JPH04323703A - Distributed controller - Google Patents

Abstract

PURPOSE:To prevent erroneous setting and erroneous operation by designating the security adapted to the user's operation mode to each data to clarify operator's and enginner's partial charge of work. CONSTITUTION:This controller consists of a first table TL1 where the security code of each data handled by each of plural internal instruments, a second table TL2 where the access level of each of plural internal instruments is set, a third table TL3 where the access level of each data is designated in accordance with relations between the security code of data obtained from the first table TL1 and the access level of the instrument obtained from the second table TL2, a mode switching means 3 which designates the mode at the time of data access, and a data access permitting means 4 which permits or inhibits access to each data in accordance with the access level of each data obtained from the third table TL3 in the designated mode.

Description

[Detailed description of the invention]

0001

[Industrial Application Field] The present invention transmits and receives data between distributed control stations that execute process control calculations, sequence control, etc., and performs control monitoring, control operations, etc. Regarding a distributed control device consisting of an operator station equipped with a display screen for giving instructions, more specifically, when accessing each data handled by a plurality of internal instruments prepared in the control station, the security of the data is The present invention relates to a distributed control device that allows easy specification of the information.

0002

2. Description of the Related Art FIG. 8 is a conceptual diagram of a distributed control device. In the figure, 1 is a control station in charge of process control, which is distributed in correspondence with the processes within the factory. ~5V
Alternatively, an input analog signal of 4 to 20 mA is applied and a control output is sent to an operating end such as a valve. 2 is an operator station as a man-machine interface section, which has a keyboard and a graphic display screen such as a CRT, and is installed in a control room or the like. This operator station 2 displays various data sent from each control station 1 via the communication line, gives instructions to the control station 1 to change set values and control parameters, performs process control operations, etc. It is configured so that it can be done. In such a distributed control device, the control station 1 includes, for example, a feedback control instrument that has a process control function, and a sequence control instrument that has a sequence control function (these are collectively referred to as internal instruments). Multiple pieces are available,
A system is constructed by combining these as appropriate depending on the process to which they are applied. The data handled by each of these internal instruments is constructed as a database and can be accessed from the operator station 2 side. Conventionally, security when accessing this type of database has been determined in advance by the manufacturer, taking into account the characteristics of each data.

0003

[Problem to be solved by the invention] However, recently,
The processes controlled by control stations have become diverse, including continuous processes and batch processes, and are expanding from upstream to downstream processes, centering on plant control. For this reason, the data handled by each internal instrument is
It has become diverse, and depending on the importance of each,
It has become necessary to set detailed security when accessing this data. The present invention has been made in view of these points, and is a distributed type system that allows users to finely set security when accessing each data handled by each internal instrument according to the applied process, operating mode, etc. The purpose is to provide a control device.

0004

[Means for Solving the Problems] The present invention achieves the above object by providing a control station provided with a plurality of internal instruments having control functions, and a control station that provides access to data handled by the internal instruments within this control station. In a distributed control device comprising an operator station equipped with a display screen for monitoring, operating, and giving instructions for control, the operator station is provided with information about each data handled by the internal instruments for each of the plurality of internal instruments. a first table in which security codes are set; a second table in which access levels are set for each of the plurality of internal instruments; security codes for data obtained from the first table; and security codes obtained from the second table. A third table that specifies the access level of each data in relation to the access level of the instrument, a mode switching means specified at the time of data access, and a mode specified by the mode switching means from the third table. and data access permission means for enabling or disabling access to each data according to the access level of each data obtained,
The distributed control device is characterized in that the content of the at least third table is configured to be changeable by a user.

[0005]

[Operation] A code is set (specified) for the data handled by each internal instrument according to the first table, with "0" being the loosest security and "3" being the strictest security, for example. For each internal instrument, an access label is designated by the second table, with "0" being the mildest level and "3" being the strictest level, for example. With reference to the third table, the access level of each data is specified from the relationship between the security code of the data obtained from the first table and the access level of the instrument obtained from the second table. The data access permission means enables or disables access to each data according to the access level of each data obtained from the third table for the mode specified by the mode specifying means. do.

[0006]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Examples of the present invention will be described in detail below with reference to the drawings. FIG. 1 is a conceptual diagram of a system to which the present invention is applied. In the figure, reference numeral 1 denotes a distributed control station, and a plurality of control stations are connected to a communication line LN depending on the scale and situation of the process. 2 exchanges data with this control station 1 via the communication line LN, and sends and receives instructions regarding control monitoring and control.
This is an operator station for performing operations, etc., and is equipped with a keyboard KY and CRT. Although only one operator station is shown here, a plurality of operator stations may be provided depending on the scale and situation of the process. In the control station 1, 3 is a mode specifying means provided on the keyboard KY and operated at the time of data access, and is composed of a key hole 31 and a plurality of keys 32, 33, etc. The key 32 is for example used by an operator, and is inserted into the key hole 31.
When inserted, the key position can be rotated from KEY OFF (key-off mode) to ON (key-on mode). Further, the key 33 is for example used by engineers, and when this key is inserted into the key hole 31, the key changes from the OFF to ON position and from the ENG
(engineering mode) position. This makes it possible to clarify the division of work by establishing areas that engineers can access but not operators (there is data that does not need to be accessed for normal operations). There is.

FIG. 2 is a functional block diagram showing one embodiment of the present invention. In the control station 1, 11 is an internal instrument that performs feedback control, which inputs a process signal PV from a sensor installed in the field, performs, for example, PID control calculation on the deviation signal between this process signal and a target value SV, and outputs a control output. It has a control calculation function that outputs MV to the valve, and multiple units are available. 12 is an internal instrument for performing sequence control, and a plurality of these are also prepared. Each of these internal instruments handles data such as process signals, set value signals, and control outputs, as well as alarm values, limit values, and calculation parameters for various signals. Each of these internal instruments has its own instrument name (
Doug number) is attached. 13 is a database (
The contents are constructed from data handled by each internal instrument, and are accessible from the operator station 2 side via a communication means (not shown).

At the operator station 2, the TL
1 is a first table in which the security code of each data handled by the internal instruments is set for each of the plurality of internal instruments 11 and 12, TL2 is a second table in which the access level for each internal instrument is set, and TL3 is First table TL1
This is a third table showing the access level of each data based on the relationship between the security code of the data obtained from TL2 and the access level of the instrument obtained from the second table TL2. 3 is key 32 or 33 when accessing data
4 is a third table T for the mode specified by the mode switching means 3.
Depending on the access level of each data obtained from L3,
This is a data access permission means that enables or disables access to each data. Here, the contents of the second table TL2 and the third table TL3 are as follows:
It is configured so that it can be changed arbitrarily by the user. These changes can be made by displaying the necessary data on the CRT using a keyboard or the like.

FIG. 3 is a diagram showing an example of the first table TL1. Each internal instrument 11..., 12... has a security code for each data handled by the internal instrument, such as process signal PV, control output MV, set value SV, upper/lower limit alarm values PH and PL of the process signal, etc. However, for example, "0" is set (designated) as the loosest security and "3" as the strictest security. FIG. 4 is a diagram showing an example of the second table TL2. Each internal instrument is given a tag name that represents the internal instrument, and each internal instrument is given an access label with "0" being the mildest level and "3" being the strictest level. is specified. FIG. 5 is a diagram showing an example of the third table TL3. Here, in the vertical direction, the security code of the data obtained from the first table TL1 is applied, and in the horizontal direction, the access level of the instrument obtained from the second table TL2 is applied,
Based on the relationship between the two, that is, the level set at the position where the two intersect is designated as the access level of the corresponding data. FIG. 6 is a diagram showing an example of an operation in which the data access means 4 is enabled or disabled depending on the relationship between the mode designation of the mode switching means 3 and the access level obtained from the third table TL3. It is. In this figure, ○ indicates that access operations such as changing data are possible, and × indicates that access operations are not possible.

[0010] The operation of the apparatus configured as described above will be explained next. FIG. 7 is a flowchart showing an example of the operation. When accessing data, for example, the key position is turned on (KEY ON) by the key 32 used by the operator.
ON) position. In response to this, the mode switching means 3 allows data access (enabling operation) for those whose access levels are "0" and "1" according to FIG. The data access permission means 4 obtains the access level of the internal instrument that is the subject of data access displayed on the CRT from the second table (FIG. 4), and further determines the security level of the data handled by the internal instrument. Copy the code to the first table TL1 (
Furthermore, the access level of the data is determined from the third table TL3 (FIG. 5) showing the relationship between the security code of the data and the access level of the internal instrument. And this access level is "0", "1"
This means that the data that indicates the data is allowed to be accessed (operated).

[0011] That is, the operator selects, for example, the tag name T.
Internal instruments marked with 101 (access level is 0)
In this case, data for which security codes "0", "1", and "2" are set in the first table TL1 in FIG. 3 can be accessed. In this state,
As shown in Figure 6, access is not possible for items with access levels "2" and "3", so for example, in the case of an internal instrument with tag name T103 (access level is 2), In the first table TL1 of No. 3, access to data for which security codes "2" and "3" are set becomes impossible.

On the other hand, when an engineer's key is used, the access level is "0" and "0" as shown in FIG.
1" and "2" can be accessed. For example, in the case of an internal instrument with tag name T103 (access level is 2), the security code is set in the first table TL1 in FIG. 3. Data set to "2" can be accessed. Here, by changing the contents of the third table TL3 to, for example, the contents surrounded by the broken line in FIG. 7, the security of each data can be changed arbitrarily.

[0013] In this embodiment, the contents of the first table are fixed in the system, and the contents of the second and third tables can be changed by the user, so that the user can perform detailed data security operations. However, simply by making it possible to change the contents of the third table, it is possible to specify data security that matches the user's driving style, and the technical idea of the present invention also applies in this case. shall be included. In addition, the mode switching means is
Although the keys can be distinguished based on the type of key, they may also be distinguished based on, for example, a password.

[0014]

[Effect] As explained in detail above, according to the present invention, with respect to each data handled by an internal instrument, the security code of each data handled by each internal instrument and the access level specified for each internal instrument are By changing the contents of this third table, the user can specify the security corresponding to each access level in detail. Therefore, by specifying security in accordance with the user's driving style for each data, it is possible to easily clarify the division of work among operators and engineers, and to prevent erroneous settings and operations.

[Brief explanation of drawings]

FIG. 1 is a conceptual diagram of a system to which the present invention is applied.

FIG. 2 is a functional block diagram showing one embodiment of the present invention.

FIG. 3 is a diagram showing an example of a first table.

FIG. 4 is a diagram showing an example of a second table.

FIG. 5 is a diagram showing the contents of a third table.

FIG. 6 is a diagram illustrating an example of an operation in which the data access means is made operable or inoperable depending on the relationship between the mode designation of the mode switching means and the access level obtained from the third table.

FIG. 7 is a flowchart showing an example of operation.

FIG. 8 is a conceptual diagram of the configuration of a distributed control device.

[Explanation of symbols]

1 Control station 2 Operator station 3 Mode switching means 4 Data access permission means 11, 12 Internal instruments 13 Database TL1 First table TL2 Second table TL3 Third table

Claims (1)

[Claims] Claim 1: A control station equipped with a plurality of internal instruments having control functions, and a display screen that accesses data handled by the internal instruments in this control station and provides control monitoring, operation, and instructions. In the distributed control device, the operator station includes a first table in which security codes are set for each data handled by the internal instruments for each of the plurality of internal instruments; a second table in which access levels for each instrument are set; a security code for data obtained from the first table;
a third table for specifying the access level of each data based on the relationship with the access level of the instrument obtained from the table; a mode switching means for specifying a mode at the time of data access; and a third table for specifying the mode specified by the mode switching means. , a data access permission means for enabling or disabling access to each data according to the access level of each data obtained from the third table, A distributed control device characterized in that it is configured to be changeable by a user.