JP2005050184A - Code alteration detection device, code alteration detection program, and facility lending system using them - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide means for detecting and notifying modification of a program code operating on a process computer.
A basic system including a code alteration detection device includes a code alteration detection device, a process computer, and an electrical equipment, and the code alteration detection device, the process computer, and the process computer and electrical equipment. Are connected via a predetermined interface. The code alteration detection device 1 is a device that detects alteration of the control means 22 (program code) of the process computer 2. The code modification device detection device 1 includes an input / output control unit 11, a summary value calculation unit 12, a summary value comparison unit 13, a calculation range storage unit 14, a reference summary value storage unit 15, and a notification unit 16. The process computer 2 includes input / output control means 21, control means 22, and control information 23.
[Selection] Figure 1

Description

  The present invention relates to a code modification detection device that detects modification of a program code of a process computer that monitors and controls electrical equipment, a code modification detection program, and a facility lending system using them.

Manufacturers who manufacture and sell raw materials, semi-finished products, products, etc. often introduce production facilities in factories to produce production that matches the order volume or predict production that demand is predicted. Such production facilities are generally large and expensive, and once introduced, the purchase cost becomes a fixed cost and greatly affects the unit price of the product. For example, when an expensive production facility is introduced, but the order volume is small, the ratio of fixed costs to the total sales becomes large, which may squeeze profits.
In order to cope with this, it is considered to lend production equipment (for example, refer to Patent Document 1). Here, the production facilities to be rented are new production facilities for new production lines, new production facilities when it is better to make additional investment than the previous capital investment, and production volume suddenly Production facilities, etc. that match the increased amount. In the example of patent document 1, the method of lending a required number of machine tools according to a manufacturer's production plan etc. is disclosed. When lending production facilities, manufacturers need to pay appropriate lending charges to lending companies, but the calculation of these charges is mainly performed by a process computer that monitors and controls lending production facilities. Yes.
JP 2002-123768 A (paragraphs [0037], [0056], [0067], FIG. 6)

  However, the environment in which the production facility operates is often a harsh environment in which the temperature is extremely high, such as a steel rolling facility, or vibration or electromagnetic waves are generated. Although the program code that operates in the process computer that monitors and controls the production equipment that operates in such an environment is given protection, abnormal data input due to malfunction of the sensor provided in the production equipment or physical There is a problem that there is a possibility of modification depending on the influence. Further, it cannot be said that there is no modification of the program code due to the operator's intention or negligence. If the program code that runs on the process computer is altered, it will interfere with the monitoring and control of the production equipment, and the billing fee will not be calculated correctly, leading to a connection between the manufacturer and the lender. There is also a risk that the contractual relationship concerning equipment lending will crack.

  In view of the above problems, an object of the present invention is to provide means for detecting and notifying modification of a program code operating on a process computer.

In the present invention that solves the above-mentioned problems, the code alteration detection device is connected to and stored in a calculation range storage unit that stores a calculation range that is a target range of program code of a process computer that calculates a summary value. Input / output control means for inputting the program code of the calculation range, summary value calculation means for calculating the summary value of the input program code, reference summary value storage means for storing the calculated summary value as a reference summary value, and input / output Based on the program code newly input by the control means, the summary value comparison means for comparing the summary value calculated by the summary value calculation means and the stored reference summary value, and when the comparison result is inconsistent, Notification means for notifying that a mismatch of values has occurred. This code alteration detection device is externally connected to or built in the process computer. In addition, a series of processes for inputting the program code of the calculation range from the process computer and comparing the summary values do not need to be performed continuously, but intermittently after a predetermined time in order to reduce the load on the process computer. Can be done.
The code modification detection program is assumed to operate in the process computer, but its function is the same as that of the code modification detection apparatus. The facility lending system using the code modification detection device or the code modification detection program checks the modification of the accounting fee calculation means as the program code of the process computer.
The “program code” of the process computer in the scope of claims corresponds to “control means” in the embodiments described later.

  According to the present invention, when a modification of a program code operating on a process computer is checked and a modification of the program code is detected as a result of the check, notification can be made by an arbitrary method. Further, the check operation can be performed without applying a load to the process computer. In particular, in the equipment lending system, it is possible to trust the calculated charging fee by confirming that there is no modification of the charging fee calculation means.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

≪Basic system configuration and operation≫
First, the configuration and operation of a basic system including a code alteration detection device according to an embodiment of the present invention will be described.
As shown in FIG. 1, the basic system is composed of a code alteration detection device 1, a process computer 2, and an electrical equipment 3. The code alteration detection device 1, the process computer 2, and the process computer 2 and the electrical equipment 3 are respectively predetermined. It is connected with the interface. Examples of the connection form between the code alteration detection apparatus 1 and the process computer 2 include a serial interface typified by RS-232C, a bus interface such as a backplane bus, and a logical interface (such as a function call) by software. . Examples of the connection form between the process computer 2 and the electrical equipment 3 include a field LAN (Local Area Network). In addition, the part shown with a broken line in FIG. 1 is not mentioned here, but is demonstrated separately.

The code alteration detection device 1 is a device that detects alteration of the control means 22 (program code) of the process computer 2. The code modification device detection device 1 includes an input / output control unit 11, a summary value calculation unit 12, a summary value comparison unit 13, a calculation range storage unit 14, a reference summary value storage unit 15, and a notification unit 16. The input / output control means 11 is connected to the process computer 2 and performs data input / output control according to the connection interface. Here, in particular, the control means 22 of the process computer 2 is input. The summary value calculation unit 12 calculates a summary value from the control unit 22 input by the input / output control unit 11. Here, the summary value is data compressed to a predetermined length (for example, 128 bits), and is based on a hash function such as SHA-1 (Secure Hash Algorithm 1) or MD5 (Message Digest 5) or a sum value. It is calculated. As the summary value calculation means 12, those data compression logics may be used alone or a plurality of logics may be used. The summary value comparison means 13 compares the reference summary value calculated in advance and stored in the reference summary value storage means 15 with the summary value calculated at that time. When the comparison result is mismatched, a trigger for mismatch notification is given to the notification means 16. The summary value calculation means 12 and the summary value comparison means 13 are realized by a CPU (Central Processing Unit) executing a predetermined program.
The calculation range storage unit 14 is a memory that stores a range of the control unit 22 that is a target for which the summary value calculation unit 12 calculates a summary value. As shown in FIG. 2, the program code is normally stored continuously in the computer memory. As shown in FIG. 3, the calculation range storage unit 14 stores the range of the control unit 22 specified by a memory address range such as 0x0000 to 0x00FF, for example. In this way, by dividing the calculation range of the summary value, it is possible to perform a long program code modification check in small increments and reduce the processing amount per modification check. As a result, the load on the process computer 2 can be reduced. The reference summary value storage unit 15 is a memory that stores the summary value calculated by the summary value calculation unit 12 as a reference summary value. As shown in FIG. 3, the reference summary value storage unit 15 stores a reference summary value corresponding to each calculation range stored in the calculation range storage unit 14. The storage format is a table format as shown in FIG. 3, and the calculation range and the reference summary value may be stored so as to be continuous on the memory address, or the calculation range and the reference summary value are separately provided. They may be stored and associated with each other. The calculation range of the summary value is not necessarily divided, and the entire range of the control unit 22 may be checked by one alteration check by designating the entire range of the control unit 22.
The notification unit 16 receives a trigger from the summary value comparison unit 13 and notifies the mismatch of the summary values. When notifying an operator in the vicinity of the process computer, the notification is made by displaying an LED (Light Emitting Diode), a lamp, a panel, or a warning sound. Further, when notifying a party at a remote location, a message packet or mail is transmitted via a network to a server or PC (Personal Computer) that can be used by the party.

  The process computer 2 includes input / output control means 21, control means 22, and control information 23. The input / output control means 21 is connected to the code alteration detection device 1 and performs data input / output control according to the connection interface. Here, in particular, the control means 22 is output to the code alteration detection device 1. The control means 22 is means for monitoring and controlling the electrical equipment 3 connected to the electrical equipment 3, and here, in particular, means program code describing a procedure for realizing the means. The control information 23 is information necessary for the operation of the control unit 22, output information that is a result of the operation of the control unit 22, and the like. The control information 23 may be stored in a data area other than the code area in the memory in which the program is stored, or may be stored in a memory different from the program memory.

Next, the operation of the basic system will be described along the flowchart shown in FIG. Here, the operation of the code alteration detection device 1 will be mainly described.
Steps S <b> 201 to S <b> 205 are processes performed as part of the initial setting of the code alteration detection device 1. First, the calculation range which is the target range for calculating the summary value of the control means 22 of the process computer 2 is determined, and the determined calculation range is stored in the calculation range storage means 14 (step S201). There are two ways to determine the calculation range. One is a method in which an operator determines a calculation range and inputs the calculation range to the code alteration detection apparatus 1 one by one. Specifically, for example, the PC is connected to the code alteration detection device 1 via RS-232C, and the calculation range designated on the PC is stored in the calculation range storage unit 14. The other is to keep the default value of the calculation range. In general, in a process computer, a memory address in which a program code is stored is determined for each model. Therefore, a default value of a calculation range corresponding to a model of the process computer 2 to which the code alteration detection device 1 is connected is set as a calculation range. The data is stored in the storage unit 14. The calculation range stored in the calculation range storage unit 14 does not need to cover the entire control unit 22, and may be a specific program code range.
Next, the summary value calculation unit 12 reads one calculation range from the calculation range storage unit 14 (step S202). At this time, it is assumed that the calculation ranges are read one by one in the order of addresses using a logical pointer or the like. And the control means 22 corresponding to the read calculation range is input (step S203). Specifically, the summary value calculation unit 12 outputs a calculation range to the input / output control unit 21 of the process computer 2 via the input / output control unit 11 and a predetermined interface. The input / output control unit 21 outputs the input calculation range control unit 22 to the summary value calculation unit 12 via the predetermined interface and the input / output control unit 11. Thereby, the summary value calculation means 12 can input the control means 22 corresponding to the calculation range. Subsequently, the summary value calculation unit 12 calculates a summary value from the input control unit 22, and stores the calculated summary value in the reference summary value storage unit 15 (step S204). At this time, the data is stored in a predetermined memory address corresponding to the calculation range. Thereafter, it is checked whether there is a calculation range stored in the calculation range storage unit 14 for which the summary value of the control unit 22 has not been calculated (step S205). If there is a range for which a summary value has not been calculated (Yes in step S205), the process returns to step S202 and the next calculation range is processed. If there is no range in which the summary value has not been calculated (No in step S205), that is, when all the summary values in the calculation range stored in the calculation range storage unit 14 have been calculated, the code modification detection device 1 performs initial processing regarding the summary value. Since the setting is complete, the process is temporarily interrupted.

  Steps S206 to S210 are modification check processing of the control means 22 of the process computer 2 that is performed periodically or as needed. First, the summary value calculation unit 12 extracts one calculation range from the calculation range storage unit 14 (step S206). At this time, the calculation range may be extracted in the order of addresses using a logical pointer or an arbitrary calculation range may be extracted. Next, the control means 22 corresponding to the extracted calculation range is input (step S207). The specific procedure is the same as step S203. Then, the summary value calculation unit 12 calculates a summary value from the input control unit 22 (step S208). The summary value comparison unit 13 compares the calculated summary value with the reference summary value corresponding to the calculation range among the reference summary values stored in step S204 (step S209). If the two summary values match (Yes in step S209), the summary value comparison unit 13 gives the summary value calculation unit 12 a trigger for the next check, and the summary value calculation unit 12 that has received the trigger has another calculation range. Is checked (step S206). At this time, in order to reduce the load on the original processing (monitoring and control of the electrical equipment 3) of the process computer 2 due to the operation of the input / output control means 21, after waiting for a predetermined time to elapse, another calculation range Can be checked. If the two summary values do not match (No in step S209), the summary value comparison unit 13 gives a trigger for mismatch notification to the notification unit 16, and the notification unit 16 that has received the trigger notifies the summary value mismatch ( Step S210).

<< First Embodiment >>
Next, a first embodiment of the present invention using the basic system will be described. FIG. 5 is a diagram showing a configuration of the process computer according to the first embodiment of the present invention. As shown in FIG. 5, the first embodiment is an example in which a code alteration detection device is built in a process computer. The process computer 2 includes a code alteration detection device 1, a CPU module 28, an IO (Input Output) module 29, and a backplane bus 30. The code modification detection device 1, the CPU module 28 and the IO module 29 are connected by a backplane bus 30, and between the code modification detection device 1 and the CPU module 28, and between the CPU module 28 and the IO module 29, Data is input / output via the backplane bus 30. Compared with FIG. 1, the code alteration detection device 1 includes a microprocessor 17, and the summary value calculation means 12, summary value comparison means 13, calculation range storage means 14, and reference summary value storage means 15 include: It is mounted on the memory 18 together with an RTOS (Real Time Operating System) 19. The CPU module 28 corresponds to the process computer 2 of FIG. 1, but in comparison with that, a microprocessor 25 is added, and control means 22 and control information 23 are mounted in the memory 26 together with the RTOS 27. The IO module 29 is connected to the electrical equipment 3 and inputs / outputs data to / from the electrical equipment 3. Since the operation of the code alteration detection device 1 in FIG. 5 is the same as that in the flowchart in FIG. 4, description thereof is omitted.

<< Second Embodiment >>
Next, a second embodiment of the present invention using the basic system will be described. FIG. 6 is a diagram showing a configuration of a process computer, a program server, and the periphery thereof according to the second embodiment of the present invention. As shown in FIG. 6, the second embodiment is an example in which a code alteration detection program operates inside a process computer. The process computer 2 and the program server 4 are connected via a network 6. The process computer 2 includes a code modification detection program 5, control means 22, control information 23, and a network IF (InterFace, interface) 31. The code alteration detection program 5 includes a summary value calculation procedure 52, a summary value comparison procedure 53, calculation range data 54, reference summary value data 55, and a notification procedure 56. These components correspond to the summary value calculation means 12, summary value comparison means 13, calculation range storage means 14, reference summary value storage means 15 and notification means 16 in the basic system of FIG. Therefore, each procedure is a program code and clearly indicates that each data is data in a memory in which the program is stored. The program server 4 holds a code alteration detection program 5. Note that portions indicated by broken lines in FIG. 6 are not described here and will be described separately.

  The operation of the code alteration detection program according to the second embodiment of the present invention will be described along the flowchart of FIG. Steps S301 to S303 are for initial setting of the code alteration detection program 5 stored in the program server 4. First, the process computer 2 downloads the code alteration detection program 5 from the program server 4 via the network 6 and the network IF 31 (step S301). Then, the downloaded code modification detection program 5 is initialized (step S302). Since this initial setting is to set the calculation range data 54 and the reference summary value data 55 corresponding to the calculation range data 54 in the same manner as steps S201 to S205 in FIG. 4, detailed description thereof will be omitted. Subsequently, the process computer 2 uploads the code modification detection program 5 that has been initialized to the program server 4 via the network IF 31 and the network 6 (step S303). As described above, the code modification detection program 5 that is initially set is stored in the program server 4.

  Steps S304 to S309 are for checking the alteration of the control means 22 of the process computer 2 by using the code alteration detection program 5 which is initialized. First, the process computer 2 downloads and starts the code alteration detection program 5 from the program server 4 via the network 6 and the network IF 31 (step S304). As a result, the code alteration detection program 5 starts its check operation. First, in the code modification detection program 5, it is determined whether the summary value calculation procedure 52 has checked the entire range of the calculation range data 54 (step S305). Since the entire range has not been checked yet (No in step S305), the calculation range is extracted and the summary value is calculated (step S306). Since this process is the same as steps S206 to S208 in FIG. 4, a detailed description is omitted. However, when the calculation range is extracted from the calculation range data 54, it may be in the order of addresses or in any order. However, when extraction is performed the same number of times as the number of calculation ranges, the calculation range is calculated. The entire range of the range data 54 is extracted. Then, the summary value comparison procedure 53 compares the summary value calculated by the summary value calculation procedure 52 with the summary value of the reference summary value data 55 corresponding to the summary value (step S307). If the summary values match (Yes in step S307), the process returns to step S305, and the summary value calculation procedure 52 determines again whether or not the entire range of the calculation range data 54 has been checked. If the summary values do not match (No in step S307), the summary value comparison procedure 53 gives the notification procedure 56 a trigger for notifying the summary value mismatch, and the notification procedure 56 that received the trigger receives the summary value mismatch. Is notified (step S308). Specifically, the notification similar to the notification means 16 of FIG. 1 is performed. When the entire range of the calculation range data 54 is checked in step S305 (Yes in step S305), the code modification detection program 5 stops the checking operation, and the process computer 2 that has detected the code modification detection program 5 Is discarded (step S309). As an operation of “discarding”, for example, it is conceivable to zero-clear the code modification detection program 5 downloaded onto the memory. Then, the process computer 2 downloads and activates the code alteration detection program 5 again (step S304). This is not to continue using the same code modification detection program 5, but to download the code modification detection program 5 every time the control means 22 in the entire calculation range of the calculation range data 54 is checked. 5 Prevents modification of itself.

<< Third Embodiment >>
A third embodiment of the present invention using the basic system will be described. FIG. 6 is a block diagram according to the second embodiment of the present invention, but includes a block diagram including ID 57 and code modification detection program reference summary value 58 indicated by broken lines according to the third embodiment. And In the third embodiment, the check of the code modification detection program 5 itself is strengthened by using the ID 57 and the code modification detection program reference summary value 58. The ID 57 is a number added to the code modification detection program 5 every time the code modification detection program 5 is downloaded from the program server 4 to the process computer 2, and a different number is generated each time the code modification detection program 5 is downloaded. For example, a different number may be generated each time by generating a random number, and the generated number may be added to the code alteration detection program 5 as ID57. The code modification detection program reference summary value 58 stores a summary value obtained by calculating the code modification detection program 5 including the ID 57 by a predetermined compression logic as a reference summary value. Here, it is assumed that the program server 4 has the same program code as the summary value calculation procedure 52 and can calculate the summary value of the code modification detection program 5.

Compared with the second embodiment, the third embodiment processes ID57 and code modification detection program reference summary value 58 before and after “download code modification detection program” in step S304 of FIG. Is added. The processing will be described along the flowchart of FIG. First, the process computer 2 requests the program server 4 to download the code alteration detection program 5 (step S401). At this time, the program server 4 adds ID 57 to the code alteration detection program 5 (step S402), calculates a summary value from the code alteration detection program 5 including the added ID 57, and obtains a code alteration detection program reference summary value 58. (Step S403). Thereafter, the code alteration detection program 5 is downloaded to the process computer 2 (step S404). The process computer 2 calculates a summary value from the downloaded code modification detection program 5 (step S405), and uploads the calculated summary value to the program server 4 (step S406). The program server 4 compares the uploaded summary value with the stored code modification detection program reference summary value 58 (step S407). If the summary values match (Yes in step S407), the download process of the code modification detection program 5 in the program server 4 ends. If the summary values do not match (No in step S407), the program server 4 notifies the summary value mismatch (step S408). Specifically, the same notification as that of the notification unit 16 in FIG. 1 is performed.
Thus, each time the code modification detection program 5 is downloaded for checking by the control means 22, a different ID 57 is added, and the summary value of the entire code modification detection program 5 including the added ID 57 is processed by the process computer 2 By comparing and checking the value calculated in the above and the value calculated by the program server 4, the code modification check of the code modification detection program 5 itself can be strengthened.

<< Fourth Embodiment >>
A fourth embodiment of the present invention in which the basic system is applied to an equipment lending system will be described. FIG. 9 is a diagram showing a configuration of an equipment lending system according to the fourth embodiment of the present invention. In the equipment lending system, a steel company 7 as a manufacturer introduces at least a part of a rolling equipment 72 that is a production equipment provided by a production equipment manufacturer (also referred to as a supplier) 9, and the rolling equipment 72 of the rolling equipment 72 is in accordance with the operation status. This is a system that pays a usage fee (billing fee) for the portion of the loan. The code modification detection device 1 is attached to the lent rolling device 72 by a service company 8 that performs a service for checking the program code.
As shown in FIG. 9, the equipment lending system is configured by connecting a manufacturer server 71 of a steel company 7, a service company server 81 of a service company 8, and a manufacturer server 91 of a production equipment manufacturer 9 via a network 6. The In the steel company 7, the manufacturer server 71 is connected to the rolling device 72 via the information LAN 79a. The rolling device 72 is a device that processes the steel sheet W sent from the previous process to a predetermined thickness and winds it in a coil shape. In the rolling device 72, the code alteration detection device 1, the process computer 2, and a control computer 73 are connected via an information LAN 79a.

The code alteration detection device 1 has a function of checking the charging fee calculation means 22a of the process computer 2.
The process computer 2 is connected to the field LAN 79b via a PIO (Process Input Output) station 74, and monitors and controls the operation of the mill 75 that forms the steel plate W. It has a function of grasping the operation status of the mill 75 from the data measured by the total 76, the plate speed meter 77, and the plate width meter 78, and thereby calculating the charging fee of the lent rolling device 72. The operation status of the mill 75 can be grasped by, for example, the production amount, and the production amount is obtained as a value obtained by multiplying the plate thickness, the plate width, the plate speed, and the unit time of the steel plate W. Can do. The process computer 2 stores and accumulates information necessary for the charging fee, a transmission / reception unit 21a for transmitting / receiving data to / from other devices and servers via the information LAN 79a, a charging fee calculation unit 22a for calculating a charging fee. Accounting information storage means 23a.
The control computer 73 instructs the process computer 2 to monitor and control the operation of the mill 75 and to calculate a charging fee. Note that portions indicated by broken lines in FIG. 9 are not described here and will be described separately.

The operation of the facility lending system according to the fourth embodiment of the present invention will be described along the flowchart of FIG. Here, the operation of the facility lending system will be described as a facility lending business procedure performed by the steel company 7, the service company 8, and the production facility manufacturer 9. As an outline of the equipment lending business, the service company 8 rents the code alteration detection device 1 to the production equipment manufacturer 9, and the production equipment manufacturer 9 installs the equipment (rolling device 72) on which the code alteration detection device 1 is installed in steel. Loans to company 7. It is assumed that the steel company 7 operates the business by producing the steel plate W using the rolling device 72, selling it to the product purchasing company, and collecting the consideration. Details will be described below with reference to FIG.
First, a loan contract for the code alteration detection device 1 is concluded between the service company 8 and the production equipment manufacturer 9 (step S501). According to the lending contract, the service company 8 lends the code modification detection device 1 to the production equipment manufacturer 9 (step S502), and the production equipment manufacturer 9 pays the service company 8 in a lump sum (step S503). Next, an equipment loan contract is concluded between the steel company 7 and the production equipment manufacturer 9 (step S504). In accordance with the loan agreement, the production equipment manufacturer 9 lends the equipment equipped with the code alteration detection device 1 to the steel company 7 (step S505), and the steel company 7 pays the production equipment manufacturer 9 in a lump sum (step S506). ). As a result, a loan agreement between the steel company 7, the service company 8, and the production equipment manufacturer 9 is established.

  Now, a charging fee payment procedure performed every predetermined period, for example, every month will be described. First, the steel company 7 informs the production facility manufacturer 9 of the billing fee calculated by the billing fee calculation means 22a of the process computer 2 (step S507). At the same time, the service company 8 receives the modification confirmation result of the charging fee calculation means 22a from the code modification detection device 1, and notifies the received modification confirmation result to the production equipment manufacturer 9 and the steel company 7 (step). S508, S509). The steel company 7 and the production equipment manufacturer 9 that have received the notification of the modification confirmation result of the charging fee calculation means 22a confirm that there is no modification in the charging fee calculation means 22a and agree (step S510). Thereafter, the production equipment manufacturer 9 issues an invoice based on the billing fee notified in step S507 to the steel company 7 (step S511). The steel company 7 pays the production equipment manufacturer 9 according to the issued bill (step S512). Further, the production equipment manufacturer 9 pays a part of the amount paid from the steel company 7 to the service company 8 (step S513). Such a procedure is repeated until the contract period expires.

<< Fifth Embodiment >>
A fifth embodiment of the present invention in which the basic system is applied to an equipment lending system will be described. FIG. 9 is a configuration diagram of the equipment lending system according to the fourth embodiment of the present invention. The system including the brokerage company 10 and the brokerage company server 101 indicated by the broken lines includes the fifth embodiment of the present invention. It is set as the block diagram of the equipment loan system which concerns on a form. The intermediary company 10 lends the code alteration detection device 1 and equipment (rolling device 72) and mediates payment of the charging fee between the service company 8 and the production equipment manufacturer 9 and the steel company 7.
The operation of the facility lending system according to the fifth embodiment of the present invention will be described along the flowchart of FIG. Here, the operation of the equipment lending system will be described as a procedure of equipment lending business performed by four parties of the steel company 7, the brokerage company 10, the service company 8, and the production equipment manufacturer 9. It is assumed that the steel company 7 operates the business by producing the steel plate W using the rolling device 72, selling it to the product purchasing company, and collecting the consideration. Details will be described below with reference to FIG.
First, a loan agreement for the code modification detection device 1 is concluded between the brokerage company 10 and the service company 8 (step S601), and the service company 8 lends the code modification detection device 1 to the brokerage company 10 (step S602). ) The brokerage company 10 makes a lump sum payment to the service company 8 (step S603). Next, a loan contract for the code modification detection apparatus 1 is concluded between the steel company 7 and the brokerage company 10 (step S604), and the brokerage company 10 lends the code modification detection apparatus 1 to the steel company 7 (step S604). S605). Furthermore, equipment lending contracts are concluded between the steel company 7 and the brokerage company 10, and between the steel company 7 and the production equipment manufacturer 9 (step S606). The production equipment manufacturer 9 lends the equipment to the steel company 7 (step S607), and the brokerage company 10 pays the production equipment manufacturer 9 in a lump sum (step S608). As a result, a lending contract between the steel company 7, the brokerage company 10, the service company 8, and the production equipment manufacturer 9 is established.

  Now, a charging fee payment procedure performed every predetermined period, for example, every month will be described. First, the steel company 7 informs the brokerage company 10 of the billing fee calculated by the billing fee calculation means 22a of the process computer 2 (step S609). At the same time, the service company 8 receives the modification confirmation result of the charging fee calculation means 22a from the code modification detection apparatus 1, and notifies the broker company 10 and the steel company 7 of the received modification confirmation result (step S610). , S611). The steel company 7 and the brokerage company 10 that have received the notification of the modification confirmation result of the charging fee calculation means 22a confirm that there is no modification in the charging fee calculation means 22a and agree (step S612). Thereafter, the brokerage company 10 issues an invoice based on the billing fee notified in step S609 to the steel company 7 (step S613). The steel company 7 pays the brokerage company 10 according to the issued bill (step S614). The brokerage company 10 makes a payment report (payment report) and account report (reports on the operation status of the equipment and the billing fee based on it) to the production equipment manufacturer 9 (step S615), and the amount of money paid by the steel company 7 Pay the department to the service company 8 (step S616). Such a procedure is repeated until the contract period expires.

<< Sixth Embodiment >>
A validity checking unit according to the sixth embodiment of the present invention will be described. Up to now, the basic system and the first to fifth embodiments have been described. Both of them check the alteration according to the summary value of the control means 22 of the process computer 2. On the other hand, the validity checking means checks the validity of the measurement data and the numerical value calculated based on the measurement data, and suggests the possibility of modification of the control means 22 when the result is NG (No Good). To do.
FIG. 1 is a configuration diagram of the basic system according to the embodiment of the present invention. The basic system according to the sixth embodiment of the present invention includes validity checking means 110 and measurement data indicated by broken lines. The system configuration diagram. The validity check means 110 is built in the code alteration detection device 1 and is measured data in the control information 23 via the input / output control means 11 of the code alteration detection device 1 and the input / output control means 21 of the process computer 2. Enter. The validity of the input measurement data is checked, and when the result is NG, a trigger for notifying measurement data abnormality is given to the notification means 16. As a method of validity check, it can be considered to check whether or not the measurement data is within a predetermined upper limit value and lower limit value range. The upper limit value and the lower limit value of the measurement data are values derived from the physical restrictions of the electrical equipment 3 and the properties of the material to be handled. For example, if the electrical equipment 3 is a rolling device, there are an upper limit value and a lower limit value obtained from the specifications and characteristics of the mill in physical quantities such as plate speed and plate thickness. Further, numerical values calculated from these physical quantities also have upper and lower limits. For example, the charging fee of the lent rolling apparatus can be calculated by the following equation 1. Here, Σ means summing (plate thickness × plate speed × plate width × unit time) for a target period (for example, one month) of the billing fee.

    Billing fee = α x Σ (plate thickness x plate speed x plate width x unit time) (α: billing coefficient)

  At this time, the upper limit value and the lower limit value of the charging fee are determined by the upper limit value and the lower limit value of the plate thickness, the plate speed, and the plate width. The measurement data may be the data itself input from the electrical equipment 3, or the input data is accumulated and the difference between the previous accumulated data and the current accumulated data is used. Also good.

  Next, an application example of validity checking means will be described. FIG. 9 is a block diagram of the equipment lending system according to the fourth embodiment of the present invention. The system including the validity checking means 110 and the wattmeter 111 indicated by broken lines is the sixth embodiment of the present invention. It is set as the block diagram of the equipment lending system which concerns on a form. The wattmeter 111 is attached to the mill 75, measures the amount of power consumed by the mill 75, and outputs the power amount data to the process computer 2 via the field LAN 79b and the PIO station 74. The process computer 2 stores and stores the input electric energy data in the charging information storage unit 23a via the charging fee calculation unit 22a. The validity checking unit 110 is configured to store the bill 75 calculated by the billing fee calculation unit 22a and the bill 75 stored in the billing information storage unit 23a via the information LAN 79a and the transmission / reception unit 21a for a predetermined period, for example, every month. Enter the power consumption and check the validity of the billing fee. For example, it is checked whether or not the following expression 2 holds.

    β × power consumption amount during billing target period−ε ≦ billing fee ≦ β × power consumption amount during billing target period + ε (β: power amount / billing fee conversion coefficient, ε: allowable deviation) Equation 2

  Equation 2 shows that the billing fee is in the range of ± ε centering on the power consumption of β × chargeable period, in other words, the charge rate and β × chargeable period This indicates that the difference from the power consumption is within ε. This check is to check the validity of the calculated charging fee by comparing the charging fee calculated by the charging fee calculating means 22a with the charging fee estimated from the power consumption of the mill 75. If the check result is NG, the validity checking unit 110 gives a trigger to notify the notifying unit (not shown) of “abnormal charging fee”. In addition to the power consumption of the mill 75, the data for estimating the charging fee may be the operation rate of the mill 75, the amount of base material used, and the like.

<< Other embodiments >>
An example of the preferred embodiment of the present invention has been described above, but the present invention is not limited to the above-described embodiment, and can be appropriately changed without departing from the spirit of the present invention. The following embodiments are conceivable.
(1) As a code modification notification method other than that described in the above embodiment, normally a signal is always output, and when a code modification is detected, the output level of the signal is changed or set to 0 It is possible. Specifically, it is conceivable that the electrical equipment 3 is stopped or cannot be activated by controlling the signal.
(2) Although the validity checking means 110 is described as being built in the code alteration detection device 1 in the above embodiment, for example, it may be built in the process computer 2. At that time, it may be realized as a validity check procedure (program code) operating on the code alteration detection program 5.
(3) In the above embodiment, the check by the control means 22 by the code alteration detection device 1 and the check by the validity check means 110 are described independently. For example, when the check result by the validity check means 110 is NG In addition, the check operation of the control means 22 by the code alteration detection device 1 may be activated.

It is a figure which shows the structure of the basic system containing the code | cord modification detection apparatus which concerns on embodiment of this invention. However, the sixth embodiment is included. It is a figure of the memory structural example of the control means (program code) divided | segmented by the calculation range memory | storage means which concerns on embodiment of this invention. It is a block diagram of the calculation range storage means and reference | standard summary value storage means which concern on embodiment of this invention. It is a flowchart which shows operation | movement of the code | cord | chord modification detection apparatus which concerns on embodiment of this invention. It is a figure which shows the structure of the process computer which concerns on the 1st Embodiment of this invention. It is a figure which shows the structure of the process computer which concerns on the 2nd Embodiment of this invention, a program server, and its periphery. However, the third embodiment is included. It is a flowchart which shows operation | movement of the code | cord modification detection program which concerns on the 2nd Embodiment of this invention. It is a flowchart which shows operation | movement of the code | cord modification detection program which concerns on the 3rd Embodiment of this invention. It is a block diagram of the equipment lending system which detects and notifies the modification of the accounting fee calculation means according to the fourth embodiment of the present invention. However, the fifth and sixth embodiments are included. It is a flowchart which shows the whole process of the equipment loan system which concerns on the 4th Embodiment of this invention. It is a flowchart which shows the whole process of the equipment loan system which concerns on the 5th Embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Code alteration detection apparatus 2 Process computer 3 Electric equipment 11 Input / output control means 12 Summary value calculation means 13 Summary value comparison means 14 Calculation range storage means 15 Reference summary value storage means 16 Notification means 21 Input / output control means 22 Control means 23 Control information

Claims (8)

A code alteration detection device that is connected to or built in a process computer that monitors and controls electrical equipment, and detects alterations in the program code of the process computer,
Calculation range storage means for storing a calculation range that is a target range of the program code for calculating a summary value;
Input / output control means for connecting to the process computer and inputting the program code of the stored calculation range;
Summary value calculation means for calculating a summary value of the input program code;
Reference summary value storage means for storing the calculated summary value as a reference summary value;
Summary value comparison means for comparing the summary value calculated by the summary value calculation means and the stored reference summary value based on the program code newly input by the input / output control means;
A notification means for notifying that a mismatch of the summary values has occurred when the comparison result is a mismatch;
A code alteration detection device comprising:   Via the input / output means, input data measured by the electrical equipment or numerical values calculated from the data by the process computer, and whether the input data or numerical values are within a predetermined upper limit value and lower limit value range The code alteration detection according to claim 1, further comprising validity checking means for checking whether or not the data or numerical value abnormality is triggered when the notification means is out of the range. apparatus. A code modification detection program for causing a process computer that monitors and controls electrical equipment to detect modification of a program code of the process computer,
In the process computer,
Calculation range data for storing a calculation range that is a target range of the program code for calculating a summary value;
A summary value calculation procedure for inputting a program code of the stored calculation range and calculating a summary value of the input program code;
Reference summary value data for storing the calculated summary value as a reference summary value;
The summary value calculation procedure includes a newly entered program code, a summary value comparison procedure for comparing the summary value calculated based on the input program code and the stored reference summary value;
A notification procedure for notifying that a mismatch of the summary values has occurred when the comparison result is a mismatch;
A code alteration detection program characterized by comprising: In the process computer,
Input the data measured by the electrical equipment or the numerical value calculated from the data by the process computer, check whether the input data or numerical value is within a predetermined upper limit value and lower limit value range, the range 4. The code alteration detection program according to claim 3, further comprising a validity check procedure for giving a trigger for notifying the abnormality of the data or the numerical value to the notification procedure when it is outside. The code modification detection program is
5. The method according to claim 3, wherein each time a summary value of program codes of all calculation ranges stored in the calculation range data is compared, the program code is downloaded again from the predetermined server to the process computer. Code modification detection program. The code modification detection program is
When re-downloading,
In the predetermined server, a summary value is calculated with a predetermined ID added, and the summary value and the summary value calculated in the process computer are compared, and when the comparison result is inconsistent, 6. The code modification detection program according to claim 5, wherein a summary value mismatch is notified. A facility lending system that makes it possible to confirm the validity of the billing fee of the lending facility using the code modification detection device according to claim 1 or 2,
The equipment lending system is at least:
Production facilities that a manufacturer or lender lends to customers;
A process computer that monitors and controls the production facility;
The code alteration detection apparatus for detecting alteration of the program code of the process computer;
Comprising
The process computer is provided with charging fee calculation means for inputting data indicating the operation status from the production facility and calculating a charging fee for the production facility lent from the input data.
The equipment modification system, wherein the code alteration detection device inputs the accounting fee calculation means as a program code of the process computer and detects an alteration of the inputted accounting fee calculation means. A facility lending system that makes it possible to confirm the validity of the billing fee of the lent facility using the code modification detection program according to any one of claims 3 to 6.
The equipment lending system is at least:
Production facilities that a manufacturer or lender lends to customers;
A process computer that monitors and controls the production facility;
The code alteration detection program for causing the process computer to detect alteration of the program code of the process computer;
Comprising
The process computer is provided with charging fee calculation means for inputting data indicating the operation status from the production facility and calculating a charging fee for the production facility lent from the input data.
The facility modification system, wherein the code alteration detection program causes the process computer to input the accounting fee calculation means as a program code of the process computer and detect an alteration of the inputted accounting fee calculation means.

Images