Information control system, information control method, and program

Abstract

This invention provides an information control system, an information control method, and a program for a computer to execute the method, which enable stable operation of controlled devices in a collaborative system. [Solution] The information control system comprises a linked data receiving unit, an anomaly detection function unit, a mediation unit, and a controlled device. The linked data receiving unit receives linked data from the linked system. The anomaly detection function unit detects anomalies in the linked data based on the comparison result of a first linked data and a second linked data among the received linked data. The mediation unit comprises a filter function unit, an alternative linked data generation unit, and another mediation function unit. The filter function unit outputs normal linked data and an instruction to generate alternative linked data based on the detection result of an anomaly in linked data. The alternative linked data generation unit generates and outputs alternative linked data. The mediation function unit outputs normal linked data and alternative linked data in a predetermined order.

Description

Technical Field

[0001] Embodiments of the present invention relate to an information control system, an information control method, and a program.

Background Art

[0002] In recent years, in all technical fields, a system-of-systems (SoS) in which a plurality of independent systems cooperate with each other and exchange data (cooperation data) between the systems has been used.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Patent Document 2

Summary of the Invention

Problems to be Solved by the Invention

[0004] In the above-described system-of-systems, when the accuracy or precision of the cooperation data received from the cooperation target system in the own system deteriorates instantaneously, or when the deterioration and recovery of the precision occur repeatedly, the operation of the control target device of the own system may become unstable by immediately stopping the control target device.

[0005] The problem to be solved by the present invention is to provide an information control system, an information control method, and a program for causing a computer to execute the method, which can stably operate a control target device in a cooperation system.

Means for Solving the Problems

[0006] To achieve the above objective, the information control system according to the embodiment of the present invention comprises a linkage data receiving unit, an anomaly detection function unit, a mediation unit, and a controlled device. The linkage data receiving unit receives linkage data output from a linked system that outputs linkage data that changes over time. The anomaly detection function unit detects anomalies in the linkage data based on the comparison result of a first linkage data and a second linkage data among the linkage data received by the linkage data receiving unit. The mediation unit comprises a filter function unit, an alternative linkage data generation unit, and another mediation function unit. The filter function unit outputs normal linkage data and outputs an instruction to generate alternative linkage data to replace the abnormal linkage data, based on the detection result of abnormal linkage data by the anomaly detection function unit. The alternative linkage data generation unit generates and outputs alternative linkage data in response to the instruction to generate alternative linkage data. The mediation function unit outputs normal linkage data input from the filter function unit and alternative linkage data input from the alternative linkage data generation unit in a predetermined order. The controlled device is controlled based on the linkage data. [Brief explanation of the drawing]

[0007] [Figure 1] Figure 1 shows an example of the configuration of the information control system according to the first embodiment. [Figure 2] Figure 2 shows an example of the functional configuration of the mediation unit in the first embodiment. [Figure 3] Figure 3 is a flowchart showing an example of processing by the filter function unit of the first embodiment. [Figure 4] Figure 4 shows an example of a state management table according to the first embodiment. [Figure 5] Figure 5 is a flowchart showing an example of processing by the alternative linkage data generation unit of the first embodiment. [Figure 6] Figure 6 shows an example of the functional configuration of the mediation function unit in the first embodiment. [Figure 7] Figure 7 shows an example of the operation of the mediation function unit in the first embodiment. [Figure 8]Figure 8 shows an example of a transmission management table in the first embodiment. [Figure 9] Figure 9 is a flowchart showing an example of processing by the mediation function unit of the first embodiment. [Figure 10] Figure 10 is a flowchart showing an example of processing by the mediation function unit of the first embodiment. [Figure 11] Figure 11 is a flowchart showing an example of processing by the mediation function unit when the system linkage in the first embodiment is terminated. [Figure 12] Figure 12 shows an example of the functional configuration of the mediation function unit in the second embodiment. [Figure 13] Figure 13 shows an example of the operation of the mediation function unit in the second embodiment. [Modes for carrying out the invention]

[0008] (First embodiment) Hereinafter, embodiments of the information control system 1 according to the present invention will be described in detail with reference to the attached drawings. The configuration of the embodiments described below, as well as the operations and results (effects) brought about by said configuration, are merely examples and are not limited to the following descriptions. In this specification, ordinal numbers are used only to distinguish parts and components and do not indicate order or priority.

[0009] Referring to Figure 1, the configuration of the information control system 1 according to an embodiment of the present invention will be described. Figure 1 is a diagram showing an example of the configuration of the information control system 1 according to the first embodiment. The information control system 1 shown in Figure 1 is a so-called system of systems (SOS), and comprises a partner system 11 and its own system 12.

[0010] The linked system 11 is a system that outputs linked data that changes over time. The linked system 11 is configured to be able to communicate with the local system 12 via a predetermined network such as a LAN (Local Area Network) or WAN (Wide Area Network). The type of linked data should be appropriately determined according to usage conditions etc., but for example, it can be temperature, humidity, number of people, amount of electric power, other characteristic quantities, etc. The hardware configuration of the linked system 11 should be appropriately determined according to the type of linked data etc., but for example, it can be configured using various sensors, processors, memories, user I / F (Interface), communication devices, etc.

[0011] The local system 12 is a system that includes a controlled device 121 that is controlled based on the linked data output from the linked system 11. The type of the controlled device 121 should be appropriately determined according to usage conditions etc., but for example, it can be a manufacturing device that manufactures, processes, etc. a predetermined article, a control device that controls a predetermined system, an analysis device that analyzes a predetermined substance, phenomenon, etc. The hardware configuration of the local system 12 should be appropriately determined according to the type of the controlled device 121, usage conditions, etc., but for example, it can be configured using a processor, a memory, a user I / F, a communication device, etc.

[0012] The linked system 11 of the present embodiment includes a linked data generation unit 111 as its functional unit. This functional unit is configured by the cooperation of the hardware and software (programs, etc.) that constitute the linked system 11. Also, this functional unit may be configured by dedicated hardware (circuits, etc.).

[0013] The linked data generation unit 111 generates linked data that changes over time. The linked system 11 controls the output of the linked data generated by the linked data generation unit 111 to an external system such as the local system 12.

[0014] The self-system 12 of this embodiment includes, as its functional units, a cooperation data reception unit 122, an abnormality detection function unit 123, a mediation unit 124, and an operation monitoring unit 125. These functional units are constituted by the cooperation of the hardware and software (programs, etc.) that constitute the self-system 12. Also, at least one of these functional units may be constituted by dedicated hardware (circuits, etc.).

[0015] The cooperation data reception unit 122 receives the cooperation data output from the cooperation destination system 11 that outputs the cooperation data that changes in time series. The cooperation data reception unit 122 has a cooperation data storage unit 1221. The cooperation data storage unit 1221 stores (memorizes) the cooperation data received by the cooperation data reception unit 122.

[0016] The abnormality detection function unit 123 detects an abnormality in the cooperation data based on the comparison result between the first cooperation data and the second cooperation data among the cooperation data received by the cooperation data reception unit 122. Abnormal cooperation data refers to data with losses, omissions, etc. compared to normal cooperation data.

[0017] In the following description, the cooperation data currently received by the cooperation data reception unit 122 is described as an example of the first cooperation data, and the cooperation data received by the cooperation data reception unit 122 at a single past point or during a predetermined period is described as an example of the second cooperation data. That is, the abnormality detection function unit 123 detects an abnormality in the cooperation data based on, for example, the result of comparing the current cooperation data received by the cooperation data reception unit 122 with the past cooperation data. Hereinafter, the cooperation data currently received by the cooperation data reception unit 122 may be referred to as the current cooperation data, and the cooperation data received by the cooperation data reception unit 122 at a single past point or during a predetermined period may be referred to as the past cooperation data.

[0018] The specific method by which the anomaly detection function unit 123 detects anomalies in the linked data is not particularly limited and can be implemented using publicly known or novel technologies as appropriate. For example, anomalies in the current linked data can be detected based on the similarity between the time-series change characteristics of the current linked data (first linked data) and the time-series change characteristics of past linked data (second linked data). More specifically, for example, the anomaly detection function unit 123 can detect anomalies in the current linked data based on whether the current linked data (first linked data) deviates from the past trends of time, values, etc., of the linked data (second linked data) received by the linked data receiving unit 122 over a predetermined period in the past. When the anomaly detection function unit 123 detects an anomaly in the current linked data, it outputs an anomaly detection signal to the arbitration unit 124, which will be described later.

[0019] Next, the functional configuration of the arbitration unit 124 will be described with reference to Figure 2. Figure 2 is a diagram showing an example of the functional configuration of the arbitration unit 124 in the first embodiment. The arbitration unit 124 performs appropriate control over the cooperation data received by the cooperation data receiving unit 122, such as outputting normal cooperation data to the controlled device 121, generating alternative cooperation data to replace the abnormal cooperation data if it is abnormal, and suspending inter-system cooperation depending on the number of times the cooperation data receiving unit 122 receives abnormal cooperation data consecutively.

[0020] As shown in Figure 2, the mediation unit 124 includes a filter function unit 1241, an alternative linkage data generation unit 1243, a mediation function unit 1244, a mediation condition setting I / F unit 1246, and a status notification function unit 1247.

[0021] The filter function unit 1241 outputs normal link data and instructs the generation of alternative link data to replace the abnormal link data, based on the detection result of abnormal link data by the anomaly detection function unit 123. More specifically, the filter function unit 1241 has the function of outputting normal link data to the mediation function unit 1244 and not outputting abnormal link data, based on the detection result of abnormal link data by the anomaly detection function unit 123. The filter function unit 1241 also has the function of recording the data number and state in the state management table T1 (described later), which manages the data number indicating the output order of the link data and the state indicating whether the link data is normal or abnormal. Here, the data number is data identification information that can identify the link data. In this embodiment, the data number is assigned sequentially to each link data received by the link data receiving unit 122, one by one in the order of receipt. In each figure, the data number may also be written as SN (Sequence Number).

[0022] Furthermore, the filter function unit 1241 has a storage unit 12411 that stores two different normal link data received by the link data receiving unit 122. The filter function unit 1241 determines whether the number of times the link data receiving unit 122 has received abnormal link data consecutively has reached a predetermined threshold. If the filter function unit 1241 determines that the link data receiving unit 122 has received both normal and abnormal link data, and that the number of times the filter function unit 1241 has received abnormal link data consecutively has not reached a predetermined threshold, it outputs the two different normal link data stored in the storage unit 12411 and instructs the alternative link data generation unit 1243, described later, to generate alternative link data.

[0023] More specifically, the filter function unit 1241 further includes a linkage status management unit 12412. When normal linkage data is stored in the storage unit 12411, the linkage status management unit 12412 instructs the alternative linkage data generation unit 1243 (described later) to generate alternative linkage data. The linkage status management unit 12412 has a status management table T1 in which the data number and status (normal or abnormal) of the linkage data received by the filter function unit 1241 are recorded. The status management table T1 is a table in which information showing the correspondence between a data number that identifies the linkage data and the status of the linkage data is recorded, and is pre-stored in the memory or the like installed in the system 12. Note that the description of the status management table T1 is omitted in Figure 2.

[0024] The alternative linkage data generation unit 1243 generates and outputs alternative linkage data when it receives an instruction from the filter function unit 1241 (linkage status management unit 12412) to generate alternative linkage data. More specifically, when the alternative linkage data generation unit 1243 receives an instruction from the filter function unit 1241 to generate alternative linkage data, it inputs two different normal linkage data stored in the storage unit 12411 and generates alternative linkage data.

[0025] (Operation flow of the filter function) Here, with reference to Figures 3 and 4, the operation flow of the filter function unit 1241 will be explained. Figure 3 is a flowchart showing an example of processing by the filter function unit 1241 of the first embodiment. Figure 4 is a diagram showing an example of the state management table T1 of the first embodiment.

[0026] In step S101 in Figure 3, first, the filter function unit 1241 receives linked data from the linked data receiving unit 122 and receives the anomaly detection result from the anomaly detection function unit 123 along with the corresponding data number.

[0027] Then, in step S102, the filter function unit 1241 determines whether the received linkage data is normal linkage data based on the detection result of the anomaly detection function unit 123. If the filter function unit 1241 determines that the received linkage data is normal linkage data, in step S103, the filter function unit 1241 records the data number and that the linkage data for that data number is normal in the status management table T1 of the linkage status management unit 12412 shown in Figure 4. Then, in step S104, the filter function unit 1241 adds information indicating that the received linkage data is normal.

[0028] Next, in step S105, the filter function unit 1241 determines whether the previously received linkage data is normal linkage data. If the filter function unit 1241 determines that the previously received linkage data is normal linkage data, in step S106, the filter function unit 1241 temporarily stores the linkage data to which the normal information was added in S104 in the storage unit 12411. Then, in step S107, the filter function unit 1241 outputs the linkage data stored in the storage unit 12411 in step S106 to the mediation function unit 1244.

[0029] In step S105, if the filter function unit 1241 determines that the previously received linkage data is not normal linkage data, in step S108, the filter function unit 1241 moves the normal linkage data temporarily stored in the storage unit 12411 to a storage area different from the temporary storage area and saves it. Then, in step S109, the filter function unit 1241 temporarily stores the linkage data to which the normal information was added in S104 in the storage unit 12411. Subsequently, in step S110, the filter function unit 1241 instructs the alternative linkage data generation unit 1243 to generate alternative linkage data.

[0030] Next, with reference to Figure 5, the operation flow of the alternative linkage data generation unit 1243 will be explained. Figure 5 is a flowchart showing an example of processing by the alternative linkage data generation unit 1243 in the first embodiment.

[0031] In step S201 in Figure 5, when the alternative linkage data generation unit 1243 receives an instruction from the filter function unit 1241 to generate alternative linkage data, it reads out the normal linkage data stored in the storage area of ​​the storage unit 12411 and the normal linkage data temporarily stored in the storage unit 12411.

[0032] Next, in step S202, the alternative linkage data generation unit 1243 reads the data numbers of abnormal linkage data that lie between the currently received normal linkage data and the previously received normal linkage data in chronological order from the linkage status management unit 12412. Then, in step S203, the alternative linkage data generation unit 1243 calculates the difference between the data number of the currently received normal linkage data and the data number of the previously received normal linkage data, subtracts 1, and sets the result in the alternative data count register. Here, the alternative data count register is a register in which the number of abnormal linkage data that will be replaced by the alternative linkage data is set.

[0033] Next, in step S204, the alternative linkage data generation unit 1243 sets the smallest data number among the data numbers of the abnormal linkage data read in step S202 into the assigned SN register. Here, the assigned SN register is the register in which the data number assigned to the alternative linkage data that will replace the abnormal linkage data first is set.

[0034] Then, in step S205, the alternative linkage data generation unit 1243 generates alternative linkage data based on the normal linkage data received this time and the normal linkage data received last time. Next, in step S206, the generated alternative linkage data is assigned the data number set in the assigned SN register, and the alternative linkage data is output to the arbitration function unit 1244.

[0035] Next, in step S207, the alternative linkage data generation unit 1243 subtracts 1 from the data number set in the alternative data count register, and in step S208, it determines whether the alternative data count register is 0. If the alternative linkage data generation unit 1243 determines that the alternative data count register is 0, the alternative linkage data generation unit 1243 terminates its operation. If the alternative linkage data generation unit 1243 determines that the alternative data count register is not 0, in step S209, the alternative linkage data generation unit 1243 adds 1 to the data number set in the assigned SN register, returns to step S205, and generates the next alternative linkage data. The alternative linkage data generation unit 1243 continues the above operation until the alternative data count register becomes 0.

[0036] Returning to Figure 3, if in step S102 the filter function unit 1241 determines that the received linkage data is not normal linkage data, in step S111 the filter function unit 1241 records the data number and that the linkage data for that data number is abnormal in the status management table T1 of the linkage status management unit 12412 shown in Figure 4. Then, in step S112 the filter function unit 1241 instructs the transfer of the linkage data recorded in step S111 to be stopped.

[0037] Next, in step S113, the filter function unit 1241 determines whether the previously received communication data is abnormal. If the filter function unit 1241 determines that the previously received communication data is abnormal, in step S114, the filter function unit 1241 determines whether the frequency of occurrence of abnormal communication data has reached a predetermined threshold. If the filter function unit 1241 determines that the frequency of occurrence of abnormal communication data has reached a predetermined threshold, in step S115, the filter function unit 1241 notifies the arbitration function unit 1244 that the predetermined threshold has been reached and terminates its operation.

[0038] If, in step S113, the filter function unit 1241 determines that the previously received communication data is not abnormal, or if, in step S114, the filter function unit 1241 determines that the frequency of abnormal communication data occurrences has not reached a predetermined threshold, the process returns to step S101, and the filter function unit 1241 receives the next communication data.

[0039] Next, the functional configuration of the mediation function unit 1244 will be described with reference to Figures 6 and 7. Figure 6 is a diagram showing an example of the functional configuration of the mediation function unit 1244 in the first embodiment. Figure 7 is a diagram showing an example of the operation by the mediation function unit 1244 in the first embodiment.

[0040] The mediation function unit 1244 provides appropriate control to the controlled device 121, the filter function unit 1241, and the alternative linkage data generation unit 1243 of the system 12, and outputs an appropriate notification to the status notification function unit 1247, according to the mediation operation rules, for example, shown in Figure 7, which are determined based on the output results of the filter function unit 1241, the linkage status management unit 12412, and the controlled device status monitoring unit 1245. For example, Figure 7 shows the operation of the mediation function unit 1244 when it receives an abnormality notification from the controlled device status monitoring unit 1245 indicating that the controlled device 121 is in an abnormal state.

[0041] The mediation function unit 1244 outputs the normal linkage data input from the filter function unit 1241 and the alternative linkage data input from the alternative linkage data generation unit 1243 in a predetermined order. More specifically, the mediation function unit 1244 outputs the normal linkage data and the abnormal linkage data in the order of their data numbers. This is explained in detail below.

[0042] The arbitration unit 124 has a controlled device status monitoring unit 1245 that monitors abnormality notifications transmitted from the controlled device 121. The arbitration function unit 1244 also has a first holding unit 12441, a second holding unit 12442, a linkage cancellation setting unit 12443, a selection unit 12444, and an arbitration operation unit 12445.

[0043] The controlled device status monitoring unit 1245 monitors the status of the controlled device 121 and detects abnormalities in the controlled device 121. When the controlled device status monitoring unit 1245 detects an abnormality in the controlled device 121 and meets predetermined conditions, it notifies the arbitration function unit 1244 that the controlled device 121 is in an abnormal state. The conditions under which the controlled device status monitoring unit 1245 determines that the status of the controlled device 121 is abnormal include, but are not limited to, the number of times the controlled device status monitoring unit 1245 detects an abnormality once, multiple consecutive detections, the number of abnormality detections, and the abnormality detection rate.

[0044] The first holding unit 12441 holds normal linkage data input from the filter function unit 1241. The second holding unit 12442 holds alternative linkage data input from the alternative linkage data generation unit 1243. The linkage cancellation setting unit 12443 outputs a linkage cancellation code instructing notification of data linkage cancellation when it determines that the number of times the filter function unit 1241 has received abnormal linkage data consecutively has reached a threshold, or when the controlled device status monitoring unit 1245 detects an abnormality in the controlled device 121. The selection unit 12444 selects one of the first holding unit 12441, the second holding unit 12442, or the linkage cancellation setting unit 12443. The arbitration operation unit 12445 performs an arbitration operation instructing the selection unit 12444 whether to select one of the first holding unit 12441, the second holding unit 12442, or the linkage cancellation setting unit 12443.

[0045] Figure 8 shows an example of the transmission management table T2 in the first embodiment. As shown in Figure 8, the arbitration operation unit 12445 has a transmission management table T2 that manages the data numbers of the coordinated data to be transmitted from the arbitration function unit 1244 to the controlled device 121. The transmission management table T2 is a table that shows the correspondence between the data number of the coordinated data and the transmission status of the coordinated data. The arbitration operation unit 12445 instructs the selection unit 12444 to select a holding unit from among the data numbers of the coordinated data held by the first holding unit 12441 and the second holding unit 12442 that holds the coordinated data that matches the data number to be transmitted next.

[0046] The arbitration condition setting interface 1246 transmits the threshold values ​​set by the operation monitoring unit 125 to the filter function unit 1241 and the arbitration function unit 1244. More specifically, the arbitration condition setting interface 1246 sets, for example, the linked or manual operation mode input by the operation monitoring unit 125 (described later), the automatic or manual switching mode when switching the controlled device 121 from system linked to manual, the set time until switching from automatic to manual, the type of abnormality, and the threshold value of the abnormality to the filter function unit 1241 and the arbitration function unit 1244.

[0047] If the linked data input by the mediation function unit 1244 is abnormal but the degree of abnormality has not reached a threshold, the status notification function unit 1247 instructs the operation monitoring unit 125 to display the linked data abnormality or output an audio signal based on the abnormality notification instruction input from the mediation operation unit 12445. Furthermore, if the degree of abnormality in the linked data reaches a threshold, the status notification function unit 1247 instructs the operation monitoring unit 125 to display the linked data linkage cancellation or output an audio signal based on the linkage cancellation notification instruction input from the mediation operation unit 12445.

[0048] The operation monitoring unit 125 sets an operation mode indicating whether its own system 12 is in a linked mode for system linkage with the linked system 11 or in a manual mode in which the controlled device 121 is operated manually, a switching mode indicating whether it is in an automatic switching mode where switching from linked mode to manual mode is performed automatically, a set time indicating the time until the own system 12 switches from linked mode to manual mode when it is in automatic switching mode, and a threshold. When it receives an instruction for abnormality notification from the arbitration operation unit 12445, it displays or outputs an audio message indicating that the linkage has been canceled. More specifically, when the operation monitoring unit 125 receives an instruction from the status notification function unit 1247 to display or output an audio message regarding an abnormality in linked data or the cancellation of the linkage, it alerts the operator through the display or audio message. The operation monitoring unit 125 has, for example, a display that displays a message to alert the operator, and a speaker that outputs an audio message to alert the operator.

[0049] If the mediation operation unit 12445 decides to cancel the linkage of linked data, it instructs the linkage cancellation setting unit 12443 to output a linkage cancellation code after a set time has elapsed since the system 12 was in linkage mode, as set by the operation monitoring unit 125.

[0050] (Operation flow of the first holding part) Now, referring to Figure 9, the operation flow of the first holding unit 12441 will be explained. Figure 9 is a flowchart showing an example of processing by the arbitration function unit 1244 (first holding unit 12441) of the first embodiment.

[0051] In step S301 in Figure 9, when the first holding unit 12441 receives normal communication data, in step S302, the first holding unit 12441 refers to the transmission management table T2 of the arbitration operation unit 12445 shown in Figure 8.

[0052] Then, in step S303, if the first holding unit 12441 determines that the data number of the received linkage data matches the data number to be sent next (in the example in Figure 8, the data number is 102), in step S304, the arbitration operation unit 12445 instructs the first holding unit 12441 to output the linkage data and simultaneously instructs the selection unit 12444 to select the first holding unit 12441. As a result, the normal linkage data received by the first holding unit 12441 is sent to the controlled device 121 via the selection unit 12444.

[0053] When the first holding unit 12441 finishes outputting the linked data, in step S305, the first holding unit 12441 notifies the transmission management table T2 that the output of the linked data has finished. Then, in step S306, the transmission management table T2 changes the transmission status of the linked data for which output has been notified from "not done" to "done". With this, the first holding unit 12441 terminates its operation.

[0054] In step S303, if the first holding unit 12441 determines that the data number of the received linkage data does not match the data number to be sent next, the first holding unit 12441 enters a waiting state until the second holding unit 12442 outputs the linkage data. After the second holding unit 12442 outputs the linkage data, the first holding unit 12441 again determines in step S303 whether the data number of the received linkage data matches the data number to be sent next.

[0055] (Operation flow of the second holding part) Next, with reference to Figure 10, the operation flow of the second holding unit 12442 will be explained. Figure 10 is a flowchart showing an example of processing by the arbitration function unit 1244 (second holding unit 12442) of the first embodiment.

[0056] In step S401 in Figure 10, when the second holding unit 12442 receives alternative linkage data, in step S402, the second holding unit 12442 refers to the transmission management table T2 of the arbitration operation unit 12445 shown in Figure 8.

[0057] Then, in step S403, if the second holding unit 12442 determines that the data number of the received linkage data matches the data number to be sent next, in step S404, the arbitration operation unit 12445 instructs the second holding unit 12442 to output the linkage data and simultaneously instructs the selection unit 12444 to select the second holding unit 12442. As a result, the alternative linkage data received by the second holding unit 12442 is sent to the controlled device 121 via the selection unit 12444.

[0058] When the second storage unit 12442 finishes outputting the linked data, in step S405, the second storage unit 12442 notifies the transmission management table T2 that the output of the linked data has finished. Then, in step S406, the transmission management table T2 changes the transmission status of the linked data for which output completion has been notified from "not done" to "done". With this, the second storage unit 12442 terminates its operation.

[0059] In step S403, if the second storage unit 12442 determines that the data number of the received linkage data does not match the data number to be sent next, the second storage unit 12442 enters a waiting state until the first storage unit 12441 outputs the linkage data. After the first storage unit 12441 outputs the linkage data, the second storage unit 12442 again determines in step S403 whether the data number of the received linkage data matches the data number to be sent next.

[0060] (Operation flow of the link cancellation setting section) Next, with reference to Figure 11, the operation flow of the linkage cancellation setting unit 12443 will be explained. Figure 11 is a flowchart showing an example of processing by the mediation function unit 1244 (linkage cancellation setting unit 12443) when the system linkage in the first embodiment is to be canceled.

[0061] In step S501 in Figure 11, if the frequency of abnormalities in the linked data reaches a threshold, or if the controlled device status monitoring unit 1245 detects an abnormality in the controlled device 121, the arbitration operation unit 12445 instructs the selection unit 12444 to select the linked device cancellation setting unit 12443, and at the same time outputs a linked device cancellation notification instruction to the status notification function unit 1247. Then, in step S502, the status notification function unit 1247 instructs the operation monitoring unit 125 to display or output an audio message indicating that the linked device has been cancelled. Upon receiving this instruction, the operation monitoring unit 125 alerts the operator through a display or audio message.

[0062] Then, in step S503, when the pre-set time specified in the operation monitoring unit 125 has elapsed, in step S504, the arbitration operation unit 12445 instructs the linkage cancellation setting unit 12443 to output a pre-determined linkage cancellation code. Upon receiving this instruction, the linkage cancellation setting unit 12443 outputs the linkage cancellation code to the controlled device 121 via the selection unit 12444. With this, the linkage cancellation setting unit 12443 terminates its operation.

[0063] In the above-described embodiment, the information control system 1 includes a linkage data receiving unit 122, an anomaly detection function unit 123, a mediation unit 124, and a controlled device 121. The linkage data receiving unit 122 receives linkage data output from a linked system 11 that outputs linkage data that changes over time. The anomaly detection function unit 123 detects anomalies in the linkage data based on the comparison result between a first linkage data (current linkage data) and a second linkage data (past linkage data) among the linkage data received by the linkage data receiving unit 122. The mediation unit 124 includes a filter function unit 1241, an alternative linkage data generation unit 1243, and a mediation function unit 1244. The filter function unit 1241 outputs normal linkage data and outputs an instruction to generate alternative linkage data to replace the abnormal linkage data, based on the detection result of abnormal linkage data by the anomaly detection function unit 123. The alternative linkage data generation unit 1243 generates and outputs alternative linkage data in response to the instruction to generate alternative linkage data. The mediation function unit 1244 outputs normal linkage data input from the filter function unit 1241 and alternative linkage data input from the alternative linkage data generation unit 1243 in a predetermined order. The controlled device 121 is controlled based on the linkage data.

[0064] In the above configuration, the information control system 1 receives the linkage data output from the linked system 11 in the linkage data receiving unit 122, and then detects abnormalities in the received linkage data in the abnormality detection function unit 123. Then, the filter function unit 1241 outputs an instruction to the alternative linkage data generation unit 1243 to generate alternative linkage data to replace the abnormal linkage data, according to the number of times the linkage data receiving unit 122 has received abnormal linkage data consecutively, and the alternative linkage data generation unit 1243 generates and outputs the alternative linkage data. Furthermore, the arbitration function unit 1244 controls the output of the normal linkage data input from the filter function unit 1241 and the alternative linkage data input from the alternative linkage data generation unit 1243 in a predetermined order.

[0065] As a result, even in unstable cases where the linked data alternates between abnormal and normal, the information control system 1 can generate alternative linked data to replace the abnormal linked data, thereby allowing control to continue. Consequently, the information control system 1 can prevent unintended operation from occurring when the controlled device 121 of its own system 12 receives abnormal linked data from the linked system 11 and immediately stops, thereby enabling the controlled device 121 to operate stably.

[0066] Furthermore, in the above-described embodiment, the anomaly detection function unit 123 detects anomalies in the linked data based on the result of comparing the current linked data, which is the first linked data received by the linked data receiving unit 122, with the past linked data, which is the second linked data.

[0067] In the above configuration, the anomaly detection function unit 123 detects anomalies in the linked data based on the result of comparing the current linked data received by the linked data receiving unit 122 with past linked data. This allows the anomaly detection function unit 123 to detect, for example, that the linked data currently received by the linked data receiving unit 122 has anomalies such as loss or omissions compared to normal linked data received at a single point in the past or over a predetermined period.

[0068] Furthermore, in the above-described embodiment, the filter function unit 1241 records the data number and the status in a status management table T1 that manages the data number indicating the output order of the linked data and the status indicating whether it is normal or abnormal.

[0069] In the above configuration, the filter function unit 1241 records the data number of the linked data and its status (normal or abnormal) in the status management table T1. This allows the filter function unit 1241 to determine whether the number of consecutive times it receives abnormal linked data detected by the abnormality detection function unit 123 has reached a predetermined threshold.

[0070] Furthermore, in the above-described embodiment, the filter function unit 1241 has a storage unit 12411 that stores two different normal link data received by the link data receiving unit 122. The filter function unit 1241 determines whether the number of times the link data receiving unit 122 has received abnormal link data consecutively has reached a predetermined threshold. If the filter function unit 1241 determines that the link data receiving unit 122 has received both normal and abnormal link data and that the number of times the filter function unit 1241 has received abnormal link data consecutively has not reached a predetermined threshold, it outputs the two different normal link data stored in the storage unit 12411 and instructs the alternative link data generation unit 1243 to generate alternative link data. If the alternative link data generation unit 1243 is instructed by the filter function unit 1241 to generate alternative link data, it inputs the two different normal link data stored in the storage unit 12411 and generates alternative link data.

[0071] In the above configuration, the filter function unit 1241 has a storage unit 12411 that stores two different normal link data received by the link data receiving unit 122, and determines whether the number of times the link data receiving unit 122 has received abnormal link data consecutively has reached a predetermined threshold. Furthermore, if the link data receiving unit 122 has received both normal and abnormal link data, and the filter function unit 1241 determines that the number of times the abnormal link data has been received consecutively has not reached a predetermined threshold, the alternative link data generation unit 1243 generates alternative link data by inputting the two different normal link data stored in the storage unit 12411. As a result, the alternative link data generation unit 1243 can generate alternative link data based on the two normal link data and replace the abnormal link data with the alternative link data.

[0072] Furthermore, in the above-described embodiment, the arbitration operation unit 12445 has a transmission management table T2 that manages the data numbers of the coordinated data to be transmitted from the arbitration function unit 1244 to the controlled device 121. The selection unit 12444 instructs the first holding unit 12441 and the second holding unit 12442 to select a holding unit that holds the coordinated data that matches the data number to be transmitted next from among the data numbers of the coordinated data held by the first holding unit 12441 and the second holding unit 12442. The arbitration function unit 1244 outputs the normal coordinated data and the abnormal coordinated data in order of data number.

[0073] In the above configuration, the arbitration function unit 1244 stores normal linkage data in the first storage unit 12441 and replaces abnormal linkage data with alternative linkage data and stores it in the second storage unit 12442. However, since different linkage data is sent from each of the two storage units in the arbitration function unit 1244, there is a risk that the data numbers of the linkage data transmitted from the arbitration function unit 1244 to the controlled device 121 may not be in order.

[0074] On the other hand, in the information control system 1 of this embodiment, the arbitration operation unit 12445 instructs the selection unit 12444 to select a holding unit from among the data numbers of the linked data held by the first holding unit 12441 and the second holding unit 12442 that holds the linked data that matches the data number to be sent next. The arbitration function unit 1244 outputs the normal linked data and the abnormal linked data in the order of the data numbers. As a result, the linked data is transmitted to the controlled device 121 in the order of the data numbers. Therefore, the information control system 1 can maintain the continuity of control in the controlled device 121.

[0075] Furthermore, in the above-described embodiment, the system includes an operation monitoring unit 125 that displays a linkage cancellation notification or outputs an audio signal when it receives an abnormality notification instruction from the arbitration operation unit 12445, and an arbitration condition setting I / F unit 1246 that transmits the threshold set by the operation monitoring unit 125 to the filter function unit 1241 and the arbitration function unit 1244. When the arbitration operation unit 12445 decides to cancel the linkage of the linkage data, it instructs the linkage cancellation setting unit 12443 to output a linkage cancellation code after a set time has elapsed since the system 12 was in the linkage mode.

[0076] In the above configuration, the arbitration operation unit 12445 instructs the linkage cancellation setting unit 12443 to output a linkage cancellation code after a preset time has elapsed. As a result, even if the linkage data received by the linkage data receiving unit 122 becomes unstable, alternating between abnormal and normal states, and the arbitration operation unit 12445 decides to cancel the linkage of the linkage data, causing the controlled device 121 to switch to manual operation, the system 12 generates alternative linkage data and continues the linkage of the linkage data before the controlled device 121 stops. Therefore, the information control system 1 can operate stably without immediately stopping the controlled device 121 and causing unintended operations.

[0077] Furthermore, in the above-described embodiment, the information control method includes the steps of: the linked data receiving unit 122 receiving linked data output from a linked system 11 that outputs linked data that changes in time series; the abnormality detection function unit 123 detecting abnormalities in linked data based on the comparison result between the first linked data (current linked data) and the second linked data (past linked data) among the linked data received by the linked data receiving unit 122; and the filter function unit 1241 detecting abnormal linked data based on the abnormality detection result of the abnormal linked data by the abnormality detection function unit 123. The system includes the steps of: outputting normal linkage data; the filter function unit 1241 instructing the generation of alternative linkage data to replace abnormal linkage data; the alternative linkage data generation unit 1243 generating and outputting alternative linkage data when instructed to do so; the arbitration function unit 1244 outputting normal linkage data input from the filter function unit 1241 and alternative linkage data input from the alternative linkage data generation unit 1243 in a predetermined order; and the controlled device 121 being controlled based on the linkage data.

[0078] According to the method described above, even in unstable cases where the linked data alternates between abnormal and normal, the information control system 1 can generate alternative linked data to replace the abnormal linked data, thereby allowing control to continue. Consequently, the information control system 1 can prevent unintended operation from occurring when the controlled device 121 of its own system 12 receives abnormal linked data from the linked system 11 and immediately stops, thereby enabling stable operation of the controlled device 121.

[0079] Furthermore, in the above-described embodiment, the program causes the computer to execute the following processes: receiving linkage data output from the linked system 11 which outputs linkage data that changes over time; detecting anomalies in the linkage data based on the comparison result between the first linkage data (current linkage data) and the second linkage data (past linkage data) among the received linkage data; outputting normal linkage data based on the detection result of abnormal linkage data; instructing the computer to generate alternative linkage data to replace the abnormal linkage data; generating and outputting alternative linkage data when instructed to generate alternative linkage data; outputting the input normal linkage data and the input alternative linkage data in a predetermined order; and controlling the controlled device 121 based on the linkage data.

[0080] According to the program described above, even in unstable cases where the linked data alternates between abnormal and normal, the information control system 1 can generate alternative linked data to replace the abnormal linked data, thereby allowing control to continue. Consequently, the information control system 1 can prevent unintended operation from occurring when the controlled device 121 of its own system 12 receives abnormal linked data from the linked system 11 and immediately stops, thereby enabling the controlled device 121 to operate stably.

[0081] (Second embodiment) A second embodiment will be described below with reference to Figures 12 and 13. In the following description of the embodiments, components having the same function as those already described will be denoted by the same reference numerals as those previously described, and their description may be omitted. Furthermore, multiple components denoted by the same reference numerals do not necessarily share all functions and properties, and may have different functions and properties depending on the embodiment.

[0082] Figure 12 shows an example of the functional configuration of the mediation function unit 1244A in the second embodiment. Figure 13 shows an example of the operation by the mediation function unit 1244A in the second embodiment. As shown in Figure 12, in this embodiment, the mediation function unit 1244A has a state maintenance setting unit 12447.

[0083] When the filter function unit 1241 determines that the number of times it has received abnormal linkage data consecutively has reached a predetermined threshold, and decides to maintain the linkage with the linked system 11, the arbitration operation unit 12445 instructs the state maintenance setting unit 12447 to output a state maintenance code. The state maintenance setting unit 12447 also receives a notification from the filter function unit 1241 indicating that the threshold has been reached, and outputs a state maintenance code to the controlled device 121 instructing it to maintain the data linkage state. Upon receiving the state maintenance code, the controlled device 121 gradually reduces its movement speed and stops moving.

[0084] After the state maintenance setting unit 12447 outputs a state maintenance code, if the linkage data receiving unit 122 receives normal linkage data, the arbitration operation unit 12445 performs arbitration operation again based on the received normal linkage data.

[0085] Furthermore, the mediation operation unit 12445 instructs the selection unit 12444 to select the state maintenance setting unit 12447 side according to the mediation operation rules shown in Figure 13, and at the same time outputs a movement stop notification instruction to the state notification function unit 1247. The state notification function unit 1247 instructs the operation monitoring unit 125 to display or output an audio message indicating that the state is maintained. Upon receiving the instruction, the operation monitoring unit 125 alerts the operator through the display or audio output.

[0086] As a result of the above operation, even if the number of consecutive receptions of abnormal linkage data reaches a predetermined threshold, the information control system 1 can automatically return to system linkage operation using normal data once the linkage data receiving unit 122 receives normal linkage data again.

[0087] In the above-described embodiment, the arbitration unit 124 has a controlled device status monitoring unit 1245 that monitors abnormality notifications transmitted from the controlled device 121. The arbitration function unit 1244 includes a first holding unit 12441, a second holding unit 12442, a linkage cancellation setting unit 12443, a state maintenance setting unit 12447, a selection unit 12444, and an arbitration operation unit 12445. The first holding unit 12441 holds normal linkage data input from the filter function unit 1241. The second holding unit 12442 holds alternative linkage data input from the alternative linkage data generation unit 1243. The linkage cancellation setting unit 12443 outputs a linkage cancellation code instructing a notification to cancel data linkage when it determines that the number of times the filter function unit 1241 has received abnormal linkage data consecutively has reached a threshold, or when the controlled device status monitoring unit 1245 detects an abnormality in the controlled device 121. When the state maintenance setting unit 12447 determines that the number of times the filter function unit 1241 has continuously received abnormal linkage data has reached a threshold, it receives a notification from the filter function unit 1241 indicating that the threshold has been reached and outputs a state maintenance code to the controlled device 121 instructing it to maintain the data linkage state. The selection unit 12444 selects one of the first holding unit 12441, the second holding unit 12442, the linkage cancellation setting unit 12443, or the state maintenance setting unit 12447. The arbitration operation unit 12445 performs an arbitration operation to instruct the selection unit 12444 whether to select one of the first holding unit 12441, the second holding unit 12442, the linkage cancellation setting unit 12443, or the state maintenance setting unit 12447.

[0088] In the above configuration, the mediation function unit 1244 performs a mediation operation in which the mediation operation unit 12445 instructs the selection unit 12444 to select one of the following: the first holding unit 12441, the second holding unit 12442, the linkage cancellation setting unit 12443, or the state maintenance setting unit 12447. The selection unit 12444 then selects one of the following: the first holding unit 12441, the second holding unit 12442, the linkage cancellation setting unit 12443, or the state maintenance setting unit 12447, in accordance with the instructions of the mediation operation unit 12445.

[0089] As a result, the mediation function unit 1244 can, based on the number of times abnormal linkage data has been received and whether or not an abnormality has occurred in the controlled device 121, instruct the status notification function unit 1247 to continue or stop data linkage through a selection made by the selection unit 12444.

[0090] Furthermore, in the above-described embodiment, if the arbitration operation unit 12445 decides to maintain cooperation with the linked system 11, it instructs the state maintenance setting unit 12447 to output a state maintenance code. After the state maintenance setting unit 12447 outputs a state maintenance code, if the linked data receiving unit 122 receives normal linked data, the arbitration operation unit 12445 performs arbitration operation again based on the received normal linked data.

[0091] In the above configuration, after the state maintenance setting unit 12447 outputs a state maintenance code, if the linked data receiving unit 122 receives normal linked data, the arbitration operation unit 12445 performs arbitration operation again based on the normal linked data received by the linked data receiving unit 122. As a result, when the linked data received by the linked data receiving unit 122 recovers from abnormal to normal, it can automatically return to linked operation with normal linked data. Consequently, the information control system 1 can maintain data linkage with the linked system 11 even if it temporarily receives abnormal linked data.

[0092] Although several embodiments of the present invention have been described above, these embodiments are presented as examples only and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their variations are included in the scope and spirit of the invention, as well as in the claims of the invention and its equivalents. [Explanation of Symbols]

[0093] 1. Information control system 121 Controlled Device 122 Interconnected Data Receiving Unit 123 Anomaly detection function unit 124 Mediation Department 125 Operation monitoring section 1241 Filter Function Unit 1243 Alternative Linkage Data Generation Unit 1244, 1244A Mediation Function Unit 1245 Controlled Device Status Monitoring Unit 1246 Arbitration condition setting I / F section 12411 Accumulation storage section 12412 Collaboration Status Management Department 12441 First holding part 12442 Second holding part 12443 Link Cancellation Settings Section 12444 Selection section 12445 Arbitration operation part 12447 State maintenance setting unit T1 State Management Table T2 Sending Management Table

Claims

1. A linked data receiving unit receives the linked data output from a linked system that outputs linked data that changes over time, An anomaly detection function unit detects anomalies in the linked data based on the comparison result between the first linked data and the second linked data among the linked data received by the linked data receiving unit. Based on the detection result of abnormal linked data by the abnormality detection function unit, a filter function unit outputs normal linked data and outputs an instruction to generate alternative linked data to replace the abnormal linked data. A replacement linkage data generation unit that generates and outputs the replacement linkage data in response to the instruction to generate the replacement linkage data, A mediation function unit outputs the normal linkage data input from the filter function unit and the alternative linkage data input from the alternative linkage data generation unit in a predetermined order. A mediation department having, A controlled device that is controlled based on the aforementioned linked data, Equipped with, Information control system.

2. The anomaly detection function unit detects anomalies in the linked data based on the result of comparing the current linked data, which is the first linked data, and the past linked data, which is the second linked data, received by the linked data receiving unit. The information control system according to claim 1.

3. The filter function unit records the data number and the state in a state management table that manages the data number indicating the output order of the linked data and the state indicating whether it is normal or abnormal. The information control system according to claim 1.

4. The filter function unit has a storage unit that stores two different normal linked data received by the linked data receiving unit, and determines whether the number of times the linked data receiving unit has received abnormal linked data consecutively has reached a predetermined threshold. When the filtering function unit determines that the linked data receiving unit has received both normal and abnormal linked data, and that the number of times the filtering function unit has received abnormal linked data consecutively has not reached a predetermined threshold, it outputs two different normal linked data stored in the storage unit and instructs the alternative linked data generation unit to generate the alternative linked data. When the alternative linkage data generation unit receives an instruction from the filter function unit to generate the alternative linkage data, it generates the alternative linkage data by inputting two different normal linkage data stored in the storage unit. The information control system according to claim 1.

5. The arbitration unit includes a controlled device status monitoring unit that monitors abnormality notifications transmitted from the controlled device, The aforementioned mediation function unit is, A first holding unit that holds the normal linked data input from the filter function unit, A second holding unit that holds the alternative linkage data input from the alternative linkage data generation unit, When the filter function unit determines that the number of times it has continuously received abnormal linked data has reached the threshold, or when the controlled device status monitoring unit detects an abnormality in the controlled device, the linked data cancellation setting unit outputs a linked data cancellation code instructing a notification to cancel data linked data, When the filter function unit determines that the number of times it has continuously received abnormal linked data has reached the threshold, the state maintenance setting unit receives a notification from the filter function unit indicating that the threshold has been reached and outputs a state maintenance code to the controlled device instructing it to maintain the data linked state. A selection unit that selects one of the first holding unit, the second holding unit, the linkage cancellation setting unit, and the state maintenance setting unit, An arbitration operation unit performs an arbitration operation to instruct the selection unit to select one of the first holding unit, the second holding unit, the linkage cancellation setting unit, or the state maintenance setting unit, Having, The information control system according to claim 4.

6. The arbitration operation unit has a transmission management table that manages the data numbers of the linked data to be transmitted from the arbitration function unit to the controlled device, The selection unit is instructed to select a holding unit that holds the linked data whose data number matches the data number to be sent next, from among the data numbers of the linked data held by the first holding unit and the second holding unit. The arbitration function unit outputs the normal and abnormal linkage data in the order of the data numbers. The information control system according to claim 5.

7. An operation monitoring unit sets an operation mode indicating whether the system is in a link mode for performing system linkage with the linked system or in a manual mode in which the controlled device is operated manually, a switching mode indicating whether or not it is in an automatic switching mode in which switching from the link mode to the manual mode is performed automatically, a set time indicating the time until the system switches from the link mode to the manual mode when the system is in the automatic switching mode, and a threshold, and when it receives an instruction for abnormality notification from the arbitration operation unit, it displays a linkage cancellation or outputs an audio output, A mediation condition setting I / F unit transmits the threshold value set by the operation monitoring unit to the filter function unit and the mediation function unit, Equipped with, If the arbitration unit decides to cancel the linkage of the linked data, it instructs the linkage cancellation setting unit to output a linkage cancellation code after the set time has elapsed since the system entered the linkage mode. The information control system according to claim 5.

8. If the arbitration unit decides to maintain cooperation with the linked system, it instructs the state maintenance setting unit to output the state maintenance code. After the state maintenance setting unit outputs a state maintenance code, if the linkage data receiving unit receives normal linkage data, the arbitration operation is performed again based on the received normal linkage data. The information control system according to claim 5.

9. The linked data receiving unit receives linked data output from a linked system that outputs linked data that changes over time, The anomaly detection function unit detects an anomaly in the linked data based on the comparison result between the first linked data and the second linked data among the linked data received by the linked data receiving unit. The filter function unit outputs normal linked data based on the detection result of abnormal linked data by the abnormality detection function unit, The filtering function unit instructs the generation of alternative linkage data to replace the abnormal linkage data, The alternative linkage data generation unit, when instructed to generate the alternative linkage data, generates and outputs the alternative linkage data; The mediation function unit outputs the normal linkage data input from the filter function unit and the alternative linkage data input from the alternative linkage data generation unit in a predetermined order. A process in which the controlled device is controlled based on the aforementioned linked data, An information control method comprising:

10. A process for receiving linked data output from a linked system that outputs linked data that changes over time, A process to detect anomalies in the linked data based on the comparison result between the first linked data and the second linked data among the received linked data, Based on the detection result of abnormal linked data, a process is performed to output normal linked data. A process that instructs the generation of alternative link data to replace the abnormal link data, When instructed to generate the aforementioned alternative linkage data, the process involves generating and outputting the aforementioned alternative linkage data. A process that outputs the input normal linkage data and the input alternative linkage data in a predetermined order. A process to control the target device based on the aforementioned linked data, A program that causes a computer to execute something.

Images