Load Control System

Abstract

To provide a load control system capable of improving the confidentiality of functions. [Solution] This motor control system 100 (load control system) is configured so that when linked security authentication based on at least one of hardware and software is established through the linkage between at least the control device 1 and the power conversion device 2 out of the control device 1, the power conversion device 2, and the motor 3, a function is generated by software in the power conversion device 2 that enables the power conversion device 2 to be used for a specified purpose.

Description

[Technical field]

[0001] The present invention relates to a load control system, and more particularly to a load control system including a control device. [Background technology]

[0002] 2. Description of the Related Art A load control system including a control device is known (see, for example, Patent Document 1).

[0003] The above-mentioned Patent Document 1 discloses a motor control system including a motor control device. In this motor control system, parameters for controlling the motor (position loop gain, speed loop gain, etc.) are stored in advance when the motor control device is shipped from the factory. In addition, when the motor control device is shipped from the factory, access to the motor control device (reading out parameters, setting parameters, etc.) is prohibited.

[0004] When access to a motor control device is permitted, first, parameters for controlling the motor are transmitted from the external device to the motor control device. Then, when the motor control device confirms that the parameters stored in the motor control device match the parameters transmitted from the external device, access to the motor control device is permitted. In other words, the parameters stored in the motor control device at the time of shipment from the factory serve as the password for permitting access to the motor control device. Note that the parameters are set individually for each motor control device (different for each motor control device), and therefore, unlike the case where access to multiple motor control devices is permitted with one password, even if the password is leaked, access to multiple motor control devices is not possible. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Patent No. 5877312 Summary of the Invention [Problem to be solved by the invention]

[0006] However, in the motor control system of Patent Document 1, a parameter serving as a password is set for each motor control device individually, and if the password is leaked, the motor control device corresponding to the password can be accessed. This causes the inconvenience of, for example, leaking of functions (e.g., specific circuit functions of the device) contained in the motor control device and the device controlled by the motor control device. In other words, if the password of one device among multiple devices is leaked, the confidentiality of the functions of the other devices cannot be maintained.

[0007] The present invention has been made to solve the above-mentioned problems, and one object of the present invention is to provide a load control system capable of improving the confidentiality of functions. [Means for solving the problem]

[0008] In order to achieve the above object, a load control system according to one aspect of the present invention includes a control device and a load control unit controlled by the control device. Also includes a PWM circuit The power conversion device includes a power conversion device and a load to which power is supplied from the power conversion device. When cooperation security authentication is established between at least the control device and the power conversion device among the control device, the power conversion device, and the load, the power conversion device receives from the control device a program code that causes a plurality of functional blocks formed by software to function, and the plurality of functional blocks function in a predetermined order based on the program code. The function of the plurality of functional blocks in the predetermined order is a function that enables the power conversion device to be used for a predetermined purpose in the power conversion device. If the linked security authentication is not established, the plurality of functional blocks are not operated in a predetermined order and the PWM circuit is operated, and the power conversion device becomes the power conversion device that can be used for an application different from the predetermined application based on the operation of the PWM circuit. .

[0009] In the load control system according to one aspect of the present invention, as described above, when the linkage security authentication is established by the linkage of at least the control device and the power conversion device among the control device, the power conversion device, and the load, the power conversion device receives from the control device a program code for causing a plurality of functional blocks configured by software to function, and the plurality of functional blocks function according to a predetermined order based on the program code. The function of the plurality of functional blocks according to the predetermined order is a function that enables the power conversion device to be used for a predetermined purpose in the power conversion device. As a result, when the linkage security authentication is not established, the function that enables the power conversion device to be used for a predetermined purpose is not generated in the power conversion device. As a result, even if the inside of the power conversion device is analyzed, the function that enables the power conversion device to be used for a predetermined purpose is not generated in the first place, so that the function will not be leaked. In other words, the confidentiality of the function that enables the power conversion device to be used for a predetermined purpose is maintained by the linkage of at least the control device and the power conversion device, so that the confidentiality of the function is maintained even if the password or the like of one of the plurality of devices is leaked. This can increase the confidentiality of the function.

[0010] Furthermore, since at least the linked security authentication needs to be established by the linkage between the control device and the power conversion device, if the power conversion device is taken out of the load control system alone, or if the power conversion device is taken out of the load control system alone and combined with another load that cannot be authenticated, the linked security authentication is not established. That is, in these cases, the function is not generated, so the function is not leaked. Furthermore, if the security authentication is not established, the function is not generated, so the power conversion device cannot be used alone for a specific purpose.

[0011] In the load control system according to the aforementioned aspect, the function provided by the plurality of functional blocks in a predetermined order is preferably a function that does not exist in the power conversion device when linked security authentication is not established.

[0012] In the load control system according to the above aspect, preferably, when the linked security authentication is established, the plurality of functional blocks function in a predetermined order, so that the power conversion device can be used as a frequency conversion device capable of outputting the first variable frequency or the first variable voltage. With this configuration, confidentiality of the function of being able to output the first variable frequency or the first variable voltage can be maintained.

[0013] In this case, preferably, when the linked security authentication is not established, the multiple functional blocks do not function in a predetermined order, so that the power conversion device becomes a frequency conversion device capable of outputting a second variable frequency or a second variable voltage different from the frequency conversion device capable of outputting the first variable frequency or the first variable voltage. With this configuration, when the linked security authentication is not established, the power conversion device can be used as a frequency conversion device capable of outputting a second variable frequency or a second variable voltage for use in an application different from that of the power conversion device capable of outputting the first variable frequency or the first variable voltage.

[0014] In a load control system in which multiple functional blocks do not function in a predetermined order if the above-mentioned linked security authentication is not established, preferably, a power conversion device that can be used as a frequency conversion device capable of outputting a first variable frequency or a first variable voltage if the linked security authentication is established, and a power conversion device that becomes a frequency conversion device capable of outputting a second variable frequency or a second variable voltage different from the frequency conversion device capable of outputting the first variable frequency or the first variable voltage if the linked security authentication is not established, are the same power conversion device.

[0015] In this case, preferably, the power conversion device includes a standard functional area and a dedicated functional area, the standard functional area including a frequency setting unit, a standard control circuit, and a PWM circuit, and the dedicated functional area includes a plurality of functional blocks, and when the linked security authentication is not established, the desired frequency is set by the frequency setting unit, a command value of the set frequency is input to the standard control circuit, and the PWM circuit is operated so that a second variable frequency or a second variable voltage is output from the power conversion device, and when the linked security authentication is established, the plurality of functional blocks function to operate the PWM circuit so that a first variable frequency or a first variable voltage is output from the power conversion device.

[0016] In the load control system according to the above aspect, preferably, the power conversion device includes a volatile storage means for storing generation software that is generated so that the multiple functional blocks function in a predetermined order when linked security authentication is established, and when the supply of power to the power conversion device is cut off, the generation software stored in the storage means is erased.

[0017] In the load control system according to the above aspect, preferably, when linked security authentication is established by the linkage between the control device, the power electronics device, and the load, a plurality of functional blocks function in the power electronics device. With this configuration, confidentiality (security level) can be improved compared to the case where linked security authentication is established only by the linkage between the control device and the power electronics device.

[0018] In the load control system according to the above aspect, the control device and the power electronics device are preferably connected by wiring, which is hardware, and the linked security authentication includes authenticating that communication via the wiring has become possible between the control device and the power electronics device. With this configuration, linked security authentication based on the hardware, which is the wiring, can be performed.

[0019] In this case, preferably, the control device is configured to transmit to the power electronics device a program code for generating a function that enables the power electronics device to be used for a predetermined purpose, and the linked security authentication includes authenticating a function generation permission signal that is output when communication via wiring between the control device and the power electronics device is possible and that permits the function to be generated by the program code. With this configuration, when communication via wiring between the control device and the power electronics device is not possible, the function generation permission signal is not output, and therefore the function is not generated. This makes it possible to prevent leakage of the function.

[0020] The load control system for authenticating the function creation permission signal preferably further comprises a switch configured by hardware that is turned on when the function creation permission signal is authenticated, and is configured so that when the function creation permission signal is authenticated, the switch is turned on to output a signal from the functional block configured by software via the switch. With this configuration, it is possible to perform linked security authentication in which the hardware and software are linked.

[0021] In the load control system according to the above aspect, preferably, the load includes load identification information specific to the load, the load identification information is stored in the control device and the power conversion device, the control device is configured to transmit the stored load identification information to the power conversion device, and the linked security authentication includes authenticating that the load identification information stored in the power conversion device matches the load identification information transmitted from the control device. With this configuration, when a load that is pre-stored in the load control system is replaced with another load, the load identification information of the load that is pre-stored in the load control system differs from the load identification information of the replaced load. As a result, when the load is replaced, the linked security authentication is not established, and it is possible to prevent a function from being generated (the function is exercised) in a state where the load is replaced.

[0022] In the load control system according to the above aspect, the control device is preferably configured to transmit to the power conversion device a program code for generating a function that enables the power conversion device to be used for a predetermined purpose, and the linked security authentication includes authenticating the program code transmitted from the control device based on a predetermined condition. With this configuration, when a control device that is pre-included in the load control system is replaced with another control device, the program code transmitted from the other control device does not satisfy the predetermined condition, and therefore the linked security authentication is not established. This makes it possible to prevent the function from being generated (the function being exercised) in a state where the control device has been replaced.

[0023] In the load control system according to the above aspect, preferably, at least one of the control device, the power electronics device, and the load has a unique security authentication, and when the unique security authentication is established for at least one of the control device, the power electronics device, and the load, and the linked security authentication is established, the multiple function blocks function in the power electronics device. With this configuration, the unique security authentication is required in addition to the linked security authentication, so that confidentiality can be further improved.

[0024] In this case, preferably, the unique security authentication unique to the control device includes control device security authentication for starting the control device. With this configuration, in addition to the linkage security authentication, control device security authentication of the control device must also be established, so confidentiality can be further improved.

[0025] In the load control system having the unique security authentication, the load preferably includes load identification information unique to the load, and the unique security authentication of the load includes load security authentication for acquiring the load identification information from the load using a secret number. With this configuration, in addition to the linked security authentication, the load security authentication must also be established, so confidentiality can be further improved. Effect of the Invention

[0026] According to the present invention, as described above, it is possible to improve the confidentiality of functions. [Brief description of the drawings]

[0027] [Figure 1] FIG. 1 is a block diagram of a motor control system according to one embodiment of the present invention. [Diagram 2] 1 is a block diagram (a diagram showing functional blocks) of a power conversion device according to an embodiment of the present invention. [Diagram 3] FIG. 2 is a diagram for explaining motor security authentication according to one embodiment of the present invention. [Figure 4] 4 is a flowchart illustrating federated security authentication of a motor control system according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0028] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, preferred embodiments of the present invention will be described with reference to the accompanying drawings.

[0029] The configuration of a motor control system 100 according to the present embodiment will be described with reference to Figures 1 to 4. Note that the motor control system 100 is an example of the "load control system" set forth in the claims.

[0030] <Configuration of Motor Control System> As shown in Fig. 1, the motor control system 100 includes a control device 1 such as a host controller, a power conversion device 2 controlled by commands from the control device 1, and a motor 3 supplied with power from the power conversion device 2. The motor 3 is an example of a "load" in the claims. The motor control system 100 is also applicable to, for example, conveyors, processing machines, air conditioners, and the like.

[0031] The control device 1 and the power conversion device 2 are connected by a dedicated cable 4a. Communication between the control device 1 and the power conversion device 2 via the cable 4a is performed based on a dedicated protocol. In other words, if the control device 1 or the power conversion device 2 is replaced with a control device 1 or a power conversion device 2 that is not based on (does not have) a dedicated protocol, communication between the control device 1 and the power conversion device 2 will no longer be possible. The communication via the cable 4a is analog communication or digital communication. Also, the cable 4a is an example of "wiring" in the claims.

[0032] The power conversion device 2 and the motor 3 are connected by a cable 4b. The cable 4b is a general wiring. Furthermore, communication between the power conversion device 2 and the motor 3 is not performed based on a dedicated protocol.

[0033] (Configuration of the control device) Next, the configuration of the control device 1 will be described with reference to Fig. 2. Note that, for convenience, two control devices 1 are depicted in Fig. 2, but in reality, there is only one control device 1.

[0034] As shown in FIG. 2, the control device 1 is configured to set (store) the motor identification symbol of the motor 3 in a dedicated code and to transmit the stored motor identification symbol to the power conversion device 2. The motor identification symbol is a unique symbol for each motor 3. The motor identification symbol makes it possible to identify the motor 3. The motor identification symbol is also an example of "load identification information" in the claims.

[0035] The control device 1 is also configured to transmit to the power conversion device 2 a program code that generates a function that enables the power conversion device 2 to be used for a predetermined purpose. The control device 1 is also configured to transmit a frequency command to the power conversion device 2. The motor identification symbol, the program code, and the frequency command are transmitted to the power conversion device 2 via a cable 4a. The motor identification symbol, the program code, and the frequency command are also transmitted to addresses 21a, 21b, and 21c, which are addresses limited to the control device 1, based on a dedicated protocol, respectively. The frequency command is a command for causing the power conversion device 2 to output a desired frequency or a desired voltage.

[0036] Furthermore, the control device 1 is configured to transmit a security authentication signal and a code generation permission signal to the power conversion device 2. The security authentication signal and the code generation permission signal will be described later in detail.

[0037] Here, in this embodiment, the control device 1 has unique security authentication. Specifically, the control device 1 performs control device security authentication to start the control device 1. The control device security authentication is, for example, to start an unlocking program to put the control device 1 into a state in which software can be installed. Also, the control device security authentication is to make software startable by inputting a key unique to each control device 1 consisting of multiple digits. Also, the control device security authentication is to perform detailed model settings, change various passcodes, and manage passcodes by inputting a setting passcode for the control device 1. Note that the control device security authentication is an example of "unique security authentication" in the claims.

[0038] <Configuration of power conversion device> Next, the configuration of the power conversion device 2 will be described with reference to Fig. 2. Note that the motor mutual authentication processing unit 22, the security authentication processing unit 23, the program code authentication processing unit 24, the code authentication unit 25, and the dedicated function unit 26 described below are functional blocks configured by software. These functional blocks are provided in a control unit (not shown) of the power conversion device 2.

[0039] 2, the power conversion device 2 includes a standard function area 2a and a dedicated function area 2b. The standard function area 2a is provided with a frequency setting unit 31, a standard control circuit 32, and a PWM circuit 33. A desired frequency is set by the frequency setting unit 31, and a command value of the set frequency is input to the standard control circuit 32. The PWM circuit 33 is operated, so that the power conversion device 2 outputs a voltage having a frequency based on this command value to the motor 3.

[0040] Further, the dedicated function area 2b is provided with a motor mutual authentication processing unit 22. A motor identification symbol is input to the motor mutual authentication processing unit 22 from the control device 1. In this embodiment, the motor mutual authentication processing unit 22 authenticates (verifies) that the motor identification symbol stored in the power conversion device 2 matches the motor identification symbol transmitted from the control device 1. That is, the motor mutual authentication processing unit 22 is configured to perform linked security authentication based on software in cooperation with the control device 1, the power conversion device 2, and the motor 3.

[0041] Moreover, the dedicated function area 2b is provided with a security authentication processing unit 23. The security authentication processing unit 23 is configured to transmit a security authentication signal from the control device 1. The security authentication signal is linked security authentication based on hardware (cable 4a). Specifically, the security authentication signal is for authenticating that communication via the cable 4a between the control device 1 and the power conversion device 2 has become possible. In other words, the security authentication signal is a signal transmitted from the control device 1 when the control device 1 and the power conversion device 2 are connected by the dedicated cable 4a and communication based on a dedicated protocol has become possible. For example, when the voltage applied to the dedicated cable 4a becomes a predetermined voltage, the security authentication signal is transmitted.

[0042] Moreover, the dedicated function area 2b is provided with a program code authentication processing unit 24. The program code authentication processing unit 24 is configured to authenticate a program code that generates a function that enables the power conversion device 2 to be used for a predetermined purpose, which is transmitted from the control device 1. Specifically, in this embodiment, the program code authentication processing unit 24 authenticates the program code transmitted from the control device 1 based on a predetermined condition (software-based linked security authentication).

[0043] For example, the function of enabling the power conversion device 2 to be used for a predetermined purpose is realized (generated) by causing a plurality of function blocks 26a, 26b, and 26c, which are provided in advance in the dedicated function unit 26, to function in a predetermined order. This predetermined order is stored (memorized) in advance in the power conversion device 2. The program code transmitted from the control device 1 includes this predetermined order. The program code authentication processing unit 24 then authenticates (verifies) whether or not the predetermined order stored in advance in the power conversion device 2 matches the predetermined order included in the program code transmitted from the control device 1.

[0044] Moreover, the dedicated function area 2b is provided with a code authentication unit 25. A code generation permission signal is input to the code authentication unit 25. The code generation permission signal is output when communication via the cable 4a becomes possible between the control device 1 and the power conversion device 2. In this embodiment, the code authentication unit 25 is configured to authenticate the input code generation permission signal (linked security authentication based on the cable 4a, which is hardware). The code generation permission signal is an example of a "function generation permission signal" in the claims.

[0045] In this embodiment, a switch 40 configured by hardware is provided, which is turned on when the code generation permission signal is authenticated. When the code generation permission signal is authenticated, the switch 40 is turned on, and a signal is output from a functional block configured by software via the switch 40. For example, when the code generation permission signal is authenticated, the functional block 26c and the switch 40 are connected (see the dashed dotted line inside the dedicated function unit 26), and a signal is output from the functional block 26c to the outside of the dedicated function unit 26 via the switch 40.

[0046] Further, the dedicated function area 2b is provided with a dedicated function unit 26. The dedicated function unit 26 (power electronics device 2) is configured such that, when linked security authentication is established, a function that enables the power electronics device 2 to be used for a predetermined purpose is generated by software. That is, as described above, when linked security authentication is established, a plurality of function blocks 26a, 26b, and 26c provided in the dedicated function unit 26 in advance are made to function in a predetermined order.

[0047] Moreover, the power conversion device 2 is provided with a function code (not shown). The function code is a code for changing the function of the power conversion device 2 by changing the settings of the power conversion device 2, etc. Moreover, the function code is known only to an administrator, etc., and is not known to third parties. Moreover, authenticating the function code (changing settings using the function code, etc.) is an example of the "unique security authentication" in the claims.

[0048] Motor Configuration Next, the configuration of the motor 3 will be described with reference to FIG.

[0049] 3, the motor 3 includes a motor-specific symbol that is unique to the motor 3. The motor-specific symbol is stored in, for example, an IC chip 41 provided within the motor 3.

[0050] Here, in this embodiment, the motor 3 is configured to perform motor security authentication unique to the motor 3. For example, a motor identification symbol is read by a reader 42 from the motor 3 provided with an IC chip 41. Here, a personal identification number (PIN) is required to read the motor identification symbol from the IC chip 41. The personal identification number is known only to the administrator and not to third parties. The read motor identification symbol is input to the management system 43 and set (stored) in the dedicated codes of the control device 1 and the power conversion device 2. The motor security authentication is an example of the "unique security authentication" and "load security authentication" in the claims.

[0051] In this embodiment, when linked security authentication based on at least one of hardware and software (specifically, both hardware and software) is established through the linkage of at least the control device 1 and the power conversion device 2 out of the control device 1, the power conversion device 2, and the motor 3 (specifically, the three of the control device 1, the power conversion device 2, and the motor 3), a function that enables the power conversion device 2 to be used for a predetermined application is generated by software in the power conversion device 2. The linked security authentication will be described below.

[0052] <Linked Security Authentication> Next, the linked security authentication will be described with reference to Fig. 4. The following linked security authentication process is mainly performed by a control unit (not shown) of the power conversion device 2. It is also assumed that control device security authentication of the control device 1, authentication of the function code of the power conversion device 2, and motor security authentication of the motor 3 have been performed in advance.

[0053] As shown in FIG. 4, in step S1, a security authentication signal transmitted from the control device 1 is read.

[0054] Next, in step S2, the security authentication signal is authenticated by the security authentication processing unit 23. That is, when communication between the control device 1 and the power conversion device 2 via the cable 4a is possible, the security authentication signal transmitted from the control device 1 is authenticated. This turns on the switch 27a (see FIG. 2). Note that the switch 27a is not a mechanical switch but a software switch. Also, when the security authentication signal is not authenticated by the security authentication processing unit 23, the linked security authentication process is terminated. Note that the authentication in step S2 is based on hardware (cable 4a).

[0055] Next, in step S3, communication between the control device 1 and the power conversion device 2 via the cable 4a is executed (started).

[0056] Next, in step S4, the motor identification code is acquired (received) via the cable 4a from the control device 1. The motor identification code is acquired by the motor mutual authentication processing unit 22.

[0057] Next, in step S5, the motor identification code set (stored) in the dedicated code of the power conversion device 2 is acquired by the motor mutual authentication processing unit 22.

[0058] Next, in step S6, the motor mutual authentication processing unit 22 determines (authenticates) whether or not the motor identification symbol stored in the power conversion device 2 matches the motor identification symbol transmitted from the control device 1. If the motor identification symbol stored in the power conversion device 2 matches the motor identification symbol transmitted from the control device 1, the software switch 27b (see FIG. 2) is turned on and the process proceeds to step S7, and if they do not match, the linked security authentication process is terminated. Note that the authentication in step S6 is linked security authentication based on software (motor mutual authentication processing unit 22).

[0059] Next, in step S7, the program code is acquired (received) via the cable 4a from the control device 1. The program code is acquired by the program code authentication processing unit .

[0060] Next, in step S8, the program code is authenticated by the program code authentication processing unit 24. Specifically, as described above, it is authenticated (checked) whether or not a predetermined order stored in advance in the power conversion device 2 for making the multiple function blocks 26a, 26b, and 26c provided in the dedicated function unit 26 function in a predetermined order matches a predetermined order included in the program code transmitted from the control device 1. If the predetermined order stored in the power conversion device 2 matches the predetermined order included in the program code transmitted from the control device 1, the process proceeds to step S9, and if they do not match, the process of linked security authentication is terminated. Note that the authentication in step S8 is linked security authentication based on software (program code authentication processing unit 24).

[0061] Next, in step S9, a code generation permission signal is acquired (received) from the control device 1. The code generation permission signal is acquired by the code authentication unit 25. The code generation permission signal is a signal that permits a function to be generated by a program code.

[0062] Next, in step S10, the code authentication unit 25 authenticates the code generation permission signal. The code generation permission signal is output (authenticated) when communication via the cable 4a becomes possible between the control device 1 and the power conversion device 2. Moreover, authenticating the code generation permission signal is linked security authentication based on hardware (cable 4a). In step S10, if the code generation permission signal is authenticated, the process proceeds to step S11, and if the code generation permission signal is not authenticated, the linked security authentication process is terminated.

[0063] Furthermore, if the code generation permission signal is authenticated in step S10, the switch 34a (see FIG. 2) is turned on and the switch 34b (see FIG. 2) is turned off.

[0064] Next, in step S11, in the dedicated function unit 26 of the power conversion device 2, a function that enables the power conversion device 2 to be used for a predetermined purpose is generated by software. The function is generated by software means that "program code that generates a function that enables the power conversion device 2 to be used for a predetermined purpose is transmitted from the control device 1 to the power conversion device 2, and authentication is performed in the power conversion device 2 based on the program code based on predetermined conditions, and the function that enables the power conversion device 2 to be used for the predetermined purpose is generated by software." Specifically, in this embodiment, when the linked security authentication is established, a function that enables the power conversion device 2 to be used as a frequency conversion device that can output a first variable frequency or a first variable voltage is generated by software. In detail, based on the program code transmitted from the control device 1, the multiple function blocks 26a, 26b, and 26c provided in the dedicated function unit 26 are operated in a predetermined order. As a result, the power conversion device 2 becomes usable as a frequency conversion device that can output a first variable frequency or a first variable voltage based on the software generated in the dedicated function unit 26 for use in the predetermined purpose. As a result, the standard control circuit 32 and the PWM circuit 33 are operated so that the first variable frequency or the first variable voltage is output from the power conversion device 2. Here, the generated software is stored in a volatile storage means such as a RAM, and if the power supply is cut off, the stored information cannot be retained and the function for use in a specified application is lost.

[0065] In this embodiment, if the linked security authentication is not established in any of steps S2, S6, S8, and S10, the power conversion device 2 is configured to become a frequency conversion device capable of outputting a second variable frequency or a second variable voltage for use in a different application from the power conversion device 2 capable of outputting the first variable frequency or the first variable voltage. That is, the software switch 34a remains off, and the software switch 34b remains on. As a result, the standard control circuit 32 and the PWM circuit 33 are operated so that the second variable frequency or the second variable voltage is output from the power conversion device 2 based on the command value set by the frequency setting unit 31 in the standard function area 2a.

[0066] In this manner, in this embodiment, linked security authentication (authentication of the motor specific symbol) is performed through the linkage between the control device 1, the power conversion device 2, and the motor 3, and linked security authentication (authentication of the security authentication signal, authentication of the program code, authentication of the code generation permission signal) is performed through the linkage between the control device 1 and the power conversion device 2. Also, linked security authentication is performed based on both hardware (cable 4a) and software (security authentication processing unit 23, motor mutual authentication processing unit 22, program code authentication processing unit 24, code authentication unit 25).

[0067] Furthermore, as described above, the linked security authentication is performed after the control device security authentication of the control device 1, the authentication of the function code of the power conversion device 2, and the motor security authentication of the motor 3 have been performed in advance. That is, in this embodiment, when the control device security authentication of the control device 1, the authentication of the function code of the power conversion device 2, and the motor security authentication of the motor 3 have been established, and the linked security authentication has also been established, the power conversion device 2 is configured to generate, by software, a function that enables the power conversion device 2 to be used for a predetermined purpose.

[0068] (Effects of this embodiment) In this embodiment, the following effects can be obtained.

[0069] In this embodiment, as described above, when the cooperation security authentication based on at least one of hardware and software by cooperation between at least the control device 1 and the power conversion device 2 among the control device 1, the power conversion device 2, and the motor 3 is established, the function that enables the power conversion device 2 to be used for a predetermined purpose is generated by the software in the power conversion device 2. As a result, when the cooperation security authentication is not established, the function that enables the power conversion device 2 to be used for a predetermined purpose is not generated in the power conversion device 2. As a result, even if the inside of the power conversion device 2 is analyzed, the function that enables the power conversion device 2 to be used for a predetermined purpose is not generated in the first place, so that the function will not be leaked. This makes it possible to maintain the confidentiality of the function. That is, since the confidentiality of the function that enables the power conversion device 2 to be used for a predetermined purpose is maintained by the cooperation between at least the control device 1 and the power conversion device 2, the confidentiality of the function is maintained even if the password of one of the multiple devices is leaked. This makes it possible to improve the confidentiality of the function.

[0070] Furthermore, since linked security authentication must be established through at least the link between the control device 1 and the power conversion device 2, linked security authentication is not established when the power conversion device 2 is removed alone from the motor control system 100, or when the power conversion device 2 is removed alone from the motor control system 100 and combined with another motor 3 that cannot be authenticated. That is, in these cases, no function is generated, so no function is leaked. Furthermore, if security authentication is not established, no function is generated, so the power conversion device 2 cannot be used alone for a specific purpose.

[0071] In addition, in this embodiment, as described above, when the linked security authentication is established, the software generates a function that enables the power electronics device 2 to be used as a frequency conversion device capable of outputting the first variable frequency or the first variable voltage. This makes it possible to maintain confidentiality of the function of the power electronics device being capable of outputting the first variable frequency or the first variable voltage.

[0072] In addition, in this embodiment, as described above, when the linked security authentication is not established, the power conversion device 2 is configured to become a frequency conversion device capable of outputting a second variable frequency or a second variable voltage for use in an application different from that of the power conversion device 2 capable of outputting the first variable frequency or the first variable voltage. As a result, when the linked security authentication is not established, the power conversion device 2 can be used as a frequency conversion device capable of outputting the second variable frequency or the second variable voltage.

[0073] Furthermore, in this embodiment, as described above, when linked security authentication based on both hardware and software is established through the linkage between at least the control device 1 and the power conversion device 2 among the control device 1, the power conversion device 2, and the motor 3, the power conversion device 2 is configured to generate a function by software that enables the power conversion device 2 to be used for a predetermined application. Since linked security authentication is established based on both hardware and software, confidentiality can be improved compared to the case where linked security authentication is established based on only one of the hardware and software.

[0074] Furthermore, in this embodiment, as described above, when linked security authentication based on at least one of hardware and software is established through the linkage between the control device 1, the power conversion device 2, and the motor 3, the power conversion device 2 is configured to generate a function by software that enables the power conversion device 2 to be used for a predetermined application. This makes it possible to improve confidentiality (security level) compared to the case where linked security authentication is established only through the linkage between the control device 1 and the power conversion device 2.

[0075] In the present embodiment, as described above, the control device 1 and the power electronics device 2 are connected by the cable 4a which is hardware, and the linked security authentication based on the hardware includes authenticating that communication via the cable 4a has become possible between the control device 1 and the power electronics device 2. This makes it possible to perform linked security authentication based on the hardware, that is, the cable 4a.

[0076] In addition, in this embodiment, as described above, the hardware-based linked security authentication includes authenticating a code generation permission signal that is output when communication via the cable 4a is possible between the control device 1 and the power electronics device 2 and that permits the generation of a function by a program code. As a result, when communication via the cable 4a is not possible between the control device 1 and the power electronics device 2, the code generation permission signal is not output, and therefore the function is not generated. This makes it possible to prevent leakage of the function.

[0077] In addition, as described above, this embodiment is configured to include the switch 40 configured by hardware that turns on when the code generation permission signal is authenticated, and when the code generation permission signal is authenticated, the switch 40 is turned on, so that a signal is output from a functional block configured by software via the switch 40. This makes it possible to perform linked security authentication in which the hardware and software are linked. For example, if the switch 40 is turned off due to a break or pullout of the cable 4a during operation or stoppage, the function will not be established.

[0078] Furthermore, in this embodiment, as described above, the software-based linked security authentication includes authenticating that the motor identification symbol stored in the power conversion device 2 matches the motor identification symbol transmitted from the control device 1. As a result, when the motor 3 already included in the motor control system 100 is replaced with another motor 3, the motor identification symbol of the motor 3 already included in the motor control system 100 differs from the motor identification symbol of the replaced motor 3. As a result, when the motor 3 is replaced, the linked security authentication is not established, so it is possible to prevent a function from being generated (a function from being exercised) in a state where the motor 3 has been replaced.

[0079] Furthermore, in this embodiment, as described above, the software-based linked security authentication includes authenticating the program code transmitted from the control device 1 based on predetermined conditions. As a result, when the control device 1 pre-included in the motor control system 100 is replaced with another control device 1, the program code transmitted from the other control device 1 does not satisfy the predetermined conditions, and therefore linked security authentication is not established. This makes it possible to prevent a function from being generated (a function being exercised) in a state where the control device 1 has been replaced.

[0080] In the present embodiment, as described above, at least one of the control device 1, the power conversion device 2, and the motor 3 has a unique security authentication, and when the unique security authentication is established for at least one of the control device 1, the power conversion device 2, and the motor 3, and the linked security authentication is also established, the power conversion device 2 is configured to generate a function by software that enables the power conversion device 2 to be used for a predetermined purpose. This requires the unique security authentication in addition to the linked security authentication, thereby further improving confidentiality.

[0081] Furthermore, in this embodiment, as described above, the unique security authentication specific to the control device 1 includes control device security authentication for starting up the control device 1. This makes it necessary to establish control device security authentication of the control device 1 in addition to the linked security authentication, thereby further improving confidentiality.

[0082] Furthermore, in this embodiment, as described above, the motor 3 includes a motor identification symbol unique to the motor 3, and the unique security authentication of the motor 3 includes motor security authentication that acquires the motor identification symbol from the motor 3 using a PIN. This makes it possible to further improve confidentiality, since the motor security authentication must be established in addition to the linked security authentication.

[0083] [Variations] The embodiments disclosed herein should be considered to be illustrative and not restrictive in all respects. The scope of the present invention is indicated by the claims, not by the description of the embodiments above, and further includes all modifications (variations) within the meaning and scope of the claims.

[0084] For example, in the above embodiment, an example has been shown in which a function is generated by software to enable the power electronics device to be used as a frequency conversion device capable of outputting the first variable frequency or the first variable voltage when the linked security authentication is established, but the present invention is not limited to this. For example, a function may be generated by software to enable the power electronics device to be used as a device other than a frequency conversion device capable of outputting the first variable frequency or the first variable voltage when the linked security authentication is established.

[0085] In the above embodiment, an example has been described in which a function is generated by software when linked security authentication based on both hardware and software is established, but the present invention is not limited to this. For example, a function may be generated by software when linked security authentication based on only one of hardware and software is established.

[0086] In the above embodiment, an example is shown in which a function is generated by software when linked security authentication is established between three devices, the control device, the power conversion device, and the motor, but the present invention is not limited to this. For example, a function may be generated by software when linked security authentication is established between two devices, the control device and the power conversion device.

[0087] In the above embodiment, the hardware-based linked security authentication is authentication based on a cable, but the present invention is not limited to this. For example, linked security authentication may be performed based on hardware other than a cable.

[0088] In the above embodiment, the software-based linked security authentication is performed by the security authentication processing unit, the motor mutual authentication processing unit, the program code authentication processing unit, and the code authentication unit, but the present invention is not limited to this. For example, the software-based linked security authentication may be performed by a unit other than the security authentication processing unit, the motor mutual authentication processing unit, the program code authentication processing unit, and the code authentication unit.

[0089] In the above embodiment, the control device, the power conversion device, and the motor all have their own unique security authentication, but the present invention is not limited to this. For example, any one or two of the control device, the power conversion device, and the motor may have their own unique security authentication. In addition, the function may be generated by software when only the linked security authentication is established, without using the unique security authentication unique to the control device, the power conversion device, and the motor.

[0090] In the above embodiment, the unique security authentication specific to the control device is authentication for starting the control device, but the present invention is not limited to this. For example, the unique security authentication specific to the control device may be authentication other than authentication for starting the control device.

[0091] In the above embodiment, the unique security authentication specific to the motor is authentication for acquiring a motor specific symbol from the motor using a PIN, but the present invention is not limited to this. For example, the unique security authentication specific to the motor may be authentication other than acquiring a motor specific symbol from the motor using a PIN.

[0092] In the above embodiment, the "load identification information" is a motor identification symbol, but the present invention is not limited to this. For example, a load identification symbol capable of identifying a load may be used instead of the motor identification symbol. In this case, an IC chip in which the load identification symbol is stored is provided inside a load device driven by a motor.

[0093] In the above embodiment, the load to which the power is supplied from the power conversion device is a motor, but the present invention is not limited to this. For example, the power conversion device may supply power to a load other than a motor.

[0094] In the above embodiment, the power conversion device functions as a frequency conversion device, but the present invention is not limited to this. For example, the power conversion device may function as a device other than a frequency conversion device. [Explanation of symbols]

[0095] 1 Control device 2. Power conversion device 3 Motor (load) 4a Cable (wiring) 40 Switch 100 Motor control system (load control system)

Claims

1. A control device; A power conversion device controlled by the control device and including a PWM circuit; a load to which power is supplied from the power conversion device, When cooperative security authentication is established by the cooperation between at least the control device and the power electronics device among the control device, the power electronics device, and the load, The power conversion device receives from the control device a program code for causing a plurality of functional blocks provided in a dedicated function unit configured by software to function; The plurality of functional blocks are configured to function according to a predetermined sequence that is stored in advance in the power conversion device based on the program code, A load control system in which the functions of the multiple functional blocks in the specified order are functions that enable the power conversion device to be used for a specified purpose, and if the linked security authentication is not established, the multiple functional blocks do not function in the specified order and the PWM circuit is operated, and the power conversion device becomes a power conversion device that can be used for a purpose other than the specified purpose based on the operation of the PWM circuit.

2. The load control system according to claim 1 , wherein the functions provided by the plurality of functional blocks in the predetermined order are functions that do not exist in the power conversion device if the joint security authentication is not established.

3. The load control system of claim 1 or 2, wherein when the linked security authentication is established, the plurality of functional blocks function in accordance with the specified order, thereby enabling the power conversion device to be used as a frequency conversion device capable of outputting a first variable frequency or a first variable voltage.

4. 4. The load control system of claim 3, wherein if the linked security authentication is not established, the plurality of functional blocks do not function according to the specified order, and the power conversion device becomes the frequency conversion device capable of outputting a second variable frequency or a second variable voltage different from the frequency conversion device capable of outputting the first variable frequency or the first variable voltage.

5. the power conversion device being usable as the frequency conversion device capable of outputting the first variable frequency or the first variable voltage when the linked security authentication is established; The load control system of claim 4, wherein the power conversion device that becomes the frequency conversion device capable of outputting the second variable frequency or the second variable voltage, which is different from the frequency conversion device capable of outputting the first variable frequency or the first variable voltage when the linked security authentication is not established, is the same power conversion device.

6. The power conversion device includes a standard function area and a dedicated function area, the standard function area includes a frequency setting unit, a standard control circuit, and a PWM circuit; the dedicated function area includes the plurality of function blocks, When the linked security authentication is not established, a desired frequency is set by the frequency setting unit, a command value of the set frequency is input to the standard control circuit, and the PWM circuit is operated so that the second variable frequency or the second variable voltage is output from the power conversion device, The load control system of claim 5, wherein when the linked security authentication is established, the PWM circuit is operated so that the first variable frequency or the first variable voltage is output from the power conversion device by the functioning of the multiple functional blocks.

7. the power conversion device includes a volatile storage means for storing generation software that is generated so that the plurality of functional blocks function in accordance with the predetermined order when the linked security authentication is established; The load control system according to any one of claims 1 to 6, wherein when the supply of power to the power conversion device is cut off, the generation software stored in the storage means is erased.

8. When the linked security authentication by the linkage between the control device, the power conversion device, and the load is established, the plurality of functional blocks function in the power conversion device. The load control system according to any one of claims 1 to 7.

9. The control device and the power conversion device are connected by wiring, which is hardware. The linked security authentication includes authenticating that communication via the wiring is enabled between the control device and the power conversion device. The load control system according to any one of claims 1 to 8.

10. the control device is configured to transmit the program code to the power converter to generate functionality that enables the power converter for a given application; The load control system of claim 9, wherein the linked security authentication includes authenticating a function generation permission signal that is output when communication via the wiring becomes possible between the control device and the power conversion device and that permits a function to be generated by the program code.

11. a switch configured by hardware that is turned on when the function creation permission signal is authenticated; The load control system of claim 10, wherein the switch is turned on when the function generation permission signal is authenticated, thereby outputting a signal from the functional block configured by software via the switch.

12. The load includes load-specific information specific to the load; The load identification information is stored in the control device and the power conversion device, The control device is configured to transmit the stored load identification information to the power conversion device, The linked security authentication includes authenticating that the load identification information stored in the power conversion device and the load identification information transmitted from the control device are consistent. A load control system as described in any one of claims 1 to 11.

13. the control device is configured to transmit the program code to the power converter to generate functionality that enables the power converter for a given application; The load control system according to any one of claims 1 to 12, wherein the linked security authentication includes authenticating the program code transmitted from the control device based on a predetermined condition.

14. At least one of the control device, the power conversion device, and the load has a unique inherent security authentication; A load control system according to any one of claims 1 to 13, wherein when the unique security authentication specific to at least one of the control device, the power conversion device, and the load is established, and the linked security authentication is established, the multiple functional blocks function in the power conversion device.

15. The load control system of claim 14 , wherein the unique security authentication unique to the control device includes a control device security authentication for activating the control device.

16. The load includes load-specific information specific to the load; The load control system according to claim 14 or 15, wherein the unique security authentication of the load includes load security authentication for obtaining the load specific information from the load using a personal identification number.

Images