JP3842498B2 - Supervisory control device - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a monitoring control device that monitors and controls a plant, for example. More specifically, the present invention relates to a monitoring control device that authenticates an operator and accepts only an operation according to the operation level of the operator. Is.
[0002]
[Prior art]
By displaying the operation information of the plant on the CRT, a monitoring control device is used to monitor the operation state of the plant and to control the plant as necessary.
[0003]
In such a monitoring and control device, a dedicated keyboard is used for displaying desired operation information and operations for plant control, thereby enabling an operator to easily perform one-touch display and control-specific operations. I can do it.
[0004]
On the other hand, an operator, for example, an operator who is permitted only to monitor the plant (hereinafter referred to as “level 1 operator”) and an operator who is permitted both plant monitoring and plant control (hereinafter referred to as “ The level is classified as “level 2 operator”.
[0005]
In other words, any operator (level 1 operator and level 2 operator) who is only allowed to monitor the plant is authorized, but the plant can be controlled according to its qualifications and abilities. Only authorized Level 2 operators are allowed.
[0006]
As a result, the plant is controlled by a level 2 operator having a certain capacity.
[0007]
Therefore, the conventional supervisory control device has an operation mode that restricts the function for each level of the operator, and if the operator who operates the supervisory control device is a level 1 operator, the operation mode of level 1 is set. Select a level 2 operation mode in the case of a level 2 operator.
[0008]
When the operation mode of level 1 is selected, the operation of the supervisory control device is in a state where only the plant can be monitored. Further, when the level 2 operation mode is selected, the operation of the monitoring and control apparatus is in a state where both monitoring of the plant and control of the plant are possible.
[0009]
In this way, the conventional monitoring and control apparatus is allowed to perform only operations according to the level of the operator. As a result, the level 1 operator does not mistakenly control the plant, so that the plant can be operated safely.
[0010]
[Problems to be solved by the invention]
However, such a conventional monitoring control device has the following problems.
[0011]
That is, in the conventional monitoring and control apparatus, an operation mode for distinguishing the level of the operator is applied. For example, even a level 1 operator can select the level 2 operation mode. Therefore, even if the level 2 operation mode is erroneously selected by the level 1 operator, both plant monitoring and plant control are possible.
[0012]
Currently, the operation is performed so that the level 1 operator does not select the level 2 operation mode. That is, when selecting the operation mode, the level 1 operator selects only the level 1 operation mode and decides on the operation rule so that the level 2 operation mode is not selected. Has been made.
[0013]
However, there is a possibility that the level 1 operator may erroneously select the level 2 operation mode. Alternatively, it is conceivable to intentionally select the level 2 operation mode in order to intentionally control the plant.
[0014]
As described above, once the level 2 operation mode is selected, even a level 1 operator can control the plant, so the plant is operated in a state where the operation rules are ignored. It is also conceivable.
[0015]
In addition, once the operation mode is selected, the conventional supervisory control device is in a state where the operation mode is continued unless it is canceled or changed to another operation mode.
[0016]
That is, even if the level 2 operation mode is selected by the level 2 operator, if the level 2 operator forgets to cancel it, the level 2 operation mode state will continue. It becomes. In such a case, even a level 1 operator can control the plant, and the plant may be operated in a state where the operation rules are ignored.
[0017]
The present invention has been made in view of such circumstances, and automatically authenticates the operator from the normal operation of the operator and enables only the operation according to the operation level of the operator. It is an object of the present invention to provide a monitoring and control apparatus capable of enhancing operational security.
[0018]
[Means for Solving the Problems]
In order to achieve the above object, the present invention takes the following measures.
[0019]
That is, according to the first aspect of the present invention, the input key, the fingerprint reading means that reads the fingerprint information from the person's finger that is embedded in the input key and touches the input key, the fingerprint information of the operator, and the operable range for each operator Storage means for storing information in advance, fingerprint verification means for comparing fingerprint information read by the fingerprint reading means with fingerprint information stored in the storage means, and fingerprint information read by the fingerprint reading means When the fingerprint collating unit determines that the fingerprint information matches one of the operator's fingerprint information stored in the storage unit, the person who has touched the input key is authenticated as the permitted operator and stored. And an operation control means for making the operation based on the operable range information of the operator stored in the means operable for a predetermined time . Then, the operation that can be operated by the operation control means is performed by pressing or touching the input key within a predetermined time, and the fingerprint reading means is when the input key is pressed or touched within the predetermined time. to read the fingerprint information from the pressing or contact finger, fingerprint matching means includes a fingerprint information read, by matching the fingerprint information of the authenticated operator, whether both fingerprint information match The operation control means validates the operation performed by pressing or touching the input key when the fingerprint collating means determines that both pieces of fingerprint information match.
[0023]
Therefore, in the monitoring and control apparatus according to the first aspect of the present invention, it is possible to authenticate an operator who is permitted to operate, and to make it possible to operate only an operation permitted by the operator. Furthermore, when an operation input is actually made, the operation input is validated only when it is confirmed that the person who performed the operation input and the authenticated operator are the same person.
[0024]
As a result, it is possible to realize a monitoring control device with improved operational security.
[0025]
DETAILED DESCRIPTION OF THE INVENTION
Embodiments of the present invention will be described below with reference to the drawings.
[0026]
(First embodiment)
A first embodiment of the present invention will be described with reference to FIGS.
[0027]
The supervisory control device according to the present embodiment is composed of a computer such as a workstation, and monitors the operation state of the plant by displaying the operation information of the plant on a display device such as a CRT, or if necessary. It controls the plant.
[0028]
Furthermore, since the monitoring and control device is an important device that controls the operation of the plant, the monitoring and control operations are provided with a security function managed for each level of the operator.
[0029]
This security function is realized by a fingerprint reading device and a fingerprint collation device which will be described later.
[0030]
FIG. 1 is a block diagram showing an example of the overall configuration of the monitoring control apparatus according to the first embodiment.
[0031]
That is, the monitoring control device 1 according to the present embodiment includes the input device 10, the central processing unit 20, and the display device 30, and performs monitoring control of the plant 40.
[0032]
The input device 10 further includes an input key 11, a fingerprint reading device 12, and an interface 13.
[0033]
The input key 11 receives input from the operator and outputs the information to the interface 13. The fingerprint reader 12 is embedded in the input key 11, reads fingerprint information from a person's finger that contacts the input key 11, and outputs the information to the interface 13.
[0034]
The interface 13 outputs the information received from the input key 11 and the fingerprint reader 12 to the central processing unit 20 side.
[0035]
The central processing unit 20 includes an interface 21, an operator information storage device 22, a fingerprint collation device 23, an operation control device 24, and a plant interface 25.
[0036]
The interface 21 is connected to the interface 13 of the input device 10 and the display device 30. In addition, the fingerprint collation device 23, the operation control device 24, and the plant interface 25 in the central processing unit 20 are also connected to each other and function as an interface for various data exchanged between these units in the central processing unit 20. .
[0037]
The operator information storage device 22 is a storage device that stores the fingerprint information of the operator and the operable range information for each operator.
[0038]
The fingerprint collation device 23 collates the fingerprint information read by the fingerprint reading device 12 with the fingerprint information stored in the operator information storage device 22 and outputs the result to the operation control device 24 via the interface 21. Details of this fingerprint collation method are shown below.
[0039]
When the fingerprint information read by the fingerprint reading device 12 is received from the interface 13 of the input device 10, the interface 21 outputs it to the fingerprint verification device 23. When the fingerprint collation device 23 receives the fingerprint information from the interface 21, the fingerprint collation device 23 accesses the operator information storage device 22, collates it with the fingerprint information stored in the operator information storage device 22, and sends the result via the interface 21. To the operation control device 24.
[0040]
When the fingerprint collation device 23 determines that the fingerprint information read by the fingerprint reading device 12 matches one of the operator's fingerprint information stored in the operator information storage device 22, the operation control device 24 It is determined that the person who has touched the input key 11 is an operator. Then, the operation based on the operable range information of the operator stored in the operator information storage device 22 is set in an operable state, and the result is output to the display device 30 via the interface 21 and displayed. It is displayed on the device 30.
[0041]
If the fingerprint collation device 23 determines that the fingerprint information read by the fingerprint reading device 12 does not match any of the operator's fingerprint information stored in the operator information storage device 22, the operation control device 24 determines that the person who has touched the input key 11 is not an operator. The result is output to the display device 30 via the interface 21 and displayed.
[0042]
The plant interface 25 is connected to the plant 40, extracts necessary data from the plant 40 in response to a monitoring request, and controls the plant 40 in response to a control request.
[0043]
This monitoring request is input from the input key 11 by the operator, and is input to the plant interface 25 via the interface 13 of the input device 10 and the interface 21 of the central processing unit 20.
[0044]
The plant interface 25 extracts data based on the monitoring request from the plant 40 and outputs and displays the data on the display device 30 via the interface 21.
[0045]
Similarly, the control request is input from the input key 11 by the operator, and is input to the plant interface 25 via the interface 13 of the input device 10 and the interface 21 of the central processing unit 20. Yes.
[0046]
The plant interface 25 controls the plant 40 based on this control request.
[0047]
The display device 30 is connected to the interface 21 of the central processing unit 20, and displays data received by the interface 21 as necessary.
[0048]
Next, the operation of the monitoring control apparatus according to this embodiment configured as described above will be described.
[0049]
FIG. 2 is a flowchart illustrating an operation method of the monitoring control device according to the first embodiment.
[0050]
FIG. 3 is a layout diagram illustrating an example of input keys of the monitoring control device according to the first embodiment.
[0051]
When monitoring and controlling the plant 40 from the monitoring control device 1, the operator inputs a predetermined key from the input key 11 as shown in FIG. The input key 11 shown in FIG. 3 is an example in which keys are arranged for each <target facility>, <monitor / control mode>, <target device>, <monitor menu>, and <control menu>. All the keys of the input key 11 are embedded with a fingerprint reading device 12 that reads a fingerprint from a finger in contact with the key.
[0052]
Therefore, when a finger touches any one of the input keys 11 shown in FIG. 3, the fingerprint is read by the fingerprint reading device 12 embedded in the key (S1). The fingerprint reader 12 may be a commonly used device such as a fingerprint authentication element.
[0053]
In this way, the fingerprint information read by the fingerprint reading device 12 is sent to the fingerprint collation device 23 via the interface 13 of the input device 10 and the interface 21 of the central processing unit 20.
[0054]
Further, this fingerprint information is collated with the fingerprint information of the operator stored in the operator information storage device 22 in the fingerprint collation device 23 (S2), and it is confirmed that it matches the fingerprint information of any operator. When it is determined (S3: Yes), the person who touches the input key 11 is authenticated as an operator of this plant (S4), and that effect is displayed on the display device 30.
[0055]
When the operator is authenticated as described above, the fingerprint collation device 23 extracts the operable range information (operation level) of the operator from the operator information storage device 22.
[0056]
On the other hand, if the fingerprint information does not match the fingerprint information of any operator (S3: No), it is determined that the person who touched the input key 11 is not an operator of this plant, and the operation is not permitted. That effect is displayed on the display device 30. If the operation is not permitted, the operation is invalidated regardless of which key is pressed or touched (S10).
[0057]
In S 4, the operator's operable range information output from the fingerprint verification device 23 to the operation control device 24 is further output to the display device 30 via the interface 21 and displayed on the display device 30. Similarly, this operable range information is also sent from the interface 21 to the input key 11 via the interface 13 of the input device 10, and only the input from the key permitted by this operable information is valid ( S4).
[0058]
At this time, the input key 11 may be provided with a light source such as a light emitting diode that lights each key, so that only permitted keys are turned on. Alternatively, only the permitted operation keys may be displayed as the liquid crystal panel type input keys 11.
[0059]
FIG. 4 and FIG. 5 are schematic diagrams showing an example of the state of an input key for an operator who is permitted only to monitor the plant.
[0060]
FIG. 4 is a schematic diagram showing a state where operable keys are lit in an input key of a type in which all buttons are installed in advance.
[0061]
Here, the portions illustrated with diagonal lines indicate the keys that are lit. Since this operator is only allowed to monitor, neither the <control / control mode> control key nor the <control menu>, which cannot be operated, is lit.
[0062]
On the other hand, FIG. 5 is a schematic diagram showing an example in which only operable keys are displayed among liquid crystal panel type input keys.
[0063]
Here, since this operator is only permitted to monitor, neither the <monitor / control mode> control key nor <control menu> is displayed, and the operation is not accepted.
[0064]
Thus, only the operation input permitted to this operator is made within a predetermined time by the authenticated operator (S5: Yes), and the plant 40 is monitored and controlled based on the input (S9). ). Even if an operation key that is not permitted by mistake is pressed or touched, the operation becomes invalid.
[0065]
If there is no operation within a predetermined time, the operation is not accepted (S5: No). As a result, it is possible to prevent an operation input from being made by another person while taking off the seat while once authenticated as an operator.
[0066]
As described above, in the monitoring and control apparatus according to the present embodiment, the normal operation in which the operator touches the input key 11 for each operation automatically causes the operator to be automatically unaware. While performing authentication, only the operation according to the operation level of the operator can be validated.
[0067]
Specifically, it is possible to prevent forgetting to perform the authentication procedure, and even if the operator is changed to an operator with a different operation level, the changed operator is authenticated and the operation level is changed. Switching is also done automatically.
[0068]
Therefore, even if an operator accidentally presses or touches an operation key that is not permitted by the operator, the operation is not accepted. In addition, even if a person who is not an operator inputs an operation, the operation is not accepted.
[0069]
As a result, it is possible to improve the operation security and realize a monitoring and control apparatus free from erroneous operations.
[0070]
(Second Embodiment)
A second embodiment of the present invention will be described with reference to FIG.
[0071]
That is, the overall configuration of the monitoring control apparatus according to the second embodiment is the same as that of the monitoring control apparatus 1 according to the first embodiment shown in FIG. 1, and only the operator authentication method is different. Therefore, description of the structure is abbreviate | omitted here and only the authentication method of an operator is demonstrated.
[0072]
FIG. 6 is a flowchart illustrating an operation method of the monitoring control device according to the second embodiment.
[0073]
In the flowchart shown in FIG. 6, S6 to S8 are inserted between S5 and S9 in the flowchart shown in FIG. Therefore, here, the description will focus on differences from the flowchart shown in FIG.
[0074]
S1 to S5 are the same as those described in the first embodiment.
[0075]
In S5, when an operation input is made within a predetermined time, a fingerprint is read by the fingerprint reader 12 embedded in the key from the finger that touches any of the input keys 11 at the time of the operation input (S6). .
[0076]
In this way, the fingerprint information read by the fingerprint reading device 12 is sent to the fingerprint verification device 23 via the interface 13 of the input device 10 and the interface 21 of the central processing unit 20, and the fingerprint verification device 23 authenticates at S2. The operator's fingerprint information is collated (S7).
[0077]
Then, when the coincidence with the fingerprint information of the operator authenticated in S2 is confirmed (S8: Yes), it is determined that the person who touched the input key 11 is the authenticated operator himself, The operation input made in S5 is validated, and the plant is monitored and controlled based on this operation input (S9).
[0078]
On the other hand, if the fingerprint information does not match the fingerprint information of the authenticated operator (S8: No), it is determined that the person touching the input key 11 is not the authenticated operator, and the operation is not performed. It is permitted, and that effect is displayed on the display device 30. If the operation is not permitted, the operation is invalidated regardless of which key is pressed or touched (S10).
[0079]
As described above, the monitoring control device according to the present embodiment further presses the predetermined input key 11 when the operation that is made operable by the operation control device 24 is performed on the monitoring control device according to the first embodiment. Alternatively, the fingerprint reader 12 reads the fingerprint information from the finger operated by pressing or touching the predetermined input key 11, and the fingerprint collation device 23 reads the fingerprint information. And the fingerprint information of the authenticated operator are collated, and if the fingerprint collation device 23 determines that the two fingerprint information match, the predetermined input key 11 is pressed or touched. The monitoring control device is characterized in that the operation is effective.
[0080]
Note that the present embodiment is not limited to the one described above, and can be similarly implemented as follows.
[0081]
FIG. 7 is an input key layout diagram showing a modification of the monitoring control apparatus according to the second embodiment.
[0082]
The input key 11 shown in FIG. 7 includes an execution key 15, and the fingerprint reader 12 is embedded only in the execution key 15. Further, after pressing or touching a predetermined key, an operation input is output to the interface 13 of the input device 10 by pressing or touching the execution key 15.
[0083]
Even when the input key 11 having such a configuration is used, the operator is authenticated by first touching the execution key 15 before the operation, and further pressing the execution key 15 after pressing or touching a predetermined key. Alternatively, by touching, it is confirmed whether or not the operation is performed by the same operator, and the operation can be validated only when it is confirmed that the operation is performed by the same operator.
[0084]
As described above, in the monitoring and control apparatus according to the present embodiment, when the person who performed the operation input confirms that the person who performed the operation is the same person as the authenticated operator, and the confirmation is made with the same person Only if this operation input is valid, otherwise this operation input can be invalidated.
[0085]
Therefore, for example, even if another person mistakenly or intentionally inputs a key that has been authenticated by a certain operator and can be operated, the operation input is not accepted.
[0086]
As a result, it is possible to improve the operation security and realize a monitoring and control apparatus free from erroneous operations.
[0087]
【The invention's effect】
As described above, according to the monitoring control device of the present invention, the operator is automatically authenticated from the normal operation of the operator, and only the operation according to the operation level of the operator is enabled. Can do.
[0088]
As described above, it is possible to realize a monitoring control device capable of increasing operation security.
[Brief description of the drawings]
FIG. 1 is a block diagram showing an example of the overall configuration of a monitoring control apparatus according to a first embodiment.
FIG. 2 is a flowchart showing an operation method of the monitoring control apparatus according to the first embodiment.
FIG. 3 is a layout diagram illustrating an example of input keys of the monitoring control device according to the first embodiment.
FIG. 4 is a schematic diagram showing an example of a state of an input key for an operator who is permitted only to monitor the plant.
FIG. 5 is a schematic diagram showing an example of a state of an input key for an operator who is permitted only to monitor the plant.
FIG. 6 is a flowchart showing an operation method of the monitoring control apparatus according to the second embodiment.
FIG. 7 is an input key layout showing a modification of the monitoring control apparatus according to the second embodiment.
[Explanation of symbols]
1 ... Supervisory control device,
10: Input device,
11 ... Input key,
12 ... fingerprint reader,
13 ... Interface,
15 ... execution key,
20 ... Central processing unit,
21 ... Interface,
22 ... Operator information storage device,
23 ... fingerprint verification device,
24. Operation control device,
25 ... Plant interface,
30 ... display device,
40: Plant.

Claims (1)

An input key,
Fingerprint reading means that is embedded in the input key and reads fingerprint information from a person's finger that contacts the input key;
Storage means for storing in advance the fingerprint information of the operator and the operable range information for each operator;
Fingerprint collation means for collating fingerprint information read by the fingerprint reading means with fingerprint information stored in the storage means;
When the fingerprint collation unit determines that the fingerprint information read by the fingerprint reading unit matches any of the operator's fingerprint information stored in the storage unit, the person who touched the input key is operated. Control means for authenticating that the operator is permitted and for making an operation based on the operable range information of the operator stored in the storage means operable for a predetermined time ; With
The operation that can be operated by the operation control unit is performed by pressing or touching the input key within the predetermined time, and the fingerprint reading unit is configured to press or touch the input key within the predetermined time. If it is reads the fingerprint information from the press or contact with the finger, the fingerprint collating unit collates said read fingerprint information, and fingerprint information of the authenticated operator, both fingerprints It is determined whether or not the information matches, and the operation control means is made by pressing or touching the input key when the fingerprint collating means determines that the two fingerprint information matches. A supervisory control device characterized by enabling operation.

Images