Information transmission system, information transmission method, and information transmission program

Abstract

To provide an information transmission system, an information transmission method, and an information transmission program that are capable of transmitting information from a first network to a second network while preventing the intrusion of malware, etc.SOLUTION: An information transmission system according to the present invention is an information transmission system that transmits information between a first network and a second network, and includes a first display unit connected to the first network and displaying a first image indicating first information to be transmitted to the second network, a first photographing unit connected to the second network and photographing the first image displayed on the first display unit, and a first information acquisition unit connected to the second network and acquiring the first information from the first image photographed by the first photographing unit.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present invention relates to an information transmission system, an information transmission method, and an information transmission program for transmitting information between a first network and a second network.

Background Art

[0002] Patent Document 1 discloses a remote management system that enables secure and efficient remote management of a management target device connected to a closed network such as an in-company LAN via a wide area network such as the Internet.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] However, in the system of Patent Document 1, since the management target device is remotely operated from an external device via the Internet, there is a risk that malware or the like may intrude from the outside via the Internet. The present invention has been made to solve this problem, and an object thereof is to provide an information transmission system, an information transmission method, and an information transmission program capable of transmitting information from a first network to a second network while preventing intrusion of malware or the like.

Means for Solving the Problems

[0005] The information transmission system according to the present invention is an information transmission system that transmits information between a first network and a second network, and comprises: a first display unit connected to the first network and displaying a first image indicating first information to be transmitted to the second network; a first imaging unit connected to the second network and capturing the first image displayed on the first display unit; and a first information acquisition unit connected to the second network and acquiring the first information from the first image captured by the first imaging unit.

[0006] The information transmission method according to the present invention is an information transmission method for transmitting information between a first network and a second network, comprising: in the first network, converting first information to be transmitted to the second network into a first image; displaying the first image on a first display unit connected to the first network; in the second network, capturing the first image displayed on the first display unit; and in the second network, acquiring the first information from the captured first image.

[0007] The information transmission program according to the present invention is an information transmission program that transmits information between a first network and a second network, and causes a computer connected to the first network to perform the steps of converting first information to be transmitted to the second network into a first image in the first network and displaying the first image on a first display unit connected to the first network, and causes a computer connected to the second network to perform the steps of capturing the first image displayed on the first display unit using a first imaging unit connected to the second network and acquiring the first information from the first image captured by the first imaging unit in the second network. [Effects of the Invention]

[0008] According to the present invention, information can be transmitted from the first network to the second network while preventing the intrusion of malware and the like.

Brief Description of the Drawings

[0009] [Figure 1] It is a schematic configuration diagram of a plant system including an information transmission system according to the first embodiment of the present invention. [Figure 2] It is a schematic configuration diagram of a plant system including an information transmission system according to the second embodiment of the present invention.

Modes for Carrying Out the Invention

[0010] <A. First Embodiment> Hereinafter, a first embodiment of a plant system including an information transmission system according to the present invention will be described with reference to the drawings. The plant system according to this embodiment includes a water treatment plant 1 having at least one piece of equipment, and a remote operation facility 2 for controlling the equipment of the plant 1 from the outside. The remote operation facility 2 is disposed outside the plant 1. Therefore, the first network line 23 provided in the remote operation facility 2 and the second network line 11 provided in the plant 1 are connected via the information transmission system described in each embodiment. This connection suppresses the intrusion of malware into the second network line 11 and ensures the security of the second network line 11. Hereinafter, the plant 1 and the remote operation facility 2 will be described.

[0011] <1. Remote Operation Facility> FIG. 1 is a schematic configuration diagram of a plant system according to the first embodiment. As shown in FIG. 1, the remote operation facility 2 includes an operation terminal 21 for remotely operating the plant 1, a first hub 22, and a first network line 23 connecting the operation terminal 21 and the first hub 22. The operation terminal 21 is composed of a general-purpose computer such as a personal computer or a dedicated computer, and includes a display unit such as a display and an input unit such as a keyboard.

[0012] The operating terminal 21 can, for example, operate various pieces of equipment 10 such as pumps installed in Plant 1. For example, it can issue pump operation commands, pump stop commands, set pump rotation speeds, and set pump operation reservations. Operation reservation settings refer to settings that would normally be performed every hour over a 24-hour period, but are set all at once. The signals used to operate and control these various pieces of equipment 10 installed in Plant 1 are collectively referred to as control signals (first information).

[0013] Furthermore, when the operating terminal 21 receives the aforementioned control signal through the operator's operation, it converts it into first image data showing a first image such as a QR code (registered trademark) or a barcode. The first image data is not limited to QR codes (registered trademark), etc., but may also be data related to various images, such as an image showing a control signal or an image in which the control signal has been encrypted. For example, characters, symbols, figures, etc., that show a control signal can be used as images as they are. Also, encrypted image data is acceptable as long as it can be decrypted into a control signal as described later.

[0014] The first network line 23 is a line for bidirectional communication between the operating terminal 21 and the first hub 22. Although not shown in Figure 1, in addition to the operating terminal 21, at least one other device, such as an operating terminal, can also be connected to the first network line 23 via the router 24.

[0015] The first hub 22 is connected to a first projector (first display unit) 25 and a first camera (second shooting unit) 26. The first projector 25 displays the first image generated by the operation terminal 21. The first camera 26 captures the second image displayed on the second projector 17 installed in plant 1, as will be described later.

[0016] The images captured by the first camera 26 are decoded into various types of information on the operation terminal 21, as described later, and displayed on the operation terminal 21.

[0017] <2. Plant> As shown in FIG. 1, the plant 1 includes a second network line 11, to which a second hub 12, an information conversion device 13, an operation terminal 14, a server 15, a controller 16, etc. are electrically connected. Further, equipment 10 such as a pump is electrically connected to the controller 16. A second projector (second display unit) 17 and a second camera (first photographing unit) 18 are connected to the second hub 12. These second projector 17 and second camera 18 may have the same configuration as the first projector 25 and the first camera 26, respectively.

[0018] The second projector 17 is arranged to face the first camera 26 of the remote operation facility 2 at a predetermined interval. Thereby, the second image displayed on the second projector 17 is photographed by the first camera 26. On the other hand, the second camera 18 is arranged to face the first projector 25 of the remote operation facility 2 at a predetermined interval. Thereby, the first image displayed on the first projector 25 is photographed by the second camera 18. The photographed first image is transmitted to the information conversion device 13 as first image data.

[0019] The controller 16 is a computer that controls various devices, equipment, etc. included in the plant 1. For example, based on a control command from the remote operation facility 2, it drives the equipment 10. Further, it monitors the states of various devices, equipment, etc. included in the plant 1 and transmits those states to the remote operation facility 2. In addition, it can also transmit various information requested from the remote operation facility 2 to the remote operation facility 2.

[0020] The operation terminal 14 is configured by a general-purpose computer such as a personal computer or a dedicated computer, similar to the operation terminal 21 of the remote operation facility 2, and includes a display unit such as a display and an input unit such as a keyboard.

[0021] The operation terminal 14 is a terminal operated by the plant worker. Similar to the operation terminal 21, for example, it controls various devices and facilities included in the plant 1. That is, by the worker operating the operation terminal 14, various controls can be performed in place of the controller 16. For example, in addition to transmitting various information such as the state of the pump to the remote operation facility 2, the pump can also be operated similar to the controller 16. Also, various information and commands transmitted from the remote operation facility 2 can be viewed.

[0022] The server 15 stores various information within the plant 1, such as the operating state of the pump. The information stored in the server 15 is read out by the controller 16, and based on this, the facility 10 can be controlled. Also, the information stored in the server 15 can be read out via the operation terminal 14 and transmitted to the remote operation facility 2.

[0023] As described above, information such as the states of various devices and facilities transmitted from the controller 16 or the operation terminal 14 to the remote operation facility 2 shall be referred to as state information (second information).

[0024] The above-described information conversion device 13 converts the state information into second image data indicating a second image and displays it on the second projector 17. Since the conversion to an image is the same as that of the remote operation facility 2, the description is omitted. Also, the information conversion device 13 receives the first image data captured by the second camera 18 and obtains a control command by decrypting this. The control command is transmitted to the controller 16 and the operation terminal 14. The controller 16 controls the facility 10 within the plant 1 according to the control command.

[0025] Note that the distance between the first projector 25 and the second camera 18 is not particularly limited, as long as the image displayed on the first projector 25 is within a distance recognizable by the second camera 18. This also applies to the second projector 17 and the first camera 26.

[0026] Furthermore, programs for transmitting information between the remote control facility 2 and plant 1, as described below, are stored in both the remote control facility 2 and plant 1, respectively, and information is transmitted by executing these programs.

[0027] <3. Operation of the plant system> Next, an example of the operation of the plant system configured as described above will be explained. For example, when an operation command for the pump of plant 1 is entered into the operation terminal 21 of the remote control facility 2, the control command is converted into first image data. When this first image data is transmitted to the first projector 25, the first projector 25 displays the first image. This first image is captured by the second camera 18 of plant 1 and then converted into first image data. The first image data is transmitted to the information conversion device 13 and then decoded into a control command. That is, a control signal indicating an operation command for the pump is generated. This control signal is transmitted to the controller 16. When the controller 16 receives the control signal, it operates the pump based on this control signal.

[0028] Next, we will explain the case where information is requested from the remote control facility 2 to the plant 1. For example, when the operation terminal 21 requests the rotation speed of a pump in operation, the control signal related to that request is converted into first image data. This first image data is transmitted to the first projector 25, and the first image is displayed on the first projector 25. The displayed first image is captured by the second camera 18 of the plant 1, then transmitted to the information conversion device 13, where it is decoded into a control signal. That is, a control signal requesting the rotation speed of the pump in operation is generated and transmitted to the controller 16. Based on the control signal, the controller 16 obtains the rotation speed of the pump in operation and transmits a status signal indicating the rotation speed to the information conversion device 13. The information conversion device 13 converts the status signal indicating the rotation speed into second image data indicating the second image. When this second image data is transmitted to the second projector 17, the second projector 17 displays the second image. This second image is captured by the first camera 26 of the remote control facility 2. The captured second image is converted into second image data, transmitted to the operation terminal 21, and then decoded into information indicating the rotation speed. The decoded rotation speed is displayed on the operation terminal 21.

[0029] Furthermore, an operator can operate the control terminal 14 and transmit the rotation speed of the pump in operation to the remote control facility 2. In this case, a status signal indicating the pump's rotation speed is transmitted to the information conversion device 13 and converted into second image data. The subsequent processing is the same as described above and is therefore omitted.

[0030] Furthermore, the information transmitted from Plant 1 to the remote control facility 2 can include information indicating the status of various equipment 10, servers 15, controllers 16, and operating terminals 14, in addition to the pump rotation speed, such as the pump's operating status.

[0031] <4. Features> With the above configuration, the following effects can be obtained. (1) In the above plant system, the operation terminal 21 of the remote control facility 2 generates a first image, such as a QR code (registered trademark), which indicates a control signal, and this first image is displayed on the first projector 25. The displayed first image is then captured by the second camera 18 of plant 1, decoded into a control signal, and used to control the equipment 10 of plant 1. Similarly, a second image, which indicates a status signal generated in plant 1, is displayed on the second projector 17 and then captured by the first camera 26 of the remote control facility 2. The second image is then decoded into a status signal, and information indicating the status of the equipment 10 is displayed on the operation terminal 21.

[0032] As described above, the remote control terminal 21 of the remote control facility 2 generates a first image for communication, such as a QR code (registered trademark), and transmits it via the projector 25 and camera 18, thereby operating various equipment and facilities such as pumps installed in the plant 1 from the remote control facility 2.

[0033] If any device within the first network line 23 (for example, the router 24, the operating terminal 21, or any other terminal besides the operating terminal 21) becomes infected with malware, the infection will spread throughout the first network line 23. However, most malware is not designed to be transmitted via special methods such as image-based transmission of QR codes (registered trademark). In other words, most of this malware cannot convert its own data (so-called virus code) into an image such as a QR code (registered trademark) for communication and transmit it via the projector 25 and camera 18. Therefore, the malware cannot penetrate the second network line 11 of Plant 1, and as a result, infection within the second network line 11 (Plant 1) can be suppressed.

[0034] In this embodiment, although the configuration responsible for generating images such as QR codes (for example, other than the operating terminal 21) needs to be equipped with the latest measures to prevent malware infection, even if malware countermeasures are neglected on other terminal devices within the first network line 23, the damage can be kept to a minimum.

[0035] Note that preferably, the second network line 11 included in the plant 1 has only the camera 18 and the projector 17 as communication interfaces with the outside, and it should not be possible to communicate by other methods, so that data transmission and reception are not possible. In this case, unauthorized access from the outside is limited, and the intrusion of malware can be suppressed. However, it does not prevent the provision of other communication means to each network line for communication.

[0036] As described above, even if the first network line 23 of the remote operation facility 2 and the second network line 11 of the plant 1 are not connected by a network line or the like, the above-described data transmission and reception are possible. On the other hand, since both perform transmission and reception using the above-described images, the plant 1 can be prevented from being externally operated or invaded by malware or the like.

[0037] (2) To prevent the intrusion of malware or the like, security measures such as a firewall can be considered, but there is a problem that it places a load on software updates and operation. In contrast, in the above plant system, since such a load is not imposed, it is advantageous, for example, in terms of cost.

[0038] (3) In the above plant system, since information is transmitted through image display and photography, the transmission speed may be slower than data transmission and reception by a line. However, in the operation command of a pump or the acquisition of the rotation speed of a pump as in the above example, although it is preferable that the transmission speed is fast, it is often not required to transmit information immediately. Therefore, the above plant system is suitable for such information transmission.

[0039] <B. Second Embodiment> Next, a second embodiment of the information transmission system according to the present invention and a plant system including the same will be described with reference to the drawings. Hereinafter, mainly the differences from the first embodiment will be described, and the same components will be denoted by the same reference numerals and the description thereof will be omitted.

[0040] <1. Overview of the Plant System> Figure 2 is a schematic diagram of the plant system according to the second embodiment. In the first embodiment, the second image is displayed on the second projector 17, but in the second embodiment, a second operation terminal 19 is placed instead, and this second operation terminal 19 is connected to the second network line 11. The second operation terminal 19 is composed of a general-purpose computer such as a personal computer or a dedicated computer, and is equipped with a display unit such as a display and an input unit such as a keyboard. The display unit displays various information related to the plant, such as information for operating the second operation terminal 19, plant operation, and management information. The display unit of the second operation terminal 19 is positioned to face the first camera 26 of the remote control facility 2 at a predetermined distance. Furthermore, this second operation terminal 19 has the same functions as the information conversion device 13 shown in the first embodiment. For this reason, the second camera 18 is connected to the second operation terminal 19.

[0041] <2. Operation of the plant system> The plant system according to the second embodiment operates as follows. For example, when an operation command for the pump of plant 1 is input to the operation terminal 21 of the remote control facility 2, the control command is converted into first image data. When this first image data is transmitted to the first projector 25, the first projector 25 displays the first image. This first image is captured by the second camera 18 of plant 1 and then converted into first image data. The first image data is transmitted to the second operation terminal 19 and decoded into a control command. Subsequently, this control signal is transmitted to the controller 16, and the pump is operated.

[0042] Next, the case where information is requested from the remote operation facility 2 to the plant 1 will be described. For example, when the rotational speed of a pump during operation is requested on the operation terminal 21, a control signal regarding the request is converted into first image data. This first image data is transmitted to the first projector 25, and a first image is displayed. The displayed first image is photographed by the second camera 18 of the plant 1, then transmitted to the second operation terminal 19, and decoded into a control signal. When the controller 16 receives this control signal, the controller 16 acquires the rotational speed of the pump during operation based on the control signal, and transmits a status signal indicating the rotational speed to the second operation terminal 19. The second operation terminal 19 displays the rotational speed of the pump on the display unit based on this status signal. The displayed rotational speed of the pump is photographed by the first camera 26 of the remote operation facility 2, and this is acquired as image data. This image data is transmitted to the operation terminal 21. On the operation terminal 21, the rotational speed of the pump included in the image data is extracted and displayed as text data. Alternatively, the photographed image can also be displayed on the operation terminal 21.

[0043] In this embodiment, although the second operation terminal 19 serves as a projector, similar to the operation terminal 14 of the first embodiment, an operator can also operate the second operation terminal 19 to operate various facilities 10 of the plant 1.

[0044] Also, as information transmitted from the remote operation facility 2 to the plant 1, in addition to a signal requesting the state of the plant 1, information indicating a screen transition command displayed on the display unit of the second operation terminal 19 can also be used.

[0045] <3. Features> According to this embodiment, by using the second operation terminal 19 as described above, since there is no need to convert the status signal into second image data, the load on the plant system can be reduced. In particular, when the amount of information from the plant 1 to the remote operation facility 2 is large, the fact that conversion into second image data is unnecessary is suitable.

[0046] <C. Variation> Although one embodiment of the present invention has been described above, the present invention is not limited to the above embodiment, and various modifications are possible without departing from the spirit of the invention. Furthermore, the following modifications can be combined as appropriate, and can also be combined with the above embodiment.

[0047] <1> Data communication on both network lines 11 and 23 can be performed using various protocols and is not particularly limited. For example, when various devices are connected via Ethernet (registered trademark) on each network line 11 and 23, UDP communication can be performed. In this case, the image data described above can be transmitted in Ethernet (registered trademark) frame format.

[0048] <2> In the above embodiment, projectors 25 and 17 are used as the display unit of the present invention, but the invention is not particularly limited as long as it is a device capable of displaying images, and a display device such as a display can be used.

[0049] <3> The devices connected to the respective network lines 11 and 23 in Plant 1 and Remote Control Facility 2 as shown in the above embodiment are examples, and various modifications are possible. That is, the hubs 12 and 22, router 24, server 15, controller 16, and operation terminals 14 and 21 are just examples of the devices that make up Plant 1 and Remote Control Facility 2, and any of them can be omitted or other devices can be added. For example, in the above embodiment, the image conversion and decoding of information is performed by the operation terminal 21 in Remote Control Facility 2, but a dedicated device for such processing can also be provided.

[0050] <4> In the above embodiment, information is transmitted and received between the second network line 11 of plant 1 and the first network line 23 of remote control facility 2. However, if information can be transmitted from the first network line 23 to the second network line 11, the problem of transmitting information from the first network to the second network while preventing the intrusion of malware, etc., which is the objective of the present invention, can be solved. To achieve this, at least a first projector (first display unit) 25, a second camera (first shooting unit) 18, and an information conversion device (first information acquisition unit) 12 are provided. Alternatively, a second operation terminal 19 may be used instead of the information conversion device 13. These constitute the information transmission system of the present invention. Furthermore, the information transmission system of the present invention may additionally include a second projector (second display unit) 17, a first camera (second shooting unit) 26, and an operation terminal (second information acquisition unit) 21 in order to transmit information from the second network line 11 to the first network line 23.

[0051] <5> In this invention, instead of connecting Plant 1 and the remote control facility 2 via a wired or wireless line such as the Internet or a dedicated line to transmit and receive data, data is transmitted and received via a projector and camera as described above. However, it is sufficient that Plant 1 cannot be operated from the remote control facility 2 without connecting Plant 1 and the remote control facility 2 by a line. Therefore, this does not prevent Plant 1 and the remote control facility 2 from being individually connected to other facilities by wired or wireless lines.

[0052] <6> In the above embodiment, a water treatment plant 1 was given as an example of a facility equipped with the second network (second network line 11) in the present invention, and an example of controlling the water treatment plant 1 from a remote control facility 2 was shown. However, the invention is not limited to this. That is, as long as it can be controlled from the first network, various facilities other than water treatment plants can be applied as examples of facilities equipped with the second network.

[0053] <7> The first network and the second network according to the present invention do not necessarily have to be housed in a single facility, but may be housed across multiple facilities. Alternatively, both networks may be housed in a single facility. [Explanation of Symbols]

[0054] 11. Second Network Line (Second Network) 12. Information conversion device (first information acquisition unit) 17. Second projector (second display unit) 18. Second Camera (First Filming Department) 19. Second operating terminal (second display unit, first information acquisition unit) 11. Operating terminal (Second information acquisition unit) 23. First Network Line (First Network) 25. First projector (first display unit) 26. Camera 1 (Camera 2)

Claims

1. An information transmission system for transmitting information between a first network provided in a remotely operated facility and a second network provided in a plant having at least one piece of equipment, A first display unit connected to the first network and displaying a first image showing first information having control signals to be transmitted to the second network, A first imaging unit connected to the second network and which captures the first image displayed on the first display unit, A second operating terminal connected to the second network, which acquires first information from the first image captured by the first imaging unit, and a controller that receives the control signal for the first information from the second operating terminal and acquires second information having a status signal for the equipment based on the control signal. Equipped with, The second operating terminal in the second network displays the second information, which has the status signal of the equipment sent from the controller, on the display unit of the second operating terminal. The system comprises a second imaging unit connected to the first network, which captures the second information displayed on the display unit of the second operating terminal, and a first operating terminal which acquires the second information having the status signal of the equipment captured by the second imaging unit. The first operating terminal causes the first image showing the first information having the control signal to be displayed on the first display unit. Information transmission system.

2. An information transmission method for transmitting information between a first network provided in a remotely operated facility and a second network provided in a plant having at least one piece of equipment, The first network includes the step of converting first information having a control signal to be transmitted to the second network into a first image, The steps include displaying the first image on a first display unit connected to the first network, In the second network, the steps include capturing the first image displayed on the first display unit, The second operating terminal connected to the second network acquires the first information from the captured first image, The controller connected to the second network receives the control signal for the first information from the second operating terminal and acquires second information having a status signal for the equipment based on the control signal, The second operation terminal displays second information having the status signal of the equipment sent from the controller on the display unit of the second operation terminal, The second imaging unit connected to the first network captures the second information displayed on the display unit of the second operating terminal, The first operation terminal connected to the first network acquires second information having a status signal of the equipment captured by the second imaging unit, The first operating terminal causes the first image showing the first information having the control signal to be displayed on the first display unit. Methods of information transmission.

3. An information transmission program for transmitting information between a first network provided in a remotely operated facility and a second network provided in a plant having at least one piece of equipment, To a computer connected to the first network, The first network includes the step of converting first information having a control signal to be transmitted to the second network into a first image, The steps include displaying the first image on a first display unit connected to the first network, Make it run, To the computer connected to the second network, The first imaging unit connected to the second network captures the first image displayed on the first display unit, The steps include: acquiring the first information from the first image captured by the first imaging unit using a second operating terminal connected to the second network; A controller connected to the second network receives the control signal for the first information from the second operating terminal and acquires second information having a status signal for the equipment based on the control signal. The second operating terminal is made to perform the step of displaying the second information having the status signal of the equipment sent from the controller on the display unit of the second operating terminal, To a computer connected to the first network, The steps include: capturing the second information displayed on the display unit of the second operating terminal using the second imaging unit connected to the first network; The steps include: acquiring second information having a status signal of the equipment captured by the second imaging unit using a first operating terminal connected to the first network; The first operation terminal causes the first image showing the first information having the control signal to be displayed on the first display unit, A program that transmits information to execute a command.

Images