JP2009176165A - Plant management apparatus, plant management method, and plant management program - Google Patents

Abstract

An object of the present invention is to quickly give an operation authority in the event of an emergency in a plant or the like.
Face image data of a person is acquired, face contour data and face feature data are extracted from the acquired face image data, and the face image data and face feature data are stored in advance in the face image DB 121. The facial image data and the facial feature data are collated, and if a matching ratio equal to or higher than a predetermined value is calculated as a result of the collation, the person of the facial image data is given the operation authority to the driving monitoring operation device 1 It is characterized by that.
[Selection] Figure 2

Description

  The present invention relates to a plant management apparatus, a plant management method, and a plant management program.

In the conventional plant management, the plant operator receives operation authentication by operation from the keyboard or biometric authentication using a contact method in the operation monitoring operation device in the instrument room, and the process operation is performed on the screen of the operation monitoring operation device. I have grasped the state, and have made driving operations and settings.
With regard to such a system, for example, Patent Document 1 describes a security management device that does not require insertion of a key or a card and can handle a quick input operation.
JP 11-328119 A

  By the way, in the field of the process industry, when an emergency occurs, the operator nearest to the operation monitoring operation device may have to perform the operation regardless of the operator who is logged in. In this way, when an operator who has operating authority leaves the place and is in a locked state with a screen saver on the screen, for example, another operator can newly input a user ID (Identification) or password. It is necessary to make the biometric authentication device recognize biometric information such as finger veins, carry an ID identification device that can operate in an environment using wireless or infrared, and receive authentication, which is not preferable as a quick response to an emergency situation. There is a problem.

  The present invention has been made in view of such a background, and an object of the present invention is to quickly give an operation authority.

  In order to solve the above problem, the present invention compares the plant data acquired from the measuring device with the emergency condition stored in the storage unit to determine whether or not the plant is in an emergency, and the result of the determination When it is determined that the plant is in an emergency, the face image acquired from the imaging device is compared with the template face image stored in the storage unit to determine whether or not to accept an operation by the operator related to imaging. It is characterized by authenticating.

  According to the present invention, the operation authority can be quickly granted.

  Next, the best mode for carrying out the present invention (referred to as “embodiment”) will be described in detail with reference to the drawings as appropriate.

FIG. 1 is a diagram illustrating a configuration example of a process monitoring control system according to the present embodiment.
In the process monitoring control system 10, the process monitoring control device 3 is connected to the operation monitoring operation device 1 (plant management device) via the communication line 4. The process monitoring control device 3 acquires flow rate data of a fluid (for example, oil) flowing through a pipe in the plant 5 from the flow meter 52, and performs operation monitoring operation on the acquired flow rate data via the communication line 4. Send to device 1. When the operator sends an operation instruction to the process monitoring control device 3 via the operation screen 11 of the operation monitoring operation device 1, the process monitoring control device 3 opens and closes the valve 53 in the plant 5 in accordance with the operation instruction. To control the flow rate of the fluid between the tanks 51.

  Data relating to the flow rate detected by the flow meter 52 and opening / closing information of the valve 53 are sent to the operation monitoring operation device 1 via the process monitoring control device 3 and the communication line 4 as described above. In the operation monitoring operation device 1, data relating to the flow rate sent on the display is displayed like the instrument display on the operation screen 11. Similarly, data related to the open / close state of the valve 53 is also sent to the operation monitoring operation device 1 and displayed on the display as an instrument display of the operation screen 11. An up / down operation switch for controlling the opening / closing of the valve 53 is displayed on the operation screen 11 of the operation monitoring operation device 1. The operator can control the opening and closing of the valve 53 by pressing these operation switches by using a mouse or a display with a touch panel.

  Therefore, the operator can grasp the inflow and outflow conditions of the oil by monitoring the operation screen 11 of the operation monitoring operation device 1. Further, when the operator wants to perform the opening / closing control of the valve 53, the opening / closing control of the valve 53 can be performed by operating the operation switch displayed on the operation screen 11 of the operation monitoring operation device 1. it can.

  The driving monitoring operation device 1 includes a face recognition camera 2 (imaging unit). The face recognition camera 2 is for capturing a driver's face and inputting a face image to the driving monitoring operation apparatus 1. For example, the face recognition camera 2 includes an infrared sensor and a human detection sensor, and the driver approaches. It may be possible to perform shooting automatically. Furthermore, the face recognition camera 2 may automatically rotate three-dimensionally, and may be able to adjust the camera direction in the direction in which a person is present according to information obtained from an infrared sensor or a human detection sensor.

FIG. 2 is a diagram illustrating a configuration example of the operation monitoring operation device according to the present embodiment.
The user authentication unit 106 has a function of performing authentication based on the input user ID and password, and determining whether or not the operator can be given an operation authority. The face image acquisition unit 101 acquires raw image data 301 (see FIG. 4) including a face image from the face recognition camera 2, removes the background and the like, and then removes the background and the like to the face registration unit 102. 302 (see FIG. 4). The face registration unit 102 extracts face contour data 304 (see FIG. 5) and face feature data 305 (see FIG. 5) from the face image data 302 sent from the face image acquisition unit 101, and uses these data as face images. It has a function of storing in the DB 121 (Database). The raw image data 301, face image data 302, face outline data 304, and face feature data 305 will be described later with reference to FIG.

  The face authentication unit 104 extracts face contour data 503 (see FIG. 7) and face feature data 504 (see FIG. 7) from the face image acquired from the face recognition camera 2, and stores the face stored in the face image DB 121. By comparing with the contour data 304 (see FIG. 4) and the face feature data 305 (see FIG. 4), it has a function of determining whether or not the operator can be given the operating authority. The emergency registration unit 105 generates an execution conditional expression 604 (see FIG. 8) that is a condition for determining whether or not there is an emergency or a condition of the state of the valve 53, and sets the execution conditional expression 604 as an emergency. It has a function of storing in the DB 122. The process data collection unit 108 (plant data acquisition unit) collects data related to the flow rate measured by the flow meter 52 and data related to the open / close state of the valve 53 (process data) from the process monitoring control device 3, and these data are collected. Is stored in the collection DB 123. The emergency determination unit 109 substitutes each value of the data stored in the collection DB 123 into the execution condition expression 604 stored in the emergency DB 122, and determines whether it is “TRUE” or not. It has a function to determine whether or not. The process data setting unit 107 has a function of setting the plant 5 and the process monitoring control device 3 according to the setting data stored in the setting DB 124. The timer delay unit 110 has a function of causing the process data collection unit 108 to collect process data every predetermined time.

  The operation reception unit 103 has the following functions. The operation accepting unit 103 determines whether or not an emergency registration process is performed or not, and activates the face authentication unit 104, activates the user authentication unit 106 according to each determination result, 5 or the setting data of the process monitoring control device 3 is obtained via a keyboard (not shown) or the like and stored in the setting DB 124. The timer 111 has a function of sending time information to the operation accepting unit 103. The operation accepting unit 103 is given an operation when a certain time has elapsed after the operation authority is granted based on the sent time information. Disable permissions. Alternatively, the operation accepting unit 103 invalidates the granted operation authority when nothing is input to the operation monitoring operation device 1 for a certain period of time after the operation authority is granted based on the transmitted time information.

  In addition, each unit 101 to 111 in the operation monitoring operation device 1 has a program stored in a ROM (Read Only Memory) (not shown) or a HD (Hard Disk) (not shown) developed in a RAM (Random Access Memory) (not shown), This is realized by being executed by a CPU (Central Processing Unit) (not shown). Moreover, various DB121-124 is corresponded to the memory | storage part in a claim.

FIG. 3 is a diagram illustrating a configuration example of the process monitoring control apparatus according to the present embodiment.
The process data acquisition unit 31 has a function of acquiring process data such as an open / close state of a flow meter 52 (see FIG. 1) and a valve 53 (see FIG. 1) of the plant 5. The request receiving unit 32 has a function of receiving a request sent from the operation monitoring operation device 1. The request processing unit 33 has a function of acquiring process data from the process data acquisition unit 31 and setting an acquisition interval of the process data acquisition unit 31 in accordance with the request received by the request reception unit 32. The response reply unit 34 has a function of returning a response to the request received by the request receiving unit 32 to the operation monitoring operation device 1, and has a function of sending process data to the operation monitoring operation device 1, for example.

  Next, the flow of processing of the process control operation device according to the present embodiment will be described along FIGS. 4 to 10 with reference to FIGS. 1 and 2. 4 and 5 are processes related to registration of face images, and FIGS. 6 to 10 are processes related to registration and authentication of emergency data.

FIG. 4 is a flowchart showing the flow of face image acquisition processing according to this embodiment.
4 and 5 are processes performed when face image registration is instructed via a keyboard or a mouse (not shown).
First, the face image acquisition unit 101 acquires raw image data 301 including a face image taken by the face recognition camera 2 (S101).
Next, the face image acquisition unit 101 extracts face image data 302 from the raw image data 301 (S102). This is a process in which the face image acquisition unit 101 generates the face image data 302 by removing the background from the raw image data 301 and leaving only the face image on the plain screen. Note that the processing in step S102 can be realized by the technique described in Japanese Patent Laid-Open No. 2000-76454.
Then, the face image acquisition unit 101 sends the face image data 302 extracted in step S302 to the face registration unit 102, and the face registration unit 102 performs face registration processing (S103). The face registration process will be described later with reference to FIG.

  In the present embodiment, the raw image data 301 is acquired from the face recognition camera 2. However, the present invention is not limited thereto, and the raw image data 301 may be acquired from an external device such as a commercially available digital camera.

FIG. 5 is a flowchart showing the flow of face registration processing according to the present embodiment.
Note that the processing in FIG. 5 is the processing in step S103 in FIG.
First, the face registration unit 102 activates the user authentication unit 106, and the activated user authentication unit 106 performs user authentication processing (S201). The user authentication process will be described later with reference to FIG.
Then, based on the notification from the user authentication unit 106, the face registration unit 102 determines whether or not user authentication has been established as a result of step S201 (S202).
When the user authentication is not established as a result of step S202 (S202 → No), the face registration unit 102 cannot display the face on the driver by displaying that the face registration is not possible on a display (not shown). Is notified (S208).

When the user authentication is established as a result of step S202 (S202 → Yes), the face registration unit 102 converts the face image data 302 into a three-dimensional mesh by the finite element method, and generates face element data 303 from the mesh point coordinates (S203). ).
The face registration unit 102 is data of face outline data 304 that is data related to the face outline, face nose standing, face color, distance relationship between eyes / nose / mouth, and the like from the face image data 302 and face element data 303. The face feature data 305 is extracted (S204). The face contour data 304 is represented by, for example, a length a from the top of the head to the chin and a width b on both sides of the face image. The face feature data 305 is represented by, for example, the length c from the upper corner of the eye to the tip of the nose, the length d of both eyes in the face image, and the length e from the left corner of the eye to the nose. Is done. Note that the processing in steps S203 and S204 can be realized by the technique described in Japanese Patent Application Laid-Open No. 2007-272435. Note that the length d of the eyes on both sides may be the length to the outside of both eyes, the length between the centers of the eyes, the length to the inside of both eyes, or the like.

Further, the face registration unit 102 acquires a user ID from the login information of the operator, further calculates the operator name from a user ID-operator name correspondence list (not shown), and presents the current date, time, operator name, and the like. It is added to the face element data 303, face outline data 304, and face feature data 305 as supplementary information (S205), and face registration data 401 (template face image) is generated.
Then, the face registration unit 102 determines whether or not there is an empty area in the face image DB 121 (S206).
As a result of step S206, when it is determined that there is no free area in the face image DB 121 (S206 → No), the face registration unit 102 performs the process of step S208 described above.

  As a result of step S206, when it is determined that there is an empty area in the face image DB 121 (S206 → Yes), the face registration unit 102 registers the face registration data 401 in the empty area of the face image DB 121 (S207).

  In the example shown in FIG. 5, one face registration data 401 is generated for each person and registered in the face image DB 121. However, the present invention is not limited to this, and the angle, expression, hat, helmet, etc. are changed for each person. It is also possible to acquire a plurality of face images that have been removed, put on glasses, or removed, generate face registration data 401 from each face image, and register it in the face image DB 121.

FIG. 6 is a flowchart showing the flow of the operation reception process according to the present embodiment.
First, the operation reception unit 103 determines whether or not the operation currently being performed is an emergency registration operation (S301). Whether or not the operation is an emergency registration is determined based on information input by the operator from a keyboard or the like (not shown).
If the result of step S301 is an emergency registration operation (S301 → Yes), the operation accepting unit 103 activates the emergency registration processing unit, and the activated emergency registration processing unit performs the emergency registration process. After (S302), the operation reception unit 103 performs the process of step S311 described later. The emergency registration process will be described later with reference to FIG.
As a result of step S301, when the operation is not an emergency registration operation (S301 → No), the operation reception processing unit activates the emergency determination unit 109, and the activated emergency determination unit 109 performs an emergency determination process. (S303). The emergency determination process will be described later with reference to FIG.

The operation reception part 103 determines whether it is an emergency as a result of step S303 (S304). The determination is made according to whether the emergency determination unit 109 has set the emergency flag to “ON” or “OFF”.
If the result of step S304 is not an emergency (S304 → No), the operation reception unit 103 activates the user authentication unit 106, and the activated user authentication unit 106 performs user authentication processing (S305). The user authentication process will be described later with reference to FIG.
If the result of step S304 is an emergency (S304 → Yes), the operation reception unit 103 activates the face authentication unit 104, and the activated face authentication unit 104 performs face authentication processing (S306). The face authentication process will be described later with reference to FIG.

Next, the operation reception unit 103 determines whether authentication has been established in the user authentication process in step S305 or the face authentication process in step S306 (S307). The operation accepting unit 103 determines whether a user authentication establishment notification has been sent from the user authenticating unit 106 or whether the face authenticating flag has been turned “ON” or “OFF” by the face authenticating unit 104. Is performed by determining.
As a result of step S307, when the authentication is not established (S307 → No), the operation receiving unit 103 ends the process without receiving the operation by the operator who is the authentication target.
As a result of step S307, when the authentication is established (S307 → Yes), the operation reception unit 103 receives an operation by the operator who is the authentication target (gives operation authority) and determines the current operation content ( S308). The operation content is determined by the operation receiving unit 103 based on information input from a keyboard (not shown).
As a result of step S308, when the current operation is “data call operation” (S308 → data call operation), the operation reception unit 103 advances the process to step S311 described later.
When the result of step S308 is “emergency cancellation operation” (S308 → emergency cancellation), the operation reception unit 103 performs emergency cancellation processing (S309). This process is performed by the operation receiving unit 103 returning the login process to the normal login state. Note that the process of step S309 is not performed when an emergency situation is not determined in step S304.
If the result of step S308 is “data setting operation” (S308 → data setting operation), the operation receiving unit 103 stores the setting data of each part of the process monitoring control device 3 and the plant 5 in the setting DB 124 (S310). ).
Thereafter, the operation reception unit 103 activates the process data collection unit 108, and the activated process data collection unit 108 acquires information on the flow meter 52 and information on the valve 53, and controls the valve 53. Then, the process data setting unit 107 performs process data collection / setting processing for setting each part of the process monitoring control device 3 and the plant 5 according to the setting data stored in the setting DB 124 (S311).

FIG. 7 is a flowchart showing a flow of face authentication processing according to the present embodiment.
FIG. 7 shows the processing in step S306 in FIG.
First, the face authentication unit 104 acquires raw image data including a face image from the face recognition camera 2 (S401).
Then, the face authentication unit 104 extracts face image data 501 from the raw image data (S402).
Subsequently, the face authentication unit 104 displays the extracted face image data 501 in a three-dimensional mesh by the finite element method (S403), and generates face element data 502.
The face authentication unit 104 calculates the coordinates of the mesh points in the face element data 502 (S404).
Further, the face authentication unit 104 determines the face contour data 503, which is data related to the contour of the driver's face, from the face image data 501 and the mesh point coordinates calculated in step S404, and the eyes / nose standing, face color, eyes / nose / mouth. The face feature data 504, which is data relating to features such as the distance relationship, is extracted (S405). The face outline data 503 and the face feature data 504 are the same as the data described with reference to FIG. Note that the processing from step S401 to step S405 is the same processing as step S101 and step S102 in FIG. 4 and step S203 and step S204 in FIG.

Subsequently, the face authentication unit 104 acquires the face registration data 401 stored in the face image DB 121 in the registration order (S406).
Then, the face authentication unit 104 includes the face contour data 503 extracted in step S405, the face feature data 504, the face contour data 304 included in the face registration data 401 (see FIG. 5) acquired in step S406, The face feature data 305 is compared to calculate a match rate. For example, the matching rate may be calculated by the face authentication unit 104 for each of the face contour data 304 and 503 and the face feature data 305 and 504, and may further be calculated by averaging the calculated matching rates. For the coincidence rate, for example, it is determined whether or not the numerical values of the face contour data 304 and 503 and the facial feature data 305 and 504 match within a predetermined error range, and the number of matching numerical values is divided by the number of all numerical values. Calculated using a value or the like.

Next, the face authentication unit 104 determines whether or not the calculated matching rate is equal to or greater than a predetermined value set in advance (S407).
As a result of step S407, when the coincidence rate is equal to or higher than a predetermined value (S407 → Yes), the face authentication unit 104 establishes authentication, sets a face authentication flag (not shown) to “ON” (S408), and operates the operator. Grant authority.
If the match rate is not equal to or greater than the predetermined value as a result of step S407 (S407 → No), the face authentication unit 104 determines whether all the face registration data 401 stored in the face image DB 121 has been acquired. (S409). In the process of step S409, for example, a flag indicating that the face has been acquired is added to the face registration data 401 acquired in step S406, and the flag is added to all the face registration data 401 stored in the face image DB 121. This is done by detecting whether or not is given.

If all face registration data 401 has not been acquired as a result of step S409 (S409 → No), the face authentication unit 104 updates the acquisition destination of the face registration data 401 (S410), and returns to the process of step S406. . That is, the face authentication unit 104 acquires the next face registration data 401. That is, the face registration data 401 in the face image DB 121 is sequentially acquired.
If all the face registration data 401 have been acquired as a result of step S409 (S409 → Yes), the face authentication unit 104 determines that authentication has not been established and turns off a face authentication flag (not shown) attached to the face registration data 401. (S411), and no operating authority is given to the operator.

  In the example illustrated in FIG. 6, the raw image data input in the face authentication process is one. However, the present invention is not limited to this, and the raw image data is provided every predetermined time (that is, every moment). 6 may be obtained and the processing of FIG. 6 may be performed for each of the raw image data.

FIG. 8 is a flowchart showing the flow of emergency registration processing according to the present embodiment.
FIG. 8 shows the process of step S302 of FIG.
First, the emergency registration unit 105 activates the user authentication unit 106, and the activated user authentication unit 106 performs user authentication processing (S501). The user authentication process will be described later with reference to FIG.
Next, the emergency registration unit 105 determines whether or not user authentication is established as a result of step S501 (S502). The determination is made based on whether a user authentication establishment notification is sent from the user authentication unit 106 to the emergency registration unit 105 or a user authentication failure notification is sent.
If the result of step S502 shows that user authentication has not been established (S502 → No), the emergency registration unit 105 cannot display the emergency registration on the display (not shown) to the driver. (S513).

As a result of step S502, when user authentication is established (S502 → Yes), the emergency registration unit 105 sequentially acquires element conditions that define an emergency from the emergency definition sentence 601 of the operation input content ( S503). The element condition is a determination unit of the minimum unit that constitutes the contents of one emergency. Under the emergency definition sentence 601 in FIG. 8, each of the underlines 701 to 704 is an element condition. For the acquisition of the element condition, the emergency registration unit 105 performs morphological analysis on the emergency definition sentence 601 and then extracts “below” and “exceed”, converts them into equality inequality signs, “cooling water flow rate”, etc. Is converted into a prescribed symbol, and after extracting numerical values, the order is arranged.
Subsequently, the emergency registration processing unit formulates the acquired element conditions using four arithmetic operations or logical operation expressions, and stores them in a work area (not shown) as an element condition expression 602 (during creation) (S504). In the example of FIG. 8, the emergency registration processing unit generates an element conditional expression 602 obtained by formulating the underline 701 in the emergency definition sentence 601. At this time, “and”, “or”, and the like described in the emergency definition sentence 601 are converted into logical expressions “and”, “or”, and the like.

Subsequently, the emergency registration unit 105 updates the extraction destination of the element condition (S505). That is, if the target currently being processed is the underline 701 of the emergency definition sentence 601, the next underline 702 is updated to be acquired.
Then, the emergency registration unit 105 determines whether or not the element condition expressions 602 for all element conditions have been completed (S506). That is, the emergency registration unit 105 determines whether or not all the underlined element conditional expressions 602 in the emergency definition sentence 601 have been completed.
As a result of step S506, when the conditional expression of all the element conditions has not been completed (S506 → No), the emergency registration unit 105 returns to the process of step S503 and acquires the element condition updated in step S505.

  As a result of step S506, when the conditional expression of all element conditions has been completed (S506 → Yes), the work area is in a state where the element conditional expression group 603 is stored. Here, “and1”, “and2”, and “or1” in the element conditional expression group 603 are logical expressions that combine the element conditional expressions 602. “Andx” and “ory” mean that expressions of the same number such as x, y... Are connected by logical product (and) or logical sum (or), and logical expressions are combined from left to right. Levels are shown in accordance with the multiplicity of. For example, “and1” means that in the element condition expression group 603, the element condition expression 602 in the first row and the element condition expression 602 in the second row are connected by a logical product (and). Similarly, “and2” means that the element condition expression 602 in the third row and the element condition expression 602 in the fourth row are connected by a logical product (and). Furthermore, since “or1” is on the right side of “and1” and “and2”, the level is higher than “and1” and “and2”. That is, it means that the elemental conditional expressions 602 connected by “and1” and “and2” are connected by a logical sum (or).

Next, the emergency registration unit 105 sequentially acquires logical expressions between the element conditional expressions 602 such as “and1”, “and2”,... From the element conditional expression group 603 in the work area (S507).
Then, the emergency registration unit 105 combines the target element conditional expressions 602 with the acquired logical symbols, and generates an execution conditional expression (during creation) 604 ′ that can be executed by the processing device (S508).
Subsequently, the emergency registration unit 105 updates the acquisition destination of the logical expression between the element conditional expressions 602 (S509). That is, for example, if the current processing target is “and1”, the next “and2” is acquired.
Then, the emergency registration unit 105 determines whether or not the logical connection between all the element conditional expressions 602 has been completed (S510).
As a result of step S510, when the logical connection between all the element conditional expressions 602 is not completed (S510 → No), the emergency registration unit 105 returns the process to step S507 and acquires the logical expression updated in step S507. To do.

As a result of step S510, when the logical connection between all the element conditional expressions 602 has been completed (S510 → Yes), the emergency registration unit 105 determines whether there is a free area in the emergency DB 122 (S511). ).
As a result of step S511, when there is no free space in the emergency DB 122 (S511 → No), the emergency registration unit 105 performs the process of step S513 described above.
As a result of step S511, when there is an empty area in the emergency DB 122 (S511 → Yes), the emergency registration unit 105 registers the generated execution conditional expression 604 (emergency condition) in the empty area of the emergency DB 122 ( S512).

  In the present embodiment, the emergency registration unit 105 extracts the conditional expression and the like from the emergency definition sentence 601 and generates the execution conditional expression 604 based on the conditional expression. However, the present invention is not limited thereto. The execution condition formula 604 may be directly input to the driving monitoring operation device 1 via a keyboard (not shown) and stored in the emergency DB 122.

FIG. 9 is a flowchart showing the flow of emergency determination processing according to the present embodiment.
FIG. 9 shows the processing in step S303 in FIG.
Prior to the processing, the operation monitoring device (see FIG. 1) may check the flow rate data measured by the flow meter 52 (see FIG. 1) from the process monitoring control device 3 (see FIG. 1), the open / close state of the valve 53, and the like. Assume that each measurement data 801 is stored in the collection DB 123.
First, the emergency determination unit 109 acquires the execution condition formulas 604 one by one from the emergency DB 122 in order from the top (S601).
Next, the emergency determination unit 109 acquires each measurement data 801 from the collection DB 123, substitutes the value of each measurement data 801 for each variable of the execution conditional expression 604 acquired in step S601 (S602), and executes it. It is determined whether or not the conditional expression 604 is satisfied, that is, whether or not the value of the execution conditional expression 604 is “TRUE” (S603).

If the result of step S603 is “TRUE” (S603 → Yes), the emergency determination unit 109 assumes that an emergency has occurred and sets an emergency flag (not shown) to “ON” (S604).
If the result of step S603 is “FALSE” (S603 → No), the emergency determination unit 109 updates the acquisition destination of the execution conditional expression 604 in the emergency DB 122 (S605). That is, the acquisition destination is updated to the next execution condition expression 604.
Then, the emergency determination unit 109 determines whether or not the evaluation of all the execution conditional expressions 604 stored in the emergency DB 122 has been completed (S606).

As a result of step S606, when the evaluation of all execution conditional expressions 604 has not been completed (S606 → No), the emergency determination unit 109 returns the process to step S601 and updates the execution condition expression 604 of the acquisition destination updated in step S604. To get.
As a result of step S606, when the evaluation of all the execution conditional expressions 604 is completed (S606 → Yes), the emergency determination unit 109 sets the emergency flag (not shown) to “OFF” because the emergency is not established (S607). ).

FIG. 10 is a flowchart showing a flow of user authentication processing according to the present embodiment.
Note that the processing in FIG. 10 includes step S201 in FIG. 5 (initiated from the face registration unit 102), step S305 in FIG. 6 (initiated from the operation receiving unit 103), and step S801 in FIG. 8 (initiated from the emergency registration unit 105). It is processing of.
First, the user authentication unit 106 acquires a user ID and a password from login information (S701).
Subsequently, the user authentication unit 106 determines whether or not the acquired user IDs match by determining whether or not the acquired user ID is on the default user ID list (S702).
If the user IDs do not match as a result of step S702 (S702 → No), the user authentication unit 106 determines what the activation source is (S703). That is, it is determined from which process the current user authentication process is started.
As a result of step S703, when the activation source is the operation reception unit 103 (S703 → operation reception unit), the user authentication unit 106 displays a message indicating that the driving operation is not possible (no operation authority) on a display (not shown), thereby driving The user is notified that the driving operation is impossible (S704), and further notifies the operation accepting unit 103 that the user authentication is not established, thereby forcibly stopping the subsequent processing.
As a result of step S703, when the activation source is the face registration unit 102 (S703 → face registration unit), the user authentication unit 106 notifies the face registration unit 102 that user authentication is not established (S705).
As a result of step S703, when the activation source is the emergency registration unit 105 (S703 → emergency registration unit), the emergency registration unit 105 is notified that user authentication has not been established (S706).

If the user IDs match as a result of step S702 (S702 → Yes), the user authentication unit 106 determines whether the password acquired in step S701 is on the default user ID list, thereby determining the password. Is determined to match (S707).
If the passwords do not match as a result of step S707 (S707 → No), the user authentication unit 106 advances the process to step S703.
If the passwords match as a result of step S707 (S707 → Yes), the user authentication unit 106 determines what the activation source is (S708). That is, it is determined from which process the current user authentication process is started.
As a result of step S708, when the activation source is the emergency registration unit 105 (S708 → emergency registration unit), the emergency registration unit 105 is notified that user authentication has been established (S709).
As a result of step S708, when the activation source is the face registration unit 102 (S708 → face registration unit), the user authentication unit 106 notifies the face registration unit 102 that user authentication has been established (S710).
As a result of step S708, when the activation source is the operation reception unit 103 (S708 → operation reception unit), the user authentication unit 106 displays the fact that the driving operation is possible (with operation authority) on a display (not shown), thereby driving. The operator is notified that the driving operation is possible (S711), and further notifies the operation accepting unit 103 that the user authentication is established, thereby continuing the subsequent processing.

In this embodiment, the user authentication means other than the face image is a user ID and a password. However, the present invention is not limited to this, for example, by connecting a biometric authentication device or adding a function to the driving monitoring operation device 1. Biometric authentication may be used as user authentication means, or biometric authentication, user ID, and password may be used as user authentication means other than a face image.
Further, in this embodiment, after the operation authority is given to the corresponding operator, the operation authority is continuously given as it is. However, the present invention is not limited to this. For example, the operation reception unit 103 includes the timer 111 (see FIG. 2). ), And after granting the operation authority based on this time information, a process for invalidating the operation authority after a predetermined time may be performed.

  In the process control monitoring system, the present invention assumes that the faces of all operators having operating authority and the possible emergency situations are registered in advance. Since the operation authority can be quickly acquired without operating any of the devices and without carrying the ID recognition device, there is an effect of improving the safety and reliability in process operation and operation.

It is a figure which shows the structural example of the process monitoring control system which concerns on this embodiment. It is a figure which shows the structural example of the driving | operation monitoring operation apparatus which concerns on this embodiment. It is a figure which shows the structural example of the process monitoring control apparatus which concerns on this embodiment. It is a flowchart which shows the flow of the face delivery process which concerns on this embodiment. It is a flowchart which shows the flow of the face registration process which concerns on this embodiment. It is a flowchart which shows the flow of the operation reception process which concerns on this embodiment. It is a flowchart which shows the flow of the face authentication process which concerns on this embodiment. It is a flowchart which shows the flow of the emergency registration process which concerns on this embodiment. It is a flowchart which shows the flow of the emergency determination process which concerns on this embodiment. It is a flowchart which shows the flow of the user authentication process which concerns on this embodiment.

Explanation of symbols

1 Operation monitoring and operation device (plant management device)
2 Face recognition camera (imaging part)
DESCRIPTION OF SYMBOLS 3 Process monitoring control apparatus 4 Communication line 5 Plant 10 Process monitoring control system 11 Operation screen 31 Process data acquisition part 32 Request receiving part 33 Request processing part 34 Response reply part 51 Tank 52 Flowmeter 53 Valve 101 Face image acquisition part 102 Face registration Unit 103 Operation accepting unit 104 Face authentication unit 105 Emergency registration unit 106 User authentication unit 107 Process data setting unit 108 Process data collection unit (plant data acquisition unit)
DESCRIPTION OF SYMBOLS 109 Emergency state determination part 110 Timer delay part 111 Timer 301 Raw image data 302 Face image data 303 Face element data 304 Face outline data 305 Face feature data 401 Face registration data (template face image)
501 face image data 502 face element data 503 face outline data 504 face feature data 601 emergency definition sentence 603 element condition expression group 604 execution condition expression (emergency condition)
801 Measurement data 121 Face image DB (storage unit)
122 Emergency DB (storage unit)
123 Collection DB (storage unit)
124 Setting DB (storage unit)

Claims (10)

In the plant management device that manages the plant based on the operation of the operator,
An operation receiving unit for receiving the operation of the operator;
A face image acquisition unit that acquires an operator's face image captured by an imaging device that captures an operator's face image that operates the operation reception unit;
A plant data acquisition unit for acquiring plant data measured by the measuring device;
A template face image that stores a face image of a predetermined person is stored, and a storage unit that stores an emergency condition that is a condition for determining whether or not the plant is in an emergency state;
An authentication unit that compares the face image acquired from the imaging device with the template face image stored in the storage unit and authenticates whether or not an operation by the operator involved in imaging is accepted via the operation accepting unit; ,
An emergency determination unit that determines whether the plant is in an emergency by comparing the plant data acquired from the measurement device and the emergency condition stored in the storage unit,
A plant management apparatus comprising: When the emergency determination unit determines an emergency, the authentication unit acquires the operator's face image captured by the imaging device and performs the authentication, and the operation is performed when the operator is authenticated. Accepting operations through the accepting unit,
The plant management apparatus according to claim 1.   As a result of the determination, when it is determined by the emergency determination unit that the plant is not an emergency, based on the information input via the keyboard or the biometric information input via the biometric authentication unit, The plant management apparatus according to claim 1, further comprising a user authentication unit that authenticates whether or not to accept an operation through the operation accepting unit by an operator involved in input.   The plant management apparatus according to claim 1, wherein a plurality of the template face images exist for one operator.   The plant management apparatus according to claim 1, wherein a plurality of the face images are acquired every predetermined time. The face image acquisition unit acquires a face image from an external device,
The plant management apparatus according to claim 1, further comprising a face registration unit that stores the face image in the storage unit as a template face image.   The plant management apparatus according to claim 1, wherein the emergency condition is expressed by a predetermined mathematical expression.   2. The apparatus according to claim 1, further comprising a processing unit that invalidates the operation authority when it is determined that a predetermined time has elapsed after the process of giving the operation authority based on time information sent from a timer. The plant management apparatus described. In the plant management method in the plant management apparatus that manages the plant based on the operation of the operator,
The plant management device is
A template face image that stores a face image of a predetermined person is stored, and a storage unit that stores an emergency condition that is a condition for determining whether or not the plant is in an emergency state.
Comparing the plant data acquired from the measuring device and the emergency condition stored in the storage unit to determine whether the plant is in an emergency,
As a result of the determination, if it is determined that the plant is in an emergency state,
A plant management method comprising: comparing a face image acquired from an imaging device and a template face image stored in the storage unit to authenticate whether or not an operation by an operator relating to imaging is accepted.   A plant management program that causes a computer to execute the plant management method according to claim 9.

Images