Control device, control system, and management method
AssigneeOMRON Corporation
InventorHitoshi Kataoka
Life of this patent
Estimating the term…
Abstract
A control device can modify a first user program and first setting information in the storage unit executed by a control engine respectively using a second user program and second setting information received by the control device. A security engine of the control device verifies identity between the first user program and the second user program, evaluates the validity of setting indicated by the second setting information, and permits or prohibits performance of the above modification based on such a verification result and the evaluation.
Claims13
A control device comprising:
- a storage device configured to store a first user program for control of a target and first setting information indicating a setting for the control;
- control processing circuitry configured to at least:
- receive a second user program for the control of the target and second setting information indicating the setting for the control;
- modify the first user program and the first setting information of the storage device respectively using the second user program and the second setting information;
- execute the first user program using the first setting information;
- and
- security processing circuitry configured to manage security of the first setting information and the first user program, the security processing circuitry being configured to at least:
- verify whether or not the first user program and the second user program satisfy program identity;
- evaluate validity of the setting indicated by the second setting information;
- and
- permit or prohibit performance of the modifying of the control processing circuitry based on a verification result and the validity that is evaluated,
- wherein the security processing circuitry permits the modification of the first user program using the second user program when the verification result indicates that the program identity is not satisfied.
A control system comprising a plurality of control devices connected to a network, each control device comprising:
- a storage device configured to store a first user program for control of a target and first setting information indicating a setting for the control;
- control processing circuitry configured to at least:
- a receive a second user program for the control of the target and second setting information indicating the setting for the control;
- modify the first user program and the first setting information of the storage device respectively using the second user program and the second setting information;
- and
- execute the first user program using the first setting information,
- one control device of the plurality of control devices further comprising security processing circuitry configured to manage security of the first setting information and the first user program for each of the plurality of control devices, the security processing circuitry configured to at least:
- verify whether or not the first user program and the second user program satisfy program identity for each control device;
- evaluate validity of the setting indicated by the second setting information for each control device;
- and
- permit or prohibit a performance of the modification of by the each control device, based on a verification result and the validity that is evaluated,
- wherein the security processing circuitry permits the modification of the first user program using the second user program when the verification result indicates that the program identity is not satisfied.
A management method for managing security of a control device, the control device including:
- a storage device configured to store a first user program for control of a target and first setting information indicating a setting for the control;
- processing circuitry configured to at least:
- a receive a second user program for the control of the target and second setting information indicating a setting for the control;
- and
- execute the first user program using the first setting information,
- the management method comprising:
- verifying whether or not the first user program and the second user program satisfy program identity;
- evaluating validity of the setting indicated by the second setting information;
- and
- determining whether or not the control device is caused to permit to perform modifying processing for modifying the first user program and the first setting information of the storage device respectively using the second user program and the second setting information based on a verification result in the verifying and an evaluation in the evaluating,
- wherein the management method permits the control device to modify the first user program using the second user program when the verification result indicates that the program identity is not satisfied.
Dependencies are inferred from the claim text.