Information processing apparatus, information processing method, and information processing program

Abstract

To provide an information processing apparatus, an information processing method, and an information processing program including a resilience function.SOLUTION: An information processing apparatus according to an embodiment is installed in an edge, and comprises: an abnormality detection unit that, when detecting an abnormality according to a predetermined rule, changes a mode indicating the normal or abnormal state of the edge to the abnormal state; a network connection and cut-off unit that performs processing of cutting off a network connection being connected when the abnormality detection unit detects the abnormality; a sub-program storage unit that stores a sub-program for executing one or more predetermined functions; a dealing unit that instructs the execution of the sub-program on the basis of the state of the mode; and a sub-program execution unit that executes the sub-program.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] An embodiment of the present invention relates to an information processing device, an information processing method, and an information processing program related to cyber resilience. [Background technology]

[0002] In recent years, as the social position of information processing systems has become more important, attention has been focused on resilience technology that quickly restores system operation in the event of a disaster, etc. With regard to cyber attacks, as infrastructure systems have become cyber-physical systems (CPS), it has become difficult to defend against all attacks and keep all systems running continuously, and the idea of ​​cyber resilience, which minimizes the impact of attacks and enables early recovery, is becoming more widespread in the IT field. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent Publication No. 2021-60778 [Patent Document 2] JP 2001-256138 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, in order to reduce the impact of attacks, resilience functions that focus on the edge, which is the core of infrastructure services, are needed.

[0005] An object of the present invention is to provide an information processing device, an information processing method, and an information processing program that are equipped with a resilience function. [Means for solving the problem]

[0006] An information processing device according to an embodiment includes an abnormality detection unit provided at an edge, which sets a mode indicating an abnormal / normal state of the edge to an abnormal state when an abnormality is detected according to a predetermined rule, a network connection / disconnection unit that performs processing to disconnect an currently connected network connection when the abnormality detection unit detects an abnormality, a subprogram storage unit that stores subprograms for executing one or more predetermined functions, a response unit that instructs the execution of the subprogram based on the state of the mode, and a subprogram execution unit that executes the subprogram. [Brief description of the drawings]

[0007] [Figure 1] FIG. 1 is a configuration diagram of an entire system according to the first embodiment. [Diagram 2] FIG. 2 illustrates an example of an anomaly detection database included in the information processing device according to the first embodiment. [Diagram 3] FIG. 3 shows an example of the configuration of a constantly executing program included in the information processing device according to the first embodiment. [Figure 4] FIG. 4 shows an example of the configuration of a normal execution program included in the information processing device according to the first embodiment. [Diagram 5] FIG. 5 shows an example of the configuration of an abnormality execution program included in the information processing device according to the first embodiment. [Figure 6] FIG. 6 shows an example of the configuration of a return execution program included in the information processing apparatus according to the first embodiment. [Figure 7] FIG. 7 is a flowchart showing the processing operation of the information processing device according to the first embodiment. [Figure 8] FIG. 8 is a flowchart showing a processing operation performed when the information processing device according to the first embodiment acquires sensor data. [Figure 9] FIG. 9 is a flowchart showing a processing operation when the information processing device according to the first embodiment operates an actuator. [Figure 10] FIG. 10 is a flowchart showing a processing operation when the information processing device according to the first embodiment restores network operation. [Figure 11] FIG. 11 is a configuration diagram of the entire system according to the second embodiment. [Figure 12] FIG. 12 is a configuration diagram of an edge according to the first modification. [Figure 13] FIG. 13 is a configuration diagram of an edge according to the second modification. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0008] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. (First embodiment) In this embodiment, an example of an information processing device that can flexibly (resiliently) respond to an abnormality caused by a natural disaster, a cyber attack, etc. in a cloud server connected via a network is shown. The information processing device is installed at an edge (for example, in a power plant or a railway control facility) and has a function of controlling machines and the like installed at the edge by exchanging data with the cloud server.

[0009] FIG. 1 is a configuration diagram of an entire system according to the first embodiment.

[0010] The information processing device 1 of the first embodiment includes an abnormality detection unit 11, a recovery detection unit 12, an abnormality detection rule DB 13, a network connection / disconnection unit 14, a response unit 15, a subprogram execution unit 16, a subprogram storage unit 17, a collected data temporary storage unit 18, and a communication unit 19. The subprogram storage unit 17 stores one or more programs among a continuous execution PG 171, a normal execution PG 172, an abnormal execution PG 173, and a recovery execution PG 174.

[0011] The information processing device 1 is a computer equipped with a calculation function, a control function, etc., a CPU that executes programs such as software, and a volatile memory or non-volatile memory that stores data, and may be any computer device such as a personal computer, a smartphone, etc. The information processing device 1 transmits control commands (e.g., control of the number of turbines, amount of chemicals injected, etc.) to a control target installed in the edge 10, and receives sensor data (e.g., temperature sensor data, amount of chemicals injected, rotation speed data, etc.) output by a measurement device such as a sensor installed in the edge 10.

[0012] More specifically, the information processing device 1 is installed at an edge 10 such as a wind power plant facility or a dam facility. In the case of a wind power plant facility, the control object is, for example, a wind turbine, the control command is, for example, control of the number of turbines, and the sensor data is, for example, rotation speed data. Naturally, the control object, control command, and sensor data are not limited to one each, and there may be multiple.

[0013] The external network 2 is a network to which one or more information processing devices 1 and one or more clouds 3 are connected, such as the Internet. Note that the external network 2 is not limited to wired or wireless, and may be a communication network using any communication method, such as Ethernet, WiFi (registered trademark), or 5G communication (5th Generation communication).

[0014] The cloud 3 indicates a computer system configured by cloud technology, and exchanges various data with the information processing device 1 via the external network 2. The cloud 3 in this embodiment has a function of transmitting control data to the information processing device 1 to control a control target such as a machine connected to the information processing device 1, and receiving sensor data transmitted by the information processing device 1. Note that a plurality of clouds 3 may be connected to the external network 2, and the information processing device 1 may communicate data with a plurality of clouds 3.

[0015] The edge 10 indicates a system to be controlled by the cloud, and in this embodiment includes the information processing device 1, a control target connected to the information processing device 1, a sensor, and the like. For example, when this embodiment is applied to a power plant, a system including the information processing device 1 and, for example, a power generation facility controlled by the information processing device 1 becomes the edge 10. The edge 10 of this embodiment can be applied to any facility, but when applied to, for example, a power plant, a dam facility, or the like, the edge 10 may be installed in a remote area or a place where people have difficulty stopping by, and since it is not possible to place people near the control target, control by the cloud as in this embodiment is desirable.

[0016] The anomaly detection unit 11 has a function of detecting an anomaly from the communication status of the external network 2 according to rules included in the anomaly detection rule DB 13. When an anomaly is detected, the anomaly detection unit 11 calls the network connection / disconnection unit 14 and instructs it to disconnect communication with the external network 2. The timing at which the anomaly detection unit 11 monitors the communication status of the external network 2 may be any timing. Note that when the network connection / disconnection unit 14 disconnects communication with the external network 2, communication between the anomaly detection unit 11 and the recovery detection unit 12 and the external network 2 may be continued.

[0017] The recovery detection unit 12 has a function of detecting recovery from an abnormal state to a normal state from the communication status of the external network 2 according to rules contained in the anomaly detection rule DB 13 after the anomaly detection unit 11 has disconnected the external network 2. When recovery is detected, the recovery detection unit 12 calls the network connection / disconnection unit 14 and instructs it to resume communication with the external network 2. The timing at which the recovery detection unit 12 monitors the communication status of the external network 2 may be any timing.

[0018] When the abnormality detection unit 11 detects an abnormality in the environment in which the edge operates, such as the cloud 3, it sets the state (sometimes called the mode) of the operating environment of the edge to an abnormal state, and when the recovery detection unit 12 confirms that the state is not abnormal in the abnormal state, it sets the mode of the edge to a normal state.

[0019] When the information processing device 1 and the external network 2 are completely disconnected, if it is necessary to monitor the status of devices present in the external network 2 according to the anomaly detection rule, the information processing device 1 may have a function of acquiring the status via a network other than the disconnected external network 2. For example, if the network to be disconnected is a wired Internet line, a mobile phone network or other analog telephone line may be used for monitoring by the anomaly detection unit 11 and the recovery detection unit 12.

[0020] The abnormality detection rule DB 13 is, for example, a non-volatile memory, and stores an abnormality detection rule database referenced by the abnormality detection unit 11, the recovery detection unit 12, and the like.

[0021] FIG. 2 is an example of an anomaly detection database included in the information processing device according to the first embodiment, and includes rules such as targets to be monitored for anomaly detection and states that are regarded as abnormal states.

[0022] Data R1 is an example of a rule that monitors the arrival of packets and assumes that an abnormal state exists when a packet cannot reach the cloud 3. Data R2 is an example of a rule that, when the number of connections to the information processing device 1 is limited, assumes that an abnormal state exists when the number of connections exceeds 100 requests / second, i.e. assumes that a DoS attack is occurring. Data R3 is an example of a rule that uses a remote attestation technique to monitor the cloud 3 system and assumes that an abnormal state exists when the attestation result indicates an abnormal state, i.e., does not match the expected state.

[0023] Note that the present invention is not limited to the above example, and appropriate rules may be set according to the application of the present embodiment. The anomaly detection unit 11 monitors the monitoring target in the anomaly detection database, and if the state matches the rule, it is deemed to be in an abnormal state, and the recovery detection unit 12 monitors the monitoring target in the anomaly detection database when in an abnormal state, and if the state no longer matches the rule, it is deemed to have returned to a normal state. If multiple rules exist in the anomaly detection database, it may be deemed to be in an abnormal state when any one of the rules is satisfied, or it may be deemed to be in an abnormal state when a certain number of rules or all of the rules are satisfied.

[0024] Returning to FIG. 1, the network connection / disconnection unit 14 has a function of disconnecting or reconnecting communication with the external network 2 according to instructions from the recovery detection unit 12 and the abnormality detection unit 11. Specifically, the network connection / disconnection unit 14 may perform a disconnection process with the external network 2 when an abnormality is detected while the edge mode is in the normal state, and perform a connection process with the external network 2 when a recovery is detected. In addition, the network connection / disconnection unit 14 may enable an operation of passing only predetermined packets when an abnormality is detected while the edge mode is in the normal state, and disable the operation of passing only predetermined packets when a recovery is detected.

[0025] The network connection / disconnection unit 14 may cut off all communications when cutting off communications, or may have a function of cutting off only communications from the external network 2 to the internal network in the edge 10 and passing communications from the internal network to the external network 2. In addition, when the recovery detection unit 12 and the abnormality detection unit 11 are activated, the communications between the recovery detection unit 12 and the abnormality detection unit 11 and the external network 2 may not be cut off.

[0026] In addition, since TCP / IP communication is generally not established in one direction, the network connection / disconnection unit 14 may have a function of returning a response to a communication device of the internal network when only communication from the external network 2 to the internal network is disconnected. The network connection / disconnection unit 14 may also have a function such as a general firewall or a one-way gateway, such as a function of passing or blocking only packets received by a specific protocol. The network connection / disconnection unit 14 also calls the response unit 15 in response to a change in the state of the network, such as connection or disconnection. The above functions of the network connection / disconnection unit 14 can reduce the impact on the site of the edge device 10 when an abnormality occurs.

[0027] The response unit 15 has a function of changing the program to be executed by the subprogram execution unit 16 in response to a change in the mode state. When the information processing device 1 is started, the response unit 15 first instructs the subprogram execution unit 16 to execute the normal execution PG 171 and the normal execution PG 172 stored in the subprogram storage unit 17. When the mode becomes an abnormal state, the response unit 15 instructs the subprogram execution unit 16 to end the normal execution PG 172 and instructs the subprogram execution unit 16 to start executing the abnormal execution PG 173. On the other hand, when the response unit 15 recovers from the abnormal state, it instructs the subprogram execution unit 16 to end the abnormal execution PG 173, executes the recovery execution PG 174, and instructs the subprogram execution unit 16 to re-execute the normal execution PG 172. The response unit 15 may have a function of switching the program to be executed, for example, between the normal execution PG 172 and the abnormal execution PG 173, based on the mode.

[0028] The subprogram execution unit 16 has a function of calling from the subprogram storage unit 17 a program instructed by the corresponding unit 15 and executing it, and also has a function of terminating the instructed program when instructed by the corresponding unit 15 to terminate the program. The subprogram execution unit 16 also has a function of temporarily storing data to be sent to the external network 2, collected by the always-on PG 171 and the abnormality PG 173, in the collected data temporary storage unit 18 when communication is not possible due to disconnection or the like, and sending the data to the external network 2 when recovery is performed. For example, if the information processing device 1 has the purpose of collecting data such as sensor data and transmitting it to a server present in the external network 2, the sensor data is temporarily stored in the collected data temporary storage unit 18 when the external network 2 is disconnected, and the sensor data is transmitted to the server present in the external network 2 when reconnected to the external network 2.

[0029] The subprogram execution section 16 always executes a constant operation program 171, and executes one or more of a normal operation program 172, an abnormal operation program 173, and a recovery operation program 174 based on the edge mode state.

[0030] The collected data temporary storage unit 18 has a function of temporarily storing data designated by instructions from the sub-program execution unit 16 .

[0031] The subprogram storage unit 17 has a function of storing one or more subprograms, including a continuous operation program 171, a normal operation execution program 172, an abnormal operation execution program 173, and a recovery execution program 174.

[0032] The constant operation PG 171 is a subprogram that includes a procedure for acquiring data from the sensors.

[0033] The normal operation execution program 172 is a subprogram including a procedure for transmitting data acquired by the constant operation program 171 via the external network 2. The normal operation execution program may include a procedure for transmitting an actuator operation command received via the external network 2 to the actuator to be controlled.

[0034] The abnormality execution program 173 is a subprogram including a procedure for storing the data acquired by the normal operation program 171 in the collected data temporary storage unit 18. The abnormality execution program may include a procedure for transmitting all or part of the actuator operation command to the actuator to be controlled in accordance with a predetermined rule.

[0035] The return execution program 174 is a subprogram including a procedure for transmitting the data stored in the collected data temporary storage unit 18 via the external network 2.

[0036] The communication unit 19 is a communication function that is connected to the external network 2 and performs data communication with an external device such as the cloud 3, and is, for example, a communication interface that can be connected to the Internet. The communication unit 19 may be any one or more communication interfaces such as wired or wireless. The communication unit 19 may also be configured with one or more physical communication interfaces.

[0037] For example, when the communication unit 19 has one physical communication interface, the abnormality detection unit 11, the recovery detection unit 12, the network connection / disconnection unit 14, etc. may each be independently logically connected to the external network 2. On the other hand, when the communication unit 19 has multiple physical communication interfaces, the abnormality detection unit 11, the recovery detection unit 12, the network connection / disconnection unit 14, etc. may each be independently connected to the external network 2 using a physical communication interface. Furthermore, the abnormality detection unit 11 and the recovery detection unit 12 may have a function of communicating with the cloud 3 through a communication network other than the external network 2, without using the communication unit 19.

[0038] As a typical application example of this embodiment, a configuration will be described below in which sensor data is collected and transmitted to the external network 2, and an actuator, which is an example of a control target, is operated in response to a command from the external network 2. Note that the program configuration shown below is an example, and the program structure changes depending on the application, so it is not limited to the following example.

[0039] FIG. 3 shows an example of the configuration of a constantly executing program included in the information processing device according to the first embodiment.

[0040] The continuous execution PG 171 includes procedures for a computer or the like to execute the functions of a sensor data acquisition unit 1711 and an actuator operation unit 1712. The sensor data acquisition unit 1711 has a function of acquiring data from a sensor, and transmitting the data to a data network transmission unit 1721 of the normal state execution PG 172 when the normal state execution PG 172 is operating in the subprogram execution unit 16, and transmitting the data to a data temporary storage control unit 1731 of the abnormal state execution PG 173 when the abnormal state execution PG 173 is operating in the subprogram execution unit 16.

[0041] In addition, the actuator operation unit 1712 has the function of receiving actuator operation commands from the data network receiving unit 1722 of the normal state execution PG 172 when the normal state execution PG 172 is running in the subprogram execution unit 16, and from the degeneration control unit 1732 of the abnormal state execution PG 173 when the abnormal state execution PG 173 is running in the subprogram execution unit 16, and operating the actuator.

[0042] FIG. 4 shows an example of the configuration of a normal execution program included in the information processing device according to the first embodiment.

[0043] The normal state execution PG includes procedures for a computer or the like to execute the functions of the data network transmission unit 1721 and the data network reception unit 1722. The data network transmission unit 1721 has a function of transmitting data received from the sensor data acquisition unit 1711 via the external network 2. The data network reception unit 1722 has a function of transmitting an actuator operation command received from the external network 2 to the actuator operation unit 1712.

[0044] FIG. 5 shows an example of the configuration of an abnormality execution program included in the information processing device according to the first embodiment.

[0045] The abnormality execution PG 173 includes a procedure for a computer or the like to execute the functions of the data temporary storage control unit 1731 and the degeneration control unit 1732. The data temporary storage control unit 1731 has a function of storing data received from the sensor data acquisition unit 1711 in the collected data temporary storage unit 18. The degeneration control unit 1732 has a function of issuing an operation instruction to the actuator operation unit 1712 according to a predetermined rule even when there is no actuator operation command from an external device such as the cloud 3 via the external network 2. This rule may be determined in advance and set in the degeneration control unit 1732. For example, a rule that omits complicated operations such as power-optimized control and continues simple operations that are poor in power efficiency but meet a certain operating standard, or a function that safely stops the actuator may be set according to the application. In addition, the rule set in the degeneration control unit 1732 may be dynamically set by the cloud 3 to the information processing device 1 depending on the situation. In addition, a rule according to the degree of abnormality or the like may be set in the degeneration control unit 1732, and the degeneration control unit 1732 may determine the rule according to the degree of the detected abnormality or the like.

[0046] FIG. 6 shows an example of the configuration of a return execution program included in the information processing apparatus according to the first embodiment.

[0047] The recovery operation PG 173 includes a procedure for a computer or the like to execute the function of the temporarily stored data network retransmission unit 1741. The temporarily stored data network retransmission unit 1741 has a function of acquiring data stored in the collected data temporary storage unit 18 and transmitting it via the external network 2.

[0048] FIG. 7 is a flowchart showing the processing operation of the information processing device according to the first embodiment.

[0049] When the information processing device 1 is started (step S101), the subprogram execution unit 16 starts the normal execution PG 171 (step S102), and then starts the normal execution PG 172 (step S103). Thereafter, the abnormality detection unit 11 refers to the abnormality detection rule DB 13 and judges whether the edge mode is in an abnormal state by a predetermined rule, and if it is not in an abnormal state, returns to the judgment of whether it is in an abnormal state again (No in step S104). On the other hand, if it is in an abnormal state, the network connection / disconnection unit 14 disconnects the external network 2 (step S105). Next, the subprogram execution unit 16 ends the normal execution PG 172 (step S106), and starts the abnormal execution PG 173 (step S107).

[0050] Furthermore, the abnormality detection unit 11 judges whether the abnormal state exists, and if the abnormal state continues (Yes in step S108), the process returns to the determination of whether the abnormal state exists. On the other hand, if the abnormal state is no longer exists, the network connection / disconnection unit 14 recovers the network (step S109), and the subprogram execution unit 16 ends the abnormal state execution program 173 (step S110) and also starts the recovery state execution program (step S111). In step S111, the subprogram execution unit 16 starts the normal state execution program 172 according to the procedure of the recovery state execution program 174. When the normal state execution program 172 is started, the process returns to step S103, and the processes from step S104 onwards are repeated. When the normal state execution program 172 is started, the recovery state execution program ends.

[0051] FIG. 8 is a flowchart showing a processing operation performed when the information processing device according to the first embodiment acquires sensor data.

[0052] When the subprogram execution unit 16 acquires sensor data (step S121), it determines whether the abnormality execution PG is operating, and if it is not operating (No in step S122), it transmits the acquired sensor data to the original destination (e.g., the cloud 3) through the external network 2 (step S123). If it is operating (Yes in step S122), it temporarily stores the acquired sensor data in the information processing device 1 (step S124).

[0053] FIG. 9 is a flowchart showing a processing operation when the information processing device according to the first embodiment operates an actuator.

[0054] The subprogram execution unit 16 judges whether the abnormality execution PG 173 is operating (step S141). If it is not operating (No in step S141), the subprogram execution unit 16 receives control data from the cloud 3 via the original external network 2 (step S142), and outputs a control command for controlling the actuator according to the received control content (step S143). On the other hand, if the abnormality execution PG 173 is operating (Yes in step S141), the subprogram execution unit 16 determines the execution content of the abnormality execution PG 173 (step S144), and outputs a control command for controlling the actuator according to the determined control content (step S143). In step S144, the execution content of the abnormality execution PG 173 determined by the subprogram execution unit 16 may be, for example, a content obtained by degenerating the control content by the regular execution PG 171 or the normal execution PG 172 (degenerate control content), and the degenerate control content may be determined in advance, for example, by setting it in a program.

[0055] FIG. 10 is a flowchart showing a processing operation when the information processing device according to the first embodiment restores network operation.

[0056] When the recovery detection unit 12 detects recovery from an abnormal state, the subprogram execution unit 16 acquires the temporarily stored data stored in the temporary collected data storage unit 18 and transmits it to the cloud 3 or the like via the external network 2 (step S162).

[0057] The above procedure enables a resilience function that allows the edge 10 to continue minimum processing even if an abnormality occurs in the external network 2 or an apparatus connected to the external network 2, such as the cloud 3 system, is in an abnormal state, i.e., the mode of the edge 10 is in an abnormal state. For example, when this embodiment is applied to a power generation facility, it becomes possible to continue power generation without stopping even if the cloud 3 stops.

[0058] Furthermore, according to this embodiment, for example, it is possible to realize a function of continuously collecting sensor data and collecting it again from the external network 2 when the network state is restored, and a function of continuing a minimum control operation (for example, actuator operation) even without an instruction from the external network 2, and it is possible to provide services without completely stopping them at the edge 10. According to this embodiment, it is possible to realize a stronger infrastructure system, and it is possible to continue to operate a minimum amount of processing at the edge 10 in the event of an attack that occurs in the CPS system, an abnormality in the network cloud 3, or a disaster. Second embodiment FIG. 11 is a configuration diagram of the entire system according to the second embodiment.

[0059] When the names of the functional blocks in this diagram are the same as those of the functional blocks of the information processing device 1 in FIG. 1, detailed explanations of the functions etc. will be omitted and the reference numerals of the functional blocks of the information processing device 1 will be given the letter A.

[0060] In the configuration shown in the first embodiment, an example was shown in which all functions were arranged within one information processing device 1, but in this embodiment, as shown in FIG. 11, the abnormality detection unit 11A, recovery detection unit 12A, abnormality detection rule DB 13A, and network connection / disconnection unit 14 are configured as one information processing device 1A1 (also referred to as the first information processing device 1A1), and the response unit 15A, subprogram execution unit 16A, subprogram storage unit 17A, and collected data temporary storage unit 18A are configured as another information processing device 1A2 (also referred to as the second information processing device 1A2).

[0061] For example, according to this embodiment, the first information processing device 1A1 has a function common to the control targets installed in the edge 10A, and the second information processing device 1A2 has a program corresponding to the control targets connected thereto, so that even when different control targets are provided in the edge 10, the functions of the information processing device 1 (the functions shown in the first embodiment) can be flexibly provided in the edge 10. Also, the first information processing device 1A1 may exchange data with multiple clouds 3A1 and 3A2.

[0062] Furthermore, when various functions exist within the system (edge ​​10A), three or more second information processing devices 1A2 may be provided, and the programs stored in the subprogram storage unit 17A of each second information processing device 1A2 may be changed. Also, for example, when there are two second information processing devices 1A2, one may have only the continuous operation PG 171A, and the other may have the normal operation PG 172A, the abnormal operation PG 173A, and the recovery operation PG 174A, and the functions to be provided may be flexibly divided according to the purpose and the constraints of the device.

[0063] According to this modification, the edge device 10A can achieve a resilience function with a more flexible configuration by using a plurality of information processing devices 1A. (Variation 1) The above-described embodiment can also be used to control, for example, a wind power generation device. In this modification, an example is described in which a plurality of wind power generation devices are installed and operated simultaneously within the edge 10B. For example, since the plurality of wind power generation devices may have different manufacturing dates, may have been improved, or may have different characteristics depending on the manufacturer, it may be necessary to prepare programs and parameters that are compatible with each wind power generation device.

[0064] Fig. 12 is a configuration diagram of an edge according to Modification 1, and is an example in which the configuration of the second information processing device 1A2 in Fig. 11 is mainly changed. In Fig. 12, functional blocks with the same names as those in Fig. 11 are given the reference numeral B instead of A, and unless otherwise specified, the functions are the same.

[0065] A sub-PG storage unit 17B is provided inside the second information processing device 1B2, in which execution programs are stored for a plurality of wind power generators 100B-1, 100B-2, 100B-3, and 100B-N, numbered 1, 2, 3, and N (N is a natural number equal to or greater than 2). For example, a continuous execution PG 171B-N, a normal execution PG 172B-N, an abnormal execution PG 173B-N, and a recovery execution PG 174B-N are provided for wind power generator N.

[0066] The subprogram execution unit 16B controls each wind power generator with the execution program prepared for each and exchanges data with each wind power generator. This allows maintenance to be performed at one information processing device 1B2, reducing the need for workers to move around. It is also convenient for the information processing device 1B2 to transmit control commands to each wind power generator and collect sensor data from each wind power generator via wireless communication. (Variation 2) This modification is an example in which a second information processing device is provided for each of a plurality of wind turbine generators.

[0067] FIG. 13 is a configuration diagram of an edge according to the second modification, in which functional blocks with the same names as those in FIG. 11 are given the reference numeral C instead of A, and the functions are the same unless otherwise specified.

[0068] Second information processing devices 1C2-1 and 1C2-N are prepared and connected to wind power generators No. 1 and No. N (N is a natural number of 2 or more), respectively. The internal configurations of the second information processing devices 1C2-1 and 1C2-N are the same, and when no particular distinction is made, they are referred to as second information processing devices 1C2. The following description will be given taking the second information processing device 1C2-N as an example, but the same applies to the second information processing device 1C2-1.

[0069] The second information processing device 1C2-N stores the continuous execution PG 171B-N, the normal execution PG 172B-N, the abnormal execution PG 173B-N, and the recovery execution PG 174B-N prepared for wind power generator No. N in a subprogram storage unit 17C-N, and executes them in a subprogram execution unit 16C-N.

[0070] In the edge 10C, the first information processing device connected to the external network 2 is the information processing device 1C1, and so the first information processing device 1C1 communicates with a plurality of second information processing devices 1C2-1, 1C2-N.

[0071] This modification is effective when it is desired to use a program suitable for each of a plurality of wind power generating devices, or when a plurality of wind power generating devices (e.g., unit No. 1, unit No. N) are integrated with the corresponding second information processing devices (corresponding to information processing devices 1C2-1, 1C2-N). In addition, although the manufacturing dates of the plurality of wind power generating devices may differ, different improvements may have been made, or the characteristics may differ depending on the manufacturer, this modification makes it possible to prepare a program suitable for each wind power generating device. In addition, this modification makes it possible to perform repair and inspection while keeping the other generators operating, even if one wind power generating device is stopped.

[0072] In addition, according to this modified example, the second information processing devices 1C2-1, 1C2-N can be installed at the installation locations of the corresponding wind power generation devices, and system construction is easy by exchanging data between the first information processing device 1C1-1 and the second information processing device (corresponding to the information processing devices 1C2-1, 1C2-N) via wireless communication.

[0073] According to the above-described embodiment and modified examples, it is possible to provide an information processing device, an information processing method, and an information processing program. According to the embodiment and modified examples, even if the number of attack interfaces increases in the future due to the shift to CPS, it is possible to minimize the impact on the edge during an attack and continue to provide essential infrastructure services.

[0074] The present invention is not limited to the above-described embodiments as they are, and can be embodied by modifying the components in the implementation stage without departing from the gist of the invention. In addition, various inventions can be formed by appropriately combining the multiple components disclosed in the above-described embodiments. For example, some components may be deleted from all the components shown in the embodiments. Furthermore, components from different embodiments may be appropriately combined. In addition, the processing steps shown in the flowcharts and sequence charts shown in the above-described embodiments are within the scope of the present invention even if the order of steps is changed, steps are deleted, or steps are added, without departing from the gist of the present invention.

[0075] The processing shown in the flowcharts, sequence charts, etc. may be realized by hardware such as a CPU, an IC chip, or a digital signal processor (DSP), or by software (e.g., a program) operated on a computer including a microcomputer, or by a combination of hardware and software.

[0076] The present invention is also applicable when the claims are expressed as a control logic, a program including instructions for causing a computer to execute the control logic, or a computer-readable recording medium having the instructions written thereon. The names and terms used are not intended to be limiting, and other expressions that have substantially the same content and intent are also included in the present invention. [Explanation of symbols]

[0077] 1...information processing device, 2...external network, 3...cloud, 11...recovery detection unit, 12...abnormality detection unit, 13...abnormality detection rule DB, 14...network connection / disconnection unit, 15...response unit, 16...subprogram execution unit, 17...subprogram storage unit, 18...collected data temporary storage unit, 171...continuous execution PG, 172...normal execution PG, 173...abnormal execution PG, 174...recovery execution PG.

Claims

1. Equipped on the edge, an anomaly detection unit that detects an anomaly according to a predetermined rule and sets a mode indicating an abnormal / normal state of the edge to an abnormal state; a network connection / disconnection unit that performs a predetermined process when the abnormality detection unit detects an abnormality; a subprogram storage unit for storing subprograms for executing one or more predetermined functions; a corresponding unit for instructing execution of the subprogram based on the state of the mode; a subprogram execution unit that executes the subprogram; An information processing device comprising:

2. a recovery detection unit that detects a recovery indicating that the mode has changed from an abnormal state to a normal state according to a predetermined rule; 2. The information processing apparatus according to claim 1, wherein the network connection / disconnection unit performs a predetermined process when the recovery detection unit detects a recovery.

3. 3. The information processing apparatus according to claim 2, further comprising a collected data temporary storage unit for temporarily storing data collected when said mode is in an abnormal state.

4. 4. The information processing apparatus according to claim 3, wherein the network connection / disconnection unit performs a process of disconnecting the network when an abnormality is detected while the mode is in a normal state, and performs a process of connecting the network when the recovery is detected.

5. 3. The information processing device according to claim 2, wherein the network connection / disconnection unit enables an operation of passing only predetermined packets when an abnormality is detected while the mode is in a normal state, and disables the operation of passing only the predetermined packets when the recovery is detected.

6. The constantly running program includes a procedure for acquiring data from the sensor; the normal execution program includes a procedure for transmitting the data via a network; the abnormality execution program includes a procedure for storing the data in a collected data temporary storage unit; the return execution program includes a procedure for transmitting the data stored in the collected data temporary storage unit via the network; The information processing apparatus according to claim 1 , wherein the sub-programs include the continuous execution program, the normal execution program, the abnormal execution program, and the recovery execution program.

7. The subprogram execution unit includes: The constantly executing program is constantly executed; 7. The information processing apparatus according to claim 6, wherein one or more of the normal execution program, the abnormal execution program, and the recovery execution program are executed based on the state of the mode.

8. the normal execution program includes a procedure for transmitting an actuator operation command received via the network to an actuator; the abnormality execution program includes a procedure for transmitting all or a part of the actuator operation command to the actuator in accordance with a predetermined rule; 8. The information processing apparatus according to claim 7, wherein the corresponding unit has a function of switching a program to be executed between the normal execution program and the abnormal execution program based on the mode.

9. A method of processing at an edge, comprising the steps of: When an abnormality is detected according to a predetermined rule, a mode indicating an abnormal normal state of the edge is set to an abnormal state; When the abnormality is detected, a process of disconnecting the currently connected network is performed; An information processing method comprising the steps of: executing all or part of one or more subprograms for performing a predetermined function based on the state of said mode.

10. a step of setting a mode indicating an abnormal / normal state of the edge to an abnormal state when an abnormality is detected according to a predetermined rule; A procedure for disconnecting a currently connected network connection when the abnormality is detected; An information processing program comprising a procedure for causing a computer to execute all or part of one or more subprograms for executing a predetermined function based on the state of the mode.

Images