KR101670862B1 - authentication processing method for machine connected service and authentication platform - Google Patents

Abstract

The present invention relates to an authentication processing method for a machine connected service and an authentication platform thereof. Specifically, the present invention relates to an automatic control system to automatically collect and manage information for a plurality of devices. According to an aspect of the present invention, the authentication processing method of a system comprises: a plurality of devices; an information exchanging unit to receive first information from the devices; a producing information authentication unit to perform authentication between the devices and the information exchanging unit; and an information managing unit to receive the first information from the information exchanging unit, and to transmit second information to indicate the performing operation of a first device of the devices by using the first information to the first device. The authentication processing method comprises: step 1-1 of registering the information exchanging unit and the information managing unit in the producing information authentication unit; step 1-2 of generating a preset event in the first device; step 1-3 of enabling the first device to transmit the first information notifying an event occurrence fact to the information exchanging unit to the information exchanging unit; step 1-4 of enabling the information exchanging unit to request a record authentication key to the producing information authentication unit; step 1-5 of enabling the producing information authentication unit to generate a record authentication key to the information exchanging unit to the information exchanging unit when the producing information authentication unit is registered in the information exchanging unit; and step 1-6 of enabling the information exchanging unit to transmit the first information and the record authentication key to the information managing unit.

Description

[0001] The present invention relates to an authentication processing method and an authentication platform for a machine connected service,

The present invention relates to an authentication processing method used in an automatic control system. Specifically, the present invention relates to an automatic control system for automatically collecting and managing information on a plurality of devices, and also proposes an authentication platform for secure management.

A terminal applied to the existing production management system is a PPC (Panel Personal Computer) having a general personal computer (PC) function as it is, and various devices such as a microprocessor, a hard disk, a CD driver and a battery are built in.

In addition, the existing terminal for production management system stores an application program for processing production information, system information (IP information, terminal name, worker information, etc.) and production information on a hard disk or the like, System terminal.

These applications were manually installed and upgraded by users, such as administrators and workers.

However, such existing production management terminal can directly store production information and can easily input or output information through input / output devices such as CD, USB memory, notebook-book, etc., There is a problem in that the risk is high.

In addition, since the existing production management system terminal operates on the basis of PPC, there is a possibility that information can be leaked to the unauthorized user because there is no way to block the attempt to access the data of the unauthorized user except the function on the operating system.

Also, since the existing terminal for production management system can be connected to a public communication network such as the Internet, corporate information can be leaked by a hacker, and information can be damaged, corrected, or deleted by a virus.

In addition, the existing production management system terminal has inconvenience that production information and system information are manually inputted, corrected or backed up by a user at the time of installation or replacement of a terminal.

In addition, the performance of the existing system can be improved by classifying and using various information collected from a plurality of devices according to a specific criterion. However, existing systems have a problem in that it is impossible to collect and process a plurality of pieces of information at a time .

Therefore, a solution to this problem is required.

Korean Intellectual Property Office Registration No. 10-0984233

The present invention relates to an automatic control system for automatically collecting and managing information on a plurality of devices, and also proposes an authentication platform for secure management.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory and are not restrictive of the invention, unless further departing from the spirit and scope of the invention as defined by the appended claims. It will be possible.

According to an aspect of the present invention, An information exchange unit for receiving first information from the plurality of devices; A production information authentication unit for performing authentication between the plurality of devices and the information exchange unit; And an information management unit that receives the first information from the information exchange unit and transmits second information to the first device, the second information being indicative of a performing operation of the first device, which is at least a part of the plurality of devices, using the first information; A first step of the information exchange unit and the information management unit being registered in the production information authentication unit; A first step of generating a preset event in the first device; A first step of the first device transmitting the first information to the information exchange unit to inform the fact of the occurrence of the event; A step 1-4 of the information exchange requesting the recording authentication key to the production information authentication unit; (1-5) in which the production information authentication unit issues the recording authentication key to the information exchange unit only when the information exchange unit is registered in the production information authentication unit; And (1-6) in which the information exchange unit transmits the first information and the recording authentication key to the information management unit.

The method may further include: (1-7) requesting the information management unit to confirm the recording authentication key received by the production information authentication unit after the first to sixth steps; (1-8) in which the production information authentication unit transmits confirmation of the recording authentication key to the information management unit only when the information management unit is registered in the production information authentication unit; And (1-9) in which the information management unit generates the second information using the first information.

After the first to ninth steps, the information management unit requests a control authentication key from the production information authentication unit. A second step (2-2) in which the production information authentication unit issues a control authentication key to the information management unit only when the information management unit is registered in the production information authentication unit; And a third step of the information management unit transmitting the second information and the control authentication key to the information exchange unit.

In addition, after the step 2 - 3, the information exchange unit requests the confirmation of the control authentication key received by the production information authentication unit in step 2-4. (2-4) in which the production information authentication unit transmits confirmation of the control authentication key to the information exchange unit only when the information exchange unit is registered in the production information authentication unit; And (2-5) in which the information exchange unit transmits the second information to the first device.

In addition, the method may further include a step 2-6 of performing the performing operation according to the second information after the second device receives the second information after the step 2-5.

The apparatus, the information exchange unit, the production information authentication unit, and the information management unit communicate with each other using at least one of short-range communication and long-distance communication. The short-range communication includes Bluetooth, Radio Frequency Identification (RFID) (IrDA), Ultra Wide Band (UWB), ZigBee, and Wi-Fi (Wireless Fidelity) technologies. The long distance communication includes code division multiple access (CDMA), frequency division multiple access (FDMA) Time division multiple access (TDMA), orthogonal frequency division multiple access (OFDMA), and single carrier frequency division multiple access (SC-FDMA) techniques.

The information management unit may determine the abnormal state of the first device using the first information, and the second information may indicate an operation of the first device in the second- And an instruction to change the operating condition of the first device.

The present invention relates to an automatic control system for automatically collecting and managing information on a plurality of devices, and can also provide an authentication platform for secure management.

According to the system and the operating method of the present invention, since the application is downloaded on the server and the programs and information stored in the server are downloaded, the information can be quickly processed at the processing speed of the server and the application software and information are automatically installed And upgrades, and the centralized and consistent management of information and software has the advantage of easy management of information and software.

In addition, the production information is stored in the server without being stored in the terminal, the software is executed on the server and the login function to the server is provided, so that the access of the unauthorized user can be fundamentally blocked, So that the direct connection to the public communication network and the input / output device is blocked, thereby preventing leakage and destruction of information caused by illegal users or hackers.

In addition, according to the present invention, application software and information can be automatically installed and upgraded from a central location, so that installation and management of a terminal is easy, and when a failure occurs, the terminal can be quickly recovered.

The effects obtained by the present invention are not limited to the above-mentioned effects, and other effects not mentioned can be clearly understood by those skilled in the art from the following description will be.

FIG. 1 is a block diagram for explaining a device that can be applied to the present invention.
2 is a block diagram illustrating an automatic control system proposed by the present invention.
FIG. 3 shows a specific example of the automatic control system described with reference to FIG.
4 is a block diagram illustrating an automatic control system to which an authentication platform proposed by the present invention is applied.
FIG. 5 is a view for explaining a specific example of the authentication processing method of the automatic control system proposed in FIG.
FIG. 6 is a diagram for explaining another specific example of the authentication processing method of the automatic control system proposed in FIG.

The existing production management system terminal directly stores production information and can input or output information easily through input / output devices such as CD, USB memory, notebook-book, etc., and the risk of information leakage and information destruction by malicious user There was a high problem.

In addition, since the existing production management system terminal operates on the basis of PPC, there is a possibility that information can be leaked to the unauthorized user because there is no way to block the attempt to access the data of the unauthorized user except the function on the operating system.

Also, since the existing terminal for production management system can be connected to a public communication network such as the Internet, corporate information can be leaked by a hacker, and information can be damaged, corrected, or deleted by a virus.

In addition, the existing production management system terminal has inconvenience that production information and system information are manually inputted, corrected or backed up by a user at the time of installation or replacement of a terminal.

In addition, the performance of the existing system can be improved by classifying and using various information collected from a plurality of devices according to a specific criterion. However, existing systems have a problem in that it is impossible to collect and process a plurality of pieces of information at a time .

Accordingly, in order to solve such a problem, the present invention proposes an automatic control system for automatically collecting and managing information on a plurality of devices and an authentication platform for secure management.

Prior to a specific description of the automatic control system proposed by the present invention, a description will be made of a device that can be included in each configuration of the present system.

FIG. 1 is a block diagram for explaining a device that can be applied to the present invention.

The apparatus includes a wireless communication unit 110, an audio / video input unit 120, a user input unit 130, a sensing unit 140, an output unit 150, a memory 160, an interface unit 170, A control unit 180, a power supply unit 190, and the like.

However, the components shown in Fig. 1 are not essential, and a device having more or fewer components may be implemented.

Hereinafter, the components will be described in order.

The wireless communication unit 110 may include one or more modules that enable wireless communication between the device and the wireless communication system or between the device and the network in which the device is located.

For example, the wireless communication unit 110 may include a broadcast receiving module 111, a mobile communication module 112, a wireless Internet module 113, a short range communication module 114, and a location information module 115 .

The broadcast receiving module 111 receives broadcast signals and / or broadcast-related information from an external broadcast management server through a broadcast channel.

The broadcast channel may include a satellite channel and a terrestrial channel. The broadcast management server may be a server for generating and transmitting broadcast signals and / or broadcast related information, or a server for receiving broadcast signals and / or broadcast related information generated by the broadcast management server and transmitting the broadcast signals and / or broadcast related information to the device. The broadcast signal may include a TV broadcast signal, a radio broadcast signal, a data broadcast signal, and a broadcast signal in which a data broadcast signal is combined with a TV broadcast signal or a radio broadcast signal.

The broadcast-related information may refer to a broadcast channel, a broadcast program, or information related to a broadcast service provider. The broadcast-related information may also be provided through a mobile communication network. In this case, it may be received by the mobile communication module 112.

The broadcast-related information may exist in various forms. For example, an EPG (Electronic Program Guide) of DMB (Digital Multimedia Broadcasting) or an ESG (Electronic Service Guide) of Digital Video Broadcast-Handheld (DVB-H).

For example, the broadcast receiving module 111 may be a Digital Multimedia Broadcasting-Terrestrial (DMB-T), a Digital Multimedia Broadcasting-Satellite (DMB-S), a Media Forward Link Only (DVF-H) And a Digital Broadcasting System (ISDB-T) (Integrated Services Digital Broadcast-Terrestrial). Of course, the broadcast receiving module 111 may be adapted to other broadcasting systems as well as the digital broadcasting system described above.

The broadcast signal and / or broadcast related information received through the broadcast receiving module 111 may be stored in the memory 160.

The mobile communication module 112 transmits and receives a radio signal to at least one of a base station, an external device, and a server on a mobile communication network.

And various types of data according to transmission / reception of text / multimedia messages.

The wireless Internet module 113 refers to a module for wireless Internet access, and may be embedded in a device or externally. WLAN (Wi-Fi), Wibro (Wireless broadband), Wimax (World Interoperability for Microwave Access), HSDPA (High Speed Downlink Packet Access) and the like can be used as wireless Internet technologies.

The short-range communication module 114 refers to a module for short-range communication. (Bluetooth), Radio Frequency Identification (RFID), infrared data association (IrDA), Ultra Wideband (UWB), ZigBee, WiFi Can be used.

The position information module 115 is a module for obtaining the position of the device, and a representative example thereof is a Global Position System (GPS) module.

Referring to FIG. 1, an A / V (Audio / Video) input unit 120 is for inputting an audio signal or a video signal, and may include a camera 121 and a microphone 122. The camera 121 processes an image frame such as a still image or a moving image obtained by the image sensor in the photographing mode. The processed image frame can be displayed on the display unit 151. [

The image frame processed by the camera 121 may be stored in the memory 160 or transmitted to the outside through the wireless communication unit 110. [ Two or more cameras 121 may be provided depending on the use environment.

The microphone 122 receives an external sound signal by a microphone in a recording mode, a voice recognition mode, or the like, and processes it as electrical voice data. The processed voice data can be converted into a form that can be transmitted to the mobile communication base station through the mobile communication module 112 and output. Various noise reduction algorithms may be implemented in the microphone 122 to remove noise generated in receiving an external sound signal.

The user input unit 130 generates input data for a user to control operation of the apparatus. The user input unit 130 may include a key pad dome switch, a touch pad (static / static), a jog wheel, a jog switch, and the like.

The sensing unit 140 senses the current state of the device, such as the open / close state of the device, the position of the device, the presence or absence of the user, the orientation of the device, and the acceleration / deceleration of the device, and generates a sensing signal for controlling the operation of the device.

The sensing unit 140 may sense whether the power supply unit 190 is powered on, whether the interface unit 170 is connected to an external device, and the like.

Meanwhile, the sensing unit 140 may include a proximity sensor 141.

The output unit 150 is for generating an output relating to visual, auditory or tactile sense and includes a display unit 151, an acoustic output module 152, an alarm unit 153, a haptic module 154, 155, and the like.

The display unit 151 displays (outputs) information processed by the device.

The display unit 151 may be a liquid crystal display (LCD), a thin film transistor-liquid crystal display (TFT LCD), an organic light-emitting diode (OLED), a flexible display display, and a 3D display.

Some of these displays may be transparent or light transmissive so that they can be seen through. This can be referred to as a transparent display, and a typical example of the transparent display is TOLED (Transparent OLED) and the like. The rear structure of the display unit 151 may also be of a light transmission type. With this structure, the user can see an object located behind the device body through the area occupied by the display unit 151 of the device body.

There may be two or more display units 151 depending on the implementation of the device. For example, a plurality of display units may be spaced apart from one another, or may be disposed integrally with each other, or may be disposed on different surfaces, respectively.

(Hereinafter, referred to as a 'touch screen') in which a display unit 151 and a sensor for sensing a touch operation (hereinafter, referred to as 'touch sensor') form a mutual layer structure, It can also be used as an input device. The touch sensor may have the form of, for example, a touch film, a touch sheet, a touch pad, or the like.

The touch sensor may be configured to convert a change in a pressure applied to a specific portion of the display unit 151 or a capacitance generated in a specific portion of the display unit 151 into an electrical input signal. The touch sensor can be configured to detect not only the position and area to be touched but also the pressure at the time of touch.

If there is a touch input to the touch sensor, the corresponding signal (s) is sent to the touch controller. The touch controller processes the signal (s) and transmits the corresponding data to the controller 180. Thus, the control unit 180 can know which area of the display unit 151 is touched or the like.

The proximity sensor 141 may be disposed within an interior region of the device to be wrapped by the touch screen or near the touch screen. The proximity sensor refers to a sensor that detects the presence or absence of an object approaching a predetermined detection surface or a nearby object without mechanical contact using the force of an electromagnetic field or infrared rays. The proximity sensor has a longer life span than the contact sensor and its utilization is also high.

Examples of the proximity sensor include a transmission type photoelectric sensor, a direct reflection type photoelectric sensor, a mirror reflection type photoelectric sensor, a high frequency oscillation type proximity sensor, a capacitive proximity sensor, a magnetic proximity sensor, and an infrared proximity sensor. And to detect the proximity of the pointer by the change of the electric field along the proximity of the pointer when the touch screen is electrostatic. In this case, the touch screen (touch sensor) may be classified as a proximity sensor.

Hereinafter, for convenience of explanation, the act of recognizing that the pointer is positioned on the touch screen while the pointer is not in contact with the touch screen is referred to as "proximity touch & The act of actually touching the pointer on the screen is called "contact touch. &Quot; The position where the pointer is proximately touched on the touch screen means a position where the pointer is vertically corresponding to the touch screen when the pointer is touched.

The proximity sensor detects a proximity touch and a proximity touch pattern (e.g., a proximity touch distance, a proximity touch direction, a proximity touch speed, a proximity touch time, a proximity touch position, a proximity touch movement state, and the like). Information corresponding to the detected proximity touch operation and the proximity touch pattern may be output on the touch screen.

The audio output module 152 may output audio data received from the wireless communication unit 110 or stored in the memory 160 in a recording mode, a voice recognition mode, a broadcast receiving mode, or the like. The sound output module 152 also outputs an acoustic signal related to a function performed in the device. The audio output module 152 may include a receiver, a speaker, a buzzer, and the like.

The alarm unit 153 outputs a signal for notifying the occurrence of an event of the device.

The alarm unit 153 may output a signal for notifying the occurrence of an event in a form other than the video signal or the audio signal, for example, vibration.

The video signal or the audio signal may be output through the display unit 151 or the audio output module 152 so that they may be classified as a part of the alarm unit 153.

The haptic module 154 generates various tactile effects that the user can feel. A typical example of the haptic effect generated by the haptic module 154 is vibration. The intensity and pattern of the vibration generated by the hit module 154 can be controlled.

For example, different vibrations may be synthesized and output or sequentially output.

In addition to the vibration, the haptic module 154 may include a pin arrangement vertically moving with respect to the contact skin surface, a spraying force or a suction force of the air through the injection port or the suction port, a touch on the skin surface, contact with an electrode, And various tactile effects such as an effect of reproducing a cold sensation using an endothermic or exothermic element can be generated.

The haptic module 154 can be implemented not only to transmit the tactile effect through the direct contact but also to allow the user to feel the tactile effect through the muscular sensation of the finger or arm. At least two haptic modules 154 may be provided according to the configuration of the portable device.

The projector module 155 is a component for performing an image project function by using the device and has the same or at least a part of the image displayed on the display part 151 in accordance with a control signal of the control part 180 Other images can be displayed on an external screen or wall.

Specifically, the projector module 155 includes a light source (not shown) that generates light (for example, laser light) for outputting an image to the outside, a light source And a lens (not shown) for enlarging and outputting the image at a predetermined focal distance to the outside. Further, the projector module 155 may include a device (not shown) capable of mechanically moving the lens or the entire module to adjust the image projection direction.

The projector module 155 can be divided into a CRT (Cathode Ray Tube) module, an LCD (Liquid Crystal Display) module and a DLP (Digital Light Processing) module according to the type of the display means. In particular, the DLP module may be advantageous for miniaturization of the projector module 151 by enlarging and projecting an image generated by reflecting light generated from a light source on a DMD (Digital Micromirror Device) chip.

Preferably, the projector module 155 may be provided longitudinally on the side, front, or back of the device. Of course, it is a matter of course that the projector module 155 may be provided at any position of the apparatus, if necessary.

The memory unit 160 may store programs for processing and control of the controller 180 and may store functions for temporarily storing input / output data (e.g., messages, audio, still images, . ≪ / RTI > The frequency of use of each of the data may be stored in the memory unit 160 as well. In addition, the memory unit 160 may store data on vibration and sound of various patterns output when the touch is input on the touch screen.

The memory 160 may be a flash memory type, a hard disk type, a multimedia card micro type, a card type memory (for example, SD or XD memory), a RAM (Random Access Memory), SRAM (Static Random Access Memory), ROM (Read Only Memory), EEPROM (Electrically Erasable Programmable Read-Only Memory), PROM A disk, and / or an optical disk. The device may operate in association with a web storage that performs the storage function of the memory 160 on the Internet.

The interface unit 170 serves as a path for communication with all external devices connected to the device. The interface unit 170 receives data from an external device, supplies power to each component in the device, or allows data in the device to be transmitted to an external device. For example, a wired / wireless headset port, an external charger port, a wired / wireless data port, a memory card port, a port for connecting a device having an identification module, an audio I / O port, A video input / output (I / O) port, an earphone port, and the like may be included in the interface unit 170.

The identification module is a chip for storing various information for authenticating the use right of the device and includes a user identification module (UIM), a subscriber identity module (SIM), a universal user identity module , USIM), and the like. Devices with identification modules (hereinafter referred to as "identification devices") can be manufactured in a smart card format. Thus, the identification device can be connected to the device via the port.

The interface unit may be a path through which power from the cradle is supplied to the mobile device when the mobile device is connected to an external cradle or a channel through which various command signals input from the cradle by the user are transmitted to the mobile device . The various command signals or the power source input from the cradle may be operated as a signal for recognizing that the mobile device is correctly mounted on the cradle.

The controller 180 typically controls the overall operation of the device.

The control unit 180 may include a multimedia module 181 for multimedia playback. The multimedia module 181 may be implemented in the control unit 180 or may be implemented separately from the control unit 180. [

The controller 180 may perform a pattern recognition process for recognizing handwriting input or drawing input performed on the touch screen as characters and images, respectively.

The power supply unit 190 receives external power and internal power under the control of the controller 180 and supplies power necessary for operation of the respective components.

The various embodiments described herein may be embodied in a recording medium readable by a computer or similar device using, for example, software, hardware, or a combination thereof.

According to a hardware implementation, the embodiments described herein may be implemented as application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays May be implemented using at least one of a processor, controllers, micro-controllers, microprocessors, and other electronic units for performing other functions. In some cases, The embodiments described may be implemented by the control unit 180 itself.

According to a software implementation, embodiments such as the procedures and functions described herein may be implemented with separate software modules. Each of the software modules may perform one or more of the functions and operations described herein. Software code can be implemented in a software application written in a suitable programming language. The software code is stored in the memory 160 and can be executed by the control unit 180. [

Hereinafter, the automatic control system proposed by the present invention will be described in detail based on the above-described configuration of Fig.

Each of the devices to be applied to the following automatic control system can be implemented through the configuration described with reference to FIG.

2 is a block diagram illustrating an automatic control system proposed by the present invention.

2, the automatic control system 200 includes a production facility 210, a data collection unit 220, an information exchange unit 230, a monitoring unit 240, and an information management unit 250 can do.

First, the production facility 210 of FIG. 2 includes target devices to be controlled by the automatic control system 200 according to the present invention.

Examples of equipment that can be included in the production facility 210 include a welding machine, an injection machine, a machine tool, and the like, but the present invention is not limited thereto.

Next, the data collecting unit 220 provides a function of collecting information from the production equipment 210.

The data collecting unit 220 may collect information from the production facility 210 using wired communication, short-range wireless communication, and long-distance wireless communication.

The local wireless communication used by the data collection unit 220 may be Bluetooth, Radio Frequency Identification (RFID), infrared data association (IrDA), ultra wideband (UWB), ZigBee, Wi-Fi . ≪ / RTI >

The remote wireless communication used by the data collection unit 220 may be a code division multiple access (CDMA), a frequency division multiple access (FDMA), a time division multiple access (TDMA), an orthogonal frequency division multiple access (OFDMA) (single carrier frequency division multiple access) techniques.

The information that the data collecting unit 220 can collect from the production facility 210 includes facility production quality information, facility production setting information, facility maintenance information, facility master information, facility basic operation information, facility production operation information And the like.

Here, the facility production quality information means quality measurement information (e.g., numerical value, image, etc.) measured at the facility, and includes individual quality information (quality item code, measurement time, measurement value, measurement result) (Failure code, bad time), quality abnormality information (action code, action time), quality authentication information (inspection and authentication information of the certification body), equipment abnormality (outbreak)

Also, the equipment production setting information is production knowledge information, and it means production condition information of the equipment at the time of production according to each product.

Examples of facility production setting information include production setting information (production setting code, production setting item code, set value, etc.).

In addition, facility maintenance information is information for preventing and forecasting problems in facilities and responding to unexpected situations, and preventive maintenance information (preventive maintenance codes, preventive maintenance deadlines) may be included.

In addition, the facility master information includes facility code (Unique Code - Mac Address information), manufacturing information (manufacturer, manufacture date, manufacturer facility code, etc.), specification information (facility basic specification information), facility manual (operation and maintenance manual) Spare part information (list, period, condition), facility class management information, and the like.

The facility basic operation information may include power information (on / off time), operation information (start time, end time), and the like, as information for monitoring the facility.

The equipment abnormal information may include equipment abnormal information (equipment abnormal code, abnormal time), equipment malfunction information (action code, action time), and the like.

In addition, the facility production operation information includes production item information (item code, production instruction code, individual identification code), individual production time (start time, completion time), individual operation time (operation code, Value), total time of production (uptime, inactivity time, failure time, repair time).

Meanwhile, the data collecting unit may include a wireless collecting unit 221 and a bi-direction collecting unit 222.

The wireless collector 221 can collect information from the production facility 210 through the above-described short-distance communication or long-distance communication.

For example, information can be collected through Wi-Fi and Bluetooth communication, data authentication, encryption and compression techniques can be applied, and real-time facility control can be enabled.

In addition, the bi-directional collecting unit 222 can collect information from the production facility 210 through wired communication.

For example, information can be collected after being directly attached to the production equipment unit 210 through the M2M bidirectional communication, data authentication, encryption, compression technology, and the like can be applied and real-time facility control can be performed.

That is, the data collecting unit may include at least one of a first method of directly connecting to a plurality of devices included in the production facility 210 to receive information, and a second method of receiving the first information by wireless communication with a plurality of devices Can be used.

In particular, the bi-directional collecting unit 222 of the data collecting unit 210 can be used only when a plurality of devices included in the production facility 210 do not collect information.

That is, in this case, the bi-directional collecting unit 222 may be attached to and connected to the plurality of devices in the form of a recording medium.

In addition, the bi-directional collecting unit 222 may control the plurality of attached and connected devices to transmit information corresponding to predetermined conditions to themselves.

In addition, the automatically received data may be stored and stored for a predetermined period (for example, one week).

The information exchange unit 230 receives the information collected from the data collection unit 220 and provides the information to the monitoring unit 240 and the information management unit 250.

Here, the information exchanging unit 230 may be configured to allow a source device and a source device, which are connected to other devices in the wireless communication system and want to communicate with other devices, to communicate with other devices It can be a cooperative device other than a source device that does not serve as a cooperative device and a cooperative device that serves as an intermediary to provide assistance.

For example, in the case of transmitting predetermined data to another device, the source device may transmit the data together with a cooperative device. Also, the source device may transmit the data through a cooperative device. The above-described example can be equally applied to a case where another apparatus transmits data to the information exchange unit 230, thereby achieving far superior system performance.

That is, the information exchange unit 230 serves as a device supporting a Multi Radio Access Technology (RAT) system.

The information exchange unit 230 may also use wired communication, short-range wireless communication, long-distance wireless communication, or the like.

The short range wireless communication used by the information exchange unit 230 may be Bluetooth, Radio Frequency Identification (RFID), infrared data association (IrDA), ultra wideband (UWB), ZigBee, Wi-Fi . ≪ / RTI >

The long distance wireless communication used by the information exchange unit 230 may be a code division multiple access (CDMA), a frequency division multiple access (FDMA), a time division multiple access (TDMA), an orthogonal frequency division multiple access (OFDMA) (single carrier frequency division multiple access) techniques.

In addition, the monitoring unit 240 provides a function of displaying information received from the information exchange unit 230.

The monitoring unit 240 may be a liquid crystal display (LCD), a thin film transistor-liquid crystal display (TFT LCD), an organic light-emitting diode (OLED) display, and a 3D display, for example.

The monitoring unit 240 may include a fixed monitoring unit 241 and a mobile monitoring unit 242.

Here, the fixed type monitoring unit 241 is a device that displays information in a fixed state, and it can be a CPS-SPC (Productivity Monitoring System) and a CPS-SQS (Quality Monitoring System) to enable fixed field monitoring.

Next, the mobile monitoring unit 242 is a device for displaying information in a movable state, and provides a mobile site monitoring function.

The mobile type monitoring unit 242 can also provide CPS-SPC (Productivity Monitoring System) and CPS-SQS (Quality Monitoring System) functions.

The information management unit 250 may perform an operation of transmitting analysis and feedback information to the production facility 210 based on the information collected from the information exchange unit 230.

As described above, the information collected by the information management unit 250 may include facility production quality information, facility production setting information, facility maintenance information, facility master information, facility basic operation information, facility production operation information, and the like.

The equipment production quality information refers to quality measurement information (e.g., numerical value, image, etc.) measured at the facility and includes individual quality information (quality item code, measurement time, measurement value, measurement result) , Quality error information (action code, action time), quality authentication information (inspection and authentication information of the certification body), equipment abnormality (outbreak) information, and the like. Also, the equipment production setting information is production knowledge information, and it means production condition information of the equipment at the time of production according to each product. Examples of facility production setting information include production setting information (production setting code, production setting item code, set value, etc.). In addition, facility maintenance information is information for preventing and forecasting problems in facilities and responding to unexpected situations, and preventive maintenance information (preventive maintenance codes, preventive maintenance deadlines) may be included. In addition, the facility master information includes facility code (Unique Code - Mac Address information), manufacturing information (manufacturer, manufacture date, manufacturer facility code, etc.), specification information (facility basic specification information), facility manual (operation and maintenance manual) Spare part information (list, period, condition), facility class management information, and the like. The facility basic operation information may include power information (on / off time), operation information (start time, end time), and the like, as information for monitoring the facility. The equipment abnormal information may include equipment abnormal information (equipment abnormal code, abnormal time), equipment malfunction information (action code, action time), and the like. In addition, the facility production operation information includes production item information (item code, production instruction code, individual identification code), individual production time (start time, completion time), individual operation time (operation code, Value), total time of production (uptime, inactivity time, failure time, repair time).

The information management unit 250 performs operation, maintenance, and integrated control management operations based on the collected information.

For example, smart factory integration relationships and cloud services can be enhanced.

In addition, we provide production information management function through cloud service, and provide process master management function (equipment, product, production condition, quality condition), production information storage (big data), production information analysis Information management, reliability authentication management function, and the like.

FIG. 3 shows a specific example of the automatic control system described with reference to FIG.

Referring to FIG. 3, a welding machine 211, an injector 212, and a machine tool 213, which are representative of the production facility 210, are shown.

In addition, a concrete example of the wireless collector 221 and the bidirectional collector 222 corresponding to the data collector 220 is shown.

Also, the information exchange unit 230 is shown in the form of an AP.

In addition, a concrete view of the fixed type monitoring unit 241 and the mobile type monitoring unit 242 of the monitoring unit 240 is shown.

As a specific example of the information management unit 250, a cloud service 251, an authentication service 252, and a production information management service 253 are shown.

As described above, the information management unit 250 can control the operation of the production facility 210 by transmitting feedback information to the production facility 210 based on the collected information.

For example, when it is determined that the injector 212 is currently overloaded and feedback information for stopping the operation is transmitted, or feedback information for stopping the operation of the machine tool 213 when it is determined that the conditions for malfunctioning the machine tool 213 are satisfied And the like can be performed.

At this time, when a command of the information management unit 250 is input to all the devices, a serious error or a malicious induction of an erroneous operation may occur.

Accordingly, in the present invention, a series of processes for registering the devices under the control of the automatic control system are performed in advance.

However, even after performing the registration process, a problem such as malicious attack, control, or information to be transmitted to the first device may be transmitted to the second device, which may lead to a serious error or malfunction.

Therefore, the present invention proposes an authentication platform in which a production information authentication device is additionally provided and feedback information related to control and the like can be exchanged only for devices that have passed both the record authentication key authentication and the control authentication key authentication.

4 is a block diagram illustrating an automatic control system to which an authentication platform proposed by the present invention is applied.

The production facility 210, the information exchanging unit 230, the data collecting unit 220, the information managing unit 250 and the monitoring unit 240 of the automatic control system 300 proposed in FIG. System 200, respectively, so that repeated description will be omitted for the sake of simplification of the description.

4, the data collecting unit 220 is included in the information exchanging unit 230 and the monitoring unit 240 is included in the information managing unit 250. However, this is merely an example of the present invention, 3, the data collecting unit 220 can be separated from the information exchanging unit 230, and the monitoring unit 240 can be separated from the information managing unit 250. [

4, a method of registering a device under the control of the above-described automatic control system 300 and an exchange of feedback information related to control and the like are performed only for devices that have passed both the record authentication key authentication and the control authentication key authentication The production information authentication unit 310 has a technical characteristic that the authentication platform to which the method can be applied is the production information authentication unit 310.

The production information authentication unit 310 proposed by the present invention performs the control of only the device that has passed both the recording authentication key authentication and the control authentication key authentication in the first method of registering the device under the control of the automatic control system 300 A method of performing a second method in which feedback information exchange related to the present invention can be performed will be described with reference to the drawings.

5 is a diagram for explaining a specific example of the authentication processing method of the automatic control system proposed in FIG.

5, a first method for registering a device under the control of the automatic control system 300 by the production information authentication unit 310 will be described.

5 shows a facility registration process between the production facility 210, the information management unit 250 and / or the production facility 210, the information exchange unit 230 and / or the production facility 210, and the production information authentication unit .

That is, after the registration process described with reference to FIG. 5, the secondary authentication process of FIG. 6 may be performed.

In addition, a series of processes for performing an operation according to feedback information only between devices having a network through FIG. 5 is performed.

Referring to FIG. 5, an authentication platform user registration process (S100) is performed first.

For example, step S100 is performed between the enterprise or individual and the machine builder or machine user.

Then, the authentication platform user authentication (S110) is performed.

After step S110, the production facility 210 performs a process of registering machine basic information (S121).

Through step S121, a machine master, a machine code, and the like may occur.

After step S121, the process of registering the information exchange unit 230 (S122) is performed.

For example, step S122 may be performed using a Mac Address or the like.

Thereafter, the process of issuing the security authentication code (S123) is performed.

The double-random authentication key described in FIG. 6 can be generated through step S123, which will be described later.

Thereafter, step S124 of checking communication and security authentication connection is performed, and step S125 in which communication and security authentication connection are completed is performed.

On the other hand, after step S110, the step S131 of registering the user machine by searching the machine code is performed in other devices.

Thereafter, the general machine information is registered (S132), the machine maintenance reference information is registered (S133), and the process of registering the machine operation information structure (S134) proceeds.

In addition, the machine production information structure is registered (S135), the machine quality information structure is registered (S136), and the machine information exchange master structure is generated (S137).

Thereafter, when the master structure is registered in the information exchange unit 230 (S138), the communication connection and the consistency are checked (S139), and the information collection communication connection is completed (S140).

Therefore, since the control operation is performed only by the network of the registered devices through the predetermined registration procedure through the process described with reference to FIG. 5, it is possible to prevent malfunction, malicious attack, and the like in advance.

Next, FIG. 6 is a diagram for explaining another specific example of the authentication processing method of the automatic control system proposed in FIG.

FIG. 6 illustrates a process of performing a second method in which the production information authentication unit 310 can exchange feedback information related to control or the like only for devices that have passed both the recording authentication key authentication and the control authentication key authentication do.

Referring to FIG. 6, a production facility 210, an information exchange unit 230, a production information authentication unit 310, and an information management unit 250 are illustrated.

First, a method of performing the recording authentication key authentication will be described.

Referring to FIG. 6, the production facility 210 exchanges production information (S211).

Thereafter, the information exchanging unit 230 connects the production information exchanging apparatus facility through a communication port or the like (S221).

The information exchange unit 230 receives the information exchange device registration information (e.g., Mac address, connected machine code, security random code, etc.) from the production information authentication unit 310 (S241) Can be performed.

The production information authentication unit 310 then transmits the information management device registration information (for example, IP, management system code, security random code, etc.) to the information management unit 250, Performs a communication port connection as a production information management apparatus (S271).

The production facility unit 210 generates machine production information (S212), and the information exchange unit 230 receives and records production information generation (S222).

When the recording / control authentication key management (S243) is being performed in the production information authentication unit 310, the information exchange unit 230 requests the production information authentication unit 310 for the recording authentication key in response to the step S222 The operation S223 is performed.

When the production information authentication unit 310 receives the record authentication key request (S244), the process of confirming the facility (machine) registration (S245) is performed.

At this time, the record authentication key request fails (S224) or the record information authentication key issuance (S246) is performed, the information exchange unit 230 receives the record authentication key (S225) The first authentication process is performed.

At this time, in step S226, the production information including the recording authentication key is configured and transmitted, thereby providing a basis for performing the secondary authentication process.

Next, the secondary authentication process will be described again with reference to FIG.

If the information exchange unit 230 composes the production information including the recording authentication key and transmits it to the information management unit 250 in step S226, the information management unit 230 receives the production information including the recording authentication key (S272).

Thereafter, the information management unit 230 transmits a recording authentication key confirmation request to the production information authentication unit 310, and accordingly, the production information authentication unit 310 receives the recording authentication value confirmation (S247).

Thereafter, the production information authentication unit 310 performs step S248 of confirming whether it is registered in the management system.

If not, the recording authentication key confirmation failure (S274) proceeds. If the recording authentication key confirmation issuance (S248) is made, the recording authentication key confirmation acceptance (S275) proceeds.

Thereafter, the information management unit 250 performs the production information storage and analysis process S276, the production knowledge information generation process S277, and the production control information generation process S278, And the production information unit 310 receives the control authentication key request (S250).

Thereafter, the production information unit 310 carries out a management system registration process in response to the receipt of the control authentication key request (S251), and if it is not registered, the control information authentication key verification process fails (S280).

If the registration is confirmed, the production information unit 310 issues the control authentication key (S252), and the control authorization key is received in the information management unit 250 (S281) to configure the production control information, (Step S282).

In step S282, a control authentication key is generated and transmitted to the information exchange unit 230. [

Then, the information exchange unit 230 receives the production control information including the control authentication key (S227), and transmits the control authentication key confirmation request to the production information authentication unit 310 (S228).

When the production information authentication unit 310 receives the control authorization key confirmation (S253), the production information authentication unit 310 goes through a process (S254) of confirming whether or not the equipment (machine) is registered.

If it is not registered, the control authentication key confirmation failure (S229) is proceeded, but if it is registered, the control authorization key confirmation issuing step (S255) is performed.

Thereafter, when the information exchange unit 230 receives the control authorization key confirmation (S230), the information exchange unit 230 records the production control information and transmits the production control information to the production facility 210 (S231).

When the production facility 210 receives the feedback information through step S231, the production facility 210 receives the production control information and operates according to the set contents.

Therefore, only devices authenticated through the two-step authentication process can generate and transmit signals capable of controlling the operation of the production facility 210, thereby preventing malfunction and malicious attacks.

As a result, the production information authentication unit 310 receives only the first method for registering the apparatus under the control of the automatic control system 300 and the feedback relating to the control or the like only for the apparatus that has passed both the record authentication key authentication and the control authentication key authentication It is possible to establish a secure control system through the second method, in which information exchange can be carried out.

The present invention relates to an automatic control system for automatically collecting and managing information on a plurality of devices, and can also provide an authentication platform for secure management.

According to the system and the operating method of the present invention, since the application is downloaded on the server and the programs and information stored in the server are downloaded, the information can be quickly processed at the processing speed of the server and the application software and information are automatically installed And upgrades, and the centralized and consistent management of information and software has the advantage of easy management of information and software.

In addition, the production information is stored in the server without being stored in the terminal, the software is executed on the server and the login function to the server is provided, so that the access of the unauthorized user can be fundamentally blocked, So that the direct connection to the public communication network and the input / output device is blocked, thereby preventing leakage and destruction of information caused by illegal users or hackers.

In addition, according to the present invention, application software and information can be automatically installed and upgraded from a central location, so that installation and management of a terminal is easy, and when a failure occurs, the terminal can be quickly recovered.

The above-described embodiments of the present invention can be implemented by various means. For example, embodiments of the present invention may be implemented by hardware, firmware, software, or a combination thereof.

In the case of hardware implementation, the method according to embodiments of the present invention may be implemented in one or more Application Specific Integrated Circuits (ASICs), Digital Signal Processors (DSPs), Digital Signal Processing Devices (DSPDs), Programmable Logic Devices (PLDs) , FPGAs (Field Programmable Gate Arrays), processors, controllers, microcontrollers, microprocessors, and the like.

In the case of an implementation by firmware or software, the method according to embodiments of the present invention may be implemented in the form of a module, a procedure or a function for performing the functions or operations described above. The software code can be stored in a memory unit and driven by the processor. The memory unit may be located inside or outside the processor, and may exchange data with the processor by various well-known means.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The foregoing description of the preferred embodiments of the invention disclosed herein has been presented to enable any person skilled in the art to make and use the present invention. While the present invention has been particularly shown and described with reference to preferred embodiments thereof, it will be understood by those skilled in the art that various changes and modifications may be made therein without departing from the spirit and scope of the invention as defined by the appended claims. For example, those skilled in the art can utilize each of the configurations described in the above-described embodiments in a manner of mutually combining them. Accordingly, the present invention is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

The present invention may be embodied in other specific forms without departing from the spirit or essential characteristics thereof. Accordingly, the above description should not be construed in a limiting sense in all respects and should be considered illustrative. The scope of the present invention should be determined by rational interpretation of the appended claims, and all changes within the scope of equivalents of the present invention are included in the scope of the present invention. The present invention is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein. In addition, claims that do not have an explicit citation in the claims may be combined to form an embodiment or be included in a new claim by amendment after the filing.

Claims (7)

A plurality of devices; An information exchange unit for receiving first information from the plurality of devices; A production information authentication unit for performing authentication between the plurality of devices and the information exchange unit; And an information management unit for receiving the first information from the information exchange unit and generating second information for instructing an execution operation of a first device, which is at least a part of the plurality of devices, using the first information In the authentication processing method,
A 1-1 step of the information exchange unit and the information management unit being registered in the production information authentication unit;
A first step of generating a preset event in the first device;
A first step of the first device transmitting the first information to the information exchange unit to inform the fact of the occurrence of the event;
A step 1-4 of the information exchange requesting the recording authentication key to the production information authentication unit;
(1-5) in which the production information authentication unit issues the recording authentication key to the information exchange unit only when the information exchange unit is registered in the production information authentication unit;
(1-6) the information exchange unit transmitting the first information and the recording authentication key to the information management unit;
(1-7) requesting the information management unit to confirm the record authentication key received from the production information authentication unit;
(1-8) in which the production information authentication unit transmits confirmation of the recording authentication key to the information management unit only when the information management unit is registered in the production information authentication unit;
(1-9) in which the information management unit generates the second information using the first information;
A second step of the information management unit requesting a control authentication key from the production information authentication unit;
A second step (2-2) in which the production information authentication unit issues a control authentication key to the information management unit only when the information management unit is registered in the production information authentication unit;
A second step of the information management unit transmitting the second information and the control authentication key to the information exchange unit;
(2-4) the information exchange requesting confirmation of the control authentication key received from the production information authentication unit;
(2-5) in which the production information authentication unit transmits confirmation of the control authentication key to the information exchange unit only when the information exchange unit is registered in the production information authentication unit;
(2-6) the information exchange unit transmits the second information to the first device; And
And (2-7) the first device receiving the second information and performing the performing operation according to the second information. delete delete delete delete The method according to claim 1,
Wherein the plurality of devices, the information exchange unit, the production information authentication unit, and the information management unit communicate using at least one of a short-range communication and a long-
The local area communication includes Bluetooth, Radio Frequency Identification (RFID), infrared data association (IrDA), Ultra Wideband (UWB), ZigBee or Wi-Fi (Wireless Fidelity)
The long-distance communication may be performed by using code division multiple access (CDMA), frequency division multiple access (FDMA), time division multiple access (TDMA), orthogonal frequency division multiple access (OFDMA), or single carrier frequency division multiple access The authentication processing method comprising: The method according to claim 1,
In the operation 1 - 9, the information management unit determines an abnormal state of the first device using the first information,
Wherein the second information includes at least a part of an instruction to stop the operation of the first device and an instruction to change an operation condition of the first device in step 2-6.

Images