Terminal device, remote control system, programmable display, and image display method

Abstract

To provide a terminal device configured to prevent a password entered to the terminal device by a user from being leaked to a third party via a screen of a programmable display.SOLUTION: A terminal device (1) disclosed herein comprises a first display unit (11), and a first control unit (15) for displaying on the first display unit (11) a screen identical to that displayed on a programmable display (2). When receiving an input of a password to the programmable display (2) via the terminal device (1), the first control unit (15) causes an input screen on the terminal device (1) to be displayed in front of a screen being displayed on the first display unit (11) according to screen data.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present invention relates to a terminal device, a remote operation system, a programmable display, and a screen display method.

Background Art

[0002] Patent Document 1 discloses a remote control system for remotely controlling a processing device installed in a clean room by a computer on which the same screen as the screen of the processing device is displayed. In this remote control system, when a password is input in the processing device, a part of the password input screen on the computer that prompts a key operation is masked.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] In the remote control system disclosed in Patent Document 1, it is not assumed that a password is input on the computer. For this reason, if a password is input on the computer, there is a problem that the remote control system cannot prevent the password from leaking to a third party in the clean room via the screen of the processing device.

[0005] One aspect of the present invention aims to realize, on the terminal device side, a configuration for suppressing leakage of a password input by a user to the terminal device to a third party via the screen of the programmable display.

Means for Solving the Problems

[0006] In order to solve the above problems, a terminal device according to an aspect of the present invention is a terminal device configured to be able to remotely operate a programmable display, and includes a first display unit, and based on screen data acquired from the programmable display, causes the first display unit to display the same screen as the screen displayed by the programmable display, and a first control unit that receives an operation on the screen displayed on the first display unit. When the first control unit receives an input of a password to the programmable display via the terminal device, the first control unit causes the input screen of the terminal device to be displayed in front of the screen displayed based on the screen data on the first display unit.

[0007] Further, a screen display method according to an aspect of the present invention is a screen display method using a terminal device configured to be able to remotely operate a programmable display, and includes a first display step of causing a display unit provided in the terminal device to display the same screen as the screen displayed by the programmable display based on screen data acquired from the programmable display, an operation reception step of receiving an operation on the screen displayed on the display unit, and a second display step of causing the input screen of the terminal device to be displayed in front of the screen displayed based on the screen data on the display unit when receiving an input of a password to the programmable display via the terminal device in the operation reception step.

Effects of the Invention

[0008] According to an aspect of the present invention, a configuration for suppressing leakage of a password input by a user to a terminal device to a third party via the screen of a programmable display can be realized on the terminal device side.

Brief Description of the Drawings

[0009]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Mode for Carrying Out the Invention

[0010] 〔Embodiment 1〕 <Configuration of Remote Operation System 100> FIG. 1 is a block diagram showing an example of the configuration of a remote operation system 100 according to Embodiment 1 of the present invention. The remote operation system 100 is a system in which the programmable display 2 is remotely operated by the terminal device 1. As shown in FIG. 1, the remote operation system 100 includes the terminal device 1 and the programmable display 2. Note that the remote operation system 100 may include a plurality of terminal devices 1, or may be a system in which the programmable display 2 is remotely operated by a plurality of terminal devices 1. The following description also serves as an explanation of the screen display method using the terminal device 1.

[0011] <Configuration of Terminal Device 1> The terminal device 1 is a portable terminal device such as a smartphone or a tablet. However, the terminal device 1 is not limited thereto, and may be a PC (Personal Computer), a PC using remote desktop, or a remote HMI.

[0012] The terminal device 1 includes a first display unit 11, a first input unit 12, a first storage unit 13, a first communication unit 14, and a first control unit 15. The terminal device 1 is configured to be able to remotely operate the programmable display 2. For example, the terminal device 1 is used to remotely operate or maintain the programmable display 2 installed in a factory or the like from an office or the like outside the factory.

[0013] The first display unit 11 is a display panel that displays the processing content on the terminal device 1. The first input unit 12 receives user input and is, for example, a touch panel. The first storage unit 13 stores the processing content by the first control unit 15.

[0014] The first communication unit 14 is an interface unit for the terminal device 1 to communicate with the programmable display 2. The first communication unit 14 can communicate with the second communication unit 24 provided in the programmable display 2 via the Internet or a wireless LAN (Local Area Network). The first control unit 15 controls each part of the terminal device 1.

[0015] <Configuration of the programmable display 2> The programmable display 2 is connected to a PLC (Programmable Logic Controller) 3. The programmable display 2 communicates with the PLC 3 by being connected to the PLC 3 via a communication cable. The programmable display 2 is a dedicated computer that realizes the operation function and display function unique to the programmable display by displaying a screen for operation and display, and is used as an HMI (Human Machine Interface) device.

[0016] The programmable display 2 includes a second display unit 21, a second input unit 22, a second storage unit 23, a second communication unit 24, and a second control unit 25. The programmable display 2 is remotely operated by the terminal device 1. The second display unit 21 displays the state of the device 4 and a screen for operating the device 4. The second input unit 22 receives user input and is, for example, a touch panel.

[0017] The second storage unit 23 stores the processing content by the second control unit 25. The second communication unit 24 is an interface unit for the programmable display 2 to communicate with the terminal device 1 and the PLC 3. The second communication unit 24 can communicate with the first communication unit 14 included in the terminal device 1. The second control unit 25 executes an operation of displaying the state of the device 4 connected to the PLC 3 and an operation of controlling the state of the device 4 according to an operation on the second display unit 21.

[0018] <Configuration of PLC 3 and Device 4> The PLC 3 is a control device that reads the state of the device 4 or gives a control instruction to the device 4 at a predetermined scan time according to a sequence program created by the user. The device 4 may include, for example, input devices such as sensors or switches, and output devices such as actuators, relays, solenoid valves, or displays.

[0019] <Screens Displayed by Terminal Device 1 and Programmable Display 2> FIG. 2 is a diagram showing an example of a screen for operating the device 4, which is displayed by the terminal device 1 and the programmable display 2 shown in FIG. 1. Reference numeral 201 in FIG. 2 is a diagram showing the screen P1 displayed by the terminal device 1, and reference numeral 202 in FIG. 2 is a diagram showing the screen P2 displayed by the programmable display 2.

[0020] Based on the screen data acquired from the second communication unit 24 of the programmable display 2, the first control unit 15 causes the first display unit 11 to display the same screen P11 as the screen P2 to be displayed by the second display unit 21 of the programmable display 2 (first display step). This will be specifically described below.

[0021] In the programmable display 2, the second control unit 25 refers to the screen data stored in the second storage unit 23 and causes the second display unit 21 to display the screen P2 based on the referred screen data. The screen P2 is a screen for displaying the state of the device 4 and operating the device 4.

[0022] The screen data stored in the second storage unit 23 is data that defines the screen P2. The screen P2 includes at least the screen P12, and may further include the input screen IP2 and a specific signature M1. The second control unit 25 uses the second communication unit 24 to transmit the screen data stored in the second storage unit 23 to the terminal device 1 every first period. Further, the second control unit 25 may transmit the screen data to the terminal device 1 after performing a predetermined compression process on the screen data stored in the second storage unit 23. Examples of the predetermined compression process include JPEG compression processing.

[0023] In the terminal device 1, the first control unit 15 receives the screen data from the second communication unit 24 using the first communication unit 14. The first control unit 15 causes the first display unit 11 to display the screen P11 based on the screen data received by the first communication unit 14. At this time, the screen P11 is synchronized with the screen P2 in the above first period. Further, the first control unit 15 causes the first display unit 11 to display the screen P1. The screen P1 includes at least the screen P11, and may further include the input screen IP1. The screen P11 is a screen displayed based on the screen data acquired by the first control unit 15 from the second communication unit 24.

[0024] The first control unit 15 receives an operation on the screen P1 displayed on the first display unit 11 using the first input unit 12 (operation reception step). The first control unit 15 recognizes the input position on the screen P1 by the first input unit 12 as coordinates on the screen P1. The first control unit 15 transmits the recognized coordinate information to the programmable display 2 using the first communication unit 14.

[0025] Based on the coordinate information received by the second communication unit 24 from the first communication unit 14, the second control unit 25 processes an operation on the screen P1 displayed on the first display unit 11 of the terminal device 1 as an operation on the screen P2 displayed on the second display unit 21.

[0026] <Processing of the programmable display 2> FIG. 3 is a flowchart showing an example of the processing executed by the programmable display 2 shown in FIG. 1. The processing shown in the flowchart of FIG. 3 is executed every time an input from the user using the second input unit 22 or an input from the terminal device 1 (input using the first input unit 12) is received. As shown in FIG. 3, in the programmable display 2, the second control unit 25 determines whether to display a screen for requesting input of a password (S1). Here, a predetermined authority may be required for an operation on the programmable display 2, and the user may input a password to indicate that the user has the authority. Step S1 is a step assuming such a case.

[0027] If the second control unit 25 determines not to display a screen for requesting input of a password (NO in S1), the process proceeds to the process of step S8 described later. The process of step S8 will be described later.

[0028] If the second control unit 25 determines to display a screen for requesting input of a password (YES in S1), the second control unit 25 causes the request screen P13 shown in FIG. 4 to be displayed on the second display unit 21 and causes the input screen IP2 shown by reference numeral 202 in FIG. 2 to be displayed (S2). At this time, the screen P2 displayed on the second display unit 21 is in a state of further including the request screen P13.

[0029] The request screen P13 is a screen that requests the input of a password and includes an input field for the password. FIG. 4 is a diagram showing the request screen P13 that requests the input of a password. The input screen IP2 is a screen for accepting the input of a password for the programmable display 2, such as a keyboard.

[0030] After causing the second display unit 21 to display the input screen IP2, the second control unit 25 causes the second display unit 21 to display a specific sign M1 as shown by reference numeral 202 in FIG. 2 (S3). The sign M1 is an example of input information indicating that the second input unit 22 of the programmable display 2 accepts the input of a password, and is, for example, a key mark. In step S3, the second control unit 25 causes the sign M1 to be displayed regardless of whether the first communication unit 14 and the second communication unit 24 are remotely connected.

[0031] Further, the second control unit 25 causes the sign M1 to be displayed at a predetermined position on the screen P2. The size and design of the sign M1 are predetermined, and the information of the sign M1 is stored in advance in the second storage unit 23. When causing the sign M1 to be displayed, the second control unit 25 reads out the information of the sign M1 from the second storage unit 23.

[0032] After causing the sign M1 to be displayed on the second display unit 21, the second control unit 25 executes an input process for the request screen P13 (S4). Specifically, the second control unit 25 executes a process of inputting a character string to the request screen P13 based on the input received by the second input unit 22.

[0033] Next, the second control unit 25 determines whether the input of the character string to the request screen P13 has been completed (S5). Specifically, when the determination key ET2 is pressed on the input screen IP2, the second control unit 25 determines that the input of the character string to the request screen P13 has been completed. Also, when the second control unit 25 receives the character string information from the terminal device 1 in step S25 described later, it determines that the input of the character string to the request screen P13 has been completed. On the other hand, when the determination key ET2 is not pressed on the input screen IP2, the second control unit 25 determines that the input of the character string to the request screen P13 has not been completed.

[0034] Note that if the input of the character string to the request screen P13 has not occurred for a predetermined period, the second control unit 25 may determine that the input of the character string to the request screen P13 has been completed, or alternatively, may cancel the process of inputting the character string to the request screen P13. If the process of inputting the character string is canceled, the second control unit 25 skips the processes of steps S6 and S8, and after executing the process of step S7, ends the process.

[0035] If the second control unit 25 determines that the input of the character string to the request screen P13 has not been completed (NO in S5), it continues the process of step S4. If the second control unit 25 determines that the input of the character string to the request screen P13 has been completed (YES in S5), it executes the password input process (S6).

[0036] Specifically, the second control unit 25 executes the password input process for the operation on the programmable display 2. The second control unit 25 refers to the authentication information stored in the second storage unit 23 and executes the authentication process for the operation. When the authentication process is successful, the second control unit 25 proceeds to the process of step S7 described later, and when the authentication process fails, it proceeds to the process of step S4.

[0037] Next, the second control unit 25 erases a specific sign M1 from the display of the second display unit 21 (S7). Also, in step S7, the second control unit 25 erases the sign M1 and at the same time erases the input screen IP2.

[0038] After erasing the signature M1, the second control unit 25 executes normal processing (S8). The processing in step S8 will be specifically described below. The second control unit 25 permits operations on the screen P12 displayed on the second display unit 21. The screen P12 is a screen for receiving operations such as inputting data into a numerical display object, receiving a touch operation on a screen switching switch, receiving operations on the device 4, and receiving various setting operations for the device 4. For example, switch ON / OFF operations, operations on alarms and trend graphs, screen switching operations, inputting setting values of various parameters, and the like can be mentioned.

[0039] Also, the second control unit 25 waits until an input is received by the second input unit 22. Each time an input is received by the second input unit 22, the second control unit 25 executes the processing shown in the flowchart of FIG. 3. When an input is received by the second input unit 22, the second control unit 25 changes the content of the screen P2 displayed on the second display unit 21 and operates the device 4. The second control unit 25 stores the screen data of the changed screen P2 in the second storage unit 23.

[0040] Furthermore, the normal processing in step S8 is processing that allows operations to be performed as they are when touching a numerical display object to input data, or when touching a screen switching switch to perform screen switching.

[0041] <Processing of the terminal device 1> FIG. 5 is a flowchart showing an example of the processing executed by the terminal device 1 shown in FIG. 1. As shown in FIG. 5, the first control unit 15 determines whether a specific signature M1 is displayed on the screen P11 displayed on the first display unit 11 (S21). Specifically, the first control unit 15 determines whether the signature M1 is displayed on the screen P11 by performing image recognition on the screen P11. Thereby, the first control unit 15 can easily determine whether the signature M1 is displayed on the screen P11.

[0042] In addition, the sign M1 is displayed at a predetermined position on the screen P11, and the size and design of the sign M1 are predetermined. Therefore, the first control unit 15 can reduce the load on the process of recognizing the sign M1 by image recognition.

[0043] Furthermore, the first control unit 15 determines whether the sign M1 is displayed on the screen P11 by comparing the image of the sign M1 indicated by the information of the sign M1 stored in advance in the first storage unit 13 with the image of the portion at the predetermined position on the screen P11. Note that the first control unit 15 may execute the process of step S21 at the timing when the image data is received from the second communication unit 24 of the programmable display 2, or may execute the process of step S21 every second period.

[0044] When the first control unit 15 determines that the sign M1 is not displayed on the screen P11 (NO in S21), the process ends. On the other hand, when the first control unit 15 determines that the sign M1 is displayed on the screen P11 (YES in S21), the first control unit 15 causes the first display unit 11 to display the input screen IP1 dedicated to the terminal device 1 (S22: second display step).

[0045] Specifically, when the first control unit 15 accepts the input of the password to the programmable display 2 via the terminal device 1, the input screen IP1 is displayed in front of the screen P11 on the first display unit 11. In addition, when the first control unit 15 causes the first display unit 11 to display the screen P11, the request screen P13 is also displayed on the first display unit 11.

[0046] Here, an operation on the programmable display 2 may require a predetermined authority, and the user may input a password to indicate that the user has the authority. Step S22 is a step assuming such a case.

[0047] The request screen that the first control unit 15 causes the first display unit 11 to display is the same screen as the request screen P13 shown in FIG. 4. The input screen IP1 is a screen for accepting the input of a password to the programmable display 2 via the terminal device 1, and is, for example, a keyboard. Also, the input screen IP1 is one that the terminal device 1 has. Specifically, the screen data that defines the input screen IP1 is stored in the first storage unit 13 of the terminal device 1. Also, the screen data that defines the input screen IP1 may be pre-installed in the first storage unit 13 of the terminal device 1.

[0048] When the signature M1 is displayed on the screen P11, the screen P2 displayed by the programmable display 2 will be a screen that requires the input of a password. Therefore, when the screen P2 of the programmable display 2 is a screen that requires the input of a password, by the first control unit 15 displaying the input screen IP1, it is possible to request the input of a password also on the terminal device 1 side. Also, it is possible to easily determine whether or not to request the input of a password only based on the signature M1 displayed on the screen P11.

[0049] Regarding the above-described content, for the input of a password on the terminal device 1, the same request screen P13 and input screen IP2 as those of the programmable display 2 are displayed on the terminal device 1. For this reason, even when the input screen IP1 is not displayed on the terminal device 1, the password can be input on the terminal device 1 side using the request screen P13 and the input screen IP2.

[0050] Conventionally, an operation was performed on the input screen displayed on the terminal device, and the information of that operation was transmitted from the terminal device to the programmable display as coordinate information. However, in the terminal device 1 according to one aspect of the present invention, in order to ensure confidentiality, the input of a password is accepted using the input screen IP1. Thereby, it is possible to avoid the situation where the input screen IP1 is displayed and the operation of inputting a password (pressed key, etc.) can be recognized on the screen of the programmable display 2. The input screen IP1 is displayed in order to enable the input of a password with confidentiality.

[0051] Further, the screen P1 displayed on the first display unit 11 is composed of a plurality of overlapping screens. In the first display unit 11, the screen P11 is the first screen which is a part of the plurality of screens, and the input screen IP1 is a part of the plurality of screens and is a second screen different from the first screen.

[0052] The screen P11 and the input screen IP1 are parts of the plurality of screens and are different from each other. Thus, the first control unit 15 can display the input screen IP1 in front of the screen P11.

[0053] After the first control unit 15 causes the first display unit 11 to display the request screen P13 and the input screen IP1, it executes input processing for the request screen P13 (S23). Specifically, the first control unit 15 executes processing for inputting a character string to the request screen P13 displayed on the first display unit 11 based on the input received by the first input unit 12.

[0054] Next, the first control unit 15 determines whether the input of the character string to the request screen P13 is completed (S24). Specifically, when the enter key ET1 is pressed on the input screen IP1, the first control unit 15 determines that the input of the character string to the request screen P13 is completed. On the other hand, when the enter key ET1 is not pressed on the input screen IP1, the first control unit 15 determines that the input of the character string to the request screen P13 is not completed. Note that the first control unit 15 may determine that the input of the character string to the request screen P13 is completed when the input of the character string to the request screen P13 has not occurred for a predetermined period.

[0055] When the first control unit 15 determines that the input of the character string to the request screen P13 is not completed (NO in S24), it continues the process of step S23. When the first control unit 15 determines that the input of the character string to the request screen P13 is completed (YES in S24), it uses the first communication unit 14 to transmit the information of the character string input to the request screen P13 to the second communication unit 24 of the programmable display 2 (S25), and ends the process.

[0056] Here, the first control unit 15 waits until an input is received by the first input unit 12. When an input is received by the first input unit 12, the first control unit 15 recognizes the input position on the screen P1 by the first input unit 12 as coordinates on the screen P1. The first control unit 15 uses the first communication unit 14 to transmit the information of the recognized coordinates to the programmable display 2.

[0057] Also, in the operation mode of the first control unit 15 recognized as coordinates in this way, an operation on the input screen IP1 is recognized as an input of a character string. When the first control unit 15 detects a touch operation, it determines whether the touch operation is for the input screen IP1 or the input screen IP2.

[0058] When the first control unit 15 determines that the touch operation is for the input screen IP1, it selects an operation mode in which the input position on the screen P1 is recognized as coordinates of the input screen IP1 (the second screen). On the other hand, when the first control unit 15 determines that the touch operation is for the screen P11 (the first screen), it selects an operation mode in which the input position on the screen P1 is recognized as coordinates on the screen P2.

[0059] In the latter case, the second control unit 25 processes an operation on the screen P1 displayed on the first display unit 11 of the terminal device 1 as an operation on the screen P2 displayed on the second display unit 21 based on the coordinate information received by the second communication unit 24 from the first communication unit 14.

[0060] After the first control unit 15 transmits character string information to the programmable display 2, the second control unit 25 executes an authentication process based on the character string information received by the second communication unit 24 from the first communication unit 14. Specifically, the second control unit 25 refers to the authentication information stored in the second storage unit 23 and executes the authentication process.

[0061] If the execution result of the authentication process is successful, the second control unit 25 accepts an operation on the screen P11 displayed on the first display unit 11 as an operation on the screen P2 displayed on the second display unit 21. If the result of the authentication process is a failure, when an operation is performed on the screen P11 displayed on the first display unit 11, the second control unit 25 causes the request screen P13 to be displayed again on the second display unit 21.

[0062] For example, when trying to touch a high-authority numerical display object on the screen P11 and input a set value, the request screen P13 is displayed. When the input of the password is completed, the set value can be input into the numerical display object. If the result of the authentication process is a failure, when the cancel key is pressed on the input screen IP1, the display state of the screen P1 returns to its original state.

[0063] Also, when touching the screen switching switch on the screen P11 to switch to a screen with a higher authority, the request screen P13 is displayed. When the input of the password is completed, the screen switching is executed. If the result of the authentication process is a failure, when the cancel key is pressed on the input screen IP1, the display state of the screen P1 returns to its original state (the screen switching is not executed).

[0064] Note that the authentication information stored in the second storage unit 23 may be information in which different authority levels are set according to at least one of the screen and the object. In this case, the second control unit 25 may execute the authentication process based on the input password and the authority level set in the above authentication information.

[0065] That is, the above authentication information may be for switching to and displaying a screen with a higher authority level, or may be for operating an object with a higher authority (such as an object for inputting a numerical value) on the screen. If the execution result of the authentication process by the second control unit 25 is successful, operations corresponding to the corresponding authority level (such as displaying a screen, numerical display, setting, etc. permitted at that authority level) become possible.

[0066] Therefore, the input screens IP1 and IP2 are screens for inputting a password for permitting an operation on the screen according to different levels of authority corresponding to at least one of the screen and the object. Note that the password input to the input screens IP1 and IP2 is neither a password for activating the remote connection function by the terminal device 1 nor a password for remotely connecting the terminal device 1 to the programmable display 2.

[0067] As described above, when a password is input to the terminal device 1, the input screen IP1 of the terminal device 1 is displayed in front of the screen P11. The user can input a password to the input screen IP1. Since the input screen IP1 belongs to the terminal device 1, the operation on the input screen IP1 is not reflected on the screen P2 displayed on the programmable display 2. Therefore, it is possible to prevent the password input by the user to the terminal device 1 from being leaked to a third party via the screen P2 of the programmable display 2.

[0068] Also, since the input screen IP1 belongs to the terminal device 1, a configuration for suppressing the leakage of the password to a third party via the screen P2 of the programmable display 2 can be realized on the terminal device 1 side. For this reason, when the programmable display 2 is already installed in a factory or the like, a configuration for suppressing the leakage of the password to a third party can be realized without changing the specifications of the programmable display 2.

[0069] Furthermore, since the input screen IP1 is not displayed on the screen P2 of the programmable display 2, it is possible to prevent a third party from recognizing the input location of the keys on the input screen IP1. Specifically, by making the touched key location display recessed or inverted, it is possible to prevent the recognition of which key was input. Therefore, compared to the case where the string input to the input field of the request screen that requests the input of the password is simply displayed as an unidentifiable string, it is possible to more reliably prevent the leakage of the password to a third party.

[0070] Furthermore, there is no need to perform special communication between the terminal device 1 and the programmable display 2, and it is not necessary to change or add programs on the programmable display 2 side. By changing and adding programs on the terminal device 1 side, a configuration for suppressing the leakage of passwords to third parties can be realized.

[0071] Regarding the transmission of string data from the terminal device 1 to the programmable display 2, functions that the terminal device 1 usually has can be utilized. For example, it can be utilized for the function of transmitting string data read by a barcode reader connected to the terminal device 1, or string data of a QR code (registered trademark) or barcode read by a camera provided in the terminal device 1 to the programmable display 2. The second control unit 25 of the programmable display 2 inputs the acquired string data into, for example, a numerical display object.

[0072] 〔Modification Example〕 The request screen P13 shown in FIG. 4 may be a screen that requests the input of a user ID in addition to the password. That is, the request screen P13 may further include an input field for the user ID. In this case, permission levels are set for the screen, object, and user ID. That is, a password is set for each user ID, and a permission level is set for each user ID. The user ID is an ID indicating the user of the terminal device 1.

[0073] If the execution result of the authentication process by the second control unit 25 is successful, operations and screen displays corresponding to the permission level set for the user ID become possible. In this case, the following two modes may be available as the display mode of the input screen IP1.

[0074] The first mode is a mode in which the first control unit 15 causes the first display unit 11 to display the request screen P13 and the input screen IP1, and the user ID and password input on the input screen IP1 are not displayed on the programmable display 2.

[0075] The second aspect is as follows. Specifically, when the second control unit 25 recognizes that the password input field on the request screen P13 has been selected, it causes the second display unit 21 to display the signature M1. Then, when the first control unit 15 determines that the signature M1 is displayed on the screen P11, it displays the input screen IP1. As a result, only the password among the user ID and the password can be prevented from being displayed on the programmable display 2.

[0076] 〔Embodiment 2〕 Embodiment 2 of the present invention will be described below. For convenience of explanation, members having the same functions as those described in Embodiment 1 are denoted by the same reference numerals, and their descriptions will not be repeated. FIG. 6 is a diagram showing a screen P1 displayed on the first display unit 11 of the terminal device 1 and a screen P2 displayed on the second display unit 21 of the programmable display 2 in the remote operation system 100 according to Embodiment 2 of the present invention. Reference numeral 601 in FIG. 6 indicates the screen P1, and reference numeral 602 in FIG. 6 indicates the screen P2.

[0077] As shown by reference numeral 601 in FIG. 6, the screen P1 includes a display of the component PA1. Further, the first display unit 11 displays an external area P1A outside the screen P1, and the external area P1A includes a concealment button B1. The display of the component PA1 indicates a component of the device 4, and is, for example, a numerical display for displaying numerical values.

[0078] Here, consider the case where the first control unit 15 receives an operation for putting the concealment button B1 in a pressed state by the first input unit 12. In this case, the first control unit 15 uses the first communication unit 14 to transmit a prohibition instruction to the programmable display 2 to prohibit at least one of display and operation for at least a part of the screen P2 displayed by the programmable display 2. The operation of putting the concealment button B1 in a pressed state is an example of a predetermined operation different from the input of the password to the terminal device 1.

[0079] In the programmable display 2, when the second communication unit 24 receives the prohibition instruction from the first communication unit 14, the second control unit 25 prohibits at least one of display and operation for at least a part of the screen P2 displayed by the second display unit 21.

[0080] For example, as shown by reference numeral 602 in FIG. 6, the second control unit 25 masks a portion of the component PA1 on the screen P2 where a numerical value is displayed so that the numerical value is not displayed. Further, the second control unit 25 prohibits an operation of changing the numerical value for the component PA1 on the screen P2. Note that the second control unit 25 may display a dummy numerical value different from the numerical value displayed on the component PA1 of the screen P1 in a portion of the component PA1 on the screen P2 where the numerical value is displayed.

[0081] Thereby, on the terminal device 1 side, at least one of display and operation can be prohibited for at least a part of the screen P2 displayed by the second display unit 21 of the programmable display 2. Therefore, it is possible to prevent the operator of the programmable display 2 and a third party from disclosing the display content and prohibiting the operation for at least a part of the screen P2 of the programmable display 2.

[0082] Here, the object prohibited by the first control unit 15 for the screen P2 is, for example, an inputtable component such as a switch or a numerical display. At this time, it is possible to conceal the input content and operation procedure of the set value from the operator of the programmable display 2. Further, the inputtable component is a component whose setting can be changed by operating the programmable display 2, and is, for example, a switch, a numerical display, a state change (such as switching between High, Mid, and Low). Furthermore, the inputtable component may also include a trend graph and an alarm list.

[0083] Also, when the second communication unit 24 receives the above prohibition instruction from the first communication unit 14, the second control unit 25 identifies the input - enabled components within the screen P2 and prohibits at least one of display and operation for the identified components. Further, in the configuration where the first control unit 15 prohibits display for at least a part of the screen P2, it also includes prohibiting the display of the updated content when the display is updated.

[0084] In addition, when the first control unit 15 uses the first communication unit 14 to send the above prohibition instruction to the programmable display 2, the display and operation of the screen P1 displayed by the first display unit 11 are not prohibited. Therefore, the display and operation of the screen P1 are possible.

[0085] Also, consider the case where the first control unit 15 receives an operation to release the pressed state of the concealment button B1 by the first input unit 12. In this case, the first control unit 15 uses the first communication unit 14 to send a release instruction to the programmable display 2 to release the prohibition regarding the screen P2 displayed by the programmable display 2. In the programmable display 2, when the second communication unit 24 receives the above release instruction from the first communication unit 14, the second control unit 25 releases the prohibition regarding the screen P2 displayed by the second display unit 21.

[0086] 〔Reference Example 1〕 Consider the case where, in the programmable display 2, before the first control unit 15 accepts the input of the password for the input screen IP2, the second control unit 25 accepts the input of the password for the programmable display 2 by the second input unit 22. In this case, the second control unit 25 creates screen data in which the input screen IP2 is masked for the screen P2 displayed by the second display unit 21. After executing JPEG compression processing on the created screen data, the second control unit 25 transmits the screen data to the terminal device 1. As a result, in the screen P11 displayed on the first display unit 11, the input screen IP2 is in a masked state.

[0087] Incidentally, when the second control unit 25 transmits the screen data to the terminal device 1, for the input screen IP2 among the screens P2 displayed by the second display unit 21, the screen data may be transmitted to the terminal device 1 as a still image without updating. As a result, on the screen P11 displayed on the first display unit 11, the content of the input screen IP2 is not updated, and the input screen IP2 becomes a still image. Therefore, the content of the screen P2 seen by the operator of the programmable display 2 is different from the content of the screen P11 seen by the user of the terminal device 1. That is, the confidentiality for the user of the terminal device 1 regarding the password input to the programmable display 2 can be ensured.

[0088] 〔Reference Example 2〕 Consider a case where, in the terminal device 1, before the second control unit 25 accepts the input of the password for the input screen IP2, the first control unit 15 uses the first input unit 12 to accept the input of the password for the input screen IP2 included in the screen P11 displayed by the terminal device 1. In this case, the second control unit 25 masks the input screen IP2 among the screens P2 displayed by the second display unit 21.

[0089] Consider the case where the second control unit 25 receives the above masking instruction from the first communication unit 14 using the second communication unit 24. In this case, the second control unit 25 executes JPEG compression processing on the data of the screen P2 stored in the second storage unit 23, and then transmits the screen data created by the JPEG compression processing to the terminal device 1. As a result, on the screen P11 displayed on the first display unit 11, the input screen IP2 is not masked.

[0090] In addition, the second control unit 25 creates screen data in which the input screen IP2 is masked for the screen P2 stored in the second storage unit 23. Based on the created screen data, the second control unit 25 causes the second display unit 21 to display the screen P2 in which the input screen IP2 is masked. As a result, on the screen P2 displayed on the second display unit 21, the input screen IP2 is masked.

[0091] Note that, regarding the input screen IP2 among the screens P2 displayed on the second display unit 21, the second control unit 25 may keep it as a still image without updating it. As a result, in the screen P2 displayed on the second display unit 21, the content of the input screen IP2 is not updated, and the input screen IP2 becomes a still image.

[0092] 〔Summary〕 The terminal device according to Embodiment 1 of the present invention is a terminal device configured to be able to remotely operate a programmable display, and includes a first display unit and a first control unit that causes the first display unit to display the same screen as the screen displayed on the programmable display based on screen data acquired from the programmable display and accepts an operation on the screen displayed on the first display unit. When the first control unit accepts input of a password to the programmable display via the terminal device, the first control unit causes the input screen of the terminal device to be displayed in front of the screen displayed based on the screen data on the first display unit.

[0093] When inputting a password to the terminal device, the input screen of the terminal device is displayed in front of the screen displayed based on the screen data. The user can input a password to the input screen. Since this input screen belongs to the terminal device, the operation on the input screen is not reflected on the screen displayed on the programmable display. Therefore, it is possible to prevent the password input by the user to the terminal device from leaking to a third party via the screen of the programmable display.

[0094] Also, since the input screen belongs to the terminal device, a configuration for preventing the password from leaking to a third party via the screen of the programmable display can be realized on the terminal device side. Therefore, when the programmable display is already installed in a factory or the like, a configuration for preventing the password from leaking to a third party can be realized without changing the specifications of the programmable display.

[0095] In the terminal device according to Embodiment 2 of the present invention, in the above Embodiment 1, when input information indicating that the programmable display accepts password input is displayed on the screen displayed based on the screen data, the first control unit may display the input screen in front of the screen displayed based on the screen data on the first display unit.

[0096] When input information indicating that the programmable display accepts password input is displayed on the screen displayed based on the screen data, the screen displayed by the programmable display will be a screen that requires password input. Therefore, when the screen of the programmable display is a screen that requires password input, by the first control unit displaying the input screen, the terminal device side can also request password input.

[0097] If the terminal device is displaying the same screen as the programmable display, input can be made to that screen. Therefore, by the terminal device displaying an input screen different from that screen, it is possible to avoid the password input operation (pressed keys, etc.) being recognized on the screen of the programmable display.

[0098] In the terminal device according to Embodiment 3 of the present invention, in the above Embodiment 2, the first control unit may determine whether the input information is displayed on the screen displayed based on the screen data by performing image recognition on the screen displayed based on the screen data.

[0099] The first control unit can easily determine whether the input information is displayed on the screen displayed based on the screen data by performing image recognition on the screen displayed based on the screen data.

[0100] In the terminal device according to Aspect 4 of the present invention, in any of the above Aspects 1 to 3, the screen displayed on the first display unit is configured by overlapping a plurality of screens. In the first display unit, the screen displayed based on the screen data is a first screen that is a part of the plurality of screens, and the input screen may be a second screen that is a part of the plurality of screens and is different from the first screen.

[0101] The screen displayed based on the screen data and the input screen are both part of the plurality of screens and are different from each other. Thereby, the first control unit can display the input screen in front of the screen displayed based on the screen data.

[0102] The terminal device according to Aspect 5 of the present invention, in any of the above Aspects 1 to 4, further includes a first communication unit capable of communicating with the programmable display. When the first control unit receives a predetermined operation other than the input of the password for the terminal device, the first communication unit is used to send a prohibition instruction to the programmable display to prohibit at least one of display and operation for at least a part of the screen displayed by the programmable display.

[0103] On the terminal device side, at least one of display and operation for at least a part of the screen displayed by the programmable display can be prohibited. Therefore, for the operator of the programmable display and a third party, disclosure of the display content and prohibition of operation can be avoided for at least a part of the screen of the programmable display.

[0104] The remote operation system according to Aspect 6 of the present invention, in any of the above Aspects 1 to 5, may include the terminal device and the programmable display.

[0105] The programmable display according to aspect 7 of the present invention is the programmable display remotely operated by the terminal device in the above aspect 5, and includes a second display unit, a second communication unit capable of communicating with the first communication unit, and a second control unit that prohibits at least one of display and operation for at least a part of the screen displayed by the second display unit when the second communication unit receives the prohibition instruction from the first communication unit.

[0106] When the programmable display receives a prohibition instruction from the terminal device, it can prohibit at least one of display and operation for at least a part of the screen displayed by the second display unit. Therefore, it is possible to prevent the operator of the programmable display and a third party from disclosing the display content and prohibiting the operation for at least a part of the screen of the second display unit.

[0107] The screen display method according to aspect 8 of the present invention is a screen display method using a terminal device configured to be able to remotely operate a programmable display, and includes a first display step of displaying, on a display unit provided in the terminal device, the same screen as the screen displayed by the programmable display based on screen data acquired from the programmable display, an operation reception step of receiving an operation on the screen displayed on the display unit, and a second display step of displaying, on the display unit, an input screen of the terminal device in front of the screen displayed based on the screen data when receiving an input of a password to the programmable display via the terminal device in the operation reception step.

[0108] The terminal device, programmable display, and remote operation system according to each aspect of the present invention (hereinafter referred to as each device) may be realized by a computer. In this case, a control program for each of the above devices that realizes each of the above devices by operating each part (software element) provided in each of the above devices as a computer, and a computer-readable recording medium on which the control program is recorded also fall within the scope of the present invention.

[0109] 〔Example of realization by software〕 The functions of the terminal device 1 and the programmable display 2 (hereinafter referred to as the "device") are programs for causing a computer to function as the device, and can be realized by programs for causing a computer to function as each control block of the device (particularly the first control unit 15 and the second control unit 25).

[0110] In this case, the above device includes a computer having at least one control device (for example, a processor) and at least one storage device (for example, a memory) as hardware for executing the above program. The at least one storage device may correspond to the first storage unit 13 and the second storage unit 23. By executing the above program with this control device and storage device, each function described in the above embodiments is realized.

[0111] The above program may be recorded on one or more computer-readable recording media, not temporarily. This recording medium may or may not be provided in the above device. In the latter case, the above program may be supplied to the above device via any wired or wireless transmission medium.

[0112] Also, part or all of the functions of the above control blocks can also be realized by a logic circuit. For example, an integrated circuit in which a logic circuit functioning as each of the above control blocks is formed is also included in the scope of the present invention. In addition to this, for example, it is also possible to realize the functions of the above control blocks by a quantum computer.

[0113] The present invention is not limited to the above-described embodiments, and various modifications are possible within the scope shown in the claims. Embodiments obtained by appropriately combining the technical means disclosed in different embodiments are also included in the technical scope of the present invention.

Explanation of Reference Numerals

[0114] 1 Terminal device 2 Programmable display 11 First display unit 12 First input unit 14 First communication unit 15 First control unit 21 Second display unit 24 Second communication unit 25 Second control unit 100 Remote operation system IP1 Input screen (second screen) M1 Signature (input information) P11 Screen (first screen)

Claims

1. A terminal device configured to be able to remotely operate a programmable display, comprising: a first display unit; a first control unit that, based on screen data acquired from the programmable display, causes the first display unit to display a screen identical to the screen displayed by the programmable display and accepts an operation on the screen displayed on the first display unit. When the first control unit accepts the input of a password to the programmable display via the terminal device, the first control unit causes the input screen of the terminal device to be displayed in front of the screen displayed based on the screen data on the first display unit.

2. The terminal device according to claim 1, wherein when input information indicating that the programmable display accepts the input of a password is displayed on the screen displayed based on the screen data, the first control unit causes the input screen to be displayed in front of the screen displayed based on the screen data on the first display unit.

3. The first control unit determines whether the input information is displayed on the screen displayed based on the screen data by performing image recognition on the screen displayed based on the screen data. The terminal device according to claim 2.

4. The screen displayed on the first display unit is configured by overlapping a plurality of screens. On the first display unit, the screen displayed based on the screen data is a first screen that is a part of the plurality of screens. The input screen is a second screen that is a part of the plurality of screens and is different from the first screen. The terminal device according to any one of claims 1 to 3.

5. The terminal device further comprises a first communication unit capable of communicating with the programmable display. When the first control unit accepts a predetermined operation other than the input of a password for the terminal device, the first control unit uses the first communication unit to send a prohibition instruction to the programmable display to prohibit at least one of display and operation on at least a part of the screen displayed by the programmable display. The terminal device according to any one of claims 1 to 3.

6. A remote operation system comprising the terminal device according to any one of claims 1 to 3 and the programmable display.

7. The programmable display remotely operated by the terminal device according to claim 5, a second display unit; a second communication unit capable of communicating with the first communication unit; a second control unit that prohibits at least one of display and operation for at least a part of a screen displayed by the second display unit when the second communication unit receives the prohibition instruction from the first communication unit. A programmable display.

8. A screen display method using a terminal device configured to be able to remotely operate a programmable display, a first display step of causing a display unit provided in the terminal device to display a screen identical to the screen displayed by the programmable display based on screen data acquired from the programmable display; an operation reception step of receiving an operation on the screen displayed on the display unit; a second display step of causing an input screen of the terminal device to be displayed in front of the screen displayed based on the screen data on the display unit when receiving an input of a password to the programmable display via the terminal device in the operation reception step. A screen display method including.

Images