Information processing apparatus, information processing method, and information processing program

Abstract

To efficiently construct an IA system.SOLUTION: The information processing apparatus comprises a detection unit which detects one or more devices connected to a network, a collection unit which collects information of resources which can be used to build an IA system from the devices, an assignment unit which assigns users to the devices to build the IA system using the resources, and a deployment unit which deploys software in the devices to build the IA system using the resources. The resources include general purpose resources that can be used for IT and dedicated resources for IA systems.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present disclosure relates to an information processing device, an information processing method, and an information processing program. [Background technology]

[0002] For example, as disclosed in Patent Document 1, the introduction of cloud services into industrial automation (IA) technology has been studied and proposed. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2018-112829 Summary of the Invention [Problem to be solved by the invention]

[0004] Building IA systems requires a lot of engineering work and requires high levels of skill from engineers. Even when adopting cloud services, the general cloud platforms available on the market only support general purpose technologies (GPT), making it difficult to apply IA technologies. There is still room for further consideration of efficient system construction technologies.

[0005] One aspect of the present disclosure enables efficient construction of an IA system. [Means for solving the problem]

[0006] An information processing device according to one aspect of the present disclosure includes a detection unit that detects one or more devices connected to a network, a collection unit that collects information on resources that can be used to build an IA (Industrial Automation) system from the devices, an allocation unit that assigns users to the devices in order to build the IA system using the resources, and a deployment unit that deploys software on the devices in order to build the IA system using the resources, and the resources include general-purpose resources that can be used for IT (Information Technology) and dedicated resources for the IA system.

[0007] An information processing method according to one aspect of the present disclosure includes detecting one or more devices connected to a network, collecting information from the devices about resources that can be used to build an IA (Industrial Automation) system, assigning users to the devices to build the IA system using the resources, and deploying software to the devices to build the IA system using the resources, wherein the resources include general-purpose resources that can be used for IT (Information Technology) and dedicated resources for the IA system.

[0008] An information processing program according to one aspect of the present disclosure is an information processing program that causes a computer to perform the following processes: detecting one or more devices connected to a network; collecting information on resources that can be used to build an IA (Industrial Automation) system from the devices; assigning users to the devices in order to build the IA system using the resources; and deploying software to the devices in order to build the IA system using the resources, wherein the resources include general-purpose resources that can be used for IT (Information Technology) and dedicated resources for the IA system. [Effects of the Invention]

[0009] According to the present invention, an IA system can be efficiently constructed. [Brief explanation of the drawings]

[0010] [Figure 1] 1 is a diagram illustrating an example of a schematic configuration of an IA system 100 according to an embodiment. [Figure 2] FIG. 10 is a diagram illustrating an example of resources. [Figure 3] FIG. 2 is a diagram illustrating an example of a schematic configuration of an information processing device 3. [Figure 4] 1A and 1B are diagrams illustrating examples of states of the IA system 100. [Figure 5] 1A and 1B are diagrams illustrating examples of states of the IA system 100. [Figure 6] 1A and 1B are diagrams illustrating examples of states of the IA system 100. [Figure 7] 1A and 1B are diagrams illustrating examples of states of the IA system 100. [Figure 8] 1A and 1B are diagrams illustrating examples of states of the IA system 100. [Figure 9] 1A and 1B are diagrams illustrating examples of states of the IA system 100. [Figure 10] 1A and 1B are diagrams illustrating examples of states of the IA system 100. [Figure 11] 1A and 1B are diagrams illustrating examples of states of the IA system 100. [Figure 12] 1A and 1B are diagrams illustrating examples of states of the IA system 100. [Figure 13] 1 is a flowchart illustrating an example of a process (information processing method) executed in the IA system 100. [Figure 14] FIG. 10 is a diagram showing a first modified example. [Figure 15] FIG. 10 is a diagram showing a first modified example. [Figure 16] FIG. 10 is a diagram showing a first modified example. [Figure 17] FIG. 10 is a diagram showing a first modified example. [Figure 18] FIG. 10 is a diagram showing a second modified example. [Figure 19] FIG. 10 is a diagram showing a third modified example. [Figure 20]FIG. 10 is a diagram showing a third modified example. [Figure 21] FIG. 10 is a diagram showing a third modified example. [Figure 22] FIG. 10 is a diagram showing a fourth modified example. [Figure 23] FIG. 10 is a diagram showing a fifth modified example. [Figure 24] FIG. 2 is a diagram illustrating an example of a hardware configuration of an information processing device 3. DETAILED DESCRIPTION OF THE INVENTION

[0011] Hereinafter, embodiments will be described with reference to the drawings. The same elements are denoted by the same reference numerals, and duplicated descriptions will be omitted where appropriate.

[0012] <Preface> Information technology (IT) continues to evolve, and the provision of cloud services using cloud platforms is one example. However, common cloud platforms on the market only support GPT. Deploying and executing IA-specific technology to match IA technology is not easy, and hurdles (also known as CSM) exist. Note that IA in this disclosure may be interpreted to include, for example, industrial control systems (ICS), control and operational technology (OT), etc. Within the scope of no contradiction, IA, ICS, and OT may be interpreted as appropriate.

[0013] Unlike general IT, IA has a variety of situations that require special requirements and considerations to support the tasks essential to the business execution of production activities by system end users. To achieve this, specialized products and technologies, such as controllers (field control units, programmable logic controllers, etc.), I / O modules, field devices, networks, and stations (such as the HIS described below), have been used and integrated. It is not uncommon for general software (including firmware) to be modified for specific purposes using proprietary technologies. Most specialized products and technologies are not compatible or interoperable with other companies' products or GPTs.

[0014] The prioritization of required functional items is also different from that of general IT. For example, in IT, confidentiality, integrity, and availability are required in descending order of priority. On the other hand, in IA, availability, integrity, and confidentiality are required in descending order of priority.

[0015] Most IA systems are designed, built, run, and maintained as dedicated systems. In this architecture, hardware, infrastructure, and applications are closely integrated. Examples of infrastructure include firmware, OS, network, security, and virtualization. Examples of applications include control systems, utilities, and MES (Manufacturing Execution Systems). Examples of utilities include boiler control systems and power control systems.

[0016] The characteristics of IA systems described above make it difficult for other companies to enter the market and require specialized skills from engineers. While this contributes to stable system operation with high availability, it also makes it extremely difficult to integrate and operate IA services on cloud platforms that only support GPT.

[0017] At least some of the above-mentioned problems are addressed by the disclosed technology: To configure an IA system, resource usage is supported and its lifecycle is managed at both the hardware and software levels.

[0018] Examples of hardware-level resources are IA resources, such as various workstations, real-time communication devices for ICS, automation controllers, I / O modules, etc. These resources are actually located in industrial sites, near users, etc., and may be bare-metal manageable, or may be provided in a virtualized form. Another example of a resource is a general-purpose resource that can be used for IT, such as IT resources such as memory, processors, storage media, and network cards.

[0019] An example of a software-level resource is the software itself, which may include an OS, device drivers, firmware, applications, and the like.

[0020] This involves resource inventory itemization, commissioning (including work management configuration, etc.), resource testing, user assignment, deployment of various software (OS, device drivers, firmware, applications, etc.), and resource release after use.

[0021] Unlike typical IT cloud services that only support GPT, it is possible to run cloud services that are fundamentally compatible with the use of IA resources. Service integration and operation on the cloud platform can be easily performed. Resources from hardware to software are completely integrated into a single cloud platform. Both IA and IT technologies can be used by users. For example, efficiency can be improved in various ways by visualizing not only software settings but also various hardware settings (such as DIP switches on network cards) and visualizing engineer work efficiency.

[0022] <Embodiment> 1 is a diagram showing an example of a schematic configuration of an IA system 100 according to an embodiment. In this example, the IA system 100 includes a plurality of devices 1, a network 2, and an information processing device 3.

[0023] The device 1 may be a physical device (physical machine) such as a device or equipment that physically exists in the IA system 100, or may be a virtualized device (virtualized machine) virtualized on a server. The device 1 may correspond to a node that constitutes the architecture of the IA system 100. In the embodiment described here, each device 1 is assumed to be a physical device. Virtualized devices will be described later with reference to FIG. 23.

[0024] The area where the IA system 100 is installed is referred to as area L and is illustrated. Area L includes three areas at different levels (hierarchies). The first area is referred to as area L1 and is illustrated. The second area is referred to as area L2 and is illustrated. The third area is referred to as area L3 and is illustrated.

[0025] Area L1 is an area located within and / or near a plant. The plant produces various products, such as petrochemical products, gas products, and resin products. The plant may be understood to include a factory. Devices 1 provided in area L1 are referred to and illustrated as device 1-1, device 1-2, device 1-3, device 1-4, device 1-5, or device 1-6. These devices 1 are components of an ICS and are used to control the plant. Devices 1-1 to 1-6 may also be collectively referred to as the ICS.

[0026] Device 1-1 is a field device (also called field equipment) used for measuring, operating, etc. the plant. Examples of measurements include pressure measurement, temperature measurement, flow rate measurement, etc. An example of operation is opening and closing a valve, etc. Device 1-2 is an ICS I / O (input / output) module installed between device 1-1 and device 1-3. Device 1-2 is used that supports signals of various specifications. Device 1-3 is an ICS controller connected to network 2-1. Device 1-3 controls measurements, operations, etc. performed by device 1-1 via device 1-2.

[0027] Device 1-4 is a gateway station. Device 1-5 is an OPC (Open Platform Communications) server provided between device 1-4 and device 1-6. Device 1-6 is a subsystem connected to device 1-5, such as a controller provided by a supplier different from the supplier of devices 1-1 to 1-3.

[0028] The network 2-1 enables communication between a device 1 provided in an area L1 and a device 1 provided in an area L2. In the example shown in Fig. 1, devices 1-3 and 1-4 provided in the area L1, as well as a device 1-7 (described later), are connected to the network 2-1.

[0029] The network 2-1 is a real-time communication network for ICS, and is also called a process control network (PCN). From the viewpoint of data protection, the network 2-1 may be configured to include a dedicated network and other components. To be able to cope with interruptions, failures, etc., the network 2-1 may be configured to include two or more communication lines for redundancy.

[0030] Area L2 is an area for operating and monitoring the plant. Devices 1 provided in area L2 are illustrated and referred to as devices 1-7. In FIG. 1, a human interface station (HIS), an engineering workstation (ENG), and an asset management station are shown as examples of devices 1-7.

[0031] The HIS provides a human machine interface (HMI) for operating and monitoring the plant. Operation and monitoring functions, engineering functions, etc. are installed in the HIS and executed as needed. The ENG is used for system configuration, maintenance, etc. The asset management station, for example, centrally manages asset information of the IA system 100. Examples of asset information include status information and maintenance information related to automation, production assets, etc. Various maintenance support functions, such as online functions for monitoring and diagnosing other devices 1, may be implemented.

[0032] The network 2-2 enables communication between a device 1 provided in the area L2 and a device 1 provided in the area L3. In the example shown in FIG. 1, a device 1-7 provided in the area L2 and a device 1-8 (described later) are connected to the network 2-2. The network 2-2 may be called a PIN (Plant Information Network) or the like. Various known network technologies may be used, one example being an Ethernet (registered trademark) network.

[0033] Area L3 is an area for managing the IA system 100. Devices 1 provided in area L3 are referred to as devices 1-8 and are illustrated in the figure. In FIG. 1, examples of devices 1-8 include a domain management station, a patch management station, and an antivirus management station. Note that a domain may correspond to area L.

[0034] The domain administration station manages objects within the domain (in this example, within area L) and ensures security against unauthorized access within the network. For example, it implements various functions such as centralized management of objects, authentication and authorization, user and device provisioning, the principle of least privilege and segregation of permissions, physical / technical security management using GPO (Group Policy Object), public key infrastructure service, Radius service, and Drive encryption service.

[0035] The patch management station provides a management console to centrally manage and update other devices 1 (clients). For example, all applied updates are recorded and available to device 1 when approving patches. Patch management is used to manage the approval and installation of verified updates for all systems.

[0036] The antivirus management station is the core of the antivirus management solution, and communicates with other devices 1 via agent software installed on those devices. It is possible to set and manage security policies, schedule tasks, reports, etc. The administrator downloads the latest virus definition files from this antivirus management and distributes them to each device 1 (all clients). The antivirus management also functions as a storage for all the latest and past virus definition files.

[0037] The various devices 1 described above are distributed and arranged within an area L. The IA system 100 can also be called a distributed control system (DCS).

[0038] Each device 1 has various resources that can be used to build the IA system 100. As mentioned at the beginning, the IA system 100 supports resources at both the hardware and software levels. Some examples of HW-level resources will be described with reference to Figure 2.

[0039] FIG. 2 is a diagram showing examples of resources. Resources include general-purpose resources and dedicated resources. General-purpose resources are resources that can be used for IT (IT resources). Examples of general-purpose resources include memories (RAMs), processors (CPUs, GPUs), storage media (Disks), and network cards (NICs). Dedicated resources are resources (IA resources) dedicated to the IA system 100. Examples of dedicated resources include real-time communication devices, automation controllers, and automation I / O modules.

[0040] Returning to Figure 1, the IA system 100 can be constructed using the various resources described above. To enable efficient system construction, an information processing device 3 is used. The information processing device 3 can also be called a system construction support device.

[0041] Specifically, information processing device 3 is connected to network 2 so as to be able to communicate with device 1. In the example shown in Fig. 1, information processing device 3 is connected to network 2-2 and is therefore able to communicate with device 1-7 and device 1-8. Details of information processing device 3 will be described with reference to Fig. 3 as well.

[0042] 3 is a diagram illustrating an example of a schematic configuration of the information processing device 3. The information processing device 3 includes a storage unit 30 and a node controller 4.

[0043] The storage unit 30 stores information used by the information processing device 3. Information may be interpreted to include data, and these terms may be interpreted as appropriate. An example of information stored in the storage unit 30 is a program 300. The program 300 is an information processing program (software) that causes a computer to function as the information processing device 3.

[0044] The node controller 4 controls devices 1 (nodes) that can communicate via the network 2. For example, the node controller 4 functions as MAAS (Metal as a Service). The MAAS is software installed in the information processing device 3, and can be part of the program 300.

[0045] The node controller 4 includes a detection unit 41 , a collection unit 42 , an allocation unit 43 , a deployment unit 44 , and a release unit 45 .

[0046] The detection unit 41 detects one or more devices 1 connected to the network 2. In the example of FIG. 1 described above, devices 1-7 and 1-8 connected to the network 2-2 are detected. The detection result includes an identifier of each device 1. An example of the identifier is a MAC (Media Access Control) address. For example, data that associates the identifier with the location of the device 1 within the IA system 100 may be prepared in advance, and the location of each device 1 can be determined by referring to the data.

[0047] The collection unit 42 collects information about resources available in the device 1 detected by the detection unit 41. The collected information about resources includes resources that can be used to build the IA system 100.

[0048] The collected resource information is also referred to as a resource inventory. The collection unit 42 itemizes the resource inventory. The itemized resource inventory is also referred to as resource details.

[0049] The allocation unit 43 allocates users to devices 1 to build the IA system 100 using the various resources described above. The user here refers to a user of the IA system 100 and is referred to as user U. The user U may be multiple users U (groups, organizations, etc.) who share the IA system 100. In the example shown in FIG. 1, a corresponding user U is allocated to each device 1-7 and each device 1-8. The user U of device 1-7 is illustrated as user U-7. The user U of device 1-8 is illustrated as user U-8.

[0050] The deployment unit 44 deploys (transmits, etc.) software to the device 1 in order to build the IA system 100 using the above-mentioned resources. An example of software is an operating system (OS). The OS may be a general-purpose OS or a dedicated OS. An OS is installed in each of the devices 1-7 and 1-8. The OS installed in each of the devices 1 may be the same OS or different OSs.

[0051] Software other than the OS may also be deployed in each device 1. An example of the other software is a device driver. In addition, each device 1 may be configured, and application software may be deployed. An example will be described later with reference to FIGS. 14 to 18.

[0052] Through the above-described steps, the IA system 100 is constructed. Detection of the device 1, collection of resource information, etc. are performed automatically. Furthermore, assignment of users U, deployment of software, etc. are performed so that the IA system 100 is constructed using both general-purpose resources and dedicated resources. Much of the work required to construct the IA system 100 is automated, significantly reducing the burden of engineering work. Engineers (e.g., some users U) do not need to understand the overall technology of the IA system 100, which prevents the skill level required of engineers from becoming too high. This enables efficient construction of the IA system 100.

[0053] During operation of the IA system 100, devices 1-1 to 1-6 (i.e., the ICS) control the plant in area L1. In area L2, devices 1-7 operate and monitor the plant. In area L3, devices 1-8 manage the IA system 100. When the IA system 100 completes its role, the resources are released.

[0054] The release unit 45 releases resources that have been used by the IA system 100. For example, the release unit 45 deletes the allocation of user U to device 1, or deletes software installed on device 1. Data stored on the storage media of each device 1 while the IA system 100 was operating is also deleted.

[0055] The release by the release unit 45 is initiated by, for example, a user operation of the device 1. A release instruction is transmitted from each device 1 to the node controller 4, and in response to this, the release unit 45 releases the resource.

[0056] Releasing the resources makes it possible to build the next new IA system 100. In other words, the released resources are returned to the shared pool of capacity. For example, the allocation unit 43 allocates the user U to the device 1 to build the next new IA system 100. The deployment unit 44 deploys software to the device 1 to build the next new IA system 100. The construction of the IA system 100 using the resources and the release of the resources are repeated. In this way, the life cycle of the resources is managed.

[0057] As explained above, the status of the IA system 100 changes under the control of each device 1 by the node controller 4 of the information processing device 3. This will be explained with reference to FIGS.

[0058] 4 to 12 are diagrams showing examples of the state of the IA system 100. Note that, for the information processing device 3, only the node controller 4, which is a component thereof, is shown in the figures.

[0059] 4 shows the IA system 100 in a new state (New). Each device 1 is automatically or manually installed and configured. The node controller 4 is connected to the network 2-2 and can communicate with the device 1-7 and the device 1-8.

[0060] During installation of each device 1, software can be loaded into the node controller 4. The node controller 4 is then ready to deploy (transmit, etc.) the software to each device 1. As mentioned above, examples of software include a general-purpose or dedicated OS, device driver, firmware, etc. Original scripts may be prepared for tasks specific to the site, such as firmware updates.

[0061] Each introduced device 1 is detected by the detection unit 41 of the node controller 4 described above. In this example, devices 1-7 and 1-8 connected to the network 2-2 are detected.

[0062] FIG. 5 shows the IA system 100 in the commissioning state. As mentioned above, the collection unit 42 (FIG. 3) of the node controller 4 collects and details resource information from devices 1-7 and 1-8 detected by the detection unit 41, and generates resource details. Automatic tests are also performed on each resource. One example of a test is a test to determine whether the resource operates normally. In addition, IPMC-based BMC (Baseboard Management Controller) authentication information is also set for power control. Device 1 can also be started and stopped. The results of these tests may also be included in the resource details. Hardware setting information, such as the DIP switches on the network card mentioned at the beginning, may also be included in the resource details.

[0063] The resource details can be used for resource confirmation, selection, etc. For example, the collection unit 42 of the node controller 4 transmits the resource details to the device 1 so that the device 1 presents the information to the user U. The device 1 presents the resource details. The user U can confirm the contents of the resources or select a resource. An example of presentation will be described later with reference to FIG. 9. The resources to be used in constructing the IA system 100 are determined, and commissioning is completed.

[0064] 6 shows the IA system 100 in a ready state, in which the devices 1 and various resources that make up the IA system 100 are ready for use.

[0065] 7 shows the IA system 100 in an allocated state (Allocated). As described above, the allocation unit 43 of the node controller 4 allocates user U to device 1. In this example, users U-7 and U-8 are allocated to devices 1-7 and 1-8.

[0066] The allocation of user U can be expanded at any time, allowing for flexible response according to the scale of the application, etc. User U, who has been allocated device 1, can use that device 1 to perform various settings. Examples of settings include network interface bonding, address settings, disk settings, and partitioning settings. Examples of disk settings include LVM (Logical Volume Manager), RAID (Redundant Array of Inexpensive Disks), and bcache.

[0067] FIG. 8 shows the IA system 100 in the deploying state and the deployed state. In the deployed state, the device 1 assigned to each user U sends a request to the node controller 4, for example, in response to a user operation, to start the device 1. The installation required for system construction can be automated, and network interfaces, disk partitions, and the like can be configured. For example, software such as an OS is deployed from the node controller 4 to devices 1-7 and 1-8 and automatically installed. Network settings, as well as settings for storage media, controllers, I / O, and the like, are also automatically performed. Additional software and systems can also be automatically deployed through prior configuration and programming. In this way, a device 1 capable of executing the application desired by the user U can be instantly obtained from a new, clean environment.

[0068] In the deployment-completed state, the deployed software enables the device 1 to operate as a corresponding device in the IA system 100. Each device 1 can be used for various purposes, such as plant control and cybersecurity. The operation of the device 1 may be started automatically or manually in response to a user operation or the like.

[0069] Remote communication with each device 1 becomes possible via the network 2. Various known technologies such as RDP (Remote Desktop Protocol), SSH (Secure Shell), and Telnet (Telecommunication network) may be used. Maintenance work and the like can also be performed.

[0070] As mentioned above, resource details can be presented to the user U via the device 1. An example is shown in FIG.

[0071] 9 shows an example of the display screen of a certain device 1-7 (HIS in this example). Information on network resources is displayed in the form of a web screen. Some notable parts are indicated by thick dashed frames.

[0072] The HIS has completed resource commissioning (including testing) and is now in a ready state. The screen displays two types of network resources as a network resource inventory. Information about network cards, which are general-purpose resources (IT resources), is displayed as "ModelXXX Gigabit Network Connection" or similar. Information about real-time communication devices, which are dedicated resources (IA resources), is displayed as "Yokogawa Vnet Adapter" or similar. The MAC also includes a number that identifies (distinguishes) the domain and station.

[0073] For example, from such a web screen, the user U can check and change the resource details (which can also be called the Deploy environment, etc.). This can be useful for resource selection, etc.

[0074] As mentioned above, the device driver is also automatically installed. An example is shown in Figure 10. The driver for the real-time communication device described above is automatically installed, and its IP address, subnet mask, etc. are automatically set, as shown in the bold dashed frame.

[0075] When the role of the IA system 100 constructed as described above is completed, the resources are released.

[0076] FIG. 11 shows the IA system 100 in the Releasing state. The Releasing unit 45 (FIG. 3) of the node controller 4 releases the used resources. The allocation of user U to device 1 is deleted. The software installed on device 1 is also deleted, as well as the data on device 1. The state of the IA system 100 returns to the Commissioning state described above in FIG. 5, i.e., the state after device 1 has been discovered and resource details have been generated. The next new IA system 100 can now be built.

[0077] An example of state transitions is shown in Figure 12. The state of the IA system 100 transitions in the order of the previously explained new state (New), commissioning state (Commissioning), ready state (Ready), allocated state (Allocated), deploying state (Deployed), deployed state (Deployed), and releasing state (Releasing). Furthermore, each time a new IA system 100 is constructed, the state transition from ready state (Ready) to releasing state (Releasing) is repeated. In this way, the life cycle of resources is managed.

[0078] A state transition from Ready to Commissioning is also possible. Throughout the life cycle of the device 1, itemization may be re-performed due to part replacement, part addition, etc.

[0079] Commissioning can be performed again from the ready state (Ready) after resource release, and as part of this, the normality of the HW can be checked using a test program that is executed. The test program may be pre-registered in the information processing device 3 (for example, stored in the storage unit 30). Before commissioning, a test program can be selected according to the type of HW.

[0080] The transition is not limited to the above, and any state can be transitioned to any other state.

[0081] 13 is a flowchart showing an example of processing (information processing method) executed in the IA system 100. Explanations of content that overlap with those described above will be omitted where appropriate.

[0082] In step S1, the device 1 is detected. The detection unit 41 (FIG. 3) of the node controller 4 of the information processing device 3 detects one or more devices 1 connected to the network 2.

[0083] In step S2, resource information is collected. The collection unit 42 (FIG. 3) collects information on resources that can be used to build the IA system 100 from the device 1. Specifications are also performed.

[0084] In step S3, the user U is assigned to the device 1. The assignment unit 43 (FIG. 3) assigns the user U to the device 1 in order to build the IA system 100 using the above-mentioned resources.

[0085] In step S4, the software is deployed to the device 1. The deployment unit 44 (FIG. 3) deploys the software to the device 1 in order to build the IA system 100 using the above-mentioned resources.

[0086] In step S5, the resource is released. The release unit 45 (FIG. 3) releases the lease from use by the IA system 100. Thereafter, the process returns to step S3. The processes of steps S3 to S5 are repeated to manage the life cycle of the resource.

[0087] <Modification> The disclosed technology is not limited to the above-described embodiment, and several modifications will be described below.

[0088] <First Modification> As mentioned above, the device 1 may be configured during the deploying state. This will be described with reference to FIGS.

[0089] 14 to 17 are diagrams showing a first modified example. As shown in Fig. 14 and Fig. 15, the IA system 100 further includes a master repository 6. The information processing device 3 further includes a site repository 5. The network 2 further includes a network 2-3.

[0090] The network 2-3 enables communication between the site repository 5 and the master repository 6. Various known network technologies may be used. For example, an Ethernet network may be used as the network 2-2, or other known networks such as the Internet may be used.

[0091] The site repository 5 is, for example, a device such as a server, and includes a storage unit 50 and a setting unit 51 (FIG. 15).

[0092] An example of information stored in the storage unit 50 is Config information 500. The Config information 500 includes configuration information for each device 1. The Config information 500 is acquired by the site repository 5 from the master repository 6. In the master repository 6, for example, configuration information for the device 1 of the IA system 100 to be constructed is registered.

[0093] The setting unit 51 configures the device 1 so that the device 1 operates as a corresponding device in the IA system 100, such as the various management stations, HIS, ENG, etc., previously described with reference to FIG. 1. The configuration is performed based on the Config information 500 stored in the storage unit 50.

[0094] The configuration is performed, for example, after the OS is deployed. After the OS is installed, a certain device 1-8 is configured so that the device 1-8 operates as a domain management station. The same applies to a patch management station, an antivirus management station, and an asset management station. Furthermore, after the OS is installed, a certain device 1-7 is configured so that the device 1-7 operates as an HIS. The same applies to an ENG.

[0095] 16 and 17 show an example of the operation during configuration. In this example, the configuration is performed during the deployment state. As shown in FIG. 16, the site repository 5 synchronizes with the master repository 6 via the network 2-3 and obtains Config information 500 from the master repository 6. As shown in FIG. 17, the site repository 5 configures each device 1 based on the Config information 500.

[0096] In the above modification, an example has been described in which the site repository 5 is included in the information processing device 3 as a component separate from the node controller 4. However, the function of the site repository 5 may be incorporated into the node controller 4.

[0097] <Second Modification> As mentioned above, application software may be deployed on the device 1. A controller for this purpose may be provided separately, which will be described with reference to FIG.

[0098] 18 is a diagram showing a second modified example. The information processing device 3 further includes an application controller 7. The application controller 7 deploys applications to the devices 1 so that the devices 1 operate as corresponding devices in the IA system 100. The application controller 7 transmits corresponding application software (application programs) to each device 1. The corresponding application software is installed in the device 1.

[0099] Application deployment is performed after the OS is deployed. For example, application software is installed on a certain device 1-8 to operate that device 1-8 as a domain management station. The same applies to a patch management station, an antivirus management station, and an asset management station. Furthermore, application software is installed on a certain device 1-7 to operate that device 1-7 as an HIS. The same applies to an ENG.

[0100] The functions of the application controller 7 described above may be incorporated into the deployment unit 44 of the node controller 4. In this case, the deployment unit 44 of the node controller 4 deploys the application to each device 1.

[0101] <Third Modification> In the above embodiment, an example has been described in which the information processing device 3 controls only the device 1 connected to the network 2-2 out of the networks 2-1 and 2-2. However, the information processing device 3 may also be able to control the device 1 connected to the network 2-1. The following description will be given with reference to Figs. 19 to 21.

[0102] 19 to 21 are diagrams showing a third modified example. As shown in Fig. 19, the information processing device 3 includes three node controllers 4. The first node controller is illustrated as node controller 4-1. The second node controller is illustrated as node controller 4-2. The third node controller is illustrated as node controller 4-3.

[0103] The node controller 4-1 and the node controller 4-2 are sub-controllers. The node controller 4-1 is connected to the network 2-1, and the node controller 4-2 is connected to the network 2-2. The node controller 4-3 is the primary controller and can operate synchronously with each of the node controller 4-1 and the node controller 4-2.

[0104] The functional blocks of the node controller 4 described above (FIG. 3) may be distributed among the node controller 4-1, the node controller 4-2, and the node controller 4-3, or may be collectively disposed in the node controller 4-3, for example.

[0105] The functions of the node controller 4 (FIG. 3) described so far are realized by the synchronous operation of the node controller 4-2 and the node controller 4-3. The devices 1-7 and 1-8 connected to the network 2-2 are controlled in the same manner as before.

[0106] The synchronized operation of the node controller 4-1 and the node controller 4-3 also makes it possible to control the device 1 connected to the network 2-1. Specifically, in the example shown in Fig. 19, the devices 1-3 and 1-4 connected to the network 2-1, and further the device 1-2 connected to the device 1-3 are controlled.

[0107] User U is also assigned to device 1-2, device 1-3, and device 1-4, and software is deployed to them. User U of device 1-2 is illustrated as user U-2. User U of device 1-3 is illustrated as user U-3. User U of device 1-4 is illustrated as user U-4.

[0108] 20 and 21 show the IA system 100 in a deploying state. As shown in FIG. 20, the node controller 4-3 synchronizes with each of the node controllers 4-1 and 4-2. As shown in FIG. 21, software is deployed to the device 1 connected to the network 2-1 via the node controller 4-1, more specifically, to the devices 1-2 to 1-4 in this example. Software is deployed to the device 1 connected to the network 2-2 via the node controller 4-2, more specifically, to the devices 1-7 and 1-8 in this example.

[0109] For example, in the above manner, it is possible to control both the device 1 connected to the network 2-1 and the device 1 connected to the network 2-2. Note that the device 1-1, the device 1-5, and the device 1-6 may also be controlled in a similar manner.

[0110] <Fourth Modification> The functions of the node controller 4-3 described above may be provided using cloud server technology, as will be explained with reference to FIG.

[0111] 22 is a diagram illustrating a fourth modified example. The IA system 100 further includes a network 2-4. Various known networks, such as the Internet, may be used. Each of the node controller 4-1 and the node controller 4-2 communicates with and synchronizes with the node controller 4-3 via the network 2-4. As in the third modified example described above, both the device 1 connected to the network 2-1 and the device 1 connected to the network 2-2 can be controlled.

[0112] <Fifth Modification> At least some of the devices 1 among the plurality of devices 1 may be virtualized devices (virtualized machines), as will be described with reference to FIG.

[0113] 23 is a diagram showing a fifth modified example. The IA system 100 includes a server device 10. The server device 10 is used to virtualize a device 1. The server device 10 can also be called a virtualization server. In this example, the server device 10 virtualizes and provides devices 1-7 that belong to an area L2.

[0114] FIG. 23 also shows a block configuration of the server device 10. The server device 10 includes hardware 11 and software 12. Examples of the hardware 11 are general-purpose resources such as memory, a processor storage medium, etc. The software 12 is virtualization software that provides a virtual device (virtual machine) thereon. Various known virtualization technologies may be used. The software 12 is also referred to as a hypervisor, etc. The hypervisor may run on an OS or may run directly on the hardware 11.

[0115] Software (such as an OS) is installed on the virtualized device to operate it as Object Device 1. Dedicated software is also installed on the virtualized device to enable connection to a dedicated network, such as Network 2-1. This dedicated software can also be considered a device driver installed on the virtual device OS.

[0116] 23 illustrates devices 1-7, more specifically, an HIS, an ENG, and an asset management station, as examples of devices 1 virtualized within the server device 10. Any other device 1 may be virtualized and provided together with or in place of these devices 1-7.

[0117] Even if the virtualized device 1 is used, the IA system 100 can be constructed in the same manner as before. First, the server device 10 itself is treated as a node of the IA system 100. Then, each virtualized device in the server device 10 is treated as a node in the IA system 100. This will be explained in order.

[0118] A server device 10, which is a physical machine, is detected via the network 2, and transitions are made from a new state (New), to a commissioning state (Commissioning), to a ready state (Ready), to an allocated state (Allocated).

[0119] Deployment programs, scripts, etc. may be pre-registered in the node controller 4 or the site repository 5. The software 12 may be automatically configured using these during the deployment state. Some of the configuration may also be performed manually.

[0120] The software 12 of the server device 10 provides virtual devices thereon. In the example shown in FIG. 23, devices 1-7 (HIS, ENG, asset management station) are provided, and these devices 1-7 are detected via the network 2. As in the previous embodiment, transitions occur from a new state (New), a commissioning state (Commissioning), a ready state (Ready), and an allocated state (Allocated). Note that the node controller 4 and the software 12 may be linked in advance, and a virtual device may be prepared by a user U or a program via an arbitrary interface on the node controller 4. The node controller 4 can automatically transition from a new state (New), a commissioning state (Commissioning), and a ready state (Ready).

[0121] During the deploying state (Deploying), the software is deployed to each device 1. The software is also deployed to devices 1-7 in the server device 10. After the deployment, the state transitions to the deployment completion state (Deployed).

[0122] <Example of hardware configuration of information processing device 3> 24 is a diagram showing an example of the hardware configuration of the information processing device 3. The information processing device 3 described above is configured to include the illustrated computer 9. The hardware configuration of the computer 9 is exemplified by a communication device 91, a display device 92, a storage device 93, a memory 94, and a processor 95, which are interconnected by a bus or the like.

[0123] The communication device 91 is a network interface card or the like, and enables communication with other devices. The communication device 91 enables access to the network 2 (FIG. 1). The display device 92 is used for displaying information, etc.

[0124] Various types of data are stored in the storage device 93 and the memory 94. Specific examples of the storage device 93 include a hard disk drive (HDD), a read only memory (ROM), and a random access memory (RAM). The memory 94 may be a part of the storage device 93. The storage device 93 may correspond to the storage unit 30 of the information processing device 3.

[0125] An example of the data stored in the storage device 93 is a program 930. The program 930 is a program (software) that causes the computer 9 to function as the information processing device 3. An example of the program 930 is the above-mentioned program 300 (FIG. 3).

[0126] The processor 95 executes various processes. For example, the processor 95 reads (reads) the program 930 from the storage device 93 and expands it in the memory 94, thereby causing the computer 9 to execute various processes executed in the information processing device 3.

[0127] The programs 930 can be distributed collectively or separately via a network such as the Internet. The programs 930 can also be recorded collectively or separately on a computer-readable recording medium such as a hard disk, a flexible disk (FD), a CD-ROM, or a DVD (Digital Versatile Disc), and can be executed by being read by the computer 9 from the recording medium.

[0128] It should be noted that at least some of the devices 1 (FIG. 1), such as stations including devices 1-7 and 1-8, may also be configured to include a computer 9 as shown.

[0129] <Summary> The techniques described above can be specified, for example, as follows. One of the techniques disclosed is an information processing device 3. As described with reference to FIGS. 1 to 23, the information processing device 3 includes a detection unit 41 that detects one or more devices 1 (which may include virtualized devices) connected to a network 2, a collection unit 42 that collects information on resources that can be used to build an IA system 100 from the devices 1, an allocation unit 43 that assigns a user U to the devices 1 in order to build the IA system 100 using the resources, and a deployment unit 44 that deploys software on the devices 1 in order to build the IA system 100 using the resources. The resources include general-purpose resources that can be used for IT and dedicated resources for the IA system 100.

[0130] According to the information processing device 3, user allocation, software deployment, and the like are performed so that the IA system 100 is constructed using not only general-purpose IT resources but also dedicated resources for the IA system 100. Many of the tasks required to construct the IA system 100 are automated, significantly reducing the burden of engineering work. Engineers (e.g., some users U) do not need to understand the overall technology of the IA system 100, which prevents the skill level required of engineers from becoming too high. This enables efficient construction of the IA system 100.

[0131] 2 and other related drawings, the general-purpose resources may include at least one of a memory, a processor, a storage medium, and a network card, and the dedicated resources may include at least one of a real-time communication device, an automation controller, and an automation I / O module. For example, the IA system 100 can be constructed using such various resources.

[0132] As described with reference to Figures 3, 8, and 9, the collection unit 42 may transmit the collected resource information to the device 1 so that the device 1 can present the resource information (e.g., an itemized resource inventory (resource details)) to the user U. This can be used to confirm, select, etc. the resources to be used in building the IA system 100.

[0133] 3 and 4, the software deployed by the deployment unit 44 may include an OS. The software deployed by the deployment unit 44 may also include device drivers. Software installation such as the OS and device drivers can be automated.

[0134] As described with reference to FIGS. 3 and 11, the information processing device 3 may include a release unit 45 that releases the above-mentioned resources from use by the IA system 100. For example, the release by the release unit 45 may include deleting the allocation of the user U and deleting the software. The allocation unit 43 may allocate the user U to the device 1 to build a new IA system 100 using the released resources, and the deployment unit 44 may deploy the software to the device 1 to build a new IA system 100 using the released resources. For example, in this manner, the life cycle of resources can be managed.

[0135] 14 to 17, the information processing device 3 may include a setting unit 51 that configures the device 1 so that the device 1 operates as a corresponding device in the IA system 100. This also makes it possible to automate the configuration of the device 1.

[0136] 18 and other figures, the information processing device 3 may include an application controller 7 (which may be the deployment unit 44) that deploys an application to the device 1 so that the device 1 operates as a corresponding device in the IA system 100. This also makes it possible to automate application software installation.

[0137] As described with reference to FIG. 1 etc., the device 1 may include at least one of a domain management station, a patch management station, an antivirus management station, an asset management station, a human interface station, and an engineering workstation. The device 1 may be connected to a network 2-2, which is an Ethernet network. The device 1 may also include at least one of an ICS controller, an ICS I / O module, and a gateway station. The device 1 may be connected to a network 2-1, which is a real-time communication network for the ICS. For example, an IA system 100 including such various devices 1 and networks 2 can be efficiently constructed.

[0138] The information processing method described with reference to Figures 1 to 23 (particularly Figure 13) is also one of the disclosed technologies. The information processing method includes detecting one or more devices 1 connected to a network 2 (step S1), collecting information on resources that can be used to build an IA system 100 from the devices 1 (step S2), assigning a user U to the devices 1 to build the IA system 100 using the resources (step S3), and deploying software to the devices 1 to build the IA system 100 using the resources (step S4). The resources include general-purpose resources that can be used for IT and dedicated resources for the IA system 100. As described above, this information processing method also enables efficient construction of the IA system 100.

[0139] The information processing programs (e.g., program 300, program 930) described with reference to FIGS. 1 to 24 are also disclosed technologies. The information processing program causes the computer 9 to execute the following processes: detect one or more devices 1 connected to the network 2 (step S1); collect information on resources that can be used to build the IA system 100 from the devices 1 (step S2); assign a user U to the devices 1 to build the IA system 100 using the resources (step S3); and deploy software to the devices 1 to build the IA system 100 using the resources (step S4). The resources include general-purpose resources that can be used for IT and dedicated resources for the IA system 100. As described above, such information processing programs also enable the efficient construction of the IA system 100.

[0140] Some examples of combinations of the disclosed technical features are set out below. (1) a detector for detecting one or more devices connected to the network; a collection unit that collects information on resources that can be used to build an IA (Industrial Automation) system from the device; an allocation unit that allocates users to the devices to build the IA system using the resources; a deployment unit that deploys software onto the device to build the IA system using the resources; Equipped with The resource is: General-purpose resources that can be used for IT (Information Technology) and Dedicated resources for IA systems and Including, Information processing device. (2) the general-purpose resource includes at least one of a memory, a processor, a storage medium, and a network card; the dedicated resources include at least one of a real-time communication device, an automation controller, and an automation I / O module; An information processing device according to (1). (3) the collection unit transmits the collected information about the resource to the device so that the device can present the information about the resource to the user; An information processing device according to (1) or (2). (4) The software deployed by the deployment unit includes an OS. The information processing device according to any one of (1) to (3). (5) the software deployed by the deployment unit includes a device driver; An information processing device according to any one of (1) to (4). (6) a release unit that releases the resource from use by the IA system; The information processing device according to any one of (1) to (5). (7) the release by the release unit includes deleting the allocation of the user and deleting the software; (6) An information processing device according to (6). (8) the allocating unit allocates users to the devices in order to build a new IA system using the released resources; the deployment unit deploys software to the device to build the new IA system using the released resources; An information processing device according to (6) or (7). (9) a setting unit for configuring the device so that the device operates as a corresponding device in the IA system; An information processing device according to any one of (1) to (8). (10) an application controller that deploys applications to the device so that the device operates as a corresponding device in the IA system; An information processing device according to any one of (1) to (9). (11) the device includes at least one of a domain management station, a patch management station, an antivirus management station, an asset management station, a human interface station, and an engineering workstation; The information processing device according to any one of (1) to (10). (12) the network includes an Ethernet network; At least one of the domain management station, the patch management station, the antivirus management station, the asset management station, the human interface station, and the engineering workstation is connected to the Ethernet network. (11) An information processing device according to (11). (13) The device includes at least one of an ICS (Industrial Control System) controller, an ICS I / O module, and a gateway station. The information processing device according to any one of (1) to (12). (14) the network includes a real-time communications network for the ICS; the ICS controller and the gateway station are connected to the real-time communication network; (13) An information processing device according to (13). (15) the one or more devices include a virtualization device; The information processing device according to any one of (1) to (14). (16) Discovering one or more devices connected to a network; collecting information on resources that can be used to build an IA (Industrial Automation) system from the device; assigning users to the devices to configure the IA system using the resources; deploying software to the device to configure the IA system using the resources; Including, The resource is: General-purpose resources that can be used for IT (Information Technology) and Dedicated resources for IA systems and Including, Information processing methods. (17) On the computer, discovering one or more devices connected to a network; A process of collecting information on resources that can be used to build an IA (Industrial Automation) system from the device; assigning users to the devices to configure the IA system using the resources; deploying software to the device to build the IA system using the resources; An information processing program for executing The resource is: General-purpose resources that can be used for IT (Information Technology) and Dedicated resources for IA systems and Including, Information processing program. [Explanation of symbols]

[0141] 1 device 1-1 Device 1-2 Devices 1-3 Devices 1-4 Devices 1-5 Devices 1-6 Devices 1-7 Devices 1-8 Devices 2 Network 2-1 Network 2-2 Network 2-3 Network 2-4 Network 3. Information processing equipment 30 Storage section 300 Programs 4-node controller 4-1 Node Controller 4-2 Node Controller 4-3 Node Controller 41 Detector 42 Collection Department 43 Allocation Section 44 Development Section 45 Liberation Department 5 Site Repository 50 Storage section 500 Config Information 51 Setting section 6 Master Repository 7. Application Controller 9. Computer 91 Communication equipment 92 Display device 93 Storage device 930 Program 94 memory 95 processors 10 Server device 11 Hardware 12 Software L area L1 area L2 area L3 area U User U-2 User U-3 User U-4 User U-7 User U-8 User

Claims

1. a detector for detecting one or more devices connected to the network; a collection unit that collects information on resources that can be used to build an IA (Industrial Automation) system from the device; an allocation unit that allocates users to the devices to build the IA system using the resources; a deployment unit that deploys software on the device to build the IA system using the resources; Equipped with The resource is: General-purpose resources that can be used in IT (Information Technology); Dedicated resources for the IA system; Including, Information processing device.

2. the general-purpose resource includes at least one of a memory, a processor, a storage medium, and a network card; the dedicated resources include at least one of a real-time communication device, an automation controller, and an automation I / O module; The information processing device according to claim 1 .

3. the collection unit transmits the collected information about the resource to the device so that the device can present the information about the resource to the user; 3. The information processing device according to claim 1 or 2.

4. The software deployed by the deployment unit includes an OS.

3. The information processing device according to claim 1 or 2.

5. the software deployed by the deployment unit includes a device driver; 3. The information processing device according to claim 1 or 2.

6. a release unit that releases the resource from use by the IA system; 3. The information processing device according to claim 1 or 2.

7. the release by the release unit includes deleting the allocation of the user and deleting the software; The information processing device according to claim 6 .

8. the allocating unit allocates a user to the device in order to build a new IA system using the released resources; the deployment unit deploys software to the device to build the new IA system using the released resources. The information processing device according to claim 6 .

9. a configuration unit configured to configure the device to operate as a corresponding device in the IA system; 3. The information processing device according to claim 1 or 2.

10. an application controller that deploys applications to the device so that the device operates as a corresponding device in the IA system; 3. The information processing device according to claim 1 or 2.

11. the device includes at least one of a domain management station, a patch management station, an antivirus management station, an asset management station, a human interface station, and an engineering workstation; 3. The information processing device according to claim 1 or 2.

12. the network includes an Ethernet network; At least one of the domain management station, the patch management station, the antivirus management station, the asset management station, the human interface station, and the engineering workstation is connected to the Ethernet network. The information processing device according to claim 11.

13. the device includes at least one of an ICS (Industrial Control System) controller, an ICS I / O module, and a gateway station; 3. The information processing device according to claim 1 or 2.

14. the network includes a real-time communication network for the ICS; the ICS controller and the gateway station are connected to the real-time communication network; The information processing device according to claim 13.

15. the one or more devices include a virtualization device; 3. The information processing device according to claim 1 or 2.

16. Detecting one or more devices connected to a network; Collecting information on resources that can be used to construct an IA (Industrial Automation) system from the device; assigning users to the devices to configure the IA system using the resources; deploying software on the device to configure the IA system using the resources; Including, The resource is: General-purpose resources that can be used in IT (Information Technology); Dedicated resources for the IA system; Including, Information processing methods.

17. On the computer, detecting one or more devices connected to a network; A process of collecting information on resources that can be used to build an IA (Industrial Automation) system from the device; assigning users to the devices to build the IA system using the resources; deploying software to the device to build the IA system using the resources; An information processing program for executing The resource is: General-purpose resources that can be used in IT (Information Technology); Dedicated resources for the IA system; Including, Information processing program.

Images