Equipment Information Processing System

The system addresses security vulnerabilities in facility information processing by securely registering and transmitting device status information, preventing unauthorized access and ensuring accurate, secure notifications.

JP7702857B2Active Publication Date: 2025-07-04IDEC CORP
View PDF 3 Cites 0 Cited by

Patent Information

Application Number
JP2021190046
Authority / Receiving Office
JP · JP
Patent Type
Patents
Current Assignee / Owner
Filing Date
2021-11-24
Publication Date
2025-07-04
Estimated Expiration
2041-11-24

AI Technical Summary

Technical Problem

Existing facility information processing systems face security risks due to the potential theft of destination email addresses by malicious third parties, leading to spam and virus attacks, which compromise the integrity of notifications and device status updates.

Method used

An information processing system that includes a setting terminal for registering posting accounts and authentication information, transferring this information to a posting device, and transmitting it to a server only when specific conditions are met, ensuring secure and authorized communication and data storage.

Benefits of technology

The system enhances security by preventing unauthorized access and information theft, ensuring secure notification of device status while maintaining user convenience and accuracy.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 0007702857000001
    Figure 0007702857000001
  • Figure 0007702857000002
    Figure 0007702857000002
  • Figure 0007702857000003
    Figure 0007702857000003
Patent Text Reader

Abstract

To provide an information processing system 1 for facilities with which it is possible to improve security of a programmable display 9 that notifies a user of a state of a device 7.SOLUTION: There is provided an information processing system 1 for facilities characterized by comprising: a PLC 8 for controlling operation of a device 7, a programmable display 9 which is connected to an SNS server 3, and a terminal 5 for setup which is communicably connected to the programmable display 9. The terminal 5 for setup is constituted to accept operation for registering an access token generated by the SNS server 3 and operation for associating the access token with a posting account and posting information, as well as transfer the posting information and the access token to the programmable display 9. The programmable display 9 stores the posting information and the access token, as well as transmit the posting information and the access token in association with each other, to the SNS server 3 when state information that indicates a state of the device 7 satisfies a prescribed condition.SELECTED DRAWING: Figure 10
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to an information processing system for facilities that includes, for example, a programmable logic controller for controlling the operation of a device and transmits various types of information according to the state of the device to a server via a communication line.

Background Art

[0002] Facilities such as production facilities and elevators are provided with information processing devices for facilities such as a programmable logic controller for controlling the operation of a device and a programmable display for displaying the state of the device detected by the programmable logic controller.

[0003] Recently, in information processing devices for facilities, a technology has been proposed in which a programmable logic controller or a programmable display is connected to a server via a communication line and notifies the state of a device to terminals owned by maintenance personnel and on-site workers (see Patent Document 1).

[0004] For example, in Patent Document 1, when a programmable display detects an abnormality of a device, an e-mail is sent from the programmable display to a predetermined destination to notify the abnormality of the device to the terminals of maintenance personnel and on-site workers.

[0005] By the way, in Patent Document 1, the programmable display stores in advance a destination e-mail address that is the predetermined destination. Therefore, if the destination e-mail address is stolen by, for example, a third party with malicious intent, there is a risk that spam e-mails or e-mails with computer viruses attached will be sent to the destination e-mail address.

[0006] Then, in Patent Document 1, since spam emails are mixed in the emails obtained on the terminals of maintenance staff and on-site workers, there is a risk that the maintenance staff and on-site workers may overlook the necessary notifications respectively. Furthermore, in Patent Document 1, for example, the terminals of maintenance staff and on-site workers may be damaged by computer viruses.

Prior Art Documents

Patent Documents

[0007]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0008] In view of the above problems, an object of the present invention is to provide a facility information processing system capable of improving the security of a posting device that notifies the state of a device.

Means for Solving the Problems

[0009] The present invention relates to an information processing system for facilities, which is connected via a communication line to a programmable logic controller that controls the operation of a device and detects the state of the device, a server that provides a service of receiving and storing posting information posted in association with a posting account and delivering the posting information of the posting account, which has been permitted to be viewed by a specific user owned by the administrator of the posting account, to a user terminal owned by the specific user, a posting device, a display unit that displays various information, and an operation reception unit that receives various operations by an administrator, and includes a setting terminal that is communicably connected to the posting device. The setting terminal is configured to receive at least a registration operation of a posting account, a registration / editing operation of posting information, a registration operation of authentication information generated by the server based on the posting account, and an operation of associating the authentication information with the posting account and the posting information, and transfer the associated posting information and authentication information to the posting device. The posting device is configured to store the posting information and the authentication information acquired from the setting terminal, and transmit the posting information and the authentication information in association with each other to the server when state information indicating the state of the device acquired from the programmable logic controller satisfies a predetermined condition.

[0010] The state of the above-mentioned device refers to, for example, the presence or absence of an abnormality of the device, the number of times the device has operated, or the elapsed time since the device started operating. The above-mentioned posting account is an account for connecting to a server, which is composed of a login name and a password.

[0011] The above-mentioned authentication information refers to, for example, an access token, an API key, or information obtained by encrypting a posting account. The above-mentioned service refers to, for example, a social networking service or a service for transmitting various information among users who have been permitted to view.

[0012] According to the present invention, the facility information processing system can improve the security of the posting device that notifies the state of the device. Specifically, since the posting information and the authentication information received for setting registration at the setting terminal are transferred to the posting device, the facility information processing system can eliminate the need to provide the posting device with means for receiving various operations of an administrator who manages, for example, the posting account.

[0013] As a result, the facility information processing system can prevent, for example, a registration editing operation of the posting device by a malicious third party in a state where the setting terminal is not connected. Therefore, the facility information processing system can prevent falsification and abuse of the posting information and the authentication information.

[0014] Furthermore, since the posting device is configured to transmit the posting information and the authentication information to the server in association with each other, the facility information processing system can eliminate the need for the posting device to store information that can identify the user, such as the destination email address.

[0015] Therefore, the facility information processing system can prevent information that can identify the user, such as the destination email address, from being stolen by a malicious third party. Therefore, the facility information processing system can improve the security of the posting device that notifies the state of the device.

[0016] As an aspect of the present invention, the setting terminal is configured to transfer, as the authentication information, an access token generated by the server based on the posting account to the posting device together with the posting information, and the posting device includes storage means for storing the posting information and the access token, API storage means for storing an API key for using the service in a confidential state, and transmission means for transmitting the access token and the API key in association with the posting information to the server.

[0017] According to this configuration, since the API key is stored in a confidential state, the posting device can prevent the API key from being known to a malicious third party. Therefore, for example, even if an access token is known to a malicious third party, the facility information processing system can prevent unauthorized posting using a terminal other than the posting device.

[0018] In addition, for example, since the login name and password constituting the posting account are not stored, the posting device can prevent the login name and password from leaking to the outside. Therefore, the facility information processing device can prevent the posting account from being misused by a malicious third party. As a result, the facility information processing system can further improve the security of the posting device that notifies the state of the device.

[0019] Also, as an aspect of the present invention, the posting device includes storage means for storing in association the authentication information and a plurality of the posting information representing the state of the device as a character string, state acquisition means for acquiring the state information indicating the state of the device from the programmable logic controller, extraction means for extracting, when the state information satisfies a predetermined condition, the posting information corresponding to the state of the device indicated by the state information and at least one of the authentication information associated with the posting information from the storage means, and transmission means for transmitting the posting information and the authentication information extracted by the extraction means to the server in association with each other.

[0020] According to this configuration, the facility information processing system can improve the convenience of the user who receives the notification regarding the state of the device without impairing the security of the posting device that notifies the state of the device.

[0021] Specifically, when the state information indicating the state of the device satisfies a predetermined condition, the posting device can determine the posting information and the authentication information according to the state of the device because the posting information corresponding to the state of the device and at least one of the authentication information associated with the posting information are extracted by the extraction means.

[0022] At this time, since the authentication information is generated in advance for each posting account, the posting device determines the posting account for posting the posting information according to the state of the device. That is, the posting device can distribute the posting destination of the posting information according to the state of the device.

[0023] And since posting information other than the posting accounts permitted for viewing is not displayed on the user terminal, the posting device can cause the user terminal to receive only the notifications regarding the state of the device desired by the user. Thereby, the facility information processing system can improve the convenience of the user who receives the notification regarding the state of the device without impairing the security of the posting device that notifies the state of the device.

[0024] Also, as an aspect of the present invention, the posting device may be a programmable display connected to the programmable logic controller. According to this configuration, the facility information processing system can notify the user of the state of the device via the user terminal only by replacing, for example, an existing programmable display.

[0025] Also, as an aspect of the present invention, the posting device may be integrally provided in the programmable logic controller. According to this configuration, since the posting device is provided in the programmable logic controller, the facility information processing device can notify the user of the state of the device via the user terminal only by replacing, for example, an existing programmable logic controller.

[0026] Also, as an aspect of the present invention, the posting device may be a gateway device connected to the programmable logic controller. According to this configuration, the facility information processing device can notify the user of the state of the device via the user terminal only by replacing, for example, an existing gateway device.

[0027] As another aspect of the present invention, it may include a server that provides the service, the server including: authentication information generation means for generating authentication information based on the posting account; account storage means for storing the posting account and the authentication information in association with each other; posting storage means for storing, in time series, the posting information acquired from the posting device in association with the posting account corresponding to the authentication information when the authentication information acquired from the posting device matches the authentication information in the account storage means; and distribution means for distributing, in time series order, the posting information associated with the posting account for which browsing is permitted to the user terminal when a browsing request for the posting information of the posting account for which browsing is permitted is received from the user terminal.

[0028] According to this configuration, since the server stores the posting information acquired from the posting device in time series and distributes the posting information in time series order, the facility information processing system can display the state of the device in time series order on the user terminal.

[0029] And since the user who operates the user terminal can know the changes in the state of the device in time series, the user can easily and more accurately grasp the state of the device. Thereby, the facility information processing system can further improve the convenience of the user who receives the notification regarding the state of the device.

[0030] As another aspect of the present invention, the server that provides the service may be a server that provides a social networking service set by an administrator who manages the posting account for a user who is permitted to browse the posting information of the posting account.

[0031] According to this configuration, the facility information processing system can notify the user of the device status by using an existing social networking service. At this time, a user who has used the existing service can know the device status by using the familiar service.

[0032] Furthermore, since the users are restricted by the administrator, the facility information processing system can prevent an unspecified number of users who use the existing service from knowing the device status. Therefore, the facility information processing system can ensure the security of the posting device that notifies the device status and further improve the convenience for the user.

Advantages of the Invention

[0033] According to the present invention, it is possible to provide a facility information processing system capable of improving the security of a posting device that notifies the device status.

Brief Description of the Drawings

[0034]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Embodiments for Carrying Out the Invention

[0035] One embodiment of this invention will be described below with reference to the accompanying drawings. In this embodiment, an equipment information processing system 1 that notifies the state of a device 7 controlled by a programmable logic controller 8 to a user terminal 4 via a social networking service will be described with reference to FIGS. 1 to 4.

[0036] Note that FIG. 1 shows a configuration diagram of the equipment information processing system 1, FIG. 2 shows a block diagram of the internal configuration of the equipment information processing system 1, FIG. 3 shows a schematic diagram of an account management table 55a, and FIG. 4 shows an explanatory diagram explaining a posting information table 55b, 95b, and an authentication information table 95a. Furthermore, FIG. 4(a) shows a schematic diagram of the posting information tables 55b, 95b, and FIG. 4(b) shows a schematic diagram of the authentication information table 95a.

[0037] As shown in FIG. 1, the equipment information processing system 1 of this embodiment includes an SNS server 3 connected to a communication line 2, a user terminal 4 and a setting terminal 5 that can be connected to the SNS server 3 via the communication line 2, and an equipment information processing device 6 provided integrally with the production equipment.

[0038] First, the SNS server 3 is a server installed by an operator that provides a social networking service. This social networking service is, for example, a service in which users who have acquired an account post messages, and other users who have the account view the posted messages and comment on the messages, enabling communication between users.

[0039] Furthermore, the social networking service preferably has a function of restricting the users who can publicly post messages so that messages can be made public to specific users. In this embodiment, the social networking service is an existing service such as Twitter (registered trademark) or LINE (registered trademark).

[0040] The SNS server 3 that provides such a service has a function of storing, as posting information, a message transmitted from a terminal in which an account used for posting (hereinafter referred to as a posting account) is registered, in association with the posting account.

[0041] Furthermore, when a request is made from a terminal in which an account used for viewing (hereinafter referred to as a viewing account) is registered to view the posts of a posting account, the SNS server 3 has a function of delivering the posting information posted from the posting account to the terminal in which the viewing account is registered. In addition, the SNS server 3 has a function of permitting the disclosure of posting information to a specific viewing account by a setting operation by an administrator who manages the posting account.

[0042] As shown in FIG. 2, this SNS server 3 is composed of a line connection unit 31 connected to the communication line 2, a storage unit 32 that stores various types of information, a server control unit 33 that controls these operations, and the like. Specifically, the line connection part 31 of the SNS server 3 is composed of, for example, a wired LAN module, etc., and has a function of connecting to the communication line 2 and a function of transmitting and receiving various information via the communication line 2.

[0043] Also, the storage part 32 of the SNS server 3 is composed of a hard disk, etc., and has a function of writing and storing various information and a function of reading out various information. A program for realizing the social networking service is stored in this storage part 32.

[0044] Furthermore, as shown in FIG. 2, the storage part 32 stores login name information 34 set and registered by users who use the social networking service, password information 34a associated with the login name information 34, user name information 34b, posting information 34c, access token 34d, browsing target information 34e, and public setting information 34f.

[0045] Here, the login name information 34 is information indicating the login name used for logging in to the social networking service, and is unique identification information for identifying users who use the social networking service. This login name information constitutes a user-specific account in combination with the password information 34a. Note that the login name information 34 is composed of a character string arbitrarily set by the user of the social networking service.

[0046] Also, the password information 34a is information indicating the password used for logging in to the social networking service, and constitutes a user-specific account in combination with the user name information 34b. This password information 34a is composed of a character string arbitrarily set by the user of the social networking service.

[0047] The user name information 34b is a name (so-called nickname) used as the name of the user on the social networking service, and is composed of a character string arbitrarily set by the user. The post information 34c is information indicating the message posted by the user, and is composed of a character string, an image, a video, etc.

[0048] The access token 34d is authentication information generated by the SNS server 3 in place of the login name and password for authenticating the user, and is composed of a random character string. The access token 34d is generated by the SNS server 3 when there is a request from the user.

[0049] The viewing target information 34e is registration information listing other users who want to view the post information, and information indicating the user names of other users is registered. This viewing target information 34e is set by the user. The public setting information 34f has registered information indicating whether to publicly disclose the post information 34c to a specific user and the user name indicating the specific user to be publicly disclosed. This public setting information 34f is set by the user.

[0050] The server control unit 33 of the SNS server 3 is composed of hardware such as a CPU and a memory, and software such as a program and data. This server control unit 33 has a processing function related to the exchange of various information via the communication line 2, a processing function related to the exchange of various signals between the line connection unit 31 and the storage unit 32, and a function of controlling the operations of each unit connected via a predetermined bus.

[0051] The user terminal 4 is a mobile terminal owned by a user who uses the social networking service. In this embodiment, the maintenance personnel in charge of maintaining the production equipment provided with the facility information processing device 6, the on-site workers using the production equipment, and the production management personnel in charge of managing the production quantity, etc. are used as users.

[0052] As shown in FIG. 2, the user terminal 4 includes a line connection unit 41, a storage unit 42, an operation display unit 43, and a control unit 44 that controls the operations of these components. Specifically, the line connection unit 41 of the user terminal 4 is composed of, for example, a wireless communication module, and has a function of connecting to the communication line 2 and a function of transmitting and receiving various information via the communication line 2.

[0053] The storage unit 42 of the user terminal 4 is composed of, for example, a hard disk or a non-volatile memory, and has a function of writing and storing various information and a function of reading out various information. Furthermore, the storage unit 42 stores a program for using the social networking service and the like.

[0054] The program for using this social networking service is executed by the control unit 44, and realizes a function of establishing a connection with the SNS server 3, a function of transmitting a message created by the user to the SNS server, and a function of browsing messages of other users.

[0055] The operation display unit 43 of the user terminal 4 is composed of, for example, a touch panel, and has a function of displaying various information to the user, a function of receiving various operations of the user, and a function of outputting information indicating the received operations to the control unit 44.

[0056] The control unit 44 of the user terminal 4 is composed of hardware such as a CPU and a memory, and software such as programs and data. This control unit 44 has a processing function related to the exchange of various signals with the line connection unit 41, the storage unit 42, and the operation display unit 43, a function of processing various information acquired via the communication line 2, and a function of controlling the operations of each unit connected via a predetermined bus.

[0057] The setting terminal 5 is a terminal owned by the administrator of the facility information processing device 6, and is a terminal for performing various operation settings of the facility information processing device 6 described later and various settings necessary for the facility information processing device 6 to use social networking services.

[0058] This setting terminal 5 is connected to the facility information processing device 6 via a transfer cable C (see FIGS. 1 and 2), and is configured to be able to transfer various information set by the administrator to the facility information processing device 6. Note that the setting terminal 5 is connected to the facility information processing device 6 only when transferring various information to the facility information processing device 6.

[0059] As shown in FIG. 2, such a setting terminal 5 includes a line connection unit 51 connected to the communication line 2, a terminal connection unit 52 connected to the facility information processing device 6, a display unit 53 for displaying various information, an operation reception unit 54 for receiving various operations by the administrator, a storage unit 55 for storing various information, and a setting terminal control unit 56 for controlling these operations.

[0060] Specifically, the line connection unit 51 of the setting terminal 5 is composed of, for example, a wired LAN module or the like, and has a function of connecting to the communication line 2 and a function of transmitting and receiving various information via the communication line 2. In addition, the terminal connection unit 52 of the setting terminal 5 is composed of a serial bus such as RS232C or USB, and has a function of connecting to the facility information processing device 6 and a function of transmitting and receiving various information to and from the facility information processing device 6.

[0061] In addition, the display unit 53 of the setting terminal 5 is composed of, for example, a liquid crystal display or the like, and has a function of displaying various information according to an instruction from the setting terminal control unit 56. In addition, the operation reception unit 54 of the setting terminal 5 is composed of, for example, a keyboard, a mouse, a touch pad, or a touch panel, and has a function of receiving various operations by the administrator and a function of outputting information indicating the received operations to the setting terminal control unit 56.

[0062] In addition, the storage unit 55 of the setting terminal 5 is composed of a hard disk or a non-volatile memory, etc., and has a function of writing and storing various information and a function of reading out various information. In this storage unit 55, there are stored programs for realizing a function of creating an operation sequence and a screen configuration of the facility information processing device 6 (PLC 8 and programmable display 9 described later) and a function of outputting the created content as a control program.

[0063] Furthermore, as shown in FIG. 2, the storage unit 55 stores an account management table 55a for managing accounts of social networking services and a posting information table 55b for managing messages to be posted. In addition, the storage unit 55 corresponds to the API of the SNS server 3 and stores the API key 55c acquired in advance from the SNS server 3 in a confidential state.

[0064] As an example, the account management table 55a is composed of a number column in which a management number is registered, a user name column, a login name column, a password column, and an access token column, and the values in the user name column, login name column, password column, and access token column are registered in association with the value in the number column.

[0065] More specifically, the same user name as the user name information 34b of the SNS server 3 is registered in the user name column. The same login name as the login name information 34 of the SNS server 3 associated with the user name information 34b is registered in the login name column.

[0066] The same password as the password information 34a of the SNS server 3 associated with the login name information 34 is registered in the password column. The same access token as the access token 34d of the SNS server 3 associated with the login name information 34 is registered in the access token column.

[0067] On the other hand, in the contribution information table 55b, messages corresponding to the states of the device 7 described later, contribution destinations of the messages, and the like are registered. More specifically, as shown in Fig. 4(a), the contribution information table 55b is composed of a device column, a trigger column, a contribution text column, and a token number column. The values in the trigger column, the contribution text column, and the token number column are registered in association with the value in the device column. Note that the value in the number column of the account management table 55a is registered in the token number column of the contribution information table 55b.

[0068] After being set and registered in the setting terminal 5, this contribution information table 55b is transferred to the facility information processing device 6 and stored as the contribution information table 95b. Therefore, since the contribution information table 55b is the same as the contribution information table 95b of the facility information processing device 6 described later, it will be described in detail later.

[0069] In addition, the facility information processing device 6 has a function of controlling the operation of the device 7 such as a motor based on the signals output by the device 7 such as a sensor or a flow meter, and a function of displaying the state of the device 7. Furthermore, the facility information processing device 6 is connected to the communication line 2 and is configured to be able to post a message corresponding to the state of the device 7 to the SNS server 3.

[0070] As shown in Figs. 1 and 2, this facility information processing device 6 is composed of a plurality of devices 7 such as sensors and motors, a programmable logic controller (hereinafter referred to as PLC) 8 electrically connected to the device 7, and a programmable display 9 communicably connected to the PLC 8.

[0071] Specifically, the device 7 of the facility information processing device 6 is composed of a device connected to the input part (not shown) of the PLC 8, a device connected to the output part (not shown) of the PLC 8, or a device provided inside the PLC 8 or a memory for storing information.

[0072] For example, the device 7 includes various sensors, flow meters, air volume meters, switches, motors, relay coils, indicator lights, internal relays, timers, data registers, etc. This device 7 outputs not only signals related to operations but also signals indicating, for example, abnormalities of the device 7.

[0073] Also, the PLC 8 of the equipment information processing device 6 operates according to the control program created and transferred by the administrator using the setting terminal 5, and has a function of acquiring the signals output by the device 7 and a function of controlling the operation of the device 7.

[0074] Furthermore, the PLC 8 has a function of outputting, to the programmable display 9, as state information indicating the state of the device 7, information indicating the type of the device 7 from which the signal is acquired and information indicating the content of the signal.

[0075] Although detailed illustration is omitted, this PLC 8 is composed of an input section and an output section to which the device 7 is connected, an internal memory for storing the signals acquired from the device 7, a storage section for storing the control program, etc., and a control section for controlling the operations thereof.

[0076] Also, the programmable display 9 of the equipment information processing device 6 operates according to the control program created and transferred by the administrator using the setting terminal 5, and has a gateway function for connecting to the communication line 2, a function of communicating with the setting terminal 5 and the PLC 8, and a function of displaying the state of the device 7.

[0077] As shown in FIG. 2, this programmable display 9 includes a PLC input section 91 to which the PLC 8 is connected, a line connection section 92 connected to the communication line 2, a terminal connection section 93 to which the setting terminal 5 is connected, an operation display section 94 and a storage section 95, and a display control section 96 for controlling the operations thereof.

[0078] Specifically, the PLC input section 91 of the programmable display 9 is configured by a serial bus such as RS232C or USB, and has a function of connecting to the PLC 8 and a function of transmitting and receiving various information with the PLC 8. In addition, the line connection section 92 of the programmable display 9 is configured by a wired LAN module or the like, and has a function of connecting to the communication line 2 and a function of transmitting and receiving various information via the communication line 2.

[0079] In addition, the terminal connection section 93 of the programmable display 9 is configured by a serial bus such as RS232C or USB, and has a function of connecting to the setting terminal 5 via the transfer cable C and a function of transmitting and receiving various information with the setting terminal 5.

[0080] In addition, the operation display section 94 of the programmable display 9 is configured by a touch panel or the like, and has a function of displaying a screen indicating the state of the device 7, a function of accepting an operation for changing the operation setting, and a function of outputting information indicating the accepted operation to the display control section 96.

[0081] In addition, the storage section 95 of the programmable display 9 is configured by a hard disk or a non-volatile memory or the like, and has a function of writing and storing various information and a function of reading out various information.

[0082] Furthermore, as shown in FIG. 2, the storage section 95 stores the authentication information table 95a and the posting information table 95b transferred from the above-described setting terminal 5, and the error log 95c in which error information generated between the SNS server 3 is registered. Note that the storage section 95 stores the posting information table 55b transferred from the setting terminal 5 as the posting information table 95b.

[0083] Specifically, as shown in FIG. 4(b), the authentication information table 95a is composed of a token number column in which a number as a management number is registered and an access token column in which an access token is registered, and the value in the token number column and the value in the access token column are registered in association with each other.

[0084] In the token number column, the management number registered in the number column of the account management table 55a of the setting terminal 5 is registered as the token number. In the access token column, the access token registered in the token number column of the account management table 55a of the setting terminal 5 is registered.

[0085] On the other hand, the post information table 95b registers the conditions, messages, and destinations for sending messages according to the state of the device 7 to the SNS server 3. As shown in FIG. 4(a), this post information table 95b is composed of a device column, a trigger column, a post text column, and a token number column, similar to the post information table 55b of the setting terminal 5. The values in the trigger column, the post text column, and the token number column are registered in association with the value in the device column.

[0086] More specifically, in the device column, the type of the device 7 that is a condition for sending a message is registered. For example, as shown in FIG. 4(a), in the device column, "emergency stop switch" is registered as the type of the device 7 obtained from the PLC 8.

[0087] In the trigger column, the content of the signal of the device 7 that is a condition for sending a message is registered. For example, as shown in FIG. 4(a), in the device column, "ON signal" is registered as the content of the signal of the "emergency stop switch".

[0088] In the post text column, when the device 7 in the device column is in the state of the trigger column, the message to be sent to the SNS server 3 is registered as post information. This post text column is set and registered by the administrator with a message composed of a fixed-form text or a message including a replacement string replaced according to the state of the device 7.

[0089] For example, in the posting text field, as shown in Fig. 4(a), a message with a fixed-form string "The emergency stop button has been pressed. Please check immediately." is registered.

[0090] Also, in the posting text field, as shown in Fig. 4(a), there is a replacement string "$DR$" that is replaced with a numerical value indicating the production quantity stored in the data register, and a message "Yesterday's production quantity was $DR$ units." composed of the fixed-form strings "Yesterday's production quantity was" and "units." is registered.

[0091] In the token number field, the token number of the access token that is the posting destination of the message is registered. More specifically, in the token number field, the management number registered in the number field of the account management table 55a of the setting terminal 5, that is, the token number in the token number field of the authentication information table 95a is registered.

[0092] Also, the display control unit 96 of the programmable display 9 is composed of hardware such as a CPU and a memory, and software such as programs and data. This display control unit 96 has a processing function related to the exchange of various signals with the PLC input unit 91, the line connection unit 92, the terminal connection unit 93, the operation display unit 94, and the storage unit 95, a function of processing various information acquired via the communication line 2, and a function of controlling the operations of each unit connected via a predetermined bus.

[0093] Furthermore, as shown in Fig. 2, the display control unit 96 stores, in a confidential state, an API key 96a that corresponds to the API of the SNS server 3 and is the same as the API key 55c stored in the setting terminal 5. This API key 96a is acquired in advance from the SNS server 3 and registered in, for example, the source of the firmware or the ROM.

[0094] Next, in the equipment information processing system 1 having the above-described configuration, the processing operation related to the creation of the account management table 55a using the setting terminal 5 will be described with reference to Figs. 5 to 7. Note that the processing operations related to the creation of an account and the acquisition of an access token, which will be described later, differ depending on the social networking service used. Therefore, an example will be described here.

[0095] Also, FIG. 5 shows a schematic diagram of the menu screen 100 displayed on the setting terminal 5, FIG. 6 shows a schematic diagram of the account management screen 110 displayed on the setting terminal 5, and FIG. 7 shows a sequence diagram of the processing operation related to the creation of the account management table 55a.

[0096] When the administrator operates the setting terminal 5, the setting terminal control unit 56 of the setting terminal 5 displays a menu screen 100 for receiving various settings on the display unit 53. For example, on the menu screen 100, as shown in FIG. 5, there are a facility selection column 101 for selecting a target production facility, a PLC setting button 102 for starting various settings related to the control of the PLC 8, a display setting button 103 for starting various settings related to the control of the programmable display 9, and a transfer button 104 for collectively transferring the settings related to the PLC 8 and the programmable display 9.

[0097] Furthermore, on the menu screen 100, as shown in FIG. 5, there are an account management button 105 for starting the management of an account, a message management button 106 for starting the management of messages, and a transfer button 107 for collectively transferring the settings related to the account and messages to the programmable display 9. In addition, on the menu screen 100, as shown in FIG. 5, there is a button 108 for closing the menu screen 100.

[0098] On the menu screen 100, when the administrator presses the account management button 105, the setting terminal control unit 56 of the setting terminal 5 displays an account management screen 110 for managing the accounts used in the facility information processing device 6 on the display unit 53, as shown in FIG. 6.

[0099] For example, on the account management screen 110, as shown in FIG. 6, there are displayed a new registration button 111 for newly registering an account and an SNS link button 112 for obtaining an access token necessary for linking with a social networking service. Furthermore, on the account management screen 110, as shown in FIG. 6, there are displayed a list display section 113 in which the information of the account management table 55a is shown and a button 114 for closing the account management screen 110.

[0100] On the account management screen 110, when the administrator presses the new registration button 111, the setting terminal control section 56 of the setting terminal 5, as shown in FIG. 7, for example, opens a web browser and transmits request information for requesting a new registration screen for newly registering an account and the API key 55c to the SNS server 3 via the communication line 2 (step S201).

[0101] The server control section 33 of the SNS server 3, as shown in FIG. 7, when obtaining the request information and the API key 55c from the setting terminal 5, permits communication with the setting terminal 5 via the API of the SNS server 3 using the API key 55c obtained from the setting terminal 5. After that, the server control section 33, as shown in FIG. 7, transmits new registration screen information showing a new registration screen for an account to the setting terminal 5 as response information (step S202).

[0102] The setting terminal control section 56 of the setting terminal 5, as shown in FIG. 7, when obtaining response information from the SNS server 3, displays a new registration screen (not shown) for an account on the display section 53 via the web browser (step S203).

[0103] After that, the administrator inputs a login name, a password, and a user name according to the guidance of the new registration screen displayed on the display section 53 and presses a registration button (not shown). At this time, the administrator simultaneously makes a setting to publicly disclose the posted message only to specific users.

[0104] Then, when the administrator presses the registration button (not shown), the setting terminal control unit 56 of the setting terminal 5 transmits the login name, password, user name, and setting information that is only publicly available to specific users as input information to the SNS server 3 (step S204).

[0105] As shown in FIG. 7, when the server control unit 33 of the SNS server 3 acquires the input information from the setting terminal 5, it stores the acquired input information in the storage unit 32 (step S205). Specifically, the server control unit 33 associates the acquired login name with the login name information 34, the acquired password with the password information 34a, and the acquired user name with the user name information 34b, and stores the password information 34a and the user name information 34b in the storage unit 32 in association with the login name information 34.

[0106] Furthermore, the server control unit 33 stores information indicating settings that are only publicly available to specific users as public setting information 34f in the storage unit 32 in association with the login name information 34. After that, as shown in FIG. 7, the server control unit 33 transmits a registration completion notification indicating that a new account registration has been accepted to the setting terminal 5.

[0107] As shown in FIG. 7, when the setting terminal control unit 56 of the setting terminal 5 acquires the registration completion notification from the SNS server 3, it registers the user name, login name, and password in the account management table 55a (step S206). At this time, when the administrator inputs the user name, login name, and password into the list display unit 113 of the account management screen 110, they are registered in the account management table 55a.

[0108] After that, when the administrator presses the SNS link button 112, the setting terminal control unit 56 transmits request information for requesting a login screen to the SNS server 3 via the communication line 2 (step S207). When the server control unit 33 of the SNS server 3 acquires request information from the setting terminal 5, it transmits login screen information showing a login screen as response information to the setting terminal 5 (step S208).

[0109] When the setting terminal control unit 56 of the setting terminal 5 acquires response information from the SNS server 3, it displays the acquired login screen (not shown) on the display unit 53 via a web browser (step S209). Note that on this login screen, for example, a field for entering a login name, a field for entering a password, and a login button for logging in to the SNS server 3 are displayed.

[0110] When the administrator enters a login name and password and presses the login button, the setting terminal control unit 56 of the setting terminal 5 transmits the login name and password as login information to the SNS server 3 as shown in FIG. 7.

[0111] When the server control unit 33 of the SNS server 3 acquires login information from the setting terminal 5, it authenticates the account based on the login information and transmits cooperation screen information for SNS cooperation to the setting terminal 5 (step S210).

[0112] When the setting terminal control unit 56 of the setting terminal 5 acquires cooperation screen information from the SNS server 3, it displays the cooperation screen (not shown) on the display unit 53 (step S211). On this cooperation screen, various setting buttons for linking the programmable display 9 and the social networking service are displayed.

[0113] When the administrator presses a request button (not shown) for requesting an access token according to the guidance on the cooperation screen, the setting terminal control unit 56 of the setting terminal 5 transmits token request information for requesting the SNS server 3 to provide an access token to the SNS server 3 as shown in FIG. 7.

[0114] As shown in FIG. 7, when the server control unit 33 of the SNS server 3 acquires token request information from the setting terminal 5, it starts the access token generation process (step S212). After generating an access token based on the login name, it stores the access token in the storage unit 32 in association with the login name information 34. Furthermore, as shown in FIG. 7, the server control unit 33 transmits the generated access token to the setting terminal 5 via the communication line 2.

[0115] As shown in FIG. 7, when the setting terminal control unit 56 of the setting terminal 5 acquires an access token from the SNS server 3, it displays a notification screen (not shown) of the access token on the display unit 53 via a web browser, enabling the administrator to confirm the access token (step S213).

[0116] After that, when the access token is input by the administrator to the list display unit 113 of the account management screen 110, the setting terminal control unit 56 registers it in the account management table 55a as shown in FIG. 7 (step S214).

[0117] In this way, the facility information processing system 1 acquires a new registration of an account and an access token generated based on the account, and registers them in the account management table 55a of the setting terminal 5.

[0118] Next, the processing operation of the facility information processing system 1 related to the creation of the post information table 55b and the transfer to the programmable display 9 will be described with reference to FIGS. 8 and 9. Note that FIG. 8 shows a sequence diagram of the processing operation related to the creation of the post information table 55b and the transfer to the programmable display 9, and FIG. 9 shows a schematic diagram of the message management screen 120 displayed on the setting terminal 5.

[0119] When the menu screen 100 (see FIG. 5) is displayed on the display unit 53 of the setting terminal 5 and the administrator presses the message management button 106, the setting terminal control unit 56 of the setting terminal 5 displays the message management screen 120 on the display unit 53 as shown in FIG. 8 (step S221).

[0120] For example, as shown in FIG. 9, the message management screen 120 includes a list display unit 121 that displays the contents registered in the posting information table 55b, a device column 122 for selecting the device 7, a trigger column 123 for selecting a trigger for posting a message, a posting destination selection column 124 for selecting an account that is the posting destination of the message, and a posting text column 125 for inputting the message.

[0121] Furthermore, as shown in FIG. 9, the message management screen 120 includes a registration button 126 for registering a message or the like in the posting information table 55b, and a button 127 for closing the message management screen 120.

[0122] The device column 122, the trigger column 123, the posting destination selection column 124, and the posting text column 125 are used for new registration or when editing a part of the contents of the posting information table 55b displayed in the list display unit 121.

[0123] Returning to step S221 in FIG. 8, after the device column 122, the trigger column 123, the posting destination selection column 124, and the posting text column 125 are input by the administrator and the registration button 126 is pressed, the setting terminal control unit 56 registers the input contents in the posting information table 55b and updates the list display unit 121 (step S222).

[0124] When the administrator confirms that the list display unit 121 of the message management screen 120 has been updated, after connecting the programmable display 9 and the setting terminal 5 with the transfer cable C, the administrator operates the setting terminal 5 to display the menu screen 100 on the display unit 53 again.

[0125] After that, when the transfer button 107 on the menu screen 100 is pressed by the administrator, the setting terminal control unit 56 starts the transfer process as shown in FIG. 8 (step S223), extracts the management number and the access token in association from the account management table 55a, and generates the authentication information table 95a. Furthermore, the setting terminal control unit 56 transfers the post information table 55b read from the storage unit 55 and the generated authentication information table 95a to the programmable display 9 via the transfer cable C.

[0126] At this time, as shown in FIG. 8, the display control unit 96 of the programmable display 9 stores the post information table 55b acquired from the setting terminal 5 as the post information table 95b in the storage unit 95, and stores the authentication information table 95a in association with the post information table 95b in the storage unit 95 (step S224).

[0127] Note that after the transfer to the programmable display 9 is completed, the administrator removes the transfer cable C and the setting terminal 5 from the programmable display 9. In this way, the facility information processing system 1 stores the post information table 95b and the authentication information table 95a in the programmable display 9.

[0128] Next, the processing operation of the facility information processing system 1 related to posting a message to the SNS server 3 will be described with reference to FIGS. 10 and 11. Note that FIG. 10 shows a sequence diagram of the processing operation related to posting a message, and FIG. 11 shows a flowchart of the processing operation of the posting process.

[0129] First, when the power of the production facility is turned on, the PLC 8 and the programmable display 9 start their respective processing operations. Specifically, when the power of the production facility is turned on, the PLC 8 outputs a control signal to the device 7 to start the operation of the device 7, and starts acquiring the signal output by the device 7.

[0130] At this time, as shown in FIG. 10, based on the signal from device 7, PLC 8 transmits information indicating the type of device 7 and information indicating the content of the signal to programmable display 9 as status information indicating the status of device 7 (step S231).

[0131] Also, when the power of the production facility is turned on, as shown in FIG. 10, the display control unit 96 of the programmable display 9 starts a posting process of transmitting a message according to the status of device 7 to the SNS server 3 (step S232).

[0132] When starting the posting process, the display control unit 96 of the programmable display 9 determines whether status information has been acquired from PLC 8 as shown in FIG. 11 (step S241). When status information has not been acquired from PLC 8 (step S241: No), the display control unit 96 acquires status information from PLC 8 or waits for processing until the power of the production facility is turned off as shown in FIG. 11.

[0133] On the other hand, when status information has been acquired from PLC 8 (step S241: Yes), the display control unit 96 determines whether the acquired status information is trigger information that becomes a trigger for transmitting a message (step S242).

[0134] Specifically, the display control unit 96 calls the posting information table 95b from the storage unit 95 and compares and references whether the combination of the type of device 7 corresponding to the acquired status information and the content of the signal is registered in the posting information table 95b.

[0135] And if the combination of the type of device 7 corresponding to the status information and the content of the signal is registered in the posting information table 95b, the display control unit 96 determines that the acquired status information is trigger information.

[0136] On the other hand, if the combination of the type of device 7 corresponding to the status information and the content of the signal is not registered in the post information table 95b, the display control unit 96 determines that the acquired status information is not trigger information.

[0137] In step S242 of FIG. 11, when the acquired status information is not trigger information (step S242: No), the display control unit 96 returns the process to step S241 as shown in FIG. 11. On the other hand, when the acquired status information is trigger information (step S242: Yes), the display control unit 96 extracts the message corresponding to the status information from the post information table 95b (step S243).

[0138] For example, when the status information is a combination of "emergency stop switch" and "ON signal", the display control unit 96 extracts the message "The emergency stop button has been pressed. Please check immediately." from the post information table 95b.

[0139] Thereafter, the display control unit 96 determines whether the extracted message contains a replacement string (step S244). When the message contains a replacement string (step S244: Yes), the display control unit 96 replaces the replacement string of the extracted message with a string based on the status information (step S245), and proceeds to step S246.

[0140] For example, when the status information is a combination of "timer" and "every 24 hours", the display control unit 96 replaces the "$DR$" in the message "Yesterday's production quantity was $DR$ units." with the numerical value indicating the production quantity stored in the data register.

[0141] When the replacement of the replacement string is completed in step S245, or when the message does not contain a replacement string in step S244 (step S244: No), the display control unit 96 acquires the access token corresponding to the status information based on the authentication information table 95a and the post information table 95b (step S246).

[0142] For example, when the status information is a combination of "emergency stop switch" and "ON signal", the display control unit 96 extracts the access token "Gogiwr@trlVusTekicod3&ith" corresponding to "1" in the token number column of the authentication information table 95a based on "1" in the token number column of the posting information table 95b.

[0143] That is, in steps S243 to S246, the display control unit 96 selects the content of the message according to the combination of the type of the device 7 and the content of the signal acquired as the status information, and distributes the posting destination of the message.

[0144] After that, the display control unit 96 reads the API key 96a stored in the confidential state (step S247). Furthermore, the display control unit 96 associates the access token extracted in step S246 with the API key 96a read in step S247, and transmits them to the SNS server 3 (step S248).

[0145] Returning to FIG. 10, when the server control unit 33 of the SNS server 3 acquires the access token and the API key 96a from the programmable display 9, it starts the authentication process (step S234).

[0146] Specifically, the server control unit 33 permits the communication between the SNS server 3 and the programmable display 9 via the API of the SNS server 3 by using the API key 96a acquired from the programmable display 9.

[0147] Furthermore, the server control unit 33 determines whether the access token acquired from the programmable display 9 matches the access token 34d in the storage unit 32, and transmits the determination result to the programmable display 9 as authentication result information.

[0148] For example, when the access token of the programmable display 9 does not match the access token 34d of the storage unit 32, the server control unit 33 transmits authentication result information indicating authentication failure to the programmable display 9. On the other hand, when the access token of the programmable display 9 matches the access token 34d of the storage unit 32, the server control unit 33 transmits authentication result information indicating authentication success to the programmable display 9.

[0149] Returning to step S248 in FIG. 11, when the access token and the API key 96a are transmitted to the SNS server 3, the display control unit 96 of the programmable display 9 determines whether the authentication result information acquired from the SNS server 3 indicates authentication success (step S249).

[0150] When the authentication result information indicates authentication success (step S249: Yes), as shown in FIGS. 10 and 11, the display control unit 96 transmits the message extracted in step S243 to the SNS server 3 as posting information (step S250), and returns the process to step S241.

[0151] On the other hand, when the authentication result information indicates authentication failure (step S249: No), the display control unit 96 stores information indicating that the authentication has failed in the error log 95c as shown in FIG. 11 (step S251), and returns the process to step S241.

[0152] Returning to FIG. 10, when the server control unit 33 of the SNS server 3 acquires posting information from the programmable display 9, the acquired posting information is associated with the access token acquired in step S234 and stored in the storage unit 32.

[0153] At this time, the server control unit 33 attaches time information indicating the current time to the acquired posting information and stores the posting information in chronological order. In this way, the facility information processing system 1 causes the programmable display 9 to transmit a message to the SNS server 3 based on the state of the device 7.

[0154] Next, the processing operation of the facility information processing system 1 related to the viewing of the message posted by the facility information processing apparatus 6 will be described with reference to FIGS. 13 and 14. Note that FIG. 12 shows an explanatory diagram for explaining the viewing target information 34e and the disclosure setting information 34f, and FIG. 13 shows a sequence diagram of the processing operation related to the viewing of the message.

[0155] Furthermore, FIG. 14 is an explanatory diagram for explaining the message displayed on the user terminal 4. FIG. 14(a) shows a schematic diagram of the user selection screen 130 for selecting the user name of the viewing target, and FIG. 14(b) shows a schematic diagram of the message screen 140 on which the message corresponding to the selected user name is displayed.

[0156] First, in the disclosure setting information 34f of the SNS server 3 corresponding to the login name of the facility information processing apparatus 6, the user names of the users who are permitted to disclose the posting information 34c are registered in advance by the administrator. Specifically, in the disclosure setting information 34f corresponding to the login name "error" (user name "abnormality notification") of the facility information processing apparatus 6, as shown in FIG. 12(a), the user name "worker" of the field worker and the user name "maintenance person in charge" of the maintenance person in charge are registered.

[0157] Furthermore, in the disclosure setting information 34f corresponding to the login name "maintenance" (user name "maintenance notification") of the facility information processing apparatus 6, as shown in FIG. 12(b), the user name "maintenance person in charge" of the maintenance person in charge is registered.

[0158] That is, the field worker as the user is permitted to view the posting information 34c posted with the user name "abnormality notification". On the other hand, the maintenance person in charge as another user is permitted to view the posting information 34c posted with the user name "abnormality notification" and the posting information 34c posted with the user name "maintenance notification".

[0159] Therefore, as shown in Fig. 12(c), in the browsing target information 34e corresponding to the user name "worker" of the on-site worker, the user name "abnormality notification" of the facility information processing device 6 permitted by the administrator is registered.

[0160] On the other hand, as shown in Fig. 12(d), in the browsing target information 34e corresponding to the user name "maintenance person in charge" of the maintenance person in charge, the user name "abnormality notification" of the facility information processing device 6 permitted by the administrator and the user name "maintenance notification" are registered.

[0161] In such a state, when users such as maintenance personnel and on-site workers check the state of the production facility, they operate the user terminal 4 to start a program for using the social networking service.

[0162] When the program is started, as shown in Fig. 13, the control unit 44 of the user terminal 4 transmits browsing request information for requesting browsing of the posted information to the SNS server 3 (step S261). At this time, the control unit 44 transmits the login name of the user registered in the user terminal 4 in association with the browsing request information.

[0163] As shown in Fig. 13, when the server control unit 33 of the SNS server 3 acquires the browsing request information from the user terminal 4, it reads out the browsing target information 34e corresponding to the login name of the user from the storage unit 32 (step S262).

[0164] Furthermore, the server control unit 33 extracts the user name of the facility information processing device 6 registered as the browsing target in the read browsing target information 34e (step S263). After that, the server control unit 33 reads out the posted information 34c associated with the user name extracted in step S263 in chronological order (step S264).

[0165] Then, the server control unit 33 associates the user name extracted in step S263 with the posted information 34c read in step S264, and transmits it as distribution information to the user terminal 4 (step S265). At this time, the server control unit 33 transmits the posted information 34c in chronological order.

[0166] As shown in FIG. 13, when the control unit 44 of the user terminal 4 acquires the distribution information from the SNS server 3, the control unit 44 displays the acquired posted information in chronological order on the operation display unit 43 together with the user name included in the distribution information (step S266).

[0167] Specifically, when a plurality of user names are associated with the distribution information, the control unit 44 of the user terminal 4 displays a user selection screen 130 for prompting the user to select a user name on the operation display unit 43.

[0168] For example, when the user is a maintenance person in charge, the control unit 44 of the user terminal 4 enables the selection of the user name "abnormality notification" and the user name "maintenance notification" as shown in FIG. 14(a), and displays them on the operation display unit 43.

[0169] When the user name "abnormality notification" is selected on the user selection screen 130, or when one user name is associated with the distribution information, the control unit 44 of the user terminal 4 displays a message screen 140 in which the posted information corresponding to the user name is arranged in chronological order on the operation display unit 43 as shown in FIG. 14(b).

[0170] As described above, the facility information processing system 1 of the present embodiment controls the operation of the device 7, and includes a PLC 8 that detects the state of the device 7, and receives and stores posted information posted in association with a posting account (the account of the programmable display 9), and provides a service of distributing the posted information of the posting account permitted to be viewed to a user terminal 4 owned by a specific user permitted to view by the administrator of the posting account. The programmable display 9 is connected to the SNS server 3 via the communication line 2.

[0171] Furthermore, the facility information processing system 1 includes a display unit 53 for displaying various types of information, and an operation reception unit 54 for receiving various operations by an administrator, and is provided with a setting terminal 5 that is communicably connected to the programmable display 9.

[0172] The setting terminal 5 receives at least a registration operation of a posting account, a registration / editing operation of posting information, a registration operation of an access token generated by the SNS server 3 based on the posting account, and an operation of associating the access token with the posting account and the posting information, and transfers the associated posting information and access token to the programmable display 9.

[0173] On the other hand, the programmable display 9 stores the posting information and the access token acquired from the setting terminal 5, and when the status information indicating the status of the device 7 acquired from the PLC 8 satisfies a predetermined condition, it transmits the posting information and the access token to the SNS server 3 in association with each other.

[0174] According to this configuration, the facility information processing system 1 can improve the security of the programmable display 9 that notifies the status of the device 7. Specifically, since the posting information and the access token that have been set and registered by the setting terminal 5 are transferred to the programmable display 9, the facility information processing system 1 can eliminate the need to provide the programmable display 9 with means for receiving various operations of an administrator who manages, for example, the posting account.

[0175] Thereby, the facility information processing system 1 can prevent, for example, a registration / editing operation of the programmable display 9 by a malicious third party in a state where the setting terminal 5 is not connected. For this reason, the facility information processing system 1 can prevent the falsification and abuse of the posting information and the access token.

[0176] Furthermore, since the programmable display 9 is configured to transmit the posted information and the access token to the SNS server 3 in association with each other, the facility information processing system 1 can eliminate the need for the programmable display 9 to store information that can identify the user, such as the destination email address.

[0177] Therefore, the facility information processing system 1 can prevent information that can identify the user, such as the destination email address, from being stolen by a malicious third party. Accordingly, the facility information processing system 1 can improve the security of the programmable display 9 that notifies the state of the device 7.

[0178] Also, the setting terminal 5 is configured to transfer the access token generated by the SNS server 3 based on the posting account to the programmable display 9 as the access token, together with the posted information.

[0179] On the other hand, the programmable display 9 includes a storage unit 95 that stores the posted information and the access token, a display control unit 96 that stores the API key 96a for using the service in a confidential state, and a transmission means (line connection unit 92, display control unit 96) that associates the access token and the API key 96a with the posted information and transmits the result to the SNS server 3.

[0180] According to this configuration, since the API key 96a is stored in a confidential state, the programmable display 9 can prevent the API key 96a from being known to a malicious third party. For this reason, for example, even if the access token is known to a malicious third party, the facility information processing system 1 can prevent unauthorized posting using a terminal other than the programmable display 9.

[0181] In addition, since the programmable display 9 does not store, for example, the login name and password that constitute the posting account, it can prevent the leakage of the login name and password to the outside. Therefore, the facility information processing apparatus can prevent the posting account from being misused by a malicious third party. As a result, the facility information processing system 1 can further improve the security of the programmable display 9 that notifies the state of the device 7.

[0182] Further, the programmable display 9 includes a storage unit 95 that stores, in association with each other, an access token and a plurality of posting information representing the state of the device 7 as a character string, and state acquisition means (PLC input unit 91, display control unit 96) that acquires state information indicating the state of the device 7 from the PLC 8.

[0183] Furthermore, the programmable display 9 includes a display control unit 96 that extracts, from the storage unit 95, posting information corresponding to the state of the device 7 indicated by the state information and at least one access token associated with the posting information when the state information satisfies a predetermined condition.

[0184] In addition, the programmable display 9 includes transmission means (line connection unit 92, display control unit 96) that transmits the posting information and the access token extracted by the display control unit 96 to the SNS server 3 in association with each other.

[0185] According to this configuration, the facility information processing system 1 can improve the convenience of the user who receives the notification regarding the state of the device 7 without impairing the security of the programmable display 9 that notifies the state of the device 7.

[0186] Specifically, when the status information indicating the status of device 7 satisfies a predetermined condition, the programmable display 9 can determine the posting information corresponding to the status of device 7 and at least one access token associated with the posting information, in order to extract them by the display controller 96.

[0187] At this time, since the access token is generated in advance for each posting account, the programmable display 9 will determine the posting account that posts the posting information according to the status of device 7. That is, the programmable display 9 can distribute the posting destination of the posting information according to the status of device 7.

[0188] And since the posting information other than the posting accounts permitted for viewing is not displayed on the user terminal 4, the programmable display 9 can cause the user terminal 4 to receive only the notifications regarding the status of device 7 desired by the user. Thereby, the facility information processing system 1 can improve the convenience of the users who receive the notifications regarding the status of device 7 without impairing the security of the programmable display 9 that notifies the status of device 7.

[0189] Also, the posting device that posts a message to the SNS server 3 via the communication line 2 is the programmable display 9 connected to the PLC 8. According to this configuration, the facility information processing system 1 can notify the user of the status of device 7 via the user terminal 4 simply by replacing, for example, an existing programmable display.

[0190] Also, the facility information processing system 1 includes the SNS server 3 that provides the above service. This SNS server 3 includes a server control unit 33 that generates an access token based on the posting account, and a storage unit 32 that stores the posting account and the access token in association with each other.

[0191] Furthermore, when the access token acquired from the programmable display 9 matches the access token in the storage unit 32, the SNS server 3 has posting storage means (storage unit 32, server control unit 33) that stores the posting information acquired from the programmable display 9 in chronological order and associates it with the posting account corresponding to the access token.

[0192] In addition, when the SNS server 3 receives a request to view the posting information of a posting account for which viewing has been permitted from the user terminal 4, the SNS server 3 has distribution means (line connection unit 31, server control unit 33) that distributes the posting information associated with the posting account for which viewing has been permitted in chronological order.

[0193] According to this configuration, since the SNS server 3 stores the posting information acquired from the programmable display 9 in chronological order and distributes the posting information in chronological order, the facility information processing system 1 can display the state of the device 7 in chronological order on the user terminal 4.

[0194] And since the user who operates the user terminal 4 can know the changes in the state of the device 7 in chronological order, the user can easily and more accurately grasp the state of the device 7. Thereby, the facility information processing system 1 can further improve the convenience of the user who receives the notification regarding the state of the device 7.

[0195] Also, the SNS server 3 that provides the above service is a server that provides a social networking service set by an administrator who manages the posting account for a user who is permitted to view the posting information of the posting account.

[0196] According to this configuration, the facility information processing system 1 can notify the user of the state of the device 7 by using an existing social networking service. At this time, a user who has used an existing service can know the state of the device 7 by using the familiar service.

[0197] Furthermore, since the user is restricted by the administrator, the facility information processing system 1 can prevent an unspecified number of users who use existing services from knowing the state of the device 7. Therefore, the facility information processing system 1 can further improve the convenience of the user by ensuring the security of the programmable display 9 that notifies the state of the device 7.

[0198] In addition, since the facility information processing system 1 can transfer the same posting information table 55b and authentication information table 95a to a plurality of facility information processing devices 6, various setting operations required for transmitting posting information can be simplified.

[0199] In the correspondence between the configuration of this invention and the above-described embodiment, the server of this invention corresponds to the SNS server 3 of the embodiment, and similarly hereinafter, the posting device corresponds to the programmable display 9, the authentication information corresponds to the access token, when satisfying a predetermined condition, it corresponds to the case of being trigger information, the storage means corresponds to the storage unit 95, the API storage means and extraction means correspond to the display control unit 96, the transmission means corresponds to the line connection unit 92 and the display control unit 96, the state acquisition means corresponds to the PLC input unit 91 and the display control unit 96, the authentication information generation means corresponds to the server control unit 33, the account storage means corresponds to the storage unit 32, the posting storage means corresponds to the storage unit 32 and the server control unit 33, the distribution means corresponds to the line connection unit 31 and the server control unit 33, but this invention is not limited only to the configuration of the above-described embodiment, and many embodiments can be obtained.

[0200] For example, in the above-described embodiment, the production facility is provided with the facility information processing apparatus 6. However, the present invention is not limited thereto, and any facility having the PLC 8 and the programmable display 9 may be used, such as an elevator or the like.

[0201] In addition, although the maintenance staff, on-site workers, and production managers are set as the users who use the user terminal 4, the present invention is not limited thereto, and any person who desires to receive notifications regarding the state of the device may be used as the user.

[0202] Also, although the facility information processing system 1 uses an existing social networking service, the present invention is not limited thereto, and a dedicated service capable of posting messages according to the state of the device 7 may be used for the facility information processing system.

[0203] In addition, although the setting terminal 5 and the programmable display 9 are communicably connected via the transfer cable C, the present invention is not limited thereto, and the setting terminal 5 and the programmable display 9 may be connected by wireless communication.

[0204] Also, although the user terminal 4 is a mobile terminal, the present invention is not limited thereto, and it may be a stationary terminal or a server different from the SNS server 3. In addition, the information registered in the posting information tables 55b and 95b in FIG. 4 is not limited to the present embodiment, and may be appropriately set by the administrator.

[0205] In addition, the account management table 55a in which the management number, user name, login name, password, and access token which is authentication information generated by the login name and password are registered is stored in the storage unit 55 of the setting terminal 5. However, the present invention is not limited thereto, and an account management table in which only the management number, login name, and access token are registered may be stored in the storage unit 55 of the setting terminal 5. Thereby, the facility information processing system 1 can prevent the password of the social networking service from being known to a third party via the setting terminal 5.

[0206] In addition, one management number registered in the number column of the account management table 55a was registered in the token number column of the posting information tables 55b and 95b in FIG. 4, but it is not limited to this. A plurality of management numbers may be registered in the token number column of the posting information tables 55b and 95b as posting destinations according to the state of the device 7.

[0207] In addition, the administrator who manages the posting account is configured to permit the disclosure of the posting information 34c to a specific viewing account. At this time, it may be configured to be registered in the disclosure setting information 34f by the administrator permitting the disclosure of the posting information 34c in response to a request from a user who desires to view the posting information 34c.

[0208] In addition, the authentication of the programmable display 9 is configured to be performed by an access token, but it is not limited to this. For example, the authentication of the programmable display 9 may be performed by information obtained by encrypting the login name and password.

[0209] In addition, the programmable display 9 associates the access token with the API key 96a in step S248 in FIG. 11 and transmits the result to the SNS server 3. When the authentication result information from the SNS server 3 indicates successful authentication in step S249 in FIG. 11, the posting information is transmitted to the SNS server 3 in step S250 in FIG. 11. However, the transmission of the posting information from the programmable display 9 to the SNS server 3 is not limited to the above-described steps.

[0210] For example, according to the specifications of the social networking service, the programmable display 9 may be configured to associate the access token, the API key 96a, and the posting information in step S248 and transmit the result to the SNS server 3. In this case, the SNS server 3 permits communication with the programmable display 9 based on the obtained API key 96a, and further determines whether the obtained access token matches the access token 34d in the storage unit 32.

[0211] When the authentication result is successful, the SNS server 3 receives the posted information and sends information indicating successful authentication and a message indicating completion of posting to the programmable display 9. When the authentication result is a failure, the SNS server 3 sends information indicating authentication failure to the programmable display 9.

[0212] Also, in step S266 of FIG. 13, when a plurality of users are associated with the distribution information acquired from the SNS server 3, the user terminal 4 displays the user selection screen 130 on the operation display unit 43, but is not limited thereto. For example, when a plurality of users are associated with the distribution information acquired from the SNS server 3, a screen arranging the posted information of the plurality of users in chronological order may be displayed on the operation display unit 43. In this case, by selecting the user name displayed on the operation display unit 43, a screen arranging the posted information corresponding to the selected user name in chronological order is displayed on the operation display unit 43.

[0213] Also, the posting device for posting a message to the SNS server 3 via the communication line 2 is the programmable display 9 connected to the PLC 8, but is not limited thereto. For example, the posting device for posting a message may be integrally provided in the PLC 8. In this case, since the posting device for posting a message is provided in the PLC 8, the facility information processing device 6 can notify the user of the state of the device 7 via the user terminal 4 by simply replacing an existing PLC, for example.

[0214] Alternatively, the posting device for posting a message may be configured by a gateway device connected to the PLC 8. In this case, the facility information processing device 6 can notify the user of the state of the device 7 via the user terminal 4 by simply replacing an existing gateway device, for example.

[0215] Also, in step S223 of FIG. 8, when the transfer button 107 is pressed by the administrator, the posting information table 55b and the authentication information table 95a are transferred from the setting terminal 5 to the programmable display 9, but is not limited thereto. For example, when the setting terminal 5 is connected to the programmable display 9, or when the transfer button 107 is pressed by the administrator, a step of performing authentication between the setting terminal 5 and the programmable display 9 may be provided. And when the authentication is successful, the setting terminal 5 starts transferring the posting information table 55b and the authentication information table 95a to the programmable display 9.

[0216] Thereby, when the setting terminal 5 is connected to a device that is not a transfer target or a programmable display 9 that is not a transfer target, the equipment information processing system 1 can prevent the posting information table 55b and the authentication information table 95a from being erroneously transferred to a device that is not a transfer target or a programmable display 9.

Explanation of Reference Numerals

[0217] 1... Equipment information processing system 2... Communication line 3... SNS server 4... User terminal 5... Setting terminal 7... Device 8... Programmable logic controller (PLC) 9... Programmable display 31... Line connection part 32... Storage part 33... Server control part 53... Display part 54... Operation reception part 91... PLC input part 92... Line connection part 95... Storage part 96... Display control part 96a... API key

Claims

1. A programmable logic controller that controls the operation of the device and detects the state of the device, A posting device connected via a communication line to a server that receives and stores posting information posted in association with a posting account, and provides a service for distributing the posting information of the posting account permitted to be viewed to a user terminal owned by a specific user permitted to view by the administrator of the posting account, A setting terminal having a display unit for displaying various information and an operation reception unit for receiving various operations by an administrator, and communicably connected to the posting device, The setting terminal, Receives at least a registration operation of a posting account, a registration and editing operation of posting information, a registration operation of authentication information generated by the server based on the posting account, and an operation of associating the authentication information with the posting account and the posting information, and transfers the associated posting information and authentication information to the posting device, The posting device, Stores the posting information and the authentication information acquired from the setting terminal, and when state information indicating the state of the device acquired from the programmable logic controller satisfies a predetermined condition, transmits the posting information and the authentication information to the server in association with each other An information processing system for facilities.

2. The setting terminal, Is configured to transfer, as the authentication information, an access token generated by the server based on the posting account to the posting device together with the posting information, The posting device, Storage means for storing the posting information and the access token, API storage means for storing an API key for using the service in a confidential state, And transmission means for transmitting the access token and the API key in association with the posting information to the server, The information processing system for facilities according to claim 1.

3. The posting device, Storage means for storing the authentication information and a plurality of the posting information representing the state of the device as a character string in association with each other, State acquisition means for acquiring the state information indicating the state of the device from the programmable logic controller, When the state information satisfies a predetermined condition, extraction means for extracting, from the storage means, posting information corresponding to the state of the device indicated by the state information and at least one piece of the authentication information associated with the posting information; transmission means for associating the posting information and the authentication information extracted by the extraction means and transmitting the same to the server, and An equipment information processing system according to claim 1 or claim 2.

4. The posting device is a programmable display connected to the programmable logic controller. An equipment information processing system according to any one of claims 1 to 3.

5. The posting device is integrally provided in the programmable logic controller. An equipment information processing system according to any one of claims 1 to 3.

6. The posting device is a gateway device connected to the programmable logic controller. An equipment information processing system according to any one of claims 1 to 3.

7. Comprising the server that provides the service, The server is authentication information generation means for generating authentication information based on the posting account; account storage means for associating and storing the posting account and the authentication information; posting storage means for storing, in chronological order, the posting information obtained from the posting device in association with the posting account corresponding to the authentication information when the authentication information obtained from the posting device matches the authentication information in the account storage means; distribution means for distributing, in chronological order, the posting information associated with the posting account permitted to be viewed to the user terminal when a request to view the posting information of the posting account permitted to be viewed is received from the user terminal. An equipment information processing system according to any one of claims 1 to 6.

8. The server that provides the service is a server that provides a social networking service set by an administrator who manages the posting account, for a user permitted to view the posting information of the posting account. An equipment information processing system according to any one of claims 1 to 7.

Citation Information

Patent Citations

  • Monitoring system and monitoring method

    JP2009176204A

  • Cloud type information management system

    JP2013030163A

  • Communication system for IoT apparatus management

    JP2021166350A