WO2016159039A1 - Relay device and program - Google Patents

Relay device and program Download PDF

Info

Publication number
WO2016159039A1
WO2016159039A1 PCT/JP2016/060298 JP2016060298W WO2016159039A1 WO 2016159039 A1 WO2016159039 A1 WO 2016159039A1 JP 2016060298 W JP2016060298 W JP 2016060298W WO 2016159039 A1 WO2016159039 A1 WO 2016159039A1
Authority
WO
WIPO (PCT)
Prior art keywords
determination rule
abnormality
information
monitoring
unit
Prior art date
Application number
PCT/JP2016/060298
Other languages
French (fr)
Japanese (ja)
Inventor
仁 川▲崎▼
広泰 田畠
Original Assignee
三菱電機ビルテクノサービス株式会社
三菱電機株式会社
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 三菱電機ビルテクノサービス株式会社, 三菱電機株式会社 filed Critical 三菱電機ビルテクノサービス株式会社
Priority to KR1020177027086A priority Critical patent/KR102048294B1/en
Priority to DE112016001586.0T priority patent/DE112016001586T5/en
Priority to CN201680018963.1A priority patent/CN107533492B/en
Publication of WO2016159039A1 publication Critical patent/WO2016159039A1/en

Links

Images

Classifications

    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B23/00Testing or monitoring of control systems or parts thereof
    • G05B23/02Electric testing or monitoring
    • G05B23/0205Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
    • G05B23/0218Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterised by the fault detection method dealing with either existing or incipient faults
    • G05B23/0224Process history based detection method, e.g. whereby history implies the availability of large amounts of data
    • G05B23/0227Qualitative history assessment, whereby the type of data acted upon, e.g. waveforms, images or patterns, is not relevant, e.g. rule based assessment; if-then decisions
    • G05B23/0235Qualitative history assessment, whereby the type of data acted upon, e.g. waveforms, images or patterns, is not relevant, e.g. rule based assessment; if-then decisions based on a comparison with predetermined threshold or range, e.g. "classical methods", carried out during normal operation; threshold adaptation or choice; when or how to compare with the threshold
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/0703Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation
    • G06F11/0706Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation the processing taking place on a specific hardware platform or in a specific software environment
    • G06F11/0748Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation the processing taking place on a specific hardware platform or in a specific software environment in a remote unit communicating with a single-box computer node experiencing an error/fault
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/0703Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation
    • G06F11/0751Error or fault detection not based on redundancy

Definitions

  • the present invention relates to a relay device and a program, and more particularly to a function of a relay device arranged on a device side monitored by a monitoring center via a network.
  • equipment such as air conditioning and lighting installed in a facility such as a building is monitored from a remote monitoring center via a network.
  • the monitoring center collects monitoring information such as information indicating the state of the equipment from each equipment via the network, and analyzes the monitoring information to detect an abnormality.
  • Patent Document 1 a technique for operating a monitoring function in a device to be monitored has been proposed. Furthermore, a technique has been proposed in which an OS dedicated to a monitoring function is started and monitored separately from an operating system (OS) on which an application of a monitoring target device operates (for example, Patent Document 2).
  • OS operating system
  • Patent Documents 2 and 3 Such problems can be solved by the techniques described in Patent Documents 2 and 3 monitored at the facility side where the equipment is installed.
  • Patent Document 2 if a failure occurs in basic software such as an OS, the monitoring function cannot function normally.
  • Patent Document 3 it may be possible to continuously perform the monitoring function even if a failure occurs in the basic software.
  • the monitoring function cannot function normally.
  • the present invention has been made to solve the above-described problems, and can reliably monitor a monitored device without imposing a load on the monitoring center and even when an abnormality occurs in the hardware of the monitored device.
  • the purpose is to do so.
  • the relay device includes a determination rule storage unit that stores a determination rule for determining whether a device to be monitored is normal or abnormal, an acquisition unit that acquires monitoring information of the device, and an acquisition unit that acquires the determination rule An abnormality detection unit that detects an abnormality of the device by comparing the monitored information with the determination rule stored in the determination rule storage unit, and when abnormality is detected by the abnormality detection unit, abnormality information relating to the abnormality Is transmitted to the monitoring center of the device via a network.
  • the present invention is characterized in that there is an update means for updating the determination rule stored in the determination rule storage means with the determination rule acquired from the outside.
  • the updating means updates the determination rule stored in the determination rule storage means with a determination rule acquired from a relay device installed in another facility.
  • a relay device information storage unit that stores identification information of a relay device installed in each of the other facilities that share the determination rule
  • the update unit stores the determination rule stored in the determination rule storage unit Is updated with the determination rule acquired from the relay device whose identification information is stored in the relay device information storage means.
  • the apparatus has an estimation unit for estimating the state of the device when the monitoring information is generated based on the monitoring information acquired by the acquisition unit, and the determination rule storage unit is set for each state of the device.
  • the abnormality detection means detects the abnormality using the determination rule corresponding to the state of the device estimated by the estimation means.
  • the program according to the present invention provides a computer accessible to a determination rule storage unit that stores a determination rule for determining whether a device to be monitored is normal or abnormal, an acquisition unit that acquires monitoring information of the device, and the acquisition An abnormality detection means for detecting an abnormality of the device by comparing the monitoring information acquired by the means with a determination rule stored in the determination rule storage means, and if an abnormality is detected by the abnormality detection means, The abnormality information is transmitted to the monitoring center of the device via the network as abnormality information transmitting means.
  • the present invention it is possible to reliably monitor a monitoring target device without imposing a load on the monitoring center and even when an abnormality occurs in the hardware of the monitoring target device.
  • the stored judgment rules can be updated from the outside.
  • the detection accuracy of the abnormality of the device can be improved by using the determination rule according to the estimated device state.
  • the monitoring information is sent to the monitoring center only when it cannot be immediately determined from the monitoring information that the device is abnormal. It is possible to avoid an increase in load on the relay device when it cannot be determined.
  • FIG. 2 is a hardware configuration diagram of a gateway device according to Embodiment 1.
  • FIG. 2 is a block configuration diagram of a gateway device in Embodiment 1.
  • FIG. 4 is a flowchart illustrating a monitoring process performed by the gateway device in the first embodiment.
  • FIG. 6 is a block configuration diagram of a gateway device in a second embodiment.
  • FIG. 10 is a block configuration diagram of a gateway device in a third embodiment.
  • FIG. 10 is a block configuration diagram of a gateway device in a fourth embodiment. 10 is a flowchart illustrating a monitoring process performed by the gateway device in the fourth embodiment. 10 is a flowchart illustrating a monitoring process performed by the gateway device in the fifth embodiment.
  • FIG. 1 is a diagram illustrating an example of the overall configuration of a monitoring system including a gateway device according to the present embodiment.
  • the monitoring system in the present embodiment is characterized by the function of the gateway device 10.
  • a monitoring server 2 installed in the monitoring center 1, a device 4, a facility 7, and a gateway device 10 installed in a building 3 are shown.
  • the monitoring server 2 and the gateway device 10 are connected by an external network 5 such as the Internet.
  • the gateway device 10 and the device 4 are connected by a network 6 built inside a building such as a LAN.
  • the equipment 4 connects one or a plurality of equipment 7 such as electrical equipment, and collects and accumulates signal data such as measured values and set values, control data such as on / off, or alarm data from the equipment 7 and accumulates them. Or a controller.
  • the monitoring center 1 uses the monitoring server 2 to acquire data from the device 4 for maintenance management of the equipment 7 installed in the building 3. Although the monitoring center 1 monitors the devices 4 to be monitored installed in one or a plurality of buildings 3, only one building 3 is shown for convenience because the monitoring contents may be common to each building 3. Also, although a plurality of devices 4 may be connected to the network 6, only one device is shown for convenience because each device 4 may be monitored in the same manner.
  • FIG. 2 is a hardware configuration diagram of the gateway device 10 according to the present embodiment.
  • the gateway device 10 according to the present embodiment is equipped with a computer and can be realized by a general-purpose hardware configuration that has existed in the past. That is, as shown in FIG. 2, the gateway device 10 is provided as a CPU 31, ROM 32, RAM 33, hard disk drive (HDD) 34, communication means, an external network interface (IF) 35 for external network connection, and an internal network connection.
  • the internal network interface (IF) 36 is connected to an internal bus 37.
  • an interface to which a computer can be connected may be provided for environment setting or the like.
  • FIG. 3 is a block configuration diagram of the gateway device 10 according to the present embodiment. Note that components not used in the description in the present embodiment are omitted from the drawings.
  • the gateway device 10 according to the present embodiment includes a lower communication unit 11, a monitoring information acquisition unit 12, an abnormality detection unit 13, an abnormality notification unit 14, an upper communication unit 15, a monitoring information storage unit 21, and a determination rule storage unit 22. ing.
  • the lower communication unit 11 performs data communication with the device 4 via the internal network 6.
  • the upper communication unit 15 performs data communication with the monitoring server 2 via the external network 5.
  • the monitoring information acquisition unit 12 acquires the monitoring information of the device 4 via the lower communication unit 11, the monitoring information acquisition unit 12 stores the monitoring information in the monitoring information storage unit 21.
  • the abnormality detection unit 13 detects the abnormality of the device 4 by collating the monitoring information acquired by the acquisition unit and stored in the monitoring information acquisition unit 12 with the determination rule stored in the determination rule storage unit 22.
  • the abnormality notification unit 14 notifies the abnormality of the device 4 by transmitting abnormality information regarding the abnormality to the monitoring server 2 via the network 5.
  • monitoring information storage unit 21 information that can detect an abnormality of the device 4 by reference is stored as monitoring information.
  • connection information, resource information, log information, and hardware information are handled as monitoring information.
  • the connection information includes flag information indicating whether or not the device 4 can be connected, response information to the connection request, response time, and the like.
  • the resource information includes the usage rate of the CPU, memory, and disk of the device 4.
  • the log information includes an access log to the monitoring server 2, a device log such as an HDD of the device 4, and a log of an application operating on the device 4.
  • the hardware information includes a SMART (Self-Monitoring, Analysis and Reporting Technology) of the HDD of the device 4, a sensor value of the motherboard, and the like.
  • SMART Self-Monitoring, Analysis and Reporting Technology
  • the type of monitoring information need not be limited to this. For example, an abnormality can be detected by analyzing measurement data values, value transitions, etc., so the measurement data itself may be handled as monitoring information.
  • an index represented by a threshold value, a range, or the like serving as a reference for determining whether the device 4 is normal or abnormal is preset and registered as a determination rule.
  • Each component 11 to 15 in the gateway device 10 is realized by a cooperative operation of a computer installed in the gateway device 10 and a program operating on the CPU 31 installed in the computer.
  • the storage units 21 to 22 are realized by the HDD 34 mounted on the gateway device 10.
  • the RAM 33 or an external storage means may be used via a network.
  • the program used in this embodiment can be provided not only by communication means but also by storing it in a computer-readable recording medium such as a CD-ROM or USB memory.
  • the program provided from the communication means or the recording medium is installed in the computer, and various processes are realized by the CPU of the computer sequentially executing the program.
  • the monitoring process performed by the gateway device 10 according to the present embodiment will be described with reference to the flowchart shown in FIG.
  • an application for monitoring processing is resident in the RAM 33, and the device 4 is constantly monitored.
  • the monitoring information acquisition unit 12 When the monitoring information acquisition unit 12 acquires the monitoring information of the device 4, the monitoring information acquisition unit 12 stores it in the monitoring information storage unit 21 (step 101).
  • the monitoring information is basically collected regularly, but may be collected irregularly when an event such as an abnormality occurs.
  • the connection information described above is collected at a cycle of once per hour if a connection request is sent to the device 4 every hour, for example.
  • the resource information can be collected from the device 4 in a short cycle of several seconds. For example, the maximum value, the minimum value, the average value, etc. are obtained every hour and stored in the monitoring information storage unit 21 as monitoring information. May be.
  • Log information and hardware information may be collected once a day, for example.
  • the abnormality detection unit 13 determines whether or not an abnormality has occurred in the device 4 by comparing the monitoring information with the determination rule. (Step 102).
  • connection information if the connection cannot be made normally, if the response code is code data indicating abnormality, or if the response time is longer than a predetermined threshold, it is determined as abnormal.
  • the resource information and the hardware information are determined to be normal or abnormal by comparing with a threshold set in advance in the determination rule or by comparing with a range estimated to be normal.
  • the log information can detect whether or not an abnormality has occurred by referring to the contents of the log.
  • the abnormality detecting unit 13 When the abnormality of the device 4 is not detected as a result of collating the monitoring information with the determination rule (N in Step 103), the abnormality detecting unit 13 returns to Step 101 and returns to the subsequent acquisition of the monitoring information. At this time, the monitoring information used for normality / abnormality determination may be deleted from the monitoring information storage unit 21.
  • the abnormality detection unit 13 when an abnormality is detected (Y in step 103), the abnormality detection unit 13 includes information on the detected abnormality, specifically, identification information of the device 4 in which the abnormality is detected, an abnormality occurrence date and time, and the content of the abnormality Thus, abnormality detection information including information necessary for abnormality analysis is generated (step 104). And the abnormality notification part 14 notifies the detection of abnormality to the monitoring server 2 by transmitting the abnormality detection information produced
  • the gateway device 10 can detect the abnormality, so that the abnormality that has occurred can be notified to the monitoring server 2.
  • the monitoring server 2 is not allowed to perform any processing required for detecting an abnormality, the processing load on the monitoring server 2 can be greatly reduced.
  • the information notified to the monitoring server 2 is only information related to the detected abnormality, the network traffic can be reduced.
  • the monitoring information is directly acquired from the device 4.
  • it may be indirectly acquired from a separately prepared monitoring information storage unit.
  • FIG. FIG. 5 is a block configuration diagram of the gateway device 10 according to the present embodiment.
  • symbol is attached
  • the gateway device 10 according to the present embodiment has a configuration in which a determination rule update unit 16 is provided in the configuration described in the first embodiment.
  • the determination rule update unit 16 is provided as an update unit that updates the determination rule stored in the determination rule storage unit 22 with the determination rule acquired from the outside via the host communication unit 15.
  • “external” means a device that is outside the building 3 and can communicate via the network 5.
  • the monitoring server 2 is assumed.
  • the determination rule update unit 16 acquires the received determination rule from the higher-level communication unit 15, and determines with the acquired determination rule.
  • the determination rule stored in the rule storage unit 22 is updated.
  • the transmission source of the determination rule may be determined based on the identification information of the transmission source added to the determination rule.
  • the determination rule set in the gateway device 10 can be updated from the monitoring server 2. That is, the maintenance staff of the device 4 can update the determination rule from the monitoring center 1 without going to the building 3.
  • FIG. FIG. 6 is a block configuration diagram of the gateway device 10 in the present embodiment.
  • symbol is attached
  • the gateway device 10 in the present embodiment has a configuration in which a gateway device (GW) information storage unit 23 is provided in the configuration shown in the second embodiment.
  • the gateway device information storage unit 23 is a relay device information storage unit that stores identification information of a gateway device installed in each of the other buildings sharing the determination rule.
  • the monitoring server 2 is assumed as “external”, but in the present embodiment, a gateway device installed in another building is assumed.
  • the operation in the present embodiment may be basically the same as that in the second embodiment, but the second embodiment is that the determination rule transmission source is not the monitoring server 2 but a gateway device installed in another building. And different.
  • the gateway device that has updated its own determination rule with the determination rule transmitted from the monitoring server 2 as in the second embodiment is identified by broadcasting or in the gateway device information storage unit 23 of its own device.
  • the updated determination rule is transmitted to the gateway device for which information is set and registered.
  • the determination rule update unit 16 collates the identification information of the transmission source of the determination rule with the identification information stored in the gateway device information storage unit 23. If the matching identification information is registered in the gateway device information storage unit 23, the determination rule update unit 16 determines that the determination rule is transmitted from another gateway device, and the acquired determination rule. The judgment rule stored in the judgment rule storage unit 22 is updated. Further, when the identification information of the transmission source is the identification information of the monitoring server 2, the same processing as in the second embodiment is performed.
  • the identification information is not particularly limited as long as it is information that can identify each gateway device, such as an IP address and a device name.
  • another building sharing a judgment rule means a building in which a gateway device for which the judgment rule is set to the same content is installed. For example, a building that exists within a certain area from the building 3 or a building whose owner or manager is the same as the building 3. If the identification information of the gateway device installed in the jurisdiction of the branch office (or even one maintenance staff) is set as a certain area, the monitoring center 1 determines the determination rule for one gateway device 10 in the area. It is possible to make the determination rule of all the gateway devices 10 in the area have the same content only by updating only. If the identification information of the gateway devices installed in the same owner or administrator building 3 is set, the same determination rule can be applied to the same owner or administrator building 3. .
  • the identification information of the gateway device installed in each of the other buildings sharing the determination rule is set and registered in advance in the gateway device information storage unit 23.
  • the data configuration to be registered in the gateway device information storage unit 23 is not limited to this.
  • group identification is included in all identification information of gateway devices existing in the monitoring target area in the monitoring center 1.
  • Information may be added and registered in the gateway device information storage unit 23.
  • the determination rule update part 16 may update the determination rule memorize
  • FIG. FIG. 7 is a block configuration diagram of the gateway device 10 in the present embodiment.
  • symbol is attached
  • the gateway device 10 in the present embodiment has a configuration in which a processing estimation unit 17 is provided in the configuration shown in the first embodiment.
  • the processing estimation unit 17 is provided as an estimation unit that estimates the state of the device 4 when the monitoring information is generated based on the monitoring information accumulated in the monitoring information storage unit 21.
  • the determination rule storage unit 22 in the present embodiment stores determination rules set for each state of the device 4.
  • a threshold value for determining whether or not the device 4 is abnormal is set in the determination rule, and the abnormality detection unit 13 collates the monitoring information with the determination rule. Then, it is determined whether or not an abnormality has occurred in the device 4.
  • the device 4 to be monitored in the present embodiment executes various processes such as generation of daily report processing and communication with external devices. That is, there is a case where the CPU needs to operate at a higher usage rate than usual or the disk access is performed more than usual. On the other hand, depending on the processing to be executed, writing to the disk may not be performed at all.
  • a common determination rule is applied to the state (operation state) of the device 4 that varies depending on the processing executed by the device 4, there is a possibility that the abnormality detection accuracy is lowered.
  • a determination rule is set for each state of the device 4 and a processing estimation unit 17 is provided so that the state of the device 4 can be estimated.
  • a processing estimation unit 17 is provided so that the state of the device 4 can be estimated.
  • the monitoring process in the present embodiment may basically be executed in the same manner as in the first embodiment.
  • the process estimation unit 17 analyzes the monitoring information stored in the monitoring information storage unit 21 to determine what state the device 4 is performing, that is, what processing is being performed. Estimate (step 401).
  • the process estimation unit 17 estimates the state of the device 4
  • the abnormality detection unit 13 reads the determination rule corresponding to the estimated state of the device 4 from the determination rule storage unit 22, and the monitoring rule that has read the monitoring information By checking (step 102), it is determined whether or not an abnormality has occurred in the device 4 (step 103).
  • the state of the device 4 is estimated by analyzing the monitoring information sent from the device 4, and a determination rule that matches the estimated state of the device 4 is used. To detect abnormalities. Thereby, abnormality detection accuracy can be improved.
  • the type of processing executed by the device 4 has been described as the state of the device 4.
  • the state of the device 4 changes depending on time factors such as time zone and time of day. In many cases, various determination rules may be prepared in consideration of such factors as time.
  • Embodiment 5 the monitoring information stored in the monitoring information storage unit 21 is used for detecting an abnormality of the device 4.
  • the monitoring information stored in the monitoring information storage unit 21 is used for detecting an abnormality of the device 4.
  • it cannot be deleted until it can be determined whether or not the device 4 is normal it is necessary to hold the monitoring information in time series. Holding the monitoring information for a long time and determining whether the device 4 is normal or abnormal based on the long-time monitoring information means that the gateway device 10 is loaded accordingly.
  • a determination rule for determining “hold” is set in the determination rule storage unit 22.
  • the monitoring information is transmitted to the monitoring server 2 and the abnormality detection process is left to the monitoring server 2.
  • the hardware configuration and functional block configuration of the gateway device 10 in the present embodiment may be the same as those in the first embodiment.
  • the monitoring process in the present embodiment may basically be executed in the same manner as in the first embodiment. However, in the present embodiment, no abnormality is detected by comparing the monitoring information with the determination rule (N in Step 103), and it is not possible to immediately determine whether the device 4 is normal or abnormal from the monitoring information.
  • the abnormality detection unit 13 reads the monitoring information from the monitoring information storage unit 21 (Step 107) and transmits it to the monitoring server 2 via the upper communication unit 15 (Step 108). Note that the monitoring information transmitted to the monitoring server 2 is deleted from the monitoring information storage unit 21.
  • the monitoring information stored in the monitoring information storage unit 21 is transmitted to the monitoring server 2 to determine whether the device 4 is normal or abnormal.
  • the decision is left to the monitoring server 2.
  • the monitoring process for monitoring the device 4 based on the monitoring information and detecting an abnormality occurring in the device 4 has been described.
  • the configuration and processing content described in each embodiment may be combined as appropriate.
  • the gateway apparatus 10 is described as an example of the relay apparatus. However, data between the monitoring server 2 and the device 4 by connecting the external network 5 and the internal network 6 of the building 3 is described. It is not necessary to limit to the gateway device 10 as long as it is a relay device having a relay function capable of relaying communication.

Abstract

The purpose of the present invention is to allow reliable monitoring of an apparatus to be monitored without increasing demand on a monitoring center, even if a hardware fault has occurred with the apparatus to be monitored. Provided is a gateway device 10, comprising: a monitor information acquisition unit 12 which acquires monitor information from an apparatus 4 and stores said monitor information in a monitor information storage unit 21; a fault detecting unit 13 which detects a fault with the apparatus 4 by comparing the stored monitor information with determination rules; and a fault notification unit 14 which, if a fault is detected with the apparatus 4, issues a notification of the fault with the apparatus 4 by transmitting fault detection information to a monitor server 2.

Description

中継装置及びプログラムRelay device and program
 本発明は、中継装置及びプログラム、特に監視センターがネットワークを介して監視する機器側に配設される中継装置の機能に関する。 The present invention relates to a relay device and a program, and more particularly to a function of a relay device arranged on a device side monitored by a monitoring center via a network.
 ビル等の施設内に設置された空調や照明等の機器を、ネットワークを介して遠隔地の監視センターから監視することは従来から行われている。例えば、監視センターがネットワークを介して各設備機器から当該設備機器の状態を示す情報等の監視情報を収集し、その監視情報を分析して異常を検知する。 Conventionally, equipment such as air conditioning and lighting installed in a facility such as a building is monitored from a remote monitoring center via a network. For example, the monitoring center collects monitoring information such as information indicating the state of the equipment from each equipment via the network, and analyzes the monitoring information to detect an abnormality.
 その他にも、監視対象の機器において監視機能を稼動させる技術が提案されている(例えば特許文献1)。更に、監視対象機器のアプリケーションが動作するオペレーティングシステム(OS)とは別に監視機能専用のOSを立ち上げて監視させる技術が提案されている(例えば特許文献2)。 In addition, a technique for operating a monitoring function in a device to be monitored has been proposed (for example, Patent Document 1). Furthermore, a technique has been proposed in which an OS dedicated to a monitoring function is started and monitored separately from an operating system (OS) on which an application of a monitoring target device operates (for example, Patent Document 2).
特許第4572251号明細書Japanese Patent No. 4572251 特開2005-115751号公報JP 2005-115751 A 特開2004-54357号公報JP 2004-54357 A 特開2003-143181号公報Japanese Patent Laid-Open No. 2003-143181 特開2011-188450号公報JP 2011-188450 A 特開2006-222649号公報JP 2006-222649 A
 しかしながら、監視センターからネットワークを介して監視を行う場合、監視対象の設備機器が多数存在するとネットワーク通信量が膨大になる。また、設備機器の機種が多数存在すると各設備機器のハードウェア構成、ソフトウェア構成、更に通信仕様等に適合させなければならず、負荷は膨大になる。 However, when monitoring is performed from the monitoring center via the network, the amount of network communication becomes enormous if there are many monitoring target equipment. In addition, if there are a large number of types of equipment, the equipment must be adapted to the hardware configuration, software configuration, communication specifications, etc. of each equipment and the load becomes enormous.
 機器が設置された施設側にて監視する上記特許文献2,3に記載された技術では、このような問題は解消しうる。しかしながら、特許文献2では、OS等の基本ソフトウェアに障害が発生すると監視機能を正常に機能させることはできない。これに対し、特許文献3では、基本ソフトウェアに障害が発生しても監視機能を継続して発揮させることは可能であるかもしれない。しかしながら、機器のハードウェアに障害が発生すると、監視機能を正常に機能させることはできなくなる。 Such problems can be solved by the techniques described in Patent Documents 2 and 3 monitored at the facility side where the equipment is installed. However, in Patent Document 2, if a failure occurs in basic software such as an OS, the monitoring function cannot function normally. On the other hand, in Patent Document 3, it may be possible to continuously perform the monitoring function even if a failure occurs in the basic software. However, if a failure occurs in the hardware of the device, the monitoring function cannot function normally.
 本発明は、上記課題を解決するために成されたものであり、監視センターに負荷をかけることなく、また監視対象機器のハードウェアに異常が発生した場合でも監視対象の機器を確実に監視できるようにすることを目的とする。 The present invention has been made to solve the above-described problems, and can reliably monitor a monitored device without imposing a load on the monitoring center and even when an abnormality occurs in the hardware of the monitored device. The purpose is to do so.
 本発明に係る中継装置は、監視対象の機器が正常か異常かを判定するための判定ルールを記憶する判定ルール記憶手段と、前記機器の監視情報を取得する取得手段と、前記取得手段により取得された監視情報を前記判定ルール記憶手段に記憶された判定ルールと照合することで前記機器の異常を検出する異常検出手段と、前記異常検出手段により異常が検出された場合、その異常に関する異常情報を、前記機器の監視センターへネットワークを経由して送信する異常情報送信手段と、を有することを特徴とする。 The relay device according to the present invention includes a determination rule storage unit that stores a determination rule for determining whether a device to be monitored is normal or abnormal, an acquisition unit that acquires monitoring information of the device, and an acquisition unit that acquires the determination rule An abnormality detection unit that detects an abnormality of the device by comparing the monitored information with the determination rule stored in the determination rule storage unit, and when abnormality is detected by the abnormality detection unit, abnormality information relating to the abnormality Is transmitted to the monitoring center of the device via a network.
 また、前記判定ルール記憶手段に記憶されている判定ルールを、外部から取得した判定ルールで更新する更新手段を有することを特徴とする。 Further, the present invention is characterized in that there is an update means for updating the determination rule stored in the determination rule storage means with the determination rule acquired from the outside.
 また、前記更新手段は、前記判定ルール記憶手段に記憶されている判定ルールを、他の施設に設置されている中継装置から取得した判定ルールで更新することを特徴とする。 Further, the updating means updates the determination rule stored in the determination rule storage means with a determination rule acquired from a relay device installed in another facility.
 また、判定ルールを共有する他の施設それぞれに設置されている中継装置の識別情報を記憶する中継装置情報記憶手段を有し、前記更新手段は、前記判定ルール記憶手段に記憶されている判定ルールを、前記中継装置情報記憶手段に識別情報が記憶されている中継装置から取得した判定ルールで更新することを特徴とする。 In addition, a relay device information storage unit that stores identification information of a relay device installed in each of the other facilities that share the determination rule, the update unit stores the determination rule stored in the determination rule storage unit Is updated with the determination rule acquired from the relay device whose identification information is stored in the relay device information storage means.
 また、前記取得手段により取得された監視情報に基づき当該監視情報が生成されたときの前記機器の状態を推定する推定手段を有し、前記判定ルール記憶手段には、前記機器の状態毎に設定された判定ルールが記憶されており、前記異常検出手段は、前記推定手段により推定された前記機器の状態に対応した判定ルールを用いて異常を検出することを特徴とする。 Further, the apparatus has an estimation unit for estimating the state of the device when the monitoring information is generated based on the monitoring information acquired by the acquisition unit, and the determination rule storage unit is set for each state of the device. The abnormality detection means detects the abnormality using the determination rule corresponding to the state of the device estimated by the estimation means.
 本発明に係るプログラムは、監視対象の機器が正常か異常かを判定するための判定ルールを記憶する判定ルール記憶手段にアクセス可能なコンピュータを、前記機器の監視情報を取得する取得手段、前記取得手段により取得された監視情報を前記判定ルール記憶手段に記憶された判定ルールと照合することで前記機器の異常を検出する異常検出手段、前記異常検出手段により異常が検出された場合、その異常に関する異常情報を、前記機器の監視センターへネットワークを経由して送信する異常情報送信手段、として機能させる。 The program according to the present invention provides a computer accessible to a determination rule storage unit that stores a determination rule for determining whether a device to be monitored is normal or abnormal, an acquisition unit that acquires monitoring information of the device, and the acquisition An abnormality detection means for detecting an abnormality of the device by comparing the monitoring information acquired by the means with a determination rule stored in the determination rule storage means, and if an abnormality is detected by the abnormality detection means, The abnormality information is transmitted to the monitoring center of the device via the network as abnormality information transmitting means.
 本発明によれば、監視センターに負荷をかけることなく、また監視対象機器のハードウェアに異常が発生した場合でも監視対象の機器を確実に監視することができる。 According to the present invention, it is possible to reliably monitor a monitoring target device without imposing a load on the monitoring center and even when an abnormality occurs in the hardware of the monitoring target device.
 また、記憶している判定ルールを外部から更新することができる。 Also, the stored judgment rules can be updated from the outside.
 また、判定ルールを共有する施設間で判定ルールを同一内容に設定することができる。 Also, it is possible to set the same judgment rule between facilities sharing the judgment rule.
 また、推定した機器の状態に応じた判定ルールを用いることによって機器の異常の検出精度を向上させることができる。 Moreover, the detection accuracy of the abnormality of the device can be improved by using the determination rule according to the estimated device state.
 また、監視情報から機器の異常であると即座に判断できない場合に限って監視情報を監視センターへ送信し、機器が異常かどうかの判断を委ねるようにしたので、機器の異常であると即座に判断できないときに中継装置にかかる負荷の増大を回避することができる。 In addition, the monitoring information is sent to the monitoring center only when it cannot be immediately determined from the monitoring information that the device is abnormal. It is possible to avoid an increase in load on the relay device when it cannot be determined.
実施の形態1におけるゲートウェイ装置を含む監視システムの全体構成の一例を示した図である。It is the figure which showed an example of the whole structure of the monitoring system containing the gateway apparatus in Embodiment 1. FIG. 実施の形態1におけるゲートウェイ装置のハードウェア構成図である。2 is a hardware configuration diagram of a gateway device according to Embodiment 1. FIG. 実施の形態1におけるゲートウェイ装置のブロック構成図である。2 is a block configuration diagram of a gateway device in Embodiment 1. FIG. 実施の形態1におけるゲートウェイ装置が実施する監視処理を示したフローチャートである。4 is a flowchart illustrating a monitoring process performed by the gateway device in the first embodiment. 実施の形態2におけるゲートウェイ装置のブロック構成図である。FIG. 6 is a block configuration diagram of a gateway device in a second embodiment. 実施の形態3におけるゲートウェイ装置のブロック構成図である。FIG. 10 is a block configuration diagram of a gateway device in a third embodiment. 実施の形態4におけるゲートウェイ装置のブロック構成図である。FIG. 10 is a block configuration diagram of a gateway device in a fourth embodiment. 実施の形態4におけるゲートウェイ装置が実施する監視処理を示したフローチャートである。10 is a flowchart illustrating a monitoring process performed by the gateway device in the fourth embodiment. 実施の形態5におけるゲートウェイ装置が実施する監視処理を示したフローチャートである。10 is a flowchart illustrating a monitoring process performed by the gateway device in the fifth embodiment.
 以下、図面に基づいて、本発明の好適な実施の形態について説明する。 Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings.
実施の形態1.
 図1は、本実施の形態におけるゲートウェイ装置を含む監視システムの全体構成の一例を示した図である。本実施の形態における監視システムは、ゲートウェイ装置10が持つ機能に特徴を有している。図1には、監視センター1に設置された監視サーバ2と、ビル3に設置された機器4、設備7及びゲートウェイ装置10と、が示されている。監視サーバ2とゲートウェイ装置10は、インターネット等の外部のネットワーク5により接続される。また、ゲートウェイ装置10と機器4は、LAN等のビルの内部に構築されたネットワーク6により接続される。機器4は、電気設備等の1又は複数の設備7を接続し、測定値、設定値等の信号データやオン/オフ等の制御データ、あるいは警報データ等を設備7から収集し蓄積する管理装置やコントローラ等により実現される。
Embodiment 1 FIG.
FIG. 1 is a diagram illustrating an example of the overall configuration of a monitoring system including a gateway device according to the present embodiment. The monitoring system in the present embodiment is characterized by the function of the gateway device 10. In FIG. 1, a monitoring server 2 installed in the monitoring center 1, a device 4, a facility 7, and a gateway device 10 installed in a building 3 are shown. The monitoring server 2 and the gateway device 10 are connected by an external network 5 such as the Internet. The gateway device 10 and the device 4 are connected by a network 6 built inside a building such as a LAN. The equipment 4 connects one or a plurality of equipment 7 such as electrical equipment, and collects and accumulates signal data such as measured values and set values, control data such as on / off, or alarm data from the equipment 7 and accumulates them. Or a controller.
 監視センター1は、監視サーバ2を用いて、ビル3に設置された設備7の保守管理等のために機器4からデータを取得する。なお、監視センター1は、1又は複数のビル3に設置された監視対象の機器4を監視するが、監視内容は各ビル3とも共通でよいので便宜的に1つのビル3のみ図示した。また、ネットワーク6には、複数の機器4が接続されているかもしれないが、各機器4とも同じように監視すればよいので便宜的に1台のみ図示した。 The monitoring center 1 uses the monitoring server 2 to acquire data from the device 4 for maintenance management of the equipment 7 installed in the building 3. Although the monitoring center 1 monitors the devices 4 to be monitored installed in one or a plurality of buildings 3, only one building 3 is shown for convenience because the monitoring contents may be common to each building 3. Also, although a plurality of devices 4 may be connected to the network 6, only one device is shown for convenience because each device 4 may be monitored in the same manner.
 図2は、本実施の形態におけるゲートウェイ装置10のハードウェア構成図である。本実施の形態におけるゲートウェイ装置10は、コンピュータを搭載し、従前から存在する汎用的なハードウェア構成で実現できる。すなわち、ゲートウェイ装置10は、図2に示したようにCPU31、ROM32、RAM33、ハードディスクドライブ(HDD)34、通信手段として設けられ、外部ネットワーク接続用の外部ネットワークインタフェース(IF)35及び内部ネットワーク接続用の内部ネットワークインタフェース(IF)36を内部バス37に接続して構成される。なお、図示していないが、環境設定等のためにコンピュータを接続可能なインタフェースを設けてもよい。 FIG. 2 is a hardware configuration diagram of the gateway device 10 according to the present embodiment. The gateway device 10 according to the present embodiment is equipped with a computer and can be realized by a general-purpose hardware configuration that has existed in the past. That is, as shown in FIG. 2, the gateway device 10 is provided as a CPU 31, ROM 32, RAM 33, hard disk drive (HDD) 34, communication means, an external network interface (IF) 35 for external network connection, and an internal network connection. The internal network interface (IF) 36 is connected to an internal bus 37. Although not shown, an interface to which a computer can be connected may be provided for environment setting or the like.
 図3は、本実施の形態におけるゲートウェイ装置10のブロック構成図である。なお、本実施の形態において説明に用いない構成要素に関しては図から省略している。本実施の形態におけるゲートウェイ装置10は、下位通信部11、監視情報取得部12、異常検出部13、異常通知部14、上位通信部15、監視情報記憶部21及び判定ルール記憶部22を有している。下位通信部11は、内部のネットワーク6を介して機器4との間でデータ通信を行う。上位通信部15は、外部のネットワーク5を介して監視サーバ2との間でデータ通信を行う。監視情報取得部12は、機器4の監視情報を、下位通信部11を介して取得すると、監視情報記憶部21に格納する。異常検出部13は、取得手段により取得され監視情報取得部12に格納された監視情報を判定ルール記憶部22に記憶された判定ルールと照合することで機器4の異常を検出する。異常通知部14は、異常検出部13により異常が検出された場合、その異常に関する異常情報を監視サーバ2へネットワーク5を経由して送信することで機器4の異常を通知する。 FIG. 3 is a block configuration diagram of the gateway device 10 according to the present embodiment. Note that components not used in the description in the present embodiment are omitted from the drawings. The gateway device 10 according to the present embodiment includes a lower communication unit 11, a monitoring information acquisition unit 12, an abnormality detection unit 13, an abnormality notification unit 14, an upper communication unit 15, a monitoring information storage unit 21, and a determination rule storage unit 22. ing. The lower communication unit 11 performs data communication with the device 4 via the internal network 6. The upper communication unit 15 performs data communication with the monitoring server 2 via the external network 5. When the monitoring information acquisition unit 12 acquires the monitoring information of the device 4 via the lower communication unit 11, the monitoring information acquisition unit 12 stores the monitoring information in the monitoring information storage unit 21. The abnormality detection unit 13 detects the abnormality of the device 4 by collating the monitoring information acquired by the acquisition unit and stored in the monitoring information acquisition unit 12 with the determination rule stored in the determination rule storage unit 22. When an abnormality is detected by the abnormality detection unit 13, the abnormality notification unit 14 notifies the abnormality of the device 4 by transmitting abnormality information regarding the abnormality to the monitoring server 2 via the network 5.
 監視情報記憶部21には、参照することで機器4の異常を検出しうる情報が監視情報として保存される。本実施の形態では、監視情報として接続情報、リソース情報、ログ情報及びハードウェア情報を取り扱う。 In the monitoring information storage unit 21, information that can detect an abnormality of the device 4 by reference is stored as monitoring information. In this embodiment, connection information, resource information, log information, and hardware information are handled as monitoring information.
 接続情報には、機器4との接続可否を示すフラグ情報、接続要求に対する応答情報及び応答時間等が含まれる。リソース情報には、機器4のCPU、メモリ、ディスクの使用率等が含まれる。ログ情報には、監視サーバ2へのアクセスログ、機器4のHDD等のデバイスログ、機器4で動作するアプリケーションのログ等が含まれる。ハードウェア情報には、機器4のHDDのSMART(Self-Monitoring,Analysis and Reporting Technology)、マザーボードのセンサ値等が含まれる。もちろん、監視情報の種類としてこれに限定する必要はない。例えば、計測データ値や値の遷移等を分析することで異常を検出できる場合もあるので、計測データそのものを監視情報として取り扱うようにしてもよい。 The connection information includes flag information indicating whether or not the device 4 can be connected, response information to the connection request, response time, and the like. The resource information includes the usage rate of the CPU, memory, and disk of the device 4. The log information includes an access log to the monitoring server 2, a device log such as an HDD of the device 4, and a log of an application operating on the device 4. The hardware information includes a SMART (Self-Monitoring, Analysis and Reporting Technology) of the HDD of the device 4, a sensor value of the motherboard, and the like. Of course, the type of monitoring information need not be limited to this. For example, an abnormality can be detected by analyzing measurement data values, value transitions, etc., so the measurement data itself may be handled as monitoring information.
 判定ルール記憶部22には、機器4が正常か異常かを判定するための基準となる閾値や範囲等により表される指標が判定ルールとして予め設定登録される。 In the determination rule storage unit 22, an index represented by a threshold value, a range, or the like serving as a reference for determining whether the device 4 is normal or abnormal is preset and registered as a determination rule.
 ゲートウェイ装置10における各構成要素11~15は、ゲートウェイ装置10に搭載されたコンピュータと、コンピュータに搭載されたCPU31で動作するプログラムとの協調動作により実現される。また、各記憶部21~22は、ゲートウェイ装置10に搭載されたHDD34にて実現される。あるいは、RAM33又は外部にある記憶手段をネットワーク経由で利用してもよい。 Each component 11 to 15 in the gateway device 10 is realized by a cooperative operation of a computer installed in the gateway device 10 and a program operating on the CPU 31 installed in the computer. The storage units 21 to 22 are realized by the HDD 34 mounted on the gateway device 10. Alternatively, the RAM 33 or an external storage means may be used via a network.
 また、本実施の形態で用いるプログラムは、通信手段により提供することはもちろん、CD-ROMやUSBメモリ等のコンピュータ読み取り可能な記録媒体に格納して提供することも可能である。通信手段や記録媒体から提供されたプログラムはコンピュータにインストールされ、コンピュータのCPUがプログラムを順次実行することで各種処理が実現される。 Further, the program used in this embodiment can be provided not only by communication means but also by storing it in a computer-readable recording medium such as a CD-ROM or USB memory. The program provided from the communication means or the recording medium is installed in the computer, and various processes are realized by the CPU of the computer sequentially executing the program.
 次に、本実施の形態におけるゲートウェイ装置10が実施する監視処理について図4に示したフローチャートを用いて説明する。ゲートウェイ装置10では、監視処理用のアプリケーションをRAM33に常駐させており、機器4の監視を常時行っている。 Next, the monitoring process performed by the gateway device 10 according to the present embodiment will be described with reference to the flowchart shown in FIG. In the gateway device 10, an application for monitoring processing is resident in the RAM 33, and the device 4 is constantly monitored.
 監視情報取得部12は、機器4の監視情報を取得すると、これを監視情報記憶部21に保存する(ステップ101)。監視情報は、基本的には定期的に収集されるが、異常発生等のイベントが発生した時点で不定期に収集される場合もある。前述した接続情報は、接続要求を機器4に、例えば1時間毎に送ることにすると、1時間に1回の周期で収集される。リソース情報は、機器4から数秒という短周期で収集することができるが、例えば、1時間毎に最大値、最小値、平均値等を求めて監視情報として監視情報記憶部21に保存するようにしてもよい。ログ情報及びハードウェア情報は、例えば1日に1回収集するようにしてもよい。 When the monitoring information acquisition unit 12 acquires the monitoring information of the device 4, the monitoring information acquisition unit 12 stores it in the monitoring information storage unit 21 (step 101). The monitoring information is basically collected regularly, but may be collected irregularly when an event such as an abnormality occurs. The connection information described above is collected at a cycle of once per hour if a connection request is sent to the device 4 every hour, for example. The resource information can be collected from the device 4 in a short cycle of several seconds. For example, the maximum value, the minimum value, the average value, etc. are obtained every hour and stored in the monitoring information storage unit 21 as monitoring information. May be. Log information and hardware information may be collected once a day, for example.
 以上のようにして、監視情報が監視情報記憶部21に保存されると、異常検出部13は、監視情報を判定ルールと照合することで、機器4に異常が発生しているかどうかを判定する(ステップ102)。接続情報の場合、接続が正常にできない場合、応答コードが異常を示すコードデータの場合、応答時間が所定の閾値以上に長い場合は、異常と判定する。リソース情報及びハードウェア情報は、判定ルールに予め設定された閾値との比較、あるいは正常と推測される範囲と比較することで正常又は異常と判定する。ログ情報は、ログの内容を参照することで異常の発生の有無を検出できる。 When the monitoring information is stored in the monitoring information storage unit 21 as described above, the abnormality detection unit 13 determines whether or not an abnormality has occurred in the device 4 by comparing the monitoring information with the determination rule. (Step 102). In the case of connection information, if the connection cannot be made normally, if the response code is code data indicating abnormality, or if the response time is longer than a predetermined threshold, it is determined as abnormal. The resource information and the hardware information are determined to be normal or abnormal by comparing with a threshold set in advance in the determination rule or by comparing with a range estimated to be normal. The log information can detect whether or not an abnormality has occurred by referring to the contents of the log.
 監視情報を判定ルールと照合した結果、機器4の異常が検出されなかった場合(ステップ103でN)、異常検出部13は、ステップ101に戻り、以降の監視情報の取得に戻る。このとき、正常、異常の判定に用いた監視情報を監視情報記憶部21から削除してもよい。一方、異常が検出された場合(ステップ103でY)、異常検出部13は、検出した異常に関する情報、具体的には、異常が検出された機器4の識別情報、異常発生日時、異常の内容等、異常の分析に必要な情報を含む異常検出情報を生成する(ステップ104)。そして、異常通知部14は、異常検出部13により生成された異常検出情報を上位通信部15に送信させることで、異常の検出を監視サーバ2に通知する(ステップ105)。 When the abnormality of the device 4 is not detected as a result of collating the monitoring information with the determination rule (N in Step 103), the abnormality detecting unit 13 returns to Step 101 and returns to the subsequent acquisition of the monitoring information. At this time, the monitoring information used for normality / abnormality determination may be deleted from the monitoring information storage unit 21. On the other hand, when an abnormality is detected (Y in step 103), the abnormality detection unit 13 includes information on the detected abnormality, specifically, identification information of the device 4 in which the abnormality is detected, an abnormality occurrence date and time, and the content of the abnormality Thus, abnormality detection information including information necessary for abnormality analysis is generated (step 104). And the abnormality notification part 14 notifies the detection of abnormality to the monitoring server 2 by transmitting the abnormality detection information produced | generated by the abnormality detection part 13 to the high-order communication part 15 (step 105).
 本実施の形態によれば、機器4のハードウェアに異常が発生した場合でも、ゲートウェイ装置10がその異常を検出することができるので、その発生した異常を監視サーバ2に知らせることができる。また、異常の検出に要する処理を監視サーバ2に一切させないので、監視サーバ2における処理負荷を大幅に軽減することができる。更に、監視サーバ2に通知する情報は、検出した異常に関する情報だけなので、ネットワーク通信量も削減することができる。 According to the present embodiment, even when an abnormality occurs in the hardware of the device 4, the gateway device 10 can detect the abnormality, so that the abnormality that has occurred can be notified to the monitoring server 2. In addition, since the monitoring server 2 is not allowed to perform any processing required for detecting an abnormality, the processing load on the monitoring server 2 can be greatly reduced. Furthermore, since the information notified to the monitoring server 2 is only information related to the detected abnormality, the network traffic can be reduced.
 なお、本実施の形態では、監視情報を機器4から直接取得するようにしたが、例えば、別途用意した監視情報記憶手段から間接的に取得するようにしてもよい。 In the present embodiment, the monitoring information is directly acquired from the device 4. However, for example, it may be indirectly acquired from a separately prepared monitoring information storage unit.
実施の形態2.
 図5は、本実施の形態におけるゲートウェイ装置10のブロック構成図である。なお、実施の形態1と同じ構成要素には同じ符号を付け説明を省略する。本実施の形態におけるゲートウェイ装置10は、実施の形態1に示した構成に、判定ルール更新部16を設けた構成を有している。判定ルール更新部16は、判定ルール記憶部22に記憶されている判定ルールを、上位通信部15を介して外部から取得した判定ルールで更新する更新手段として設けられている。ここでいう「外部」というのは、ビル3の外部であり、ネットワーク5を介して通信可能な装置を意味している。本実施の形態では、監視サーバ2を想定している。
Embodiment 2. FIG.
FIG. 5 is a block configuration diagram of the gateway device 10 according to the present embodiment. In addition, the same code | symbol is attached | subjected to the same component as Embodiment 1, and description is abbreviate | omitted. The gateway device 10 according to the present embodiment has a configuration in which a determination rule update unit 16 is provided in the configuration described in the first embodiment. The determination rule update unit 16 is provided as an update unit that updates the determination rule stored in the determination rule storage unit 22 with the determination rule acquired from the outside via the host communication unit 15. Here, “external” means a device that is outside the building 3 and can communicate via the network 5. In this embodiment, the monitoring server 2 is assumed.
 すなわち、上位通信部15が監視サーバ2から送信されてきた判定ルールを受信すると、判定ルール更新部16は、その受信された判定ルールを上位通信部15から取得し、その取得した判定ルールで判定ルール記憶部22に記憶されている判定ルールを更新する。判定ルールの送信元は、判定ルールに付加されている送信元の識別情報によって判断してもよい。 That is, when the higher-level communication unit 15 receives the determination rule transmitted from the monitoring server 2, the determination rule update unit 16 acquires the received determination rule from the higher-level communication unit 15, and determines with the acquired determination rule. The determination rule stored in the rule storage unit 22 is updated. The transmission source of the determination rule may be determined based on the identification information of the transmission source added to the determination rule.
 本実施の形態によれば、ゲートウェイ装置10に設定されている判定ルールを監視サーバ2から更新することができる。つまり、機器4の保守員等は、ビル3へ出動することなく監視センター1から判定ルールを更新することができる。 According to the present embodiment, the determination rule set in the gateway device 10 can be updated from the monitoring server 2. That is, the maintenance staff of the device 4 can update the determination rule from the monitoring center 1 without going to the building 3.
実施の形態3.
 図6は、本実施の形態におけるゲートウェイ装置10のブロック構成図である。なお、実施の形態2と同じ構成要素には同じ符号を付け説明を省略する。本実施の形態におけるゲートウェイ装置10は、実施の形態2に示した構成に、ゲートウェイ装置(GW)情報記憶部23を設けた構成を有している。ゲートウェイ装置情報記憶部23は、判定ルールを共有する他のビルそれぞれに設置されているゲートウェイ装置の識別情報を記憶する中継装置情報記憶手段である。上記実施の形態2では、「外部」として監視サーバ2を想定したのに対し、本実施の形態では、他のビルに設置されているゲートウェイ装置を想定している。
Embodiment 3 FIG.
FIG. 6 is a block configuration diagram of the gateway device 10 in the present embodiment. In addition, the same code | symbol is attached | subjected to the same component as Embodiment 2, and description is abbreviate | omitted. The gateway device 10 in the present embodiment has a configuration in which a gateway device (GW) information storage unit 23 is provided in the configuration shown in the second embodiment. The gateway device information storage unit 23 is a relay device information storage unit that stores identification information of a gateway device installed in each of the other buildings sharing the determination rule. In the second embodiment, the monitoring server 2 is assumed as “external”, but in the present embodiment, a gateway device installed in another building is assumed.
 本実施の形態における動作は、基本的には実施の形態2と同じでよいが、判定ルールの送信元が監視サーバ2ではなく他のビルに設置されたゲートウェイ装置である点が実施の形態2と異なる。 The operation in the present embodiment may be basically the same as that in the second embodiment, but the second embodiment is that the determination rule transmission source is not the monitoring server 2 but a gateway device installed in another building. And different.
 例えば、上記実施の形態2のように監視サーバ2から送信されてきた判定ルールで自機の判定ルールを更新したゲートウェイ装置は、ブロードキャスティングにより、あるいは、自機のゲートウェイ装置情報記憶部23に識別情報が設定登録されているゲートウェイ装置に対して、更新した判定ルールを送信する。 For example, the gateway device that has updated its own determination rule with the determination rule transmitted from the monitoring server 2 as in the second embodiment is identified by broadcasting or in the gateway device information storage unit 23 of its own device. The updated determination rule is transmitted to the gateway device for which information is set and registered.
 外部から送信されてきた判定ルールを取得すると、判定ルール更新部16は、その判定ルールの送信元の識別情報を、ゲートウェイ装置情報記憶部23に記憶されている識別情報と照合する。そして、一致する識別情報がゲートウェイ装置情報記憶部23に登録されていれば、判定ルール更新部16は、他のゲートウェイ装置から送信されてきた判定ルールであると判断して、その取得した判定ルールで判定ルール記憶部22に記憶されている判定ルールを更新する。また、送信元の識別情報が監視サーバ2の識別情報の場合は、実施の形態2と同様に処理する。なお、識別情報は、IPアドレスや装置名称等、各ゲートウェイ装置を識別できる情報であれば特に限定する必要はない。 When the determination rule transmitted from the outside is acquired, the determination rule update unit 16 collates the identification information of the transmission source of the determination rule with the identification information stored in the gateway device information storage unit 23. If the matching identification information is registered in the gateway device information storage unit 23, the determination rule update unit 16 determines that the determination rule is transmitted from another gateway device, and the acquired determination rule. The judgment rule stored in the judgment rule storage unit 22 is updated. Further, when the identification information of the transmission source is the identification information of the monitoring server 2, the same processing as in the second embodiment is performed. The identification information is not particularly limited as long as it is information that can identify each gateway device, such as an IP address and a device name.
 ところで、本実施の形態において「判定ルールを共有する他のビル」というのは、判定ルールを同一の内容に設定したいゲートウェイ装置が設置されたビルのことをいう。例えば、ビル3から一定エリア内に存在するビル、あるいは所有者又は管理者をビル3と同一とするビル等である。一定エリアとして支社(あるいは一保守員でもよい)の管轄地域内に設置されたゲートウェイ装置の識別情報を設定しておけば、監視センター1は、当該エリア内の1箇所のゲートウェイ装置10の判定ルールのみを更新するだけで、当該エリア内における全てのゲートウェイ装置10の判定ルールを同じ内容とすることができる。また、同一所有者又は管理者のビル3に設置されたゲートウェイ装置の識別情報を設定しておけば、同一所有者又は管理者のビル3に関しては、同じ判定ルールを適用することが可能となる。 By the way, in the present embodiment, “another building sharing a judgment rule” means a building in which a gateway device for which the judgment rule is set to the same content is installed. For example, a building that exists within a certain area from the building 3 or a building whose owner or manager is the same as the building 3. If the identification information of the gateway device installed in the jurisdiction of the branch office (or even one maintenance staff) is set as a certain area, the monitoring center 1 determines the determination rule for one gateway device 10 in the area. It is possible to make the determination rule of all the gateway devices 10 in the area have the same content only by updating only. If the identification information of the gateway devices installed in the same owner or administrator building 3 is set, the same determination rule can be applied to the same owner or administrator building 3. .
 本実施の形態では、判定ルールを共有する他のビルそれぞれに設置されているゲートウェイ装置の識別情報のみをゲートウェイ装置情報記憶部23に予め設定登録するようにした。ただ、ゲートウェイ装置情報記憶部23に登録しておくデータ構成としてはこれに限る必要はなく、例えば、監視センター1にて監視対象とするエリア内に存在するゲートウェイ装置の識別情報の全てにグループ識別情報を付加してゲートウェイ装置情報記憶部23に登録しておいてもよい。そして、判定ルール更新部16は、自機と同じグループに属するゲートウェイ装置から送信された判定ルールを取得した場合に、判定ルール記憶部22に記憶されている判定ルールを更新するようにしてもよい。このように、グループ単位に判定ルールを共通化するよう制御することも可能である。 In the present embodiment, only the identification information of the gateway device installed in each of the other buildings sharing the determination rule is set and registered in advance in the gateway device information storage unit 23. However, the data configuration to be registered in the gateway device information storage unit 23 is not limited to this. For example, group identification is included in all identification information of gateway devices existing in the monitoring target area in the monitoring center 1. Information may be added and registered in the gateway device information storage unit 23. And the determination rule update part 16 may update the determination rule memorize | stored in the determination rule memory | storage part 22, when the determination rule transmitted from the gateway apparatus which belongs to the same group as an own machine is acquired. . In this way, it is possible to control so that the determination rule is shared in units of groups.
実施の形態4.
 図7は、本実施の形態におけるゲートウェイ装置10のブロック構成図である。なお、実施の形態1と同じ構成要素には同じ符号を付け説明を省略する。本実施の形態におけるゲートウェイ装置10は、実施の形態1に示した構成に、処理推定部17を設けた構成を有している。処理推定部17は、監視情報記憶部21に蓄積されている監視情報に基づき当該監視情報が生成されたときの機器4の状態を推定する推定手段として設けられている。また、本実施の形態における判定ルール記憶部22には、機器4の状態毎に設定された判定ルールが記憶されている。
Embodiment 4 FIG.
FIG. 7 is a block configuration diagram of the gateway device 10 in the present embodiment. In addition, the same code | symbol is attached | subjected to the same component as Embodiment 1, and description is abbreviate | omitted. The gateway device 10 in the present embodiment has a configuration in which a processing estimation unit 17 is provided in the configuration shown in the first embodiment. The processing estimation unit 17 is provided as an estimation unit that estimates the state of the device 4 when the monitoring information is generated based on the monitoring information accumulated in the monitoring information storage unit 21. Further, the determination rule storage unit 22 in the present embodiment stores determination rules set for each state of the device 4.
 上記実施の形態1において説明したように、判定ルールには機器4が異常かどうかを判定するための閾値等が設定されており、異常検出部13は、監視情報を判定ルールと照合することで、機器4に異常が発生しているかどうかを判定する。ただ、実施の形態1では、機器4の状態に限らず判定ルールを一律的に設定していた。本実施の形態において監視対象とする機器4は、日報処理の生成、外部機器との通信等様々な処理を実行する。つまり、CPUを通常より高い使用率で動作する必要があったり、ディスクアクセスを通常より多く行ったりする場合がある。一方、実行する処理によっては、ディスクへの書込みを一切行わない場合もある。このように、機器4が実行する処理によって異なってくる機器4の状態(動作状況)に対し、共通した判定ルールを適用すると異常の検出精度が低くなるおそれが生じてくる。 As described in the first embodiment, a threshold value for determining whether or not the device 4 is abnormal is set in the determination rule, and the abnormality detection unit 13 collates the monitoring information with the determination rule. Then, it is determined whether or not an abnormality has occurred in the device 4. However, in the first embodiment, not only the state of the device 4 but also the determination rule is uniformly set. The device 4 to be monitored in the present embodiment executes various processes such as generation of daily report processing and communication with external devices. That is, there is a case where the CPU needs to operate at a higher usage rate than usual or the disk access is performed more than usual. On the other hand, depending on the processing to be executed, writing to the disk may not be performed at all. As described above, when a common determination rule is applied to the state (operation state) of the device 4 that varies depending on the processing executed by the device 4, there is a possibility that the abnormality detection accuracy is lowered.
 そこで、本実施の形態においては、機器4の状態毎に判定ルールを設定すると共に、処理推定部17を設けて機器4の状態を推定できるようにした。以下、本実施の形態における監視処理について図8に示したフローチャートを用いて説明する。なお、実施の形態1における図4に示したのと同じ処理には同じステップ番号を付け、説明を適宜省略する。 Therefore, in the present embodiment, a determination rule is set for each state of the device 4 and a processing estimation unit 17 is provided so that the state of the device 4 can be estimated. Hereinafter, the monitoring process in the present embodiment will be described with reference to the flowchart shown in FIG. Note that the same processing as that shown in FIG. 4 in Embodiment 1 is assigned the same step number, and description thereof will be omitted as appropriate.
 本実施の形態における監視処理は、基本的には、実施の形態1と同様の処理を実行すればよい。ただ、本実施の形態では、処理推定部17は、監視情報記憶部21に記憶された監視情報を解析することで機器4がどのような状態、すなわちどのような処理を実行しているのかを推定する(ステップ401)。処理推定部17が機器4の状態を推定すると、異常検出部13は、その推定された機器4の状態に対応した判定ルールを判定ルール記憶部22から読み出し、監視情報をその読み出した判定ルールと照合することで(ステップ102)、機器4に異常が発生しているのかどうかを判定する(ステップ103)。 The monitoring process in the present embodiment may basically be executed in the same manner as in the first embodiment. However, in the present embodiment, the process estimation unit 17 analyzes the monitoring information stored in the monitoring information storage unit 21 to determine what state the device 4 is performing, that is, what processing is being performed. Estimate (step 401). When the process estimation unit 17 estimates the state of the device 4, the abnormality detection unit 13 reads the determination rule corresponding to the estimated state of the device 4 from the determination rule storage unit 22, and the monitoring rule that has read the monitoring information By checking (step 102), it is determined whether or not an abnormality has occurred in the device 4 (step 103).
 機器4の状態を示すデータ自体は機器4から送られてこない。そこで、本実施の形態においては、以上説明したように機器4から送られてくる監視情報を解析することによって機器4の状態を推定し、その推定した機器4の状態に適合した判定ルールを用いて異常を検出する。これにより、異常の検出精度を向上させることができる。 The data itself indicating the state of the device 4 is not sent from the device 4. Therefore, in the present embodiment, as described above, the state of the device 4 is estimated by analyzing the monitoring information sent from the device 4, and a determination rule that matches the estimated state of the device 4 is used. To detect abnormalities. Thereby, abnormality detection accuracy can be improved.
 なお、本実施の形態では、機器4が実行している処理の種類を機器4の状態とみなして説明したが、例えば、時間帯や時節等時間的な要素によっても機器4の状態は変化する場合は少なくないので、このような時間等の要素を考慮して各種判定ルールを用意するようにしてもよい。 In the present embodiment, the type of processing executed by the device 4 has been described as the state of the device 4. However, the state of the device 4 changes depending on time factors such as time zone and time of day. In many cases, various determination rules may be prepared in consideration of such factors as time.
実施の形態5.
 上記実施の形態1において説明したように、監視情報記憶部21に記憶する監視情報は、機器4の異常の検出のために用いられる。換言すると、機器4が正常か否かの判定ができるまでは削除できないため、監視情報を時系列的に保持しておく必要がある。監視情報を長時間保持しておくということ、及び長時間の監視情報に基づいて機器4の正常か異常かの判断を行うということは、ゲートウェイ装置10にそれだけ負荷がかかるということである。
Embodiment 5 FIG.
As described in the first embodiment, the monitoring information stored in the monitoring information storage unit 21 is used for detecting an abnormality of the device 4. In other words, since it cannot be deleted until it can be determined whether or not the device 4 is normal, it is necessary to hold the monitoring information in time series. Holding the monitoring information for a long time and determining whether the device 4 is normal or abnormal based on the long-time monitoring information means that the gateway device 10 is loaded accordingly.
 そこで、本実施の形態においては、判定ルール記憶部22に、「正常」、「異常」の判定のためのルール(閾値等)に加えて、「保留」と判定するための判定ルールを設定し、保留に該当する場合には、監視情報を監視サーバ2へ送信して異常の検出処理を監視サーバ2へ委ねることにした。本実施の形態におけるゲートウェイ装置10のハードウェア構成及び機能ブロック構成は、実施の形態1と同じでよい。 Therefore, in the present embodiment, in addition to rules for determining “normal” and “abnormal” (threshold value, etc.), a determination rule for determining “hold” is set in the determination rule storage unit 22. In the case of a hold, the monitoring information is transmitted to the monitoring server 2 and the abnormality detection process is left to the monitoring server 2. The hardware configuration and functional block configuration of the gateway device 10 in the present embodiment may be the same as those in the first embodiment.
 以下、本実施の形態における監視処理について図9に示したフローチャートを用いて説明する。なお、実施の形態1における図4に示したのと同じ処理には同じステップ番号を付け、説明を適宜省略する。 Hereinafter, the monitoring process in the present embodiment will be described with reference to the flowchart shown in FIG. Note that the same processing as that shown in FIG. 4 in Embodiment 1 is assigned the same step number, and description thereof will be omitted as appropriate.
 本実施の形態における監視処理は、基本的には、実施の形態1と同様の処理を実行すればよい。ただ、本実施の形態では、監視情報を判定ルールと照合することで異常が検出されず(ステップ103でN)、監視情報から機器4が正常か異常かを即座に判定できない、いわゆる保留に該当する場合(ステップ106でY)、異常検出部13は、監視情報を監視情報記憶部21から読み出して(ステップ107)、上位通信部15を介して監視サーバ2へ送信する(ステップ108)。なお、監視サーバ2へ送信した監視情報は、監視情報記憶部21から削除する。 The monitoring process in the present embodiment may basically be executed in the same manner as in the first embodiment. However, in the present embodiment, no abnormality is detected by comparing the monitoring information with the determination rule (N in Step 103), and it is not possible to immediately determine whether the device 4 is normal or abnormal from the monitoring information. When it does (Y in Step 106), the abnormality detection unit 13 reads the monitoring information from the monitoring information storage unit 21 (Step 107) and transmits it to the monitoring server 2 via the upper communication unit 15 (Step 108). Note that the monitoring information transmitted to the monitoring server 2 is deleted from the monitoring information storage unit 21.
 本実施の形態においては、機器4が正常か異常かを即座に判定できない場合、監視情報記憶部21に保存されている監視情報を監視サーバ2へ送信して、機器4が正常か異常かの判断を監視サーバ2に委ねることにした。これにより、監視情報記憶部21に保存される監視情報のデータ量が膨大になること、及び異常の検出に要する処理負荷の増大を回避することができる。 In the present embodiment, when it is impossible to immediately determine whether the device 4 is normal or abnormal, the monitoring information stored in the monitoring information storage unit 21 is transmitted to the monitoring server 2 to determine whether the device 4 is normal or abnormal. The decision is left to the monitoring server 2. Thereby, it is possible to avoid an enormous amount of monitoring information stored in the monitoring information storage unit 21 and an increase in processing load required for detecting an abnormality.
 上記各実施の形態においては、監視情報に基づき機器4を監視し、機器4に発生する異常を検出するための監視処理について説明した。各実施の形態において説明した構成及び処理内容は、適宜組み合わせて実施してもよい。また、本実施の形態では、中継装置としてゲートウェイ装置10を例にして説明したが、外部のネットワーク5とビル3の内部のネットワーク6とを接続して監視サーバ2と機器4との間のデータ通信を中継しうる中継機能を有する中継装置であればゲートウェイ装置10に限定する必要はない。 In the above embodiments, the monitoring process for monitoring the device 4 based on the monitoring information and detecting an abnormality occurring in the device 4 has been described. The configuration and processing content described in each embodiment may be combined as appropriate. In the present embodiment, the gateway apparatus 10 is described as an example of the relay apparatus. However, data between the monitoring server 2 and the device 4 by connecting the external network 5 and the internal network 6 of the building 3 is described. It is not necessary to limit to the gateway device 10 as long as it is a relay device having a relay function capable of relaying communication.
 1 監視センター、2 監視サーバ、3 ビル、4 機器、5,6 ネットワーク、7 設備、10 ゲートウェイ装置、11 下位通信部、12 監視情報取得部、13 異常検出部、14 異常通知部、15 上位通信部、16 判定ルール更新部、17 処理推定部、21 監視情報記憶部、22 判定ルール記憶部、23 ゲートウェイ装置情報記憶部、31 CPU、32 ROM、33 RAM、34 ハードディスクドライブ(HDD)、35 外部ネットワークインタフェース(IF)、36 内部ネットワークインタフェース(IF)、37 内部バス。 1 monitoring center, 2 monitoring server, 3 building, 4 devices, 5, 6 network, 7 equipment, 10 gateway device, 11 lower communication unit, 12 monitoring information acquisition unit, 13 abnormality detection unit, 14 abnormality notification unit, 15 upper communication Unit, 16 determination rule update unit, 17 processing estimation unit, 21 monitoring information storage unit, 22 determination rule storage unit, 23 gateway device information storage unit, 31 CPU, 32 ROM, 33 RAM, 34 hard disk drive (HDD), 35 external Network interface (IF), 36 Internal network interface (IF), 37 Internal bus.

Claims (6)

  1.  監視対象の機器が正常か異常かを判定するための判定ルールを記憶する判定ルール記憶手段と、
     前記機器の監視情報を取得する取得手段と、
     前記取得手段により取得された監視情報を前記判定ルール記憶手段に記憶された判定ルールと照合することで前記機器の異常を検出する異常検出手段と、
     前記異常検出手段により異常が検出された場合、その異常に関する異常情報を、前記機器の監視センターへネットワークを経由して送信する異常情報送信手段と、
     を有することを特徴とする中継装置。
    A determination rule storage means for storing a determination rule for determining whether a device to be monitored is normal or abnormal;
    Obtaining means for obtaining monitoring information of the device;
    An abnormality detection means for detecting an abnormality of the device by collating the monitoring information acquired by the acquisition means with a determination rule stored in the determination rule storage means;
    When an abnormality is detected by the abnormality detection means, abnormality information transmission means for transmitting abnormality information related to the abnormality to the monitoring center of the device via a network;
    A relay apparatus comprising:
  2.  前記判定ルール記憶手段に記憶されている判定ルールを、外部から取得した判定ルールで更新する更新手段を有することを特徴とする請求項1に記載の中継装置。 The relay apparatus according to claim 1, further comprising an updating unit that updates the determination rule stored in the determination rule storage unit with a determination rule acquired from outside.
  3.  前記更新手段は、前記判定ルール記憶手段に記憶されている判定ルールを、他の施設に設置されている中継装置から取得した判定ルールで更新することを特徴とする請求項2に記載の中継装置。 The relay device according to claim 2, wherein the updating unit updates the determination rule stored in the determination rule storage unit with a determination rule acquired from a relay device installed in another facility. .
  4.  判定ルールを共有する他の施設それぞれに設置されている中継装置の識別情報を記憶する中継装置情報記憶手段を有し、
     前記更新手段は、前記判定ルール記憶手段に記憶されている判定ルールを、前記中継装置情報記憶手段に識別情報が記憶されている中継装置から取得した判定ルールで更新することを特徴とする請求項3に記載の中継装置。
    Having relay device information storage means for storing identification information of a relay device installed in each of the other facilities sharing the determination rule;
    The update means updates a determination rule stored in the determination rule storage means with a determination rule acquired from a relay apparatus in which identification information is stored in the relay apparatus information storage means. 3. The relay device according to 3.
  5.  前記取得手段により取得された監視情報に基づき当該監視情報が生成されたときの前記機器の状態を推定する推定手段を有し、
     前記判定ルール記憶手段には、前記機器の状態毎に設定された判定ルールが記憶されており、
     前記異常検出手段は、前記推定手段により推定された前記機器の状態に対応した判定ルールを用いて異常を検出することを特徴とする請求項1に記載の中継装置。
    Having estimation means for estimating the state of the device when the monitoring information is generated based on the monitoring information acquired by the acquisition means;
    In the determination rule storage means, a determination rule set for each state of the device is stored,
    The relay apparatus according to claim 1, wherein the abnormality detection unit detects an abnormality using a determination rule corresponding to the state of the device estimated by the estimation unit.
  6.  監視対象の機器が正常か異常かを判定するための判定ルールを記憶する判定ルール記憶手段にアクセス可能なコンピュータを、
     前記機器の監視情報を取得する取得手段、
     前記取得手段により取得された監視情報を前記判定ルール記憶手段に記憶された判定ルールと照合することで前記機器の異常を検出する異常検出手段、
     前記異常検出手段により異常が検出された場合、その異常に関する異常情報を、前記機器の監視センターへネットワークを経由して送信する異常情報送信手段、
     として機能させるためのプログラム。
    A computer accessible to a determination rule storage means for storing a determination rule for determining whether a device to be monitored is normal or abnormal,
    Acquisition means for acquiring monitoring information of the device;
    An abnormality detection means for detecting an abnormality of the device by collating the monitoring information acquired by the acquisition means with a determination rule stored in the determination rule storage means;
    When an abnormality is detected by the abnormality detection means, abnormality information transmission means for transmitting abnormality information related to the abnormality to the monitoring center of the device via a network,
    Program to function as.
PCT/JP2016/060298 2015-04-03 2016-03-30 Relay device and program WO2016159039A1 (en)

Priority Applications (3)

Application Number Priority Date Filing Date Title
KR1020177027086A KR102048294B1 (en) 2015-04-03 2016-03-30 Relay device and program
DE112016001586.0T DE112016001586T5 (en) 2015-04-03 2016-03-30 Relay device and program
CN201680018963.1A CN107533492B (en) 2015-04-03 2016-03-30 Relay device and program

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2015-076447 2015-04-03
JP2015076447A JP6223380B2 (en) 2015-04-03 2015-04-03 Relay device and program

Publications (1)

Publication Number Publication Date
WO2016159039A1 true WO2016159039A1 (en) 2016-10-06

Family

ID=57007207

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2016/060298 WO2016159039A1 (en) 2015-04-03 2016-03-30 Relay device and program

Country Status (5)

Country Link
JP (1) JP6223380B2 (en)
KR (1) KR102048294B1 (en)
CN (1) CN107533492B (en)
DE (1) DE112016001586T5 (en)
WO (1) WO2016159039A1 (en)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20200340886A1 (en) * 2018-01-15 2020-10-29 Mitsubishi Electric Corporation Failure detection device, monitoring control system, and failure detection method
CN112738151A (en) * 2019-09-17 2021-04-30 三菱动力株式会社 Conveying device
KR102265090B1 (en) * 2019-10-02 2021-06-15 주식회사 유토비즈 A smart factory management system with a management platform for industrial iot and un-iot modoule group using zone-master
JP2021064317A (en) * 2019-10-17 2021-04-22 Necフィールディング株式会社 Apparatus monitoring device, apparatus monitoring method, and apparatus monitoring program

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2008204063A (en) * 2007-02-19 2008-09-04 Ricoh Co Ltd Mediation device and management device
JP2009176203A (en) * 2008-01-28 2009-08-06 Nec Corp Monitoring device, monitoring system, monitoring method, and program
JP2009211658A (en) * 2008-03-06 2009-09-17 Nec Corp Failure detection device, failure detection method and program therefor

Family Cites Families (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2003143181A (en) 2001-11-01 2003-05-16 Matsushita Electric Ind Co Ltd Gateway device and monitoring system
JP2004054357A (en) 2002-07-16 2004-02-19 Matsushita Electric Works Ltd Information transfer method and information transfer system
JP2004107044A (en) * 2002-09-19 2004-04-08 Mitsubishi Electric Corp Elevator remote monitoring system
JP2004272632A (en) * 2003-03-10 2004-09-30 Sony Corp Information processor, information processing method and computer program
JP2005115751A (en) 2003-10-09 2005-04-28 Hitachi Ltd Computer system and method for detecting sign of failure of computer system
JP2006222649A (en) 2005-02-09 2006-08-24 Fujitsu Ten Ltd Gateway device with network monitoring function
JP3942628B1 (en) * 2006-01-05 2007-07-11 株式会社インテリジェントウェイブ Unauthorized operation monitoring program, unauthorized operation monitoring method, and unauthorized operation monitoring system
JP2007226740A (en) * 2006-02-27 2007-09-06 Kyocera Corp Communication system, software updating method, communication device, management server device, and program
KR100840862B1 (en) * 2006-11-14 2008-06-23 가부시키가이샤 인테리젠토 웨이브 Unauthorized connection detection system and unauthorized connection detection method
JP2009026182A (en) * 2007-07-23 2009-02-05 Toshiba Corp Program execution system and execution device
JP4572251B2 (en) 2008-09-29 2010-11-04 株式会社日立製作所 Computer system, computer system failure sign detection method and program
JP5473651B2 (en) * 2010-02-08 2014-04-16 キヤノン株式会社 Management system, monitoring apparatus, and information processing method
JP2011188450A (en) 2010-03-11 2011-09-22 Oki Networks Co Ltd Network monitoring device

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2008204063A (en) * 2007-02-19 2008-09-04 Ricoh Co Ltd Mediation device and management device
JP2009176203A (en) * 2008-01-28 2009-08-06 Nec Corp Monitoring device, monitoring system, monitoring method, and program
JP2009211658A (en) * 2008-03-06 2009-09-17 Nec Corp Failure detection device, failure detection method and program therefor

Also Published As

Publication number Publication date
CN107533492B (en) 2021-02-26
JP2016197309A (en) 2016-11-24
CN107533492A (en) 2018-01-02
DE112016001586T5 (en) 2017-12-28
JP6223380B2 (en) 2017-11-01
KR20170123324A (en) 2017-11-07
KR102048294B1 (en) 2019-11-25

Similar Documents

Publication Publication Date Title
CN106462702B (en) Method and system for acquiring and analyzing electronic forensic data in a distributed computer infrastructure
EP2523115B1 (en) Operation management device, operation management method, and program storage medium
JP6585482B2 (en) Device diagnostic apparatus and system and method
CN108700853B (en) System for automatically inferring equipment details from controller configuration details
WO2016159039A1 (en) Relay device and program
US9176798B2 (en) Computer-readable recording medium, failure prediction device and applicability determination method
WO2015023201A2 (en) Method and system for determining hardware life expectancy and failure prevention
JP2012198796A (en) Log collection system, device, method and program
US10581665B2 (en) Content-aware anomaly detection and diagnosis
JP2015028700A (en) Failure detection device, failure detection method, failure detection program and recording medium
CN113438110B (en) Cluster performance evaluation method, device, equipment and storage medium
WO2018216197A1 (en) Anomaly seriousness computation system, anomaly seriousness computation device, and anomaly seriousness computation program
US11785023B2 (en) Vehicle abnormality detection device and vehicle abnormality detection method
JP2014021577A (en) Apparatus, system, method, and program for failure prediction
CN105245591A (en) Method and system for monitoring desktop cloud performance experience
CN110069382B (en) Software monitoring method, server, terminal device, computer device and medium
WO2020044898A1 (en) Device status monitoring device and program
US11153769B2 (en) Network fault discovery
CN112583825B (en) Method and device for detecting abnormality of industrial system
JP4081258B2 (en) Management server system
JP2018191217A (en) Data monitoring apparatus, data monitoring method, and data monitoring program
US20150149827A1 (en) Identifying a change to indicate a degradation within a computing device
CN115934453A (en) Troubleshooting method, troubleshooting device and storage medium
CN111258845A (en) Detection of event storms
US20170257259A1 (en) Computer system, gateway apparatus, and server apparatus

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16772920

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 20177027086

Country of ref document: KR

Kind code of ref document: A

WWE Wipo information: entry into national phase

Ref document number: 112016001586

Country of ref document: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16772920

Country of ref document: EP

Kind code of ref document: A1