TWI784393B - Method and system for monitoring industrial devices - Google Patents

Abstract

A method of monitoring industrial devices includes: obtaining an access token of a cloud storage server by a management device; sending an authorization request message to the management device by a user apparatus; performing an authorization on the user apparatus by the management device according to the authorization request message, and sending an authorization pass message with the access token to the user apparatus by the management device after passing the authorization; sending an access request message with the access token and identification information to the cloud storage server by the user apparatus; and providing device data of an industrial device terminal to the user apparatus by the cloud storage server according to the access token and the authority of the identification information.

Description

Industrial equipment monitoring method and industrial equipment monitoring system

The present invention relates to industrial equipment monitoring, and in particular to an industrial equipment monitoring method and an industrial equipment monitoring system.

All equipment data on the industrial equipment side can be sent to the cloud platform through the Industrial Internet of Things, and the cloud platform will perform unified calculation and processing. However, since users may access the equipment data stored on the cloud platform at any place and time point, the current remote industrial equipment monitoring system needs to transmit equipment data packets through a virtual private network (virtual private network; VPN) server , to ensure the validity of equipment data and the convenience of network connection. However, both the industrial equipment side and the user side need to bear the maintenance fee of the virtual private network server and the data flow fee used, resulting in an increase in monitoring costs.

One aspect of the present invention refers to a method for monitoring industrial equipment, which includes: sending a request certificate message from the management device to the cloud storage server; the cloud storage server responds to the request certificate message and sends a forwarding message to the management device; according to the forwarding The content of the message and the login information are sent by the management device to the cloud storage server; after confirming that the login information is correct, the cloud storage server sends an authorization message to the management device; according to the authorization code of the authorization message, the management device sends an authorization message containing The authorization confirmation message of the exchange code is sent to the cloud storage server; after the cloud storage server confirms the exchange code, it sends a response message including the access token (access token) to the management device; the user device sends an authentication request message to the management device; management The device authenticates the user device according to the authentication request message, and after passing the authentication, the management device sends an authentication pass message containing the access certificate to the user device; the user device sends an access message containing the access certificate and identity information Request information to the cloud storage server; and the cloud storage server provides the equipment data of the industrial equipment terminal to the user device according to the permissions corresponding to the access certificate and identity information.

According to one or more embodiments of the present invention, the above industrial equipment monitoring method further includes: after the management equipment obtains the access certificate, it provides the access certificate to the industrial equipment end; and the industrial equipment end uses the access certificate to access the cloud storage server, to save the device data to the cloud storage server.

According to one or more embodiments of the present invention, the device information obtained after the user device accesses the cloud storage server with different identity information is different.

According to one or more embodiments of the present invention, the user image interface displayed on the user device corresponds to the authority of the identity information.

According to one or more embodiments of the present invention, the graphical interface data including the graphical user interface is provided to the user device by the management device after the user device is authenticated.

According to one or more embodiments of the present invention, the user device displays a GUI by executing a container application.

According to one or more embodiments of the present invention, the management device authenticates the user device when the management device and the user device are in the same network domain.

Another aspect of the present invention refers to an industrial equipment monitoring system, which includes a user device, a cloud storage server, and a management device. The cloud storage server is configured to provide the device data on the industrial equipment side to the user device according to the permissions corresponding to the access certificate and identity information when receiving an access request message sent by the user device . The management device includes a communication unit and a processing unit. The communication unit is used for communication connection between the cloud storage server and the user device. The processing unit is used to perform the following operations: send a certificate request message to the cloud storage server; receive a forwarding message sent by the cloud storage server in response to the certificate request message; send a login message to the cloud according to the content of the forwarding message and login information Storage server; receive the authorization message sent by the cloud storage server after confirming that the login information is correct; send the authorization confirmation message containing the exchange code to the cloud storage server according to the authorization code of the authorization message; receive the cloud storage server to confirm the exchange The response message containing the access certificate sent after the code; receiving the authentication request message sent by the user device; and authenticating the user device according to the authentication request message, and after passing the authentication, sending the authentication pass message containing the access certificate to the user device.

According to one or more embodiments of the present invention, the processing unit of the above-mentioned management device is further used to provide an access certificate to the industrial device, and the above-mentioned device data is stored in the cloud storage server after the industrial device uses the access certificate to access the cloud storage server. Cloud storage server.

According to one or more embodiments of the present invention, the processing unit of the above-mentioned management device is further used to generate multiple corresponding graphical interface data according to the authority of multiple identity information, and the above-mentioned authentication pass message further includes the identity corresponding to the above-mentioned user device Graphical interface data of information authority.

Embodiments of the invention are discussed in detail below. It should be appreciated, however, that the embodiments provide many applicable concepts that can be implemented in a wide variety of specific contexts. The discussed and disclosed embodiments are for illustration only, and are not intended to limit the scope of the present invention.

FIG. 1 is a schematic diagram of an industrial equipment monitoring system 100 according to one or more embodiments of the present invention. The industrial equipment monitoring system 100 includes a management equipment 110 , a cloud storage server 120 , a user device 130 and an industrial equipment terminal 140 . The management device 110 , the cloud storage server 120 , the user device 130 and the industrial device end 140 can communicate with each other and transmit data. The management device 110 and the user device 130 that has not been authenticated by the management device 110 need to be in the same network domain, and the cloud storage server 120, the industrial device terminal 140, and the user device 130 that has been authenticated by the management device 110 can be located in the same or different domain. In addition, the communication connection among the management device 110 , the cloud storage server 120 , the user device 130 and the industrial device end 140 may be a wired communication connection and/or a wireless communication connection.

The management device 110 and the user device 130 may be entities with communication connection and data processing functions, such as but not limited to desktop computers, smart phones, and tablet computers. The cloud storage server 120 includes a server and a cloud hard disk, wherein the server is used to provide specific services to users, and the cloud hard disk can be used to store data and provide data to the client accessing the server.

The industrial device end 140 includes a gateway 141 , a human machine interface (human machine interface; HMI) device 142 , a controller 143 , drivers 144A˜ 144C, physical devices 145A˜ 145C and an encoder 146 . The gateway 141 is an interface for the industrial equipment end 140 to connect to the external network. The man-machine interface device 142 provides an interface for controlling industrial machines, and is used for collecting equipment data of industrial machines. The controller 143 is connected to the drivers 144A- 144C, and the drivers 144A- 144C are respectively connected to the physical devices 145A- 145C. The controller 143 can be used to generate control signals, and transmit the control signals to the drivers 144A-144C, so that the drivers 144A-144C respectively drive the physical devices 145A-145C to act. The controller 143 may be a programmable logic controller (programmable logic controller; PLC). The physical devices 145A-145C can be, for example, servo motors, stepping motors, or any devices that can be driven by the drivers 144A-144C. In an example where the physical device 145C is a servo motor, the encoder 146 can be connected to the physical device 145C for converting the rotational speed and/or rotational position of the servo motor into analog or digital data.

FIG. 2 is a flowchart of an industrial equipment monitoring method 200 according to one or more embodiments of the present invention. The industrial equipment monitoring method 200 can be used in the industrial equipment monitoring system 100 or other similar systems. The following uses the industrial equipment monitoring system 100 as an example for illustration. Firstly, step S202 is performed, and the management device 110 obtains the access certificate of the cloud storage server 120 . Next, proceed to step S204 , the user device 130 sends an authentication request message to the management device 110 . After that, proceed to step S206 , the management device 110 authenticates the user device 130 according to the authentication request message, and after passing the authentication, the management device 110 sends an authentication pass message including the access certificate to the user device 130 . Next, proceed to step S208 , the user device 130 sends an access request message including the access certificate and identity information to the cloud storage server 120 . Afterwards, step S210 is performed, and the cloud storage server 120 provides the equipment data of the industrial equipment terminal 140 to the user device 130 according to the authority corresponding to the access certificate and the identity information.

FIG. 3 is a message sequence diagram of the management device 110 obtaining the access certificate from the cloud storage server 120 in the industrial equipment monitoring system 100 of FIG. 1 , which is a detailed flow of step S202 in FIG. 2 . First, the management device 110 sends a certificate request message M31 to the cloud storage server 120 to request the cloud storage server 120 to provide the certificate message. Then, after receiving the certificate request message M31, the cloud storage server 120 sends a forwarding message M32 to the management device 110, so that the connection of the management device 110 is redirected to the address in the forwarding message M32. Afterwards, the management device 110 sends a login message M33 to the cloud storage server 120 . After receiving the login message M33, the cloud storage server 120 confirms whether the login information such as the account number and password in the login message M33 is correct and corresponds to a registered legal user. If yes, the cloud storage server 120 accepts the login request of the management device 110 and sends an authorization message M34 to the management device 110 . Next, the management device 110 sends an authorization confirmation message M35 containing the exchange code to the cloud storage server 120 according to the authorization code in the authorization message M34. Finally, the cloud storage server 120 sends a response message M36 to the management device 110 after confirming the exchange code. The response message M36 includes the access certificate required for accessing the cloud storage server 120 . After the management device 110 obtains the access certificate of the cloud storage server 120 , it can transmit the access certificate to the man-machine interface device 142 in the industrial device terminal 140 .

FIG. 4 is a message sequence diagram of the authentication of the user device 130 by the management device 110 in the industrial equipment monitoring system 100 of FIG. 1 , which is a detailed flow of steps S204 and S206 in FIG. 2 . First, the user device 130 sends an authentication request message M41 to the management device 110 . After receiving the authentication request message M41, the management device 110 authenticates the user device 130 according to information such as the authentication account number and the authentication password in the authentication request message M41. If the authentication account number and authentication password are valid, the management device 110 sends an authentication pass message M42 to the user device 130 . The authentication passing message M42 includes the access certificate of the cloud storage server 120 and the graphical interface data corresponding to the identity information permission of the user device 130 . The transmission protocol between the management device 110 and the user device 130 can use Hypertext Transfer Protocol (Hypertext Transfer Protocol; HTTP), Hypertext Transfer Protocol Secure (Hypertext Transfer Protocol Secure; HTTPS), message sequence telemetry transmission (Message Queuing Telemetry Transport) ; MQTT) and other communication protocols, but not limited to this. In addition, the authentication password can be encrypted using encryption methods such as MD5 algorithm and SHA1 algorithm.

FIG. 5 is a message sequence diagram of the user device 130 accessing the cloud storage server 120 in the industrial equipment monitoring system 100 of FIG. 1 , which is a detailed flow of steps S208 and S210 in FIG. 2 . First, the user device 130 sends an access request message M51 to the cloud storage server 120 . Next, after receiving the access request message M51, the cloud storage server 120 sends a device data message M52 to the user device 130, so that the user device 130 can display the device data in the device data message M52. The device information provided by the cloud storage server 120 is different according to the identity information authority of the user device 130 . For example, if the identity information authority of the user device 130 is the highest authority, the cloud storage server 120 provides the equipment information of all industrial equipment in the industrial equipment terminal 140 to the user device 130 . Conversely, if the identity information authority of the user device 130 is not the highest authority, the cloud storage server 120 provides all or part of the equipment information of some industrial equipment in the industrial equipment terminal 140 to the user device 130, but not limited thereto.

FIG. 6 shows a schematic diagram of a computer device 600 according to some embodiments of the present invention. The computer device 600 may be the management device 110 or the user device 130 in FIG. 1 , which includes a processing unit 610 , a storage unit 620 , a communication unit 630 and a display unit 640 . The processing unit 610 may be a conventional processor (conventional processor), a multicore processor (multicore processor), a digital signal processor (digital signal processor; DSP), a microprocessor (microprocessor), or an application-specific integrated circuit (application-specific integrated circuit; ASIC). In the embodiment of the present invention, the industrial equipment monitoring method performed by the management equipment 110 and/or the user device 130 can be edited into computer program instructions, and the edited computer program instructions are stored in the storage unit 620 . When the computer program instructions are executed by the processing unit 610, the processing unit 610 can be made to perform corresponding operations in the industrial equipment monitoring method.

The storage unit 620 can be any data storage device, which can be read and executed by the processing unit 610 . The storage unit 620 may be a read-only memory (read-only memory; ROM), an erasable programmable read-only memory (EPROM), an electronically erasable programmable read-only memory (EEPROM), a random access memory Random access memory (RAM), CD-ROM, magnetic tape, hard disk, solid state disk (SSD), flash memory, or others A data storage device suitable for, but not limited to, storing program code. The storage unit 620 can also be used to store access credentials or other data.

The communication unit 630 communicates with the remote entity according to the computer program instructions executed by the processing unit 610 . The communication unit 630 can be a wired transceiver or a wireless transceiver, and can be used for Internet connection.

The display unit 640 is coupled to the processing unit 610 and used for displaying corresponding images according to the operation of the processing unit 610 . The display unit 640 can be, for example, a liquid crystal display, an electroluminescence display, or any device capable of displaying corresponding images according to the operation of the processing unit 610 .

FIG. 7 is an example of a user graphic interface of the user device 130 . The user graphic interface shown in FIG. 7 is a graphic displayed on the display unit of the user device 130 when the application program is executed. The application program executed by the user device 130 may be a container application program, which can edit and display a corresponding user interface according to the user device, wherein the user interface is programmable by the user. As shown in FIG. 7 , the user interface includes a main window at the top and a row of icons at the bottom. From left to right, there are cloud connection icon 710 , account switching icon 720 , and homepage display icon 730 and settings icon 740 . When the user clicks the cloud connection icon 710 , a communication connection with the cloud storage server 120 can be performed. When the user clicks the account switching icon 720, the account that is currently logged into the cloud storage server 120 can be logged out, and another account can be used to log in to the cloud storage server 120, or the same account can be used to log in to the cloud storage server again device 120. When the user clicks the home page display icon 730, the main window can jump back to display the main page. And when the user clicks the setting icon 740 , the connection information of the device 110 can be set and managed.

The contents displayed on the user interface of the user device 130 at each stage are described below. First of all, after the user clicks the setting icon 740, if it is the first use, the address of the management device 110 and its login password must be input first, so that after successful login, the storage device 110 can receive the storage of the cloud storage server 120. Get the certificate. The application may provide the option to save the input information, and the user may choose to enable the function of saving the input information. In this way, when the application program is executed again, the user device 130 does not need to input the address of the management device 110 and its login password. In addition, the application program may provide an option to store authentication information, and the user may choose to enable the function of storing authentication information. In this way, when the application program is executed again, the user device 130 does not need to be connected with the management device 110 again.

After successfully obtaining the access certificate, the user can click the cloud connection icon 710 to communicate with the cloud storage server 120 . The user device 130 transmits the access certificate to the cloud storage server 120, and after the cloud storage server 120 passes the authentication of the access certificate, the main window can display the prompt message in the connection obtaining information, representing that the cloud storage The server 120 obtains the equipment information of the industrial equipment terminal 140 .

After successfully obtaining the device information, each device represented by an icon can be displayed on the main window. As shown in FIG. 7 , the main window is divided into two windows, wherein the left window displays industrial equipment type icons, and the right window displays individual industrial equipment icons. For example, if the obtained equipment information includes the information of two human-machine interface devices in the industrial equipment terminal 140, after clicking the human-machine interface device icon HMI in the left window, the right window displays two human-machine interface device icons Display HMI_1, HMI_2. If you want to view the device information of a specific HMI device, click the corresponding HMI device icon (for example, HMI_2). After clicking, a pop-up window will appear in the user interface, requiring the user to enter the login account and password to access the device information of the human-machine interface device.

After the user enters the correct login account and password, the main window will display various graphical statistical data icons of the human-machine interface device, which can correspond to histogram, pie chart, bar chart, line chart, trend chart, Statistical process control (SPC) charts, regression analysis charts (regression analysis), cluster statistical analysis charts (cluster analysis), radar charts, etc. In addition, due to the limited size of the user interface, if the number of graphical statistical data icons exceeds the number that can be displayed in the main window, they can be divided into multiple pages for display. In this example, the main window can display six graphical statistical data icons, and when the number of graphical statistical data icons exceeds the number that can be displayed in the main window, multiple page icons will be displayed at the bottom of the main window , where the solid page icon represents the page currently displayed in the main window. If the user device 130 supports touch display operations, a specific page can be displayed through a horizontal sliding operation. When scrolling to the second page, the main window displays a different graphical statistic icon from the first page. In other embodiments, the graphical statistical data icon can also be displayed in the main window in a scrolling mode or in a long page mode, and the scrolling direction or the page direction can be horizontal or vertical.

In the embodiment of the present invention, different users may have login accounts with different access rights. If the login account corresponds to a lower access authority, the main window only displays part of the graphical statistical data icons, but not all graphical statistical data icons. In other words, if the corresponding login account has lower access rights, the main window will display fewer graphical statistics icons.

It should be noted that the architecture of the industrial equipment monitoring system 100 shown in FIG. 1 is only an example, which is not intended to limit the scope of the present invention. For example, the industrial equipment monitoring system 100 can have multiple industrial equipment terminals, and each industrial equipment terminal can have multiple human-machine interface devices and/or other industrial equipment, which can be adjusted according to actual application requirements. Similarly, the graphical user interface shown in FIG. 7 is only an example, and program developers can change the appearance and window settings of the graphical user interface according to the above description and the content shown in FIG. 7 .

Although the present invention has been disclosed above with the embodiments, it is not intended to limit the present invention. Anyone with ordinary knowledge in the technical field may make some changes and modifications without departing from the spirit and scope of the present invention. The scope of protection of the present invention should be defined by the scope of the appended patent application.

100:Industrial equipment monitoring system 110: Manage equipment 120:Cloud storage server 130: user device 140: Industrial equipment end 141: Gateway 142: Human-machine interface equipment 143: Controller 144A~144C: Driver 145A~145C: physical equipment 146: Encoder 200: Industrial Equipment Monitoring Methods 600:Computer devices 610: processing unit 620: storage unit 630: communication unit 640: display unit 710: Cloud connection icon 720: Account switching icon 730: Home page display icons 740:Set icon M31: Request Credentials Message M32: Forward message M33: Login message M34: Authorization message M35: Authorization confirmation message M36: Response message M41: Authentication request message M42: Authentication pass message M51: Access request message M52: Device information message S202, S204, S206, S208, S210: steps

For a more complete understanding of the embodiments and advantages thereof, reference is now made to the following description taken in conjunction with the accompanying drawings, in which: [Fig. 1] is a schematic diagram of an industrial equipment monitoring system according to one or more embodiments of the present invention; [Fig. 2] is a flowchart of an industrial equipment monitoring method according to one or more embodiments of the present invention; [Figure 3] is a message sequence diagram of the management equipment obtaining the access certificate from the cloud storage server in the industrial equipment monitoring system of [Figure 1]; [Figure 4] is a message sequence diagram of the authentication of the user device by the management equipment in the industrial equipment monitoring system of [Figure 1]; [Fig. 5] is a message sequence diagram of the user device accessing the cloud storage server in the industrial equipment management system of [Fig. 1]; [FIG. 6] A schematic diagram illustrating a computer device according to some embodiments of the present invention; and [FIG. 7] is an example of the user interface of the user device of [FIG. 1].

Domestic deposit information (please note in order of depositor, date, and number) none Overseas storage information (please note in order of storage country, institution, date, and number) none

100:Industrial equipment monitoring system 110: Manage equipment 120:Cloud storage server 130: user device 140: Industrial equipment side 141: Gateway 142: Human-machine interface equipment 143: Controller 144A~144C: Driver 145A~145C: physical equipment 146: Encoder

Claims (15)

A method for monitoring industrial equipment, comprising: sending a certificate request message from a management device to a cloud storage server; sending a forwarding message to the management device by the cloud storage server in response to the certificate request message; According to the content of the forwarding message and a login information, the management device sends a login message to the cloud storage server; After confirming that the login information is correct, the cloud storage server sends an authorization message to the management device; According to an authorization code of the authorization message, the management device sends an authorization confirmation message containing an exchange code to the cloud storage server; After the cloud storage server confirms the exchange code, it sends a response message including an access certificate to the management device; sending an authentication request message from a user device to the management device; The management device authenticates the user device according to the authentication request message, and after passing the authentication, the management device sends an authentication pass message including the access certificate to the user device; sending an access request message including the access certificate and an identity information from the user device to the cloud storage server; and The cloud storage server provides the equipment data of an industrial equipment terminal to the user device according to the access certificate and the authority corresponding to the identity information. The industrial equipment monitoring method as described in claim 1 further includes: After the management device obtains the access certificate, it provides the access certificate to the industrial device; and The industrial equipment end uses the access certificate to access the cloud storage server to store the equipment data in the cloud storage server. The industrial equipment monitoring method as described in Claim 1, wherein the equipment data obtained after the user device accesses the cloud storage server with different identity information is different. The industrial equipment monitoring method as described in Claim 1, wherein the user image interface displayed on the user device corresponds to the authority of the identity information. The industrial equipment monitoring method as described in Claim 4, wherein the graphical interface data including the graphical user interface is provided to the user device by the management device after the user device is authenticated. The industrial equipment monitoring method as described in Claim 4, wherein the user device displays the user graphical interface by executing a container application program. The industrial equipment monitoring method as described in Claim 1, wherein the authentication of the user device by the management device is performed when the management device and the user device are in the same network domain. An industrial equipment monitoring system, comprising: a user device; A cloud storage server configured to provide a The equipment information of the industrial equipment terminal is sent to the user device; and A management device, including: a communication unit for communication connection between the cloud storage server and the user device; and A processing unit for performing the following operations: sending a certificate request message to the cloud storage server; receiving a forwarding message sent by the cloud storage server in response to the certificate request message; Send a login message to the cloud storage server according to the content of the forwarding message and a login information; receiving an authorization message sent by the cloud storage server after confirming that the login message is correct; sending an authorization confirmation message containing an exchange code to the cloud storage server according to an authorization code of the authorization message; receiving a response message including the access certificate sent by the cloud storage server after confirming the exchange code; receiving an authentication request message sent by the user device; and The user device is authenticated according to the authentication request message, and after the authentication is passed, an authentication pass message including the access certificate is sent to the user device. The industrial equipment monitoring system as described in Claim 8, wherein the processing unit of the management equipment is further used to provide the access certificate to the industrial equipment end, and the equipment data is accessed by the industrial equipment end using the access certificate The cloud storage server is then stored to the cloud storage server. The industrial equipment monitoring system as described in Claim 8, wherein the equipment data obtained after the user device accesses the cloud storage server with different identity information is different. The industrial equipment monitoring system as described in Claim 8, wherein the user image interface displayed on the user device corresponds to the authority of the identity information. The industrial equipment monitoring system as described in claim 11, wherein the processing unit of the management equipment is further used to generate a plurality of corresponding graphical interface data according to the authority of the plurality of identity information, and the authentication pass message further includes corresponding to the user The graphical interface data of the identity information authority of the device. The industrial equipment monitoring system as described in claim 11, wherein the user device displays the user graphical interface by executing a container application program. The industrial equipment monitoring system as described in Claim 8, wherein the management equipment and the user device are authenticated under the same network domain. The industrial equipment monitoring system as described in claim 8, wherein the transmission protocol between the management equipment and the user device is hypertext transfer protocol, hypertext transfer security protocol or message sequence telemetry transmission.

Images