Apparatus, method, and program

The system separates periodic and non-periodic processing in field devices by writing non-periodic requests to a storage device and prohibiting subsequent executions, enhancing the security of safety-critical data handling.

JP7885709B2Active Publication Date: 2026-07-07YOKOGAWA ELECTRIC CORP

Patent Information

Authority / Receiving Office
JP · JP
Patent Type
Patents
Current Assignee / Owner
YOKOGAWA ELECTRIC CORP
Filing Date
2023-03-23
Publication Date
2026-07-07

AI Technical Summary

Technical Problem

Existing systems face challenges in efficiently managing periodic and non-periodic processing without compromising the security of safety-critical data, particularly in field devices that require secure and non-secure data handling.

Method used

The system includes a first processing unit for periodic processing and a request receiving unit that writes non-periodic processing requests to a storage device, with a prohibiting unit preventing execution of subsequent requests during a defined prohibition period, ensuring secure handling of safety-critical data.

Benefits of technology

This approach enhances the security of safety-critical data by separating periodic and non-periodic processing, preventing interference and ensuring reliable execution of both types of processing without hindering periodic operations.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 0007885709000001
    Figure 0007885709000001
  • Figure 0007885709000002
    Figure 0007885709000002
  • Figure 0007885709000003
    Figure 0007885709000003
Patent Text Reader

Abstract

To provide a device capable of surely preventing obstruction against execution of a periodical process.SOLUTION: There is provided a device which includes: a first processing unit which executes a periodical process in each of periodic periods; a request accepting unit which stores, in response to have received an execution request of a non-periodical process to be executed by the first processing unit, a content in a storage device according to the execution request and allows the first processing unit to execute the content; and an inhibiting unit which inhibits execution of the non-periodical process according to a successive execution request for an inhibition period of a reference length by the first processing unit in response to storing of the content according to the execution request in the storage device by the request accepting unit.SELECTED DRAWING: Figure 1
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to an apparatus, a method, and a program.

Background Art

[0002] Patent Document 1 describes, for example, "The processes important for the safety performed by the safety process 41 include processes such as a process of acquiring the measurement result of the sensor unit 10, a process of converting the measurement result of the sensor unit 10 into a process value, and a process of transmitting the process value." (paragraph 0024). [Prior Art Document] [Patent Document] [Patent Document 1] Patent No. 5862614

Summary of the Invention

[0003] In a first aspect of the present invention, there is provided an apparatus including: a first processing unit that performs periodic processing within each of periodic periods; and a request receiving unit that, in response to receiving a request to execute non-periodic processing to be performed by the first processing unit, writes the content corresponding to the execution request into a storage device and causes the first processing unit to execute it.

[0004] In the above apparatus, the apparatus may further include a prohibiting unit that prohibits the execution by the first processing unit of non-periodic processing corresponding to a subsequent execution request for a prohibited period based on the writing of the content corresponding to the execution request into the storage device by the request receiving unit.

[0005] In the above apparatus having a prohibiting unit, the prohibiting unit may prohibit the reception of the subsequent execution request by the request receiving unit for the prohibited period.

[0006] In the above apparatus having a prohibiting unit, the prohibiting unit may prohibit the writing of the content corresponding to the subsequent execution request into the storage device by the request receiving unit for the prohibited period.

[0007] In the above-described apparatus having a prohibition unit, the request receiving unit may, after writing the contents corresponding to the execution request to the storage device, notify the first processing unit to cause the first processing unit to execute the non-periodic processing corresponding to the execution request, and the prohibition unit may, after writing the contents corresponding to the execution request to the storage device, prohibit the request receiving unit from making the notification in response to subsequent execution requests for the duration of the prohibition period.

[0008] In any of the above-mentioned devices having a prohibition section, the prohibition period may be longer than the period of the cycle period.

[0009] In the apparatus according to the first embodiment described above, the first processing unit may execute the non-periodic processing in response to the content corresponding to the execution request being written to the storage device and the periodic processing being executed.

[0010] In any of the above-mentioned devices, the sum of the periodic processing period during which one periodic processing continues and the non-periodic processing period during which the non-periodic processing continues may be shorter than the period of the cycle period.

[0011] In any of the above-described devices, the first processing unit performs the periodic processing and the non-periodic processing on the secure area of ​​the storage device, and the device may further include a second processing unit that performs processing on the non-secure area of ​​the storage device and transmits the execution request to the request receiving unit.

[0012] The above-described device further comprises a storage device, the storage device having a first storage device having the secure area and a second storage device having the non-secure area.

[0013] In any of the above-described devices, an acquisition unit for acquiring measurement data may be further provided, and the periodic processing may include the process of writing at least one of the measurement data acquired by the acquisition unit or the process value derived from the measurement data to the storage device.

[0014] A second embodiment of the present invention provides a method comprising: a request reception step, in response to receiving an execution request for an unperiodic process to be performed by a first processing unit that performs periodic processing within each period, writing the content corresponding to the execution request to the storage device and causing the first processing unit to execute it.

[0015] In a third embodiment of the present invention, a computer is provided which functions as a first processing unit that performs periodic processing within each periodic period, and a request receiving unit that, upon receiving an execution request for non-periodic processing to be performed by the first processing unit, writes the content corresponding to the execution request to the storage device and causes the first processing unit to execute it.

[0016] It should be noted that the above summary of the invention does not enumerate all the necessary features of the present invention. Furthermore, subcombinations of these features may also constitute an invention. [Brief explanation of the drawing]

[0017] [Figure 1] A field device 1 according to the first embodiment is shown. [Figure 2] This is a timing chart showing the relationship between scheduled and irregular processing. [Figure 3] The operation of the processing unit 4 is shown. [Figure 4] The field device 1A according to the second embodiment is shown. [Figure 5] This is a timing chart showing the relationship between scheduled and irregular processing. [Figure 6] This shows the operation of processing unit 4A. [Figure 7] Examples of a computer 2200 in which multiple aspects of the present invention may be embodied in whole or in part are shown. [Modes for carrying out the invention]

[0018] Hereinafter, the present invention will be described through embodiments of the invention. However, the following embodiments do not limit the invention according to the claims. Also, not all combinations of features described in the embodiments are essential for the solution means of the invention.

[0019] (1. First Embodiment) (1.1. Field Device 1) FIG. 1 shows a field device 1 according to the first embodiment. The field device 1 may be a device arranged at the site where the process is executed, and may be capable of communicating with a controller (not shown) that controls the process. In the present embodiment, as an example, the field device 1 transmits a process value indicating a measurement result to the controller as an analog signal, and superimposes various digital signals on the process value to communicate with the controller. The field device 1 may include a sensor device 2, a communication device 3, and a processing device 4.

[0020] (1.1-1. Sensor Device 2) The sensor device 2 measures a value indicating a physical quantity such as pressure, temperature, humidity, liquid level height (level), pH, speed, or flow rate in the process of the plant. For example, the sensor device 2 may be a flow meter that measures the flow rate of a fluid flowing in a pipe or a pressure gauge that measures the pressure of the fluid. As an example, the sensor device 2 may detect a transmission signal (an ultrasonic signal transmitted through the fluid) when transmitting an ultrasonic signal in the direction along the flow of the fluid and a transmission signal when transmitting an ultrasonic signal in the direction against the flow of the fluid, and measure the flow rate of the fluid based on the detection results of these transmission signals. The plant may include, for example, factory facilities, machine facilities, production facilities, power generation facilities, storage facilities, and facilities at the wellhead for extracting oil, natural gas, etc.

[0021] The sensor device 2 may perform measurement under the control of the processing device 4. The sensor device 2 may supply measurement data indicating the measurement result to the processing device 4. In the present embodiment, as an example, the sensor device 2 may sequentially supply the measurement data to the processing device 4.

[0022] (1.1 - 2. Communication device 3) Communication device 3 communicates with a controller (not shown) that controls the process. Communication device 3 is connected to, for example, a transmission line laid at the site of a plant (for example, a transmission line used for the transmission of a "4 - 20 mA" signal), and under the control of processing device 4, transmits the analog signal of the above - mentioned process value to the controller and communicates various digital signals with the controller. Communication device 3 may communicate using a communication protocol for process industries such as HART (registered trademark), BRAIN, etc. Note that communication device 3 may perform wired communication or wireless communication.

[0023] (1.1 - 3. Processing device 4) Processing device 4 is an example of a device and includes an acquisition unit 40, a storage unit 41, a first processing unit 42, a second processing unit 43, a request reception unit 44, and a prohibition unit 45.

[0024] (1.1 - 3.1. Acquisition unit 40) The acquisition unit 40 acquires measurement data. The acquisition unit 40 may acquire measurement data from the sensor device 2 and supply the acquired measurement data to the first processing unit 42. The acquisition unit 40 may supply the measurement data to the first processing unit 42 every time it acquires measurement data from the sensor device 2. Instead of this, the acquisition unit 40 may supply the measurement data acquired from the sensor device 2 to the first processing unit 42 at a preset period (for example, 100 ms). In this case, the acquisition unit 40 may supply the measurement data acquired from the sensor device 2 to the first processing unit 42 for each period, or may supply the measurement data acquired from the sensor device 2 within the period to the first processing unit 42 in a batch, or may average the measurement data acquired from the sensor device 2 within the period and supply it to the first processing unit 42.

[0025] (1.1 - 3.2. Storage unit 41) The memory unit 41 is an example of a storage device and stores various types of data. The memory unit 41 may have a first storage device 411 and a second storage device 412. The first storage device 411 and the second storage device 412 may be separate storage devices, and each may be a volatile memory such as RAM (Random Access Memory), or a non-volatile memory such as flash ROM (Read Only Memory) or EEPROM (Electrically Erasable and Programmable ROM).

[0026] (1.1-3.2(1).1st storage device 411) The first storage device 411 may have a secure area 413. The secure area 413 may be a secure area where information, systems, and communication channels are protected, and may not be directly accessible from the second processing unit 43. The secure area 413 may store safety-critical data among the data used by the field device 1, and may have a secure data area 4130 and a buffer area 4131.

[0027] The secure data area 4130 may be an area accessible only from the first processing unit 42. Examples of data stored in the secure area 413 include measurement data (also called raw data) acquired by the sensor device 2, process values ​​derived from the measurement data, "range setting" data for setting the measurement range of the sensor device 2, "calibration" data for adjusting and calibrating the sensor device 2, and "sensor constant" data indicating the characteristics specific to the sensor elements provided in the sensor device 2. The secure data area 4130 may be write-protected to prevent writing, and writing may be made possible by performing a pre-configured release process.

[0028] The buffer area 4131 may be an area accessible from the first processing unit 42 and the request receiving unit 44, and may store information to be exchanged between the request receiving unit 44 and the first processing unit 42. In this embodiment, as an example, an access request requesting the first processing unit 42 to access data in the secure data area 4130 may be written to the buffer area 4131 by the request receiving unit 44. The access request may request the first processing unit 42 to execute the non-periodic processing described later, and is also called a request to execute non-periodic processing. The access request may be a data write request or a read request. A write request may include the data to be written and identification information of the data to be written. A read request may include identification information of the data to be read. The data identification information may indicate the type of data, and in addition, it may indicate the address of the data in the secure data area 4130. The buffer area 4131 may store data read by the first processing unit 42 in response to a read request.

[0029] (1.1-3.2(2).Second storage device 412) The second storage device 412 may have a non-secure area 414. Unlike the secure area 413, the non-secure area 414 may be an area where information, systems, and communication channels are not protected, and may store safety-uncritical data among the data used by the field device 1. Safety-uncritical data may be data that is not related to the derivation of process values, etc., and may include, for example, "communication settings" data that indicates the settings for communication conducted with the controller, or "display settings" data that indicates the display settings of a display device (not shown) provided on the field device 1.

[0030] (1.1-3.3. First Processing Unit 42) The first processing unit 42 is an example of the first processing unit and performs periodic and irregular processing. The first processing unit 42 may perform periodic and irregular processing on the secure area 413 of the storage unit 41. The first processing unit 42 may perform periodic processing at each cycle period (also referred to as cycle period T30; see Figure 2 below) and may perform irregular processing irregularly.

[0031] The period T30 may be a period that repeats periodically, and in this example of operation, it may be a period that repeats continuously, that is, without any gaps. The period T30 may be equal to the period in which the acquisition unit 40 acquires measurement data from the sensor device 2, and in this embodiment, it may be 100 ms as an example.

[0032] The periodic processing may include writing at least one of the measurement data acquired by the acquisition unit 40 or the process value derived from said measurement data to the storage unit 41. In this embodiment, as an example, the periodic processing may include the process of deriving the process value from the measurement data acquired by the acquisition unit 40, and may include the process of writing both the measurement data and the process value to the storage unit 41. In the process of deriving the process value from the measurement data, the process value may be calculated from the value of the measurement data using the "sensor constant" data in the secure data area, and as an example, the process value may be calculated by multiplying the value of the measurement data by the sensor constant.

[0033] The periodic processing may further include the process of supplying process values ​​to the communication device 3 and transmitting them to the controller as analog signals. The periodic processing may further include the process of supplying process values ​​to the communication processing unit 430 in the second processing unit 43 (described later) and transmitting them from the communication device 3 to the controller as digital signals.

[0034] Irregular processing may be processing performed in response to a request from an external controller (not shown). Irregular processing may be processing to read data in the secure data area 4130. Irregular processing may also be processing to write data to the secure data area 4130, and for example, it may be processing to modify the original data by writing data other than measurement data and process values ​​(in this embodiment, for example, "range setting" data, "calibration" data, or "sensor constant" data) to the secure data area 4130. In this embodiment, the request from the controller may be supplied to the first processing unit 42 via the communication device 3, the second processing unit 43, the request reception unit 44, and the buffer area 4131 of the storage unit 41, for example.

[0035] The first processing unit 42 includes a signal processing unit 420, an access reception unit 421, a write processing unit 422, and a read processing unit 423. The first processing unit 42 may, for example, be a CPU (Central Processing Unit), and each part of the first processing unit 42 may be realized, for example, by a program stored in the storage unit 41 being read by the CPU and executed.

[0036] (1.1-3.3(1). Signal Processing Unit 420) The signal processing unit 420 may primarily perform processing related to periodic processing. In this embodiment, as an example, the signal processing unit 420 may perform the following: the process of acquiring measurement data from the acquisition unit 40; the process of converting the measurement data into process values; the process of supplying write instructions for the measurement data and process values ​​to the write processing unit 422 for writing; the process of supplying the process values ​​to the communication processing unit 430 in the second processing unit 43 (described later) for transmission as digital signals from the communication device 3 to the controller; and the process of supplying the process values ​​to the communication device 3 for transmission as analog signals to the controller. The write instructions supplied to the write processing unit 422 may include the data to be written (in this embodiment, for example, data important for safety) and identification information for the data. The signal processing unit 420 may further perform the process of supplying read instructions to the read processing unit 423 for reading data. The read instructions supplied to the read processing unit 423 may include identification information for the data to be read.

[0037] (1.1-3.3(2). Access Reception Section 421) The access reception unit 421 reads the execution request for the non-periodic processing described above from the buffer area 4131 and supplies instructions corresponding to the execution request to the write processing unit 422 or the read processing unit 423.

[0038] The access reception unit 421 may supply a read instruction to the read processing unit 423 to read data in the secure data area 4130, depending on whether the execution request read from the buffer area 4131 is a read request. Since the read request read from the buffer area 4131 includes identification information of the data to be read, the access reception unit 421 may include the address corresponding to the identification information in the read instruction to the read processing unit 423. The access reception unit 421 may have a table (also called an address table) that associates an address in the secure data area 4130 with each piece of data identification information, and may identify the address by referring to the address table. The access reception unit 421 may supply the data supplied by the read processing unit 423 to the communication processing unit 430 in response to supplying a read instruction to the read processing unit 423.

[0039] The access reception unit 421 may supply a write instruction to the write processing unit 422 to write data into the secure data area 4130, depending on whether the execution request read from the buffer area 4131 is a write request. Since the write request read from the buffer area 4131 includes the data to be written and identification information for that data, the access reception unit 421 may include the data and the address corresponding to the identification information in the write instruction supplied to the write processing unit 422. The access reception unit 421 may identify the address of the write location by referring to the address table described above. Note that the processing by the access reception unit 421 may be an irregular process.

[0040] (1.1-3.3(3). Writing Processing Unit 422) The write processing unit 422 writes the data included in the write instruction to the secure data area 4130 in response to the write instruction supplied from the signal processing unit 420 or the access reception unit 421. The write processing unit 422 may update existing data by writing the data included in the write instruction to the secure data area 4130 in response to the write instruction supplied from the access reception unit 421. The write processing unit 422 may perform the writing of data in response to the write instruction supplied from the access reception unit 421 during idle time when the signal processing unit 420 is not performing any processing. Of the processes performed by the write processing unit 422, the processing in response to the write instruction from the signal processing unit 420 may be a periodic process, while the processing in response to the write instruction supplied from the access reception unit 421 may be an irregular process.

[0041] (1.1-3.3(4). Read processing unit 423) The read processing unit 423 reads data from the secure data area 4130 in response to a read instruction supplied from the signal processing unit 420 or the access reception unit 421. The read processing unit 423 may supply the data read in response to a read instruction from the signal processing unit 420 to the signal processing unit 420, and may supply the data read in response to a read instruction from the access reception unit 421 to the access reception unit 421. Of the processes performed by the read processing unit 423, the process in response to a read instruction from the signal processing unit 420 may be a periodic process, and the process in response to a read instruction from the access reception unit 421 may be an irregular process.

[0042] (1.1-3.4. Second Processing Unit 43) The second processing unit 43 performs processing on the non-secure area 414 of the storage unit 41 and sends an execution request for non-periodic processing to the request receiving unit 44. The second processing unit 43 includes a communication processing unit 430, a write processing unit 431, a read processing unit 432, and an access request unit 433. The second processing unit 43 may be a CPU (Central Processing Unit) as an example, and each part of the second processing unit 43 may be realized, for example, by having a program stored in the storage unit 41 read by the CPU and executed.

[0043] (1.1-3.4(1). Communication Processing Unit 430) The communication processing unit 430 performs processing related to digital communication between the communication device 3 and a controller (not shown). The communication processing unit 430 may cause the communication device 3 to transmit a process value as a digital signal to the controller in response to the process value supplied from the signal processing unit 420 of the first processing unit 42.

[0044] In addition to or instead of the above, the communication processing unit 430 may perform processing in response to various requests from the controller to the processing unit 4 via the communication device 3. In this embodiment, as an example, the communication processing unit 430 may perform either processing related to reading data from the storage unit 41 or processing related to writing data to the storage unit 41.

[0045] The communication processing unit 430 may identify the type of data to be written in response to receiving a data write request from the communication device 3. In this embodiment, for example, the write request may include the data to be written and identification information indicating its type. The type of data to be written may be any of the following: "range setting" data, "calibration" data, "sensor constant" data, "communication setting" data, and "display setting" data.

[0046] The communication processing unit 430 may identify whether the data to be written is data that is important for security or data that has little impact on security. For example, the communication processing unit 430 may have a table (also called a data type table) that associates each type of data with whether the data of that type is important for security or data that has little impact on security, and may refer to this data type table to identify whether the data to be written is important for security or data that has little impact on security.

[0047] The communication processing unit 430 may, upon identifying that the data to be written is data important for security (in this embodiment, for example, any of "range setting" data, "calibration" data, and "sensor constant" data), supply a write request for the data to the access request unit 433. The write request to the access request unit 433 may include the data to be written and identification information for that data.

[0048] The communication processing unit 430 may supply a write instruction to the write processing unit 431 when it has identified that the data to be written is data that has little impact on security (in this embodiment, for example, either "communication settings" data or "display settings" data). The write instruction to the write processing unit 431 may include the data to be written and the address of the write location corresponding to the identification information of the data. The communication processing unit 430 may have a table (also called an address table) that associates the address of the non-secure area 414 with each piece of data identification information, and may identify the address of the write location by referring to this address table.

[0049] The communication processing unit 430 may identify the type of data to be read in response to receiving a read request from the communication device 3. In this embodiment, for example, the read request may include the type of data to be read.

[0050] The communication processing unit 430 may determine whether the data to be read is data that is important for security or data that has little impact on security. The communication processing unit 430 may determine whether the data to be read is data that is important for security or data that has little impact on security by referring to the type table described above.

[0051] The communication processing unit 430 may, upon identifying that the data to be read is important for security, supply a request to the access request unit 433 to read that data. The read request to the access request unit 433 may include identification information of the data to be read.

[0052] The communication processing unit 430 may issue a read instruction to the read processing unit 432 when it has determined that the data to be read is data that has little impact on security. The read instruction to the read processing unit 432 may include an address corresponding to the identification information of the data to be read. The communication processing unit 430 may identify the address of the data to be read by referring to the address table described above.

[0053] The communication processing unit 430 receives the data to be read from the access reception unit of the first processing unit 42. 4 Depending on whether the data is supplied from 21 or the read processing unit 432, the data may be supplied to the communication device 3 and transmitted to the controller as a digital signal.

[0054] The communication processing unit 430 may check whether the content received via the communication device 3 is valid. For example, the communication processing unit 430 may check whether the source of the received request is the controller. In addition, the communication processing unit 430 may check whether the data to be written is valid data, for example, based on the type of data to be written and the content of the data to be written. As an example, depending on whether the data to be written is "range setting" data, the communication processing unit 430 may check whether the value of the data falls within the configurable range of the sensor device 2.

[0055] (1.1-3.4(2). Writing Processing Unit 431) The write processing unit 431 writes the data included in the write instruction supplied by the communication processing unit 430 to the non-secure area 414. The data written by the write processing unit 431 may, for example, be "communication settings" data or "display settings" data.

[0056] (1.1-3.4(3). Read processing unit 432) The read processing unit 432 reads data from the non-secure area 414 in response to a read instruction supplied by the communication processing unit 430. The read processing unit 432 may supply the read data to the communication processing unit 430.

[0057] (1.1-3.4(4). Access Request Section 433) The access request unit 433 requests the execution of an irregular process to be performed by the first processing unit 42. The access request unit 433 may supply the write request and read request supplied from the communication processing unit 430 to the request receiving unit 44 as requests for execution of an irregular process, respectively. The communication between the access request unit 433 and the request receiving unit 44 may be serial communication as an example, but other communication methods may also be used.

[0058] (1.1-3.5. Request Reception Section 44) When the request receiving unit 44 receives an execution request for an unscheduled process, it writes the contents corresponding to the execution request to the storage unit 41 and causes the first processing unit 42 to execute it. In this embodiment, as an example, when the request receiving unit 44 receives an execution request from the access request unit 433 of the second processing unit 43, it may write the contents corresponding to the execution request to the buffer area 4131 of the storage unit 41. When the request receiving unit 44 receives a write request, it may write the contents of the write request (in this embodiment, as an example, the data to be written and the identification information of the data) to the buffer area 4131. When the request receiving unit 44 receives a read request, it may write the contents of the read request (in this embodiment, as an example, the identification information of the data to be read) to the buffer area 4131.

[0059] The request receiving unit 44 may, upon writing the contents of one or more execution requests (one execution request in this embodiment as an example) for non-periodic processing to the buffer area 4131, supply a notification to that effect (also referred to as a write completion notification) to the prohibition unit 45. In addition, the request receiving unit 44 may supply a write completion notification to the access receiving unit 421 of the first processing unit 42. The request receiving unit 44 may be implemented, for example, by a DMA (Direct Memory Access) controller.

[0060] (1.1-3.6. Prohibited part 45) The prohibition unit 45, in response to the request reception unit 44 writing the contents of the execution request to the storage unit 41, prohibits the execution of the non-periodic processing by the first processing unit 42 in response to the subsequent execution request for a standard length of prohibition period (also referred to as prohibition period T33; see Figure 2 below). The prohibition unit 45 may prohibit the request reception unit 44 from receiving the subsequent execution request for only the prohibition period T33. The prohibition unit 45 may, for example, be implemented by a DMA controller, similar to the request reception unit 44.

[0061] According to the processing unit 4 described above, the first processing unit 42 performs periodic processing within each cycle period T30, and when a request to execute an unperiodic process is received by the request receiving unit 44, the contents corresponding to the execution request are written to the storage unit 41 and executed by the first processing unit 42. Therefore, since the first processing unit 42 can execute both periodic and unperiodic processing, unlike when the second processing unit 43 executes unperiodic processing, the security of the data subject to unperiodic processing can be enhanced.

[0062] Furthermore, in response to the request receiving unit 44 writing the contents of the non-periodic processing execution request to the storage unit 41, the execution of non-periodic processing by the first processing unit 42 in response to subsequent execution requests is prohibited for the duration of the prohibition period T33. Therefore, it is possible to ensure that the first processing unit 42 reliably performs the non-periodic processing in response to execution requests, while preventing the execution of periodic processing within each cycle period T30 from being hindered by the non-periodic processing in response to subsequent execution requests.

[0063] Furthermore, since the request receiving unit 44 is prohibited from receiving subsequent execution requests, it is possible to reliably prevent the execution of periodic processing from being hindered by non-periodic processing in response to subsequent execution requests.

[0064] Furthermore, the periodic processing includes writing at least one of the measurement data acquired by the acquisition unit 40, or the process value derived from said measurement data, to the storage unit 41. Therefore, it is possible to prevent periodic processing, such as writing measurement data, from being hindered by non-periodic processing.

[0065] Furthermore, the first processing unit 42 performs periodic and irregular processing on the secure area 413 of the storage unit 41, and the second processing unit 43 performs processing on the non-secure area 414 of the storage unit 41, while simultaneously sending a request to the request receiving unit 44 to execute the irregular processing. Therefore, by having the first processing unit 42 perform irregular processing on the secure area 413 in response to an execution request from the second processing unit 43, the secure area 413 can be maintained securely. In addition, unlike processing on the secure area 413, processing on the non-secure area 414 can be performed quickly by the second processing unit 43.

[0066] Furthermore, since the first storage device 411 is equipped with a secure area 413 and the second storage device 412 is equipped with a non-secure area 414, the secure area 413 and the non-secure area 414 can be physically separated, thereby enhancing the security of the secure area 413.

[0067] (1.2. Timing Chart) Figure 2 is a timing chart showing the relationship between scheduled and irregular processing. In the figure, the horizontal axis represents time.

[0068] When the periodic period T30 begins at time t4, the first processing unit 42 executes periodic processing during the periodic processing period T31 within the periodic period T30. The first processing unit 42 may execute periodic processing over the entire periodic processing period T31. The length of each periodic processing period T31 may be any length, as long as it is shorter than the periodic period T30, and may be the same for each periodic period T30. Periodic processing may start at any point in time, as long as it fits within the periodic period T30, and in this example, it may start at time t4.

[0069] Similarly, when the next periodic period T30 begins at time t5, the first processing unit 42 executes periodic processing during the periodic processing period T31 within that periodic period T30 (in this example, the period from time t5 to time t6). On the other hand, when the controller requests the writing or reading of data important for security, and the request receiving unit 44 receives an execution request for non-periodic processing from the access request unit 433 of the second processing unit 43, the request receiving unit 44 writes the contents corresponding to the execution request to the buffer area 4131 of the storage unit 41. For example, the request receiving unit 44 may transfer the execution request directly to the buffer area 4131. The timing of the transfer may be before or after time t6 when the periodic processing period T31 ends.

[0070] When the transfer of the non-periodic processing execution request is completed at time t7, the prohibition unit 33 prohibits the execution of the non-periodic processing by the first processing unit in response to subsequent execution requests for a standard length prohibition period T33. In this example, the prohibition unit 45 may, as an example, prohibit the reception of subsequent execution requests by the request reception unit 44 for only the prohibition period T33. The prohibition period T33 may be longer than the cycle period T30. In this example, as an example, the prohibition period T33 is the period from time t7 to time t9, and the end of the prohibition period T33 is time t9, when the next cycle period T30 begins, but it may be before or after time t9.

[0071] On the other hand, when the transfer of the non-periodic processing execution request is completed at time t7, the access reception unit 421 of the first processing unit 42 reads the non-periodic processing execution request from the buffer area and executes the non-periodic processing. The access reception unit 421 may cause the write processing unit 422 to write to the execution request, or the read processing unit 423 to read to it, depending on the content of the execution request.

[0072] The access reception unit 421 may detect that the writing of the non-periodic processing execution request has been completed by receiving a write completion notification from the request reception unit 44 indicating that the writing of the non-periodic processing execution request has been completed. Alternatively, the access reception unit 421 may detect that the writing of the non-periodic processing execution request has been completed by monitoring the buffer area 4131. The access reception unit 421 may execute the non-periodic processing in response to detecting that the writing of the non-periodic processing execution request has been completed.

[0073] The first processing unit 42 may finish executing the non-periodic processing between the execution of the periodic processing and the execution of the next periodic processing. In this example of operation, the non-periodic processing period T32, during which the non-periodic processing continues, may be, for example, the period from time t7 to time t8 when the next periodic period T30 begins, but the end of the non-periodic processing period T32 may be before or after time t8.

[0074] The length of the non-periodic processing period T32 may vary depending on the content of the non-periodic processing. However, the length of the non-periodic processing period T32 in which non-periodic processing continues may be shorter than the length obtained by subtracting the periodic processing period T31 from the periodic processing period T30. In other words, the sum of the periodic processing period T31 in which one periodic processing continues and the non-periodic processing period T32 in which non-periodic processing continues may be shorter than the periodic processing period T30. To limit the length of the non-periodic processing period T32, the number of non-periodic processing processes executed within one non-periodic processing period T32 may be less than the standard number, or the amount of data for the execution request of non-periodic processing transmitted from the access request unit 433 to the request reception unit 44 may be less than the standard number (for example, 255 bytes).

[0075] When the next periodic period T30 begins from time t8, the first processing unit 42 executes periodic processing during the periodic processing period T31 within that periodic period T30. In this example, since the non-periodic processing has finished at time t8, the periodic processing starts at time t8. However, if the non-periodic processing finishes after time t8, the periodic processing may start after the non-periodic processing has finished.

[0076] Then, when the next periodic period T30 (in this example, the period from time t9 to time t10) begins at time t9, the first processing unit 42 executes periodic processing during the periodic processing period T31 within that periodic period T30. Meanwhile, at time t9, the prohibition period T33 ends, and the prohibition on receiving subsequent execution requests by the request receiving unit 44 is lifted. As a result, the request receiving unit 44 becomes capable of receiving execution requests for non-periodic processing from the access request unit 433 of the second processing unit 43.

[0077] In this example of operation, the first processing unit 42 may be in a standby state when neither periodic processing nor non-periodic processing is being performed, but it may also perform diagnostic processing to check whether any data in the first storage device 413 that should be maintained in a predetermined state has changed.

[0078] As a result of the above operation, the prohibition period T33 during which the execution of non-periodic processing is prohibited is longer than the periodic period T30. Therefore, it is possible to prevent a non-periodic processing executed by the first processing unit 42 and a subsequent non-periodic processing executed by the first processing unit 42 after the prohibition period T33 from occurring within the same periodic period T30. Consequently, even if requests for the execution of non-periodic processing are made frequently, it is possible to reliably prevent non-periodic processing from interfering with the execution of periodic processing.

[0079] Furthermore, the sum of the periodic processing period T31, during which periodic processing continues, and the non-periodic processing period T32, during which non-periodic processing continues, is shorter than the cycle period T30. Therefore, the time from the start to the completion of periodic processing and the time from the start to the completion of non-periodic processing both fall within the cycle period T30. Consequently, periodic and non-periodic processing can be separated in time and performed at different times. Thus, it is possible to prevent non-periodic processing from interfering with the execution of periodic processing.

[0080] (1.3.Operation) Figure 3 shows the operation of the processing unit 4. The processing unit 4 may perform processing in response to requests from the controller through the processes from step S11 to step S67. In addition to the operation shown in Figure 3, the first processing unit 42 may perform periodic processing within each cycle period T30.

[0081] In step S11, the communication processing unit 430 of the second processing unit 43 receives a request from the controller via the communication device 3. In this embodiment, as an example, the request from the controller may be either a request to write to the storage unit 41 or a request to read from the storage unit 41.

[0082] In step S13, the communication processing unit 430 checks whether the received content is valid. For example, the communication processing unit 430 may check whether the source of the received request is the controller.

[0083] In step S15, the communication processing unit 430 determines whether the received content is valid or not. If it determines that the received content is not valid (step S15; No), the operation may be terminated. If it determines that the received content is valid (step S15; Yes), the process may proceed to step S17.

[0084] In step S17, the communication processing unit 430 determines whether the content of the request relates to data that is important for security or data that has little impact on security. If it is determined that the content of the request relates to data that is important for security (step S17; secure), the process may proceed to step S19. If it is determined that the content of the request relates to data that has little impact on security (step S17; insecure), the process may proceed to step S61.

[0085] In step S19, the access request unit 433 of the second processing unit 43 makes a request to execute an irregular process. The access request unit 433 may supply the write request and read request supplied from the communication processing unit 430 to the request receiving unit 44 as requests to execute an irregular process. The access request unit 433 may supply each communication frame of the execution request to the request receiving unit 44 with a sequence number.

[0086] In step S21, the request receiving unit 44 determines whether the current time is within the prohibited period T33. If it is determined that the current time is within the prohibited period T33 (step S21; Yes), the operation may be terminated. If it is determined that the current time is not within the prohibited period T33 (step S21; No), the process may proceed to step S23.

[0087] In step S23, the request receiving unit 44 writes the content corresponding to the execution request to the buffer area 4131 of the storage unit 41. This allows the first processing unit 42 to perform non-periodic processing in steps S41 to S49 described later. The request receiving unit 44 may use the sequence number attached to each communication frame of the execution request received from the access request unit 433 of the second processing unit 43 to diagnose abnormalities in the second processing unit 43. For example, the request receiving unit 44 may determine that an abnormality has occurred in the second processing unit 43 if there are duplicates, omissions, or repetitions in the sequence numbers. The request receiving unit 44 may protect the first processing unit 42 by blocking communication with the access request unit 433 if it has determined that an abnormality has occurred in the second processing unit 43.

[0088] Once the writing of the content corresponding to the execution request is complete, in step S25, the request reception unit 44 sends a write completion notification to the prohibition unit 45 and the first processing unit 42.

[0089] When the request receiving unit 44 sends a write completion notification, the prohibition unit 45 starts the prohibition period T33 in step S31. During the prohibition period T33, the prohibition unit 45 may prohibit the receiving unit 44 from receiving subsequent execution requests.

[0090] In step S33, the prohibition unit 45 determines whether the time of the reference length has elapsed since the start of the prohibition period T33 in step S31. If it is determined that the time of the reference length has not elapsed (step S33; No), the process may proceed to step S33. If it is determined that the time of the reference length has elapsed (step S33; Yes), the process may proceed to step S35.

[0091] In step S35, the prohibition unit 45 ends the prohibition period T33. The prohibition unit 45 may解除 the prohibition on receiving subsequent execution requests by the request reception unit 44. Note that the process of step S35 may be performed after step S49 described later. After the process of step S35 is completed, the prohibition unit 45 may enter a standby state until it receives a write completion notification from the request reception unit 44.

[0092] On the other hand, when a write completion notification is sent from the request reception unit 44 by the process of step S25, in step S41, the access reception unit 421 of the first processing unit 42 reads out the execution request for the non-periodic process written in the buffer area 4131.

[0093] In step S43, the access reception unit 421 determines whether the execution request read from the buffer area 4131 is a read request or a write request. If it is determined that the execution request is a write request (step S43; W), the process may proceed to step S45. If it is determined that the execution request is a read request (step S43; R), the process may proceed to step S47.

[0094] In step S45, the write processing unit 422 of the first processing unit 42 writes the data included in the write request to the address of the secure data area 4130 included in the write request. The write processing unit 422 may perform a write after解除 the write protection for the secure data area 4130. After the process of step S45 is completed, the processing device 4 may end the operation in response to the request from the controller.

[0095] In step S47, the read processing unit 423 of the first processing unit 42 reads the data at the address of the secure data area 4130 included in the read request.

[0096] In step S49, the access reception unit 421 transmits the data read by the read processing unit 423 in step S47 to the communication processing unit 430 of the second processing unit 43.

[0097] In step S55, the communication processing unit 430 of the second processing unit 43 supplies the data read in response to the read request to the communication device 3, causing it to transmit as a digital signal to the controller. As a result, the data read in response to the read request is returned to the controller. Once the processing in step S55 is completed, the processing unit 4 may terminate its operation in response to the request from the controller.

[0098] On the other hand, in step S61, the communication processing unit 430 of the second processing unit 43 determines whether the request from the controller is a read request or a write request. If it is determined that the request from the controller is a write request (step S61; W), processing may proceed to step S63. If it is determined that the request from the controller is a read request (step S61; R), processing may proceed to step S65.

[0099] In step S63, the write processing unit 431 of the second processing unit 43 writes the data included in the write request to the address of the non-secure area 414 included in the write request. Once the processing in step S63 is completed, the processing unit 4 may terminate its operation in response to the request from the controller.

[0100] In step S65, the read processing unit 432 of the second processing unit 43 reads the data at the address of the non-secure area 414 included in the read request.

[0101] In step S67, the communication processing unit 430 of the second processing unit 43 supplies the data read in response to the read request to the communication device 3 and has it sent to the controller as a digital signal. As a result, the data read in response to the read request is returned to the controller. Once the processing in step S67 is completed, the processing unit 4 may terminate its operation in response to the request from the controller.

[0102] (1.4. Modified Examples of the First Embodiment) In the first embodiment described above, the processing unit 4 was described as having a prohibition unit 45, but it may not have a prohibition unit 45. In this case, when an execution request for non-periodic processing is received by the request receiving unit 44, the contents corresponding to the execution request may be written to the storage unit 41 and executed by the first processing unit 42.

[0103] Furthermore, although the prohibition unit 45 was described as prohibiting the first processing unit 42 from executing a non-periodic process in response to a subsequent execution request by prohibiting the reception of a subsequent execution request by the request reception unit 44 for a period of prohibition T33, the execution of a non-periodic process may be prohibited by other methods. For example, the prohibition unit 45 may prohibit the request reception unit 44 from writing the content corresponding to the subsequent execution request to the buffer area 4131 for a period of prohibition T33. If the request reception unit 44 notifies the first processing unit 42 of the completion of writing, causing the first processing unit 42 to execute the non-periodic process, the prohibition unit 45 may, after writing the content corresponding to the execution request of the non-periodic process to the buffer area 4131, prohibit the request reception unit 44 from notifying the completion of writing in response to a subsequent execution request for a period of prohibition T33. The prohibition unit 45 may also prohibit the first processing unit 42 from executing the new non-periodic process itself. In this case, the prohibition unit 45 may be implemented by having the program stored in the storage unit 41 read by the CPU of the first processing unit 42 and executed.

[0104] (2. Second Embodiment) (2.1. Field Equipment 1A) Figure 4 shows a field device 1A according to the second embodiment. The field device 1A includes a processing unit 4A, and the processing unit 4A has a first processing unit 42A. In the field device 1A according to this embodiment, components that are substantially the same as those shown in Figure 1 are given the same reference numerals, and their descriptions are omitted.

[0105] The first processing unit 42A differs from the first processing unit 42 in the above embodiment in that the contents of a request to execute an irregular processing are written to the storage unit 41, and the irregular processing is executed in response to the execution of a regular processing. The first processing unit 42A may have an access reception unit 421A.

[0106] The access reception unit 421A may read the execution request for the non-periodic process written to the buffer area 4131 by the request reception unit 44 after the execution of the periodic process. This ensures that the non-periodic process is executed after the periodic process. The access reception unit 421A may supply instructions corresponding to the read execution request to the write processing unit 422 or the read processing unit 423 in the same manner as the access reception unit 421 in the above-described embodiment.

[0107] With the above-described processing unit 4A, the contents corresponding to the execution request are written to the storage unit 41, and non-periodic processing is executed in response to the execution of periodic processing. Therefore, it is possible to prevent the execution of periodic processing within each cycle period T30 from being hindered by the execution of non-periodic processing.

[0108] (2.2. Timing Chart) Figure 5 is a timing chart showing the relationship between scheduled and irregular processing. In the figure, the horizontal axis represents time.

[0109] When the periodic period T30 begins at time t5, the first processing unit 42A executes periodic processing during the periodic processing period T31 within the periodic period T30 (in this example, the period from time t5 to time t6). On the other hand, when the controller requests the writing or reading of data important for security, and the request receiving unit 44 receives an execution request for non-periodic processing from the access request unit 433 of the second processing unit 43, the request receiving unit 44 writes the contents corresponding to the execution request to the buffer area 4131 of the storage unit 41. For example, the request receiving unit 44 may transfer the execution request directly to the buffer area 4131. The timing of the transfer may be before or after time t6, when the periodic processing period T31 ends.

[0110] When the transfer of the non-periodic processing execution request is completed at time t7, and the next periodic period T30 starts at time t8, the first processing unit 42A executes periodic processing during the periodic processing period T31 within that periodic period T30 (in this example, the period from time t8 to time t81).

[0111] When the periodic processing is completed at time t81, the access reception unit 421A of the first processing unit 42A reads an execution request for non-periodic processing from the buffer area and executes the non-periodic processing. Depending on the content of the execution request, the access reception unit 421A may cause the write processing unit 422 to write or the read processing unit 423 to read.

[0112] The access reception unit 421A may detect that the writing of the non-periodic processing execution request has been completed by receiving a write completion notification from the request reception unit 44 indicating that the writing of the non-periodic processing execution request has been completed. Alternatively, the access reception unit 421A may detect that the writing of the non-periodic processing execution request has been completed by monitoring the buffer area 4131. The access reception unit 421A may execute the non-periodic processing in response to detecting that the writing of the non-periodic processing execution request has been completed and that the periodic processing has been completed.

[0113] In this example, the non-periodic processing period T32, during which non-periodic processing continues, may be, for example, the period from time t81 to time t82. Time t82 may be before or after time t9, when the next periodic period T30 begins. The length of the non-periodic processing period T32 may vary depending on the content of the non-periodic processing. However, the length of the non-periodic processing period T32 during which non-periodic processing continues may be shorter than the length obtained by subtracting the periodic processing period T31 from the periodic processing period T30. In other words, the sum of the periodic processing period T31 during which one periodic process continues and the non-periodic processing period T32 during which non-periodic processing continues may be shorter than the periodic processing period T30.

[0114] Then, when the next periodic period T30 (in this example, the period from time t9 to time t10) begins from time t9, the first processing unit 42A executes periodic processing during the periodic processing period T31 within that periodic period T30.

[0115] (2.3. Operation) Figure 6 shows the operation of the processing unit 4A. The processing unit 4A may perform processing in response to a request from the controller by performing the processing from step S11 to step S77.

[0116] In this embodiment, in step S19, the access request unit 433 of the second processing unit 43 makes a request to the request receiving unit 44 to execute an irregular process. In step S71, the request receiving unit 44 writes the contents corresponding to the execution request to the buffer area 4131 of the storage unit 41.

[0117] Once the writing of the content corresponding to the execution request is complete, in step S73, the request reception unit 44 sends a write completion notification to the first processing unit 42A.

[0118] On the other hand, in step S75, the signal processing unit 420, write processing unit 422, and read processing unit 423 of the first processing unit 42A perform periodic processing within the cycle period T30. The processing in step S75 may be performed before the processing in step S73.

[0119] In step S77, the access reception unit 421A of the first processing unit 42A determines whether or not it has received a write completion notification from the request reception unit 44, that is, whether or not the contents of the request to execute the non-periodic process have been written to the buffer area 4131. If it is determined that a write completion notification has not been received (step S77; No), the process may proceed to step S75. If it is determined that a write completion notification has been received (step S77; Yes), the process may proceed to step S41 as described above. As a result, the contents corresponding to the request to execute the non-periodic process are written to the buffer area 4131, and the non-periodic process is executed by the first processing unit 42A in response to the execution of the periodic process. The non-periodic process may be executed immediately after the periodic process, or without any delay after the completion of the periodic process.

[0120] (3. Variant) In the first and second embodiments described above, the processing units 4 and 4A were described as having an acquisition unit 40, a storage unit 41, and a second processing unit 43, but they may not have any of these. For example, if the processing units 4 and 4A do not have an acquisition unit 40, measurement data from the sensor device 2 may be stored in the storage unit 41 in advance. If the processing units 4 and 4A do not have a storage unit 41, the first processing units 42 and 42A may perform periodic and non-periodic processing on a storage device externally connected to the processing units 4 and 4A.

[0121] Furthermore, although the processing units 4 and 4A have been described as having an acquisition unit 40 that acquires measurement data from the sensor device 2, the sensor device 2 itself may also be used as the acquisition unit 40.

[0122] Furthermore, various embodiments of the present invention may be described with reference to flowcharts and block diagrams, where a block may represent (1) a stage in a process in which an operation is performed or (2) a section of a device having the role of performing an operation. Specific stages and sections may be implemented by dedicated circuits, programmable circuits supplied with computer-readable instructions stored on a computer-readable medium, and / or processors supplied with computer-readable instructions stored on a computer-readable medium. Dedicated circuits may include digital and / or analog hardware circuits, and may include integrated circuits (ICs) and / or discrete circuits. Programmable circuits may include reconfigurable hardware circuits, including logical AND, logical OR, logical XOR, logical NAND, logical NOR, and other logic operations, flip-flops, registers, memory elements such as field-programmable gate arrays (FPGAs), programmable logic arrays (PLAs), etc.

[0123] Computer-readable media may include any tangible device capable of storing instructions to be executed by a suitable device, and as a result, computer-readable media having instructions stored therein will comprise a product containing instructions that can be executed to create means for performing operations specified in a flowchart or block diagram. Examples of computer-readable media may include electronic storage media, magnetic storage media, optical storage media, electromagnetic storage media, semiconductor storage media, etc. More specific examples of computer-readable media include floppy disks, diskettes, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), electrically erasable programmable read-only memory (EEPROM), static random access memory (SRAM), compact disk read-only memory (CD-ROM), digital multipurpose disc (DVD), Blu-ray, etc. Registered trademark This may include disks, memory sticks, integrated circuit cards, etc.

[0124] Computer-readable instructions may include assembler instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Smalltalk®, Java®, C++, and traditional procedural programming languages ​​such as the C programming language or similar programming languages.

[0125] Computer-readable instructions may be provided locally or via a wide area network (WAN), such as a local area network (LAN) or the internet, to a processor or programmable circuit of a general-purpose computer, a special-purpose computer, or other programmable data processing device, and these instructions may be executed to create means for performing operations specified in a flowchart or block diagram. Examples of processors include computer processors, processing units, microprocessors, digital signal processors, controllers, microcontrollers, and the like.

[0126] Figure 7 shows an example of a computer 2200 in which multiple aspects of the present invention may be embodied in whole or in part. A program installed on the computer 2200 can cause the computer 2200 to function as an operation or one or more sections of an apparatus according to an embodiment of the present invention, or to execute such operation or one or more sections, and / or to cause the computer 2200 to execute a process or a stage of such process according to an embodiment of the present invention. Such a program may be executed by the CPU 2212 to cause the computer 2200 to perform a particular operation associated with some or all of the blocks in the flowcharts and block diagrams described herein.

[0127] The computer 2200 according to this embodiment includes a CPU 2212, RAM 2214, a graphics controller 2216, and a display device 2218, which are interconnected by a host controller 2210. The computer 2200 also includes input / output units such as a communication interface 2222, a hard disk drive 2224, a DVD-ROM drive 2226, and an IC card drive, which are connected to the host controller 2210 via an input / output controller 2220. The computer also includes legacy input / output units such as a ROM 2230 and a keyboard 2242, which are connected to the input / output controller 2220 via an input / output chip 2240.

[0128] The CPU 2212 operates according to programs stored in the ROM 2230 and RAM 2214, thereby controlling each unit. The graphics controller 2216 retrieves image data generated by the CPU 2212 from a frame buffer provided in RAM 2214 or from itself, and displays the image data on the display device 2218.

[0129] The communication interface 2222 communicates with other electronic devices via a network. The hard disk drive 2224 stores programs and data used by the CPU 2212 in the computer 2200. The DVD-ROM drive 2226 reads programs or data from the DVD-ROM 2201 and provides them to the hard disk drive 2224 via the RAM 2214. The IC card drive reads programs and data from the IC card and / or writes programs and data to the IC card.

[0130] The ROM 2230 stores boot programs and / or programs that depend on the computer 2200's hardware, which are executed by the computer 2200 when activated. The input / output chip 2240 may also connect various input / output units to the input / output controller 2220 via parallel ports, serial ports, keyboard ports, mouse ports, etc.

[0131] The program is provided on a computer-readable medium such as a DVD-ROM 2201 or an IC card. The program is read from the computer-readable medium and installed on a hard disk drive 2224, RAM 2214, or ROM 2230, which are also examples of computer-readable medium, and executed by the CPU 2212. The information processing described within these programs is read by the computer 2200, resulting in coordination between the program and the various types of hardware resources described above. The apparatus or method may be configured to realize the manipulation or processing of information in accordance with the use of the computer 2200.

[0132] For example, when communication is performed between a computer 2200 and an external device, the CPU 2212 may execute a communication program loaded into RAM 2214 and, based on the processing described in the communication program, instruct the communication interface 2222 to perform communication processing. Under the control of the CPU 2212, the communication interface 2222 reads transmission data stored in a transmission buffer processing area provided in a recording medium such as RAM 2214, a hard disk drive 2224, a DVD-ROM 2201, or an IC card, transmits the read transmission data to the network, or writes received data received from the network to a reception buffer processing area provided on the recording medium.

[0133] Furthermore, the CPU 2212 may read all or necessary parts of files or databases stored on external storage media such as the hard disk drive 2224, DVD-ROM drive 2226 (DVD-ROM 2201), or IC card into the RAM 2214, and perform various types of processing on the data in the RAM 2214. The CPU 2212 then writes the processed data back to the external storage media.

[0134] Various types of information, such as various types of programs, data, tables, and databases, may be stored on the recording medium and subjected to information processing. The CPU 2212 may perform various types of processing on the data read from RAM 2214, including various types of operations, information processing, conditional judgments, conditional branching, unconditional branching, information retrieval / replacement, etc., as described throughout this disclosure and specified by the program instruction sequence, and write the results back to RAM 2214. The CPU 2212 may also retrieve information in files, databases, etc., within the recording medium. For example, if multiple entries are stored in the recording medium, each having an attribute value of a first attribute associated with an attribute value of a second attribute, the CPU 2212 may search among the multiple entries for an entry that matches the condition for which the attribute value of the first attribute is specified, read the attribute value of the second attribute stored in that entry, and thereby obtain the attribute value of the second attribute associated with the first attribute that satisfies a predetermined condition.

[0135] The programs or software modules described above may be stored on or near computer 2200 on a computer-readable medium. Alternatively, recording media such as hard disks or RAM provided within a server system connected to a dedicated communication network or the Internet can be used as computer-readable media, thereby providing programs to computer 2200 via the network.

[0136] Although the present invention has been described above using embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments. It will be apparent to those skilled in the art that various modifications or improvements can be made to the above embodiments. It will be clear from the claims that such modified or improved forms may also be included in the technical scope of the present invention.

[0137] It should be noted that the execution order of operations, procedures, steps, and stages in the apparatus, systems, programs, and methods shown in the claims, specifications, and drawings is not explicitly stated as "before," "prior to," etc., and that these can be implemented in any order unless the output of a previous process is used in a later process. Even if the operation flow in the claims, specifications, and drawings is described using phrases such as "first," "next," etc. for convenience, it does not mean that it is essential to perform the operations in that order. [Explanation of Symbols]

[0138] 1 Field Equipment 2 Sensor device 3. Communication equipment 4 Processing Unit 40 Acquisition Department 41 Storage section 42 First Processing Unit 43 Second Processing Unit 44 Request Reception Department 45 Prohibited part 411 1st storage device 412 2nd storage device 413 Secure Area 414 Unsecure Area 420 Signal Processing Unit 421 Access Reception Department 422 Writing Processing Unit 423 Read Processing Unit 430 Communication Processing Unit 431 Writing Processing Unit 432 Read Processing Unit 433 Access Request Section 2200 Computers 2201 DVD-ROM 2210 Host Controller 2212 CPU 2214 RAM 2216 Graphics Controller 2218 Display Devices 2220 Input / Output Controller 2222 Communication Interface 2224 Hard Disk Drive 2226 DVD-ROM drive 2230 ROM 2240 Input / Output Chip 2242 keyboard 4130 Secure data area 4131 Buffer area

Claims

1. A first processing unit that performs periodic processing within each cycle period, A request receiving unit, upon receiving an execution request for an irregular process to be performed by the first processing unit, writes the content corresponding to the execution request to the secure area of ​​the storage device and causes the first processing unit to execute it, A device equipped with the following features.

2. The apparatus according to claim 1, further comprising a prohibition unit that, in response to the request receiving unit writing the contents corresponding to the execution request to the storage device, prohibits the execution of subsequent non-periodic processing by the first processing unit in response to the execution request for a period of a standard length.

3. The apparatus according to claim 2, wherein the prohibition unit prohibits the request receiving unit from receiving the subsequent execution request for the duration of the prohibition period.

4. The apparatus according to claim 2, wherein the prohibition unit prohibits the request receiving unit from writing content corresponding to the subsequent execution request for the duration of the prohibition period.

5. The request receiving unit writes the contents corresponding to the execution request to the storage device, and then notifies the first processing unit, causing the first processing unit to execute the non-periodic processing corresponding to the execution request. The apparatus according to claim 2, wherein the prohibition unit, after writing the contents corresponding to the execution request to the storage device, prohibits the notification by the request receiving unit in response to a subsequent execution request for the duration of the prohibition period.

6. The apparatus according to claim 2, wherein the prohibition period is longer than the period of the cycle period.

7. The apparatus according to claim 1, wherein the first processing unit writes the contents corresponding to the execution request to the storage device and executes the non-periodic processing in response to the execution of the periodic processing.

8. The apparatus according to claim 1, wherein the sum of a periodic processing period in which one periodic processing continues and an irregular processing period in which the non-periodic processing continues is shorter than the period of the cycle period.

9. The first processing unit performs the periodic processing and the non-periodic processing on the secure area of ​​the storage device. The apparatus according to any one of claims 1 to 8, further comprising a second processing unit that performs processing on the non-secure area of ​​the storage device and transmits the execution request to the request receiving unit.

10. The memory device further comprises the aforementioned memory device, The apparatus according to claim 9, wherein the storage device comprises a first storage device having the secure area and a second storage device having the non-secure area.

11. It further includes an acquisition unit for acquiring measurement data, The apparatus according to claim 1, wherein the periodic processing includes writing at least one of the measurement data acquired by the acquisition unit or the process value derived from the measurement data to the storage device.

12. A request reception stage is performed in response to receiving an execution request for an unperiodic process that should be performed by the first processing unit which performs periodic processing within each period, by writing the content corresponding to the execution request to the secure area of ​​the storage device and causing the first processing unit to execute it. A method for providing this.

13. Computers, A first processing unit that performs periodic processing within each cycle period, A request receiving unit receives an execution request for an irregular process to be performed by the first processing unit, writes the content corresponding to the execution request to the secure area of ​​the storage device, and causes the first processing unit to execute it. A program that makes it function as such.