JP6590763B2 - Power system monitoring and control system - Google Patents

Description

  The present invention relates to a power system monitoring control system that constantly monitors and controls the state of a power system, and in particular, is suitably used in a power system monitoring control system having a configuration in which a plurality of server bases and a plurality of client bases are distributed. It is what

  Conventional power system monitoring and control systems are respectively provided in a plurality of jurisdictions divided into regions, and reliability is ensured by duplicating the system in each jurisdiction. However, in the event of a large-scale disaster, all power system monitoring and control systems within a jurisdiction may become unusable.

  As the above countermeasure, a wide area distributed system based on a wide area IP (Internet Protocol) network is becoming popular. In a wide-area distributed system, a plurality of operation bases (also referred to as client bases) where operators are stationed and server bases where servers that execute monitoring control processing are installed are distributed.

  Since the above wide area distributed system uses a wide area IP network, security enhancement is also required. For example, it is conceivable to apply an authentication method using an authentication switch and an authentication server according to the IEEE 802.1X standard.

  Japanese Patent Laying-Open No. 2008-299782 (Patent Document 1) discloses duplicating an authentication server in order to cope with a system failure or a network failure. Specifically, when the client terminal cannot connect to the authentication server, the client terminal transmits the encrypted authentication information given in advance from the authentication server to the authentication proxy server, and the decrypted authentication information from the authentication proxy server. receive. The client terminal can log in to the business application using this authentication information.

JP 2008-299782 A

  The power system monitoring and control system must be a mission critical system that is required not to stop for 24 hours 365 days. For this reason, when switching from the main system to the backup system when the main system fails, it is necessary to reduce the time during which the client cannot use the system by shortening the switching time as much as possible. However, in the prior art, this shortening of the unavailable time has not been considered.

  The technique disclosed in Patent Document 1 acquires authentication information from an authentication proxy server by a simple method so that login to a business application is possible even when the authentication server goes down. However, when the authentication server goes down while using the business application, it is necessary to receive re-authentication by the authentication proxy server, and the business application cannot be used during the re-authentication.

  The present invention has been made in consideration of the above-described problems, and an object of the present invention is to switch to a backup device when a device in use becomes unusable in a power system monitoring and control system having a redundant authentication system. To reduce the system unusable time.

  The present invention is a power system monitoring and control system, and includes a first server base, a second server base, and a first client base. The first server base includes a first authentication server and a first function server that provides a function of monitoring and controlling the power system. The second server site is connected to the first server site via a wide area network, and includes a second authentication server and a second function server that provides a function of monitoring and controlling the power system. The first client site includes a first authentication switch and a first console that can be connected to the wide area network via the first authentication switch. When the first authentication server recognizes the login authentication request received from the first console through the first authentication switch, the first function server, the first console, The first port for connecting is opened, and the first authenticated information that the first console has been authenticated is notified to the second authentication server. Based on the first authenticated information, the second authentication server causes the first authentication switch to open the second port for connecting the second function server and the first console. Request.

  According to this invention, based on the authenticated information of the first console, the first authentication switch used for connecting the second function server at the second server base and the first console. The port is opened beforehand. Therefore, even when the first server location is unavailable, communication with the second function server can be continued without making a login authentication request to the second authentication server. As a result, the system unusable time can be shortened.

It is a block diagram which shows the structure of the electric power system monitoring control system in one embodiment. It is a figure which shows an example of the user information stored in the user information storage part. It is a figure which shows an example of the authenticated information stored in the authenticated information storage part. It is a flowchart which shows the procedure of login authentication. It is a flowchart which shows the procedure switched to the other authentication switch when one authentication switch between the console of a client base and a server base fails. It is a flowchart which shows the procedure which switches to a sub authentication server when the main authentication server fails. It is a flowchart which shows the procedure which switches to another server base when a server base becomes unusable by a disaster etc. It is a flowchart which shows the procedure of logout.

  Hereinafter, embodiments will be described in detail with reference to the drawings. The same or corresponding parts are denoted by the same reference numerals, and description thereof will not be repeated.

[Configuration of power system monitoring and control system]
FIG. 1 is a block diagram illustrating a configuration of a power system monitoring control system according to an embodiment. Referring to FIG. 1, in the power system monitoring and control system, a plurality of server bases A (100) and B (200) and a plurality of client bases A (300) and B (400) are wide area IP (Internet Protocol). It has the structure mutually connected via the network. In FIG. 1, two server bases 100 and 200 and two client bases 300 and 400 are representatively shown. However, in the power system monitoring and control system, more server bases and client bases have a wide area IP network. You may have the structure connected via.

  The server site A (100) includes authentication servers 110 and 120 and a function server 130. The server site B (200) includes authentication servers 210 and 220 and a function server 230.

  The function server 130 and the function server 230 provide the same function for monitoring and controlling the power system. The hardware resources of the function servers 130 and 230 are the same as those of a general server device. For example, each of the function servers 130 and 230 includes a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), a display device, an input device, a nonvolatile storage device, a communication device, and the like.

  The authentication servers 110 and 120 at the server base A (100) are redundant as two series of dual servers, and are always usable with any authentication server. However, for the purpose of making the state of the authentication server that issues the authentication request permission notification unique, the young authentication server becomes the master and the other authentication server becomes the slave. In the case of FIG. 1, the authentication server 110 becomes a master and the authentication server 120 becomes a slave.

  Similarly, the authentication servers 210 and 220 at the server base B (200) are made redundant as two series of dual servers, and are always usable with any of the authentication servers. However, in the case of FIG. 1, the authentication server 210 is a master and the authentication server 220 is a slave.

  The hardware resources of the authentication servers 110, 120, 210, and 220 are the same as those of a general server device. For example, each of the authentication servers 110, 120, 210, and 220 includes a CPU, a RAM, a ROM, a display device, an input device, a nonvolatile storage device, a communication device, and the like.

  Functionally, the authentication server 110 includes a user information storage unit 111 that stores user information, an authenticated information storage unit 113 that stores authenticated information, and an authentication processing unit 112. The user information storage unit 111 and the authenticated information storage unit 113 correspond to, for example, a storage area of the above storage device. The authentication processing unit 112 corresponds to the above CPU, and executes authentication processing according to a program when a login authentication request is received from a client site.

  Other authentication servers 120 have the same functional configuration. That is, the authentication server 120 includes a user information storage unit 121, an authenticated information storage unit 123, and an authentication processing unit 122. The authentication server 210 includes a user information storage unit 211, an authenticated information storage unit 213, and an authentication processing unit 212. The authentication server 220 includes a user information storage unit 221, an authenticated information storage unit 223, and an authentication processing unit 222.

  FIG. 2 is a diagram illustrating an example of user information stored in the user information storage unit. Referring to FIG. 1 and FIG. 2, user information storage units 111, 121, 211, and 221 are user information input by the user when the corresponding authentication processing units 112, 122, 212, and 222 perform authentication processing, respectively. User information for matching with (for example, a combination of a user name and a password) is stored in advance. In the example of FIG. 2, the identification number of the console provided at the client site, and the user name and password of the console are stored in advance in the user information storage unit 111. The information stored in the user information storage units 111, 121, 211, and 221 matches each other. When the user information is updated, the user information storage units 111, 121, 211, and 221 of all authentication servers are updated.

  FIG. 3 is a diagram illustrating an example of authenticated information stored in the authenticated information storage unit. Referring to FIGS. 1 and 3, authenticated information storage units 113, 123, 213, and 223 are authenticated when any of authentication processing units 112, 122, 212, and 222 performs login authentication. Stores information about connected consoles. The information stored in the authenticated information storage units 113, 123, 213, and 223 is the same. In the example of FIG. 3, the client base identification name and the console identification number are stored in the authenticated information storage units 113, 123, 213, and 223. When any of the consoles logs out, the information on the console is deleted from all the authenticated information storage units 113, 123, 213, and 223.

  Referring to FIG. 1 again, the client site A (300) includes an operation console 301 and authentication switches 311 and 312. The client site B (400) includes an operation console 401 and authentication switches 411 and 412. The consoles 301 and 401 include a display device, an input device, a CPU, a communication device, and the like.

  The console 301 can be connected to the wide area IP network 10 via the authentication switch 311 or 312 and can be connected to the server bases 100 and 200 connected to the wide area IP network 10. The console 401 can be connected to the wide area IP network 10 via the authentication switch 411 or 412, and can be connected to the server bases 100 and 200 connected to the wide area IP network 10.

  Each of the authentication switches 311, 312, 411, 412 includes a plurality of ports for connecting the corresponding console and the wide area IP network 10. Normally these ports are closed and the console cannot communicate. Each of the authentication switches 311, 312, 411 and 412 opens the corresponding port and permits communication only when permission from the authentication server is obtained.

  When the authentication is permitted, the console 301 automatically checks the health of the function servers 130 and 230 via the authentication switches 311 and 312 for the purpose of detecting a faulty part. Further, the console 301 periodically polls the authentication server that permits the authentication via the authentication switches 311 and 312. Similarly, when the authentication is permitted, the console 401 performs health checks on the function servers 230 and 130 via the authentication switches 411 and 412 for the purpose of detecting a failure part. Further, the console 401 periodically polls the authentication server permitted for authentication via the authentication switches 411 and 412.

[Login authentication procedure]
Next, a login authentication procedure performed from the console 301 of the client site A (300) will be described. FIG. 4 is a flowchart showing a login authentication procedure.

  Referring to FIGS. 1 and 4, when the user uses console 301 during normal operation of the power system monitoring control system, the user inputs the user name and password to console 301. The console 301 transmits the user name and password input by the user to the authentication switch 311 and makes a login authentication request to the authentication switch 311 (step S100). The authentication switch 311 inquires of the authentication server 110, which is the master, whether to accept the authentication request (step S110).

  The authentication server 110 collates the user name and password requested for authentication with the contents of the user information storage unit 111 (step S120). If the verification is successful, the authentication server 110 notifies the authentication switch 311 of authentication success (step S121). Upon receiving this authentication success notification, the authentication switch 311 opens the port α for connecting the console 301 to the authentication server 110 and the function server 130 (step S111). Thereby, the console 301 can communicate with the function server 130 of the server base A (100) via the port α of the authentication switch 311.

  At this time, in preparation for the failure of the communication route via the authentication switch 311, the authentication server 110 notifies the authentication switch 312 of successful authentication (step S 121). Upon receiving this notification of successful authentication, the authentication switch 312 opens the port ε for connecting the console 301, the authentication server 110, and the function server 130 (step S111). Thereby, the console 301 can communicate with the function server 130 of the server base A (100) via the port ε of the authentication switch 312.

  Next, when the authentication processing unit 112 of the authentication server 110 authenticates the console 301, the authenticated information X that the console 301 has been authenticated is written in the authenticated information storage unit 113 and the authentication server 120 has been authenticated. The information is also written in the information storage unit 123 (step S122). Further, the authentication processing unit 112 of the authentication server 110 transmits the authenticated information X of the console 301 via the wide area IP network 10 to the authentication processing unit 212 of the authentication server 210 (step S123).

  The authentication processing unit 212 of the authentication server 210 writes the authenticated information X of the console 301 received from the authentication processing unit 112 in the authenticated information storage unit 213 and also writes it in the authenticated information storage unit 223 of the authentication server 220 (step) S140).

  When the authenticated information storage unit 123 is updated, the authentication server 120 at the server site A (100) connects to the console 301 to the authentication switches 311 and 312 based on the newly stored authenticated information X. Requesting the opening of the port to be performed (step S130). Thereby, the authentication switch 311 opens the port β for connecting the console 301 to the authentication server 120 and the function server 130 (step S112). The authentication switch 312 opens the port ζ for connecting the console 301 to the authentication server 120 and the function server 130 (step S112).

  When the authenticated information storage unit 213 is updated, the authentication server 210 at the server base B (200) connects to the console 301 with respect to the authentication switches 311 and 312 based on the newly stored authenticated information X. Requesting the opening of the port for this (step S141). Thereby, the authentication switch 311 opens the port γ for connecting the console 301 to the authentication server 210 and the function server 230 (step S113). The authentication switch 312 opens the port η for connecting the console 301 to the authentication server 210 and the function server 230 (step S113).

  When the authenticated information storage unit 223 is updated, the authentication server 220 at the server site B (200) is connected to the console 301 with respect to the authentication switches 311 and 312 based on the newly stored authenticated information X. Requesting the opening of the port to be performed (step S150). Thereby, the authentication switch 311 opens the port δ for connecting the console 301, the authentication server 220, and the function server 230 (step S114). The authentication switch 312 opens the port θ for connecting the console 301, the authentication server 220, and the function server 230 (step S114).

  The same applies to the case where the console 401 is used. In this case, in the above description, the information related to the client base A (300) is replaced with the information related to the client base B (400), and the information related to the server base A (100) is replaced with the information related to the server base B (200). Specifically, it is as follows.

  When the user uses the console 401 during normal operation of the power system monitoring control system, the user inputs a user name and password to the console 401. The console 401 transmits the user name and password input by the user to the authentication switch 411 and makes a login authentication request to the authentication switch 411. The authentication switch 411 inquires of the authentication server 210 as a master whether to accept the authentication request.

  The authentication server 210 collates the user name and password requested for authentication with the contents of the user information storage unit 211. If the verification is successful, the authentication server 210 notifies the authentication switch 411 that the authentication is successful. Upon receiving this authentication success notification, the authentication switch 411 opens the port α for connecting the console 401 to the authentication server 210 and the function server 230. Thereby, the console 401 can communicate with the function server 230 of the server base B (200) via the port α of the authentication switch 411.

  At this time, in preparation for the failure of the communication route via the authentication switch 411, the authentication server 210 notifies the authentication switch 412 of successful authentication. Upon receiving this authentication success notification, the authentication switch 412 opens a port ε for connecting the console 401 to the authentication server 210 and the function server 230. Thereby, the console 401 can communicate with the function server 230 of the server base B (200) via the port ε of the authentication switch 412.

  Next, when the authentication processing unit 212 of the authentication server 210 authenticates the console 401, the authentication information Y that the console 401 has been authenticated is written in the authenticated information storage unit 213 and the authentication server 220 has been authenticated. The information is also written in the information storage unit 223. Further, the authentication processing unit 212 of the authentication server 210 transmits the authenticated information Y of the console 401 to the authentication processing unit 112 of the authentication server 110 via the wide area IP network 10.

  The authentication processing unit 112 of the authentication server 110 writes the authenticated information Y of the console 401 received from the authentication processing unit 212 in the authenticated information storage unit 113 and also writes it in the authenticated information storage unit 123 of the authentication server 120.

  When the authenticated information storage unit 223 is updated, the authentication server 220 at the server base B (200) is connected to the console 401 with respect to the authentication switches 411 and 412 based on the newly stored authenticated information Y. Request the opening of the port to do. As a result, the authentication switch 411 opens the port β for connecting the console 401 to the authentication server 220 and the function server 230. The authentication switch 412 opens a port ζ for connecting the console 401 to the authentication server 220 and the function server 230.

  When the authenticated information storage unit 113 is updated, the authentication server 110 at the server site A (100) connects to the console 401 with respect to the authentication switches 411 and 412 based on the newly stored authenticated information Y. Request the opening of the port to do. As a result, the authentication switch 411 opens the port γ for connecting the console 401 to the authentication server 110 and the function server 130. The authentication switch 412 opens a port η for connecting the console 401 to the authentication server 110 and the function server 130.

  When the authenticated information storage unit 123 is updated, the authentication server 120 at the server site A (100) connects to the console 401 with respect to the authentication switches 411 and 412 based on the newly stored authenticated information Y. Request the opening of the port to do. As a result, the authentication switch 411 opens the port δ for connecting the console 401 to the authentication server 120 and the function server 130. The authentication switch 412 opens a port θ for connecting the console 401 to the authentication server 120 and the function server 130.

[Operation at failure]
Next, a procedure for switching to a slave device when the main device fails will be described.

(1. If one authentication switch fails)
FIG. 5 is a flowchart showing a procedure for switching to the other authentication switch when one authentication switch between the console at the client site and the server site fails.

  Referring to FIG. 1 and FIG. 5, first, as a premise, a logon authentication request is transmitted from the console 301 of the client site A (300) to the authentication switch 311 (step S200), and the authentication server of the server site A (100). 110 assumes that the console 301 has been authenticated. As a result, the authentication switches 311 and 312 open the port α and the port ε, respectively (step S205).

  The console 301 communicates with the function server 130 via the port α of the authentication switch 311 (step S210). Furthermore, the console 301 periodically polls the authentication server 110 via the port α of the authentication switch 311 and the port ε of the authentication switch 312 (step S215). If there is a response to polling via any of the authentication switches 311 and 312 (NO in step S220), communication of the function server 130 (step S210) and periodic polling (step S215) are performed. Will continue.

  On the other hand, when there is no response from the authentication server 110 only for the communication path via the authentication switch 311 (YES in step S220), the console 301 has failed in the communication path via the authentication switch 311 or the authentication switch 311. Judge. In this case, the console 301 attempts to communicate with the function server 130 using the port ε of the authentication switch 312. The console 301 has already been authenticated, and the port ε of the authentication switch 312 for connecting the console 301 to the authentication server 110 and the function server 130 is open. Therefore, the console 301 can communicate with the function server 130 without making an authentication request to the authentication server 110 again via the authentication switch 312 (step S225).

  The same applies when the communication path via the authentication switch 411 or the authentication switch 412 at the client site B (400) fails. In this case, the console 401 attempts to communicate with the function server 230 using the port ε of the authentication switch 412. The console 401 has already been authenticated, and the port ε of the authentication switch 412 for connecting the console 401 to the authentication server 210 and the function server 230 is open. Therefore, the console 401 can communicate with the function server 230 without making an authentication request to the authentication server 210 again via the authentication switch 412.

(2. When the main authentication server fails)
FIG. 6 is a flowchart showing a procedure for switching to the sub authentication server when the main authentication server fails.

  Referring to FIG. 1 and FIG. 6, first, as a premise, a logon authentication request is transmitted from the console 301 of the client site A (300) to the authentication switch 311 (step S300), and the main of the server site A (100). It is assumed that the authentication server 110 authenticates the console 301. As a result, the authentication switches 311 and 312 open the port α and the port ε, respectively (step S305).

  Furthermore, the slave authentication server 120 requests opening of the ports of the authentication switches 311 and 312 based on the authenticated information of the console 301. Authentication switches 311 and 312 open ports β and ζ, respectively (step S310).

  The console 301 communicates with the function server 130 via the port α of the authentication switch 311 (step S315). Furthermore, the console 301 periodically polls the authentication server 110 via the port α of the authentication switch 311 and the port ε of the authentication switch 312 (step S320). If there is a response to polling via any of the authentication switches 311 and 312 (NO in step S325), communication of the function server 130 (step S315) and periodic polling (step S320) are performed. Will continue.

  On the other hand, when there is no response from the authentication server 110 through any of the communication paths via the authentication switches 311 and 312 (YES in step S325), the console 301 determines that the main authentication server 110 has failed. . In this case, the slave authentication server 120 becomes the master, and the console 301 attempts to communicate with the function server 130 using the port β (ζ) of the authentication switch 311 (312). The ports β and ζ of the authentication switches 311 and 312 for connecting the console 301 to the authentication server 120 and the function server 130 have already been opened. Therefore, the console 301 can communicate with the function server 130 without making an authentication request to the authentication server 120 again via the authentication switch 311 (step S330).

  The same applies when the main authentication server 210 at the client site B (400) fails. In this case, the slave authentication server 220 becomes the master, and the console 401 attempts to communicate with the function server 230 using the port β (ζ) of the authentication switch 411 (412). The ports β and ζ of the authentication switches 411 and 412 for connecting the console 401 to the authentication server 220 and the function server 230 have already been opened. Therefore, the console 401 can communicate with the function server 230 without making an authentication request to the authentication server 220 again via the authentication switch 411.

(3. When server site A becomes unusable due to a disaster, etc.)
FIG. 7 is a flowchart showing a procedure for switching to another server base when the server base becomes unusable due to a disaster or the like.

  Referring to FIGS. 1 and 7, first, as a premise, a logon authentication request is transmitted from operation console 301 of client site A (300) to authentication switch 311 (step S400), and an authentication server at server site A (100). 110 assumes that the console 301 has been authenticated. As a result, the authentication switches 311 and 312 open the port α and the port ε, respectively (step S405).

  Further, the authentication server 210 at the server base B (200) requests opening of the ports of the authentication switches 311 and 312 based on the authenticated information of the console 301. Authentication switches 311 and 312 open ports γ and η, respectively (step S410).

  The console 301 communicates with the function server 130 via the authentication switch 311 or the authentication switch 312 (step S415). Thereafter, it is assumed that the console 301 cannot communicate with any of the authentication servers 110 and 120 and the function server 130 because the server base A (100) is damaged (YES in step S420).

  In this case, the console 301 attempts to communicate with the function server 230 of the server base B (200) using the port γ (η) of the authentication switch 311 (312). The ports γ and η of the authentication switches 311 and 312 for connecting the console 301 to the authentication server 210 and the function server 230 have already been opened. Therefore, the console 301 can communicate with the function server 130 without making an authentication request to the authentication server 210 again via the authentication switch 311 (step S425).

  The same applies when communication between the console 401, the authentication servers 210 and 220, and the function server 230 becomes impossible due to the disaster at the server site B (200). In this case, the console 401 uses the port γ (η) of the authentication switch 411 (412) to attempt communication with the function server 130 at the server base A (100). The ports γ and η of the authentication switches 411 and 412 for connecting the console 401 to the authentication server 110 and the function server 130 have already been opened. Therefore, the console 401 can communicate with the function server 130 without making an authentication request to the authentication server 110 again via the authentication switch 411.

[Logout procedure]
Next, a logout procedure performed from the console 301 of the client site A (300) will be described. FIG. 8 is a flowchart showing a logout procedure.

  Referring to FIGS. 1 and 8, console 301 makes a logout request to authentication switch 311 when the use of the application provided by the function server is finished (step S500). Upon receiving a logout request from the console 301, the authentication switch 311 issues a logout request to the authentication server 110 at the server site A (100) (step S510).

  The authentication processing unit 112 of the authentication server 110 deletes the authenticated information X of the console 301 from the authenticated information storage unit 113 and the authenticated information X of the console 301 from the authenticated information storage unit 123 of the authentication server 120. Delete (step S520). Further, the authentication processing unit 112 requests the authentication switches 311 and 312 to close the ports α and ε for connecting to the console 301 (step S521). In accordance with this port closing request, the authentication switches 311 and 312 close the ports α and ε, respectively (step S511).

  When the authenticated information X is deleted from the authenticated information storage unit 123, the authentication processing unit 122 of the authentication server 120 closes the ports β and ζ for connecting the authentication switch 311 and 312 with the console 301. A request is made (step S530). In accordance with this port closing request, the authentication switches 311 and 312 close the ports β and ζ, respectively (step S511).

  Further, the authentication processing unit 112 of the authentication server 110 transmits a request for deleting the authenticated information X of the console 301 to the authentication processing unit 212 of the authentication server 210 via the wide area IP network 10 (step S522). When the authentication processing unit 212 of the authentication server 210 receives the request for deleting the authenticated information X of the console 301, it deletes the authenticated information X of the console 301 from the authenticated information storage units 213 and 223 (step S540). Further, the authentication processing unit 212 of the authentication server 210 requests the authentication switches 311 and 312 to close the ports γ and η for connection to the console 301 (step S541). In accordance with this port closing request, authentication switches 311 and 312 close ports γ and η, respectively (step S512).

  When the authenticated information X is deleted from the authenticated information storage unit 223, the authentication processing unit 222 of the authentication server 220 closes the ports δ and θ for connecting the authentication switches 311 and 312 with the console 301. A request is made (step S550). In accordance with this port closing request, authentication switches 311 and 312 close ports δ and θ, respectively (step S512).

  Since the procedure similar to the above is performed when the console 401 requests logout, detailed description will not be repeated. In this case, in the above description, the information related to the client base A (300) is replaced with the information related to the client base B (400), and the information related to the server base A (100) is replaced with the information related to the server base B (200).

[effect]
According to the power system monitoring and control system configured as described above, any damage to the server base, a failure of the authentication server, a LAN (Local Area Network) failure in the server base, or a failure of the authentication switch occurs. The operation of the power system monitoring and control system can be continued while maintaining the security state. As a result, it is possible to reduce the time during which the client cannot use the system at the time of the failure.

[Appendix]
The correspondence between the terms in the above embodiment and the terms in the claims will be described.

  The server base A (100), the server base B (200), and the client base A (300) correspond to the first server base, the second server base, and the first client base, respectively. The authentication server 110, the authentication server 120, and the function server 130 correspond to a first authentication server, a first slave authentication server, and a first function server, respectively. The authentication server 210, the authentication server 220, and the function server 230 correspond to a second authentication server, a second slave authentication server, and a second function server, respectively. The console 301, the authentication switch 311 and the authentication switch 312 correspond to the first console, the first authentication switch, and the second authentication switch, respectively. The authenticated information X corresponds to the first authenticated information. Port α, port γ, port β, port δ, port ε, port η, and port ζ correspond to the first to seventh ports, respectively.

  The embodiment disclosed this time must be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

  10 wide area IP network, 100, 200 server base, 110, 120, 210, 220 authentication server, 111, 121, 211, 221 user information storage unit, 112, 122, 212, 222 authentication processing unit, 113, 123, 213 223 Authenticated information storage unit, 130, 230 Function server, 300, 400 Client base, 301, 401 Console, 311, 312, 411, 412 Authentication switch, X, Y Authenticated information.

Claims (6)

A first server base comprising a first authentication server and a first function server providing a function of monitoring and controlling the power system;
A second server base connected to the first server base via a wide area network, comprising a second authentication server; and a second functional server for providing a function of monitoring and controlling the power system; and A first client base comprising a first authentication switch and a first console that can be connected to the wide area network via the first authentication switch;
When the first authentication server recognizes a login authentication request received from the first console via the first authentication switch, the first function server and the first authentication server are connected to the first authentication switch. Opening the first port for connecting to the first console, and notifying the second authentication server of the first authenticated information that the first console is authenticated;
The second authentication server opens the second port for connecting the second functional server and the first console based on the first authenticated information. A power system monitoring and control system required for one authentication switch. The first server base further includes a first slave authentication server that operates as a slave with respect to the first authentication server that operates as a master,
Based on the first authenticated information, the first slave authentication server opens the third port for connecting the first function server and the first console. The power system monitoring and control system according to claim 1, wherein the power system monitoring and control system is requested to the first authentication switch. The second server base further includes a second slave authentication server that operates as a slave with respect to the second authentication server that operates as a master,
The second slave authentication server opens the fourth port for connecting the second function server and the first console based on the first authenticated information. The power system monitoring control system according to claim 2, wherein the power system monitoring control system requests the first authentication switch. The first client site further comprises a second authentication switch;
The first console can be connected to the wide area network via the second authentication switch,
When the first authentication server recognizes a login authentication request received from the first console via the first authentication switch, the first authentication server connects the first function server and the first console. Requesting the second authentication switch to open a fifth port for
The second authentication server opens the sixth port for connecting the second function server and the first console based on the first authenticated information. 2 to the authentication switch,
Based on the first authenticated information, the first slave authentication server opens the seventh port for connecting the first function server and the first console. The power system monitoring and control system according to claim 2, which also requests the second authentication switch. The first console polls to the first authentication server by using the path through each of the first and second authentication switch,
When there is no response to the polling from the first authentication server for the route via either the first or second authentication switch, the first console is configured to perform the above-described operation of the first authentication switch. 5. The power system monitoring and control system according to claim 4, wherein communication with the first function server is continued using a third port or the seventh port of the second authentication switch.   When the first console is unable to communicate with the first authentication server, the first slave authentication server, and the first function server, the first authentication switch The power system monitoring and control system according to claim 5, wherein communication with the second function server is started using the second port or the sixth port of the second authentication switch.

Images