The present invention relates to a monitoring method, a monitoring apparatus, and a program.
In a plant such as a manufacturing factory or a processing facility, time-series data composed of observed values of elements that can be measured from various types of sensors is analyzed, and a change in the state of the plant such as occurrence of an anomalous state or occurrence of change in a manufacturing condition is detected. The measured values of the respective elements measured in the plant are, for example, temperature, pressure, flow rate, power consumption value, supply amount of raw material, remaining amount, and so on. As a method for detecting a change in the state of the plant, there is a method of previously generating a model representing a correlation of a plurality of time-series data, checking whether or not newly observed time-series data keeps the correlation represented by the model and, when the correlation represented by the model is not kept, detecting occurrence of an anomalous state. There is also a method of detecting occurrence of a certain state change simply when the time-series data does not satisfy a preset value condition.
A monitored object to detect the abovementioned state change is not limited to a plant, but may be equipment such as an information processing system. For example, in a case where the monitored object is an information processing system, the CPU (Central Processing Unit) usage rate, memory usage rate, disk access frequency, number of input/output packets, power consumption value, and so on, of information processing apparatuses configuring the information processing system are measured as the measured values of the respective elements, and these measured values are analyzed to detect a change in the state of the information processing system.
Then, when a change in the state of the monitored object is detected as described above, there may be a need to specify the cause of the change in the state and properly handle. For example, Patent Document 1 describes grouping and analyzing time-series data that are in an analogous relation and thereby specifying causal time-series data, that is, element.
However, there arises a problem that even if an element that is the cause of a change in the state of a monitored object is specified as described above, it cannot be properly handled when the element cannot be controlled.
Accordingly, an object of the present invention is to provide a monitoring method, a monitoring apparatus and a program that can solve the problem that proper handling cannot be done for a monitored object.
A monitoring method according to an aspect of the present invention includes:
detecting that a monitored object is in a preset specific state based on a plurality of measured values measured from the monitored object;
specifying, among elements causing the measured values, the element related to detection of the specific state of the monitored object based on the measured values; and also
specifying the element based on preset properties of the elements of the measured values.
Further, a monitoring apparatus according to an aspect of the present invention includes: a detecting unit configured to detect that a monitored object is in a preset specific state based on a plurality of measured values measured from the monitored object; and a specifying unit configured to specify, among elements causing the measured values, the element related to detection of the specific state of the monitored object based on the measured values, and also specify the element based on preset properties of the elements of the measured values.
Further, a program according to an aspect of the present invention includes instructions for causing an information processing apparatus to realize: a detecting unit configured to detect that a monitored object is in a preset specific state based on a plurality of measured values measured from the monitored object; and a specifying unit configured to specify, among elements causing the measured values, the element related to detection of the specific state of the monitored object based on the measured values, and also specify the element based on preset properties of the elements of the measured values.
With the configurations as described above, the present invention enables proper handling of a monitored object.
A first example embodiment of the present invention will be described with reference to
A monitoring apparatus 10 according to the present invention is connected to a monitored object P (an object) such as a plant. The monitoring apparatus 10 is used for acquisition and analysis of measured values of elements of the monitored object P and for monitoring of the state of the monitored object P based on the result of the analysis. For example, the monitored object P is a plant such as a manufacturing factory or a processing facility, and the measured values of the respective elements includes a plurality of kinds of information such as temperature, pressure, flow rate, power consumption value, raw material supply amount, and remaining amount in the plant. In this example embodiment, the state of the monitored object P to be monitored is an anomalous state of the monitored object P, and as will be described later, the monitoring apparatus 10 performs a process to calculate the degree of anomaly from the measured values using a correlation model representing a correlation of the elements and detect and notify the anomalous state from the degree of anomaly. Moreover, the monitoring apparatus 10 according to the present invention specifies the cause of the anomalous state, and also specifies an object to be controlled in order to handle the anomalous state.
However, the monitored object P in the present invention is not limited to a plant, and may be a facility such as an information processing system, and the like. For example, in a case where the monitored object P is an information processing system, the monitoring apparatus 10 may measure the CPU (Central Processing Unit) usage rate, memory usage rate, disk access frequency, number of input/output packets, power consumption value, and so on, of an information processing apparatus configuring the information processing system, as the measured values of the respective elements, analyze the measured values to monitor the state of the information processing system, specifies the cause of the anomalous state, and also specifies an object to be controlled in order to handle the anomalous state.
The monitoring apparatus 10 includes one or a plurality of information processing apparatuses each including an arithmetic logic unit and a storage unit. As shown in
The measuring unit 11 acquires measured values of elements measured by various types of sensors a, b, c, and d installed in the monitored object P as time-series data at given time intervals, and stores the times-series data into the measured data storage unit 16. Since there are a plurality of kinds of elements to be measured, the measuring unit 11 acquires a time-series data set that is a set of time-series data of the plurality of elements as denoted by reference symbol T in
In this example embodiment, a measured value by one sensor is a value obtained by measuring a state arising from one element. For example, in a case where a measured value by a “sensor” is “temperature”, an “element” is a measured value obtained by measuring “temperature in a plant”. Meanwhile, in a second example embodiment to be described later, a measured value by one sensor is a value obtained by measuring a state arising from a plurality of generation sources (elements). For example, in a case where a measured value by a “sensor” is “frequency”, the “frequency” is a value obtained by measuring “frequency” from a “frequency component of vibrations of a machine that is a generation source” and a “frequency component of vibrations due to an earthquake that is a generation source”.
The learning unit 12 inputs a time-series data set T measured when the monitored object P is determined to be in a normal state in advance and generates a correlation model M representing a correlation between elements in the normal state as shown in
The detecting unit 13 acquires a time-series data set T measured after the abovementioned correlation model M is generated, analyzes the time-series data set T, and detects the anomalous state of the monitored object P. To be specific, the detecting unit 13 inputs a time-series data set T measured from the monitored object P, and calculates the degree of anomaly (information representing an anomalous state) representing a degree to which the monitored object P is in the anomalous state, using the correlation model M stored in the model storage unit 17. At this time, for example, the detecting unit 13 inputs a measured value of one of given two elements as an input value into a correlation function between the two elements, predicts an output value of the other of the two elements, and checks a difference between the predicted value and an actually measured value. When the difference is equal to or more than a predetermined value, the detecting unit 13 detects a correlation breakdown in the correlation between the two elements. Then, the detecting unit 13 checks the differences in the plurality of correlation functions between the elements and the status of correlation breakdown, and calculates the degree of anomaly according to the magnitude of the difference, the weight in the correlation function, the number of correlation breakdowns, and so on. For example, as the degree of correlation breakdown is higher, the detecting unit 13 calculates the value of the degree of anomaly to be higher, regarding the degree of the anomalous state of the monitored object P as higher. Then, the detecting unit 13 calculates the degree of anomaly with respect to each time of the time-series data set, and detects the monitored object P is in the anomalous state when the degree of anomaly is equal to or more than a threshold value. At this time, when the anomaly state of the monitored object P continues, the detecting unit 13 regards a period in which the state continues as an anomaly period, and when the degree of anomaly becomes equal to or less than a threshold value, the detecting unit 13 detects the end of the anomalous state and records a period up to that time as an anomaly period. However, a method for detecting an anomalous state by the detecting unit 13 is not limited to the abovementioned method, and may be any method.
The specifying unit 14 specifies elements corresponding to measured values included in a time-series data set T measured from the monitored object P in the anomalous state, from the time-series data set T. At this time, the specifying unit 14 ranks and specifies the elements based on property data representing properties of elements stored in the property data storage unit 18. The property data is, for example, as shown in
Then, as shown in
Meanwhile, the specifying unit 14 is not necessarily limited to ranking and specifying elements by the abovementioned method. For example, the specifying unit 14 is not necessarily limited to ranking elements based on degrees of control, and may rank and specify elements using property data representing another property of the elements. As an example, the property data may be the degree of necessity of elements in the monitored object P, the degree of influence of elements on the monitored object P, or the like.
Next, an operation of the above monitoring apparatus 10 will be described majorly with reference to flowcharts of
The monitoring apparatus 10 first retrieves and inputs data for learning, which is a time-series data set measured when the monitored object P is determined to be in the normal state, from the measured data storage unit 16 (step S1). Then, the monitoring apparatus 10 learns a correlation between elements from the input time-series data (step S2), and generates a correlation model representing the correlation between the elements (step S3). Then, the monitoring apparatus 10 stores the generated correlation model as a correlation model representing the normal state of the monitored object P into the model storage unit 17.
Next, with reference to the flowchart of
When detecting that the monitored object P is in the anomalous state (step S13, Yes), the monitoring apparatus 10 ranks and extracts elements related to the occurrence of the anomalous state among elements corresponding to measured values included in the time-series data set T measured from the monitored object P in the anomalous state, and further ranks and specifies the extracted elements based on property data (step S14). Then, the monitoring apparatus 10 output the ranked elements to a monitoring person or the like (step S15).
As described above, in this example embodiment, by first specifying the elements related to the occurrence of the anomalous state among the elements corresponding to the measured values included in the time-series data set when the monitored object is in the anomalous state, the elements to be controlled can be easily specified. Then, in this example embodiment, the elements are further ranked according to the degree of control that is the property of elements. Therefore, based on the result of ranking the elements according to ease of control, it is possible to perform control such as change of the setting of the element in a higher rank, and it is possible to proper handle the anomalous state.
Although elements when the monitored object P is in the anomalous state are specified by ranking or the like in the above description, elements when the monitored object P falls in any specific state may be specified, not necessarily limited to those when the monitored object P is in the anomalous state. Detection of the specific state of the monitored object P is not limited to using the abovementioned correlation model M, and may be performed by any method.
Next, a second example embodiment of the present invention will be described with reference to
First, in this example embodiment, a measured value which the measuring unit 11 measures from one sensor installed in the monitored object P is a value obtained by measuring a state arising from a plurality of generation sources (elements). For example, in a case where a measured value by a “sensor” is “frequency”, the measured value is a value obtained by measuring “frequency” from a “component of vibrations of a machine that is a generation source” and a “component of vibrations due to an earthquake that is a generation source”.
When the detecting unit 13 detects the anomalous state of the monitored object P from a time-series data set T measured from the monitored object P, the specifying unit 14 in this example embodiment ranks and specifies generation sources (elements) that generate component values causing measured values included by the time-series data set T. To be specific, as shown in
Subsequently, the specifying unit 14 ranks the generation sources α, β, and γ. At this time, in the same manner as described above, the specifying unit 14 may first rank the generation sources in order of the remarkableness of a difference in each of the generation sources in the anomaly period and the remaining period (in order of the magnitude of the difference), or may simply extract. With this, it is possible to specify a generation source related to the occurrence of the anomalous state, that is, a generation source that is the cause of the occurrence of the anomalous state or has a causal relation. Then, in consideration of this ranking, the specifying unit 14 further ranks the generation sources based on property data representing the properties of generation sources stored in the property data storage unit 18. The property data is, for example, as shown in
Then, as shown in
The monitoring apparatus 10 in this example embodiment is not necessarily limited to extracting a component value from a measured value and specifying a generation source from the component value by the abovementioned method, but may extract a component value and specify a generation source by any method. Moreover, as in the first example embodiment, the monitoring apparatus 10 in this example embodiment is not necessarily limited to ranking and specifying generation sources by the abovementioned method, and is not necessarily limited to ranking generation sources based on the degrees of control of the generation sources.
Next, an operation of the monitoring apparatus 10 in this example embodiment will be described majorly with reference to a flowchart shown in
The monitoring apparatus 10 acquires a specific measured value measured from the monitored object P (step S21), compares with the correlation model M (step S22), checks whether or not a correlation breakdown is caused based on a difference from the correlation model M, and moreover, calculates the degree of anomaly to check whether or not it is the anomalous state (step S23).
Upon detecting that the monitored object P is in the anomalous state (step S23, Yes), the monitoring apparatus 10 performs the analysis of components of measured values included by a time-series data set T measured from the monitored object P in the anomalous state (step S24). To be specific, the monitoring apparatus 10 extracts component values from the respective measured values and specifies the generation sources of the respective component values. Then, the monitoring apparatus 10 specifies generation sources related to the occurrence of the anomalous state among the specified generation sources, further ranks and specifies the generation sources based on property data such as a degree of control, and outputs to a monitoring person or the like (step S25).
As described above, in this example embodiment, among generation sources (elements) that cause measured values included by a time-series data set when a monitored object falls into an anomalous state, generation sources related to the occurrence of the anomalous state are first specified, so that generation sources to be controlled can be easily specified. Then, the generation sources are ranked according to the degrees of control that are the properties of the generation sources. With this, it is possible to take measures such as specifying and controlling a generation source according to ease of control, and it is possible to properly handle the anomalous state of the monitored object P.
Next, a third example embodiment of the present invention will be described with reference to
First, with reference to
a CPU (Central Processing Unit) 101 (an arithmetic logic unit),
a ROM (Read Only Memory) 102 (a storage unit),
a RAM (Random Access Memory) 103 (a storage unit),
programs 104 loaded to the RAM 103,
a storage unit 105 for storing the programs 104,
a drive unit 106 that reads from and writes into a storage medium 110 outside the information processing apparatus,
a communication interface 107 connecting to a communication network 111 outside the information processing apparatus,
an input/output interface 108 performing input/output of data, and
a bus 109 connecting the respective components.
Then, the monitoring apparatus 100 can structure and install a detecting unit 121 and a specifying unit 122 shown in
Then, the monitoring apparatus 100 executes a monitoring method shown in a flowchart of
As shown in
based on a plurality of measured values measured from a monitored object, detects that the monitored object is in a specific state set in advance (step S101); and
specifies, among elements causing the plurality of measured values, the elements related to detection of the specific state of the monitored object based on the measured values, and also specifies the elements based on properties of the elements of the measured values set in advance (step 102).
With the configurations as described above, the present invention enables easily specifying an element to be controlled by first specifying elements related to occurrence of an anomalous state among elements causing measured values when a monitored object falls into a specific state. Then, the element to be controlled is specified based on properties of elements. Therefore, it is possible to specify and operate an element, such as an element that is easy to control, corresponding to the properties of the elements, and it is possible to properly handle the monitored object.
The abovementioned program can be stored in various types of non-transitory computer-readable mediums and supplied to a computer. The non-transitory computer-readable mediums include various types of tangible storage mediums. The non-transitory computer-readable mediums include, for example, a magnetic recording medium (for example, a flexible disk, a magnetic tape, a hard disk drive), an optical magnetic recording medium (for example, a magnetooptical disk), a CD-ROM (Read Only Memory), a CD-R, a CD-R/W, and a semiconductor memory (for example, a mask ROM, a PROM (Programmable ROM), an EPROM (Erasable PROM), a flash ROM, a RAM (Random Access Memory)). Moreover, the program may be supplied to a computer by various types of transitory computer-readable mediums. The transitory computer-readable mediums include, for example, an electric signal, an optical signal, and an electromagnetic wave. The transitory computer-readable mediums can supply the program to a computer via a wired communication path such as an electric wire and an optical fiber or a wireless communication path.
Although the present invention has been described above with reference to the example embodiments and so on, the present invention is not limited to the above example embodiments. The configurations and details of the present invention can be changed in various manners that can be understood by one skilled in the art within the scope of the present invention.
The present invention is based upon and claims the benefit of priority from Japanese patent application No. 2019-051170, filed on Mar. 19, 2019, the disclosure of which is incorporated herein in its entirety by reference.
The whole or part of the example embodiments disclosed above can be described as the following supplementary notes. Below, the overview of the configurations of a monitoring method, a monitoring apparatus, and a program according to the present invention will be described. However, the present invention is not limited to the following configurations.
A monitoring method comprising: detecting that a monitored object is in a preset specific state based on a plurality of measured values measured from the monitored object;
specifying, among elements causing the measured values, the element related to detection of the specific state of the monitored object based on the measured values; and also
specifying the element based on preset properties of the elements of the measured values.
The monitoring method according to Supplementary Note 1, comprising, based on the properties of the elements, ranking the elements and specifying the element.
The monitoring method according to Supplementary Note 1 or 2, comprising specifying the element based on whether or not the elements can be controlled representing the properties of the elements.
The monitoring method according to any of Supplementary Notes 1 to 3, comprising, based on degrees of whether or not the elements can be controlled representing the properties of the elements, ranking the elements and specifying the element.
The monitoring method according to Supplementary Note 4, comprising, as degrees of controllability of the elements representing the properties of the elements are higher, more highly ranking the elements.
The monitoring method according to any of Supplementary Notes 1 to 5, comprising extracting a component value of each of the elements causing the measured values from the measured values, and specifying the element based on a result of extracting.
The monitoring method according to Supplementary Note 6, comprising specifying the element included in some of the measured values based on the result of extracting the component value of each of the elements causing the measured values from the measured values.
A monitoring apparatus comprising:
a detecting unit configured to detect that a monitored object is in a preset specific state based on a plurality of measured values measured from the monitored object; and
a specifying unit configured to specify, among elements causing the measured values, the element related to detection of the specific state of the monitored object based on the measured values, and also specify the element based on preset properties of the elements of the measured values.
The monitoring apparatus according to Supplementary Note 8, wherein the specifying unit is configured to extract a component value of each of the elements causing the measured values from the measured values, and specify the element based on a result of extracting.
A program comprising instructions for causing an information processing apparatus to realize:
a detecting unit configured to detect that a monitored object is in a preset specific state based on a plurality of measured values measured from the monitored object; and
a specifying unit configured to specify, among elements causing the measured values, the element related to detection of the specific state of the monitored object based on the measured values, and also specify the element based on preset properties of the elements of the measured values.
The program according to Supplementary Note 10, wherein the specifying unit is configured to extract a component value of each of the elements causing the measured values from the measured values, and specify the element based on a result of extracting.
Number | Date | Country | Kind |
---|---|---|---|
2019-051170 | Mar 2019 | JP | national |
Filing Document | Filing Date | Country | Kind |
---|---|---|---|
PCT/JP2020/007821 | 2/26/2020 | WO | 00 |