WO2022264211A1

WO2022264211A1 - Industrial equipment

Info

Publication number: WO2022264211A1
Application number: PCT/JP2021/022525
Authority: WO
Inventors: 光内田; 之家任; 祐長谷川
Original assignee: 株式会社日立産機システム
Priority date: 2021-06-14
Filing date: 2021-06-14
Publication date: 2022-12-22
Also published as: TWI824435B; JPWO2022264211A1; TW202248530A

Abstract

The present invention provides industrial equipment capable of communicating with an external terminal that can take measures against external attacks without involving complicated authentication and procedures, can reliably connect to the equipment when used by an operator, and can perform, e.g., the checking of the operational status and the operation of the equipment. This industrial equipment includes an electric part (105), a mechanical part (107) driven by the electric part (105), a control unit (103) that controls electric power supplied to the electric part (105), and a communication unit (109) that transmits radio waves and connects the control unit (103) to an external terminal (201) via wireless communication. The control unit (103) causes the communication unit (109) to stop communicating with the external terminal (201) when a connection request is sent from the external terminal (201) to the communication unit (109) more than a predetermined number of times within a predetermined period.

Description

industrial equipment

The present invention relates to a device capable of communicating with an external terminal, particularly an industrial device such as an air compressor installed and used in a factory.

Air compressors, which are industrial equipment, are widely used for the purpose of supplying compressed fluid to users regardless of whether they are inside or outside buildings such as factories and construction sites. Stopping the air supply and controlling the air pressure must be operated by the operating section on the compressor controller.

Also, in order to know information such as the pressure in the air tank and the operating status, it is necessary to operate the compressor control device and display it on the display.

In either case, it is necessary for a worker to be near the air compressor, and when a worker using tools at the end knows the state of the air compressor or when operating it, he moves to the place where the air compressor is located. It is necessary to perform operation and confirmation.

Therefore, as a measure to improve work efficiency and convenience, it is necessary to have a function that allows the status of air compressors to be checked and operated remotely.

The technology described in Patent Document 1 is known for air compressors that remotely monitor and operate air compressors.

Patent Literature 1 describes "a motor driven by supply of electric power from a commercial power source, a compressed air generation unit that generates compressed air by driving the motor, and a tank that stores the compressed air generated by the compressed air generation unit. , By having a control board that controls the drive of the motor and a main unit side communication unit that transmits main unit information to an external terminal, the state of the air compressor can be checked without moving to the place where the air compressor is installed. It is described as an air compressor.

Patent Document 1 describes an air compressor that can exchange data with an external terminal via wireless communication, but no consideration is given to the confidentiality of the communication content. Regarding this, Patent Document 2 describes a system having a function of newly resetting recognition information for connection with a device when a specific attack is received from an external third party.

JP 2015-145662 A JP 2019-121994 A

Although Patent Document 1 does not mention the confidentiality of communication content, Patent Document 2 takes measures against external attacks by changing passwords and notifying users.

However, with these measures, for devices that can communicate, for example, when communication connection requests are made continuously, if the connection between the device and the terminal is assumed to be 1:1 or n:1, the device cannot be sent simultaneously from multiple terminals.

For this reason, if you are under attack from a third party, you will not be able to connect to the device from other communication terminals, making it difficult to operate the compressor, which will affect the operation of the compressor.

Therefore, the object of the present invention is to enable countermeasures against external attacks without intervening complicated authentication and procedures, to allow workers to reliably connect to devices when using them, to check operating conditions, An object of the present invention is to provide a device capable of communicating with an external terminal that can be operated.

In order to achieve the above objects, the present invention is configured as follows.

The device includes an electric part, a mechanical part driven by the electric part, a control part that controls power supplied to the electric part, and a communication that transmits radio waves and connects the control part and an external terminal by wireless communication. and a unit, wherein the control unit stops communication with the external terminal by the communication unit when connection requests transmitted from the external terminal to the communication unit exceed a predetermined number of times within a predetermined time. do.

According to the present invention, it is possible to take countermeasures against external attacks without intervening complicated authentication or procedures. It is possible to provide a device capable of communicating with an external terminal capable of performing

1 is a block diagram of an air compressor in Example 1. FIG. 3 is a block diagram of a controller of the air compressor in Embodiment 1. FIG. FIG. 4 is a diagram for explaining a procedure for authenticating an air compressor in Embodiment 1; 4 is a connection operation flow chart of the communication unit according to the first embodiment; FIG. 4 is a diagram showing an example of an operation unit of the air compressor in Embodiment 1; FIG. 10 is a block diagram of an air compressor in Example 2; FIG. 8 is a block diagram of a control unit of the air compressor in Embodiment 2; 10 is a connection flowchart of a communication unit in Example 2. FIG. FIG. 10 is a diagram showing an arrangement example of an air compressor operation unit in Embodiment 2; FIG. 11 is a block diagram showing a pump system connection relationship in Example 3; FIG. 11 is a schematic configuration diagram of a hoist to which Example 4 is applied; It is a figure explaining another structure of a hoist.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

(Example 1)
In this embodiment, as an example of equipment, an air compressor that is mainly used for industrial purposes and is used by being placed in the premises (factory, etc.) of a user or owner will be described.

FIG. 1 is a block diagram of the air compressor in Embodiment 1. FIG. FIG. 2 is a block diagram of the control device 110 section in the first embodiment.

The first embodiment is an example of configuring an air compressor having a communication function.

1 and 2, the air compressor 100 is composed of a tank that accumulates air inside and a compression mechanism, and is composed of a mechanism unit 107 that applies force to the fluid, a motor that drives the compression mechanism, and a cooling fan. It is composed of an electric section 105 and a control device 110 that electronically controls the electric power supplied to the electric section 105 .

The control device 110 includes ICs (eg, microcomputers, FPGAs, etc.), electronic components (eg, resistors, capacitors, oscillation circuits, etc.), power elements (eg, transistors, relays, etc.) for controlling the electric portion 105 and the display portion 101. ) is an electronic circuit board mounted on a printed circuit board by means of soldering or the like.

The control device 110 includes a control unit 103 configured by a microcomputer in an IC or a software function, a circuit component used to control the electric part 105, and a circuit component including an antenna for transmitting radio waves to the outside and a microcomputer in the IC. It is composed of a communication unit 109 configured by software functions, a display unit 101 which is a circuit component, and an operation unit 108 .

The display unit 101 is a display component (LED, liquid crystal, etc.) that can express numerical values, etc., and is used to display the air pressure and temperature of the mechanical unit 107 of the air compressor 100 .

The control unit 103 that controls the motorized unit 105 and the communication unit 109 that performs the communication function have different ICs and are provided as their software functions. The control unit 103 and the communication unit 109 are connected by electrical wiring and signal wiring as shown in FIG. 1, and can exchange signals with each other. Information necessary for communication is stored in the storage unit 104 . The information required for communication is information of the external terminal 201 for which connection authentication has been successfully completed.

In the first embodiment, the control unit 103 performs operation control based on instructions from the operation unit 108 that receives instructions from the outside.

The communication unit 109 transmits a radio wave (for example, a 2.4 GHz band radio wave) by supplying power to an antenna, and communicates with an external terminal 201 (for example, a mobile terminal, a stationary computing device, etc.) equipped with a radio wave receiving device and a wireless line. Communication can be performed by

The air compressor 100 and the external terminal 201 can use any communication method (for example, wireless LAN, etc.) to transmit and receive electronic data mutually or unidirectionally using wireless communication. That is, the communication unit 109 can be used for both transmission and reception of radio waves.

The communication unit 109 is an integrated circuit (eg, System On a Chip, etc.) containing electronic components such as a CPU and memory.

The air compressor 100 operates with an external power supply, and stops when the external power supply is cut off. The supplied power energizes the control device 110 , and is supplied to the electric portion 105 according to an operation command from the control device 110 . Programs of the ICs installed in the control unit 103 and the communication unit 109 are recorded in their respective non-volatile memories, and are read when power is supplied.

The first embodiment adopts a communication method that achieves remote monitoring and remote control functions with enhanced communication security. In other words, as an example of wireless communication, the first embodiment uses Bluetooth Low Energy (hereinafter referred to as BLE), which is a kind of communication standard of Bluetooth (registered trademark), which is one of proximity communication standards. BLE has a mechanism (hereinafter referred to as pairing) for safely starting encrypted communication at the start of connection. BLE has multiple versions due to changes in specifications. Here, version 4.1 or later (for example, version 4.2 or the like) is targeted.

Communication using BLE is performed between the air compressor 100 and the external terminal 201. The communication unit 109 supplies electric power to the antenna and transmits radio waves for conveying its own individual signal and service contents as data to the outside. This is called advertising.

The external terminal 201 has an antenna suitable for receiving radio waves emitted by the communication unit 109 and software capable of interpreting the contents of the radio waves. Send a wireless connection request according to the

Upon receiving a connection request from the external terminal 201, the communication section 109 transmits the setting of the security conditions to be used at the time of connection. Security condition settings are notified to each other.

Either the passkey display method or the numeric comparison method is provided as the authentication method. In the passkey display method, one of the devices that initiates connection generates a personal identification number and displays the personal identification number on the display unit 101 . Then, the operator inputs the personal identification number displayed on the display unit 101 into the other device, and the one device compares the personal identification number generated in the one device with the personal identification number input in the other device. , which is a way to authenticate the connection.

In the numerical comparison method, both devices that initiate a connection generate random numbers calculated by a specific function, display the PIN code generated based on the exchanged random numbers on each device, and confirm that the numbers match. A method in which the device requesting the connection permits the authentication of the connection when the To permit connection authentication, for example, when the displayed numbers match, the operator may perform an authorization operation for the device that requested connection.

If the security conditions of the external terminal 201 are lower than the required level of the communication section 109, the communication section 109 immediately disconnects the connection.

If the security conditions of the communication unit 109 and the security conditions of the external terminal 201 are conditions for encryption using authentication, the communication unit 109 generates a personal identification number and requests the external terminal 201 to enter the personal identification number. Send.

The communication unit 109 executes data processing to convert the generated personal identification number into data receivable by the control unit 103 (for example, Modbus format, etc.), and transmits the personal identification number data to the control unit 103 by wire.

The control unit 103 replies to the communication unit 109 that the personal identification number data has been completely received.

The operator of the external terminal 201 visually confirms the personal identification number displayed on the display unit 101 , inputs the personal identification number into the external terminal 201 , and transmits it from the external terminal 201 to the communication unit 109 .

The communication unit 109 compares the received personal identification number with the generated personal identification number. If the personal identification numbers match, the communication unit 109 sends to the external terminal 201 a temporary encryption key to be used for encrypting the content of communication after connection. If the personal identification numbers are different, the communication unit 109 immediately disconnects.

FIG. 3 is a diagram explaining the authentication procedure of the air compressor 100 in the first embodiment.

In FIG. 3, the authentication procedure between the external terminal 201 and the communication unit 109 is called pairing. The communication unit 109 can be paired with a plurality of external terminals 201 within the range allowed by the design specifications of the communication unit 109 . The external terminal 201 and the communication unit 109 that are paired with each other are ready to connect and communicate with each other.

The connection state refers to a state in which data is being sent and received, such as when the external terminal 201 and the communication unit 109 are exchanging encryption keys, regardless of the presence or absence of pairing. Of course, even when the data of the air compressor 100 can be transmitted and received after the pairing, the state is also referred to as the connected state.

In addition, communication is the transmission and reception of various data in connection status. Since the advertisement in FIG. 3 is stopped during the connection state (during pairing authentication or during communication after pairing), other external terminals cannot receive the advertisement from the communication unit 109, resulting in a connection-disabled state. .

A plurality of paired external terminals 201 and the communication unit 109 can be connected at the same time, and communicate with each external terminal 201 in turn. However, if the design specification of the communication unit 109 permits connection only to a single external terminal 201, the second and subsequent external terminals 201 are not connected.

Here, although multiple pairings are possible between the external terminal 201 and the communication unit 109, only one device can be connected to one communication unit 109 at the same time.

Therefore, one worker who uses the air compressor 100 can remotely perform operations such as checking the state of the air compressor 100 main body and changing the pressure from a place where tools or the like are used. When doing so, another operator cannot make connections to the air compressor 100 .

In addition, in order to perform pairing, the external terminal 201 needs to issue a connection request to Advertise while the communication unit 109 is not connected to any external terminal 201 (in a state where Advertise can be transmitted). be. When a connection request is made, the communication unit 109 temporarily enters a state of waiting for connection, such as exchange of security setting notifications, as shown in FIG.

Since advertisements are not transmitted in the connection standby state, exchange of connection requests with the communication unit 109 is substantially impossible except for the external terminal 201 that is currently making the connection request.

In order for the communication unit 109 to be able to transmit advertisements again, it is necessary to perform a password mismatch, a certain period of time, and the power to be turned on again.

Here, a third party other than the user of the air compressor 100 continuously repeats requests to the communication unit 109 such as connection request, pairing failure, reconnection request, pairing failure, and so on. In this case, even an authorized user cannot establish a connection between the communication unit 109 and the external terminal 201 .

This is because even a paired external terminal 210 cannot be connected to a communication unit 109 that has not been advertised, and cannot be connected as long as a third party's connection request continues.

FIG. 4 is a flow chart of connection operation with the external terminal 201 in the communication unit 109 .

At step S1 in FIG. 4, the communication unit 109 and the external terminal 201 are not connected.

In step S2, the communication unit 109 emits radio waves, and in step S3, it is determined whether or not there is a connection from the external terminal 201. If there is no connection request from the external terminal 201, the process returns to step S1, and if there is a connection request from the external terminal 201, the process proceeds to step S4.

In step S4, the communication unit 109 generates a personal identification number and requests the external terminal 201 to enter the personal identification number. In step S5 , the control unit 103 displays the personal identification number generated by the communication unit 109 on the display unit 101 .

Then, in step S6, the communication unit 109 waits for a connection request from the external terminal 201. Then, in step S7, the communication unit 109 determines whether or not the waiting time for a connection request from the external terminal 201 has reached N seconds, which is a certain time. back to In step S7, if the waiting time for the connection request from the external terminal 201 has not reached N seconds, the process proceeds to step S8.

In step S8, the communication unit 109 determines whether or not the personal identification number has been received (received) from the external terminal 201. If the personal identification number has not been received, the process returns to step S6.

In step S8, when the communication unit 109 receives (receives) a personal identification number from the external terminal 201, the process proceeds to step S9, authenticates the received personal identification number, and determines whether or not the personal identification number is correct. If the personal identification number is correct, the connection state with the external terminal is established in step S10. Then, in step S11, it is determined whether or not to continue encrypted communication, and if it is to be continued, the process returns to step S10.

In step S11, when the communication unit 109 determines not to continue encrypted communication, the process returns to step S1.

In step S9, if the personal identification number received from the external terminal 201 is incorrect, the process advances to step S12, and the control unit 103 determines that the number of authentications of the personal identification number transmitted from the same external terminal 201 has increased for a predetermined period of time (for example, 1 It is determined whether or not a predetermined number of times N (for example, 5 times) has been reached in one minute), and if it has not reached N times, the process returns to step S1.

In step S12, if the number of authentications of the personal identification number exceeds N times per minute, the process proceeds to step S13, and the control unit 103 stops power supply to the communication unit 109. By stopping the power supply to the communication unit 109, the transmission of radio waves from the communication unit 109 is stopped, and the communication with the external terminal 201 by the communication unit 109 is stopped.

Then, in step S14, the control unit 103 determines whether or not there is a request to resume communication from the operation unit 108. If not, the process proceeds to step S15, sets the connection disabled state, and returns to step S14. In step S14 , the control unit 103 returns to step S1 according to the communication restart request input from the operation unit 108 , proceeds to step S2 , and causes the communication unit 109 to restart radio wave transmission.

According to the connection operation flowchart shown in FIG. 4, if the number of authentications is N times or more within a predetermined time, it is determined that the connection request is from a malicious third party, and a function is provided to temporarily stop the operation of the communication unit 109. The air compressor 100 can be provided.

In the configuration of the air compressor 100 of the first embodiment, a control unit 103 for operating the air compressor 100, a display unit 101, and a communication unit 109 for transmitting/receiving radio waves for communicating with the external terminal 201 are provided on the control board. is included.

The communication unit 109 receives power supply from the control unit 103 and emits radio waves, but the communication unit 109 is not involved in the basic operation of the air compressor 100 .

Therefore, a threshold value is provided in the control unit 103, and when the number of pairing requests exceeding the threshold value is received within a certain period of time, the control unit 103 determines, stops the power supply from the control unit 103 to the communication unit 109, The transmission of radio waves from the communication unit 109 is stopped.

For example, if connection requests or PIN authentication failures are repeated five times or more in one minute, power supply to the communication unit 109 is stopped, and advertising is completely stopped.
Even if the power supply to the communication unit 109 is stopped, the operation of the air compressor 100 is not affected, and the operation and control of the electric unit 105 and the mechanical unit 107 are continued. When the power supply to the communication unit 109 is stopped, the data transmission/reception function using the communication unit 109 is stopped, and normal compressor operation is performed without any problem.

The power supply to the communication unit 109 is restarted by operating the operation unit 108 attached to the control unit 103 . This is because the equipment to which the present invention is applied is placed on the premises owned by the user or owner, and therefore a person who can approach and directly operate the equipment is considered to be a proper user or owner. This is because it is conceivable.

FIG. 5 is a diagram showing an example of the operation unit 108 of the air compressor 100. FIG. The operation unit 108 includes a tank internal pressure display LED 113, an operating state display LED 114, a communication restart operation button 115, an operation switch 116, and the like.

For example, the normal restart operation button 115 may be provided with a dedicated button, or an operation to the operation unit 108 that is not performed in normal operation may be set as a restart condition. By separating the instruction for the operation for restarting the communication from the instruction for the normal operation of the compressor, the communication can be restarted within a range that does not affect the normal operation (for example, two press and hold two or more buttons at the same time). Alternatively, the air compressor 100 itself may be restarted. Even if a worker near the air compressor 100 makes a series of authentication errors, he/she can be recovered by operating the operation unit 108, so it is possible to omit the determination of whether it is an attack or a mistake.

In addition, it is necessary to approach the vicinity of the air compressor 100 in order to restart the power supply to the communication unit 109, and the external terminal 201 of the worker closest to the device is connected at the time of restarting. request cannot be made.

With the above processing, the air compressor 100 can be protected from occupation of the communication line by an unauthorized connection request from a third party without impairing the normal operation of the air compressor 100.

In addition, if the connection request received after the communication unit 109 restarts the transmission of radio waves has a value lower than the set threshold value of the radio wave intensity of the external terminal 201 that has issued the pairing request as a cause of power shutdown to the communication unit 109 , the connection request may be rejected, the pairing request may be disconnected without proceeding to authentication of the personal identification number, and the connection request may be accepted only when the radio wave intensity is equal to or greater than a set threshold value. In this case, in the case of the worker's external terminal 201 already paired near the air compressor 100, reconnection can be performed even from a distance, but it is necessary to go near the air compressor 100 in order to perform the pairing. Therefore, line occupation by remote pairing requests can be prevented.

It is also possible to configure the communication unit 109 so that the operation of turning off the power to the communication unit 109 can be performed by the operation of the operation unit 108 . For example, when a worker near the air compressor 100 tries to connect, but is unable to pick up advertisements due to an attack from the outside, by operating the operation unit 108, once to the communication unit 109 By shutting off the power supply to the device and restarting it, priority is given to the connection to the worker closest to the device, so connection is possible.

In addition to the above measures, the communication unit 109 has a module whitelist function for the external terminal 201 that has been paired, stores the whitelist in the storage unit 104, and when continuous pairing requests continue, the communication unit 109 After the power supply to the is stopped, a lock may be applied so that requests from other than the external terminals 201 in the whitelist will not be responded to for a certain period of time. At this time, the lock may be released from the connected terminal, or may be unlocked by operating the operation unit 108 of the control device 110 . In other words, after the control unit 103 restarts the transmission of radio waves by the communication unit 109, the connection request received from the external terminal 201 is only from the specific external terminal 201 stored in the storage unit 104. Can be configured.

In addition, the control unit 103 does not completely cut off the communication radio waves of the communication unit 109, but controls the output of the generated communication radio waves to reduce the radio wave intensity of the communication unit 109. Communication may be stopped.

Further, when the connection request is transmitted from the external terminal 201, the communication unit 109 determines whether or not the personal identification number transmitted from the external terminal 201 is correct. If the personal identification number is incorrect, the connection with the external terminal 201 is disconnected, the information of the external terminal 201 with the correct personal identification number is stored in the storage unit 104, and the control unit 103 controls the radio waves from the communication unit 109. After resuming the call, the received connection request can be configured to accept only the connection request from the external terminal whose personal identification number stored in the storage unit 104 is correct.

As described above, according to the first embodiment of the present invention, it is possible to take countermeasures against external attacks without intervening complicated authentication and procedures, and it is possible for an operator to reliably connect to a device when using it. Therefore, it is possible to provide a device that can communicate with an external terminal that can confirm the operating state and perform operations.

(Example 2)
Next, Example 2 of the present invention will be described. In this embodiment, as an example of equipment, an air compressor that is mainly used for industrial purposes and is used by being placed in the premises (factory, etc.) of a user or owner will be described.

FIG. 6 is a block diagram of the air compressor 100 in the second embodiment. FIG. 7 is a block diagram of the control device 110 and the operating device 111 of the air compressor 100 according to the second embodiment.

Also, FIG. 8 is a flow chart of connection operation with the external terminal 201 in the communication unit 109 in the second embodiment.

In contrast to the first embodiment, in the second embodiment, the operation unit 108 is configured with a substrate different from that of the control unit 103, and the module having the communication unit 109 also serves as the control microcomputer of the operation unit 108.

The air compressor 100 includes a mechanical portion 107 including a tank (pressure vessel 117) for accumulating air therein and a compression mechanism, an electric portion 105 including a motor and a cooling fan for driving the compression mechanism, and an electric portion. A control device 110 that electronically controls the power supplied to the air compressor 105, and an operation device 111 that displays pressure and operating conditions, communicates with the external terminal 201, and transmits operation signals for the air compressor 100 to the control device 110. It consists mainly of

Furthermore, the air compressor 100 has a pressure sensor 118 that detects the pressure of the pressure vessel 117 and a rotation sensor 119 that detects the rotation speed of the motor in the electric section 105 .

The control device 110 and the operation device 111 include ICs (eg, microcomputers, FPGAs, etc.), electronic components (eg, resistors, capacitors, oscillation circuits, etc.), power elements (eg, transistors, relays, etc.) for controlling the electric portion 105. ) is an electronic circuit board mounted on a printed circuit board by means of soldering or the like.

The control device 110 and the operation device 111 are connected by a wire, and the control unit 103 operates the air compressor 100 in response to an operation request from the operation device 111 .

In the second embodiment, unlike the first embodiment, the communication unit 109 also controls the operation of the operation unit 108. Therefore, as in the first embodiment, the power supply to the communication unit 109 is stopped and the radio wave of the communication unit 109 is stopped. If the process of stopping the transmission of .

In the case of the configuration of the second embodiment, unlike the first embodiment, power supply to the communication unit 109 is not stopped, but as shown in the flow of FIG. , and the control unit 103 continues power control to the electric unit 105 to prevent unauthorized connection requests.

Description will be made along the flow in FIG.

At step S20 in FIG. 8, the communication unit 109 and the external terminal 201 are not connected. In step S21, the communication unit 109 emits radio waves, and in step S22, it is determined whether there is a connection from the external terminal 201 or not. If there is no connection request from the external terminal 201, the process returns to step S20, and if there is a connection request from the external terminal 201, the process proceeds to step S23.

In step S23, it waits for connection, displays the personal identification number by button operation, determines whether the personal identification number has been received from the external terminal 201, and proceeds to step S24 if the personal identification number has been received. In step S24 , the communication unit 109 waits for a connection request from the external terminal 201 .

Then, in step S25, the communication unit 109 determines whether or not the waiting time for a connection request from the external terminal 201 has reached N seconds, which is a certain time. back to In step S25, if the waiting time for the connection request from the external terminal 201 has not reached N seconds, the process advances to step S26 to set the external terminal 201 and the communication unit 109 in a connected state.

Then, in step S27, if the encrypted communication is to be continued, the process returns to step S26. In step S27, if the encrypted communication is not to be continued, the process returns to step S20.

In step S23, if the personal identification number has not been received, proceed to step S28, determine that connection has failed, and proceed to step S29. Then, in step S29, it is determined whether or not the number of connection failures is less than N times per minute, and if less than N times, the process returns to step S20.

In step S29, if the number of connection failures is N times per minute, the process proceeds to step S30, where the control unit 103 instructs the communication unit 109 to stop the radio wave output and stop only the advertising radio wave output. Then, in step S31, it is determined whether or not there is a request to resume communication from the operation unit 108 to the communication unit 109. If there is no request to resume communication, the process proceeds to step S32. .

In step S31, if there is a request to resume communication, the process returns to step S20.

In the configuration of the second embodiment, the power supply to the communication module of the operation unit 108 is not stopped, so the operation of the air compressor 100 is not affected.

In order to start supplying radio waves again, a physical button on the operation unit 108 as shown in FIG. 9 may be assigned as a reconnection button and operated. In FIG. 9 , the operation unit 108 includes a tank internal pressure display LED 120 , an abnormality display LED 121 , a communication restart switch 122 and an operation mode display LED 123 .

In addition, it is also possible to take countermeasures by controlling the output of the generated communication radio waves without completely blocking the communication radio waves of the communication unit 109. In this case, for example, by suppressing the output of radio waves within a range of 1 m, only workers in the vicinity of the air compressor 100 can be connected.

Further, as in the first embodiment, when the radio field intensity of the external terminal 201 that has issued a pairing request as a factor of power shutdown to the communication unit 109 is lower than the set threshold value, the authentication of the personal identification number is not performed. Software that can disconnect the pairing request may be used.

Further, as in the first embodiment, the communication unit 109 has a whitelist function of a module that includes the storage unit 104 and the external terminal 201 that has been paired, stores the whitelist in the storage unit 104, and performs continuous processing. If the pairing request continues, after the power supply to the communication unit 109 is stopped, it may be locked so as not to respond to requests from other than the external terminal 201 in the whitelist for a certain period of time.

In Example 2, the same effect as in Example 1 can be obtained.

Furthermore, by adopting a configuration that controls the radio wave intensity as in the second embodiment, although the risk of line occupancy is slightly higher than when the communication unit 109 is completely cut off, security can be strengthened more easily. In particular, in a configuration in which the output of radio waves is suppressed, the operator can easily reconnect by approaching the air compressor 100, so that it can be used without the need for complicated operations or explanations.

(Example 3)
Next, Example 3 of the present invention will be described.

In the first and second embodiments described above, an example in which the present invention is applied to the air compressor 100 has been described, but the present invention can also be applied to different devices. Embodiment 3 describes an example in which the present invention is applied to a pump, which is a fluid machine similar to an air compressor. The configuration of the control device and the flow of communication operations in the third embodiment are the same as those in the first or second embodiment, so illustration and detailed description are omitted.

FIG. 10 is a block diagram showing connection relationships of a pump system 300 including a plurality of pump devices to which Embodiment 3 of the present invention is applied. One pump device has a casing that is a flow path, a pump section that has an impeller provided in the casing, a motor section that rotates the impeller, a power conversion section that supplies power to the motor section, and wirelessly communicates with the outside. A power conversion device having a communication unit.

In FIG. 10, reference numerals 1-1, 1-4, 2-1, 2-4, 3-1 and 3-4 indicate gate valves. Reference numeral 1-2 indicates the No. 1 pump device, reference numeral 2-2 indicates the No. 2 pump device, and reference numeral 3-2 indicates the No. 3 pump device. Reference numerals 1-3, 2-3 and 3-3 denote check valves. Reference numeral 1-5 denotes the No. 1 motor unit, 2-5 denotes the No. 2 motor unit, and 3-5 denotes the No. 3 motor unit.

Reference numeral 1-6 denotes the No. 1 power conversion device, reference numeral 2-6 denotes the No. 2 power conversion device, and reference numeral 3-6 denotes the No. 3 power conversion device. Reference numeral 1-7 indicates the No. 1 machine control board, reference numeral 2-7 indicates the No. 2 machine control board, and reference numeral 3-7 indicates the No. 3 machine control board. Further, reference numerals 1-8 denote the No. 1 radio interface, 2-8 denote the No. 2 radio interface, and 3-8 denote the No. 3 radio interface.
The power conversion device may be attached integrally to each pump and motor, or a plurality of power conversion devices may be collectively installed as one control panel near a wall or the like. In that case, the communication unit may be one communication unit in the control panel instead of each power conversion device.

For example, when data (data items and data contents) to be set is transmitted from a mobile terminal (not shown), which is an external terminal, the wireless interfaces (1-8, 1-8, 3-2) of the pump devices 1-2, 2-2, 3-2 2-8, 3-8), the data is written into the storage unit that stores the pump control data. In this case, the identification numbers of the pump devices 1-2, 2-2, and 3-2 are sent together with the data in order to clarify the target of the data transmission. A wireless interface and a storage unit are incorporated in the control & I/F (1-8, 2-8, 3-8) of the pump devices 1-2, 2-2, 3-2.

It is desirable that the above mobile terminals have a display device.

Next, when a command to acquire the operating status is given from the portable terminal, the pump operating data is transmitted through the wireless interfaces (1-8, 2-8, 3-8) of the pump devices 1-2, 2-2, 3-2. , and the read data is sent to the portable terminal through the wireless interface (1-8, 2-8, 3-8).
Also, when the pump is operated from a portable terminal, it is possible to give a run/stop command and set the operating frequency (motor rotation speed) in the same way as setting data. Specify the data item related to the operation status of the pump device instead of the "command" of "run/stop", and set "run" to the data if you want to run it, and "stop" to the data if you want to stop it. can also be set.
As shown in FIG. 10, when there are three or more pump devices 1-2, 2-2, and 3-2, priority is given to the pump devices 1-2, 2-2, and 3-2 in advance. can be the master pumping device. Alternatively, after the pump devices 1-2, 2-2, and 3-2 become operational (after they are energized), the priority is determined among the pump devices 1-2, 2-2, and 3-2. The pumping device with the highest priority in the list may be the master pumping device.

When the master pump device is set, only the communication unit of the master pump device communicates with the mobile terminal. may be configured to transmit to the mobile terminal.

In this way, the communication unit of each pump device 1-2, 2-2, 3-2 (or the communication unit of the master pump device) communicates with the portable terminal, and when the line is occupied by a connection request, The operation as the pump device continues while disconnecting the communication with the portable terminal.

The pump system of the present invention can of course be applied even when the number of pump devices is one.

According to the third embodiment, it is possible to take countermeasures against external attacks without intervening complicated authentication or procedures. It is possible to provide a pump system that is a fluid machine that can communicate with an external terminal that can perform, for example.

Note that, even in the third embodiment, if the radio field strength of the external terminal 201 that has issued a pairing request to the communication unit 109 as a factor of power shutdown is lower than the set threshold, pairing is performed without proceeding to PIN authentication. It may be software that can disconnect the ring request.

Further, it is also possible to configure so that the operation of powering off the communication unit 109 can be performed by the operation of the operation unit 108 .

The communication unit 109 has a module whitelist function for the external terminal 201 that has been paired, stores the whitelist in the storage unit 104, and supplies power to the communication unit 109 when continuous pairing requests continue. After the termination of the whitelist, a lock may be applied so that requests from other than the external terminals 201 in the whitelist are not accepted for a certain period of time.

In addition, it is also possible to take countermeasures by controlling the output of the generated communication radio waves without completely blocking the communication radio waves of the communication unit 109.

(Example 4)
Next, Example 4 of the present invention will be described.

The present invention can also be applied to devices other than the fluid machines exemplified in Examples 1 to 3. In the fourth embodiment, as an example of equipment, an example in which the present invention is applied to a hoist (also called a crane or hoist) installed and used in a factory will be described.

Embodiment 4 relates to a hoist that mainly conveys a load that can be lifted by a rope, and in particular relates to a hoist that reduces load swing when the ground is cleared by tensioning the rope before the ground is cut and conveying the trolley. In addition, the present invention can be applied to cranes that similarly carry suspended loads.

The configuration of the control device and the communication operation flow in Example 4 are the same as those in Example 1 or Example 2, so illustration and detailed description are omitted.

FIG. 11 is a schematic diagram of the hoist 10 to which the fourth embodiment is applied.

In FIG. 11, the suspended load 30 to be transported is suspended from the hook 131 by the slinging rope 20 . Hook 131 is suspended from hoist drum 1122 by rope 13 . Here, the suspended load 30 may be configured to be directly suspended from the hook 131 without the slinging rope 20 interposed therebetween.

The winding drum 1122 is connected to the winding motor 112 and the winding encoder 1121 by a winding shaft 1123 and arranged on the trolley 11 . As a result, the rope 13 is hoisted or hoisted by rotating the hoisting motor 112, and the suspended load 30 can be conveyed in the z direction in FIG. This z-direction transport is referred to as winding.

The traversing wheel 1111 is connected to the traversing motor 111 via a traversing shaft 1112 and arranged on the trolley 11 . Also, the traversing wheel 1111 is arranged to rotate on the beam 15 and generate driving force by the rotation of the traversing motor 111 . As a result, the trolley 11 and the suspended load 30 can be conveyed along the beam in the x direction in FIG. 11 by rotating the traversing motor 111 . This x-direction transport is referred to as traverse.

The transport operation unit 141 is provided in the operation terminal 14, and the operator inputs a transport operation signal, which is a command for traversing or hoisting, or both. The input transport operation signal is sent to the control section 12 via the communication section 142 .
The control unit 12 generates a transport command based on the input transport operation signal or a transport signal by an initial vibration reduction function, which will be described later, and drives the traverse motor 111 or the hoisting motor 112, or both. As a result, the suspended load 30 rolls and is hoisted.

It should be noted that the suspended load 30 and the slinging rope 20 are objects to be transported and are not constituent elements of the hoisting machine 10 . Moreover, the jig used for suspending the suspended load 30 is not limited to the slinging rope 20, and may be omitted.

Also, the communication unit 142 of the operation terminal 14 may be wired communication or wireless communication.

In addition to the communication unit 142 for control, the operation terminal 14 includes another communication unit (not shown) that performs short-range wireless communication with the external terminal 201 . By intentionally separating the communication unit 142 and other communication units, when the line is occupied by multiple pairing requests, the line is cut off while continuing to control the four hoisting machines of the present embodiment. can be done.

The operation button for restarting radio wave transmission of the communication unit of the external terminal 201 may be a specific operation on the transportation operation unit 141, or may be provided separately (not shown).

Next, another configuration of the hoist 10 will be described with reference to FIG.

As shown in FIG. 12, the beam 15 is connected to the traveling beam 18 via the traveling device 16. The travel device 16 moves the beam 15 along the travel beam 18 in the y direction in FIG. 12 by rotating the travel motor 161 . As a result, the trolley 11 connected to the beam 15 and the suspended load 30 (see FIG. 11) suspended from the hook 131 are conveyed in the y direction in FIG. This y-direction transport is referred to as travel.

The transport operation signal input to the transport operation unit 141 (see FIG. 11) provided in the operation terminal 14 has command signals for traveling in addition to traversing and hoisting. At least the travel command signal among the input transport operation signals is transmitted to the travel control unit 17 via the communication unit 142 (see FIG. 11).

The traveling control unit 17 generates at least a transportation command for traveling based on a transportation operation signal or a transportation signal by an initial shake reduction function described later, and drives the traveling motor 161 .

As a result, the suspended load 30 (see FIG. 11) travels in addition to traversing and hoisting.

Note that, even in the fourth embodiment, if the radio field intensity of the external terminal 201 that has issued a pairing request to the communication unit 109 as a factor of power shutdown is lower than the set threshold, pairing is performed without proceeding to PIN authentication. It may be software that can disconnect the ring request.

Also, it is possible to configure the communication unit 109 so that the operation of turning off the power to the communication unit 109 can be performed by the operation of the operation unit 108 .

According to the fourth embodiment, it is possible to take countermeasures against external attacks without intervening complicated authentication and procedures, and it is possible for workers to reliably connect to the equipment when using it, and to check the operating state and operate the equipment. It is possible to provide a hoist that is a device that can communicate with an external terminal that can perform such as.

It should be noted that although the control unit 12 generates the traverse and hoisting transport commands and the travel control unit 17 generates the travel transport commands, the present invention is not limited to this configuration.

For example, the control unit 12 generates conveying speed commands for traversing, traveling, and hoisting, and among the generated conveying commands, at least commands related to traveling are transmitted from the control unit 12 to the traveling control unit 17, and the traveling control unit 17 receives them. The traveling motor 161 may be driven based on the conveying command.

In this case, the transport operation signal need only be transmitted to at least the control section 12 and need not be transmitted to the traveling control section 17.

It should be noted that the present invention can also realize a communication control method for equipment.

In other words, the electric section 105, the mechanism section 107 driven by the electric section 105, the control section 103 that controls the power supplied to the electric section 105, and radio waves are transmitted to wirelessly communicate between the control section 103 and the external terminal 201. and a communication unit 109 connected by means of determining whether or not the number of connection requests transmitted from the external terminal 201 to the communication unit 109 exceeds a predetermined number of times within a predetermined time; This is a device communication control method for stopping communication with the external terminal 201 by the communication unit 109 when the number of times exceeds .

Although the embodiments have been described above, the present invention is not limited to the above embodiments, and includes various modifications. For example, the above-described embodiments have been described in detail in order to explain the present invention in an easy-to-understand manner, and are not necessarily limited to those having all the described configurations. In addition, it is possible to replace part of the configuration of one embodiment with the configuration of another embodiment, and it is also possible to add the configuration of another embodiment to the configuration of one embodiment. Moreover, it is also possible to add, delete, or replace a part of the configuration of each embodiment with another configuration.

DESCRIPTION OF SYMBOLS 10... Hoist, 100... Air compressor, 101... Display part, 103... Control part, 104... Storage part, 105... Electric part, 107... Mechanism part, 108. Operation unit 109 Communication unit 110 Control device 111 Operation device 113, 120 Tank internal pressure display LED 114 Operating state display LED 115 Communication restart operation button 116 Operation switch 117 Pressure vessel 118 Pressure sensor 119 Rotation sensor 121 Error display LED 122 Communication restart switch , 123 ... operation mode display LED, 201 ... external terminal, 300 ... pump system

Claims

an electric part;
a mechanical unit driven by the electric unit;
a control unit that controls power supplied to the electric unit;
a communication unit that transmits radio waves and connects the control unit and an external terminal by wireless communication,
The control unit is a device that stops communication with the external terminal by the communication unit when connection requests transmitted from the external terminal to the communication unit exceed a predetermined number of times within a predetermined time.
an electric part;
a mechanical portion driven by the electric portion to apply a force to the fluid;
a control unit that controls power supplied to the electric motor;
a communication unit that transmits radio waves and connects the control unit and an external terminal by wireless communication;
with
The fluid machine, wherein the control unit stops transmission of the radio waves from the communication unit when connection requests transmitted from the external terminal to the communication unit exceed a predetermined number of times within a predetermined time.
In claim 1,
When the connection request is transmitted from the external terminal, the communication unit determines whether or not the personal identification number transmitted from the external terminal is correct, and if the personal identification number is correct, connects to the external terminal. , a device that disconnects from the external terminal when the personal identification number is incorrect.
In claim 1,
A device that stops the transmission of the radio wave from the communication unit when the connection requests from the external terminal are transmitted from the same external terminal and exceed a predetermined number of times within a predetermined time.
In claim 2,
A fluid machine that stops transmission of the radio waves from the communication unit when the connection requests from the external terminal are sent from the same external terminal and exceed a predetermined number of times within a predetermined time.
In claim 1,
A device in which the control unit continues power control to the motorized unit when the communication unit stops transmitting radio waves.
In claim 2,
A fluid machine in which the control unit continues power control to the electric unit when the communication unit stops transmitting radio waves.
In claim 1,
Furthermore, it has an operation unit that accepts instructions from the outside,
The control unit restarts the transmission of radio waves from the communication unit according to a communication restart request input from the operation unit after stopping the transmission of radio waves from the communication unit.
In claim 2,
Furthermore, it has an operation unit that accepts instructions from the outside,
A fluid machine in which, after stopping the transmission of radio waves from the communication section, the control section restarts the transmission of radio waves from the communication section in accordance with a communication restart request input from the operation section.
In claim 8,
When the connection request is transmitted from the external terminal, the communication unit determines whether or not the personal identification number transmitted from the external terminal is correct, and if the personal identification number is correct, connects to the external terminal. , if the personal identification number is incorrect, a storage unit that sets the connection with the external terminal to a disconnected state and stores information on the external terminal with the correct personal identification number,
After the control unit resumes the transmission of radio waves from the communication unit, the received connection request is a device that accepts only the connection request from the external terminal with the correct personal identification number stored in the storage unit.
In claim 8,
A device that accepts a connection request only when the received connection request after the transmission of radio waves from the communication unit is restarted has a radio wave intensity equal to or higher than a predetermined set threshold value.
In claim 1,
A device that rejects a connection request received after the transmission of radio waves from the communication unit is restarted if the received connection request has a radio wave intensity lower than a set threshold.
In claim 1,
The control unit is a device that reduces the radio wave intensity of the communication unit to stop communication with the external terminal.
In claim 1,
The equipment is used by being placed on the premises of the user or owner.