Information transmission system, information transmission method, and information transmission program

Abstract

To provide an information transmission system, an information transmission method, and an information transmission program that are capable of transmitting information from a first network to a second network while preventing the intrusion of malware, etc.SOLUTION: An information transmission system according to the present invention is an information transmission system that transmits information between a first network and a second network, and includes a first display unit connected to the first network and displaying a first image indicating first information to be transmitted to the second network, a first photographing unit connected to the second network and photographing the first image displayed on the first display unit, and a first information acquisition unit connected to the second network and acquiring the first information from the first image photographed by the first photographing unit.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to an information transmission system, an information transmission method, and an information transmission program for transmitting information between a first network and a second network. [Background technology]

[0002] Patent Document 1 discloses a remote management system that enables secure and efficient remote management of managed devices connected to a closed network such as an in-house LAN via a wide area network such as the Internet. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2004-355234 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, in the system of Patent Document 1, since the managed device is remotely controlled from an external facility via the Internet, there is a risk of malware or the like invading from the outside via the Internet. The present invention has been made to solve this problem, and aims to provide an information transmission system, an information transmission method, and an information transmission program that are capable of transmitting information from a first network to a second network while preventing the intrusion of malware or the like. [Means for solving the problem]

[0005] The information transmission system of the present invention is an information transmission system that transmits information between a first network and a second network, and includes a first display unit connected to the first network and displaying a first image indicating first information to be transmitted to the second network, a first photographing unit connected to the second network and photographing the first image displayed on the first display unit, and a first information acquisition unit connected to the second network and acquiring the first information from the first image photographed by the first photographing unit.

[0006] The information transmission method of the present invention is an information transmission method for transmitting information between a first network and a second network, and includes the steps of: in the first network, converting first information to be transmitted to the second network into a first image; displaying the first image on a first display unit connected to the first network; in the second network, photographing the first image displayed on the first display unit; and in the second network, acquiring the first information from the photographed first image.

[0007] The information transmission program of the present invention is an information transmission program for transmitting information between a first network and a second network, and causes a computer connected to the first network to execute a step of converting first information to be transmitted to the second network into a first image in the first network and a step of displaying the first image on a first display unit connected to the first network, and causes a computer connected to the second network to execute a step of photographing the first image displayed on the first display unit by a first photographing unit connected to the second network, and a step of acquiring the first information from the first image photographed by the first photographing unit in the second network. Effect of the Invention

[0008] According to the present invention, it is possible to transmit information from a first network to a second network while preventing the intrusion of malware or the like.

Brief Description of the Drawings

[0009] [Figure 1] It is a schematic configuration diagram of a plant system including an information transmission system according to a first embodiment of the present invention. [Diagram 2] It is a schematic configuration diagram of a plant system including an information transmission system according to a second embodiment of the present invention.

Modes for Carrying Out the Invention

[0010] <A. First Embodiment> Hereinafter, a first embodiment of a plant system including an information transmission system according to the present invention will be described with reference to the drawings. The plant system according to this embodiment includes a water treatment plant 1 having at least one facility, and a remote operation facility 2 for controlling the facilities of the plant 1 from the outside. The remote operation facility 2 is arranged outside the plant 1. Therefore, the first network line 23 provided in the remote operation facility 2 and the second network line 11 provided in the plant 1 are connected via the information transmission system described in each embodiment. This connection suppresses the intrusion of malware into the second network line 11 and ensures the security of the second network line 11. Hereinafter, the plant 1 and the remote operation facility 2 will be described.

[0011] <1. Remote Operation Facility> FIG. 1 is a schematic configuration diagram of a plant system according to the first embodiment. As shown in FIG. 1, the remote operation facility 2 includes an operation terminal 21 for remotely operating the plant 1, a first hub 22, and a first network line 23 connecting the operation terminal 21 and the first hub 22. The operation terminal 21 is composed of a general-purpose computer such as a personal computer or a dedicated computer, and includes a display unit such as a display and an input unit such as a keyboard.

[0012] The operation terminal 21 operates various equipment 10 such as pumps provided in the plant 1. For example, it can issue pump operation commands, pump stop commands, set the pump rotation speed, and set pump operation reservations. Operation reservation settings are settings that are performed collectively, for example, every hour over a 24-hour period. These signals for operating and controlling the various equipment 10 provided in the plant 1 are collectively referred to as control signals (first information).

[0013] Furthermore, when the operation terminal 21 receives the above-mentioned control signal through the operation of the worker, it converts it into first image data indicating a first image such as a QR code (registered trademark) or a barcode. The first image data is not limited to a QR code (registered trademark) or the like, and may be data relating to various images such as an image indicating a control signal or an image obtained by encrypting a control signal. For example, characters, symbols, figures, etc. indicating a control signal may be directly used as an image. Furthermore, the encrypted image data may be any image that can be decoded into a control signal as described below.

[0014] The first network line 23 is a line for two-way communication between the operation terminal 21 and the first hub 22. Although not shown in FIG. 1, in addition to the operation terminal 21, at least one other device such as an operation terminal can also be connected to the first network line 23 via a router 24.

[0015] A first projector (first display unit) 25 and a first camera (second image capturing unit) 26 are connected to the first hub 22. The first projector 25 displays a first image generated by the operation terminal 21. The first camera 26 captures a second image to be displayed on a second projector 17 provided in the plant 1 as described below.

[0016] The image captured by first camera 26 is decoded into various information in operation terminal 21 as described below, and is displayed on operation terminal 21.

[0017] <2. Plant> As shown in Fig. 1, the plant 1 includes a second network line 11, to which a second hub 12, an information conversion device 13, an operation terminal 14, a server 15, a controller 16, and the like are electrically connected. A facility 10 such as a pump is also electrically connected to the controller 16. A second projector (second display unit) 17 and a second camera (first photographing unit) 18 are connected to the second hub 12. The second projector 17 and the second camera 18 may have the same configuration as the first projector 25 and the first camera 26, respectively.

[0018] The second projector 17 is disposed so as to face the first camera 26 of the remote control facility 2 at a predetermined distance. As a result, the second image displayed on the second projector 17 is captured by the first camera 26. On the other hand, the second camera 18 is disposed so as to face the first projector 25 of the remote control facility 2 at a predetermined distance. As a result, the first image displayed on the first projector 25 is captured by the second camera 18. The captured first image is transmitted to the information conversion device 13 as first image data.

[0019] The controller 16 is a computer that controls various devices, facilities, etc. included in the plant 1. For example, it drives the facility 10 based on a control command from the remote operation facility 2. It also monitors the status of various devices, facilities, etc. included in the plant 1 and transmits the status to the remote operation facility 2. In addition, it can also transmit various information requested by the remote operation facility 2 to the remote operation facility 2.

[0020] The operation terminal 14, like the operation terminal 21 of the remote operation facility 2, is configured by a general-purpose computer such as a personal computer or a dedicated computer, and is equipped with a display unit such as a display, and an input unit such as a keyboard.

[0021] The operation terminal 14 is a terminal operated by a plant worker, and controls, for example, various devices and equipment included in the plant 1, similarly to the operation terminal 21. That is, by the worker operating the operation terminal 14, various controls can be performed in place of the controller 16. For example, in addition to transmitting various information such as the state of a pump to the remote operation facility 2, the operation terminal 14 can also operate the pump, similarly to the controller 16. In addition, the operation terminal 14 can also view various information and commands transmitted from the remote operation facility 2.

[0022] The server 15 stores various information about the plant 1, such as the operating status of pumps. The information stored in the server 15 is read by the controller 16, and the equipment 10 can be controlled based on this information. The information stored in the server 15 can also be read via the operation terminal 14 and transmitted to the remote operation facility 2.

[0023] The information on the status of various devices and equipment transmitted from the controller 16 or the operation terminal 14 to the remote operation facility 2 as described above will be referred to as status information (second information).

[0024] The above-mentioned information conversion device 13 converts the status information into second image data indicating a second image, and displays it on the second projector 17. The conversion into an image is similar to that in the remote control facility 2, and therefore a description thereof will be omitted. The information conversion device 13 also receives the first image data captured by the second camera 18, and obtains a control command by decoding the data. The control command is transmitted to the controller 16 and the operation terminal 14. The controller 16 controls the equipment 10 in the plant 1 according to the control command.

[0025] The distance between first projector 25 and second camera 18 is not particularly limited, but may be such that the image displayed on first projector 25 can be recognized by second camera 18. This also applies to second projector 17 and first camera 26.

[0026] In addition, programs for transmitting information between the remote control facility 2 and the plant 1 as described below are stored in the remote control facility 2 and the plant 1, respectively, and information is transmitted by executing these programs.

[0027] <3. Operation of plant system> Next, an operation example of the plant system configured as above will be described. For example, when an operation command for a pump of the plant 1 is input to the operation terminal 21 of the remote operation facility 2, the control command is converted into first image data. When this first image data is transmitted to the first projector 25, the first projector 25 displays a first image. This first image is photographed by the second camera 18 of the plant 1 and then converted into first image data. The first image data is transmitted to the information conversion device 13 and then decoded into a control command. That is, a control signal indicating an operation command for the pump is generated. This control signal is transmitted to the controller 16. When the controller 16 receives the control signal, it operates the pump based on this control signal.

[0028] Next, a case where information is requested from the remote control facility 2 to the plant 1 will be described. For example, when the rotation speed of a pump in operation is requested on the operation terminal 21, a control signal related to the request is converted into first image data. This first image data is transmitted to the first projector 25, and a first image is displayed on the first projector 25. The displayed first image is photographed by the second camera 18 of the plant 1, and then transmitted to the information conversion device 13 and decoded into a control signal. That is, a control signal requested by the rotation speed of the pump in operation is generated and transmitted to the controller 16. The controller 16 acquires the rotation speed of the pump in operation based on the control signal, and transmits a status signal indicating the rotation speed to the information conversion device 13. The information conversion device 13 converts the status signal indicating the rotation speed into second image data indicating a second image. When this second image data is transmitted to the second projector 17, the second projector 17 displays the second image. This second image is photographed by the first camera 26 of the remote control facility 2. The captured second image is converted into second image data, and is transmitted to the operation terminal 21. The second image data is then decoded into information indicating the number of rotations. The decoded number of rotations is displayed on the operation terminal 21.

[0029] Also, the worker can operate the operation terminal 14 to transmit the rotation speed of the pump during operation to the remote operation facility 2. In this case, a status signal indicating the rotation speed of the pump is transmitted to the information conversion device 13 and converted into second image data. The subsequent processing is the same as above, and therefore will be omitted.

[0030] In addition, the information transmitted from the plant 1 to the remote operation facility 2 can be information indicating the status of the plant 1, such as the pump rotation speed, the driving status of the pump, and various equipment 10, server 15, controller 16, operation terminal 14, etc.

[0031] <4. Features> According to the above configuration, the following effects can be obtained. (1) The above plant system is configured such that a first image such as a QR code (registered trademark) indicating a control signal is generated by the operation terminal 21 of the remote operation facility 2, and this first image is displayed by the first projector 25. The displayed first image is then photographed by the second camera 18 of the plant 1, and then decoded into a control signal to control the equipment 10 of the plant 1. Similarly, a second image indicating a status signal generated in the plant 1 is displayed by the second projector 17, and then photographed by the first camera 26 of the remote operation facility 2. The second image is then decoded into a status signal, and information indicating the status of the equipment 10 is displayed on the operation terminal 21.

[0032] As described above, the operation terminal 21 of the remote control facility 2 generates a first image for communication such as a QR code (registered trademark) and transmits this via the projector 25 and the camera 18, thereby operating various devices and equipment such as pumps installed in the plant 1 from the remote control facility 2.

[0033] If any part of the first network line 23 (for example, the router 24, the operation terminal 21, or a terminal other than the operation terminal 21) becomes infected with malware, the infection will spread within the first network line 23. However, most malware are not designed to be transmitted via special communication such as transmission and reception of images such as QR Code (registered trademark). In other words, most such malware cannot convert its own data (so-called virus code) into an image such as a QR Code (registered trademark) for communication and transmit this via the projector 25 and the camera 18. Therefore, the malware cannot invade the second network line 11 of the plant 1, and as a result, the infection within the second network line 11 (plant 1) can be suppressed.

[0034] In this embodiment, only the configuration responsible for generating images such as QR codes (registered trademark) (for example, it may be other than the operation terminal 21) needs to be provided with the latest measures to prevent malware infection, but even if malware countermeasures are neglected for other terminal devices in the first network line 23, the damage can be kept to a minimum.

[0035] Note that preferably, the second network line 11 included in the plant 1 has only the camera 18 and the projector 17 as communication interfaces with the outside, and it should not be possible to communicate in any other way and data transmission and reception should be disabled. In this case, unauthorized access from the outside is limited, and intrusion of malware can be suppressed. However, it does not prevent other communication means from being provided for each network line for communication.

[0036] As described above, even if the first network line 23 of the remote operation facility 2 and the second network line 11 of the plant 1 are not connected by a network line or the like, the above-described data transmission and reception are possible. On the other hand, since both are performing transmission and reception using the above-described images, the plant 1 can be prevented from being externally operated or from being invaded by malware or the like.

[0037] (2) To prevent intrusion of malware or the like, security measures such as a firewall can be considered, but there is a problem that it places a load on software updates and operations. In contrast, in the above plant system, since such a load is not imposed, it is advantageous, for example, in terms of cost.

[0038] (3) In the above plant system, since information is transmitted through image display and shooting, the transmission speed may be slower than data transmission and reception by a line. However, in the operation command of the pump or the acquisition of the rotation speed of the pump as in the above example, although it is preferable that the transmission speed is fast, it is often not required for immediate information transmission. Therefore, the above plant system is suitable for such information transmission.

[0039] <B. Second Embodiment> Next, a second embodiment of the information transmission system according to the present invention and a plant system including the same will be described with reference to the drawings. Hereinafter, mainly the differences from the first embodiment will be described, and the same components will be denoted by the same reference numerals and the description thereof will be omitted.

[0040] <1. Plant system overview> FIG. 2 is a schematic diagram of a plant system according to a second embodiment. In the first embodiment, the second image is displayed on the second projector 17. In the second embodiment, instead of the second image, a second operation terminal 19 is arranged and connected to the second network line 11. The second operation terminal 19 is configured by a general-purpose computer such as a personal computer or a dedicated computer, and includes a display unit such as a display and an input unit such as a keyboard. The display unit displays various information related to the plant, such as information for operating the second operation terminal 19, information for plant operation and management, etc. The display unit of the second operation terminal 19 is arranged to face the first camera 26 of the remote operation facility 2 at a predetermined distance. In addition, the second operation terminal 19 has the same function as the information conversion device 13 shown in the first embodiment. Therefore, the second operation terminal 19 is connected to a second camera 18.

[0041] <2. Operation of plant system> The plant system according to the second embodiment operates as follows. For example, when an operation command for a pump in the plant 1 is input to the operation terminal 21 of the remote operation facility 2, the control command is converted into first image data. When this first image data is transmitted to the first projector 25, the first projector 25 displays a first image. This first image is photographed by the second camera 18 of the plant 1 and then converted into first image data. The first image data is transmitted to the second operation terminal 19 and decoded into a control command. Thereafter, this control signal is transmitted to the controller 16, and the pump is operated.

[0042] Next, a case where information is requested from the remote operation facility 2 to the plant 1 will be described. For example, when requesting the rotation speed of an operating pump at the operation terminal 21, a control signal related to the request is converted into first image data. This first image data is transmitted to the first projector 25, and a first image is displayed. The displayed first image is photographed by the second camera 18 of the plant 1 and then transmitted to the second operation terminal 19 and decoded into a control signal. When the controller 16 receives this control signal, the controller 16 acquires the rotation speed of the operating pump based on the control signal and transmits a status signal indicating the rotation speed to the second operation terminal 19. The second operation terminal 19 displays the rotation speed of the pump on the display unit based on this status signal. The displayed rotation speed of the pump is photographed by the first camera 26 of the remote operation facility 2, and this is acquired as image data. This image data is transmitted to the operation terminal 21. At the operation terminal 21, the rotation speed of the pump included in the image data is extracted and displayed as text data. Alternatively, the photographed image can also be displayed on the operation terminal 21.

[0043] In addition, in the present embodiment, although the second operation terminal 19 serves as a projector, similar to the operation terminal 14 of the first embodiment, an operator can also operate the second operation terminal 19 to operate various facilities 10 of the plant 1.

[0044] Also, as information transmitted from the remote operation facility 2 to the plant 1, in addition to a signal requesting the state of the plant 1, it can also be information indicating a screen transition command displayed on the display unit of the second operation terminal 19.

[0045] <3. Features> According to the present embodiment, by using the second operation terminal 19 as described above, it is not necessary to convert the status signal into second image data, so the load on the plant system can be reduced. In particular, when the amount of information from the plant 1 to the remote operation facility 2 is large, it is preferable that conversion into second image data is not required.

[0046] <C. Modification Example> Although one embodiment of the present invention has been described above, the present invention is not limited to the above embodiment, and various modifications are possible without departing from the spirit of the present invention. In addition, the following modifications can be appropriately combined and can also be combined with the above embodiment.

[0047] <1> Data communication in both network lines 11 and 23 can be performed using various protocols and is not particularly limited. For example, when various devices are connected to each of the network lines 11 and 23 via Ethernet (registered trademark), UDP communication can be performed. In this case, the above-mentioned image data can be transmitted in the frame format of Ethernet (registered trademark).

[0048] <2> In the above embodiment, the projectors 25 and 17 are used as the display unit of the present invention, but there is no particular limitation as long as it is a device capable of displaying an image, and a display device such as a display can be used.

[0049] <3> The devices connected to the network lines 11, 23 in the plant 1 and the remote control facility 2 shown in the above embodiment are merely examples, and various modifications are possible. That is, the hubs 12, 22, the router 24, the server 15, the controller 16, the operation terminals 14, 21, etc. are merely examples of the devices constituting the plant 1 and the remote control facility 2, and any of them may be omitted, or other devices may be added. For example, in the above embodiment, imaging and decoding of information is performed by the operation terminal 21 in the remote control facility 2, but a dedicated device for performing such processing may also be provided.

[0050] <4> In the above embodiment, information is transmitted and received between the second network line 11 of the plant 1 and the first network line 23 of the remote control facility 2. However, if information can be transmitted at least from the first network line 23 to the second network line 11, the problem of the present invention, that is, transmitting information from the first network to the second network while preventing the intrusion of malware, can be solved. For this purpose, at least the first projector (first display unit) 25, the second camera (first photographing unit) 18, and the information conversion device (first information acquisition unit) 12 may be provided. Also, the second operation terminal 19 may be used instead of the information conversion device 13. These constitute the information transmission system of the present invention. Also, the information transmission system of the present invention may additionally be provided with the second projector (second display unit) 17, the first camera (second photographing unit) 26, and the operation terminal (second information acquisition unit) 21 in order to transmit information from the second network line 11 to the first network line 23.

[0051] <5> In the present invention, data is transmitted and received via the projector and camera as described above, instead of connecting the plant 1 and the remote control facility 2 via a wired or wireless line such as the Internet or a dedicated line, but it is sufficient that the plant 1 cannot be operated from the remote control facility 2 without at least connecting the plant 1 and the remote control facility 2 via a line. Therefore, nothing prevents the plant 1 and the remote control facility 2 from being individually connected to other facilities via wired or wireless lines.

[0052] <6> In the above embodiment, a water treatment plant 1 is exemplified as an example of a facility provided with the second network (second network line 11) of the present invention, and an example of controlling the water treatment plant 1 from the remote control facility 2 is shown, but the present invention is not limited to this. In other words, various facilities other than water treatment plants can be applied as examples of facilities provided with the second network, as long as they can be controlled from the first network.

[0053] <7> The first network and the second network according to the present invention do not have to be accommodated in one facility, but may be accommodated across multiple facilities, or both networks may be accommodated in one facility. [Explanation of symbols]

[0054] 11 Second network line (Second network) 12 Information conversion device (first information acquisition unit) 17 2nd projector (2nd display unit) 18 2nd camera (1st camera section) 19 Second operation terminal (second display unit, first information acquisition unit) 11 Operation terminal (second information acquisition unit) 23 First Network Line (First Network) 25 1st projector (1st display unit) 26 1st camera (2nd camera unit)

Claims

1. An information transmission system for transmitting information between a first network and a second network, a first display unit connected to the first network and configured to display a first image indicating first information to be transmitted to the second network; a first image capturing unit connected to the second network and configured to capture the first image displayed on the first display unit; a first information acquisition unit connected to the second network and configured to acquire the first information from the first image captured by the first imaging unit; An information transmission system comprising:

2. a second display unit connected to the second network and configured to display a second image indicating second information to be transmitted to the first network; a second image capturing unit connected to the first network and configured to capture the second image displayed on the second display unit; a second information acquisition unit connected to the first network and configured to acquire the second information from the second image captured by the second imaging unit; The information transmission system according to claim 1 , comprising:

3. The first information includes a control signal for controlling at least one device connected to the second network.

3. An information transmission system according to claim 1 or 2.

4. the second information includes a status signal indicating a status of at least one piece of equipment connected to the second network; 3. An information transmission system according to claim 1 or 2.

5. 1. A method for transmitting information between a first network and a second network, comprising: converting, in the first network, first information to be transmitted to the second network into a first image; displaying the first image on a first display unit connected to the first network; taking an image of the first image displayed on the first display unit in the second network; acquiring the first information from the first image captured in the second network; The information transmission method comprises:

6. An information transmission program for transmitting information between a first network and a second network, A computer connected to the first network, converting, in the first network, first information to be transmitted to the second network into a first image; displaying the first image on a first display unit connected to the first network; Run the command, A computer connected to the second network, capturing the first image displayed on the first display unit by a first image capturing unit connected to the second network; acquiring, in the second network, the first information from the first image captured by the first imaging unit; An information transmission program that executes the following:

Images