Patent Application
20170063835
The present invention relates to a control apparatus and a control apparatus system. In particular, the invention relates to a control apparatus in which additional software is installed from a recording medium connected to the control apparatus, and to a control apparatus system in which the control apparatus is used.
In some programmable controllers, a security measure is taken to prevent a fraudulent operation based on leakage of a password. For example, in a known technique, a memory card having a user authentication table is attached on a programmable controller in order to control access to the programmable controller from a tool. Further, a login request command in which user login information is written is transmitted from the tool to the programmable controller, and the programmable controller is allowed to be accessed when IDs and passwords of the both are identical (for example, see Patent Document 1).
Patent Document 1: Japanese Unexamined Patent Publication No. 2003-167606
In an aspect of using a programmable controller, a customer purchases an additional software and installs the software into the programmable controller, in some cases. In those cases, the installation is normally performed from the Internet by using a personal computer; however, in some production sites at which a programmable controller is used, no personal computer is allowed to be brought in or a communication line is not provided.
An object of the present invention is to prevent unauthorized installation of software at a production site at which software cannot be installed through a communication line.
In the following, there will be described a plurality of aspects as a measure for solving the problem. These aspects can be combined with each other as needed.
A control apparatus according to a perspective of the present invention is used with a recording medium connected thereto. The recording medium stores additional software including software identification information, recording medium identification information, and encrypted information generated by encrypting the software identification information, using the recording medium identification information as a key. The control apparatus is equipped with a storage, a recording medium, and a controller which can access the storage.
The controller can perform the steps of:
obtaining the encrypted information from the recording medium;
obtaining the recording medium identification information from the recording medium;
obtaining the software identification information by decrypting the encrypted information, using the recording medium identification information as a key;
obtaining the software identification information from the additional software;
comparing the decrypted software identification information and the software identification information obtained from the additional software; and
storing the additional software in the storage if the decrypted software identification information agrees with the software identification information obtained from the additional software, as a result of the comparison between them.
In the control apparatus, if the decrypted software identification information agrees with the software identification information obtained from the additional software as a result of the comparison between them, the additional software is stored in the storage. As an example of the storing, the additional software is moved from the recording medium to the storage and is made usable. Further, as another example of the storing, the additional software is temporarily moved from the recording medium before the determination step, and the additional software is made usable if the additional software is determined to be usable.
As described above, the additional software is made usable only in the case that the decrypted software identification information agrees with the software identification information obtained from the additional software, as a result of the comparison between them. Thus, only in the case that the recording medium storing the correct encrypted information is used, the additional software is installed in the control apparatus and is made usable. That is, in the cases, for example, that there is no encrypted information, that the medium identification information as the key of the encrypted information is different from the medium identification information of the recording medium, or that the software identification information as the content of the encrypted information is different from the software identification information of the additional software, the additional software is not allowed to be installed because the additional software is taken as unauthorized installation.
A control apparatus according to another perspective of the present invention is a control apparatus which is used with a recording medium being connected thereto and having the recording medium identification information recorded therein. The control apparatus is equipped with a storage in which additional software including software identification information is stored, and a controller which can access the recording medium and the storage.
The controller can perform the steps of:
obtaining the software identification information from the additional software;
obtaining the recording medium identification information from the recording medium;
generating encrypted information by encrypting the software identification information, using the recording medium identification information as a key;
writing the encrypted information in the recording medium; and
moving the additional software from the storage to the recording medium.
In the present apparatus, the additional software and the encrypted information can be written in the recording medium from the control apparatus. Thus, even if the control apparatus needs to be repaired due to a failure of a part of the functions of the control apparatus, it is possible to save the additional software and the encrypted information from the control apparatus before repairing.
A control apparatus system according to another perspective of the present invention is equipped with the above-described control apparatus and recording medium. The recording medium stores: additional software which includes the software identification information and which is to be executed by the control apparatus; recording medium identification information; and encrypted information generated by encrypting the software identification information, using the recording medium identification information as a key.
An area which is in the recording medium and in which the encrypted information is stored may be configured with to include a file system which can be read by an OS of the control apparatus.
The file system is made such that it is difficult for devices other than the control apparatus to read the area which is in the recording medium and in which the encrypted information is stored, so that the encrypted information is hardly leaked.
Plural pieces of additional software may be disposed in the recording medium.
In the control apparatus, a single recording medium can be used to install plural pieces of additional software into one or more of control apparatuses.
A single piece of additional software may include plural pieces of software identification information. In that case, for a single piece of the additional software, plural pieces of the encrypted information are disposed in the recording medium, corresponding to a number of the plural pieces of the software identification information.
In the control apparatus, based on each combination of the software identification information and the encrypted information, a single piece of additional software can be installed in the control apparatus.
In the control apparatus according to the present invention, the additional software is made usable only in the case that the decrypted software identification information agrees with the software identification information obtained from the additional software, as a result of the comparison between them. Therefore, even at a production site at which software cannot be installed through a communication line, it is possible to prevent unauthorized installation of software.
(1) General Structure of Control System
First, a general structure of a control system according to a first embodiment will be described with reference to
The PLC system 1 inputs a signal from a signal input section 5 configured with, for example, a sensor or a switch. Further, the PLC system 1 uses, as needed, an input signal from the signal input section 5 to execute a program, thereby calculating an output signal to control a control target equipment 7.
The development support device 3 realizes a various kinds of functions for creating a user program to be used on a control apparatus 11 of the PLC system 1. Further, the number of the development support devices 3 is not limited to one, and any numbers of development support devices 3 may be connected as long as, for example, there are enough numbers of addresses assigned to the development support devices 3.
(2) Configuration of PLC System
Next, a detailed configuration of the PLC system 1 will be described with reference to
The control apparatus 11 is a CPU unit of the programmable logic controller (PLC).
Further, on the control apparatus 11, a predetermined task is repeatedly executed at a predetermined cycle. The task is a unit of processes including: an I/O refresh process for updating an input variable, based on an input signal from the input unit 13, and updating an output signal to be output to the output unit 15, based on an output variable; and a process for executing a user program and/or a system program. Note that the task may include other processes such as a motion control process or may include only a process for executing a program.
The input unit 13 inputs an input signal from the signal input section 5 such as a sensor or a switch and outputs the input signal to the control apparatus 11. As the input unit 13, it is possible to use an input unit corresponding to the type of the signal fed from the signal input section 5. Specifically, for example, in the case that the signal input section 5 is configured with a thermocouple to measure temperatures, it is possible to use the input unit 13 as an input unit whose input signal is a voltage generated by the thermocouple. Alternatively, for example, in the case that the signal input section 5 is configured with an electric switch, it is possible to use the input unit 13 as an input unit whose input signal is an ON/OFF state of the electric switch.
The output unit 15 outputs an output signal to the corresponding control target equipment 7. With this arrangement, the control apparatus 11 can control the control target equipment 7. As the output unit 15, it is possible to use an output unit corresponding to the type of the output signal. For example, in the case that the control target equipment 7 is a motor and that a position control or the like of the motor is performed, it is possible to use an output unit having a motion controller function. Alternatively, for example, in the case that the control target equipment 7 is an electric furnace, it is possible to use an output unit which outputs a signal to control a relay for controlling the electric furnace (for example, a signal to control an ON/OFF duty factor).
The power supply unit 17 supplies electric power to the control apparatus 11, the input unit 13, and the output unit 15.
Note that the PLC system 1 may be a system in which all the above components are assembled in a single casing, or the PLC system may be made by assembling respective components in a separate casing and connecting the components. In particular, if the input unit 13 and the output unit 15 are made as separate components, it is possible to connect, to the PLC system 1, an intended number of pieces of intended control target equipment and an intended number of intended signal input sections.
(3) Configuration of Control Apparatus
Next, a configuration of the control apparatus 11 will be described in detail with reference to
In
The control apparatus 11 communicates with the development support device 3 by using the communication interface 117. The communication interface 117 uses, for example, a data communication protocol such as the TCP/IP (Transmission Control Protocol/Internet Protocol) to perform sending and receiving of data.
The control apparatus 11 has a memory interface 119. A memory card 121 to be described later can be connected to the memory interface 119.
(4) Configuration of Development Support Device
Next, a configuration of the development support device 3 will be described in detail with reference to
The development support device 3 has a CPU 31, a storage 33, a communication interface 35, an input section 37, and a display 39. The storage 33 stores a development support program 33a. The CPU 31 executes the development support program 33a to realize a function of the development support device 3. The input section 37 is an input unit such as keyboard, a mouse, or a touch panel. The display 39 is a display unit made up of a display using an LCD or an organic EL.
(5) Control Configuration of Control Apparatus
With reference to
The memory card 121 is a memory card used to install an additional software 41 into the control apparatus 11. The memory card 121 is a medium which software and data can be read from and written in, and the memory card 121 is specifically a recording medium such as an SD memory card and a USB memory. These recording media can be detachable to the control apparatus 11.
As shown in the drawing, the memory card 121 stores the additional software 41. The additional software 41 is installed in the control apparatus 11 and thus becomes a part of the program which is subsequently executed by the CPU 111 of the control apparatus 11. The additional software 41 has a software ID 43a. The additional software 41 further includes, other than binary of the software, various types of information such as an installation method and a version. The software ID 43a is the software identification information with which normally issued additional software 41 can be identified, and is an ID unique to each license.
Further, the memory card 121 stores the recording medium ID 45. The recording medium ID 45 is recording medium identification information with which the memory card 121 can be identified. The recording medium ID 45 is a unique ID and may be an ID provided according to the standard (for example, the CID register) or an ID uniquely modified by a user.
Further, the memory card 121 stores encrypted information 47. The encrypted information 47 is information used to certify that the additional software 41 is stored in the memory card 121 as authorized software. Thus, if the encrypted information 47 is not included in the memory card 121 or if the encrypted information 47 cannot be read out from the memory card 121, the additional software 41 cannot be installed, as described later. Specifically, the encrypted information 47 is the information generated by encrypting a software ID 43b (to be described later), using the recording medium ID 45 as a key.
Note that the memory card 121 does not store the software used for the encryption. Further, the encrypted information 47 is generated by the control apparatus 11 or other devices, as described later.
The encrypted information 47 is stored in a protected area 49 of the memory card 121. The protected area 49 is an area using a file system accessible by an OS of the control apparatus 11. Therefore, a general purpose PC cannot access the encrypted information 47. As a result, even if the additional software 41 and the recording medium ID 45 are copied in another memory card by a general purpose PC, the encrypted information 47 cannot be copied.
As shown in the drawing, the control apparatus 11 has a storage 51 and a controller 52. The storage 51 is configured with the RAM 113 in
The decryption unit 53 has a function, as described later, to decrypt the encrypted information 47 and thus to generate the software ID 43b.
The encryption unit 55 has a function, as described later, to encrypt the software ID 43b and thus to generated the encrypted information 47.
The comparison determination unit 57 has a function, as described later, to compare the software IDs 43a and 43b with each other and thus determines whether the both are identical.
The enabling/disabling unit 59 has a function, as described later, to enable or disable the additional software 41 on the control apparatus 11. To “enable” is, for example, to dispose the additional software 41 at an appropriate position in the memory so that the additional software 41 can be used when the control apparatus 11 is restarted. To “disable” is, for example, to delete the additional software 41 or putting the additional software 41 in a state in which the additional software 41 cannot be executed even if the additional software 41 is not deleted.
(6) Control Operation
Next, with reference to
Note that the order of the steps in the following control flow is not limited to that in the description. Further, the steps may be simultaneously performed or partially duplicated.
First, the controller 52 waits for the memory card 121 to be attached to the control apparatus 11 (step S1). Note that, as shown in
When the memory card 121 is attached to the control apparatus 11 (step S1: Yes), installation software is started (step S2).
Next, the controller 52 acquires the encrypted information 47 from the memory card 121 (step S3). Specifically, the controller 52 reads out the encrypted information 47 from the protected area 49 of the memory card 121, and writes the encrypted information 47 into the storage 51 as shown in
Next, the controller 52 acquires the recording medium ID 45 from the memory card 121 (step S4). Specifically, the controller 52 reads out the recording medium ID 45 from the memory card 121, and writes the recording medium ID 45 into the storage 51 as shown in
Next, the control apparatus 11 (more specifically, the decryption unit 53) decrypts the encrypted information 47 by using the recording medium ID 45 and thus obtains the software ID 43b which has been encrypted (step S5). As a result, as shown in
Next, the controller 52 temporarily moves the additional software 41 from the memory card 121 to the storage 51 (step S6). Specifically, the controller 52 reads out, as shown in
Next, the control apparatus 11 (specifically, the comparison determination unit 57) compares the software ID 43a in the additional software 41 and the software ID 43b obtained by decryption (step S7). Specifically, as shown in
If the two IDs are identical (step S8: Yes), the process moves to step S9; and if the two IDs are not identical (step S8: No) the process moves to step S10.
If the two IDs are identical, the control apparatus 11 (specifically, the enabling/disabling unit 59) enables the additional software 41 (step S9). To “enable” is, for example, to store the additional software 41 at an appropriate position in the storage 51 so that the additional software 41 is executed when the control apparatus 11 is restarted.
If the two IDs are not identical, the additional software 41 is not allowed to be installed for the reason that the installation is unauthorized. Therefore, an installation termination process is performed (step S10). Specifically, as shown in
Note that, after the additional software 41 is installed, the recording medium ID 45, the encrypted information 47, and the software ID 43b are deleted from the storage 51. Further, after the additional software 41 is normally installed, all the data on the memory card 121 are deleted.
As described above, only in the case that the decrypted software ID 43b agrees with the software ID 43a obtained from the additional software 41 as a result of the comparison between them, the additional software 41 becomes usable. Thus, only in the case that the memory card 121 storing the correct encrypted information 47 is used, the additional software 41 is installed in the control apparatus 11 and is thus usable.
In the first embodiment, before the encrypted information 47 is decrypted to obtain the software ID 43b (step S5 of
Hereinafter, a second embodiment will be described with reference to
In
In this case, as shown in
In the first embodiment, before the software IDs 43a and 43b are compared with each other (step S8 of
Hereinafter, a third embodiment will be described with reference to
In
In this case, as shown in
In the first to third embodiments, there is described the control operation which installs the additional software into the control apparatus from the memory card; however, in a fourth embodiment, there is described a control operation which saves an additional software in a memory card by using a control apparatus.
First, with reference to
The memory card 121 stores a recording medium ID 45. The recording medium ID 45 is recording medium identification information with which the memory card 121 can be identified. Note that the memory card 121 does not store additional software 41 or encrypted information 47.
In the same manner as in the first embodiment, a controller 52 has a storage 51. The storage 51 is configured with the RAM 113 of
As shown in the drawing, the storage 51 of the control apparatus 11 stores the additional software 41. The additional software 41 is a part of a program which is executed by the CPU 111 of the control apparatus 11. The additional software 41 has a software ID 43a. The software ID 43a is software identification information with which the normally issued additional software 41 can be identified.
Next, with reference to
Note that there is no limitation to the order of the steps in the following control flow. Further, the steps may be simultaneously performed or partially duplicated.
In response to the operation of a switch (not shown) of the control apparatus 11, the following control operation is started.
First, the controller 52 waits for the memory card 121 to be attached to the control apparatus 11 (step S21). Note that as shown in
If the memory card 121 is attached to the control apparatus 11 (step S21: Yes), the saving software is started (step S22).
Next the control apparatus 11 (specifically, the enabling/disabling unit 59) disables the additional software 41 (step S23). To “disable” is to establish a state in which the data constituting the additional software 41 are left but the control apparatus 11 cannot execute the additional software 41.
Next, the controller 52 acquires the recording medium ID 45 from the memory card 121 (step S24). Specifically, the controller 52 reads out the recording medium ID 45 from the memory card 121 and writes the recording medium ID 45 into the storage 51 as shown in
Next, the control apparatus 11 (specifically, the encryption unit 55) encrypts the software ID 43a of the additional software 41 by using the recording medium ID 45 and thus obtains the encrypted information 47 (step S25). As a result, as shown in
Next, as shown in
Next, as shown in
After the additional software 41 is saved, the recording medium ID 45 and the encrypted information 47 are deleted from the storage 51.
In the embodiment, it is possible to write the additional software 41 and the encrypted information 47 in the memory card 121 from the control apparatus 11. Thus, also in the case that the control apparatus 11 need to be repaired due to a failure of a part of the function of the control apparatus 11, it is possible to save the additional software 41 and the encrypted information 47 from the control apparatus 11. As a result, when the failure of the control apparatus 11 has got fixed after the saving, the additional software 41 can be installed again in the control apparatus 11 by using the memory card 121 as in the first to third embodiments. Further, the additional software can be installed in the control apparatus 11 by using the memory card 121.
The modified examples (a) to (c) of the embodiment will be described.
(a) Disabling of the additional software (step S23) may be omitted.
(b) Acquiring of the recording medium ID (step S24) may be omitted. In this cases, the controller 52 reads out the recording medium ID 45 stored in the memory card 121 at the time of encrypting the software ID (step S25).
(c) The timing of moving the additional software (step S27) is not limited to the timing in the above embodiments. For example, moving of the additional software (step S27) may be performed before the encrypted information is written in (step S26).
Further, the embodiment shows that the control apparatus 11 functions as a device which installs the additional software 41 and the encrypted information 47 into the memory card 121. For example, in the case that the storage 51 of the control apparatus 11 stores a plurality pieces of additional software 41 (however, each having different software IDs), the additional software 41 and the encrypted information 47 are installed in each of a plurality of memory cards 121 (however, each having a different recording medium ID) while plurality of memory cards 121 are serially connected to the control apparatus 11 one after another.
In the first to third embodiments, a single memory card stores a piece of additional software; however, the present invention is not limited to the above embodiments. For example, a single memory card may store a plurality pieces of additional software.
With reference to
A memory card 121A is a memory card used to install first additional software 41A and second additional software 41B into one or two control apparatuses 11.
As shown in the drawing, the memory card 121A stores the first additional software 41A and the second additional software 41B. The first additional software 41A and the second additional software 41B are installed in the control apparatus and thus become a part of the program which is subsequently executed by a CPU of the control apparatus. The first additional software 41A has a first software ID 43A. The second additional software 41B has a second software ID 43B. The first software ID 43A is software identification information with which the normally issued first additional software 41A can be identified. The second software ID 43B is software identification information with which the normally issued second additional software 41B can be identified.
Further, the memory card 121A stores a recording medium ID 45. The recording medium ID 45 is recording medium identification information with which the memory card 121A can be identified.
Further, the memory card 121A stores first encrypted information 47A and second encrypted information 47B.
The first encrypted information 47A is information used to certify that the first additional software 41A is stored in the memory card 121A as authorized software. Therefore, if the first encrypted information 47A is not contained or if the first encrypted information 47A cannot be read out, the first additional software 41A cannot be installed. Specifically, the first encrypted information 47A is the information generated by encrypting the first software ID 43A, using the recording medium ID 45 as a key.
The second encrypted information 47B is information used to certify that the second additional software 41B is stored in the memory card 121A as authorized software. Therefore, if the second encrypted information 47B is not included or if the second encrypted information 47B cannot be read out, the second additional software 41B cannot be installed. Specifically, the second encrypted information 47B is the information generated by encrypting the second software ID 43B, using the recording medium ID 45 as a key.
In the embodiment, when the memory card 121A has got connected to the control apparatus, the first additional software 41C is installed. In this case, as described in the first embodiment, after comparing the first software ID (not shown) obtained by decrypting the first encrypted information 47A and the first software ID 43A in the first additional software 41A, the first additional software 41C is installed in the control apparatus. At the time of this first installation, the first additional software 41A is deleted from the memory card 121B, and the first encrypted information 47A is deleted from the memory card 121B.
Next, the second additional software 41D is installed. In this case, as described in the first embodiment, after comparing the second software ID (not shown) obtained by decrypting the second encrypted information 47B and the second software ID 43B in the second additional software 41B, the additional software 41B is installed in the control apparatus. At the time of this second installation, the second additional software 41B and the second encrypted information 47B are deleted from the memory card 121B.
In the above embodiment, a single control apparatus performs the installation of the first additional software 41C and the installation of the second additional software 41D; however, different control apparatuses may perform each of the installations.
As described above, a plurality pieces of additional software can be installed from a single recording medium into a single or more control apparatuses.
Note that the number of pieces of additional software stored in a memory card is not limited to two and may be three or more.
In the fifth embodiment, a single memory card stores plural pieces of additional software, but the present invention is not limited to that embodiment. For example, the configuration may be made such that a memory card stores only one piece of additional software and that the one piece of additional software is installed in a plurality of the control apparatuses. That is, in this case, a plurality of licenses is given to a single piece of additional software.
With reference to
A memory card 121B is a memory card used to install additional software 41C in a control apparatus.
As shown in the drawing, the memory card 121B stores the additional software 41C. The additional software 41C is installed in the control apparatus and thus becomes a part of the program which is subsequently executed by a CPU of the control apparatus. The additional software 41C has a third software ID 43C and a fourth software ID 43D. The third software ID 43C and the fourth software ID 43D are software identification information with which normally issued additional software 41C can be identified. However, the third software ID 43C and the fourth software ID 43D are different from each other.
Further, the memory card 121B stores a recording medium ID 45. The recording medium ID 45 is recording medium identification information with which the memory card 121B is identified.
Further, the memory card 121B stores third encrypted information 47C and fourth encrypted information 47D.
The third encrypted information 47C and fourth encrypted information 47D are information used to certify that the additional software 41C is stored in the memory card 121B as authorized software. That is, if the third encrypted information 47C or the fourth encrypted information 47D is not contained or if the third encrypted information 47C or the fourth encrypted information 47D cannot be read out, the additional software 41C cannot be installed. Specifically, the third encrypted information 47C is the information generated by encrypting the third software ID 43C, using the recording medium ID 45 as a key. The fourth encrypted information 47D is the information generated by encrypting the fourth software ID 43D, using the recording medium ID 45 as a key.
In the embodiment, when the memory card 121B has got connected to the first control apparatus, the third software ID (not shown) obtained by decrypting the third encrypted information 47C is compared with the third software ID 43C in the additional software 41C, and the additional software 41C is then installed in the control apparatus, as described in the first embodiment. At the time of this first installation, the additional software 41C is not deleted from the memory card 121B. Note that the third encrypted information 47C is deleted from the memory card 121B.
Next, when the memory card 121B has got connected to the second control apparatus, the fourth software ID (not shown) obtained by encrypting the fourth encrypted information 47D is compared with the fourth software ID 43D in the additional software 41C, and the additional software 41C is installed in the control apparatus, as described in the first embodiment. At the time of this second installation, the additional software 41C and the fourth encrypted information 47D are deleted from the memory card 121B.
In the embodiment, based on each of the combinations of the software identification information and the encrypted information, a single piece of additional software can be installed in a plurality of control apparatuses.
Note that the number of the software IDs corresponding to the single piece of additional software is not limited to two but may be three or more.
Items common to the first to third embodiments and the fifth to sixth embodiments are put together below.
A control apparatus (for example, the control apparatus 11) is used with a recording medium (for example, the memory cards 121, 121A, and 121B) connected to the control apparatus. The recording medium stores: additional software (for example, the additional software 41, the first additional software 41A, the second additional software 41B, and the additional software 41C) including software identification information (for example, the software ID 43a, the first software ID 43A, the second software ID 43B, and the third software ID 43C); recording medium identification information (for example, the recording medium ID 45); and encrypted information (for example, the encrypted information 47, the first encrypted information 47A, the second encrypted information 47B, the third encrypted information 47C, and the fourth encrypted information 47D) generated by encrypting the software identification information, using the recording medium identification information as a key. The control apparatus is equipped with a storage (for example, the storage 51) and a controller (for example, the controller 52) which can access the recording medium and the storage.
The controller can perform the steps of:
obtaining encrypted information from a recording medium (for example, step S3 of
obtaining recording medium identification information from the recording medium (for example, step S4 of
obtaining software identification information by decrypting the encrypted information, using the recording medium identification information as a key (for example, step S5 of
obtaining the software identification information from additional software (for example, step S7 of
comparing the decrypted software identification information and the software identification information obtained from the additional software (for example, step S7 of
storing the additional software in a storage if the decrypted software identification information agrees with the software identification information obtained from the additional software, as a result of the comparison between them (for example, step S9 of
In the present control apparatus, if the decrypted software identification information agrees with the software identification information obtained from the additional software as a result of the comparison between them, the additional software is stored in the storage.
As described above, the additional software is made usable only in the case that the decrypted software identification information agrees with the software identification information obtained from the additional software as a result of the comparison between them. Thus, only in the case that the recording medium storing the correct encrypted information is used, the additional software is installed in the control apparatus and is made usable.
In the above, the plurality of embodiments of the present invention are described; however, the present invention is not limited to the above embodiments, and various modifications can be made without departing from the gist of the invention. In particular, it is possible to arbitrarily combine the plurality of embodiments and the modified examples described herein, as needed.
For example, the second embodiment and third embodiment can be combined with each other.
For example, the fifth embodiment and the sixth embodiment can be combined with each other. In this case, each of the plural pieces of additional software in the memory card has a plurality of software IDs.
The present invention can be applied to the control apparatus in which additional software is installed from a connected recording medium, and can be applied to the control apparatus system in which the control apparatus is used.
1 PLC system
11 control apparatus
21 recording medium
41 additional software
41A first additional software
41B second additional software
41C additional software
43
a software ID
43
b software ID
43A first software ID
43B second software ID
43C third software ID
43D fourth software ID
47 encrypted information
47A first encrypted information
47B second encrypted information
47C third encrypted information
47D fourth encrypted information
49 protected area
51 storage
52 controller
53 decryption unit
55 encryption unit
57 comparison determination unit
59 enabling/disabling unit
100 control system
| Number | Date | Country | Kind |
|---|---|---|---|
| 2014-052798 | Mar 2014 | JP | national |
| Filing Document | Filing Date | Country | Kind |
|---|---|---|---|
| PCT/JP2015/050956 | 1/15/2015 | WO | 00 |
