Control system and control method

Abstract

To provide a control system, a processing device, and a control method that can reduce time and effort.SOLUTION: A control system that controls a device to be controlled by a control device on the basis of control information includes a conversion unit that converts an imaging signal obtained by capturing an image generated on the basis of on pre-conversion input information, which is input information including the control information, into input information and outputs the post-conversion input information, and a transmission unit that transmits the control information included in the post-conversion input information to the control device.SELECTED DRAWING: Figure 2

Description

[Technical Field]

[0001] The present disclosure relates to a control system Muo and a control method. [Background technology]

[0002] Control devices in power plants, one example of industrial plants, must be highly reliable to ensure a stable supply of electricity. Therefore, even if a secure communication channel is used, the possibility of unintended unauthorized access cannot be ruled out as long as the devices are connected via a network (Internet). Therefore, power company security policies often prohibit communication from the cloud to the control network, even if the communication channel is secure. In such cases, offline methods are required, in which data files are manually imported into the control device, such as by manual input or recording media, making it impossible to change operating parameters in real time (see, for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2020-64670 Summary of the Invention [Problem to be solved by the invention]

[0004] For example, the manual data transfer method using a recording medium as described in the background art section of Patent Document 1 has the problem of being cumbersome and time-consuming.

[0005] The present disclosure has been made to solve the above problems, and is capable of reducing the time and effort required. Control system that can Muo The present invention aims to provide a method for controlling the same. [Means for solving the problem]

[0006] In order to solve the above problems, the control system according to the present disclosure is a control system for controlling a controlled device by a control device based on control information, and includes a conversion unit that converts an imaging signal that captures an image generated based on pre-conversion input information, which is input information that includes the control information, into the input information and outputs it as converted input information, and a transmission unit that transmits the control information included in the converted input information to the control device.

[0007] The processing device according to the present disclosure is a control system in which a control target device is controlled by a control device based on control information, and includes a conversion unit that converts an imaging signal that captures an image generated based on pre-conversion input information, which is input information that includes the control information, into the input information and outputs it as converted input information, and a transmission unit that transmits the control information included in the converted input information to the control device.

[0008] The control method according to the present disclosure is a control method for controlling a controlled device by a control device based on control information, and includes a step of converting an imaging signal that captures an image generated based on pre-conversion input information, which is input information that includes the control information, into the input information and outputting it as post-conversion input information, and a step of transmitting the control information included in the post-conversion input information to the control device. [Effects of the Invention]

[0009] The control system of the present disclosure Muo The control method can reduce the time and effort required. [Brief explanation of the drawings]

[0010] [Figure 1] 1 is a configuration diagram showing a configuration example of a control system according to a first embodiment of the present disclosure. [Figure 2] 2 is a block diagram showing an example of a functional configuration of the control system 10 shown in FIG. 1. FIG. [Figure 3] 3 is a flowchart showing an example of the operation of the control system 10 shown in FIGS. 1 and 2. [Figure 4]3 is a schematic diagram showing an example of a display screen of the two-dimensional code display terminal 22 shown in FIGS. 1 and 2. FIG. [Figure 5] 3 is a schematic diagram showing an example of a display screen of the two-dimensional code display terminal 22 shown in FIGS. 1 and 2. FIG. [Figure 6] 6 is a schematic diagram showing an example of the data structure of a two-dimensional code 111 shown in FIG. 5. [Figure 7] 3 is a schematic diagram showing an example of a display screen of the two-dimensional code display terminal 22 shown in FIGS. 1 and 2. FIG. [Figure 8] 3 is a flowchart showing an example of the operation of the two-dimensional code communication PC 1 shown in FIGS. 1 and 2. [Figure 9] 3 is a schematic diagram showing an example of a display screen of the two-dimensional code communication PC 1 shown in FIGS. 1 and 2. FIG. [Figure 10] 3 is a schematic diagram showing an example of a display screen of the two-dimensional code communication PC 1 shown in FIGS. 1 and 2. FIG. [Figure 11] FIG. 10 is a configuration diagram showing a configuration example of a control system according to a second embodiment of the present disclosure. [Figure 12] FIG. 1 is a schematic block diagram illustrating the configuration of a computer according to at least one embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0011] First Embodiment A control system, a processing device, and a control method according to a first embodiment of the present disclosure will be described below with reference to FIGS. 1 to 10. FIG. 1 is a configuration diagram showing an example of the configuration of the control system according to the first embodiment of the present disclosure. FIG. 2 is a block diagram showing an example of the functional configuration of the control system 10 shown in FIG. 1. FIG. 3 is a flowchart showing an example of the operation of the control system 10 shown in FIGS. 1 and 2. FIGS. 4 and 5 are schematic diagrams showing an example of the display screen of the two-dimensional code display terminal 22 shown in FIGS. 1 and 2. FIG. 6 is a schematic diagram showing an example of the data configuration of the two-dimensional code 111 shown in FIG. 5. FIG. 7 is a schematic diagram showing an example of the display screen of the two-dimensional code display terminal 22 shown in FIGS. 1 and 2. FIG. 8 is a flowchart showing an example of the operation of the two-dimensional code communication PC 1 shown in FIGS. 1 and 2. FIGS. 9 and 10 are schematic diagrams showing an example of the display screen of the two-dimensional code communication PC 1 shown in FIGS. 1 and 2. Note that the same or corresponding components in each drawing are designated by the same reference numerals, and description thereof will be omitted as appropriate.

[0012] (Control system configuration) 1 is a control system for an industrial plant P1 such as a power plant, and includes a two-dimensional code communication PC 1 (an example of a processing device), a distributed control system 2, an imaging device 21, a two-dimensional code display terminal 22, and a web server 6. The distributed control system 2 includes a DCS (Distributed Control System) communication device 3, a DCS control device 4 (an example of a control device), a plurality of field devices 5 (an example of devices to be controlled) such as sensors and actuators provided in a power generation unit (not shown), and a data diode device 25. The two-dimensional code communication PC 1, the imaging device 21, and the two-dimensional code display terminal 22 are installed and operated within the industrial plant P1.

[0013] The DCS communication device 3 controls communications via an information and communication network 8 such as the Internet, communications such as MHI CARD (Mitsubishi Heavy Industries Communication with Agents for Redundant and Distributed network) communications and OPC (Object Linked and Embedding for Process Control) communications via a communication network 32, and communications via a control network 33. The two-dimensional code display terminal 22 can access the web server 6 via the information and communication network 8. The web server 6 can acquire information such as measured values ​​of the field devices 5 from the DCS communication device 3 via the information and communication network 8 and a data diode device 25. The two-dimensional code communication PC 1 and the DCS communication device 3 transmit and receive predefined information via the communication network 32. The imaging device 21 and the two-dimensional code communication PC 1 are connected via a general-purpose serial bus 31. The DCS communication device 3 and the DCS control device 4 are connected via a control network 33. The data diode device 25, also known as a one-way security gateway, enables data transmission through physical one-way communication from the distributed control system 2 (sender) network to the information communication network 8 (receiver network), while blocking attack communication in the opposite direction, thereby protecting the sender network. The data diode device 25 may be connected to the DCS control device 4.

[0014] Furthermore, the imaging device 21 captures the two-dimensional code (image) 111 displayed on the two-dimensional code display terminal 22, and outputs an imaging signal 41 capturing the image of the two-dimensional code 111 to the two-dimensional code communication PC 1. In this case, there is no physical communication network between the two-dimensional code display terminal 22 and the imaging device 21; instead, there is a one-way relationship 51 in which the imaging device 21 optically captures the two-dimensional code 111 displayed on the two-dimensional code display terminal 22. Furthermore, there is no signal transmission means provided from the two-dimensional code communication PC 1 to the two-dimensional code display terminal 22. Note that the imaging device 21 may be configured integrally with the two-dimensional code communication PC 1 (for example, it may be built into the two-dimensional code communication PC 1).

[0015] As shown in Fig. 2, the WEB server 6 has a functional configuration formed by a combination of a computer constituting the WEB server 6, its peripheral devices, and software such as a program executed by the computer, and the functional configuration includes a control parameter calculation unit 61, a two-dimensional code creation unit (server side) 62, and a two-dimensional code provision unit 63. The two-dimensional code display terminal 22 is, for example, an information terminal such as a tablet terminal, a smartphone, or a PC, and similarly has, as functional components, a two-dimensional code display unit 221 and a two-dimensional code creation unit (client side) 222. Similarly, the two-dimensional code communication PC 1 has, as functional components, a conversion unit 11 and a transmission unit 12. The WEB server 6 can be configured using, for example, cloud computing.

[0016] The control parameter calculation unit 61 calculates an optimal solution for one or more control parameters (an example of control information) that satisfy given conditions using a plant model or digital twin that simulates the performance state of the industrial plant P1. The control parameters are, for example, target values, instruction values, upper and lower limits, and values ​​(information) that indicate the selection of control content in feedback control, sequence control, open-loop control, etc., related to field devices 5 such as actuators. The given conditions are, for example, operating conditions that prioritize economic efficiency or suppression of exhaust gas concentrations (emissions) of environmentally regulated substances. The control parameter calculation unit 61 acquires measurement results, etc., from field devices 5 such as sensors in the distributed control system 2 via the data diode device 25 and the DCS communication device 3, and calculates an optimal solution for each control parameter based on the latest information. The control parameter calculation unit 61 is a web application that calculates the control parameters using the two-dimensional code creation unit (client side) 222 included in the two-dimensional code display terminal 22 as a client-side application. The control parameter calculation unit 61 also has the function of performing user authentication processing and processing for selecting the target industrial plant P1, etc. However, the authentication processing, the selection processing for the industrial plant P1, etc. may be performed by, for example, another system that manages the WEB server 6, and access to the control parameter calculation unit 61 may be performed after the authentication processing or selection processing by that system.

[0017] The two-dimensional code creation unit (server side) 62 creates a two-dimensional code based on input information (hereinafter referred to as pre-conversion input information) including the control parameters calculated by the control parameter calculation unit 61. The input information is information including, for example, data representing one or more control parameters, header information indicating the creation date and time of the control parameters, and information obtained by encrypting a hash value of the data. The two-dimensional code creation unit (server side) 62 is a web application that creates a two-dimensional code using the two-dimensional code creation unit (client side) 222 included in the two-dimensional code display terminal 22 as a client-side application. A two-dimensional code is an image formed by arranging, for example, square unit figures in two directions, vertically and horizontally. An example of a two-dimensional code is a QR code (registered trademark), which is an example of a matrix code. However, the two-dimensional code is not limited to a matrix code and may be, for example, a stack code.

[0018] The two-dimensional code providing unit 63 is a web application that operates the two-dimensional code creation unit (client side) 222 provided in the two-dimensional code display terminal 22 as a client-side application, and provides the two-dimensional code created by the two-dimensional code creation unit (server side) 62 to the two-dimensional code display unit 221 as a web page that can be accessed, for example, by a predetermined URL (Uniform Resource Locator) (making it possible for the two-dimensional code display unit 221 to access and display it via the information and communication network 8).

[0019] The two-dimensional code display unit 221 is, for example, a general-purpose browser application, and displays the two-dimensional code 111 on the display screen of the two-dimensional code display terminal 22 by accessing a specified URL on the WEB server 6 in response to a user instruction.

[0020] On the other hand, the two-dimensional code creation unit (client side) 222 is, for example, a general-purpose browser application, and causes the control parameter calculation unit 61 to calculate an optimal solution for one or more control parameters in response to user input operations on the two-dimensional code display terminal 22, causes the two-dimensional code creation unit (server side) 62 to create a two-dimensional code, and causes the two-dimensional code provision unit 63 to provide a web page including the two-dimensional code.

[0021] In addition, the conversion unit 11 converts (restores) the imaging signal 41, which is a signal obtained by capturing an image of the two-dimensional code 111 displayed on the two-dimensional code display terminal 22, generated based on the pre-conversion input information, using the imaging device 21, into input information identical to the pre-conversion input information (hereinafter referred to as post-conversion input information), and outputs it as the post-conversion input information.

[0022] Furthermore, the transmitting unit 12 transmits one or more control parameters included in the converted input information to the DCS control device (control device) 4 via the DCS communication device 3.

[0023] The DCS control device 4 is a device that performs monitoring, feedback control, sequence control, open loop control, etc. of multiple field devices 5 directly or via a PLC (Programmable Logic Controller) not shown, and, for example, receives one or more control parameters from the transmitter 12 and controls the multiple field devices 5, which are the devices to be controlled, based on the received one or more control parameters.

[0024] (Example of control system operation) (When creating a two-dimensional code) Fig. 3 shows an example of the operation of the control system 10 (WEB server 6) shown in Fig. 1 and Fig. 2. Fig. 4 and Fig. 5 show schematic examples of the display screen of the two-dimensional code display terminal 22 shown in Fig. 1 and Fig. 2.

[0025] In the optimization calculation (A1) and header information import (A2) shown in FIG. 3, the control parameter calculation unit 61 and the two-dimensional code creation unit (client side) 222 shown in FIG. 2 perform predetermined authentication processing and processing to select the target industrial plant P1, etc., in response to user input operations on the two-dimensional code display terminal 22. Then, a window 100 shown in FIG. 4 is displayed on the display screen of the two-dimensional code display terminal 22. The window 100 displays an "optimization management ID (identification code)" 101, which is control parameter identification information, and optimization mode setting information 102. In this example, the optimization mode is set based on a balance between four items: economy (emphasis on the balance between economy and reduction of emissions such as carbon dioxide), emissions, durability, and controllability. After the user sets the mode in the window 100, when the user clicks the "Execute" button 103 with the pointer, the control parameter calculation unit 61 calculates the optimal solutions, for example, from first to third place in order of evaluation points (A1 and A2), and then the two-dimensional code creation unit (server side) 62 creates two-dimensional code images (B1 to B4). In this case, when the calculation of the optimal solution is completed, the total scores of the calculation results for the first to third places in order of evaluation points are displayed as "Rank 1," "Rank 2," and "Rank 3" based on the predetermined evaluation points, as shown in Fig. 4. When the user checks the balance of the four items by looking at a radar chart 105 or the like, selects "Rank 2," and clicks the "Display two-dimensional code" button 104, the two-dimensional code creation unit (server side) 62 and the two-dimensional code display terminal 22 display a window 110 on the display screen of the two-dimensional code display terminal 22, as shown in Fig. 5. In calculating the optimal solution, the control parameter calculation unit 61 determines data (calculation results) DT1 representing one or more control parameters for the first to third places in evaluation points, and header information DT2 including information indicating the creation date and time of the control parameters, etc. Header information DT2 includes, for example, the creation date and time of the control parameters, the optimization management ID ("20200213_005"), the values ​​of each item of the mode setting ("1.0", "0.3", "0.5", "0.1"), and the value of the selected rank ("2").The header information may include, for example, information indicating the version of the configuration file F1 described below, or an encrypted value obtained by hashing the contents of the configuration file F1 (data in the configuration file F1 (source, text, etc.)).

[0026] In steps (B1) to (B4), the two-dimensional code creation unit (server side) 62 first acquires the data DT1 and header information DT2 determined by the control parameter calculation unit 61 (B1), then extracts the necessary "data to be written" from the data DT1 and header information DT2 by, for example, deleting unnecessary data contained in the data DT1 and header information DT2 with reference to the configuration file F1 (B2), calculates a hash value of the contents of the configuration file F1, and further encrypts the calculated hash value using the encryption key of a predetermined digital certificate F2 (B3). Note that the combination of the "data to be written" and the encrypted hash value is the pre-conversion input information. Furthermore, the encrypted hash value included in the two-dimensional code is not limited to the encrypted value of the hashed value of the contents of the configuration file F1. For example, it may be the encrypted value of the hashed value of all or part of the data DT1 or header information DT2 in addition to or instead of the contents of the configuration file F1. Hereinafter, all or part of the data DT1 and header information DT2 contained in the contents of the setting file F1 and the pre-conversion input information will be referred to as "predetermined information."

[0027] The configuration file F1 includes information defining the number of control parameters in the pre-conversion input information and the description order of each control parameter. The configuration file F1 may further include information representing the names (e.g., point number names) of each control parameter and the IDs (identification codes) (e.g., point number IDs) corresponding to the control parameters in the distributed control system 2 (or the DCS control device 4). By using this configuration file F1, even if information defining the names of each control parameter and its value is omitted from the pre-conversion input information, the names and values ​​of each control parameter can be associated by referencing the configuration file F1. That is, even if the pre-conversion input information includes only the values ​​of the control parameters, the names of each value can be identified by referencing the configuration file F1 when restoring the pre-conversion input information to calculate the post-conversion input information. Sharing the configuration file F1 between the creator and restorer of the 2D code reduces the amount of data in the pre-conversion input information. In this embodiment, the configuration file F1 includes information representing the creation version. The configuration file F1 can also be used to link communication destinations in the communication network 32.

[0028] Next, the two-dimensional code creation unit (server side) 62 creates a two-dimensional code image of the data to be written and the encrypted hash value, and the two-dimensional code creation unit (server side) 62 and the two-dimensional code display terminal 22 display a window 110 shown in FIG. 5 on the display screen of the two-dimensional code display terminal 22 (B4). The window 110 shown in FIG. 5 includes a two-dimensional code 111 and header information 112. As shown in FIG. 6, the two-dimensional code 111 includes information representing the encrypted hash value 1111, header information 1112, and data (one or more control parameters) 1113. The information combining the header information 1112 and the data 1113 is the "data to be written" extracted in (B2), and the information combining the encrypted hash value 1111, header information 1112, and data 1113 is the "pre-conversion input information." The "post-conversion input information" has the same format as the "pre-conversion input information." However, the header information 1112 may include all or part of a value obtained by encrypting a hashed value of the configuration file F1.

[0029] Next, when the user clicks the "download" button 113 in the window 110 shown in Fig. 5, the two-dimensional code providing unit 63 sets, for example, the web page 120 shown in Fig. 7 so that the two-dimensional code display unit 221 can access and display it via the information and communication network 8 (B5). The web page 120 shown in Fig. 7 includes the two-dimensional code 111 and header information 112.

[0030] (When scanning a two-dimensional code) Fig. 8 shows an example of the operation of the PC 1 for two-dimensional code communication shown in Fig. 1 and Fig. 2. Fig. 9 and Fig. 10 show an example of a display screen (user interface (UI)) of the PC 1 for two-dimensional code communication shown in Fig. 1 and Fig. 2.

[0031] In the operation example shown in FIG. 8, first, when a user launches a predetermined app (application) on the PC1 for two-dimensional code communication (C1), the conversion unit 11 determines whether the setting file F11 is normal (C2). The setting file F11 is a setting file corresponding to the setting file F1 shown in FIG. 3. If the setting file F11 and the setting file F1 are normal, they are the same file. The setting file F11 is stored in a predetermined storage area of ​​the PC1 for two-dimensional code communication during initial setup of the PC1 for two-dimensional code communication. In addition, a digital certificate F12, which will be described later, is a digital certificate that pairs with the digital certificate F2 shown in FIG. 3. The digital certificate F12 is stored in a predetermined storage area of ​​the PC1 for two-dimensional code communication during initial setup of the PC1 for two-dimensional code communication.

[0032] The digital certificate F12 paired with the digital certificate F2 can be issued to have different contents for each industrial plant P1, for each PC 1 for two-dimensional code communication, for each unit to be controlled such as a power generation unit, or for each of one or more field devices 5 to be controlled. In this case, the keys used for encryption and decryption are different for each of one or more controlled devices (field devices 5).

[0033] 9 shows an example of the display screen of the PC 1 for two-dimensional code communication (in which the control parameters obtained by converting the two-dimensional code 111 are already displayed). The window 130 includes a button 131 for closing the application, a button 132 for reading the two-dimensional code, and a button 133 for sending the control parameters (a button for setting data). The window 130 also includes an area 134 for displaying "parameter setting information" corresponding to the header information, and a list 135 of control parameters, as information that is displayed when the two-dimensional code is converted successfully. Each line of the list 135 includes the following items: a name 136 of the control parameter, a current value 137, and a set value 138 (the value of the new control parameter read from the two-dimensional code 111).

[0034] If the setting file F11 is not normal, such as not being stored in a predetermined storage area (C2: "NO"), the conversion unit 11 displays an error (C15) and restarts the application (C1). If normal (C2: "YES"), the conversion unit 11 activates a reading mode (for example, displays an image captured by the imaging device 21) (C3), and when the user frames the two-dimensional code 111 displayed on the two-dimensional code display terminal 22 with the imaging device 21 (holds the camera over it), the conversion unit 11 reads the two-dimensional code image and converts the two-dimensional code into an alphanumeric string or a numeric string (converted input information) (C4).

[0035] Next, the conversion unit 11 decrypts the encrypted data portion (encrypted hash value 1111 in FIG. 6) using the decryption key included in the digital certificate F12 (C5). Next, the conversion unit 11 calculates a hash value of the data portion (information identical to the predetermined information) (C6), and determines whether the hash value obtained in C5 matches the hash value calculated in C6 (C7). Note that the information identical to the predetermined information is, for example, data in the setting file F11 that is identical to the setting file F1, control information and header information included in the converted input information, etc.

[0036] If the hash values ​​match (C7: YES), the converter 11 refers to the configuration file F11 and determines whether the number of target signals (the number of control parameters) is normal (C8), whether the configuration file versions match (C9), and whether all the control parameters are null (blank) (C10). If the number of target signals is normal (C8: YES), the configuration file versions match (C9: YES), and all the control parameters are not null (C10: YES), the converter 11 reads each control parameter and displays the name 136 and setting value 138 corresponding to each control parameter as a list 135 in the window 130 (C11), and then determines whether communication can be performed normally (C12).

[0037] If communication is normal (C12: YES), the conversion unit 11 receives the current values ​​corresponding to each control parameter from the DCS control device 4 and displays the current values ​​137 corresponding to each control parameter in the list 135 of the window 130 (C13). When the send control parameter (data setting button) 133 is clicked, the transmission unit 12 transmits each control parameter to the DCS control device 4 (C14).

[0038] On the other hand, if communication cannot be performed normally (C12: NO), the conversion unit 11 displays a predetermined error (C20), displays an error indicating that transmission cannot be performed even if transmission is attempted in a transmission error state (C21), and then displays the predetermined error again (C22), and then determines whether communication can be performed normally (C12).

[0039] On the other hand, if the hash values ​​do not match (C7: NO), the number of target signals is not normal (C8: NO), the version of the configuration file does not match (C9: NO), or all control parameters are null (C10: NO), the conversion unit 11 displays an error as shown in FIG. 10 (C16 to C19) and restarts the reading mode (C3). In the display example shown in FIG. 10, a modal window 140 including an area 141 indicating an error is displayed in the window 130 shown in FIG. 10. Clicking the "OK" button 142 in the display state shown in FIG. 10 restarts the reading mode (C3). Note that the flow shown in FIG. 8 is merely an example, and may further include, for example, a check as to whether the date and time of the PC 1 for two-dimensional code communication is within a predetermined expiration date by comparing the optimization date and time included in the header information.

[0040] (Actions and Effects) As described above, according to this embodiment, the control parameters can be read simply by holding the imaging device 21 over the two-dimensional code, which reduces the time and effort required compared to, for example, manually entering the control parameters or transferring data using a recording medium.

[0041] Furthermore, in this embodiment, since there is no physical communication network, data can be transmitted from the web server 6 (cloud) to the DCS control device 4 (control device) without any security risk.

[0042] Furthermore, there is no need to manually download data to a storage medium or to import the data into a control device, which increases the degree of real-timeness.

[0043] In addition, since the information does not pass through any equipment or communication paths other than the web application and control device, confidentiality of the information can be guaranteed.

[0044] The signature function of this embodiment can be summarized as follows. First, the generated 2D code contains, in addition to the data to be transmitted, information obtained by encrypting a hash of the data using a certificate held for each power generating unit. When the code is read on-site, a certificate paired with the certificate on the web server 6 (cloud) is stored in the 2D code communication PC 1. The hash value obtained by decrypting the code using the certificate is compared to the hashed value of the data portion obtained on-site. Only if the comparison is successful and the code is read successfully can the data be sent to DCS network devices such as the DCS communication device 3 and DCS control device 4 via OPC communication or other means. Therefore, if a 2D code not generated for the target plant is read, the read operation will fail. Additionally, the read operation will fail if there is an inconsistency with the application (such as a mismatch in the configuration file or a mismatch between the number of data and the number of signals in the configuration file) or if the configuration file information is insufficient (such as corruption). If the read operation fails, a modal window indicating the error is displayed, preventing transmission to the control device (the user cannot proceed to the main screen).

[0045] As described above, according to this embodiment, a completely contactless method in which no physical communication network exists is used, thereby eliminating the possibility of unintended unauthorized access or malware intrusion, thereby complying with the information security policies of each power generation company and providing a method for transmitting information from a cloud on the Internet to a DCS.

[0046] Furthermore, compared to the conventional offline method, the time it takes for data calculated on the cloud to be reflected in the DCS is significantly reduced, reducing the amount of work required, making this a practical method from an operational standpoint and increasing its versatility.

[0047] Second Embodiment A control system, a processing device, and a control method according to a second embodiment of the present disclosure will be described below with reference to Fig. 11. Fig. 11 is a configuration diagram showing a configuration example of a control system according to the second embodiment of the present disclosure. Note that in Fig. 11, the same reference numerals are used for components that are the same as or correspond to those in Fig. 1, and descriptions thereof will be omitted as appropriate.

[0048] The control system 10a according to the second embodiment differs from the control system 10 according to the first embodiment in that the two-dimensional code 111 is automatically updated. In the control system 10a shown in FIG. 11, for example, under instructions from the two-dimensional code display terminal 22, the WEB server 6 performs an optimization calculation for the control parameters, and when the original data is updated (S1), the two-dimensional code image is automatically updated (S2), and the WEB screen is automatically updated (S3). Meanwhile, the imaging device 21 constantly reads the data (S4), and the read data is automatically updated (S5). When the read data is updated, the two-dimensional code communication PC 1 transmits new control parameters to the DCS control device 4 each time an update occurs.

[0049] According to this embodiment, for example, by automatically updating the two-dimensional code display on the web application side or by eliminating the need for human approval on-site, it is possible to achieve immediacy equivalent to that of online, depending on the application.

[0050] (Other embodiments) The above describes in detail the embodiments of the present disclosure with reference to the drawings, but the specific configuration is not limited to this embodiment, and design changes and the like are also included within the scope that does not deviate from the gist of the present disclosure.

[0051] For example, the image generated based on the pre-conversion input information may use an image showing alphanumeric characters, kanji characters, symbols, or figures instead of or in addition to an image showing a two-dimensional code. Furthermore, the image generated based on the pre-conversion input information is not limited to being displayed on a display device, but may also be printed on a paper medium. Furthermore, the image generated based on the pre-conversion input information is not limited to being a monochrome image, but may also be a color image.

[0052] <Computer Configuration> FIG. 12 is a schematic block diagram illustrating the configuration of a computer according to at least one embodiment. The computer 90 includes a processor 91 , a main memory 92 , a storage 93 , and an interface 94 . The above-mentioned two-dimensional code communication PC 1, DCS communication device 3, DCS control device 4, WEB server 6, and two-dimensional code display terminal 22 are implemented in a computer 90. The operations of each of the above-mentioned processing units are stored in the form of a program in a storage 93. A processor 91 reads the program from the storage 93, loads it into a main memory 92, and executes the above-mentioned processing in accordance with the program. The processor 91 also allocates storage areas in the main memory 92 corresponding to each of the above-mentioned storage units in accordance with the program.

[0053] The program may be for realizing some of the functions to be performed by the computer 90. For example, the program may be combined with other programs already stored in storage or other programs implemented in other devices to perform the functions. In other embodiments, the computer may include a custom LSI (Large Scale Integrated Circuit) such as a PLD (Programmable Logic Device) in addition to or instead of the above configuration. Examples of PLDs include PAL (Programmable Array Logic), GAL (Generic Array Logic), CPLD (Complex Programmable Logic Device), and FPGA (Field Programmable Gate Array). In this case, some or all of the functions realized by the processor may be realized by the integrated circuit.

[0054] Examples of storage 93 include a hard disk drive (HDD), a solid state drive (SSD), a magnetic disk, a magneto-optical disk, a compact disc read-only memory (CD-ROM), a digital versatile disc read-only memory (DVD-ROM), and a semiconductor memory. Storage 93 may be an internal medium directly connected to the bus of computer 90, or an external medium connected to computer 90 via interface 94 or a communication line. Furthermore, when this program is distributed to computer 90 via a communication line, computer 90 that receives the program may load the program into main memory 92 and execute the above-described processing. In at least one embodiment, storage 93 is a non-transitory tangible storage medium.

[0055] <Additional Notes> The control system 10 or 10a described in each embodiment can be understood, for example, as follows.

[0056] (1) A control system 10 or 10a according to a first aspect is a control system that controls a control target device (field device 4) by a control device (DCS control device 4) based on control information (control parameters), and includes a conversion unit 11 that converts an image signal 41 obtained by capturing an image generated based on input information (hereinafter referred to as pre-conversion input information) including the control information into the input information (hereinafter referred to as converted input information), and a transmission unit 12 that transmits the control information included in the converted input information to the control device. This aspect and the following aspects can reduce the time and effort required.

[0057] (2) The control system 10 or 10a according to the second aspect is the control system 10 or 10a according to (1), in which the image includes a two-dimensional code.

[0058] (3) The control system 10 or 10a according to a third aspect is the control system 10 or 10a according to (1) or (2), wherein the pre-conversion input information includes the control information, header information including at least the date and time the control information was generated, and an encrypted hash value obtained by encrypting a hash value calculated based on predetermined information (e.g., data in a configuration file F1 or the control information and header information included in the pre-conversion input information), and the conversion unit 11 determines whether the hash value calculated based on information identical to the predetermined information (e.g., data in a configuration file F11 identical to the configuration file F1 or the control information and header information included in the converted input information) matches the value obtained by decrypting the encrypted hash value (C7), and the transmission unit 12 transmits the control information included in the converted input information to the control device if it is determined that they match. This aspect further improves confidentiality.

[0059] (4) The control system 10 or 10a according to a fourth aspect is the control system 10 or 10a according to (3), in which a different key is used for the encryption for each of one or more controlled devices. According to this aspect, confidentiality can be further improved.

[0060] (5) A fifth aspect of the control system 10 or 10a is the control system 10 or 10a of any one of (1) to (4), wherein the control information includes a plurality of control parameters, and each of the control parameters of the control information in the pre-conversion input information is included in the input information based on a setting file that defines the number and description order of each of the control parameters, and the conversion unit determines each of the control parameters of the control information included in the post-conversion input information based on the setting file. This aspect allows for a reduction in the amount of data to be visualized.

[0061] (6) The control system 10 or 10a according to a sixth aspect is the control system 10 or 10a according to (5), in which the converter 11 determines whether the number of control parameters defined in the setting file matches the number of control parameters included in the control information in the converted input information (C8), and if it is determined that they match, the transmitter 12 transmits the control information included in the converted input information to the control device. According to this aspect, confidentiality can be further improved.

[0062] (7) A control system 10a according to a second aspect is the control system 10a according to any one of (1) to (6), in which, when the image is updated, the converter 11 converts an imaging signal obtained by capturing the image into the converted input information, and the transmitter 12 transmits the control information included in the converted input information to the control device. According to this aspect, it is possible to further reduce time loss. [Explanation of symbols]

[0063] 1...PC for two-dimensional code communication, 10, 10a...control system, 2...distributed control system, 3...DCS communication device, 4...DCS control device, 5...field device, 6...WEB server, 8...information and communication network, 11...conversion unit, 12...transmission unit, 21...imaging device, 22...terminal for displaying two-dimensional code, 31...general-purpose serial bus, 32...communication network, 33...control network, 61...control parameter calculation unit, 62...two-dimensional code creation unit (server side), 63...two-dimensional code provision unit, 221...two-dimensional code display unit, 222...two-dimensional code creation unit (client side), F1, F11...setting file, P1...industrial plant

Claims

1. A control system comprising a control device, a processing device, and a display device, the control device controlling a control target device based on control information, The processing device includes: a conversion unit that converts an imaging signal obtained by capturing an image based on pre-conversion input information, which is input information including the control information and header information including at least an optimization date and time of the control information, into the input information and outputs the converted input information; a transmitting unit that transmits the control information included in the converted input information to the control device; means for checking whether the optimization date and time of the control information included in the pre-conversion input information is within a predetermined expiration date; Equipped with the control device controls the control target device based on the control information included in the converted input information received from the transmission unit; the display device, which displays the image to be captured by the processing device on a screen, displays the optimization date and time together with the image in a manner that is readable by a user; Control system.

2. The image includes a two-dimensional code. The control system of claim 1 .

3. The pre-conversion input information further includes an encrypted hash value obtained by encrypting a hash value calculated based on predetermined information, the conversion unit determines whether a hash value calculated based on the same information as the predetermined information matches a value obtained by decrypting the encrypted hash value; When it is determined that the converted input information matches, the transmitting unit transmits the control information included in the converted input information to the control device.

3. A control system according to claim 1 or 2.

4. The key used for the encryption is different for each of one or more control target devices. The control system of claim 3 .

5. the control information includes a plurality of control parameters; each of the control parameters of the control information in the pre-conversion input information is included in the input information based on a setting file that defines the number and description order of each of the control parameters; the conversion unit determines each of the control parameters of the control information included in the converted input information based on the setting file; A control system according to any one of claims 1 to 4.

6. the conversion unit determines whether the number of the control parameters defined in the setting file matches the number of the control parameters included in the control information in the converted input information; When it is determined that the converted input information matches, the transmitting unit transmits the control information included in the converted input information to the control device. The control system of claim 5 .

7. When the image is updated, the conversion unit converts an imaging signal obtained by capturing the image into the converted input information, The transmission unit transmits the control information included in the converted input information to the control device. A control system according to any one of claims 1 to 6.

8. A control method using a control system comprising a control device, a processing device, and a display device, the control device controlling a control target device based on control information, The processing device includes: converting an imaging signal obtained by capturing an image based on pre-conversion input information, which is input information including the control information and header information including at least an optimization date and time of the control information, into the input information and outputting the converted input information; transmitting the control information included in the converted input information to the control device; a step of checking whether the optimization date and time of the control information included in the pre-conversion input information is within a predetermined expiration date; Run the control device controls the control target device based on the control information included in the converted input information received in the step of transmitting the control information; the display device, which displays the image to be captured by the processing device on a screen, displays the optimization date and time together with the image in a manner that is readable by a user; Control method.

9. A control system comprising a control device, a processing device, and a first display device, the control device controlling a control target device based on control information, The processing device includes: a conversion unit that converts an imaging signal obtained by capturing an image generated based on pre-conversion input information, which is input information including the control information and header information including at least an optimization date and time of the control information, into the input information and outputs the converted input information; a transmitting unit that transmits the control information included in the converted input information to the control device, the converted input information includes a plurality of control parameters; a second display device that displays the list of control parameters; the list includes at least a current value corresponding to each of the plurality of control parameters received from the control device and a set value which is a new value of the control parameter read from the image; the first display device, which displays the image to be captured by the processing device on a screen, displays the optimization date and time together with the image in a manner that is readable by a user; Control system.

Images