JP2011180629A - Simplified password input system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system for recognizing to simplify a password input upon login from a mobile terminal. <P>SOLUTION: In the simplified password input system of a plant management system wherein a Web server, an operator server, and the mobile terminal are connected by communication, when an operator performs the login to the Web server by the mobile terminal, the operator performs the login by a virtual password and an ID registered by the operator, the Web server cooperated with the operator server to take out a true password corresponding to the ID previously present in a storage medium, and both passwords are compared by the prescribed number of characters. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a portable terminal that displays a screen such as a monitoring screen sent from a server.

  FIG. 1 shows an outline of the plant management system. In FIG. 1, reference numeral 1 denotes various facilities provided in the plant, and these facilities are controlled by the controller 2. The controller 2 is connected to a central monitoring device 4 provided in the instrument room via a LAN (local area network) 3 of a control system. There is an operator server 5 for managing various information related to operations, which includes an operation authority database 5-1 and an operation history database 5-2, and is connected to the central monitoring device 4 via an information-related LAN 6. Yes. In this plant management system 100, the controller 2 periodically collects data of various management points in the plant and sends the collected data to the central monitoring device 4. The central monitoring device 4 accumulates data from various management points. The central monitoring device 4 creates a monitoring screen in response to a request from the monitoring person and displays it on the display. In the central monitoring device 4, the monitoring authority is given to the monitoring person, and operations and display contents from the monitoring screen displayed on the display are regulated according to the monitoring authority.

In such a plant management system 100, for example, a field operator checks and adjusts the opening degree of a control valve while making contact with a monitor in the instrument room. Wireless paging or the like is used for communication between the operator and the monitor. In this case, the operator inquires about the set opening degree of the control valve, the adjustment result, and the like to the monitor in the instrument room. The monitor responds to an inquiry from the operator while viewing the monitoring screen on the display of the central monitoring device 4. In an operation called loop check, the opening and closing of control valves at various points in the plant are sequentially checked and adjusted, which makes communication between the operator and the supervisor more difficult. Therefore, in the present system, a PHS control device 8 is newly provided so that the operator can carry the mobile terminal 9. PDA (mobile device: Personal
Digital Assistance) is carried and a monitoring screen similar to that of the central monitoring device is displayed on the display of the PDA. In the system, a web server 7 and an operator server 5 are provided, and this server is provided with a monitoring screen creation function, an operation authority determination function, and an operation history recording function, and the server side responds to a request from the PDA. The created monitoring screen is sent to the PDA.

Japanese Patent No. 3808794

  In such a conventional technique, an operator can log in to a Web server from a mobile terminal and operate various monitoring screens, but usually requires input of a password. However, many portable terminals do not have a full keyboard, and entering a long password character requires considerable effort. Although it is possible to touch the keyboard layout with a dedicated pen, it is still difficult.

  On the other hand, as a characteristic of mobile terminals, there are many situations where the power is turned on and used only when necessary at the site, and the frequency of login is high.

Also, there are many cases of moving to an area where wireless communication does not reach, and in that case, the log-in is automatically logged off due to disconnection or timeout of the communication session, so the necessity for re-login is high.

  With the related technology, it is possible to store the password on the login screen itself and automatically select the password with characters such as *** according to the input of the login ID.

  However, there are frequent movements of people in the field work environment. For example, when a portable terminal is left unattended, there is a very safety problem if another person can log in easily.

  In addition, it is dangerous to omit the password, and a certain amount of password authentication is required.

  The present invention has been made to solve such a problem, and an object of the present invention is to provide a system that allows easy password entry at the time of login from a portable terminal.

In order to achieve such an object, the present invention provides a plant management system in which a web server, an operator server, and a mobile terminal are connected by wired or wireless communication.
The mobile terminal is a Web client browser, and includes means for logging in with an ID registered with the operator and a temporary password when the operator logs in to the Web server,
When the Web server receives the ID and the temporary password, the Web server includes communication means for transferring them to the operator server and waiting for a reply from the operator server.
When the operator server receives the ID and the temporary password, the operator server extracts a true password corresponding to the ID in the storage medium, compares the passwords with a predetermined number of characters, and communication means for returning the comparison result to the Web server. Prepared,
The portable terminal is a simple password input system that displays the login result from a Web server.

  In the simple password input system according to the present invention, the means for comparing with a predetermined number of characters in the operator server is one in which one or more character strings of the temporary password start from an arbitrary position in the character string of the true password. It is a simple password input system characterized by comparing whether or not it matches the above character string.

At this time, the portable terminal may include means for displaying a drop-down menu on the terminal screen and selecting from a plurality of candidate character strings when inputting a temporary password.

  According to the present invention, it is possible to log in easily with a certain level of security. In particular, since the operator server can take a form of expanding functions as appropriate, it can be equipped with this function independently of the Web server and the central monitoring apparatus.

It is a block diagram of the plant management system using one Embodiment of the portable terminal which concerns on this invention. It is a figure which shows the login screen displayed on the display of the portable terminal (PDA) concerning this invention. It is a flowchart which shows the frame transmission control process concerning this invention. It is a flowchart which shows the collation process of the password in the operator server concerning this invention.

  Next, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 is a configuration diagram of a plant management system using an embodiment of a portable terminal according to the present invention.

  In this embodiment, a Web server 7 and a PHS control device 8 are provided, and the mobile terminal 9 is carried by the operator.

The Web server 7 is connected to the control system LAN 3 and the information system LAN 6, and the PHS control apparatus 8 is connected to the information system LAN 6.

A commercially available PDA is used as the portable terminal 9. That is, in this embodiment, the memory capacity of the mobile terminal 9 and the processing capacity of the CPU are small. A card type PHS telephone 10 is attached to the portable terminal 9.

The PHS control device 8 is connected to antennas 11 provided at various locations in the plant. A wireless LAN (private PHS) is constructed in the plant by the PHS control device 8 and the antenna 11.

Assume that the operator wants to check and adjust the opening of the control valve. In this case, the operator displays a login screen on the display 9-7 of the portable terminal 9 being carried. FIG. 2 shows a login screen G1 displayed on the display 9-7. On the login screen G1, an operator ID (user ID) input window S1 and a password input window S2 are displayed. In addition, an OK button BT1 and a reset button BT2 are displayed.

  On the login screen G1, the operator inputs the operator ID (numerical value or the like) assigned to him / her into the input window S1, inputs a simple temporary password into the input window S2, and presses the OK button BT1. Then, the CPU of the portable terminal takes in the entered operator ID and password as login information, and sends this login information to the card type PHS telephone.

  The card-type PHS telephone 10 establishes a wireless line with the PHS controller 8 and sends login information from the CPU to the PHS controller 8. The PHS control device 8 sends login information from the portable terminal 9 to the Web server 7. The Web server 7 receives the login information from the portable terminal 9 and sends it to the operator server 5, and the operator server 5 operates the operation authority table TB in the operation authority database 5-1 based on the operator ID and password of this login information. The operation authority of the operator (field man) in the portable terminal 9 is determined with reference to FIG.

  The following description is based on the flow diagram 3 for login processing.

  The operator inputs the URL (Unique Resource Locator) of the Web server to log in at the portable terminal 9, and waits for connection (step S10).

  The Web server 7 starts a new session (S11). Then, the HTML of the login screen is returned to the portable terminal 9 (S12).

The portable terminal 9 receives this HTML and displays a login screen G1 (S13). It takes charge of the operator's ID and temporary password input (S20).
Here, for example, let us assume that the temporary password input is “az”.

  When the Web server 7 receives this ID and temporary password, it arranges them in a message and transfers them to the operator server 5 as they are (S21).

When the operator server 5 receives the ID and the temporary password, the operator server 5 takes out the ID and the true password (here, “azbil2010”) stored in the operation authority database 5-1 as a storage medium. The received temporary password is verified. Then, the collation result is returned to the Web server 7 (S22).
For example, if one or two characters are matched from the first character, if the collation is OK, it is OK in this case.
<Details of step S22 will be described later. >

The Web server 7 looks at the result of this collation, and in the case of collation OK, the HTML of the initial screen is displayed.
In the case of verification NG, an error display HTML is appropriately returned to the mobile terminal 9 (S23).

The portable terminal 9 displays a screen by the received HTML (S24).
Thereafter, when the login is completed, various screen operations (S30) can be performed. However, if the login is not completed, the re-login is performed again (return to S20).

When there are various screen operations from the portable terminal 9, the Web server 7 accepts them and performs processing such as returning the screen HTML desired by the operator (S31).
The mobile terminal 9 displays the screen (S32).

  As described above, the mobile terminal 9 and the Web server 7 provide an information presentation function on various screens in a so-called client server configuration, but when there is no operation from the mobile terminal for a certain period of time, As a time-out process, the Web server 7 disconnects the session with the mobile terminal (S99).

Next, details of the password verification step S22 in the operator server 5 will be described with reference to FIG.

The process starts when communication is started from the Web server 7 (S22_0). Information defined in advance as a system specification [predetermined number M of collation characters and N-th collation start character] is taken out from the storage medium and defined in the collation mode (S22_1).
In the example described above, [M = 2 characters and N = 1st]. According to the specification, M and N are appropriately defined.
For example, when M = 3 and N = 1, it is necessary to input up to “azb”.
When M = 4 and N = 6, “2010” is required.

  The ID and temporary password in the message from the Web server 7 are extracted from the reception buffer (S22_2). Next, a true password corresponding to the ID is taken out from the storage medium (S22_3).

Here, the contents of the temporary password are extracted for M (2) characters (“az” in the example) and the contents of the true password are extracted from the N (1) th character for M (2) characters (from “azbil2010” in the example). “Az” is obtained), and comparison is performed (S22_4).

It is checked whether or not they match (S22_5).
It branches depending on whether it is coincidence (OK) or non-coincidence (NG), and a message to that effect is set (S22_6) and transmitted to the Web server (S22_7).
This completes one verification process (S22_8).

[Another embodiment]
When waiting for the provision of a temporary password on the mobile terminal 9, the CPU of the mobile terminal 9 presents candidate passwords, those that have been input in the past, or random character strings, in a drop-down menu, and from there The selected one may be communicated to the Web server 7.
It should be added that other design-related applications and diversions are possible.

DESCRIPTION OF SYMBOLS 1 ... Equipment, 2 ... Controller, 3 ... Control system LAN, 4 ... Central monitoring apparatus, 5 ... Operator server, 5-1 ... Operation authority database, 5-2 ... Operation history database, 6 ... Information system LAN, DESCRIPTION OF SYMBOLS 7 ... Web server, 7-1 ... CPU, 7-2 ... RAM, 7-3 ... ROM, 7-4, 7-5 ... Interface, 8 ... PHS control device, 9 ... Portable terminal (PDA), 9-7 Display, 10 Card-type PHS telephone, TB Operation authority table, G1 Login screen, 200 Plant management system

Claims (3)

In a plant management system in which a Web server, an operator server, and a mobile terminal are connected by wired or wireless communication,
The mobile terminal is a Web client browser, and includes means for logging in with an ID registered with the operator and a temporary password when the operator logs in to the Web server,
When the Web server receives the ID and the temporary password, the Web server includes communication means for transferring them to the operator server and waiting for a reply from the operator server.
When the operator server receives the ID and the temporary password, the operator server extracts a true password corresponding to the ID in the storage medium, compares the passwords with a predetermined number of characters, and communication means for returning the comparison result to the Web server. Prepared,
A simple password input system, wherein the portable terminal displays the login result from a Web server. In the simple password input system according to claim 1,
The means for comparing with a predetermined number of characters in the operator server compares whether one or more character strings of the temporary password match one or more character strings starting from an arbitrary position among the character strings of the true password. A simple password input system. In the simple password input system according to claim 1,
A simple password input system comprising means for displaying a drop-down menu on a terminal screen and selecting from a plurality of candidate character strings when the portable terminal inputs a temporary password.

Images