JP2004206227A - Monitoring display device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a display device for monitoring capable of preventing the occurrence of malfunction and improving security without using a hook function supported by an OS. <P>SOLUTION: The display device for monitoring capable of displaying a monitoring picture for performing monitoring operation and activating an application program other than the monitoring operation is provided with an operation control means for limiting the activation of the application program. <P>COPYRIGHT: (C)2004,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to prevention of erroneous operation of a monitoring display device used for a distributed control device and the like and improvement of security.
[0002]
[Prior art]
FIG. 2 is a functional block diagram showing a configuration example of a conventional monitoring display device. Reference numeral 1 denotes a monitoring display device that functions as a human-machine interface, and is connected to the control bus 2. Reference numeral 3 denotes a field control station also connected to the control bus 2, which controls the field devices 5 existing in the plant via the I / O bus 4 and transmits process data and alarm information to the control bus 2. To the monitoring display device 1 via the display.
[0003]
Reference numeral 6 denotes an operator who performs a regular monitoring operation, and performs monitoring and operations for abnormalities and the like via a monitoring screen 11 displayed on a display screen 10 of the monitoring display device 1. Reference numeral 7 denotes an administrator, who performs various settings of the system using an application program started from the display screen 10 of the monitoring display device 1.
[0004]
In the display screen 10, reference numeral 12 denotes a list-type program start interface (hereinafter, I / F), which has a function equivalent to a [Start] menu in a standard OS. Reference numeral 13 denotes a non-resident program start I / F, which has the same function as the task bar in a standard OS. Reference numeral 14 denotes a resident program start I / F unit, which has a function equivalent to a task tray in a standard OS. Reference numeral 15 denotes a simple program start I / F unit displayed as one or a plurality of icons on the display screen 10, and has a function equivalent to a shortcut in a standard OS.
[0005]
A plurality of monitoring screens 11 (indicated by n) are displayed in a browser format, and a monitoring screen display program menu 11a is displayed at the top (menu bar) of each display screen.
[0006]
A standard OS supports a hook function, and a setting for restricting operations from the screen can be made by a commercially available hook setting application. Reference numeral 16 denotes an operation restriction hook program (own hook) that can be accessed only by the administrator 7. Normally, the hook operates by forming a hook chain. Reference numeral 17 denotes another hook program preceding the own hook 16, and reference numeral 18 denotes another hook program following the own hook 16.
[0007]
When there is no hook, the operator 6 and the manager 7 can access all of the I / F units 12 to 15 and 11a, call the corresponding programs and services, and through the called programs and services, Operations other than monitoring can be performed on the monitoring display device.
[0008]
If a hook is provided, the access is hooked even if the I / F units 12 to 15 and 11a are accessed, and operations other than monitoring are restricted.
[0009]
[Patent Document 1]
JP-A-4-323703
[Problems to be solved by the invention]
The problem with no hook is
(1) Due to an erroneous operation, system settings may be changed, data may be lost, or a shutdown may be performed.
(2) Due to an erroneous operation, a large number of monitoring screen display programs are called up, which may cause exhaustion of system resources and performance degradation.
(3) There is a possibility that data may be falsified or stolen by a malicious person.
[0011]
The problem with hooks is
(1) Normally, the hook operates by forming a hook chain. Therefore, it depends on the normal operation of all hooks including the own hook. Therefore, if the other hook does not operate normally or the own hook does not operate normally, not only the own and other hooks do not operate normally, but also the whole system may be unstable.
(2) Performance degradation may occur due to the overhead of hook processing.
[0012]
An object of the present invention is to realize a monitoring display device that can prevent erroneous operations and improve security without using a hook function supported by an OS.
[0013]
[Means for Solving the Problems]
The configuration of the present invention for achieving such an object is as follows.
(1) In a monitoring display device which displays a monitoring screen for performing a monitoring operation and in which an application program other than the monitoring operation can be started,
A monitoring display device, comprising: an operation control unit for restricting a start operation of the application program.
(2) The monitoring display device according to claim 1, wherein the operation control means is realized by an application program.
(3) The monitoring display device according to claim 1 or 2, wherein the restriction by the operation control means is invisible of a list-form program starting interface unit.
(4) The monitoring display device according to claim 1 or 2, wherein the restriction by the operation control means is a function invalidation of a non-resident program interface unit.
(5) The monitoring display device according to claim 1 or 2, wherein the restriction by the operation control means is invisible of a resident program interface unit.
(6) The monitoring display device according to claim 1 or 2, wherein the restriction by the operation control means is invisible of a simple program start interface unit.
(7) The monitoring display device according to claim 1 or 2, wherein the restriction by the operation control means is invisibility of the monitoring screen display program menu.
(8) The monitoring display device according to any one of claims 1 to 7, wherein the limitation by the operation control means is a limitation on the number of displayed images on the monitoring screen.
(9) The monitoring display device according to any one of claims 1 to 8, wherein the operation control means is capable of setting restriction contents.
(10) The monitor display device according to any one of claims 1 to 9, wherein the monitor display device is a human-machine interface station in a distributed control system.
[0014]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a functional block diagram showing an example of a monitoring display device to which the present invention is applied. The same elements as those described in the conventional apparatus of FIG.
[0015]
A structural feature of the present invention is the introduction of the operation control means 20. Unlike the hook function supported by the OS, the operation control means 20 itself is a general application program, is installed in the monitoring display device, and can be activated from the display screen 10.
[0016]
This program can be started only by the administrator 7. Therefore, an administrator account is required for activation. The administrator makes the following settings for the monitoring display device environment using this program. The setting items can be arbitrarily selected.
(1) Making the contents of the list-format program start I / F unit 12 invisible.
(2) Invalidation of the function of the non-resident program start I / F unit 13.
(3) makes the resident program start I / F unit 14 invisible.
(4) Making the simple program start I / F unit 15 invisible.
(5) Setting the maximum value of the number of images to be displayed on the monitoring screen 11 (indicated by n) (6) Making the monitoring screen display program menu 11a displayed at the top of the monitoring screen 11 invisible.
[0017]
As a result of the operation restriction setting, the operator 6 cannot perform any operation other than the operation on the monitoring screen 10 during operation. In addition, the monitoring function of the operation control means 20 monitors the number n of the monitoring screens 10, so that an unnecessary display is not performed. Alternatively, it is notified by a warning message or the like.
[0018]
In an emergency, the administrator 7 can start the operation control means 20 without terminating the current monitoring display device environment, and can start various application programs to perform work through this program. Also in this case, an administrator account is required for activation.
[0019]
In the embodiment, the application example in which the monitoring display device 1 functions as a human-machine interface of the distributed control system has been described. However, the present invention is not limited to a terminal for business use or a terminal for demonstration using a general-purpose PC. The present invention can be effectively applied to a terminal that does not want the user to perform an operation.
[0020]
Furthermore, a terminal in which the operation control means of the present invention is installed can prove that the data cannot be falsified or stolen.
[0021]
【The invention's effect】
As is apparent from the above description, according to the present invention, by invisible or invalidating other than the monitoring screen, it is possible to easily construct a system in which erroneous operation is prevented and security is improved. Can expect the following effects.
(1) Unintentional setting changes and data loss can be prevented.
(2) It is possible to prevent intentional setting change, data deletion / falsification / theft.
(3) Unauthorized acts (shutdown, restart, logoff, etc.) can be suppressed.
(4) Depletion of system resources and performance degradation due to the limitation of the number of display screens can be prevented.
(5) Unnecessary operation itself is not generated by invisibility.
(6) Unnecessary operation processing can be eliminated to eliminate unnecessary processing overhead.
(7) Performance degradation can be eliminated by eliminating unnecessary operation processing.
(8) Normal operation can be performed without depending on other programs.
(9) Since only the administrator can start and execute the setting function, this function itself is also protected from erroneous operation and malicious operation.
(10) An account check can be introduced so that only the administrator can activate the setting function.
(11) In an emergency or when necessary, the administrator can perform various operations with the authority of the administrator without ending the monitoring display device environment, so that the operation is not affected.
[Brief description of the drawings]
FIG. 1 is a functional block diagram showing a configuration of an embodiment of a monitoring display device according to the present invention.
FIG. 2 is a functional block diagram illustrating a configuration example of a conventional monitoring display device.
[Explanation of symbols]
REFERENCE SIGNS LIST 1 monitoring display device 2 control bus 3 field control station 4 I / O bus 5 field device group 6 operator 7 administrator 10 display screen 11 monitoring screen 11 a monitoring screen display program menu 12 list-type program start I / F section 13 non-resident program Start I / F unit 14 Resident program start I / F unit 15 Simple program start I / F unit 20 Operation control means

Claims (10)

A monitoring display device for performing a monitoring operation is displayed, and a monitoring display device in which an application program other than the monitoring operation can be started,
A monitoring display device, comprising: an operation control unit for restricting a start operation of the application program. The monitoring display device according to claim 1, wherein the operation control unit is realized by an application program. The monitor display device according to claim 1, wherein the restriction by the operation control unit is invisible of a list-form program start interface unit. The monitoring display device according to claim 1, wherein the restriction by the operation control unit is a function invalidation of a non-resident program interface unit. The monitoring display device according to claim 1, wherein the restriction by the operation control unit is invisible of a resident program interface unit. 3. The monitoring display device according to claim 1, wherein the restriction by the operation control unit is invisible of a simplified program start interface unit. The monitoring display device according to claim 1, wherein the restriction by the operation control unit is invisible of the monitoring screen display program menu. The monitoring display device according to claim 1, wherein the limitation by the operation control unit is a limitation on the number of displayed images on the monitoring screen. The monitoring display device according to claim 1, wherein the operation control unit is capable of setting restriction contents. The monitoring display device according to any one of claims 1 to 9, wherein the monitoring display device is a human-machine interface station in a distributed control system.

Images