Numerical control device and computer-readable storage medium

Abstract

This numerical control device includes: an operation request receiving unit that receives an operation request from an operator; and a category determination unit that manages authorization information, which is information for setting an operation authorization for data that is the target of the operation request. The authorization information includes a category of an operator who created the operation authorization for the operator, a category of a restricted person who is an operator restricted by the operation authorization, and details of an operation for which the restricted person has authorization.If the operator who issued the operation request to edit the operation authority is an administrator, the category determination unit allows editing of the operation authority if the category of the operator who issued the operation request and the category of the operator who created the operation authority match.

Description

field of technology

[0001] The present disclosure relates to a numerical control device and to a computer-readable storage medium. State of the art

[0002] Conventionally, an industrial machine in a factory has a control device that has a function for restricting user access according to the manipulator's manipulation authorization level. For example, see Patent Document 1. List of citationsPatent document

[0003] Patent Document 1: JP 2012-13731 A Disclosure of the invention Problem to be solved by the invention

[0004] For example, in the process of manufacturing a machine tool, an embedded device such as a servo motor or inverter, a peripheral device such as a chiller or charger, a sensor, a numerical control device, etc., are installed, a parameter is set, a program is created, and adjustment is performed to achieve a desired function. Furthermore, even after its completion, the machine tool is manipulated by a number of workers for maintenance.

[0005] A worker associated with a machine tool individually sets a parameter or creates a program. A manufacturer has a need to protect data such as the parameter or program set by a worker belonging to the manufacturer.

[0006] In addition, an organization other than the manufacturer, such as a system integrator or a supplier, may also have a need to protect data created by a worker belonging to the organization.

[0007] In a field of numerical control devices, it is desirable to manage access rights to data related to the creation of a machine tool. Means of solving the problem

[0008] A numerical control device, which is an aspect of the disclosure, includes a manipulation request receiving unit configured to receive a manipulation request from a manipulator, and a category determination unit configured to manage authorization information serving as setting information of a manipulation authorization for data to be manipulated by the manipulation request, wherein the authorization information includes a category of a manipulator that creates a manipulation authorization for the manipulator, a category of a restricted person that is a manipulator restricted by the manipulation authorization, and a content of manipulation for which the restricted person has authorization, and wherein, when a manipulator,who issues a manipulation request to edit the manipulation authorization is a supervisor, if a category of the manipulator who issues the manipulation request is the same as the category of the manipulator who creates the manipulation authorization, the category determination unit allows editing of the manipulation authorization. Short description of the drawings Fig. 1 is a graphical representation of a data configuration of manipulator information; Fig. 2 is a schematic diagram illustrating a manipulator associated with a machine tool; Fig. 3 is a block diagram of a numerical control device of this embodiment; Fig. 4 is a graphical representation of a data configuration of authorization information; Fig. 5 a flow chart illustrating an operation of a category determination unit; Fig. 6 is a graphical representation of a data configuration of manipulator information and authorization information; Fig. 7 is an explanatory diagram showing a detection result of a tamper request; Fig. 8 a flow chart illustrating an operation of the category determination unit; and Fig. 9 is a graphical representation of a hardware configuration of the numerical controller. Best mode(s) for carrying out the invention

[0009] A numerical control device 100 is described below. The numerical control device 100 stores a parameter, a program, etc., for causing a machine tool to perform machining. The parameter and program are created / referenced / edited by workers from various positions, such as a machine tool builder who manufactures the machine tool, a machine tool builder who manufactures an embedded device or a peripheral device, a machine tool builder who manufactures the numerical control device 100, a system integrator, a supplier, and a machine user who performs machining using the machine tool.

[0010] Worker access rights are managed by a supervisor. The supervisor has a supervisor permission. The presence / absence and category of a manipulator's supervisor permission are set in the manipulator information. A manipulation permission of data is set in the permission information. Here, the data refers to information present in the numerical control device 100. The data refers to a file recorded in a specific format and to data stored in a memory such as RAM.

[0011] The category refers to a position of the manipulator (such as a company to which the manipulator belongs). In the numerical control device 100, by setting categories for all manipulators, including the supervisor, it is possible to manage authorization for each position related to the machine tool.

[0012] Conventional manipulator information and manipulator information of this embodiment will be explained with reference to an example of Fig. 1 described.

[0013] Conventional manipulator information classifies manipulators into groups. The manipulator groups include supervisors and workers (non-supervisors). Supervisors can edit manipulator information and authorization information with supervisor authorization. The "manipulator" authorization depends on the settings configured by the supervisor.

[0014] In the conventional manipulator information, when a plurality of manipulators belonging to a supervisor group are set, a problem occurs in that a manipulation authority for data created by a manipulator in a certain position may be changed by a supervisor group in another position.

[0015] In this embodiment, an element called "Category" is provided in the manipulator information. Using the category, the manipulation permission can be managed for each position of a data-creating manipulator.

[0016] The manipulator information from Fig. 1 are described in detail. The manipulator information includes identification information of the manipulator, a group of the manipulator, and a category of the manipulator. In the manipulator information of Fig. 1, there are "Manipulator A," "Manipulator B," "Manipulator C," and "Manipulator D." Each manipulator is assigned a "group." "Manipulator A" and "Manipulator C" are "supervisors," and "Manipulator B" and "Manipulator D" are "workers." The "supervisors" are assigned supervisor permissions.

[0017] The manipulators are classified not only by group but also by category. In the manipulator information of Fig. 1 is a category for "Manipulator A" and "Manipulator B" "Machine Manufacturer" and is a category for "Manipulator C" and "Manipulator D" "Machine User." A category refers to a manipulator's position (company, etc.). An entity to which a data manipulation authorization belongs can be assigned to a category. In the example of Fig. 1 is a category set for each organization (company) to which a manipulator belongs.

[0018] The manipulators can essentially be divided into three categories, namely a superior supervisor, a category supervisor and a worker (see Fig. 2). The higher-level supervisor identifies a position of a manipulator related to the machine tool (an organization, an entity to which data manipulation permission belongs, etc.) and creates initial manipulator information. Information about the manipulator position can be obtained from the machine tool's design documents, specifications, contracts, creation procedures, etc. The higher-level supervisor is, for example, a numerical control manufacturer, a system integrator, etc. The higher-level supervisor derives one or more positions (organizations) related to the machine tool controlled by the numerical control device and creates manipulator information. The category supervisor is set in the manipulator information.The Category Supervisor manages data related to a category (position) of the Category Supervisor.

[0019] In the example of Fig. 1, "Manipulator A" is a category supervisor belonging to the category "Machine Manufacturer" and "Manipulator C" is a category supervisor belonging to the category "Machine User".

[0020] It should be noted that in the manipulator information of Fig. 1, a "machine manufacturer" exists. However, when the machine tool is actually created, in some cases, there may be multiple "machine manufacturers." Furthermore, in addition to "machine manufacturers," various manipulator categories may exist, such as "device manufacturers" of the numerical control device, a system integrator, and a supplier.

[0021] Both the parent supervisor and the category supervisor have supervisor permission. However, the category supervisor's supervisor permission is limited to the category supervisor's category.

[0022] The worker does not have supervisor permission. Manipulation performed by the worker is called general manipulation. General manipulation refers to manipulation of data other than data restricted by supervisor permission, such as manipulator information and authorization information.

[0023] Fig. 3 is a block diagram of the numerical control device 100 of this embodiment. The numerical control device 100 includes a manipulation request receiving unit 11, an authentication unit 12, a manipulation request executing unit 13, a category determination unit 14, and an attribute management unit 15.

[0024] It should be noted that the components of the numerical control device 100 are classified according to their functions and do not necessarily have to be clearly categorized in terms of a physical configuration and a program configuration.

[0025] The manipulation request receiving unit 11 receives a manipulation request from an information processing device, such as a PC or server connected to the numerical control device 100, or from an input unit (described below) of the numerical control device 100. This manipulation request is a manipulation request related to accessing data in the numerical control device, such as referencing, creating, or editing. The manipulation request includes identification information of a manipulator making the manipulation request, identification information of data for which the manipulation request has been made (identification information indicating the data, a type / path of a file containing the data, etc.), a content of the requested manipulation, and so on.

[0026] The authentication unit 12 authenticates the manipulator who makes the manipulation request. An existing method is used for authentication. The manipulator inputs identification information, etc., through it. The authentication unit 12 authenticates that the manipulator corresponds to the input identification information. By performing the authentication, the manipulator can be uniquely identified.

[0027] If the category determination unit 14 permits the manipulation request, the manipulation request execution unit 13 executes the requested manipulation. The manipulation includes referencing, creating, editing, etc., data.

[0028] The category determination unit 14 determines whether to reject or allow the tamper request based on the tamper category. A method for determination by the category determination unit 14 is described for each type of tamper request, namely [1. Editing authorization information / adding tamper authorization], [2. Editing tamper information / creating initial tamper information], [3. Re-creating data], and [4. General tampering]. 1. Editing authorization information / adding a manipulation authorization

[0029] If the requested manipulation is [editing authorization information], the category determination unit 14 refers to the manipulator information to read the group and category of the manipulator issuing the manipulation request. If the manipulator's group is [Worker], the category determination unit 14 rejects the manipulation request, assuming that the manipulator does not have the authority to edit the authorization information. If the manipulator's group is [Supervisor], the category determination unit 14 proceeds to the next step.

[0030] The authorization information links data to the manipulator's (referred to as a restricted person's) manipulation authorization. The manipulation authorization includes a category of a manipulator who sets the manipulation authorization. Upon receiving an edit of the authorization information as a manipulation request, the category determination unit 14 determines whether the data manipulation authorization specified in the manipulation request has been previously set, and allows creation of the manipulation authorization if the data manipulation authorization has not yet been set.If the data manipulation permission specified in the manipulation request has been previously set, a category of the manipulator setting the manipulation permission is compared with the category of the manipulator making the manipulation request, and if the categories match, editing of the manipulation permission is permitted.

[0031] The manipulation authorization is set in the authorization information. The configuration of the authorization information is described with reference to Fig. 4 is described in detail. A category of a category supervisor who sets the manipulation authority, a category and a group of a manipulator (a restricted person) who should be a restriction target of the manipulation authority, information for specifying data that should be a restriction target (data type, identification information of data, a data path, a folder containing data, etc.), a manipulation content, and a manipulation authority of the restricted person are stored in the authorization information of Fig. 4 set.

[0032] A category of a category supervisor in a manipulation authorization in a first row of a table of Fig. 4 is "Machine Builder." In this manipulation authorization, a group is "Supervisor," a manipulator, a category "Machine User," is a restricted person, and "Reference" manipulation of "Ladder Program" data is permitted, while "Edit" manipulation is rejected.

[0033] A category supervisor in a manipulation authorization in a second row is "Machine Builder." In this manipulation authorization, a group is "Worker," a manipulator who is a category "Machine User" is a restricted person, "Reference" manipulation of "Ladder Program" data is permitted, and "Edit" manipulation is rejected.

[0034] A category supervisor in a manipulation permission in a third line is "Machine User." In this manipulation permission, a group is "Worker," a manipulator who is a "Machine User" category is a restricted person, a "Reference" manipulation of data "Parameter" is permitted, and a "Edit" manipulation is permitted.

[0035] Manipulation permissions in the fourth through sixth rows differ from those in the first through third rows. With reference to the manipulation permissions in the fourth through sixth rows, a "machine user" category of a manipulator who creates data affects the manipulation permissions.

[0036] A category supervisor in a manipulation permission on the fourth line is "Machine User." In this manipulation permission, a group is "Supervisor," a manipulator who is a category "Machine Manufacturer" of the manipulator is a restricted person, and manipulation "Reference" and manipulation "Edit" of data "machine user created" are rejected.

[0037] A category supervisor in a manipulation permission on the fifth line is "Machine User." In this manipulation permission, a group is "Worker," a manipulator, a category "Machine Builder," of the manipulator is a restricted person, and manipulation "Reference" and manipulation "Edit" of data "Machining Program Created by Machine Users" are rejected.

[0038] A category supervisor in a manipulation authorization in the sixth line is "Machine User." In this manipulation authorization, a group is "Supervisor," and for a restricted person who is a category "Machine User," manipulation of "Reference" data "machine user-created processing program" is permitted, and manipulation of "Edit" is rejected.

[0039] An operation of the category determination unit 14 is described with reference to Fig. 5 to 7. Fig. 5 a flow chart illustrating the operation of the category determination unit 14, Fig. 6 are examples of manipulator information and authorization information, and Fig. 7 shows detection results of manipulation requests from manipulator A and manipulator C. In the following description, it is assumed that a request to edit authorization information has been received as a manipulation request.

[0040] The manipulation request receiving unit 11 receives a manipulation request (step S1), and the authentication unit 12 authenticates the manipulator (step S2). Manipulator information is referenced using the manipulator's identification information acquired during authentication. If the manipulator is a "category supervisor" (step S3; Yes), the category determination unit 14 searches for authorization information using data specified by the manipulation request as a key.

[0041] If a manipulation authorization is set for the data specified by the manipulation request (step S4; Yes), the category determination unit 14 compares a category of a manipulator creating the manipulation authorization with a category of a manipulator making the manipulation request. If the category of the manipulator creating the manipulation authorization matches the category of the manipulator making the manipulation request (step S5; Yes), the manipulator allows editing of the manipulation authorization for the data specified by the manipulation request (step S6). If the category of the manipulator setting the previously existing manipulation authorization does not match the category of the manipulator making the manipulation request (step S5; No), editing of the manipulation authorization is rejected (step S7).

[0042] It should be noted that if the manipulation permission is not set in the data for which the manipulator requires setting the manipulation permission in step S4 (step S4; No), the category determination unit allows adding a new manipulation permission for the data (step S8).

[0043] Furthermore, if the manipulator is not the category supervisor (or the higher-level supervisor) in step S3 (step S3; No), the category determination unit 14 rejects processing of the manipulation authorization (step S7).

[0044] An operation of the category determination unit 14 is described with reference to Fig. 6 and Fig. 7 described in detail.

[0045] Fig. 6 shows an example of manipulator information and authorization information, and Fig. 7 represents a determination result for a manipulation request for processing the manipulation authorization by manipulator A and manipulator B.

[0046] First, a group of manipulator A is "Supervisor" and a category thereof is "Machine Manufacturer." In the manipulator information, manipulator A is defined as a "Category Supervisor" of the category "Machine Manufacturer." It is assumed that manipulator A requests editing of the manipulation authorization of data "Ladder Program" as a manipulation request. In response, the category determination unit 14 searches for authorization information using the data "Ladder Program" as a key. In the authorization information of Fig. 6, the manipulation permission for the "ladder program" data has been previously set, and a category of a category supervisor who sets the manipulation permission for the "ladder program" data is a "machine manufacturer." The category determination unit 14 compares a "machine manufacturer" category of the manipulator who sets the manipulation permission for the "ladder program" data with a "machine manufacturer" category of the manipulator A who makes the manipulation request. As a result of the comparison, the two categories match each other. For this reason, the category determination unit 14 rejects manipulator A from editing the manipulation permission for the "ladder program" data.

[0047] When manipulator A requests setting a manipulation authorization for data “machine user created machining program” as a manipulation request, the category determination unit 14 searches for authorization information using the data “machine user created machining program” as a key. Fig. 6, the manipulation permission for the "machining program created by machine user" data has been previously set, and a category of a category supervisor who sets the manipulation permission for the "machining program created by machine user" data is "machine user." The category determination unit 14 compares a "machine user" category of the manipulator who sets the manipulation permission for the "machining program created by machine user" data with a "machine manufacturer" category of the manipulator A who makes the manipulation request. As a result of the comparison, the two categories do not match. For this reason, the category determination unit 14 rejects manipulator A's editing of the manipulation permission for the "machining program created by machine user" data.

[0048] When manipulator A requests setting a manipulation permission for the "machining program created by the machine manufacturer" data as a manipulation request, the category determination unit 14 searches for permission information using the "machining program created by the machine manufacturer" data as a key. As a result of the search, the manipulation permission for the "machining program created by the machine manufacturer" data has been previously set, and a category of a category supervisor who sets the manipulation permission for the "machining program created by the machine user" data is "machine manufacturer."The category determination unit 14 compares a "machine manufacturer" category of the manipulator that sets the manipulation permission for the "machining program created by the machine user" data with a "machine manufacturer" category of the manipulator A that makes the manipulation request. As a result of the comparison, the two categories match. Therefore, the category determination unit 14 allows manipulator A to edit the manipulation permission for the "machining program created by the machine manufacturer" data.

[0049] When Manipulator A requests setting a tamper permission for the "Error Correction" data as a tamper request, the category determination unit 14 searches for permission information using the "Error Correction" data as a key. As a result of the search, the tamper permission for the "Error Correction" data is not set. Therefore, the category determination unit 14 allows Manipulator A to add the tamper permission for the "Error Correction" data.

[0050] The operation of the category determination unit 14 in response to the manipulation request (authorization information processing) from the manipulator A has been described above. A manipulation request (authorization information processing) from the manipulator C is similar to that from the manipulator A, and therefore its description will be omitted. 2. Editing manipulator information / Creating initial manipulator information

[0051] Before describing the manipulation of manipulator information, it is assumed that initial manipulator information is stored in some way in the numerical controller 100. The initial manipulator information is created by the higher-level supervisor. The higher-level supervisor identifies a position of a manipulator related to the machine tool controlled by the numerical controller 100. The higher-level supervisor creates manipulator information that classifies the manipulator into a category for each position. The initial manipulator information created by the higher-level supervisor is called initial manipulator information. It is assumed that the higher-level supervisor and the category supervisor have the authority to edit the manipulator information.

[0052] When the category supervisor instructs adding the manipulator to the manipulator information, the category determination unit 14 assigns a category of the category supervisor as the category of the manipulator. For example, if the category supervisor's category is "machine manufacturer," the category determination unit 14 sets a category of the manipulator added to the manipulator information as "machine manufacturer," which is the same as the category supervisor adding the manipulator.

[0053] Upon receiving a manipulation request for the manipulator information, the category determination unit 14 determines whether the manipulator has the permission to manipulate the manipulator information. The category determination unit 14 reads a group and a category of the manipulator and allows manipulation of manipulator information of the same category as that of the category supervisor if the manipulator is the category supervisor. 3. Recreation of data

[0054] New data created by a manipulator can be linked to a category of the manipulator that created the data. Linking is performed by the attribute management unit 15. The attribute management unit 15 refers to the manipulator information, acquires the category of the manipulator that created the data, and links the data to the category of the manipulator that created the data.

[0055] For example, in “machining program created by a machine user” Fig. 6 "Machining program" data is linked to a "Category (Machine User)" of a manipulator that created the data. This makes it possible to restrict manipulation permissions based on the "Category (Machine User)" of the manipulator that created the data. For example, it becomes possible to implement management in which data created by a specific "machine manufacturer" is not "referenced" by another "machine manufacturer."

[0056] A category can be added to data as attribute information or can be managed as a whole in a table, etc. Furthermore, a manipulator can be linked to data instead of linking data to a category. When the manipulator is linked to the data, it is possible to determine the category of the manipulator that created the data from the manipulator information. 4. General manipulation

[0057] Here, general manipulation refers to manipulation of data other than data restricted by supervisor authorization, such as manipulator information and authorization information. Examples of such data include "machining program" and "parameters." These are data for implementing a performance / function / use of the machine tool. These individual pieces of data are created by a manipulator in a position related to the machine tool.

[0058] If the tamper request is general tampering, the category determination unit 14 determines a category of a tamper (referred to as a restricted person) making the tamper request. As described above, the category of the restricted person is set in the authorization information. The category determination unit 14 reads a tamper authorization of the restricted person, which is set in the data receiving the tamper request, from the authorization information. The category determination unit 14 determines whether to permit or disallow tampering of the data by the restricted person based on the read tamper authorization of the restricted person.

[0059] The above-described operation of the category determination unit 14 will be explained with reference to Fig. 8 described.

[0060] The manipulator issues a manipulation request. Authentication unit 12 authenticates the manipulator who submits the manipulation request.

[0061] If the manipulation request is [editing authorization information] (step S11), the manipulation request includes identification information of data to be manipulated. The category determination unit 14 determines whether the data manipulation authorization specified in the manipulation request has been previously set (step S12). Further, the category determination unit 14 determines whether the manipulator is a category supervisor by referring to the manipulator information. If the data manipulation authorization has been previously set (step S12; Yes), and a category of a manipulator creating the manipulation authorization is a category of a manipulator issuing the manipulation request, the category determination unit 14 permits editing of the manipulation authorization (step S13).If the categories of manipulators differ from each other, processing of the manipulation authorization is rejected (step S14).

[0062] If the data manipulation permission specified in the manipulation request is not set (step S12; No), the category determination unit 14 allows the addition of the data manipulation permission specified in the manipulation request if the manipulator is a category supervisor (step S15). The category determination unit 14 assigns the category of the manipulator, who is a creator, to the added data manipulation permission.

[0063] If the manipulation request is [editing manipulator information] (step S21), the category determination unit 14 determines whether the manipulator issuing the manipulation request is a category supervisor. If the manipulator is a category supervisor, manipulation of the manipulator information of the same category is permitted (step S22). Furthermore, if the manipulator is a higher-level supervisor, manipulation of the manipulator information may be permitted regardless of the category. The permission that allows the higher-level supervisor to manipulate the manipulator information may change depending on the settings.

[0064] If the manipulation request is [recreation of data] (step S31), the attribute management unit 15 determines the category of the manipulator issuing the manipulation request by referring to the manipulator information. The attribute management unit 15 links the data to the category of the manipulator creating the data (step S32).

[0065] If the manipulation request is "general manipulation" (step S41), the attribute management unit 14 determines a group and category of the manipulator issuing the manipulation request based on the manipulator information. The manipulation permission of the general manipulation is set in the permission information. The category determination unit 14 reads the data to be manipulated, a category and group of the manipulator making the manipulation request, and the requested manipulation content from the permission information, and determines whether to allow or reject the manipulation request (step S42).

[0066] As described above, the numerical control device 100 of this embodiment classifies the manipulator that manipulates data of the numerical control device 100 as an item called a category. A supervisor classified as a category is called a category supervisor. The category supervisor is provided with a supervisor authority for the category. The authority of the category supervisor is restricted to the same category by the category determination unit 14. The category supervisor manages manipulators of the same category using manipulator information, and supervisors of the same category manage manipulation authority using authority information.

[0067] In addition, the attribute management unit 15 links data created by the manipulator to the category of the manipulator. In this way, a "category" of the manipulator creating the data can be used as a condition for manipulation authorization. In the example of Fig. 6, data to be manipulated can be restricted using the "Category (Machine User)" of the manipulator that created the data (processing program), such as "processing program created by a machine user." This makes it possible to perform management so that data created by a specific "machine manufacturer" is not "referenced" by another "machine manufacturer." Furthermore, manipulation permission can be set in units of files. For example, it becomes possible to perform management so that folders created by a specific "machine manufacturer" are not "referenced" by another "machine manufacturer."

[0068] Initial manipulator information is created by the higher-level supervisor. The higher-level supervisor identifies a manipulator position related to the machine tool (an organization, an entity to which data belongs, etc.) and assigns a supervisor (category supervisor) to manage information for each position.

[0069] A hardware configuration of the numerical control device 100 will be described below by applying this disclosure. Fig. 9 is a graphical representation of a hardware configuration of the numerical control device 100. As in Fig.9, the numerical control device 100 includes a CPU 111 that controls the numerical control device 100 as a whole, a ROM 112 that records programs and data, and a RAM 113 for temporarily loading data, and the CPU 111 reads a system program recorded in the ROM 112 via a bus and executes avoidance according to the system program.

[0070] For example, the non-volatile memory 114 is maintained in a storage state by being backed up by a battery (not shown) even when the power supply of the numerical controller 100 is turned off. The non-volatile memory 114 stores various data such as programs read from an external device 120 via interfaces 115, 118, and 119, and user manipulation input via an input unit 30. The non-volatile memory 114 can store programs and data for executing the numerical controller 100 of this embodiment. In addition, various data, measurement results, causes of incorrect data, etc., are displayed on a display unit 70.

[0071] The interface 115 is an interface for connecting the numerical control device 100 to the external device 120, such as an adapter. Programs, various parameters, etc., are read from the external device 120 side.

[0072] The interface 118 is an interface for connecting the numerical control device 100 to the display unit 70, such as a liquid crystal display. The display unit 70 displays all the individual data read into the memory, data obtained as a result of executing a program, etc.

[0073] The interface 119 is an interface for connecting the numerical control device 100 to the input unit 30, such as a keyboard or a pointing device. The input unit 30 transmits instructions, data, etc., based on operator manipulation via the interface 119 to the CPU 111.

[0074] Although the present disclosure has been described in detail, the disclosure is not limited to the individual embodiments mentioned above. Various additions, replacements, modifications, partial deletions, etc. are possible for these embodiments within the scope of the gist of the disclosure or within the scope of the gist of the disclosure that follows from the content described in the claims and their equivalents. Furthermore, these embodiments can be implemented in combination. For example, in the embodiments described above, the order of each operation and the order of each process are illustrated as examples and are not limited to them.

[0075] Supplementary comments are disclosed below with respect to the above embodiments and variants. Supplementary Note 1

[0076] A numerical control device (100) comprises a manipulation request receiving unit (11) configured to receive a manipulation request from a manipulator; and a category determination unit (14) configured to manage authorization information serving as setting information of a manipulation authorization for data to be manipulated by the manipulation request, and the authorization information includes a category of a manipulator that creates a manipulation authorization for the manipulator, a category of a restricted person that is a manipulator restricted by the manipulation authorization, and a content of a manipulation for which the restricted person has authorization, and wherein, when a manipulator that issues a manipulation request for processing the manipulation authorization,is a supervisor, if a category of the manipulator issuing the manipulation request is the same as the category of the manipulator creating the manipulation authorization, the category determination unit (14) allows processing of the manipulation authorization., Supplementary Note 2

[0077] The numerical control device (100), wherein, when a manipulator issuing a manipulation request for a manipulation authorization included in the authorization information is a supervisor and the manipulator requests processing of the manipulation authorization, if a category of the manipulator issuing the manipulation request is different from the category of the manipulator creating the manipulation authorization, the category determination unit (14) rejects processing of the manipulation authorization. Supplementary Note 3

[0078] The numerical control device (100), wherein the category determination unit (14) manages manipulator information, and the manipulator information links a manipulator with a presence or absence of a supervisor authority of the manipulator and a category indicating a position of the manipulator. Supplementary Note 4

[0079] The numerical control device (100), wherein the category determination unit (14) performs management such that categories of a manipulator added to the manipulator information and a manipulator adding the manipulator match. Supplementary Note 5

[0080] The numerical control device (100) includes a creator of the data in the authorization information as information for specifying the data. Supplementary Note 6

[0081] A storage medium (112, 113, 114) for storing computer-readable instructions causes one or a plurality of processors (111) to execute processes for receiving a manipulation request from a manipulator; and for managing authorization information serving as setting information of a manipulation authorization for data to be manipulated by the manipulation request, wherein: the authorization information includes a category of a manipulator who creates a manipulation authorization for the manipulator, a category of a restricted person who is a manipulator restricted by the manipulation authorization, and a content of a manipulation for which the restricted person has authorization, and wherein, when a manipulator who issues a manipulation request to process the manipulation authorization is a supervisor,If the category of the manipulator issuing the manipulation request is the same as the category of the manipulator creating the manipulation authorization, editing of the manipulation authorization by a manipulator making the manipulation request is permitted. Explanations of letters or numbers 100 numerical control device 11 Manipulation request receiving unit 12 Authentication unit 13 Manipulation request execution unit 14 Category determination unit 15 Attribute management unit 111 CPU 112 ROM 113 RAM 114 non-volatile memory QUOTES CONTAINED IN THE DESCRIPTION

[0000] This list of documents submitted by the applicant was generated automatically and is included solely for the convenience of the reader. This list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions. Cited patent literature

[0000] JP 2012-13731 A

[0003]

Claims

[1] Numerical control device comprising: a manipulation request receiving unit configured to receive a manipulation request from a manipulator; and a category determination unit configured to manage authorization information serving as setting information of a manipulation authorization for data to be manipulated by the manipulation request, wherein: the authorization information includes a category of a manipulator that creates a manipulation authorization for the manipulator, a category of a restricted person that is a manipulator restricted by the manipulation authorization, and a content of a manipulation for which the restricted person has authorization, and If a manipulator issuing a manipulation request to edit the manipulation authorization is a supervisor, if a category of the manipulator issuing the manipulation request is the same as the category of the manipulator creating the manipulation authorization, the category determination unit allows editing of the manipulation authorization. [2] The numerical control device according to claim 1, wherein, when a manipulator issuing a manipulation request for a manipulation authority included in the authority information is a supervisor and the manipulator requests editing of the manipulation authority, if a category of the manipulator issuing the manipulation request is different from the category of the manipulator creating the manipulation authority, the category determination unit rejects editing of the manipulation authority. [3] The numerical control device according to claim 1, wherein the category determination unit manages manipulator information, and the manipulator information links a manipulator with a presence or absence of a supervisor authority of the manipulator and a category indicating a position of the manipulator. [4] The numerical control device according to claim 3, wherein the category determination unit performs management so that categories of a manipulator added to the manipulator information and a manipulator adding the manipulator match. [5] The numerical control device according to claim 4, wherein a creator of the data is included in the authorization information as information for specifying the data. [6] A storage medium for storing computer-readable instructions, which is adapted to cause one or more processors to execute processes to: Receiving a manipulation request from a manipulator; and Managing authorization information that serves as setting information of a manipulation authorization for data to be manipulated by the manipulation request, where: the authorization information includes a category of a manipulator that creates a manipulation authorization for the manipulator, a category of a restricted person that is a manipulator restricted by the manipulation authorization, and a content of a manipulation for which the restricted person has authorization, and If a manipulator issuing a manipulation request to edit the manipulation authorization is a supervisor, if a category of the manipulator issuing the manipulation request is the same as the category of the manipulator creating the manipulation authorization, editing of the manipulation authorization by a manipulator making the manipulation request is permitted.

Images