The present invention relates to a centralized control system.
Conventionally, a technique for centrally controlling a power facility such as a substation has been proposed (for example, Patent Document 1).
[Patent Document 1]
Japanese Unexamined Patent Application, First Publication No. 2003-224932
In the conventional centralized control system described in Patent Document 1, there are a plurality of terminals capable of performing an operation, through a network. For this reason, in the conventional centralized control system, since the number of persons who may operate the terminals is increased as compared with a case where the number of terminals is small, there is a problem that not only a person who has an authority for operation but also a person who does not have an authority for operation may operate the terminal. That is, in the conventional centralized control system, there is a problem that it is not possible to refuse an operation exceeding a range of an operation authority of an operator of the power facility.
The present invention has been made in view of the above-described points, and provides a centralized control system capable of refusing an operation exceeding a range of an operation authority of an operator of a power facility.
According to an aspect of the present invention, a centralized control system includes a centralized control device including a storage unit configured to store biometric information of an operator, and operation authority information indicating a range of authority for operations of the operator for an operation target device in association with each other, a biometric information acquisition unit configured to acquire the biometric information from the operator, a selection information acquisition unit configured to acquire selection information for selecting the operation target device, a biometric authentication unit configured to authenticate the operation of the operator on the basis of the biometric information acquired by the biometric information acquisition unit and the biometric information stored in the storage unit whenever the selection information acquisition unit acquires the selection information, a specific operation reception unit configured to receive a specific operation for the operation target device on the basis of an authentication result from the biometric authentication unit, and the operation authority information stored in the storage unit, and an operation information output unit configured to output specific operation information indicating the specific operation received by the specific operation reception unit to the operation target device, and a network configured to connect the centralized control device and the operation target device to each other.
In addition, in the centralized control system according to an aspect of the present invention, the operation authority information is information indicating the range of the operation authority determined for each operator in advance.
In addition, in the centralized control system according to an aspect of the present invention, the operation authority information is information indicating the range of the operation authority according to an area where the device is installed.
In addition, in the centralized control system according to an aspect of the present invention, the storage unit further stores identification information of an identification medium that identifies the operator in association with the biometric information of the operator and the operation authority information indicating the range of the authority of the operation by the operator for the operation target device, the centralized control system further includes an identification information acquisition unit configured to acquire the identification information from the identification medium, and an identification information authentication unit configured to authenticate the operation of the operator on the basis of the identification information acquired by the identification information acquisition unit and the identification information stored in the storage unit, and the specific operation reception unit receives the specific operation for the operation target device further on the basis of an authentication result by the identification information authentication unit.
According to the present invention, it is possible to refuse an operation exceeding a range of an operation authority of an operator of a power facility.
Hereinafter, an embodiment of a centralized control system according to the present invention will be described with reference to the drawings.
The centralized control system 1 includes server bases S and control stations C. The server bases S and the control stations C are connected to each other through a network N. In this example, the centralized control system 1 includes three server bases S, that is, a server base SA, a server base SB, and a server base SC. In addition, in this example, the centralized control system 1 includes five control stations C, that is, an A area control station CA, a B area control station CB, a C area control station CC, a D area control station CD, and an E area control station CE.
The server base S includes a centralized control device 10. In this example, the server base SA includes a centralized control device 10A. The server base SB includes a centralized control device 10B. The server base SC includes a centralized control device 10C. In the following description, in a case where the centralized control device 10A, the centralized control device 10B, and the centralized control device 10C are not distinguished from each other, the centralized control device 10A, the centralized control device 10B, and the centralized control device 10C are commonly referred to as the centralized control device 10. A plurality of centralized control devices 10 constitute a system with duplication. Specifically, in the centralized control system 1, the centralized control device 10A is commonly used. In a case where a problem occurs in the centralized control device 10A, the centralized control device 10B operates instead of the centralized control device 10A. In addition, in a case where a problem occurs in both the centralized control device 10A and the centralized control device 10B, the centralized control device 10C operates instead of the centralized control device 10A and the centralized control device 10B. A plurality of server bases S are disposed in different areas in the centralized control system 1, thereby causing duplication in the system.
The control station C controls a power facility on the basis of control by the centralized control device 10. In this example, the power facility is a substation T. That is, the control station C controls the substation T.
Specifically, the A area control station CA controls a substation A1, a substation A2, a substation A3, and a substation A4. In this example, the A area control station CA is installed in a site of the substation A1. The B area control station CB controls a substation B1 and a substation B2. The C area control station CC controls a substation Cl, a substation C2, and a substation C3. In this example, the C area control station CC is installed in a site of the substation Cl. The D area control station CD controls a substation D1, a substation D2, a substation D3, a substation D4, and a substation D5. The E area control station CE controls a substation E1, a substation E2, a substation E3, and a substation E4.
In addition, the server base S may control the power facility in the same manner as the control station C. Specifically, the server base SA controls a substation F1, a substation F2, a substation F3, and a substation F4 without passing through the network N.
In the following description, “the server base S controls the substation T without passing through the Network N” is also described as “the server base S directly controls the substation T”. In addition, “the server base S controls the substation T through the Network N and the control station C” is also described as “the server base S indirectly controls the substation T”.
Next, a more specific constitution of the network W connecting the control station C and the substation T to each other will be described with reference to
Among such duplicated sub networks, the system LAN and the TC-LAN are constituted by double rings of a first ring 1R and a second ring 2R. The control station C and the substation T are connected to each other by the double ring network N.
In addition, a maintenance base M may be connected to the system LAN. The maintenance base M includes a monitoring terminal, with which it is possible to monitor a state of the substation T and control the substation T.
Next, a specific constitution example of the server base S will be described with reference to
The card reader 50 acquires information from a card medium. For example, the card medium may be an ID card such as an employee identification card or a service card. This ID card is carried by the operator. In the ID card, identification information for identifying the operator is stored in advance. The card reader 50 acquires the information stored in the ID card from the ID card and provides the information to the control unit 100.
The vein sensor 60 acquires a vein pattern from a finger, a palm, or the like of a person. The vein sensor 60 provides the acquired vein pattern to the control unit 100. In addition, here, a case where biometric information provided to the control unit 100 is a vein pattern will be described, however, the present invention is not limited thereto. As long as the biometric information provided to the control unit 100 is according to the human body such as a pattern of a fingerprint, a palm print, or an iris, and is capable of identifying a person, the biometric information provided to the control unit 100 may be any information.
The control unit 100 includes an identification information acquisition unit 110, an identification information authentication unit 120, a biometric information acquisition unit 130, a biometric authentication unit 140, a selection information acquisition unit 150, a specific operation reception unit 160, an operation information output unit 170, a display control unit 180, and an operation reception unit 190.
The identification information acquisition unit 110 acquires the identification information provided from the card reader 50 and outputs the acquired identification information to the identification information authentication unit 120.
The identification information authentication unit 120 authenticates the identification information output from the identification information acquisition unit 110.
The biometric information acquisition unit 130 acquires the biometric information provided from the vein sensor 60 and outputs the acquired biometric information to the biometric authentication unit 140.
The biometric authentication unit 140 authenticates the biometric information output from the biometric information acquisition unit 130.
The selection information acquisition unit 150 acquires information indicating an operation of selecting an operation target device among operations performed with the keyboard 30 or the mouse 40 by the operator, from the keyboard 30 or the mouse 40. In this example, the operation target device includes a circuit breaker, a disconnecting switch, a switch, a phase adjustment device, a voltage adjustment device, and the like of the substation T. The operator selects which one of the circuit breaker, the disconnecting switch, the switch, the phase adjustment device, and the voltage adjustment device as the operation target device by operating the keyboard 30 or the mouse 40. The selection information acquisition unit 150 acquires information indicating the device selected by the operator as selection information.
The specific operation reception unit 160 receives a specific operation for the operation target device. In this example, the specific operation is determined for each operation target device in advance. Specifically, the specific operation for the circuit breaker is an operation of changing between an open or closed state of the circuit breaker. In addition, the specific operation for the voltage adjustment device is an operation of changing an output voltage.
The operation reception unit 190 receives an operation other than the specific operation described above. Hereinafter, an operation other than the specific operation is also described as a “general operation”. The general operation includes an operation of switching a monitoring screen of a power system, an operation of creating an operation sequence table, an operation of setting an alarm ringing, and the like.
The operation information output unit 170 outputs specific operation information indicating the specific operation received by the specific operation reception unit 160 to the operation target device through the communication unit 70 and the network N.
The display control unit 180 displays an image on the display unit 20 by outputting an image signal to the display unit 20.
Next, an example of the operation of the centralized control device 10 of the present embodiment will be described with reference to
In other words, in a case where an authentication by the identification information authentication unit 120 is accepted and an authentication by the biometric authentication unit 140 is accepted, the specific operation reception unit 160 receives the specific operation. That is, the specific operation reception unit 160 receives the specific operation for the operation target device on the basis of an authentication result by the biometric authentication unit 140 and the operation authority information stored in the storage unit 200.
In addition, in a case where the authentication by the identification information authentication unit 120 is accepted, the operation reception unit 190 receives an operation other than the specific operation.
The centralized control device 10 performs an operation in the security mode A (step S10). In a case where the operator places his/her own ID card on the card reader 50, the card reader 50 detects the ID card (step S20). Upon detecting the ID card, the card reader 50 communicates with the ID card and acquires the identification information stored in the ID card.
The identification information acquisition unit 110 acquires the identification information from the card reader 50 and outputs the acquired identification information to the identification information authentication unit 120. The identification information authentication unit 120 authenticates the ID card by comparing the identification information acquired from the identification information acquisition unit 110 with the identification information stored in advance in the storage unit 200 (step S30). In this example, the identification information stored in the ID card is an ID card number. Specifically, the number of the ID card given to an operator A may be “0001”. The number of the ID card given to an operator B may be “0002”. The number of the ID card given to an operator C may be “0003”. Here, the identification information stored in the storage unit 200 will be described with reference to
Returning to
In step S40, the centralized control device 10 performs an operation by the security mode B.
In a case where the operator places his/her own palm on the vein sensor 60, the vein sensor 60 detects the vein pattern of the palm, that is, the biometric information (step S50). Upon detecting the biometric information, the vein sensor 60 outputs the detected biometric information to the biometric information acquisition unit 130.
The biometric information acquisition unit 130 acquires the biometric information from the vein sensor 60 and outputs the acquired biometric information to the biometric authentication unit 140. The biometric authentication unit 140 performs a biometric authentication by comparing the biometric information acquired from the biometric information acquisition unit 130 with the biometric information stored in advance in the storage unit 200 (step S60). In this example, the biometric information is a vein pattern of the palm. Specifically, the vein pattern of the operator A may be “BI1”. The vein pattern of the operator B may be “BI2”. The vein pattern of the operator C may be “BI3”. Here, the biometric information stored in the storage unit 200 will be described with reference to
In the storage unit 200, biometric information of the operator is stored for each operator. Specifically, the vein pattern “BI1” is stored as the biometric information of the operator A in the storage unit 200. In addition, the vein pattern “BI2” is stored as the biometric information of the operator B and the vein pattern “BI3” is stored as the biometric information of the operator C in the storage unit 200, respectively.
Returning to
In step S70, the centralized control device 10 performs an operation by the security mode C.
Next, a relationship between the security mode and an implementation work will be described with reference to
In addition, in this example, an implementation work in the security mode B includes creating a local operation procedure table, settings during work/during testing, alarm ringing settings, and the like in the maintenance site M.
In addition, in this example, an implementation work in the security mode C includes a device operation, creation/approval of an automatic operation procedure table, operating record editing/approval, data maintenance, authentication registration/change/deletion, and the like in the control station C.
Next, the authority range for operations of the operator will be described with reference to
In addition, as shown in
As described above, in the centralized control system 1, it is possible to determine the authority range of the operation on the basis of an area where the device is installed. In addition, it is possible to determine the authority range of the operation in units of the control stations C or it is possible to determine the authority range of the operation in units of the substations T or devices.
The operation authority information indicating the authority ranges for operations described above is stored in the storage unit 200. Specifically, as shown in
That is, in the storage unit 200, the identification information of the identification medium for identifying the operator, the biometric information of the operator, and the operation authority information indicating the authority range of the operation by the operator for the operation target device are stored in association with each other. As described above, the operation authority information may be information indicating the range of the operation authority determined for each operator in advance. In addition, the operation authority information may be information indicating the range of the operation authority according to the area where the device is installed.
Next, a specific example of an operation by the operator will be described with reference to
In this example, an open and closing procedure of the switch when separating a “∘∘line 1L” from a busbar in the substation will be described. When separating the “∘∘line 1L” from the busbar, the operator checks that a current of the“∘∘line 1L” is 0 [A] and opens a 01-th switch (procedure 1). Next, the operator checks that a line voltage of the “∘∘line 1L” is 0 [V] and opens a first switch (procedure 2). Next, the operator opens a 101st switch (procedure 3).
More specifically, the centralized control device 10 displays the current and the line voltage of the “∘∘line 1L” on the display unit 20. In addition, the centralized control device 10 displays an arrangement diagram of the switch of the “∘∘line 1L” on the display unit 20 (refer to
The operator places his/her own ID card on the card reader 50. As described with reference to
In the procedure 1 described above, the operator checks the current of the “∘∘line 1L” displayed on the display unit 20. In a case where the current of the “∘∘line 1L” is 0 [A], the operator operates the mouse 40 to move a mouse cursor onto an image of the 01-th switch. The operator clicks the mouse 40 in a state in which the mouse cursor is on the image of the 01-th switch. The control unit 100 detects the click operation of the mouse 40 on the image of the 01-th switch as the selection operation of selecting the device (step S100 in
Here, in a case where the operator performs the selection operation of the device, while placing a palm of one hand on the vein sensor 60, the operator operates the mouse 40 with the other hand. The vein sensor 60 detects the vein pattern of the palm, that is, the biometric information (step S120). The biometric authentication unit 140 authenticates the biometric information (step S130). In a case where the biometric authentication unit 140 refuses the biometric authentication (step S130; refusal), the control unit 100 returns the process to step S100. In addition, in a case where the biometric authentication unit 140 accepts the biometric authentication (step S130; acceptance), the control unit 100 advances the process to step S140. In a case where the biometric authentication unit 140 accepts the biometric authentication, the operation by the security mode C is possible. An operation of the control unit 100 for the operation of the switch of the substation is an example of the operation by the security mode C.
In a case where the click operation of the mouse 40 is performed by the operator, the control unit 100 determines whether or not the click operation is the specific operation for the operation target device on the basis of the position of the mouse cursor. In a case where the control unit 100 determines that the click operation is not the specific device operation (step S150; NO), the control unit 100 advances the process to step S170. In addition, in a case where the control unit 100 determines that the click operation is the specific device operation (step S150; YES), the control unit 100 advances the process to step S160.
The specific operation reception unit 160 receives an operation of opening the 01-th switch. The operation information output unit 170 outputs operation information indicating the operation of opening the 01-th switch received by the specific operation reception unit 160 to the substation T through the communication unit 70 and the network N (step S160). The substation T includes a control device that is not shown and opens the 01-th switch on the basis of the operation information provided through the network N. That is, the centralized control device 10 opens the 01-th switch of the substation T by a remote operation.
Next, the control unit 100 determines whether or not the selection operation has been performed (step S170 and step S180). In a case where the control unit 100 determines that the selection operation has been performed (step S180; YES), the control unit 100 returns the process to step S120. In a case where the control unit 100 determines that the selection operation has not been performed (step S180; NO), the control unit 100 returns the process to step S140.
The control unit 100 outputs the operation information to the operation target device by repeating the procedure described above.
Here, the procedure from step S100 to Step S130 shown in
Here, the specific operation for the operation target device includes operations of two kinds including a single operation and a plurality of operations according to the number of operation. From a single operation and a plurality operations, a single operation is an operation of changing a state of a device with one operation such as an opening or closing operation of a switch. A plurality of operations are an operation of changing the state of a device with a plurality of operations such as in an operation of changing output voltage. An example of a plurality of operations is illustrated in
In a case of this example, the operator selects a voltage adjustment device of the substation T as the operation target device. The selection information acquisition unit 150 detects the selection operation of the voltage adjustment device by the operator (step S100 and step S110 of
Here, the operator may click the step-up instruction button image 22 or the step-down instruction button image 23 with the mouse 40 without performing the selection operation of a device other than the voltage adjustment device. In this case, the selection information acquisition unit 150 determines that the selection operation has not been performed (step S180; NO) and returns the process to step S140. The specific operation reception unit 160 receives the click operation for the step-up instruction button image 22 or the step-down instruction button image 23 as the specific device operation.
That is, in a case where the operator continues to perform the specific device operation without performing the operation of selecting a device other than the voltage adjustment device, the centralized control device 10 does not perform the biometric authentication again. On the other hand, in a case where the operator performs the operation of selecting a device other than the voltage adjustment device, the centralized control device 10 performs the biometric authentication again.
As described above, in the centralized control system 1, the centralized control device 10 includes the biometric authentication unit 140. The biometric authentication unit 140 performs the biometric authentication of the operator whenever the selection information acquisition unit 150 acquires the selection information. In addition, the centralized control system 1 includes the storage unit 200 in which the biometric information of the operator and the operation authority information indicating the range of the authority of the operation by the operator for the operation target device are stored in association with each other. In addition, the centralized control system 1 includes the biometric authentication unit 140 authenticating the operation of the operator on the basis of the biometric information acquired by the biometric information acquisition unit 130 and the biometric information stored in the storage unit 200 whenever the selection information acquisition unit 150 acquires the selection information. That is, the centralized control system 1 performs the biometric authentication according to the operation authority of the operator whenever the operator selects the operation target device. With such a constitution, the centralized control system 1 can refuse an operation exceeding the range of an operation authority of an operator of the power facility.
Here, in the prior art, there is a case where once a biometric authentication is accepted, a device is not able to be operated afterwards without the biometric authentication being performed again. In this case, there is a case where when an operator leaves a place after the biometric authentication is accepted, a person to whom an operation authority has not been granted is able to perform an operation instead of the operator.
The centralized control system 1 performs the biometric authentication whenever the operator selects the operation target device. Therefore, according to the centralized control system 1, it is possible to prevent the case where when the operator leaves a place after the biometric authentication is accepted, the person to whom the operation authority is not given is able to perform the operation instead of the operator. That is, according to the centralized control system 1, it is possible to improve the security level of the device operation as compared with the prior art.
In addition, in the centralized control system 1, the range of the operation authority is determined for each operator in advance. Therefore, according to the centralized control system 1, it is possible to determine the range of the operation authority for each operator on the basis of, for example, a position or a responsibility range of the operator. With such a constitution, since the centralized control system 1 can prevent an operation exceeding a responsibility range of the operator, it is possible to improve the security level of the device operation. That is, according to the centralized control system 1, it is possible to refuse an operation exceeding the range of an operation authority of an operator of the power facility.
In addition, in the centralized control system 1, the range of the operation authority is determined in advance on the basis of the area where the device is installed. Therefore, according to the centralized control system 1, it is possible to determine the range of the operation authority for each area where the device is installed on the basis of, for example, an affiliation of the operator or a location of the operation target facility. With such a constitution, since the centralized control system 1 can suppress an operation exceeding the responsibility range of the operator, it is possible to improve the security level of the device operation. That is, according to the centralized control system 1, it is possible to refuse an operation exceeding the range of an operation authority of an operator of the power facility.
In addition, the centralized control system 1 includes authentication units of two kinds including the identification information authentication unit 120 that performs the authentication according to the authentication medium such as an ID card and the biometric authentication unit 140 that performs the authentication according to biometric information.
In the prior art, there is a case where an operation authority of a device is authenticated by an authentication of an authentication medium such as an ID card. In the prior art, in a case of the authentication by an authentication medium such as an ID card, there is a case where when an operator leaves a place having left the ID card in the card reader, a person to whom operation authority has not been granted is able to perform an operation instead of the operator. In addition, in a case where the operator loses the ID card, there is a case where a person who acquires the ID card is able to perform an operation instead of the operator.
The centralized control system 1 authenticates the operation authority by two-stage authentication including the authentication by the authentication medium and the authentication by the biometric information. With such a constitution, the centralized control system 1 may perform the authentication using only the authentication by the authentication medium with respect to an operation of which a required security level is relatively low. In addition, the centralized control system 1 may perform the authentication with a combination of the authentication by the authentication medium and the authentication by the biometric information with respect to an operation of which a required security level is relatively high. That is, the centralized control system 1 can perform the authentication according to the required security level. With such a constitution, the centralized control system 1 can reconcile reducing complications due to the biometric authentication and improving the security level according to the required security level. That is, according to the centralized control system 1, it is possible to improve the security level of the device operation as compared with the prior art. That is, according to the centralized control system 1, it is possible to refuse an operation exceeding the range of an operation authority of an operator of the power facility.
Although the embodiment of the present invention has been described in detail with reference to the drawings, a specific constitution is not limited the embodiment, and it is possible to make appropriate changes without departing from the gist of the present invention.
In addition, each device described above has a computer therein. In addition, a process of each process of each device described above is stored in a computer-readable recording medium in the form of a program and the processes described above are performed by the computer reading and executing the program. Here, the computer-readable recording medium means a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, or the like. In addition, the computer program may be transmitted to the computer through a communication line and the computer receiving the transmission may execute the program.
In addition, the program described above may be a program for realizing a part of the functions described above. In addition, the program may be a program which may realize the functions described above by combination with a program already recorded in a computer system, which is a so-called differential file (differential program).
1 Centralized control system
10 Centralized control device
100 Control unit
110 Identification information acquisition unit
120 Identification information authentication unit
130 Biometric information acquisition unit
140 Biometric authentication unit
150 Selection information acquisition unit
160 Specific operation reception unit
170 Operation information output unit
180 Display control unit
190 Operation reception unit
200 Storage unit
N Network
Number | Date | Country | Kind |
---|---|---|---|
2015-223491 | Nov 2015 | JP | national |
Filing Document | Filing Date | Country | Kind |
---|---|---|---|
PCT/JP2016/083502 | 11/11/2016 | WO | 00 |