 170 can design a circuit with low power to minimize unnecessary power wastage.

The Bluetooth module 160b of the hardware (H / W) of the RAD (Remote Access Device) 100 according to the embodiment of the present invention can be used for data transmission for monitoring or device connection. That is, it corresponds to an H / W module capable of transmitting various sensor information and various data to a smart phone in a Bluetooth attached to a RAD (Remote Access Device)

In this case, it is preferable that the Bluetooth module 160b is a chip based on the CSR 1010 and a high-speed communication method using the internal I2C or SPI is used.

The present invention can also be embodied as computer-readable codes on a computer-readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored.

Examples of the computer-readable recording medium include a ROM, a RAM, a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device and the like, and also implemented in the form of a carrier wave (for example, transmission over the Internet) .

The computer readable recording medium may also be distributed over a networked computer system so that computer readable code can be stored and executed in a distributed manner. And functional programs, codes, and code segments for implementing the present invention can be easily inferred by programmers skilled in the art to which the present invention pertains.

As described above, preferred embodiments of the present invention have been disclosed in the present specification and drawings, and although specific terms have been used, they have been used only in a general sense to easily describe the technical contents of the present invention and to facilitate understanding of the invention , And are not intended to limit the scope of the present invention. It is to be understood by those skilled in the art that other modifications based on the technical idea of the present invention are possible in addition to the embodiments disclosed herein.

100: Remote Access Device (RAD) 100
The remote RAD inquiry / access module (110)
The intelligent diagnostic inquiry module 120,
The console manager module 130,
Wireless session manager module 140,
CLI processing manager module 150,
A security-based intelligent diagnostic web server (200)
Data management and intelligent diagnostic / prediction module 210
The session management module 220,
RAD management module 230,
The service management module 240,
UI providing module 250,
The remote administrator terminal 300

Claims (4)

A RAD (Remote Access Device) 100;
A remote administrator terminal 300 that makes a remote access request to a security-based intelligent diagnostic web server 200 that is a server that knows information of a RAD (Remote Access Device) 100; And
A security-based intelligent diagnostic web server 200 for transmitting a remote access request to a remote access device (RAD) 100; / RTI >
The RAD (Remote Access Device) 100 receiving only the request of the security-based intelligent diagnostic web server 200 learns the information of the remote administrator terminal 300 and transmits a connection ready response to the security-based intelligent diagnostic web server 200 ), The security-based intelligent diagnostic web server (200) transmits the approval information to the remote administrator terminal (300).
The method according to claim 1,
The remote administrator terminal (300) receiving the RAD access information makes an attempt to connect to the RAD (Remote Access Device) (100) by using the received information, and collects and analyzes the information for industrial network monitoring and remote control.
The remote access device (RAD) according to claim 2,
And transmitting the final access confirmation to the remote administrator terminal (300) so that the remote worker can start the management work by transmitting the information.
The remote access device (RAD) according to claim 3,
An information gathering and analyzing system for on-site monitoring and remote control of an industrial network, characterized by enhancing security by applying IPv6Sec.

Images