Load Control System

Abstract

To provide a load control system capable of raising confidentiality of a function.SOLUTION: A motor control system 100 (load control system) is configured so that a function for making a power convert device 2 usable for predetermined use is generated by software in the power convert device 2 when linkage security authentication based on at least one of hardware and software by at least linkage between a controller 1 and the power convert device 2 among the controller 1, the power convert device 2, and the motor 3 is established.SELECTED DRAWING: Figure 2

Description

[Technical Field]

[0001] The present invention relates to a load control system, and more particularly to a load control system including a control device. [Background technology]

[0002] BACKGROUND ART A load control system including a control device is known (see, for example, Patent Document 1).

[0003] The above-mentioned Patent Document 1 discloses a motor control system including a motor control device. In this motor control system, parameters for controlling the motor (position loop gain, speed loop gain, etc.) are stored in advance when the motor control device is shipped from the factory. Furthermore, when the motor control device is shipped from the factory, access to the motor control device (parameter reading, parameter setting, etc.) is prohibited.

[0004] When access to a motor control device is permitted, first, parameters for controlling the motor are transmitted from the external device to the motor control device. Then, if the motor control device confirms that the parameters stored in the motor control device match the parameters transmitted from the external device, access to the motor control device is permitted. In other words, the parameters stored in the motor control device when it is shipped from the factory serve as the password for permitting access to the motor control device. Note that since the parameters are individually set for each motor control device (different for each motor control device), unlike when access to multiple motor control devices can be permitted with a single password, even if the password is leaked, access to multiple motor control devices is not possible. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Patent No. 5877312 Summary of the Invention [Problem to be solved by the invention]

[0006] However, in the motor control system of Patent Document 1, a password parameter is individually set for each motor control device. However, if the password is leaked, the motor control device corresponding to the password becomes accessible. This can lead to the disadvantage that, for example, functions contained in the motor control device and devices controlled by the motor control device (e.g., specific circuit functions possessed by the device) can be leaked. In other words, if the password of one device among multiple devices is leaked, the confidentiality of the functions possessed by the other devices cannot be maintained.

[0007] The present invention has been made to solve the above-mentioned problems, and one object of the present invention is to provide a load control system that can improve the confidentiality of functions. [Means for solving the problem]

[0008] In order to achieve the above object, a load control system according to one aspect of the present invention includes a control device, a power conversion device controlled by the control device, and a load to which power is supplied from the power conversion device, and when linked security authentication is established between at least the control device and the power conversion device among the control device, the power conversion device receives from the control device program code that causes a plurality of functional blocks configured by software to function, and the plurality of functional blocks function in a predetermined order based on the program code, and the functions of the plurality of functional blocks in the predetermined order are functions in the power conversion device that enable the power conversion device to be used for a predetermined application, and when linked security authentication is not established, the plurality of functional blocks do not function in the predetermined order, and the power conversion device , place Used for purposes other than those specified The frequency converter is configured to output a variable frequency or variable voltage for .

[0009] In a load control system according to one aspect of the present invention, as described above, when linked security authentication is established between at least the control device, the power electronics device, and the load, the power electronics device receives from the control device program code for causing a plurality of software-based functional blocks to function, and the plurality of functional blocks function in a predetermined order based on the program code. The functions of the plurality of functional blocks in the predetermined order are functions that enable the power electronics device to be used for a predetermined purpose in the power electronics device. Thus, when linked security authentication is not established, the function that enables the power electronics device to be used for a predetermined purpose is not generated in the power electronics device. As a result, even if the internal structure of the power electronics device is analyzed, the function that enables the power electronics device to be used for a predetermined purpose is not generated, and therefore the function will not be leaked. In other words, the confidentiality of the function that enables the power electronics device to be used for a predetermined purpose is maintained by the linkage between at least the control device and the power electronics device. Therefore, even if a password or the like of one of the plurality of devices is leaked, the confidentiality of the function is maintained. This improves the confidentiality of the function.

[0010] Furthermore, since linked security authentication must be established through at least the link between the control device and the power conversion device, linked security authentication will not be established if the power conversion device is removed alone from the load control system, or if the power conversion device is removed alone from the load control system and combined with another load that cannot be authenticated. In other words, in these cases, functions will not be generated, so there will be no leakage of functions. Furthermore, if security authentication is not established, functions will not be generated, so the power conversion device cannot be used alone for a specific purpose.

[0011] In the load control system according to the above aspect, the function of the plurality of functional blocks arranged in a predetermined order is preferably a function that does not exist in the power conversion device if linked security authentication is not established.

[0012] In the load control system according to the above aspect, preferably, when the linked security authentication is established, the plurality of functional blocks function in a predetermined order, so that the power conversion device: It is different from a frequency converter that can output a variable frequency or variable voltage for use in a purpose other than the specified purpose. The device can be used as a frequency converter capable of outputting a first variable frequency or a first variable voltage. With this configuration, the confidentiality of the function of being able to output the first variable frequency or the first variable voltage can be maintained.

[0014] In a load control system, when linked security authentication is established, a power conversion device can be used as a frequency conversion device capable of outputting a first variable frequency or a first variable voltage. , preferably If the linked security authentication is not established, the multiple functional blocks do not function in a predetermined order, and the power conversion device becomes a frequency conversion device capable of outputting a second variable frequency or a second variable voltage as a frequency conversion device capable of outputting a variable frequency or a variable voltage for use in an application other than the predetermined application; A power conversion device that can be used as a frequency conversion device capable of outputting a first variable frequency or a first variable voltage when linked security authentication is established, and a power conversion device that becomes a frequency conversion device capable of outputting a second variable frequency or a second variable voltage different from the frequency conversion device capable of outputting the first variable frequency or the first variable voltage when linked security authentication is not established, are the same power conversion device.

[0015] In the load control system according to the above aspect, preferably, the power conversion device includes a standard functional area and a dedicated functional area, the standard functional area including a frequency setting unit, a standard control circuit, and a PWM circuit, and the dedicated functional area includes a plurality of functional blocks, and when the linked security authentication is not established, the desired frequency is set by the frequency setting unit, a command value of the set frequency is input to the standard control circuit, and the PWM circuit is operated to operate the PWM circuit so that a second variable frequency or a second variable voltage is output from the power conversion device, and when the linked security authentication is established, the plurality of functional blocks function to operate the PWM circuit so that a first variable frequency or a first variable voltage is output from the power conversion device.

[0016] In the load control system according to the above aspect, preferably, the power conversion device includes a volatile storage means for storing generation software that is generated so that the multiple functional blocks function in a predetermined order when linked security authentication is established, and when the power supply to the power conversion device is cut off, the generation software stored in the storage means is erased.

[0017] In the load control system according to the above aspect, preferably, when linked security authentication is established through the linkage between the control device, the power electronics device, and the load, a plurality of functional blocks function in the power electronics device. With this configuration, confidentiality (security level) can be improved compared to when linked security authentication is established only through the linkage between the control device and the power electronics device.

[0018] In the load control system according to the above aspect, the control device and the power electronics device are preferably connected by wiring, which is hardware, and the linked security authentication includes authenticating that communication via the wiring has become possible between the control device and the power electronics device. With this configuration, linked security authentication based on the hardware, which is the wiring, can be performed.

[0019] In this case, preferably, the control device is configured to transmit to the power conversion device program code for generating a function that enables the power conversion device to be used for a predetermined application, and the linked security authentication includes authenticating a function generation permission signal that is output when communication via a wire between the control device and the power conversion device is enabled and that permits the function to be generated by the program code. With this configuration, if communication via a wire between the control device and the power conversion device is not enabled, the function generation permission signal is not output, and the function is not generated. This prevents leakage of the function.

[0020] The load control system for authenticating the function creation permission signal preferably further includes a switch configured by hardware that turns on when the function creation permission signal is authenticated, and is configured so that when the function creation permission signal is authenticated, the switch is turned on to output a signal from the functional block configured by software via the switch. With this configuration, linked security authentication can be performed in which hardware and software are linked.

[0021] In the load control system according to the above aspect, preferably, the load includes load identification information specific to the load, the load identification information being stored in the control device and the power conversion device, the control device being configured to transmit the stored load identification information to the power conversion device, and the linked security authentication includes authenticating that the load identification information stored in the power conversion device matches the load identification information transmitted from the control device. With this configuration, when a load already included in the load control system is replaced with another load, the load identification information of the load already included in the load control system differs from the load identification information of the replaced load. As a result, when the load is replaced, the linked security authentication is not established, thereby preventing a function from being generated (executed) in a state where the load has been replaced.

[0022] In the load control system according to the above aspect, the control device is preferably configured to transmit to the power electronics device program code for generating a function that enables the power electronics device to be used for a predetermined purpose, and the linked security authentication includes authenticating the program code transmitted from the control device based on predetermined conditions. With this configuration, if a control device originally included in the load control system is replaced with another control device, the program code transmitted from the other control device will not satisfy the predetermined conditions, and the linked security authentication will not be established. This makes it possible to prevent the function from being generated (executed) in a state where the control device has been replaced.

[0023] In the load control system according to the above aspect, preferably, at least one of the control device, the power electronics device, and the load has a unique security authentication, and when the unique security authentication is established for at least one of the control device, the power electronics device, and the load, and the linked security authentication is established, the multiple function blocks in the power electronics device function. With this configuration, the unique security authentication is required in addition to the linked security authentication, thereby further improving confidentiality.

[0024] In this case, the unique security authentication specific to the control device preferably includes control device security authentication for starting up the control device. With this configuration, in addition to the linked security authentication, control device security authentication of the control device must also be established, thereby further improving confidentiality.

[0025] In the load control system having the unique security authentication, the load preferably includes load identification information unique to the load, and the unique security authentication of the load includes load security authentication for acquiring the load identification information from the load using a personal identification number. With this configuration, since the load security authentication must be established in addition to the linked security authentication, confidentiality can be further improved. [Effects of the Invention]

[0026] According to the present invention, as described above, it is possible to improve the confidentiality of functions. [Brief explanation of the drawings]

[0027] [Figure 1] 1 is a block diagram of a motor control system according to one embodiment of the present invention; [Figure 2] 1 is a block diagram (a diagram showing functional blocks) of a power conversion device according to an embodiment of the present invention. [Figure 3] FIG. 2 is a diagram illustrating motor security authentication according to an embodiment of the present invention. [Figure 4]4 is a flowchart illustrating federated security authentication of a motor control system according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE INVENTION

[0028] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, specific embodiments of the present invention will be described with reference to the accompanying drawings.

[0029] The configuration of a motor control system 100 according to this embodiment will be described with reference to Figures 1 to 4. The motor control system 100 is an example of the "load control system" defined in the claims.

[0030] <Motor Control System Configuration> As shown in Fig. 1, motor control system 100 includes a control device 1 such as a host controller, a power conversion device 2 controlled by commands from control device 1, and a motor 3 supplied with power from power conversion device 2. Note that motor 3 is an example of a "load" in the claims. Motor control system 100 is also applicable to, for example, conveyance machines, processing machines, air conditioners, and the like.

[0031] The control device 1 and the power conversion device 2 are connected by a dedicated cable 4a. Communication between the control device 1 and the power conversion device 2 via the cable 4a is performed based on a dedicated protocol. In other words, if the control device 1 or the power conversion device 2 is replaced with a control device 1 or a power conversion device 2 that is not based on (does not have) a dedicated protocol, communication between the control device 1 and the power conversion device 2 will no longer be possible. Note that the communication via the cable 4a is analog communication or digital communication. Furthermore, the cable 4a is an example of "wiring" in the claims.

[0032] The power conversion device 2 and the motor 3 are connected by a cable 4b. The cable 4b is a general wiring. Furthermore, communication between the power conversion device 2 and the motor 3 is not performed based on a dedicated protocol.

[0033] <Configuration of control device> Next, the configuration of the control device 1 will be described with reference to Fig. 2. Note that, for convenience, two control devices 1 are depicted in Fig. 2, but in reality, there is only one control device 1.

[0034] As shown in FIG. 2, the control device 1 is configured to set (store) the motor identification symbol of the motor 3 in a dedicated code and to transmit the stored motor identification symbol to the power conversion device 2. The motor identification symbol is a unique symbol for each motor 3. The motor identification symbol makes it possible to identify the motor 3. The motor identification symbol is also an example of "load identification information" in the claims.

[0035] The control device 1 is also configured to transmit to the power conversion device 2 program code that generates a function that enables the power conversion device 2 to be used for a predetermined purpose. The control device 1 is also configured to transmit a frequency command to the power conversion device 2. The motor identification symbol, program code, and frequency command are transmitted to the power conversion device 2 via a cable 4a. The motor identification symbol, program code, and frequency command are also transmitted to addresses 21a, 21b, and 21c, which are addresses limited to the control device 1, respectively, based on a dedicated protocol. The frequency command is a command for causing the power conversion device 2 to output a desired frequency or a desired voltage.

[0036] The control device 1 is also configured to transmit a security authentication signal and a code generation permission signal to the power conversion device 2. The security authentication signal and the code generation permission signal will be described in detail later.

[0037] In this embodiment, the control device 1 has unique security authentication. Specifically, the control device 1 performs control device security authentication to start up the control device 1. The control device security authentication is, for example, by starting up an unlocking program to put the control device 1 into a state where software can be installed. The control device security authentication is also to make software startable by inputting a key unique to each control device 1, which is composed of multiple digits. The control device security authentication is also to perform detailed model settings, change various passcodes, and manage passcodes by inputting a setting passcode for the control device 1. The control device security authentication is an example of the "unique security authentication" in the claims.

[0038] <Configuration of power conversion device> Next, the configuration of the power conversion device 2 will be described with reference to Fig. 2. Note that the motor mutual authentication processing unit 22, security authentication processing unit 23, program code authentication processing unit 24, code authentication unit 25, and dedicated function unit 26 described below are functional blocks configured by software. These functional blocks are provided in a control unit (not shown) of the power conversion device 2.

[0039] 2, the power conversion device 2 includes a standard function area 2a and a dedicated function area 2b. The standard function area 2a is provided with a frequency setting unit 31, a standard control circuit 32, and a PWM circuit 33. A desired frequency is set by the frequency setting unit 31, and a command value for the set frequency is input to the standard control circuit 32. When the PWM circuit 33 is operated, the power conversion device 2 outputs a voltage having a frequency based on this command value to the motor 3.

[0040] The dedicated function area 2b also includes a motor mutual authentication processing unit 22. A motor identification symbol is input to the motor mutual authentication processing unit 22 from the control device 1. In this embodiment, the motor mutual authentication processing unit 22 authenticates (verifies) that the motor identification symbol stored in the power conversion device 2 matches the motor identification symbol transmitted from the control device 1. In other words, the motor mutual authentication processing unit 22 is configured to perform software-based linked security authentication based on the linkage between the control device 1, the power conversion device 2, and the motor 3.

[0041] The dedicated function area 2b also includes a security authentication processing unit 23. The security authentication processing unit 23 is configured to transmit a security authentication signal from the control device 1. The security authentication signal is linked security authentication based on hardware (cable 4a). Specifically, the security authentication signal certifies that communication via the cable 4a between the control device 1 and the power electronics device 2 is now possible. In other words, the security authentication signal is a signal transmitted from the control device 1 when the control device 1 and the power electronics device 2 are connected by the dedicated cable 4a and communication based on a dedicated protocol is now possible. For example, when the voltage applied to the dedicated cable 4a reaches a predetermined voltage, the security authentication signal is transmitted.

[0042] The dedicated function area 2b is also provided with a program code authentication processing unit 24. The program code authentication processing unit 24 is configured to authenticate program code transmitted from the control device 1 for generating a function that enables the power conversion device 2 to be used for a predetermined purpose. Specifically, in this embodiment, the program code authentication processing unit 24 authenticates the program code transmitted from the control device 1 based on predetermined conditions (software-based linked security authentication).

[0043] For example, a function that enables the power electronics device 2 to be used for a predetermined purpose is realized (generated) by causing a plurality of function blocks 26a, 26b, and 26c, which are provided in advance in the dedicated function unit 26, to function in a predetermined order. This predetermined order is stored (memorized) in advance in the power electronics device 2. The program code transmitted from the control device 1 includes this predetermined order. The program code authentication processing unit 24 then authenticates (verifies) whether the predetermined order stored in advance in the power electronics device 2 matches the predetermined order included in the program code transmitted from the control device 1.

[0044] Furthermore, the dedicated function area 2b is provided with a code authentication unit 25. A code generation permission signal is input to the code authentication unit 25. The code generation permission signal is output when communication via the cable 4a becomes possible between the control device 1 and the power conversion device 2. In this embodiment, the code authentication unit 25 is configured to authenticate the input code generation permission signal (linked security authentication based on the cable 4a, which is hardware). The code generation permission signal is an example of a "function generation permission signal" in the claims.

[0045] Furthermore, in this embodiment, a switch 40 configured by hardware is provided, which is turned on when the code generation permission signal is authenticated. When the code generation permission signal is authenticated, the switch 40 is turned on, and a signal is output from a functional block configured by software via the switch 40. For example, when the code generation permission signal is authenticated, the functional block 26c and the switch 40 are connected (see the dashed dotted line inside the dedicated function unit 26), and a signal is output from the functional block 26c to the outside of the dedicated function unit 26 via the switch 40.

[0046] Furthermore, the dedicated function area 2b is provided with a dedicated function unit 26. The dedicated function unit 26 (power electronics device 2) is configured such that, when linked security authentication is established, software generates a function that enables the power electronics device 2 to be used for a predetermined purpose. That is, as described above, when linked security authentication is established, a plurality of function blocks 26a, 26b, and 26c provided in the dedicated function unit 26 in advance are made to function in a predetermined order.

[0047] The power conversion device 2 is also provided with a function code (not shown). The function code is a code for changing the function of the power conversion device 2 by changing the settings of the power conversion device 2, etc. The function code is known only to an administrator, etc., and is not known to third parties. Authenticating the function code (changing settings using the function code, etc.) is an example of the "unique security authentication" in the claims.

[0048] <Motor configuration> Next, the configuration of the motor 3 will be described with reference to FIG.

[0049] 3, the motor 3 includes a motor identification code that is unique to the motor 3. The motor identification code is stored in, for example, an IC chip 41 provided within the motor 3.

[0050] In this embodiment, the motor 3 is configured to perform motor security authentication that is unique to the motor 3. For example, a reader 42 reads a motor identification code from the motor 3 that is provided with an IC chip 41. A personal identification number (PIN) is required to read the motor identification code from the IC chip 41. The PIN is known only to the administrator and not to third parties. The read motor identification code is input into the management system 43 and set (stored) in the dedicated codes of the control device 1 and the power conversion device 2. The motor security authentication is an example of the "unique security authentication" and "load security authentication" in the claims.

[0051] In this embodiment, when linked security authentication based on at least one of hardware and software (specifically, both hardware and software) is established through the linkage of at least the control device 1 and the power conversion device 2 out of the control device 1, the power conversion device 2, and the motor 3 (specifically, the three components of the control device 1, the power conversion device 2, and the motor 3), the software in the power conversion device 2 generates a function that enables the power conversion device 2 to be used for a predetermined application. The linked security authentication will be described below.

[0052] <Linked Security Authentication> Next, the linked security authentication will be described with reference to Fig. 4. The following linked security authentication process is mainly performed by a control unit (not shown) of the power conversion device 2. It is also assumed that control device security authentication of the control device 1, authentication of the function code of the power conversion device 2, and motor security authentication of the motor 3 have been performed in advance.

[0053] As shown in FIG. 4, in step S1, the security authentication signal transmitted from the control device 1 is read.

[0054] Next, in step S2, the security authentication signal is authenticated by the security authentication processing unit 23. That is, if communication between the control device 1 and the power conversion device 2 via the cable 4a is possible, the security authentication signal transmitted from the control device 1 is authenticated. This turns on the switch 27a (see FIG. 2). Note that the switch 27a is not a mechanical switch but a software switch. Furthermore, if the security authentication signal is not authenticated by the security authentication processing unit 23, the linked security authentication process is terminated. Note that the authentication in step S2 is based on hardware (the cable 4a).

[0055] Next, in step S3, communication between the control device 1 and the power conversion device 2 via the cable 4a is executed (started).

[0056] Next, in step S4, the motor identification code is acquired (received) via the cable 4a from the control device 1. The motor identification code is acquired by the motor mutual authentication processing unit 22.

[0057] Next, in step S5, the motor mutual authentication processing unit 22 acquires the motor identification code set (stored) in the dedicated code of the power conversion device 2.

[0058] Next, in step S6, motor mutual authentication processing unit 22 determines (authenticates) whether or not the motor identification symbol stored in power conversion device 2 matches the motor identification symbol transmitted from control device 1. If the motor identification symbol stored in power conversion device 2 matches the motor identification symbol transmitted from control device 1, software switch 27b (see FIG. 2) is turned on and the process proceeds to step S7; if they do not match, the linked security authentication process is terminated. Note that the authentication in step S6 is linked security authentication based on software (motor mutual authentication processing unit 22).

[0059] Next, in step S7, the program code is acquired (received) via the cable 4a from the control device 1. The program code is acquired by the program code authentication processing unit .

[0060] Next, in step S8, the program code is authenticated by the program code authentication processing unit 24. Specifically, as described above, the program code is authenticated (checked) to determine whether a predetermined order stored in advance in the power electronics device 2 for causing the multiple function blocks 26a, 26b, and 26c provided in the dedicated function unit 26 to function in a predetermined order matches a predetermined order included in the program code transmitted from the control device 1. If the predetermined order stored in the power electronics device 2 matches the predetermined order included in the program code transmitted from the control device 1, the process proceeds to step S9; if they do not match, the linked security authentication process is terminated. Note that the authentication in step S8 is linked security authentication based on software (program code authentication processing unit 24).

[0061] Next, in step S9, a code generation permission signal is acquired (received) from the control device 1. The code generation permission signal is acquired by the code authentication unit 25. The code generation permission signal is a signal that permits a function to be generated by program code.

[0062] Next, in step S10, the code authentication unit 25 authenticates the code generation permission signal. The code generation permission signal is output (authenticated) when communication via the cable 4a becomes possible between the control device 1 and the power conversion device 2. Furthermore, authenticating the code generation permission signal is linked security authentication based on hardware (cable 4a). In step S10, if the code generation permission signal is authenticated, the process proceeds to step S11, and if the code generation permission signal is not authenticated, the linked security authentication process is terminated.

[0063] Furthermore, if the code generation permission signal is authenticated in step S10, the switch 34a (see FIG. 2) is turned on, and the switch 34b (see FIG. 2) is turned off.

[0064] Next, in step S11, the dedicated function unit 26 of the power conversion device 2 generates a function by software that enables the power conversion device 2 to be used for a predetermined purpose. The term "generating a function by software" means that "program code for generating a function that enables the power conversion device 2 to be used for a predetermined purpose is transmitted from the control device 1 to the power conversion device 2, and the power conversion device 2 performs authentication based on the program code in accordance with predetermined conditions, thereby generating a function that enables the power conversion device 2 to be used for the predetermined purpose by software." Specifically, in this embodiment, if the linked security authentication is successful, the software generates a function that enables the power conversion device 2 to be used as a frequency converter capable of outputting a first variable frequency or a first variable voltage. Specifically, based on the program code transmitted from the control device 1, the multiple function blocks 26a, 26b, and 26c provided in the dedicated function unit 26 are operated in a predetermined order. This enables the power conversion device 2 to be used as a frequency converter capable of outputting a first variable frequency or a first variable voltage based on the software generated by the dedicated function unit 26 for use in the predetermined purpose. As a result, the standard control circuit 32 and the PWM circuit 33 are operated so that the first variable frequency or the first variable voltage is output from the power conversion device 2. Here, the generated software is stored in a volatile storage means such as RAM, and if the power supply is cut off, the stored information cannot be retained and the function used for the specified purpose is lost.

[0065] In this embodiment, if the linked security authentication is not successful in any of steps S2, S6, S8, and S10, the power conversion device 2 is configured to function as a frequency conversion device capable of outputting a second variable frequency or a second variable voltage for use in an application different from that of the power conversion device 2 capable of outputting the first variable frequency or the first variable voltage. That is, the software switch 34a remains off, and the software switch 34b remains on. This causes the standard control circuit 32 and the PWM circuit 33 to operate so that the second variable frequency or the second variable voltage is output from the power conversion device 2 based on the command value set by the frequency setting unit 31 in the standard function area 2a.

[0066] As described above, in this embodiment, linked security authentication (authentication of the motor identification symbol) is performed through the linkage between the control device 1, the power conversion device 2, and the motor 3, and linked security authentication (authentication of the security authentication signal, authentication of the program code, and authentication of the code generation permission signal) is performed through the linkage between the control device 1 and the power conversion device 2. In addition, linked security authentication is performed based on both hardware (cable 4a) and software (security authentication processing unit 23, motor mutual authentication processing unit 22, program code authentication processing unit 24, code authentication unit 25).

[0067] Furthermore, as described above, linked security authentication is performed after control device security authentication of the control device 1, authentication of the function code of the power conversion device 2, and motor security authentication of the motor 3 have been performed in advance. That is, in this embodiment, when control device security authentication of the control device 1, authentication of the function code of the power conversion device 2, and motor security authentication of the motor 3 have been established, and linked security authentication has also been established, software is generated in the power conversion device 2 to enable the power conversion device 2 to be used for a predetermined application.

[0068] (Effects of this embodiment) In this embodiment, the following effects can be obtained.

[0069] In the present embodiment, as described above, when linked security authentication based on at least one of hardware and software is established between at least the control device 1, the power conversion device 2, and the motor 3, the power conversion device 2 is configured to generate a function in the power conversion device 2 that enables the power conversion device 2 to be used for a predetermined purpose by software. As a result, if linked security authentication is not established, the power conversion device 2 does not generate a function that enables the power conversion device 2 to be used for a predetermined purpose. As a result, even if the internal structure of the power conversion device 2 is analyzed, the function that enables the power conversion device 2 to be used for a predetermined purpose is not generated, and therefore the function will not be leaked. This allows the confidentiality of the function to be maintained. In other words, since the confidentiality of the function that enables the power conversion device 2 to be used for a predetermined purpose is maintained by the linkage of multiple devices, at least the control device 1 and the power conversion device 2, the confidentiality of the function is maintained even if a password or the like of one of the multiple devices is leaked. This allows the confidentiality of the function to be improved.

[0070] Furthermore, since linked security authentication must be established through at least the link between the control device 1 and the power conversion device 2, linked security authentication will not be established if the power conversion device 2 is removed alone from the motor control system 100, or if the power conversion device 2 is removed alone from the motor control system 100 and combined with another motor 3 that cannot be authenticated. In other words, in these cases, no function is generated, so there is no risk of the function being leaked. Furthermore, if security authentication is not established, no function is generated, so the power conversion device 2 cannot be used alone for a specific purpose.

[0071] Furthermore, in this embodiment, as described above, when the linked security authentication is successful, the software generates a function that enables the power electronics device 2 to be used as a frequency conversion device capable of outputting the first variable frequency or the first variable voltage. This makes it possible to maintain the confidentiality of the function of the power electronics device being capable of outputting the first variable frequency or the first variable voltage.

[0072] Furthermore, in this embodiment, as described above, if the linked security authentication is not established, the power conversion device 2 is configured to function as a frequency conversion device capable of outputting a second variable frequency or a second variable voltage for use in an application different from that of the power conversion device 2 capable of outputting the first variable frequency or the first variable voltage. As a result, if the linked security authentication is not established, the power conversion device 2 can be used as a frequency conversion device capable of outputting the second variable frequency or the second variable voltage.

[0073] Furthermore, in this embodiment, as described above, when linked security authentication based on both hardware and software is established through the linkage between at least the control device 1 and the power conversion device 2 among the control device 1, the power conversion device 2, and the motor 3, the power conversion device 2 is configured to generate, by software, a function that enables the power conversion device 2 to be used for a predetermined application. As a result, linked security authentication is established based on both hardware and software, which can improve confidentiality compared to when linked security authentication is established based on only one of hardware and software.

[0074] Furthermore, in this embodiment, as described above, when linked security authentication based on at least one of hardware and software is established through the linkage between the control device 1, the power conversion device 2, and the motor 3, the power conversion device 2 is configured to generate, by software, a function that enables the power conversion device 2 to be used for a predetermined application. This makes it possible to improve confidentiality (security level) compared to when linked security authentication is established solely through the linkage between the control device 1 and the power conversion device 2.

[0075] Furthermore, in this embodiment, as described above, the control device 1 and the power electronics device 2 are connected by the cable 4a, which is hardware, and the linked security authentication based on the hardware includes authenticating that communication via the cable 4a has become possible between the control device 1 and the power electronics device 2. This allows the linked security authentication based on the hardware, namely the cable 4a, to be performed.

[0076] Furthermore, in this embodiment, as described above, the hardware-based linked security authentication includes authenticating a code generation permission signal that is output when communication via the cable 4a between the control device 1 and the power electronics device 2 is possible, and that permits the generation of a function by program code. As a result, when communication via the cable 4a is not possible between the control device 1 and the power electronics device 2, the code generation permission signal is not output, and therefore the function is not generated. This makes it possible to prevent the leakage of the function.

[0077] Furthermore, as described above, this embodiment is configured to include a switch 40 configured by hardware that turns on when the code generation permission signal is authenticated, and when the code generation permission signal is authenticated, the switch 40 is turned on, causing a signal to be output from a functional block configured by software via the switch 40. This enables linked security authentication in which hardware and software work together. For example, if the switch 40 is turned off due to a break or disconnection of the cable 4a while the device is running or stopped, the device will no longer function.

[0078] Furthermore, in this embodiment, as described above, software-based linked security authentication includes authenticating that the motor identification symbol stored in the power conversion device 2 matches the motor identification symbol transmitted from the control device 1. As a result, when the motor 3 already included in the motor control system 100 is replaced with another motor 3, the motor identification symbol of the motor 3 already included in the motor control system 100 differs from the motor identification symbol of the replaced motor 3. As a result, linked security authentication is not established when the motor 3 is replaced, and it is possible to prevent a function from being generated (a function from being exercised) in a state where the motor 3 has been replaced.

[0079] Furthermore, in this embodiment, as described above, software-based linked security authentication includes authenticating the program code transmitted from the control device 1 based on predetermined conditions. As a result, if the control device 1 pre-installed in the motor control system 100 is replaced with another control device 1, the program code transmitted from the other control device 1 will not satisfy the predetermined conditions, and linked security authentication will not be established. This makes it possible to prevent functions from being generated (functions being exercised) in a state where the control device 1 has been replaced.

[0080] Furthermore, in this embodiment, as described above, at least one of the control device 1, the power conversion device 2, and the motor 3 has a unique, inherent security authentication, and when the unique, inherent security authentication is established for at least one of the control device 1, the power conversion device 2, and the motor 3, and the linked security authentication is also established, the power conversion device 2 is configured to generate a function by software that enables the power conversion device 2 to be used for a predetermined application. This requires the unique security authentication in addition to the linked security authentication, thereby further improving confidentiality.

[0081] Furthermore, in this embodiment, as described above, the unique security authentication specific to the control device 1 includes control device security authentication for starting up the control device 1. This means that in addition to the linked security authentication, control device security authentication of the control device 1 must also be established, thereby further improving confidentiality.

[0082] Furthermore, in this embodiment, as described above, the motor 3 includes a motor identification symbol that is unique to the motor 3, and the unique security authentication of the motor 3 includes motor security authentication that uses a PIN to obtain the motor identification symbol from the motor 3. This makes it possible to further enhance confidentiality, since motor security authentication must also be established in addition to linked security authentication.

[0083] [Variations] The embodiments disclosed herein should be considered to be illustrative and not restrictive in all respects. The scope of the present invention is defined by the claims rather than the description of the above embodiments, and further includes all modifications (variations) within the meaning and scope of the claims.

[0084] For example, in the above embodiment, an example has been described in which, when linked security authentication is established, a function is generated by software that enables the power electronics device to be used as a frequency converter capable of outputting a first variable frequency or a first variable voltage. However, the present invention is not limited to this. For example, when linked security authentication is established, a function may be generated by software that enables the power electronics device to be used as a device other than a frequency converter capable of outputting a first variable frequency or a first variable voltage.

[0085] In the above embodiment, an example has been described in which a function is generated by software when linked security authentication based on both hardware and software is established, but the present invention is not limited to this. For example, a function may be generated by software when linked security authentication based on only one of hardware and software is established.

[0086] In the above embodiment, an example has been shown in which a function is generated by software when linked security authentication is established between three devices, a control device, a power conversion device, and a motor, but the present invention is not limited to this. For example, a function may be generated by software when linked security authentication is established between two devices, a control device and a power conversion device.

[0087] In the above embodiment, the hardware-based linked security authentication is an example of authentication based on a cable, but the present invention is not limited to this. For example, linked security authentication may be performed based on hardware other than a cable.

[0088] In the above embodiment, the software-based linked security authentication is performed by the security authentication processing unit, the motor mutual authentication processing unit, the program code authentication processing unit, and the code authentication unit. However, the present invention is not limited to this. For example, the software-based linked security authentication may be performed by a unit other than the security authentication processing unit, the motor mutual authentication processing unit, the program code authentication processing unit, and the code authentication unit.

[0089] In the above embodiment, the control device, the power conversion device, and the motor all have their own unique security authentications, but the present invention is not limited to this. For example, one or two of the control device, the power conversion device, and the motor may have their own unique security authentications. Furthermore, functions may be generated by software when only the linked security authentication is established, without using the unique security authentications of the control device, the power conversion device, and the motor.

[0090] In the above embodiment, the unique security authentication specific to the control device is authentication for starting up the control device, but the present invention is not limited to this. For example, the unique security authentication specific to the control device may be authentication for something other than starting up the control device.

[0091] In the above embodiment, the unique security authentication specific to the motor is authentication in which a motor-specific symbol is obtained from the motor using a personal identification number, but the present invention is not limited to this. For example, the unique security authentication specific to the motor may be authentication other than authentication in which a motor-specific symbol is obtained from the motor using a personal identification number.

[0092] In the above embodiment, the "load identification information" is a motor identification symbol, but the present invention is not limited to this. For example, a load identification symbol capable of identifying a load may be used instead of the motor identification symbol. In this case, an IC chip storing the load identification symbol is provided inside the load device driven by the motor.

[0093] In the above embodiment, a motor is used as a load to which power is supplied from the power conversion device, but the present invention is not limited to this. For example, power may be supplied from the power conversion device to a load other than a motor.

[0094] In the above embodiment, the power conversion device functions as a frequency conversion device, but the present invention is not limited to this. For example, the power conversion device may function as a device other than a frequency conversion device. [Explanation of symbols]

[0095] 1. Control device 2. Power conversion device 3 Motor (load) 4a Cable (wiring) 40 Switch 100 Motor control system (load control system)

Claims

1. a control device; a power conversion device controlled by the control device; a load to which power is supplied from the power conversion device, When cooperative security authentication is established by cooperation between at least the control device and the power electronics device among the control device, the power electronics device, and the load, the power conversion device receives from the control device a program code that causes a plurality of function blocks provided in a dedicated function unit configured by software to function; The plurality of functional blocks are configured to function in accordance with a predetermined order that is stored in advance in the power conversion device based on the program code, A load control system in which the functions of the multiple functional blocks in the specified order are functions that enable the power conversion device to be used for a specified purpose, and if the linked security authentication is not established, the multiple functional blocks do not function in the specified order, causing the power conversion device to become a frequency conversion device that can output a variable frequency or variable voltage for use for a purpose other than the specified purpose.

2. The load control system according to claim 1, wherein the functions of the plurality of functional blocks according to the predetermined order are functions that do not exist in the power conversion device if the linked security authentication is not established.

3. 3. The load control system of claim 1, wherein when the linked security authentication is successful, the plurality of functional blocks function in the predetermined order, thereby enabling the power conversion device to be used as the frequency conversion device capable of outputting a first variable frequency or a first variable voltage that is different from the frequency conversion device capable of outputting the variable frequency or the variable voltage for use in an application other than the predetermined application.

4. If the linked security authentication is not established, the plurality of functional blocks do not function in the predetermined order, and the power conversion device becomes the frequency conversion device capable of outputting the variable frequency or the variable voltage for use in an application different from the predetermined application, and becomes the frequency conversion device capable of outputting a second variable frequency or a second variable voltage; the power conversion device that can be used as the frequency conversion device capable of outputting the first variable frequency or the first variable voltage when the linked security authentication is established; The load control system of claim 3, wherein the power conversion device that becomes the frequency conversion device capable of outputting the second variable frequency or the second variable voltage, which is different from the frequency conversion device capable of outputting the first variable frequency or the first variable voltage when the linked security authentication is not established, is the same power conversion device.

5. the power conversion device includes a standard function area and a dedicated function area; the standard function area includes a frequency setting unit, a standard control circuit, and a PWM circuit; the dedicated function area includes the plurality of function blocks; if the linked security authentication is not established, a desired frequency is set by the frequency setting unit, a command value of the set frequency is input to the standard control circuit, and the PWM circuit is operated so that the second variable frequency or the second variable voltage is output from the power conversion device; 5. The load control system of claim 4, wherein when the linked security authentication is successful, the plurality of functional blocks function to operate the PWM circuit so that the first variable frequency or the first variable voltage is output from the power conversion device.

6. the power conversion device includes a volatile storage means for storing generation software that is generated so that the plurality of functional blocks function in accordance with the predetermined order when the linked security authentication is established; 6. The load control system according to claim 1, wherein when the power supply to the power conversion device is cut off, the generation software stored in the storage means is erased.

7. When the linked security authentication is established by the linkage between the control device, the power conversion device, and the load, the plurality of functional blocks function in the power conversion device. The load control system according to any one of claims 1 to 6.

8. The control device and the power conversion device are connected by wiring, which is hardware. The linked security authentication includes authenticating that communication via the wiring is possible between the control device and the power conversion device. The load control system according to any one of claims 1 to 7.

9. the control device is configured to transmit the program code to the power conversion device to generate functionality that enables the power conversion device to be used for a predetermined application; The load control system of claim 8, wherein the linked security authentication includes authenticating a function generation permission signal that is output when communication via the wiring becomes possible between the control device and the power conversion device and that permits a function to be generated by the program code.

10. a switch configured by hardware that is turned on when the function creation permission signal is authenticated; 10. The load control system of claim 9, wherein the switch is turned on when the function generation permission signal is authenticated, and a signal is output from the functional block configured by software via the switch.

11. the load includes load-specific information specific to the load; the load identification information is stored in the control device and the power conversion device; the control device is configured to transmit the stored load identification information to the power conversion device, The linked security authentication includes authenticating that the load identification information stored in the power conversion device and the load identification information transmitted from the control device are consistent. A load control system according to any one of claims 1 to 10.

12. the control device is configured to transmit the program code to the power conversion device to generate functionality that enables the power conversion device to be used for a predetermined application; The load control system according to any one of claims 1 to 11, wherein the linked security authentication includes authenticating the program code transmitted from the control device based on a predetermined condition.

13. At least one of the control device, the power conversion device, and the load has a unique security authentication; The load control system according to any one of claims 1 to 12, wherein when the unique security authentication specific to at least one of the control device, the power conversion device, and the load is established and the linked security authentication is established, the plurality of functional blocks function in the power conversion device.

14. The load control system of claim 13 , wherein the unique security authentication unique to the control device includes a control device security authentication for activating the control device.

15. the load includes load-specific information specific to the load; The load control system according to claim 13 or 14, wherein the unique security authentication of the load includes load security authentication that acquires the load identification information from the load using a personal identification number.

Images