WO2017135210A1

WO2017135210A1 - Measurement system

Info

Publication number: WO2017135210A1
Application number: PCT/JP2017/003292
Authority: WO
Inventors: 長谷川　浩二; 貴志豊田
Original assignee: ナブテスコ株式会社
Priority date: 2016-02-03
Filing date: 2017-01-31
Publication date: 2017-08-10
Also published as: JPWO2017135210A1; JP6654206B2

Abstract

This measurement system acquires, via a network NW, a detection result of a measurement device 10 that detects the state of an object to be measured. The measurement device 10 is provided with an NFC 40 that is capable of near-field wireless communication. The measurement device 10 updates information of the measurement device on the basis of information transmitted by near-field wireless communication from a maintenance card 70 or mobile terminal 60 capable of communicating with the NFC 40.

Description

Measuring system

The present invention relates to a measurement system.

Conventionally, as a measurement system, there is a monitoring system for monitoring a process of a plant (for example, see Patent Document 1). In the monitoring system described in Patent Document 1, security is enhanced by limiting the security manager so that the security manager can be easily registered and changed.

JP 2009-251943 A

By the way, when monitoring via a network based on information detected by a sensor, it is necessary to periodically update confidential information included in the sensor. However, unauthorized acquisition by a third party via the Internet is assumed, and there is room for improvement. Furthermore, even in a private network such as a factory LAN (Local Area Network), there is a possibility that communication may be analyzed. Similarly, there is room for improvement because unauthorized acquisition by a third party is assumed.

The present invention has been made in view of such circumstances, and an object thereof is to provide a measurement system capable of updating stored information while ensuring high security without performing complicated processing. It is in.

Hereinafter, means for solving the above-described problems and the effects thereof will be described.
A measurement system that solves the above problem is a measurement system that acquires a detection result of a measurement device that detects a state of a measurement target via a network, wherein the measurement device is capable of short-range wireless communication. And updating the information of the measuring device based on information transmitted by the short-range wireless communication from an update information device capable of communicating with the short-range wireless communication unit.

According to the above configuration, since the measurement device includes the short-range wireless communication unit, the measurement device can update information on the measurement device via the short-range wireless communication unit. Therefore, since it is not necessary to update the information of the measurement device via the network, it is possible to update the information while ensuring high security without performing complicated processing.

For the measurement system, the measurement device and the update information device perform terminal authentication via short-range wireless communication, and the measurement device obtains information on the measurement device on the condition that the terminal authentication is established. It is preferable to update.

According to the above configuration, the update information device having the update information of the measurement device performs terminal authentication with the measurement device, and the information of the measurement device is updated on condition that the terminal authentication is established. For this reason, since no connection is made to information unless terminal authentication is established, a malicious connection can be rejected.

The measurement system includes a server that is connected to the measurement device via the network and stores the detection result, and the measurement device is connected to the Internet between the measurement device and the server when the terminal authentication is established. It is preferable to be configured to perform authentication and to be configured to update information of the measuring device when the Internet authentication is established.

According to the above configuration, in addition to terminal authentication between the measurement device and the update information device, information on the measurement device is updated when Internet authentication is established between the measurement device and the server. For this reason, since connection to information is not established unless terminal authentication and Internet authentication are established, malicious connection can be further rejected.

In the measurement system, it is preferable that the measurement device includes a gateway connected to the network, and the gateway includes the short-range wireless communication unit.

According to the above configuration, since the measuring device includes the gateway, the measuring device can be connected to the network via the gateway, so that the measuring device can have a simple configuration.

Regarding the measurement system, it is preferable that a calibration value for performing calibration is stored in the update information device, and the measurement device is adjusted based on the calibration value.

According to the above configuration, the measurement apparatus is calibrated by the calibration value stored in the update information device, so that calibration can be easily performed by a user who possesses the update information device having the calibration value. .

According to the present invention, information can be easily updated while maintaining security. Other aspects and advantages of the present invention will become apparent from the following description taken in conjunction with the drawings, which illustrate examples of the technical spirit of the present invention.

1 is a block diagram of a first embodiment of a measurement system. The schematic diagram for demonstrating the card | curd in the measuring system of the embodiment. The figure which shows an example of the portable terminal of the measurement system of the embodiment. The sequence chart which shows operation | movement of the measurement system of the embodiment. The sequence chart which shows operation | movement of the measurement system of the embodiment. The figure which shows schematic structure of 2nd Embodiment of a measurement system. The sequence chart which shows operation | movement of the measurement system of the embodiment.

Hereinafter, a first embodiment of the measurement system will be described with reference to FIGS.
As shown in FIG. 1, the measurement system includes a measurement device 10 that measures the state of a measurement target, a public communication network such as a mobile phone network and a public wireless LAN, an in-factory LAN, an inter-factory WAN (Wide Area Network), and the like. A database server 50 connected to the measuring apparatus 10 by connecting to a network NW such as a private communication network is provided. The database server 50 includes a database 51. A plurality of measuring devices 10 are connected to the database server 50 via a network NW.

The measurement apparatus 10 includes a sensor 11 as a detection unit that detects a state of a measurement target, a control unit 12 that controls the sensor 11, and a gateway 30 that is connected to the control unit 12 and the network NW. The sensor 11 outputs a signal obtained by detecting the state of the measurement target to the control unit 12. The gateway 30 connects networks having different protocols. For example, it connects to the network NW using a wireless communication standard that connects to a cellular phone network as a public communication network. The gateway 30 is provided so as to be physically detachable from the control unit 12. However, the gateway 30 may be separated and connected by a communication line.

The control unit 12 includes a measurement unit 21 that measures the state of the measurement target, and a determination unit 22 that determines based on the measurement result. The measurement unit 21 converts the signal input from the sensor 11 into a measurement value. The determination unit 22 determines the measurement value and outputs measurement information including the determined determination result. The control unit 12 includes a memory 25 as a storage unit. The control unit 12 can perform control by performing arithmetic processing based on programs and parameters stored in the memory 25. The measurement unit 21 performs measurement using a measurement program for measuring the state of the measurement target stored in the memory 25. The determination unit 22 performs determination based on a determination algorithm as a program and a determination criterion (for example, a threshold value) as a parameter. The memory 25 stores a determination algorithm and a determination criterion. In addition, the measurement unit 21 stores a measurement value and a determination result in the memory 25 as measurement information.

The measuring device 10 can update information such as passwords and information such as programs and parameters (for example, judgment criteria) so that the measuring device 10 can be used according to the measurement target. In other words, the control unit 12 acquires the update information by the authentication unit 23 that performs authentication at the time of updating the information, and acquires information such as programs and parameters held in the memory 25 of the measurement apparatus 10 based on the acquired update information. And a rewriting unit 24 for rewriting. The authentication unit 23 obtains authentication by connecting to the database server 50 via the network NW (Internet authentication). Internet authentication is performed to authenticate that the measuring device 10 is a legitimate device on the network NW and may update information. A server dedicated to authentication provided separately from the database server 50 is used. It may be used. The authentication unit 23 performs authentication using a password when providing information to the database server 50. The rewriting unit 24 acquires information from the gateway 30 via the network NW on condition that authentication is established. Then, the rewrite unit 24 updates the information included in the memory 25 with the acquired update information. Note that the update information may be a part of a program or a part of a parameter (for example, a determination criterion).

The gateway 30 includes an NFC 40 as a short-range wireless communication unit capable of performing short-range wireless communication (for example, NFC: Near Field Communication). The NFC 40 can communicate with a device capable of near field communication by near field communication. In addition, as short-range radio, in addition to NFC having a communication distance of about 10 cm, DSRC (Dedicated Short Range Communications), specific low power radio, weak radio, and the like can be used. The NFC 40 performs authentication (terminal authentication) as to whether or not to allow short-range wireless communication based on unique information (ID, password, etc.) held by the communication target. Send and receive. The gateway 30 performs Internet authentication with the database server 50 via the network NW, and confirms that the measuring device 10 can update information. Then, when the Internet authentication is established, the gateway 30 requests update information from the communication target and acquires the update information from the communication target.

The measurement system includes a portable terminal 60 and a maintenance card 70 as update information devices capable of short-range wireless communication and having update information of the measurement device 10. The mobile terminal 60 is, for example, a smartphone, a tablet terminal, a mobile phone, a personal computer or the like having a short-range wireless communication function. The maintenance card 70 is a card having a short-range wireless communication function.

The mobile terminal 60 performs short-range wireless communication with the NFC 40 and, when terminal authentication is established, performs Internet authentication to confirm whether the user has the authority to update information of the measuring device 10. Internet authentication is performed by biometric authentication or password input, for example. And the portable terminal 60 transmits the information (biometric information and password) input for Internet authentication to the gateway 30 via NFC40 as an Internet authentication input signal. Further, when there is a request for update information from the gateway 30 via the NFC 40, the mobile terminal 60 transmits the update information to the gateway 30 via the NFC 40. The mobile terminal 60 stores update information in advance.

The maintenance card 70 performs terminal authentication with the NFC 40, and when terminal authentication is established, the measurement device 10 can execute a specific process stored for each card. Note that the maintenance card 70 as an update information device includes a card having update information.

The database server 50 stores the measurement results acquired from the measurement apparatus 10 via the network NW in the database 51. The database server 50 provides the accumulated measurement results via the network NW in response to a request from the user. Further, the database server 50 performs Internet authentication with the gateway 30 via the network NW. The database server 50 and the measurement apparatus 10 authenticate with a password, for example, and acquire information such as measurement results on the condition that the authentication is established. In addition, the database server 50 authenticates the mobile terminal 60 with the same or different password via the network NW, and the measuring apparatus 10 acquires update information on the condition that the authentication is established.

As shown in FIG. 2, the maintenance card 70 is distributed to the user by mail if the user is located far from the issuer of the maintenance card 70, and the user is located close to the issuer of the maintenance card 70. Distributed directly to users.

There are a plurality of maintenance cards 70 for each process to be executed by the measuring apparatus 10. For example, there is a password update card 71 as a maintenance card 70 for executing an update process for updating a password or the like, which is information included in the measuring device 10. When the password update card 71 is held over the gateway 30, the password of the measuring device 10 can be updated. Furthermore, when the measurement apparatus 10 is configured to transmit the measurement result or the like together with the password instead of the password, the encryption key for encryption can be updated.

In addition, there is a sensor calibration card 72 as a maintenance card 70 for calibrating the output result of the sensor 11. When the sensor calibration card 72 is held over the gateway 30, the output result output from the sensor 11 of the measuring device 10 can be calibrated so as to correspond to the measurement target. That is, the measuring apparatus 10 can be calibrated with the calibration value stored in the sensor calibration card 72.

Further, there is a self-diagnosis card 73 as a maintenance card 70 for causing the measurement device 10 to execute a self-diagnosis for confirming whether or not the measurement device 10 itself is normal. When the self-diagnosis card 73 is held over the gateway 30, a self-diagnosis program for diagnosing whether or not the measurement device 10 has an abnormality is executed by the measurement device 10. Are displayed on the display unit (not shown), or transmitted to the effect that there is an abnormality in the database server 50 or the like.

In addition, there is a reset card 74 as a maintenance card 70 for setting the measuring device 10 to an initial state (a state of a program or parameter set at the time of shipment or a state of a program or parameter set at the time of installation). . When the reset card 74 is held over the gateway 30, the setting of the measuring device 10 can be restored to the initial state.

As shown in FIG. 3, the portable terminal 60 includes a display unit 61. When calibrating the color of the measurement result output from the sensor 11 of the measurement device 10 in the portable terminal 60, the RGB color matrix is displayed on the display unit 61, and the user selects a color corresponding to the measurement target. Thus, the color of the measurement result can be calibrated. In addition, since the color corresponding to the measurement target is displayed in advance in the color matrix, the user can set the color after confirming the color.

Next, the operation of the measurement system configured as described above will be described with reference to FIGS. 4 and 5 together.
First, the update of information by the portable terminal 60 will be described.

As shown in FIG. 4, when the portable terminal 60 is brought close to the gateway 30 (step S10), the portable terminal 60 and the gateway 30 perform NFC communication (steps S11 and S12). That is, the mobile terminal 60 performs terminal authentication by short-range wireless communication, and confirms whether or not the mobile terminal 60 is an authorized mobile terminal that can communicate with the gateway 30.

Then, when terminal authentication is established (step S13), the portable terminal 60 displays Internet authentication (step S14). That is, the portable terminal 60 displays a display prompting the user for authentication for Internet authentication on the display unit. For example, the portable terminal 60 displays a shooting range so that the camera of the portable terminal 60 can shoot a user's palm or eyeball in the case of biometric authentication, or displays a password input screen in the case of a password. And the portable terminal 60 will transmit an internet authentication input signal to the gateway 30 by near field communication, if there is an internet authentication input by the user (step S15).

When the gateway 30 receives the Internet authentication input signal from the portable terminal 60, the gateway 30 performs Internet authentication (step S16). That is, the authentication unit 23 of the control unit 12 performs Internet authentication with the database server 50 via the gateway 30 and the network NW. Then, if the authentication unit 23 of the control unit 12 determines that the Internet authentication has been established if the information input via the gateway 30 is correct (step S17), the update information (for example, a new determination standard or Internet authentication Request for a new password) is transmitted to the portable terminal 60 by short-range wireless communication.

Subsequently, when receiving the update information request from the gateway 30, the portable terminal 60 transmits the update information to the gateway 30 (step S18). That is, the portable terminal 60 reads the stored update information and transmits this update information to the gateway 30 by short-range wireless communication.

Subsequently, when the gateway 30 receives the update information from the mobile terminal 60, the gateway 30 transmits the update information to the control unit 12 (step S19). That is, the gateway 30 transmits update information provided from the mobile terminal 60 by short-range wireless communication to the control unit 12.

And the control part 12 will update the information preserve | saved at the measuring device 10 based on update information, if update information is received from the gateway 30 (step S20). That is, the rewriting unit 24 of the control unit 12 rewrites information stored in the memory 25 (for example, a determination criterion, a password for Internet authentication, etc.) with information acquired from the portable terminal 60 via the gateway 30.

Next, update of information by the maintenance card 70 will be described.
As shown in FIG. 5, when the maintenance card 70 is brought close to the gateway 30 (step S10), the maintenance card 70 and the gateway 30 perform NFC communication (steps S11 and S12). That is, the maintenance card 70 performs authentication by short-range wireless communication and confirms whether or not it is a regular card that can communicate with the gateway 30 (terminal authentication).

Then, when the terminal authentication is established (Step S13), the maintenance card 70 transmits the card information to the gateway 30 (Step S30). That is, card information that is information stored in the maintenance card 70 is read, and this card information is transmitted to the gateway 30 by short-range wireless communication. For example, if the maintenance card 70 is the password update card 71, a password update request and a new password are transmitted from the password update card 71 to the gateway 30 by short-range wireless communication as card information. For example, if the maintenance card 70 is the sensor calibration card 72, a calibration request for the sensor 11 is transmitted from the sensor calibration card 72 as card information to the gateway 30 by short-range wireless communication.

Subsequently, when receiving the card information from the maintenance card 70 by the short-range wireless communication, the gateway 30 requests the control unit 12 to perform processing based on the card information (step S31). That is, the gateway 30 transmits the process included in the card information acquired from the maintenance card 70 to the control unit 12. For example, if the maintenance card 70 is the password update card 71, the gateway 30 transmits an update request for a password and a new password to the control unit 12. For example, if the maintenance card 70 is the sensor calibration card 72, the gateway 30 outputs a calibration request for the sensor 11 to the control unit 12.

Subsequently, when a processing request is transmitted from the gateway 30, the control unit 12 executes the transmitted processing (step S32). For example, if the maintenance card 70 is the password update card 71, the rewrite unit 24 of the control unit 12 rewrites the stored password or the like with a new password or the like in accordance with the update request for the password or the like. For example, if the maintenance card 70 is the sensor calibration card 72, the rewrite unit 24 of the control unit 12 rewrites the color setting of the measurement result of the sensor 11 set according to the calibration request of the sensor 11.

Thus, the information can be updated by acquiring information from the portable terminal 60 or the maintenance card 70 by the NFC 40 that is a short-range wireless communication unit provided in the measuring device 10. Therefore, since the information of the measuring device 10 is not updated via the network NW, the communication is not intercepted and the communication content is not falsified. That is, information can be updated while ensuring high security without performing complicated processing.

As described above, according to this embodiment, the following effects can be obtained.
(1) Since the measuring apparatus 10 includes the NFC 40 that performs short-range wireless communication, the measuring apparatus 10 can update information of the measuring apparatus 10 via the NFC 40. Therefore, since it is not necessary to update the information of the measuring device 10 via the network NW, high security (communicating may be intercepted by a third party or communication content may be altered without complicated processing). Information) can be updated.

(2) The mobile terminal 60 having the update information of the measurement device 10 performs terminal authentication with the measurement device 10, and the information of the measurement device 10 is updated on condition that the terminal authentication is established. For this reason, since no connection is made to information unless terminal authentication is established, a malicious connection can be rejected.

(3) In addition to terminal authentication between the measuring device 10 and the portable terminal 60, information on the measuring device 10 is updated when Internet authentication between the measuring device 10 and the database server 50 is established. For this reason, since connection to information is not established unless terminal authentication and Internet authentication are established, malicious connection can be further rejected.

(4) Since the measurement apparatus 10 includes the gateway 30, the measurement apparatus 10 can be connected to the network NW via the gateway 30, so that the measurement apparatus 10 can have a simple configuration.

(5) Since the measurement apparatus 10 is calibrated by the calibration value stored in the portable terminal 60 or the maintenance card 70, calibration is performed if the user has the portable terminal 60 or the maintenance card 70 having the calibration value. It can be done easily.

(Second Embodiment)
Hereinafter, a second embodiment of the measurement system will be described with reference to FIGS. 6 and 7. The measurement system of this embodiment is different from the first embodiment in that the NFC 40 is directly connected to the control unit 12 (integrated with the control unit). Hereinafter, a description will be given focusing on differences from the first embodiment.

As shown in FIG. 6, in addition to the sensor 11 and the control unit 12, the measuring device 10 includes a communication unit 13 connected to the network NW and an NFC 40 that performs short-range wireless communication. The communication unit 13 and the NFC 40 are connected to the control unit 12, respectively.

The measuring device 10 is connected via the network NW via the communication unit 13 when connecting to the database server 50. In addition, the measuring device 10 is connected via the NFC 40 when communicating with the maintenance card 70. That is, a route for connecting the control unit 12 to the maintenance card 70 and the portable terminal 60 in order to update the information of the measuring device 10 and a route for connecting the control unit 12 to the database server 50 are separated.

Next, update of information by the maintenance card 70 will be described.
As shown in FIG. 7, when the maintenance card 70 is brought close to the measuring device 10 (step S10), the maintenance card 70 and the NFC 40 perform NFC communication (steps S11 and S12). Then, when the terminal authentication is established (Step S13), the maintenance card 70 transmits the card information to the NFC 40 (Step S30).

Subsequently, when receiving the card information from the maintenance card 70 by short-range wireless communication, the NFC 40 requests the control unit 12 to perform processing based on the card information (step S31). Subsequently, when a processing request is input from the NFC 40, the control unit 12 executes the input processing (step S32).

As described above, according to this embodiment, in addition to the effects (1) to (3) and (5) of the first embodiment, the following effects can be obtained.
(6) The NFC 40 is directly connected to the control unit 12 and the communication unit 13 connected to the network NW is separately connected to the control unit 12. For this reason, it is possible to simultaneously perform communication for updating information and communication for connecting to the database server 50 via the network NW.

In addition, each said embodiment can also be implemented with the following forms which changed this suitably.
In each of the above embodiments, the determination result of the measurement value measured by the measurement apparatus 10 is output to the database server 50. However, the measurement value may be output to the database server 50.

In the first embodiment, the measurement system includes both the portable terminal 60 and the maintenance card 70 as the update information device. However, only one of the portable terminal 60 and the maintenance card 70 is measured as the update information device. A system may be provided.

In the first embodiment, the color of the measurement result of the measurement apparatus 10 is calibrated by the calibration value stored in the portable terminal 60 or the maintenance card 70 that is an update information device. However, the calibration value may be directly performed on the measurement device 10 without storing the calibration value in the portable terminal 60 or the maintenance card 70 that is the update information device.

In the first embodiment, in addition to terminal authentication between the measuring device 10 and the portable terminal 60, information on the measuring device 10 is updated when Internet authentication between the measuring device 10 and the database server 50 is established. However, if security can be ensured only by terminal authentication, Internet authentication may be omitted. If security can be ensured only by Internet authentication, terminal authentication may be omitted.

In the above embodiments, the mobile terminal 60 or the maintenance card 70 having the update information of the measurement device 10 performs terminal authentication with the measurement device 10 and updates the information of the measurement device 10 on condition that the terminal authentication is established. However, if security can be ensured by using the mobile terminal 60 or the maintenance card 70, terminal authentication may be omitted.

In the above embodiments, the measurement results of the measurement device 10 are accumulated in the database server 50. However, the database server 50 may be omitted and the measurement results may be directly acquired from the measurement device 10.

The update information devices (60, 70 to 74) are all physical entities that store or hold readable information. The portable terminal 60 is an example of an electric-powered portable update information device having a power source such as a battery. The cards 70 to 74 are an example of a nonelectrically powered portable update information device that does not have a power source such as a battery.

The measuring device 10 can include one or a plurality of processors that function as the measurement unit 21, the determination unit 22, the authentication unit 23, and the rewrite unit 24. For example, the measurement unit 21, the determination unit 22, the authentication unit 23, and the rewrite unit 24 may be a measurement processor, a determination processor, an authentication processor, and a rewrite processor, respectively. The measurement apparatus 10 may include a non-transitory computer-readable storage medium that stores instructions or computer programs executed by the one or more processors instead of or in addition to the memory 25. The storage medium is not limited, and may be a nonvolatile memory, a magnetic disk device including a magnetic disk, an optical disk device including an optical disk, or the like.

The NFC 40 as the short-range wireless communication unit may be a short-range wireless reception antenna.
The present disclosure encompasses the following implementation examples. For ease of understanding rather than limitation, the reference numerals of the illustrated embodiments are provided.

One or more implementation examples of the present invention provide a measurement device (10) for measuring a state of a measurement target. The measurement device (10) includes a sensor (11) configured to measure a state of a measurement target, and a communication circuit (30, 13) connected to the database server (50) via the network (NW). The short-range wireless receiving antenna (40), the sensor (11), the communication circuit (30, 13), and the control unit (directly connected to the short-range wireless receiving antenna (40)) 12). The control unit (12) is at least one for executing restriction of access to the measurement device (10) from outside the measurement device (10) and signal processing for the sensor signal of the sensor (11). A memory (25) for storing a plurality of data sets including a plurality of computer programs is included, and the control unit (12) measures at least one of the plurality of data sets in the memory (25) as the measurement. The apparatus is configured to rewrite information received from the outside of the device (10) via the short-range wireless receiving antenna (40).

It will be apparent to those skilled in the art that the present invention may be embodied in other specific forms without departing from the technical concept thereof. For example, some of the parts described in the embodiment (or one or more aspects thereof) may be omitted, or some parts may be combined. The scope of the invention should be determined with reference to the appended claims, along with the full scope of equivalents to which such claims are entitled.

DESCRIPTION OF SYMBOLS 10 ... Measuring device, 11 ... Sensor, 12 ... Control part, 13 ... Communication part, 21 ... Measurement part, 22 ... Determination part, 23 ... Authentication part, 24 ... Rewriting part, 25 ... Memory, 30 ... Gateway, 40 ... NFC 50 ... database server 51 ... database 60 ... portable terminal 61 ... display unit 70 ... maintenance card 71 71 encryption key update card 72 ... sensor calibration card 73 ... self-diagnosis card 74 ... reset card NW ... Network.

Claims

In the measurement system that acquires the detection result of the measurement device that detects the state of the measurement target via the network,
The measurement device includes a short-range wireless communication unit capable of short-range wireless communication, and based on information transmitted by the short-range wireless communication from an update information device capable of communicating with the short-range wireless communication unit A measurement system that updates device information.
The measurement device and the update information device perform terminal authentication via short-range wireless communication,
The measurement system according to claim 1, wherein the measurement device updates information of the measurement device on condition that the terminal authentication is established.
A server connected to the measuring device via the network and storing the detection results;
The measurement device is configured to perform Internet authentication between the measurement device and the server when the terminal authentication is established, and further updates information of the measurement device when the Internet authentication is established. The measurement system according to claim 2.
The measuring device includes a gateway connected to the network,
The measurement system according to any one of claims 1 to 3, wherein the short-range wireless communication unit is provided in the gateway.
The update information device stores a calibration value for performing calibration,
The measurement system according to any one of claims 2 to 4, wherein the measurement device is calibrated by the calibration value.