Control device and remote system

Abstract

The present invention provides a management device and remote system that enable operation of controlled equipment via remote connection while improving the safety of the controlled equipment. [Solution] The management device 40, which manages the remote connection server 30 that allows the work terminal 10 to remotely connect to the controlled equipment 20, includes a storage unit 41 that stores connection establishment information for establishing a connection from the work terminal 10 to the controlled equipment 20 and access control information for controlling the remote connection of the work terminal 10 to a predetermined device of the controlled equipment, and a control unit 44 that registers the connection establishment information and access control information from the storage unit 41 to the server storage unit 31 of the remote connection server 30 according to preset conditions, and deletes the connection establishment information and access control information registered in the server storage unit 31 from the server storage unit 31. Remote connection from the work terminal 10 to the predetermined device via the remote connection server 30 is possible only when the connection establishment information and access control information are registered in the server storage unit 31.

Description

Technical Field

[0001] The present invention relates to a management device and a remote system.

Background Art

[0002] In recent years, there has been a growing need to remotely connect to various devices and operate the devices from remote locations to perform maintenance and control (see, for example, Patent Document 1). For example, distributed power supply devices such as wind turbines may be installed in locations such as mountainous areas or offshore, and it is often difficult for workers to travel to the site immediately in an emergency. In addition, when unmanned operation is required for labor saving, there may be cases where a control device is accessed remotely for maintenance purposes.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of Invention

Problems to be Solved by the Invention

[0004] When a work terminal in an office or the like is remotely connected to and operates controlled equipment in a factory at a remote location, depending on the on-site situation, there is a risk of endangering on-site workers or damaging the controlled equipment. Therefore, it is desired to further tighten the conditions for remote connection from the work terminal to the controlled equipment to ensure the safety of the controlled equipment.

[0005] An object of the present invention is to provide a management device and a remote system that enable operation of controlled equipment via remote connection while improving the safety of the controlled equipment.

Means for Solving the Problems

[0006] The management device of the present invention is a management device for managing a remote connection server that allows a work terminal to remotely connect to a controlled equipment, and comprises: a storage unit that stores connection establishment information for establishing a connection from the work terminal to the controlled equipment, and access control information for controlling the remote connection of the work terminal to a predetermined device provided on the controlled equipment; and a control unit that, according to preset conditions, causes the connection establishment information and the access control information in the storage unit to be registered in the server storage unit of the remote connection server, and deletes the connection establishment information and the access control information registered in the server storage unit from the server storage unit, wherein when the connection establishment information and the access control information are registered in the server storage unit, a remote connection from the work terminal to the predetermined device via the remote connection server becomes possible based on the connection establishment information and the access control information.

[0007] The remote system of the present invention comprises a work terminal, a controlled equipment, a remote connection server that remotely connects the work terminal to the controlled equipment, and a management device that manages the remote connection server, wherein the management device includes a storage unit that stores connection establishment information for establishing a connection from the work terminal to the controlled equipment, and access control information that controls the remote connection of the work terminal to a predetermined device provided on the controlled equipment, and a control unit that, according to preset conditions, causes the connection establishment information and the access control information in the storage unit to be registered in the server storage unit of the remote connection server, and deletes the connection establishment information and the access control information registered in the server storage unit from the server storage unit, wherein when the connection establishment information and the access control information are registered in the server storage unit, a remote connection from the work terminal to the predetermined device via the remote connection server becomes possible based on the connection establishment information and the access control information. [Effects of the Invention]

[0008] According to the present invention, by setting conditions for registering connection establishment information and access control information to the server storage unit for remote connection from a work terminal to the controlled equipment, and conditions for deleting said information from the server storage unit, it is possible to operate the controlled equipment via remote connection from a work terminal while improving the security of the controlled equipment. [Brief explanation of the drawing]

[0009] [Figure 1] This is a block diagram showing the configuration of the remote system according to the first embodiment. [Modes for carrying out the invention]

[0010] Embodiments of the present invention will be described below with reference to Figure 1.

[0011] (1) Overall configuration of the remote system Figure 1 is a block diagram showing the configuration of the remote system 100 of the present invention. The remote system 100 consists of a work terminal 10, a controlled equipment 20, a remote connection server 30 that connects the work terminal 10 to the controlled equipment 20, and a management device 40 that manages the remote connection server 30. In Figure 1, for the sake of simplicity, a configuration with one work terminal 10 is shown, but multiple work terminals 10 can be provided.

[0012] The management device 40 controls whether or not the remote connection server 30 can remotely connect from the work terminal 10 to the controlled equipment 20. The work terminal 10 is connected to the remote connection server 30 via a network such as a LAN or the Internet, and the remote connection server 30 is connected to the controlled equipment 20 via a network such as a LAN or the Internet. The controlled equipment 20 and the remote connection server 30 are each connected to the management device 40 via a network such as a LAN or the Internet.

[0013] (2) Work terminal The work terminal 10 consists of a personal computer or tablet operated by the worker and is connected to a network. The work terminal 10 connects to the remote connection server 30 by sending a remote connection request to the remote connection server 30 via the network. When the remote connection server 30 determines that a remote connection to the controlled equipment 20 is possible, the work terminal 10 remotely connects to the control terminal 23 of the controlled equipment 20 via the remote connection server 30 and the network. When remotely connected, the work terminal 10 has the function to operate the control terminal 23 of the controlled equipment 20 from a remote location.

[0014] (3) Remote connection server The remote connection server 30 is connected to the work terminal 10, the controlled equipment 20, and the management device 40 via a network, and controls the remote connection from the work terminal 10 to the operation terminal 23 of the controlled equipment 20. The remote connection server 30 comprises a server storage unit 31 and a gateway unit 32.

[0015] The server storage unit 31 includes a connection establishment information setting storage unit 31a and an access control information setting storage unit 31b. When the server storage unit 31 receives connection establishment information and access control information along with a registration command from the management device 40, it registers the connection establishment information in the connection establishment information setting storage unit 31a and registers the access control information in the access control information setting storage unit 31b based on the registration command.

[0016] Here, connection establishment information is information that allows an operator to establish a remote connection from the work terminal 10 to the controlled equipment 20, and it differs for each operator. Connection establishment information also includes information such as authentication information to verify the operator's legitimacy, a connection authorization policy (CAP) that specifies the destination address and communication settings, etc. Access control information is information that controls the remote connection of the work terminal 10 to the operation terminal 23 installed on the controlled equipment 20, and includes information such as a connection authorization policy (RAP) that specifies the accessible resources and permissions.

[0017] The remote connection server 30 can be any server that manages access control information and connection establishment information based on connection requests, and performs user authentication and authorization; it is not limited to any specific implementation. For example, various other servers with similar connection relay and access control functions can be used as the remote connection server 30, such as Microsoft's RDTGW (Remote Desktop Gateway) server or Guacamole on an Apache server running on a Linux® environment.

[0018] When the server storage unit 31 receives a deletion command from the management device 40 while connection establishment information and access control information received from the management device 40 are registered, it deletes the registered connection establishment information and access control information.

[0019] When the gateway unit 32 receives a remote connection request from the work terminal 10, it determines whether to cause the work terminal 10 to remotely connect to the controlled facility 20 based on the information registered in the server storage unit 31. When connection establishment information and access control information corresponding to the worker's work terminal 10 are registered in the server storage unit 31, the gateway unit 32 causes the work terminal 10 to remotely connect to the controlled facility 20 based on the connection establishment information and the access control information. Specifically, upon receiving a remote connection request from the work terminal 10 to the controlled facility 20, the gateway unit 32 determines, based on the connection establishment information, whether the work terminal 10 that has transmitted the remote connection request is a valid remote connection source or the like. In addition, based on the remote connection request, the gateway unit 32 confirms the accessible resources, authorities, etc. in the access control information corresponding to the work terminal 10, and permits remote connection from the work terminal 10 to the controlled facility 20 in accordance with the access control information. In contrast, when the connection establishment information and access control information corresponding to the worker's work terminal 10 are not registered in the server storage unit 31, the gateway unit 32 rejects the remote connection of the work terminal 10 to the controlled facility 20 even if it receives a remote connection request from the work terminal 10.

[0020] (4) Controlled Facility The controlled facility 20 is, for example, a plant such as a factory or infrastructure equipment such as a power plant, and includes a machine / power device 21, a field device 22, and an operation terminal 23. Note that although FIG. 1 shows a configuration in which one machine / power device 21, one field device 22, and one operation terminal 23 are provided respectively for simplicity of explanation, in practice, a plurality of each of the machine / power device 21, the field device 22, and the operation terminal 23 may be provided.

[0021] The machine / power device 21 is composed of various devices constituting a plant or a production line provided in a factory, and includes, for example, an NC machine tool, a welding robot, a painting robot, and the like. The field device 22 is a device that controls and monitors the machine / power device 21, and is, for example, a PLC (Programmable Logic Controller) that numerically controls the machine / power device 21 based on a control program.

[0022] The operation terminal 23 is composed of a personal computer or a tablet operated by a site worker. The operation terminal 23 is connected to a network, and has a configuration that allows the work terminal 10 to be remotely connected via the network and the remote connection server 30. The operation terminal 23 executes operations such as installing a control program to the site device 22, inputting various parameters for controlling the machine / power equipment 21 to the site device 22, and performing various processes on signals output from the site device 22.

[0023] (5) Management apparatus The management apparatus 40 includes a storage unit 41, an operation unit 42, a detection unit 43, and a control unit 44. The management apparatus 40 is composed of, for example, a personal computer or a tablet. The management apparatus 40 is operated by a person in charge of management who performs overall management of the remote system 100, site management of the control target facility 20, and the like.

[0024] The operation unit 42 is, for example, a keyboard, a mouse, or the like. When connection establishment information and access control information corresponding to the work terminal 10 are input by, for example, the person in charge of management, the operation unit 42 causes the storage unit 41 to store the connection establishment information and the access control information. Further, when a condition (hereinafter also referred to as a setting condition) for transmitting the connection establishment information and the access control information stored in the storage unit 41 from the management apparatus 40 to the remote connection server 30 to be registered in the server storage unit 31 is input by, for example, the person in charge of management, the operation unit 42 causes the storage unit 41 to store the setting condition. Furthermore, when a condition (hereinafter also referred to as a deletion condition) for deleting the connection establishment information and the access control information stored in the server storage unit 31 from the server storage unit 31 is input by, for example, the person in charge of management, the operation unit 42 causes the storage unit 41 to store the deletion condition.

[0025] The storage unit 41 includes a connection establishment information storage unit 41a, an access control information storage unit 41b, and a condition storage unit 41c. If there are multiple workers A, B, ... operating the work terminal 10, the connection establishment information storage unit 41a stores connection establishment information set for each worker A, B, ... For example, "Connection Establishment Information (Worker A)" indicates connection establishment information for worker A to establish a remote connection from the work terminal 10 to the controlled equipment 20, and "Connection Establishment Information (Worker B)" indicates connection establishment information for worker B to establish a remote connection from the work terminal 10 to the controlled equipment 20.

[0026] The access control information storage unit 41b stores access control information that defines the resources and privileges that can be accessed for each work terminal 10 to which it is connected, in the case of multiple work terminals 10. "Access control information (PC1)" refers to access control information that defines the resources and privileges that can be accessed for the operation terminal 23 installed in the controlled equipment 20, and "Access control information (PC2)" refers to access control information that defines the resources and privileges that can be accessed for other operation terminals (not shown) installed in the controlled equipment 20.

[0027] The condition storage unit 41c can store registration conditions and deletion conditions (hereinafter, when there is no need to distinguish between registration conditions and deletion conditions, they will simply be referred to as conditions) for connection establishment information and access control information to the server storage unit 31, according to the status of the controlled equipment 20.

[0028] The condition storage unit 41c can store date and time information indicating the time period during which specific connection establishment information and access control information are registered in the server storage unit 31 of the remote connection server 30, the length of the registration period, the start time (or start date) of registration of the specific connection establishment information and access control information, and the deletion time (or deletion date) of the specific connection establishment information and access control information, as registration conditions and deletion conditions, in order to permit or prohibit remote connections from specific workers according to a schedule such as a specific date or period (date, time).

[0029] Furthermore, the condition storage unit 41c can store as a registration condition that a registration command is input from the operation unit 42 to immediately register specific connection establishment information and access control information in the server storage unit 31 of the remote connection server 30, in order to enable remote connection from a specific worker immediately.

[0030] Furthermore, the condition storage unit 41c can store as a deletion condition that a deletion command is input from the operation unit 42 to immediately delete specific connection establishment information and access control information registered in the server storage unit 31 from the server storage unit 31 of the remote connection server 30, in order to immediately prohibit remote connections from a specific worker.

[0031] Furthermore, the condition storage unit 41c can store a registration condition that, when the detection unit 43 detects a predetermined state of the on-site device 22, specific connection establishment information and access control information should be immediately registered in the server storage unit 31 of the remote connection server 30, in order to immediately permit remote connections from specific workers in accordance with the operating status of the controlled equipment 20 which changes over time.

[0032] Furthermore, the condition storage unit 41c can store a deletion condition that, in order to immediately terminate a remote connection from a specific worker in accordance with the operating status of the controlled equipment 20 which changes over time, the detection unit 43 detects a predetermined state of the field device 22 and immediately deletes the specific connection establishment information and access control information registered in the server storage unit 31 of the remote connection server 30 from the server storage unit 31.

[0033] Furthermore, the condition storage unit 41c can store weather information as a registration condition to enable remote connections from specific workers in accordance with weather information, by registering specific connection establishment information and access control information in the server storage unit 31 of the remote connection server 30. For example, if weather information such as a 50% or higher probability of precipitation is stored as a registration condition, remote connections from specific workers can be enabled on days when the weather forecast indicates a 50% or higher probability of precipitation.

[0034] The detection unit 43 is connected to the field device 22 via a network and receives various data generated by the field device 22. Based on past operational performance data, the detection unit 43 analyzes the data received from the field device 22 to determine the operating status of the controlled equipment 20. The data generated by the field device 22 may include, for example, electrical data, power supply data, error data, and measurement data such as temperature acquired by the field device 22 from the machinery and power equipment 21, or it may also include image data acquired from an imaging device. The image data may include, for example, video data or still image data of measuring instruments, or video data or still image data of the inside and outside of the building of the controlled equipment 20 or various parts of the machinery and power equipment 21. When the detection unit 43 receives data indicating the operating status from the field device 22, it outputs the data to the control unit 44.

[0035] The control unit 44 is a processor equipped with computing means such as a CPU or MPU, semiconductor memory, and a communication interface, and operates according to a program. It comprehensively controls the operation of the entire management device 40, including the operation of the storage unit 41, the operation unit 42, and the detection unit 43. The control unit 44 is connected to the remote connection server 30 via a network and manages the remote connection server 30. The control unit 44 reads, for example, the corresponding connection establishment information (worker A) from the connection establishment information storage unit 41a and the corresponding access control information (PC1) from the access control information storage unit 41b, according to the registered conditions stored in the condition storage unit 41c.

[0036] The control unit 44 reads connection establishment information (worker A) and access control information (PC1) from the storage unit 41 according to the registration conditions and transmits them to the remote connection server 30 via the network, causing it to be registered in the server storage unit 31. As a result, the remote connection server 30 registers the connection establishment information (worker A) and access control information (PC1) in the server storage unit 31. Subsequently, when the remote connection server 30 receives a remote connection request from worker A from the work terminal 10, it authenticates worker A based on the registered connection establishment information (worker A) and remotely connects the work terminal 10 to the corresponding operation terminal 23 according to the access control information (PC1).

[0037] Furthermore, the control unit 44 generates a deletion command according to the deletion conditions stored in the condition storage unit 41c, and sends the deletion command to the remote connection server 30 via the network, causing, for example, the server storage unit 31 to delete the connection establishment information (worker A) and access control information (PC1) registered therein. As a result, the remote connection server 30 deletes the connection establishment information (worker A) and access control information (PC1) registered therein. Subsequently, even if the remote connection server 30 receives a remote connection request from worker A from the work terminal 10, it cannot authenticate worker A because the connection establishment information (worker A) and access control information (PC1) are not registered in the server storage unit 31, and therefore rejects the remote connection to the operation terminal 23.

[0038] (6) Management of remote connections by the management device Next, the remote connection management process by the management device 40 will be described. The management device 40 registers predetermined connection establishment information and access control information in the server storage unit 31 of the remote connection server 30, or deletes said connection establishment information and access control information from the server storage unit 31, according to the conditions stored in the condition storage unit 41c. The management device 40 can manage the remote connection of the work terminal 10 to the operation terminal 23 by registering and deleting connection establishment information and access control information in the server storage unit 31 according to conditions set in advance, taking into account the status of the controlled equipment 20. The conditions for managing remote connections will be described below.

[0039] (6-1) Management of remote connections based on date and time information For example, if the instruction is to "allow worker A to remotely connect to the operation terminal 23 of the controlled equipment 20 between 13:00 and 15:00 on August 1, 2025," the management device 40 stores connection establishment information (worker A) related to worker A in the connection establishment information storage unit 41a, and access control information (PC1) related to the remote connection to the operation terminal 23 in the access control information storage unit 41b.

[0040] Furthermore, the condition storage unit 41c stores a registration command to send to the remote connection server 30 at "13:00 on August 1, 2025" to register the connection establishment information (worker A) and access control information (PC1) in the server storage unit 31 as a registration condition. In addition, the condition storage unit 41c stores a deletion command to send to the remote connection server 30 at "15:00 on August 1, 2025" to delete the connection establishment information (worker A) and access control information (PC1) registered in the server storage unit 31 from the server storage unit 31 as a deletion condition.

[0041] When the date and time specified in the registration conditions arrives, the management device 40 sends a registration command along with connection establishment information (worker A) and access control information (PC1) to the remote connection server 30. When the remote connection server 30 receives a registration command from the management device 40 at the date and time specified in the registration conditions, it registers the connection establishment information (worker A) and access control information (PC1) received along with the registration command in the server storage unit 31. As a result, after the date and time specified in the registration conditions, when the remote connection server 30 receives a remote connection request from the work terminal 10 by worker A, it can remotely connect the work terminal 10 to the operation terminal 23 based on the connection establishment information (worker A) and access control information (PC1).

[0042] Furthermore, when the date and time specified in the deletion conditions arrive, the management device 40 sends a deletion command to the remote connection server 30 to delete the connection establishment information (worker A) and access control information (PC1) registered in the server storage unit 31 from the server storage unit 31. When the remote connection server 30 receives the deletion command from the management device 40 at the date and time specified in the deletion conditions, it deletes the connection establishment information (worker A) and access control information (PC1) from the server storage unit 31 in accordance with the deletion command. As a result, after the date and time specified in the deletion conditions, the remote connection server 30 will not be able to receive remote connection requests from the work terminal 10 by worker A, or even if a remote connection is in progress, because the connection establishment information (worker A) and access control information (PC1) corresponding to the remote connection server 30 will no longer be registered, and the work terminal 10 will not be able to make a remote connection to the operation terminal 23.

[0043] In this way, the management device 40 stores date and time information such as time zone, period, and date and time in the condition storage unit 41c as conditions for enabling remote connection. By doing so, it can register predetermined connection establishment information (worker A) and access control information (PC1) in the server storage unit 31 of the remote connection server 30 only at the date and time specified by the date and time information. As a result, if worker A attempts to make a remote connection from the work terminal 10 to the operation terminal 23 and makes a mistake in the date and time of the remote connection, the remote connection will not be possible. Therefore, it is possible to prevent unexpected operation of the field equipment 22 and machinery / power equipment 21 due to unplanned remote connections, and to prevent human accidents at the controlled equipment 20 and damage to the equipment itself.

[0044] Furthermore, in the embodiment described above, connection establishment information (worker A) and access control information (PC1) are registered in the server storage unit 31 based on a registration command sent at the date and time specified by the registration conditions, and connection establishment information (worker A) and access control information (PC1) are deleted from the server storage unit 31 based on a deletion command sent at the date and time specified by the deletion conditions. This allows the remote connection server 30 to remotely connect the work terminal 10 to the operation terminal 23 at predetermined dates and times, without requiring the remote connection server 30 to have a new function to monitor the date and time of registration and deletion, while maintaining the existing configuration of the remote connection server 30.

[0045] In the embodiment described above, connection establishment information (worker A) and access control information (PC1) are registered in the server storage unit 31 based on a registration command sent at the date and time specified by the registration conditions, and the connection establishment information (worker A) and access control information (PC1) are deleted from the server storage unit 31 in response to a deletion command sent at the date and time specified by the deletion conditions. However, the present invention is not limited to this. For example, registration commands and deletion commands may be sent to the remote connection server 30 in advance, and the remote connection server 30 may monitor the date and time for registration and deletion, so that when the predetermined date and time arrives, the remote connection server 30 itself registers or deletes the connection establishment information (worker A) and access control information (PC1) in the server storage unit 31.

[0046] (6-2) Management of remote connections based on authorization information to immediately grant remote connection requests from specific workers The management device 40 can also be configured, for example, to allow worker A to immediately make a remote connection to the controlled equipment 20 from the work terminal 10, based on the judgment of the remote system 100 or the person in charge of managing the controlled equipment 20, depending on the operating status of the controlled equipment 20 or a request from a specific worker A. In this case, permission information that immediately authorizes the remote connection request from worker A is input to the management device 40 from the operation unit 42 by the person in charge of management. The condition storage unit 41c stores the permission information input from the operation unit 42 as a registration condition. Furthermore, the connection establishment information storage unit 41a stores connection establishment information (worker A) related to worker A who is permitted to make an immediate remote connection, and the access control information storage unit 41b stores access control information (PC1) related to the remote connection to the operation terminal 23.

[0047] When permission information is input from the person in charge of management via the operation unit 42, the management device 40 transmits connection establishment information (worker A) and access control information (PC1) corresponding to the permission information to the remote connection server 30 along with a registration command.

[0048] When the remote connection server 30 receives connection establishment information (worker A) and access control information (PC1) along with a registration command, it registers the connection establishment information (worker A) and access control information (PC1) in the server storage unit 31 based on the registration command. In this case, for example, worker A, who has received notification from the supervisor that immediate remote connection is permitted, will recognize that remote connection is possible. When worker A sends a remote connection request to the remote connection server 30, the work terminal 10 can quickly establish a remote connection to the operation terminal 23 based on the connection establishment information (worker A) and access control information (PC1) that have been registered in the server storage unit 31.

[0049] As a result, the control device 40 can, for example, be remotely connected to the operation terminal 23 by a worker in a remote location at the discretion of the supervisor, allowing the worker to operate the operation terminal 23. Therefore, malfunctions in the operation of the on-site equipment 22 or machinery / power equipment 21 can be addressed immediately by remote connection by a specific worker, preventing human error at the controlled equipment 20 or damage to the equipment itself.

[0050] (6-3) Management of remote connections based on denial information, which immediately denies remote connection requests from specific workers. For example, the management device 40 can be configured, based on the operating status of the controlled equipment 20 and a request from a specific worker A, to prevent worker A from immediately making a remote connection to the controlled equipment 20 from the work terminal 10, at the discretion of the remote system 100 or the person in charge of managing the controlled equipment 20. In this case, the person in charge of management inputs disallowance information from the operation unit 42 to the management device 40, immediately denying the remote connection request from worker A. The condition storage unit 41c stores the disallowance information input from the operation unit 42.

[0051] When the management device 40 receives unauthorized information regarding worker A via the operation unit 42 from the management supervisor, it sends a deletion command to the remote connection server 30 to delete the connection establishment information (worker A) and access control information (P1) corresponding to the unauthorized information from the server storage unit 31.

[0052] When the remote connection server 30 receives a deletion command, it immediately deletes the connection establishment information (worker A) and access control information (PC1) registered in the server storage unit 31 from the server storage unit 31. Once the connection establishment information (worker A) and access control information (PC1) are deleted from the server storage unit 31, the remote connection server 30 will no longer have the connection establishment information (worker A) and access control information (PC1) that formed the basis of the remote connection from the work terminal 10 by worker A registered. Therefore, it will no longer be able to allow new remote connections or continue the currently running remote connection. Consequently, the remote connection server 30 can refuse new remote connections from the work terminal 10 to the operation terminal 23 or forcibly terminate the currently running remote connection.

[0053] This allows the management device 40 to immediately terminate the remote connection at the discretion of the management supervisor. For example, if a malfunction occurs in the operation of the field equipment 22 or the machinery / power equipment 21 due to a remote connection to the operation terminal 23, or if an unforeseen incident occurs to a worker working on the controlled equipment 20, the management supervisor can immediately terminate the remote connection. Therefore, it is possible to prevent the machinery / power equipment 21 from operating unexpectedly and to prevent human casualties on the controlled equipment 20 or damage to the equipment itself.

[0054] (6-4) Management of remote connections based on the analysis results of data obtained from controlled equipment The management device 40 can store in the condition storage unit 41c, as a registration condition, that remote connection from the work terminal 10 to the controlled equipment 20 be permitted based on the results of analysis of the data received from the field device 22 by the detection unit 43. In addition, the management device 40 can store in the condition storage unit 41c, as a deletion condition, that remote connection from the work terminal 10 to the controlled equipment 20 be prohibited based on the results of analysis of the data received from the field device 22 by the detection unit 43.

[0055] It is preferable to define, as registration conditions to be stored in the condition storage unit 41c, reference information for data requiring remote connection, based on past operational data of the controlled equipment 20, such as when an unforeseen event occurs in the machinery / power equipment 21 or when the controlled equipment 20 is in a state where external control is required. It is also preferable to define, as deletion conditions to be stored in the condition storage unit 41c, reference information for data that does not require remote connection, based on past operational data of the controlled equipment 20, such as when an unforeseen event occurs in the machinery / power equipment 21 if an external operation is performed or when the controlled equipment 20 is in a state where external control is not required.

[0056] When the detection unit 43 receives data generated from the field device 22 based on the operating status of, for example, the operation terminal 23 or the machinery / power equipment 21, it analyzes the data received from the field device 22 based on the reference information defined in the condition storage unit 41c. The detection unit 43 determines whether the data received from the field device 22 matches any of the reference information for registration conditions or deletion conditions stored in the condition storage unit 41c. If the detection unit 43 determines that the data received from the field device 22 matches the reference information defined in the registration conditions, it outputs the determination result to the control unit 44. When the control unit 44 receives the determination result from the detection unit 43, it transmits the connection establishment information and access control information stored in the storage unit 41, which are pre-associated with the registration conditions, to the remote connection server 30 along with the registration command.

[0057] When the remote connection server 30 receives, for example, connection establishment information (worker A) and access control information (PC1) from the management device 40 along with a registration command, it registers the connection establishment information (worker A) and access control information (PC1) in the server storage unit 31 based on the registration command. As a result, when the remote connection server 30 receives a remote connection request from worker A from the work terminal 10, it can remotely connect the work terminal 10 to the operation terminal 23 based on the connection establishment information (worker A) and access control information (PC1). The work terminal 10 can change the operating conditions of the machinery and power equipment 21 via the field device 22 by operating the operation terminal 23.

[0058] Meanwhile, if the detection unit 43 determines that the data received from the field device 22 matches the reference information for the deletion conditions, it outputs the determination result to the control unit 44. Upon receiving the determination result from the detection unit 43, the control unit 44 sends a deletion command associated with the deletion conditions to the remote connection server 30. For example, if the remote connection server 30 receives a deletion command concerning worker A from the management device 40, it deletes the corresponding connection establishment information (worker A) and access control information (PC1) from the server storage unit 31 based on the deletion command. As a result, the remote connection currently being performed by worker A is immediately interrupted because the connection establishment information (worker A) and access control information (PC1) that form the basis of its authority are not registered, and the remote connection of the work terminal 10 to the operation terminal 23 is forcibly terminated.

[0059] In this way, the control device 40 can determine whether or not to remotely connect the work terminal 10 to the operation terminal 23 depending on the operating status of the machinery and power equipment 21, thereby preventing human error at the controlled equipment 20 and damage to the equipment itself.

[0060] (6-5) Managing remote connections based on weather information For example, the management device 40 can store in the condition storage unit 41c a registration condition that it will acquire weather information for the area where the controlled equipment 20 is installed and allow remote connection from the work terminal 10 to the controlled equipment 20 according to that weather information. The management device 40 can also store in the condition storage unit 41c a deletion condition that it will acquire weather information for the area where the controlled equipment 20 is installed and deny remote connection from the work terminal 10 to the controlled equipment 20 according to that weather information.

[0061] In this case, the management device 40 may acquire weather information for the area where the controlled equipment 20 is installed, which is made public by public institutions such as the national or local government, via a network. Alternatively, the management device 40 may receive weather information for the area where the controlled equipment 20 is installed from the field device 22.

[0062] The weather information for the area where the controlled equipment 20 is installed can be, for example, at least one of the following: weather, temperature, probability of precipitation, precipitation amount, wind speed, atmospheric pressure, humidity, etc. In addition, the weather information acquired by the management device 40 may be current weather information, as well as weather information that forecasts weather in the short term and long term, or it may be statistical data obtained by analyzing past weather information, or data obtained by analyzing weather information from a natural science perspective.

[0063] It is preferable that the registration conditions stored in the condition storage unit 41c include reference weather information for data requiring remote connection, such as when an unexpected situation occurs in the machinery / power equipment 21 due to the influence of weather (sunny, cloudy, rainy, thunderstorms, etc.), temperature (temperature above 35°C, etc.), probability of precipitation (probability of precipitation above 50%, etc.), or when the controlled equipment 20 is in a state where external control is necessary based on short-term or long-term weather forecasts. It is also preferable that the deletion conditions stored in the condition storage unit 41c include reference weather information for data that does not require remote connection, such as when an unexpected situation occurs in the machinery / power equipment 21 due to the influence of weather (sunny, cloudy, rainy, thunderstorms, etc.), temperature (temperature above 35°C, etc.), probability of precipitation (probability of precipitation above 50%), or when the controlled equipment 20 is normally controlled by on-site workers under the current weather conditions and therefore no external control is necessary.

[0064] When the control unit 44 acquires weather information for the area where the controlled equipment 20 is installed, it analyzes the data received from the field device 22 based on the reference weather information specified in the condition storage unit 41c. The control unit 44 determines whether the acquired weather information matches any of the reference weather information for registration conditions or deletion conditions stored in the condition storage unit 41c. If the control unit 44 determines that the acquired weather information matches the reference weather information specified in the registration conditions, it transmits the connection establishment information and access control information stored in the storage unit 41, which are pre-associated with the registration conditions, to the remote connection server 30 along with the registration command, based on the determination result.

[0065] For example, when the remote connection server 30 receives connection establishment information (worker A) and access control information (PC1) related to a specific worker A from the management device 40 along with a registration command, it registers the connection establishment information (worker A) and access control information (PC1) in the server storage unit 31 based on the registration command. As a result, for example, when the probability of precipitation in the area where the controlled equipment 20 is installed exceeds 50%, the remote connection server 30 receives a remote connection request from the work terminal 10 by worker A, and can remotely connect the work terminal 10 to the operation terminal 23 based on the connection establishment information (worker A) and access control information (PC1).

[0066] On the other hand, if the control unit 44 determines that the acquired weather information matches the standard weather information specified in the deletion conditions, it sends a deletion command associated with the deletion conditions to the remote connection server 30 based on that determination. For example, when the remote connection server 30 receives a deletion command concerning worker A from the management device 40, it deletes the corresponding connection establishment information (worker A) and access control information (PC1) from the server storage unit 31 based on the deletion command. As a result, for example, if the probability of precipitation in the area where the controlled equipment 20 is located is 50% or less, the connection establishment information (worker A) and access control information (PC1) will not be registered, the remote connection request from the work terminal 10 to the operation terminal 23 will be rejected, and the remote connection from the work terminal 10 to the operation terminal 23 will be forcibly terminated.

[0067] In this way, the control device 40 can set weather information such as weather conditions and precipitation probability as conditions for permitting remote connection, and can permit or deny remote connection from the work terminal 10 to the operation terminal 23 only when the weather information of the controlled equipment 20 meets predetermined conditions (reference weather information). Therefore, remote control and adjustment of the machinery and power equipment 21 can be performed when the weather and temperature are appropriate, and unforeseen incidents and human-caused accidents involving the controlled equipment 20 can be prevented.

[0068] (7) Action and Effects As described above, the management device 40 stores connection establishment information for establishing a connection from the work terminal 10 to the controlled equipment 20, and access control information for controlling the remote connection of the work terminal 10 to the operation terminal 23 provided on the controlled equipment 20, in the storage unit 41. The control unit 44 of the management device 40 registers the connection establishment information and access control information from the storage unit 41 to the server storage unit 31 of the remote connection server 30, or deletes the connection establishment information and access control information stored in the server storage unit 31, according to preset conditions. In the remote system 100, when the connection establishment information and access control information are registered in the server storage unit 31, the remote connection server 30 can make a remote connection from the work terminal 10 to the operation terminal 23 based on the connection establishment information and access control information.

[0069] As a result, the management device 40 can improve the security of the controlled equipment 20 while allowing remote connection operations by pre-setting registration conditions and deletion conditions for registering connection establishment information and access control information in the server storage unit 31 according to the operating status of the controlled equipment 20.

[0070] In the above embodiment, the destination to which the work terminal 10 is remotely connected via the remote connection server 30 is the operation terminal 23. However, depending on the situation, the direct connection destination can also be the field equipment 22 or the machinery / power equipment 21.

[0071] Furthermore, the remote connection server 30 and the management device 40 may be connected via a network, or they may be connected directly without a network.

[0072] Furthermore, in another embodiment of the above-described embodiment, if the control unit 44 of the management device 40 receives a command to prohibit remote connection of the work terminal 10 from the mechanical / power equipment 21, field equipment 22, or operation terminal 23 of the controlled equipment 20, and connection establishment information and access control information are registered in the server storage unit 31, the management device 40 may delete the connection establishment information and access control information from the server storage unit 31 in accordance with the connection prohibition command. [Explanation of symbols]

[0073] 10 Work terminals 20 Controlled Equipment 30 Remote Connection Server 31 Server Storage Unit 40 Management device 41 Storage section 42 Operation section 43 Detection unit 44 Control Unit 100 Remote Systems

Claims

1. A management device for managing a remote connection server that allows a work terminal to remotely connect to a controlled equipment, A storage unit that stores connection establishment information for establishing a connection from the work terminal to the controlled equipment, access control information for controlling the remote connection of the work terminal to a predetermined device provided on the controlled equipment, and date and time information indicating the registration start time or start date and the deletion time or deletion date. A control unit that, according to the date and time information, transmits the connection establishment information and the access control information to the remote connection server along with a registration command, causes the connection establishment information and the access control information to be registered in the server storage unit of the remote connection server based on the registration command, transmits a deletion command to the remote connection server according to the date and time information, and causes the connection establishment information and the access control information registered in the server storage unit to be deleted from the server storage unit based on the deletion command, Equipped with, A management device that, only during the time period in which the connection establishment information and the access control information are registered in the server storage, allows remote connection from the work terminal to the predetermined device via the remote connection server based on the connection establishment information and the access control information, and prohibits the remote connection when the connection establishment information and the access control information are deleted from the server storage.

2. The system further includes an operating unit that is operated by an operator and into which the date and time information is entered, The management device according to claim 1, wherein the storage unit stores the date and time information input via the operation unit.

3. A management device for managing a remote connection server that remotely connects a work terminal to a controlled equipment, A storage unit that stores connection establishment information for establishing a connection from the work terminal to the controlled equipment, and access control information for controlling the remote connection of the work terminal to a predetermined device provided on the controlled equipment, A control unit that, according to pre-set conditions, causes the storage unit to register the connection establishment information and the access control information in the server storage unit of the remote connection server, and deletes the connection establishment information and the access control information registered in the server storage unit from the server storage unit, The system includes a detection unit that detects the operating status of the predetermined device in the controlled equipment, When the connection establishment information and the access control information are registered in the server storage unit, a remote connection from the work terminal to the predetermined device via the remote connection server becomes possible based on the connection establishment information and the access control information. The above condition is the detection output by the detection unit, The control unit is a management device that, in response to the detection output, causes the connection establishment information and access control information stored in the storage unit to be registered in the server storage unit, and causes the connection establishment information and access control information registered in the server storage unit to be deleted from the server storage unit.

4. A management device for managing a remote connection server that remotely connects a work terminal to a controlled equipment, A storage unit that stores connection establishment information for establishing a connection from the work terminal to the controlled equipment, and access control information for controlling the remote connection of the work terminal to a predetermined device provided on the controlled equipment, A control unit that, according to pre-set conditions, causes the storage unit to register the connection establishment information and access control information of the storage unit to the server storage unit of the remote connection server, and deletes the connection establishment information and access control information registered in the server storage unit from the server storage unit. Equipped with, When the connection establishment information and the access control information are registered in the server storage unit, a remote connection from the work terminal to the predetermined device via the remote connection server becomes possible based on the connection establishment information and the access control information. The aforementioned conditions are weather information, The control unit is a management device that, in accordance with the weather information, causes the connection establishment information and access control information stored in the storage unit to be registered in the server storage unit, and causes the connection establishment information and access control information registered in the server storage unit to be deleted from the server storage unit.

5. A remote system comprising a work terminal, a controlled equipment, a remote connection server that remotely connects the work terminal to the controlled equipment, and a management device that manages the remote connection server, The aforementioned control device is A storage unit that stores connection establishment information for establishing a connection from the work terminal to the controlled equipment, access control information for controlling the remote connection of the work terminal to a predetermined device provided on the controlled equipment, and date and time information indicating the registration start time or start date and the deletion time or deletion date. A control unit that, according to the date and time information, transmits the connection establishment information and the access control information to the remote connection server along with a registration command, causes the connection establishment information and the access control information to be registered in the server storage unit of the remote connection server based on the registration command, transmits a deletion command to the remote connection server according to the date and time information, and causes the connection establishment information and the access control information registered in the server storage unit to be deleted from the server storage unit based on the deletion command, Equipped with, A remote system in which, only during the time period in which the connection establishment information and the access control information are registered in the server storage, a remote connection from the work terminal to the predetermined device via the remote connection server is possible based on the connection establishment information and the access control information, and the remote connection is prohibited when the connection establishment information and the access control information are deleted from the server storage.

Images