Tower crane controller with authority control function and system

Abstract

This invention discloses a tower crane controller and system with access control functionality. The tower crane controller includes a storage unit, an access control unit, and a control unit. The storage unit stores one-to-one user identity information and user key information. The access control unit determines whether the user identity information and user key information currently logged in from the control terminal match the specific user identity information and user key information stored in the storage unit. The control unit, upon receiving a tower crane control request from the control terminal, sends the user identity information and user key information carried in the control request to the access control unit, and determines whether to allocate tower crane control access to the control terminal based on the matching result of the access control unit. Implementing this invention technically manages the control access of portable terminals, avoiding dangers caused by unauthorized operation, and improving the safety performance of high-risk equipment, including tower cranes, during use at multiple levels.

Description

Technical Field

[0001] This invention relates to the field of industrial control, and in particular to a tower crane controller and system. Background Technology

[0002] In industries such as manufacturing and construction, many types of equipment are often needed. Some of these devices are inherently dangerous to operate, so appropriate safety measures are required for their use.

[0003] Taking tower cranes (also known as tower hoists) as an example, a tower crane is a rotating crane with its jib mounted on the upper part of a tall tower. It has a large working range and is mainly used for the vertical transport of materials and the installation of components in the construction of multi-story and high-rise buildings. Componently, it mainly consists of three parts: the metal structure, the working mechanism, and the electrical system. The metal structure includes the tower body, jib, base, and anchor rods; the working mechanism has four parts: hoisting, luffing, slewing, and traveling; the electrical system includes motors, controllers, switchboards, connecting lines, signaling, and lighting devices.

[0004] Because tower cranes operate at high altitudes, are variable in amplitude, rotatable, and height-adjustable, there are certain safety risks during operation. Therefore, tower cranes are equipped with corresponding monitoring systems to prevent safety accidents caused by operator negligence or misjudgment. This greatly ensures the safe use of tower cranes. In addition, the system can record and store the safe operating status of the tower crane in real time, and scientifically detect any violations of tower crane operation. This provides managers with accurate and reliable data for effective equipment management, further preventing and suppressing accidents, eliminating potential safety hazards, and providing detailed data for quality supervision departments to query, so that management departments have a basis for quantitative management during the implementation of regulations.

[0005] In existing technology, to facilitate the operation of tower cranes, a portable control terminal is generally provided. This control terminal can wirelessly communicate with the controller located on the tower crane, and then control the tower crane's rotation, luffing, lifting, and other functions through the controller. However, in actual use, the portable control terminal may be obtained by different people, some of whom may not be authorized operators. If they are allowed to operate it at will, dangerous accidents may occur.

[0006] The above-mentioned problems urgently need to be analyzed and solved by those skilled in the art. Summary of the Invention

[0007] In view of this, the embodiments of this application aim to provide a tower crane controller and system with access control function, so as to improve the safety performance of high-risk equipment, including tower cranes, during use at multiple levels, and to technically control the operation permissions of portable terminals to prevent dangers caused by operation by non-operators.

[0008] In a first aspect, the tower crane controller with access control function according to embodiments of this application includes: a storage unit, an access management unit, and a control unit; the storage unit is used to store one-to-one corresponding user identity information and user key information; the access management unit is used to determine whether the user identity information and user key information currently logged in from the control terminal match the specific user identity information and user key information in the storage unit; the control unit is used to send the user identity information and user key information carried in the control request to the access management unit when receiving a tower crane control request sent by the control terminal, and determine whether to allocate tower crane control access to the control terminal based on the matching result of the access management unit.

[0009] Secondly, this application provides a tower crane control system, which includes a control terminal and the aforementioned tower crane controller. The control terminal is equipped with a login interaction module and an operation module, and the control terminal communicates with the tower crane controller wirelessly.

[0010] By adopting the technical solutions of the various embodiments of the present invention, the control permissions of portable terminals can be technically controlled, avoiding dangers caused by non-operators' operation, and improving the safety performance of high-risk equipment, including tower cranes, during use at multiple levels. Attached Figure Description

[0011] Figure 1 A schematic diagram of the component framework of a tower crane controller (edge ​​controller) provided in an embodiment of the present invention;

[0012] Figure 2 A schematic diagram of the component framework of a soft PLC provided in an embodiment of the present invention;

[0013] Figure 3 A schematic diagram of a tower crane control system provided in an embodiment of the present invention;

[0014] Figure 4 This is a flowchart illustrating a method for obtaining control permissions for a soft PLC, as provided in an embodiment of the present invention. Detailed Implementation

[0015] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention. It should be noted that, unless otherwise specified, the embodiments and features in the embodiments of this application can be arbitrarily combined with each other.

[0016] It should be noted that traditional field equipment, including tower cranes, requires acquiring various status information and timely control of multiple target devices, resulting in complex control scenarios. To meet reliability and flexibility requirements, PLCs (hardware PLCs) are generally used. However, with industry development, those skilled in the art discovered that hardware PLCs have various drawbacks: it is difficult to build an open hardware architecture; and operators must undergo lengthy professional training to master the programming methods of a particular product. Later, with the formulation and implementation of the IEC 61131-3 standard in the industrial control field, a new control technology—software PLC—developed rapidly. A software PLC uses a general-purpose operating system and a PC as its hardware and software platform, implementing the control functions of a traditional hardware PLC in software. In other words, the PLC's control functions are encapsulated within software and run in a PC environment. Such a control system achieves the same functions as a hardware PLC while also possessing the various advantages of a PC. Therefore, this invention embodiment makes targeted improvements based on the aforementioned background and software PLC.

[0017] The following is combined with Figure 1 , Figure 2 , Figure 3 and Figure 4 Explanation, such as Figure 1 As shown, the tower crane controller of this embodiment can be configured as an edge controller on equipment requiring a certain degree of safety redundancy, including tower cranes. The tower crane controller may include a first system unit (based on a real-time operating system, not shown in the figure), which is equipped with a soft PLC. In specific implementations, this soft PLC can be used to control equipment such as tower cranes, for example, luffing control, slewing control, or hoisting control, etc., in conjunction with... Figure 2 As shown, the soft PLC can be configured with a storage unit, an access control unit, and a control unit. The storage unit can be used to store one-to-one user identity information and user key information (i.e., each user identity information corresponds to one (group) of user key information). The access control unit can be used to determine whether the user identity information and user key information of the currently logged-in user from the control terminal match the specific user identity information and user key information in the aforementioned user data unit. The control unit can be used to send the user identity information and user key information carried in the control request to the access control unit when it receives a tower crane control request from the control terminal, and determine whether to allocate tower crane control access to the control terminal based on the matching result of the access control unit.

[0018] As one implementation method, user identity information can be a username (name, nickname, or user ID, etc.). User key information can include user password information (such as input codes on a keyboard) and user biometric information (such as fingerprints, etc.). The user password information, user biometric information, and user identity information are in a one-to-one correspondence; the combination of these three can further enhance the management and control of permissions. Furthermore, multiple identity levels can exist. In the storage unit, each user identity information is assigned at least one identity level. This identity level specifies the permissions that the corresponding user identity information can use to perform relevant operations on the tower crane through access to the control terminal. The aforementioned multiple identity levels can include: temporary user, user with viewing function, user with limited permissions, and user with full permissions. Among them, a temporary user is a user who can access the control terminal and has specific permissions within a predetermined time period. In actual use, when the core operator is unable to continuously operate the tower crane on-site for some reason, but the tower crane needs to continue working, the temporary user identity level can be assigned to a trusted auxiliary operator. This allows the auxiliary operator to access the control terminal and have certain control permissions on the tower crane during the time when the core operator is absent, thus meeting the on-site operation needs of the tower crane. The viewing function user refers to a user who can access the control terminal and only has viewing capabilities. In actual use, the viewing function user level can be assigned to non-operational users (i.e., users who are not controlling the tower crane) such as software update users and information viewing users, to meet the work needs of these non-operational users while preventing the tower crane from being illegally controlled. The restricted-access operation user refers to a user who can access the control terminal and has partial operation permissions. In actual use, the restricted-access operation user level can be assigned to beginners whose training goal is to become core operators or operators whose operating skills do not yet meet all requirements. This allows for assigning appropriate levels based on the proficiency of different operators, achieving a certain level of safety while meeting the tower crane's usage needs. The full-access operation user refers to a user who can access the control terminal and has full operation permissions. In actual use, full-access operation users can be assigned to core operators, i.e., personnel primarily responsible for the safe operation of the tower crane. As can be seen from the above, the aforementioned scheme can meet the needs of different users while ensuring safety and controllability.

[0019] Furthermore, user information for registered operators can be pre-set or stored in the soft PLC, and data can be saved through power-off data retention. This means that when the system loses power, relevant data can be stored, and data collected or generated during system operation will not be lost during power failure. After power is restored, the system can resume its original operating state, thus ensuring the determinism of system operation and the integrity of recorded data. When system power is restored, field data can be recovered promptly, avoiding chaos in the application system. Moreover, with this method, if maliciously damaged or if the soft PLC malfunctions, the tower crane will become uncontrollable.

[0020] Based on this, the control unit can also send the control commands carried in the control request to the tower crane's motion mechanisms when the access control unit outputs a successful match. The motion mechanisms include: a hoisting mechanism, a slewing mechanism, and a luffing mechanism. The hoisting mechanism moves the hook up and down; the slewing mechanism rotates the hook to the right and left; and the luffing mechanism moves the hook forward or backward. Additionally, when receiving a tower crane hoisting request from the control terminal, the control unit can also send the user identity information and user key information carried in the control request to the access control unit, and determine whether to calculate the hoisting path based on the hook lifting and lowering points in the tower crane hoisting request based on the access control unit's matching result.

[0021] Combination Figure 2 As shown, as one implementation method, the soft PLC can also be configured with a setting unit. This unit is used to add and / or remove corresponding user identity information and user key information to facilitate the addition or management of compliant user information. Additionally, the access control unit can be configured with a time module, which can be used to set the usage time for the current user's control requests after successful login. That is, after the current user logs in, a time limit is set for their control requests. If the time limit is detected, the access control unit will reject the control terminal's control request to the soft PLC. Furthermore, when the user key information consists of the user password and user biometric information, the function of this time module can be further optimized. Specifically, after the current user logs in, a usage time for the control request is set, and if the soft PLC does not receive the current user's biometric information within a predetermined interval, the usage time for the control request is terminated early. This means that during the usage time of the control request, the current user needs to maintain or periodically input their biometric information (less than the predetermined interval); otherwise, the authorization for this control request will be stopped, and the control terminal will be shut down via the soft PLC's control channel. This further enhances the security of equipment operation and allows for timely monitoring of both authorized and unauthorized operators.

[0022] Combination Figure 2As shown, as one implementation method, an alarm unit can also be configured on the soft PLC. The access control unit can trigger the alarm unit's action after the current user fails to log in, ultimately issuing an alarm notification. This further enhances security redundancy.

[0023] In addition, combined Figure 1 To further enhance safety performance, the tower crane controller (edge ​​controller) can be further optimized. Specifically, it can include a second system unit (not shown in the figure, based on a non-real-time operating system). The second system unit can be used to configure non-real-time applications. The second system unit and the first system unit can operate in isolation from each other. The first system unit is based on a real-time operating system, while the second system unit, due to the configuration of a soft PLC, can be based on a non-real-time operating system to ensure control performance. The first system unit and the second system unit can interact through an internal communication module, so that the first system unit can communicate with the control terminal through the second system unit.

[0024] Furthermore, in specific implementations, the edge controller, based on its hardware, can adopt a two-tier architecture consisting of a host (hypervisor) and virtual clients (supporting multiple operating systems). This leverages CPU multi-core, instruction virtualization, and interface virtualization technologies to meet the high real-time requirements of the virtual clients. Additionally, the host provides a secure isolation kernel for each virtual client's high real-time needs. This kernel utilizes CPU multi-core, instruction virtualization, and interface virtualization technologies to achieve full isolation of the virtual clients, allowing them to directly receive I / O device interrupts, access I / O memory, and execute special instructions. A time-sharing scheduling method is used to enable multiple virtual clients to run in parallel. Both the first and second system units can be multiple. In existing technologies, common soft PLC solutions use a Windows + soft PLC architecture. In this approach, the soft PLC runs as a virtual client real-time system on top of the host Windows system, making true isolation difficult. If the Windows system crashes or restarts, the soft PLC cannot remain unaffected and will enter a STOP state, which will significantly impact industrial field control. By adopting the above-described solution of the present invention, security performance can be further improved, while taking into account the risks that may arise at the user operation level and the software and hardware architecture level.

[0025] In addition, to further realize the dynamic allocation, flexible scheduling and sharing of resources, and improve resource utilization, combined with Figure 1As shown, the second system unit can be configured for various non-real-time applications. Besides 4G / WIFI communication applications for communication with the control terminal, it can also be configured for edge computing, artificial intelligence, machine vision, human-machine monitoring, gateway connections, and other applications. In this way, the first and second system units each have their own division of labor and operating mechanisms. Based on mutual isolation, this allows for more flexible and efficient utilization of hardware resources, achieving higher control and operational safety performance.

[0026] Combination Figure 3 As shown, this embodiment of the invention also provides a tower crane control system, which includes a control terminal and a tower crane controller implemented in any of the aforementioned embodiments. The control terminal is equipped with a login interaction module and a control module. The control terminal can communicate with the tower crane controller wirelessly. In addition, when the user's key information includes the user's biometric information, the control terminal may further include a biometric information acquisition and processing device. The login interaction module provides the user with login interaction operations on the control terminal. The communication and feedback between the control terminal and the edge controller are displayed on the login interaction module. After the user verifies the login operation on the edge controller, the user can control the tower crane through the control module.

[0027] The following explanation uses a specific implementation scenario. First, the portable terminal (control terminal) uses multiple interfaces to interact with the soft PLC, namely "login," "username," and "password." At the factory, the manufacturer and owner can jointly confirm the user information of the control terminal and store it in the soft PLC. For example, this could include three pieces of information: an ID number, a password, and fingerprint information. The program in the soft PLC will pre-set three large arrays of equal size: one to store the username admin[N], one to store the password password[N], and one to store the biometric information (fingerprinted information) fingerprint[N]. Since each person's ID information is different, each admin and fingerprint will be unique. Then, after each "login," the program can use a for loop to check if the newly entered admin, password, and fingerprint match the previously entered admin[N], password[N], and fingerprinted[N] in the program's arrays. If they match, the program will enter normal operation. During the initial setup and normal operation phase, the admin and password logins only need to be completed once. However, for enhanced security, fingerprint information can be required to operate the device continuously. This means the fingerprint must remain pressed on the reader, and the control terminal must continuously communicate with the soft PLC. If the soft PLC does not receive fingerprint information, a stop signal will be triggered, stopping the control terminal's control of the soft PLC. The soft PLC can then trigger a timer (a preset time module). If the fingerprint information is restored within the specified time, control of the soft PLC can resume. If the timeout exceeds the set timer duration, the current control session ends. If the current user needs to operate the device again via the control terminal, they must log in and verify again. If the information does not match or there is no user information, the program will disable tower crane control and trigger an alarm until the correct admin and password, along with the correct fingerprint, match the requirements. Only then will the alarm be deactivated and tower crane control be restored.

[0028] As can be seen from the foregoing, the tower crane controller and tower crane control system of the embodiments of the present invention can technically control the operation permissions of portable terminals, avoid the danger caused by operation by non-operators, and closely integrate with soft PLC, thereby improving the safety performance of high-risk equipment, including tower cranes, during use at multiple levels.

[0029] Combination Figure 4As shown, this embodiment of the invention also provides a method for obtaining control permissions for a soft PLC. The method includes: S201, obtaining the user identity information and user key information of the current user of the control terminal; S202, determining whether the user identity information and user key information of the current user match specific user identity information and user key information in a preset user information database; S203, if so, login is successful and the current user's control request for the soft PLC is allowed; otherwise, login fails.

[0030] The specific effects of this method, as well as its various extensions and optimizations in specific implementations, can be found in the descriptions of the foregoing embodiments and implementation methods, and will not be repeated here. Since the foregoing tower crane controller and tower crane control system have the aforementioned technical effects, the control permission acquisition method for soft PLC in this embodiment of the invention also has the corresponding technical effects.

[0031] Furthermore, embodiments of the present invention also provide a computer-readable storage medium storing a computer program thereon, which, when executed by a processor, can implement the methods described in the preceding embodiments. Since the methods described in the preceding embodiments have the aforementioned technical effects, this computer storage medium also has corresponding technical effects, which will not be elaborated further here.

[0032] It should be noted that a computer-readable medium can be a computer-readable signal medium or a computer-readable storage medium. A computer-readable storage medium can be, for example—but not limited to—an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of computer-readable storage media (a non-exhaustive list) include: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof. In this document, a computer-readable storage medium can be any tangible medium that contains or stores a program that can be used by or in connection with an instruction execution system, apparatus, or device.

[0033] Additionally, a computer-readable signal medium may include data signals propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals may take various forms, including—but not limited to—electromagnetic signals, optical signals, or any suitable combination thereof. A computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium, which can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device.

[0034] Furthermore, the program code contained on the computer-readable medium may be transmitted using any suitable medium, including—but not limited to—wireless, wire, optical fiber, RF, etc., or any suitable combination thereof.

[0035] Additionally, computer program code for performing the operations of this invention can be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, and C++, as well as conventional procedural programming languages ​​such as "C" or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0036] The specific embodiments described above further illustrate the purpose, technical solution, and beneficial effects of the present invention. It should be understood that the above descriptions are merely specific embodiments of the present invention and are not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A tower crane controller with a permission control function, characterized by, include: Storage unit, access control unit, and control unit; The storage unit is used to store one-to-one corresponding user identity information and user key information, and the permission management unit is used to determine whether the user identity information and user key information of the current user login from the control terminal match the specific user identity information and user key information in the storage unit. When the control unit receives a tower crane control request sent by the control terminal, it sends the user identity information and user key information carried in the control request to the permission management unit, and determines whether to assign tower crane control permission to the control terminal based on the matching result of the permission management unit. The tower crane controller includes a first system unit, on which a soft PLC is configured; The user identity information includes a username, and the user key information includes a password and fingerprint information; The username and password only need to be entered once, but the fingerprint information must be kept indefinitely to operate the device. The fingerprint is pressed on the reader, and the control terminal continuously communicates with the soft PLC. If the soft PLC does not receive the fingerprint information, it will trigger a stop signal, thereby stopping the control terminal's control of the soft PLC. The soft PLC internally triggers a timer to start counting. If the fingerprint information is restored again within the specified time, the control terminal can resume controlling the soft PLC. If the time without receiving fingerprint information exceeds the timer's set time, the current control ends.

2. The tower crane controller of claim 1, wherein, The control unit is also used to send the control command carried in the control request to the motion mechanism of the tower crane when the authorization management unit outputs a successful match.

3. The tower crane controller of claim 1, wherein, The control unit is further configured to, upon receiving a tower crane hoisting request sent by the control terminal, send the user identity information and user key information carried in the control request to the permission management unit, and determine whether to calculate the hoisting path based on the hook-starting point and hook-dropping point in the tower crane hoisting request according to the matching result of the permission management unit.

4. The tower crane controller of claim 1, wherein, It is also equipped with a setting unit for adding and / or removing one-to-one corresponding user identity information and user key information.

5. The tower crane controller of claim 1, wherein, The permission management unit is equipped with a time module, which is used to set the usage time of the control request after the current user has successfully logged in.

6. The tower crane controller of claim 1, wherein, The tower crane controller is also equipped with an alarm unit, and the access control unit is also used to trigger the alarm unit to act after a login failure.

7. The tower crane controller of claim 1, wherein, There are multiple identity levels. In the storage unit, each user identity information is assigned at least one identity level, and the identity level specifies the permissions of the corresponding user identity information.

8. The tower crane controller of claim 7, wherein, The various user identity levels include: temporary user, viewing function user, restricted access operation user, and full access operation user; wherein, the temporary user is a user who can access the control terminal and has specific permissions within a predetermined time period; the viewing function user is a user who can access the control terminal and only has viewing functions; the restricted access operation user is a user who can access the control terminal and has partial operation permissions; and the full access operation user is a user who can access the control terminal and has full operation permissions.

9. A tower crane control system, characterized in that The crane control system comprises a control terminal and the crane controller according to any one of claims 1-8, wherein the control terminal is provided with a login interaction module and a control module, and the control terminal communicates with the crane controller in a wireless manner.

Images