Telecommunication systems and telecommunication methods

Abstract

This system provides a remote communication system that can prevent the system configuration from becoming overly complex while ensuring the security of communications. [Solution] This remote communication system 100 comprises multiple types of equipment 60, a gateway device 50 connected to the equipment 60 via a network within the factory 40b, a cloud server 20 connected to the gateway device 50 in an encrypted state via the network within the company to which the factory 40b belongs and an external network, and equipped with multiple management software tools 21 for each of the multiple administrators who manage the equipment 60, and multiple external devices 10 used by each of the multiple administrators and connected to the cloud server 20 in an encrypted state, communicating with the equipment 60 that each administrator manages via the corresponding management software tool 21 of the cloud server 20 and the gateway device 50.

Description

Technical Field

[0001] This disclosure relates to a remote communication system and a remote communication method.

Background Art

[0002] Conventionally, remote communication systems have been disclosed. For example, Patent Document 1 describes a remote communication system including a plurality of equipment devices used in a factory, a gateway device connected to the equipment devices via a network in the factory, a server device connected to the gateway device via a network in the factory and an external network, and an external terminal communicatively connected to the equipment devices in the factory via the server device and the gateway device. In the remote communication system of Patent Document 1, the external terminal and the plurality of equipment devices in the factory are connected by the management of the gateway device in the factory.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] In the remote communication system described in Patent Document 1, when multiple pieces of equipment are managed by separate administrators, each administrator must be able to connect to the equipment they manage from an external terminal, but be unable to connect to equipment they do not manage from an external terminal. One possible solution is to install software on a gateway device that connects to the equipment and an external terminal to remotely operate the equipment. However, if the software is installed on a gateway device located within the company, there is a possibility that the software may have vulnerabilities, and the company to which the factory belongs cannot verify its security. Another possible solution is to set up multiple gateway devices in the factory, one for each administrator, but this method results in a complex system configuration. Yet another possible solution is to configure the gateway device to perform only communication functions below the application level, but this method makes it difficult for the company to which the factory belongs to understand the content of the data received by the gateway device, and the company to which the factory belongs cannot verify its security. Furthermore, if the equipment administrator provides the gateway device within the factory, they may install equipment that does not satisfy the factory's communication security requirements, which may result in an inability to ensure the security of communications within the factory. Therefore, it is desirable to suppress the complexity of the system configuration while ensuring the security of communications.

[0005] This disclosure is made to solve the problems described above, and one of its purposes is to provide a remote communication system and method that can suppress the complexity of the system configuration while ensuring the security of communications. [Means for solving the problem]

[0006] The remote communication system according to the first aspect of this disclosure comprises several types of equipment used to produce or transport products in a factory; gateway equipment connected to the equipment via the network within the company to which the factory belongs; a cloud server connected to the gateway equipment in an encrypted manner via the factory's internal network and external networks, and equipped with multiple management software tools for each of the multiple administrators who manage the equipment; and multiple external devices used by each of the multiple administrators, connected to the cloud server in an encrypted manner, and communicating with the equipment they manage via the corresponding management software tools on the cloud server and the gateway equipment.

[0007] As described above, the remote communication system in this disclosure involves providing multiple management software tools for each of the multiple administrators managing the equipment on a cloud server, and communication between the equipment managed by each administrator and external devices is facilitated via the corresponding management software tools and gateway devices on the cloud server. This allows each administrator to connect to the equipment they manage from external devices, while preventing external devices from connecting to equipment they do not manage, even if there are separate administrators for each type of equipment, by providing the management software tools for each administrator on the cloud server. This eliminates the need to install gateway devices for each administrator within the factory, thus preventing the system configuration from becoming overly complex. Furthermore, since gateway devices are not required for each of the multiple administrators within the factory, equipment administrators will not install equipment that does not meet the factory's security requirements. This ensures the security of communications.

[0008] The remote communication method in the second aspect of this disclosure is a remote communication method for remote communication between multiple types of equipment used to produce or transport products in a factory and multiple external devices used by the respective managers of each piece of equipment, wherein the multiple external devices and a cloud server equipped with multiple management software tools for each manager who manages the equipment are connected in an encrypted state, the cloud server and a gateway device are connected in an encrypted state via the factory network and an external network, the gateway device and the equipment are connected via the factory network, and the external devices and the equipment communicate via the management software tools and gateway device corresponding to the external devices.

[0009] The remote communication method described in the second phase of this disclosure involves providing multiple management software tools for each of the multiple administrators managing the equipment on a cloud server, and enabling communication between the equipment managed by each administrator and external devices via the corresponding management software tools and gateway devices on the cloud server. This allows each administrator to connect to the equipment they manage from external devices, while preventing external devices from connecting to equipment they do not manage, even if there are separate administrators for each type of equipment, by providing the management software tools for each administrator on the cloud server. This eliminates the need to install gateway devices for each administrator within the factory, thus providing a remote communication method that can suppress the complexity of the system configuration. Furthermore, since gateway devices are not provided for each of the multiple administrators, equipment administrators will not install equipment that does not satisfy the factory's communication security requirements. This provides a remote communication method that can ensure communication security. The communication function of the gateway device can be configured to include, for example, only communication functions below the application level. This configuration simplifies the configuration of the gateway. [Effects of the Invention]

[0010] The remote communication system and remote communication method disclosed herein can suppress the complexity of the system configuration and ensure the security of communications. [Brief explanation of the drawing]

[0011] [Figure 1] This is a block diagram showing a remote communication system according to one embodiment. [Figure 2] This is a diagram illustrating the communication connection of a remote communication system according to one embodiment. [Figure 3] This figure illustrates a first example of updating the software of equipment using a remote communication system according to one embodiment. [Figure 4] This figure illustrates a second example of updating the software of equipment using a remote communication system according to one embodiment. [Modes for carrying out the invention]

[0012] Hereinafter, an embodiment of this disclosure will be described based on the drawings.

[0013] As shown in Figure 1, the remote communication system 100 is a system for remote communication between external devices 10 and equipment 60 in factory 40b. Specifically, the remote communication system 100 is a system that allows the equipment manufacturer's managers to remotely operate and manage the equipment 60 in factory 40b, which is managed by the equipment manufacturer, from their respective external devices 10. In other words, the remote communication system 100 enables remote communication between multiple types of equipment 60, including robots, used to produce products in factory 40b, and multiple external devices 10 used by the managers of each piece of equipment 60.

[0014] In the equipment-using company 40, products are produced using multiple types of equipment 60 in factory 40b. Factory 40b of the equipment-using company 40 utilizes equipment 60 provided by various equipment manufacturers. The equipment 60 is monitored and maintained by the equipment manufacturer or a management company contracted by the equipment manufacturer. For example, the equipment manufacturer or management company monitors the operation of the equipment 60 by collecting operation logs or by collecting equipment data. While this specification describes cases where the equipment manufacturer or a management company contracted by the equipment manufacturer performs the monitoring and maintenance of the equipment 60, other companies may also perform the monitoring and maintenance of the equipment 60. For example, the equipment-using company 40 itself may monitor and maintain the equipment 60 using a remote communication system 100.

[0015] As shown in Figure 1, the remote communication system 100 comprises multiple external devices 10 used by multiple equipment manufacturers, a cloud server 20, a gateway device 50 installed in the factory 40b of the equipment user company 40, and multiple pieces of equipment 60 used in the factory 40b.

[0016] The equipment-using enterprise 40 includes an office 40a having office functions and a factory 40b having product production functions.

[0017] Office 40a is equipped with an office LAN (Local Area Network) 41, firewalls 42a and 42b, and a DMZ (DeMilitarized Zone) 43 as part of its communication network.

[0018] Factory 40b is equipped with a communication network consisting of a factory LAN 44, firewalls 45a and 45b, and an iDMZ (industrial DeMilitarized Zone) 46. In this specification, an iDMZ is a type of DMZ, and an iDMZ is a DMZ installed within a factory.

[0019] The external device 10 is used by each of the equipment manufacturers that manage the equipment device 60. In the example shown in FIG. 1, the external device 10a is used by the equipment manufacturer A. Also, the external device 10b is used by the equipment manufacturer B. The external device 10 is a computer. The external device 10 is, for example, a personal computer, a portable information terminal, or the like. The external device 10 includes a processor such as a CPU (Central Processing Unit), a control unit including memories such as a ROM (Read Only Memory) and a RAM (Random Access Memory), an operation input unit such as a touch panel, a mouse, or a keyboard that receives operation inputs, and a display unit that displays information. Further, the external device 10 includes a communication unit that connects to a network and performs information communication.

[0020] The cloud server 20 is a virtual server constructed on a network. The cloud server 20 is managed by the provider of the remote communication system 100. The cloud server 20 is connected to the gateway device 50 in an encrypted state via the office LAN 41 in the office 40a and the external Internet 30. For example, the cloud server 20 is connected to the gateway device 50 using a VPN (Virtual Private Network). Also, the cloud server 20 is provided with a plurality of management software tools 21 for each of a plurality of administrators who manage the equipment device 60.

[0021] The cloud server 20 is connected to the external device 10 via a network such as the Internet. Also, the cloud server 20 is connected to each of the plurality of external devices 10 by secure communication. For example, the cloud server 20 is connected to each of the plurality of external devices 10 using a VPN (Virtual Private Network).

[0022] The management software tool 21 has dedicated tools prepared for each equipment manufacturer. In the example shown in FIG. 1, as a tool dedicated to equipment manufacturer A, a management software tool 21a is prepared, and as a tool dedicated to equipment manufacturer B, a management software tool 21b is prepared. Also, a user management software tool 22 is prepared as a tool for the equipment-using company 40 to manage the management software tool 21.

[0023] Each of the management software tools 21 is a dedicated tool for each equipment manufacturer and can be accessed and used only by the equipment manufacturer to be managed and the equipment-using company 40. That is, the management software tool 21a can be accessed and used from the external device 10a of equipment manufacturer A. Also, the management software tool 21b can be accessed and used from the external device 10b of equipment manufacturer B. Also, the management software tool 21a and the management software tool 21b can be accessed and used from the information devices of the equipment-using company 40. Also, the user management software tool 22 can be accessed and used from the information devices of the equipment-using company 40. In the above example, the case where the management software tool can be accessed and used by the equipment manufacturer to be managed and the equipment-using company 40 is shown, but the case where the equipment manufacturer can access and use it and the equipment-using company 40 can only access and refer to it is also conceivable.

[0024] The management software tool 21 dedicated to the equipment manufacturer is operated by the external device 10 of the equipment manufacturer to be managed to execute processing. The management software tool 21 dedicated to the equipment manufacturer includes software for connecting the external device 10 of the equipment manufacturer and the equipment device 60 of the corresponding factory 40b.

[0025] The management software tool 21, dedicated to each equipment manufacturer, stores information for remotely communicating with the equipment 60 of each equipment manufacturer. For example, the management software tool 21 stores information such as the address information, communication permission information, and communication standard information of the equipment 60 to be managed. In addition, the management software tool 21, dedicated to each equipment manufacturer, stores information for remotely managing the equipment 60 of each equipment manufacturer. For example, the management software tool 21, dedicated to each equipment manufacturer, stores information such as the model information, version information, and usage status information of the equipment 60 to be managed.

[0026] Furthermore, the management software tool 21, which is exclusive to the equipment manufacturer, can configure software updates for the managed equipment 60 by operating the external device 10. When the management software tool 21 receives software update data for the managed equipment 60 from the external device 10 and receives a software update instruction from the external device 10, it executes the process to update the software of the equipment 60.

[0027] The dedicated user management software tool 22 for the equipment user company 40 includes software for monitoring and managing communication between the cloud server 20 and the gateway device 50. Furthermore, the dedicated user management software tool 22 for the equipment user company 40 includes software for managing the equipment manufacturer's dedicated management software tool 21.

[0028] Office LAN 41 is connected to the external internet 30 via firewalls 42a, DMZ 43, and 42b. Office LAN 41 is also the network within office 40a of the equipment-using company 40. Computers and office equipment used in office 40a are connected to Office LAN 41.

[0029] Firewalls 42a and 42b restrict information communication between the Internet 30 and the office LAN 41. Specifically, firewalls 42a and 42b restrict information communication to prevent unauthorized access to the office LAN 41 from the outside. In addition, firewalls 42a and 42b restrict information communication to prevent unauthorized leakage of information from the office LAN 41 to the outside.

[0030] DMZ43 is located in the area separated by firewalls 42a and 42b. DMZ43 is a neutral area located between the external internet 30 and the internal office LAN 41.

[0031] The factory LAN 44 is connected to the office LAN 41 via a dedicated communication line, firewall 45a, iDMZ 46, and firewall 45b. The factory LAN 44 is also the network within the factory 40b of the equipment-using company 40. Computers and equipment 60 used in factory 40b are connected to the factory LAN 44.

[0032] Firewalls 45a and 45b restrict information communication between the office LAN 41 and the factory LAN 44. Specifically, firewalls 45a and 45b restrict information communication to prevent unauthorized access to the factory LAN 44 from the outside. In addition, firewalls 45a and 45b restrict information communication to prevent unauthorized leakage of information from the factory LAN 44 to the outside.

[0033] iDMZ46 is located in the area separated by firewalls 45a and 45b. iDMZ46 is a neutral area located between the office LAN 41 and the factory LAN 44.

[0034] The gateway device 50 is installed in iDMZ46 and transfers information between the internal network of the factory LAN44 and the external internet. The gateway device 50 is connected to the equipment 60 via the firewall 45b and the factory LAN44 within the factory 40b. The gateway device 50 performs information communication by converting different protocols and data formats. For example, the gateway device 50 converts protocols so that data can be exchanged between networks using different communication protocols. The gateway device 50 also improves network security by blocking unauthorized access and unnecessary data. Furthermore, the gateway device 50 performs efficient data transfer by monitoring and optimizing network traffic. For example, when communication is performed between the cloud server 20 and the gateway device 50 using a VPN (Virtual Private Network), the gateway device 50 refers to the IP address and port number of the data received via the VPN to identify the equipment to which the received data should be transferred, performs the appropriate protocol conversion on the received data, and sends it to the destination equipment. The communication protocol between the gateway device 50 and the equipment is, for example, TPC / IP. In this case, the gateway sets the IP address and port number assigned to the destination equipment in the factory LAN and sends the data.

[0035] Furthermore, the gateway device 50 is located in an iDMZ area separated by firewall 45b, relative to the factory LAN 44 within factory 40b. Also, the gateway device 50 is a dedicated embedded device, and the installation of additional software is restricted.

[0036] Furthermore, the gateway device 50 is provided in common for multiple types of equipment 60. For example, one gateway device 50 is provided in factory 40b. Note that multiple gateway devices 50 may be provided to increase processing or memory capacity. Also, if there are multiple factories 40b, a gateway device 50 is provided for each factory 40b. The gateway device 50 centrally manages the remotely connectable equipment. The gateway device 50 also stores logs, which can be used, for example, in forensic investigations.

[0037] Equipment 60 is used to produce products in factory 40b. Multiple types of equipment 60, including robots, are installed in factory 40b. In the example shown in Figure 1, equipment 60a from equipment manufacturer A is a robot. Robots include, for example, robots with horizontal articulated arms and robots with vertical articulated arms. Equipment 60a also includes a control device for controlling the robot's movements.

[0038] Equipment 60b from equipment manufacturer B consists of equipment other than robots. Examples of equipment other than robots include conveying equipment, processing equipment, assembly equipment, welding equipment, and inspection equipment.

[0039] Furthermore, the factory 40b may be equipped with multiple pieces of equipment 60 of the same type. For example, the factory 40b may be equipped with multiple robots of the same type. In addition, it may be equipped with multiple pieces of equipment 60 of the same type other than robots.

[0040] In this embodiment, each of the multiple external devices 10 is connected to the cloud server 20 in an encrypted state. Furthermore, each of the multiple external devices 10 communicates with the equipment 60 it manages via the corresponding management software tool 21 and gateway device 50 of the cloud server 20.

[0041] In other words, in this embodiment, a cloud server 20 equipped with multiple management software tools 21 for each administrator who manages multiple external devices 10 and equipment 60 is connected to each other via VPN (Virtual Private Network) in an encrypted state. The cloud server 20 and the gateway device 50 are connected via the external internet 30, the office LAN 41 in office 40a, iDMZ 46, etc., via VPN (Virtual Private Network) in an encrypted state. The gateway device 50 and the equipment 60 are connected via the factory LAN 44 in factory 40b, and the external devices 10 and equipment 60 communicate with each other via the management software tool 21 corresponding to the external devices 10 and the gateway device 50.

[0042] As a result, the equipment user company 40 can communicate data encrypted through the VPN while connected to the internet via its contracted legitimate connection path, allowing the equipment user company 40 to understand the connection path and manage its security. Furthermore, since the user management software tool 22 is installed on the cloud server 20 with access for the equipment user company 40, the equipment user company 40 can manage the security of the management software tool 21 and the data content communicated by the management software tool 21. In addition, in the remote communication system 100, the physical communication devices managed by the equipment user company 40 are aggregated in the gateway device 50 located in the iDMZ, and since the gateway device 50 is an embedded device, the risk of unauthorized software being installed is suppressed. As a result, security measures can be implemented efficiently. Moreover, since the VPN is configured on the cloud server 20 with access for the equipment user company 40, the equipment user company 40 can check the VPN settings and the data content communicated over the VPN, thus suppressing the occurrence of security issues related to these.

[0043] Furthermore, each of the multiple external devices 10 remotely operates and manages the equipment 60 it manages via the corresponding management software tool 21 and gateway device 50 of the cloud server 20.

[0044] The cloud server 20 communicates with the external device 10 using a general-purpose communication standard. Furthermore, the cloud server 20 communicates with the equipment 60 using a communication standard specific to each of the multiple types of equipment 60, via a corresponding management software tool 21.

[0045] In the example of communication connection shown in Figure 2, an external device 10a of equipment manufacturer A is connected to equipment 60a managed by equipment manufacturer A at factory 40b. The external device 10a is connected to the cloud server 20 in an encrypted state via VPN. In this case, the external device 10a communicates using the general-purpose communication standard HTTPS. Note that the general-purpose communication standard is not limited to HTTPS.

[0046] External device 10a runs the management software tool 21a of the cloud server 20 to establish an encrypted connection between the cloud server 20 and the gateway device 50 via VPN. In this case, the cloud server 20 converts the instructions from external device 10a into signals conforming to the communication standard of the equipment device 60a and transmits them to the gateway device 50.

[0047] In this example, multiple pieces of equipment 60 often use different communication standards for instruction signals depending on the equipment manufacturer. In other words, it is generally necessary to send instruction signals to each piece of equipment 60 using different communication standards. Therefore, by converting the instruction signals to the communication standard corresponding to the equipment 60 using an external cloud server 20 and transmitting them over a secure communication line, it is possible to manage the equipment 60 remotely. Furthermore, the management software tool 21 that converts the signal communication standard can be configured by the equipment manufacturer being used, so it is possible to configure the management software tool 21 to convert to the communication standard desired by the equipment manufacturer. In this example, we have shown the case where the cloud server 20 performs the conversion of the communication standard, but it is also possible that the communication standard used between the external device 10 and the management software tool 21 on the cloud server 20 is the same as the communication standard used between the management software tool 21 on the cloud server 20 and the equipment 60. In this case, it is possible that the management software tool 21 on the cloud server 20 performs processing such as address translation in the communication standard being used.

[0048] When the gateway device 50 receives a signal in the communication standard compatible with the equipment device 60a, it forwards the received signal to the equipment device 60a via the factory LAN 44.

[0049] When transmitting a signal from equipment 60a to external equipment 10a, equipment 60a transmits a signal in the communication standard corresponding to the equipment to gateway equipment 50. Gateway equipment 50, having received the signal from equipment 60a, transmits the received signal to cloud server 20 via the internet 30 using VPN.

[0050] The management software tool 21a for the cloud server 20 converts signals of the communication standard compatible with the device into signals of a general-purpose communication standard and transmits them to the external device 10a via VPN.

[0051] Furthermore, in this embodiment, the multiple management software tools 21 of the cloud server 20 include a user management software tool 22 for users of the factory 40b that allows them to verify the security of communications between the cloud server 20 and the gateway device 50. The user management software tool 22 is used, for example, by a worker in the information systems department of the equipment user company 40. Users of the factory 40b can access and manage the multiple management software tools 21 of the cloud server 20 using the user management software tool 22.

[0052] The user management software tool 22 accesses the equipment manufacturer's dedicated management software tool 21 to manage the communication content between the external device 10 and the management software tool 21, or between the management software tool 21 and the equipment 60. For example, the user management software tool 22 may monitor the data content exchanged between the external device 10 and the management software tool 21, or the data content exchanged between the management software tool 21 and the equipment 60. It may also disable communication between the external device 10 and the management software tool 21, or between the management software tool 21 and the equipment 60. Furthermore, the user management software tool 22 may enable communication between the external device 10 and the management software tool 21, or between the management software tool 21 and the equipment 60.

[0053] Furthermore, the user management software tool 22 stores logs related to the usage history of the cloud server 20. These logs are used, for example, for forensic investigations.

[0054] Furthermore, in this embodiment, when the cloud server 20 receives a notification from the external device 10 to the corresponding management software tool 21 to update the software of the equipment 60, the software of the corresponding equipment 60 is updated.

[0055] In the first example shown in Figure 3, an external device 10a from equipment manufacturer A updates the software of equipment 60a in factory 40b. When a software update is configured in the management software tool 21a of the cloud server 20 from the external device 10a of equipment manufacturer A, update data 61a is sent from the external device 10a to the cloud server 20. Specific details regarding the update configured in the management software tool 21a of the cloud server 20 may include, for example, the IP address of the external device 10a, the port number of the software update application stored on the external device 10a, and the folder information where the update data 61a is stored. The update data 61a is sent from the cloud server 20 to equipment 60a via the gateway device 50 by the management software tool 21a. Then, the software update is performed on equipment 60a. For example, the software in the robot controller that controls the robot's movements is updated.

[0056] Furthermore, when the cloud server 20 receives a notification from the external device 10 to the corresponding management software tool 21 to update the software of the equipment 60, it sends the software update data to the gateway device 50. The management software tool 21 also sends a command to the equipment 60 to update its software.

[0057] In the second example shown in Figure 4, an external device 10a from equipment manufacturer A updates the software of multiple pieces of equipment 60a in factory 40b. When a software update is configured in the management software tool 21a of the cloud server 20 from the external device 10a of equipment manufacturer A, update data 61a is sent from the external device 10a to the cloud server 20. The update data 61a is then sent from the cloud server 20 to the gateway device 50 by the management software tool 21a. The gateway device 50 forwards the update data 61a to the multiple pieces of equipment 60a. In parallel, the management software tool 21a also sends a signal to update the software to the multiple pieces of equipment 60a. Then, the software update is performed on each of the multiple pieces of equipment 60a. In this embodiment, we considered a case where a factory user verifies the security of the communication between the management software tool 21 of the cloud server 20 and the gateway device 50. However, it is also possible that another employee of the company to which the factory belongs, for example an employee of the department that manages information systems, verifies the security of the communication between the management software tool 21 of the cloud server and the gateway device 50. Furthermore, it is conceivable that a person who is not an employee of the company to which the factory belongs, but who has entered into a contract such as a subcontract or outsourcing agreement with the company to which the factory belongs, may verify the security of communication between the cloud server 20 management software tool 21 and the gateway device 50. In this specification, these persons will be collectively referred to as employees of the company to which the factory belongs and equivalent persons.

[0058] (Effects of this embodiment) Multiple management software tools 21 for each administrator managing the equipment 60 are installed on the cloud server 20, and the equipment 60 managed by each administrator and the external devices 10 communicate via the corresponding management software tools 21 and gateway devices 50 on the cloud server 20. As a result, even if there are separate administrators for multiple types of equipment 60, by installing the management software tools 21 for each administrator on the cloud server 20, each administrator can connect to the equipment 60 they manage from the external devices 10, but cannot connect to the equipment 60 they do not manage from the external devices 10. This eliminates the need to install gateway devices 50 for each administrator within the factory 40b, thus preventing the system configuration from becoming complicated. Furthermore, since there is no need to prepare gateway devices 50 for each of the multiple administrators, the administrators of the equipment 60 will not install devices that do not satisfy the communication security requirements of the factory 40b. This ensures the security of communication.

[0059] Each of the multiple external devices 10 remotely operates and manages the equipment 60 it manages via the corresponding management software tool 21 and gateway device 50 on the cloud server 20. This allows the administrator of the equipment 60 to remotely operate and manage the equipment 60 it manages from outside the factory 40b using the external devices 10.

[0060] The gateway device 50 is located in the iDMZ area separated by firewalls 45a and 45b within the factory LAN 44 of factory 40b. It is a dedicated embedded device for gateways, and the installation of additional software is restricted. This ensures that communication between the external device 10 and the corresponding equipment 60 is possible with high security from the gateway device 50 located in the iDMZ area. Furthermore, it prevents the addition of software with significant vulnerabilities to the gateway device 50, effectively mitigating the reduction in communication security due to vulnerabilities in the gateway device 50.

[0061] Users of factory 40b can use user management software tool 22 to check the security details of communications between the cloud server 20's multiple management software tools 21 and the gateway device 50. This allows users of factory 40b to easily manage the security of communications.

[0062] The cloud server 20 communicates with the external device 10 using a general-purpose communication standard, and also communicates with the equipment 60 by converting the communication standard to one that corresponds to each of the multiple types of equipment 60 using the corresponding management software tool 21. As a result, even if the equipment 60 needs to communicate using a proprietary communication standard that is not general-purpose, the management software tool 21 converts the general-purpose communication standard to the communication standard that the equipment 60 corresponds to, so that communication can be performed between the external device 10 and the equipment 60.

[0063] The gateway device 50 is provided in common for multiple types of equipment 60. This eliminates the need to provide multiple gateway devices 50, thus simplifying the system configuration.

[0064] When an update for the equipment 60 is set in the corresponding management software tool 21 from the external device 10, the software on the corresponding equipment 60 is updated. This allows the administrator of the equipment 60 to easily update the software of the equipment 60 they manage, even from outside the factory 40b.

[0065] When an external device 10 configures the management software tool 21 to update the software of the equipment 60, the management software tool 21 sends the software update data to the gateway device 50. This means that if there are multiple pieces of equipment 60 of the same type and their software needs to be updated at the same time, the software update data only needs to be sent once between the cloud server 20 and the gateway device 50. This eliminates the need to communicate the same update data multiple times between the cloud server 20 and the gateway device 50, preventing congestion caused by concentrated communication data. As a result, software updates can be performed efficiently.

[0066] (modified version) It should be noted that the embodiments disclosed herein are illustrative and not restrictive in all respects. The scope of this disclosure is defined by the claims rather than the description of the embodiments above, and includes all modifications (explanations) within the meaning and scope equivalent to the claims.

[0067] In the above embodiment, an example was shown in which one management software tool is provided on the cloud server 20 for each equipment manufacturer that is the manager of the equipment, but this disclosure is not limited to this. For example, one management software tool may be provided on the cloud server 20 for each type of equipment. In other words, if multiple types of equipment from the same equipment manufacturer are installed in a factory, a management software tool may be provided for each type of equipment.

[0068] The above embodiment shows an example in which the equipment user includes one office and one factory, but the disclosure is not limited thereto. For example, the equipment user may include multiple offices and multiple factories. If the equipment user includes multiple factories, a gateway device may be provided for each factory.

[0069] Furthermore, the gateway device may not be installed inside the factory, but rather at a location outside the factory belonging to the company to which the factory belongs (the equipment-using company). For example, the gateway device may be installed in the office of the equipment-using company.

[0070] If the gateway device is installed within the factory, the equipment and the gateway device are connected via the factory's network. If the gateway device is installed within the office, the equipment and the gateway device are connected via the office's network and the factory's network. In either case, the equipment and the gateway device are connected via the factory's network.

[0071] When the gateway device is installed within the factory, the cloud server and the gateway device are connected via, for example, the factory's internal network, the office's internal network, and an external network. In another configuration, when the gateway device is installed within the factory, the cloud server and the gateway device are connected via, for example, the factory's internal network and an external network. In the latter case, it is assumed that the factory's internal network is directly connected to the external network. Furthermore, when the gateway device is installed within the office, the cloud server and the gateway device are connected via the office's internal network and an external network. In all cases, the cloud server and the gateway device are connected via the network within the company to which the factory belongs and an external network.

[0072] The above embodiment shows an example of communication from a cloud server to the factory network via the equipment user company's office, but the disclosure is not limited to this. For example, communication may be made by directly connecting from the cloud server to the equipment user company's factory network.

[0073] The functions of the elements disclosed herein can be performed using circuits or processing circuits, including general-purpose processors, dedicated processors, integrated circuits, ASICs (Application Specific Integrated Circuits), conventional circuits, and / or combinations thereof, configured or programmed to perform the disclosed functions. A processor is considered a processing circuit or circuit because it includes transistors and other circuits. In this disclosure, a circuit, unit, or means is hardware that performs the enumerated functions, or hardware programmed to perform the enumerated functions. The hardware may be hardware disclosed herein, or other known hardware that is programmed or configured to perform the enumerated functions. If the hardware is a processor, which is considered a type of circuit, then the circuit, means, or unit is a combination of hardware and software, and the software is used to configure the hardware and / or the processor.

[0074] (Appearance) Those skilled in the art will understand that the exemplary embodiments described above are specific examples of the following embodiments.

[0075] (Aspect 1) Multiple types of equipment and machinery used in factories to produce or transport products, A gateway device connected to the aforementioned equipment via the factory network, The aforementioned factory is connected to the gateway device in an encrypted state via the internal network of the company to which it belongs and via an external network, and a cloud server is provided with multiple management software tools for multiple administrators who manage the aforementioned equipment, A remote communication system comprising a plurality of external devices used by each of the plurality of administrators, connected to the cloud server in an encrypted state, and communicating with the equipment managed by each of them via the corresponding management software tool of the cloud server and the gateway device.

[0076] (Aspect 2) The remote communication system according to claim 1, wherein the cloud server is provided with a user management software tool for users that can verify the security of communication between the management software tool of the cloud server and the gateway device.

[0077] (Aspect 3) The remote communication system according to Embodiment 1 or Embodiment 2, wherein each of the plurality of external devices remotely operates and remotely manages the equipment to be managed via the corresponding management software tool of the cloud server and the gateway device.

[0078] (Aspect 4) The remote communication system according to any one of embodiments 1 to 3, wherein the gateway device is located in a DMZ area separated by a firewall within the factory network, is a dedicated embedded device for the gateway, and the installation of additional software is restricted.

[0079] (Appendix 5) The remote communication system according to any one of embodiments 1 to 4, wherein the cloud server communicates with the external device using a general-purpose communication standard, and communicates with the equipment by converting the standard to a communication standard corresponding to each of the multiple types of equipment using the corresponding management software tool.

[0080] (Aspect 6) The gateway device is provided in common for multiple types of equipment, and is part of the remote communication system according to any one of embodiments 1 to 5.

[0081] (Aspect 7) The remote communication system according to any one of embodiments 1 to 6, wherein the cloud server transmits software update data to the corresponding equipment when a software update for the equipment is set from the external device to the corresponding management software tool.

[0082] (Pattern 8) The remote communication system according to embodiment 7, wherein the cloud server transmits software update data to the gateway device when the software update for the equipment is set to the corresponding management software tool from the external device.

[0083] (Aspect 9) A remote communication method for remotely communicating between multiple types of equipment used in a factory to produce or transport products and multiple external devices used by the respective managers of each piece of equipment, The aforementioned multiple external devices and a cloud server equipped with multiple management software tools for each administrator managing the aforementioned equipment are connected in an encrypted state. The aforementioned cloud server and gateway device are connected in an encrypted state via the factory's internal network and external network. The gateway device and the equipment are connected via the network within the factory. A remote communication method in which the external device and the facility equipment communicate via the management software tool and gateway device corresponding to the external device. [Explanation of Symbols]

[0084] 10, 10a, 10b External equipment 20 Cloud Servers 21, 21a, 21b Management software tools 22 User Management Software Tools 30. Internet (external network) 40 Companies using equipment 40a Office of a company using the facilities 40b Factory of a company using the equipment 42a, 42b Firewall 44. Factory LAN (Network within the factory) 45a, 45b firewall 50 Gateway devices 60 Equipment 60a Equipment, robots 60b Equipment

Claims

1. Multiple types of equipment and machinery used in factories to produce or transport products, A gateway device connected to the aforementioned equipment via the factory network, The aforementioned factory is connected to the gateway device in an encrypted state via the internal network of the company to which it belongs and via an external network, and a cloud server is provided with multiple management software tools for multiple administrators who manage the equipment, A remote communication system comprising a plurality of external devices used by each of the plurality of administrators, connected to the cloud server in an encrypted state, and communicating with the equipment managed by each of them via the corresponding management software tool of the cloud server and the gateway device.

2. The remote communication system according to claim 1, wherein the cloud server is provided with a user management software tool for users that can verify the security of communication between the management software tool of the cloud server and the gateway device.

3. The remote communication system according to claim 1, wherein each of the plurality of external devices remotely operates and remotely manages the equipment to be managed via the corresponding management software tool of the cloud server and the gateway device.

4. The remote communication system according to claim 1, wherein the gateway device is located in a DMZ area separated by a firewall within the factory network, is a dedicated embedded device for the gateway, and the installation of additional software is restricted.

5. The remote communication system according to claim 1, wherein the cloud server communicates with the external device using a general-purpose communication standard, and communicates with the equipment by converting the standard to a communication standard corresponding to each of the multiple types of equipment using the corresponding management software tool.

6. The remote communication system according to claim 1, wherein the gateway device is provided in common for multiple types of equipment.

7. The remote communication system according to claim 1, wherein the cloud server transmits software update data to the corresponding equipment when a software update for the equipment is set to the corresponding management software tool from the external device.

8. The remote communication system according to claim 7, wherein the cloud server transmits software update data to the gateway device when the external device configures the management software tool to update the software of the equipment.

9. A remote communication method for remotely communicating between multiple types of equipment used in a factory to produce or transport products and multiple external devices used by the respective managers of each piece of equipment, The aforementioned multiple external devices and a cloud server equipped with multiple management software tools for each administrator managing the aforementioned equipment are connected in an encrypted state. The aforementioned cloud server and gateway device are connected in an encrypted state via the factory's internal network and external network. The gateway device and the equipment are connected via the network within the factory. A remote communication method in which the external device and the facility equipment communicate via the management software tool and gateway device corresponding to the external device.

Images