Support apparatus, non-transitory computer readable recording medium and setting method

A support apparatus includes: an obtaining part, which obtains status information respectively from one or a plurality of safety devices network-connected with a control apparatus; a selecting part, which selects the safety device to which device identification information is to be newly set based on the status information of each safety device; and a setting part, which determines and sets corresponding device identification information in accordance with an instruction from a user based on network identification information set for the network to which each safety device belongs and a network address of each safety device.

CROSS-REFERENCE TO RELATED APPLICATION

This application claims the priority of Japan patent application serial no. 2018-059967, filed on Mar. 27, 2018. The entirety of the above-mentioned patent application is hereby incorporated by reference herein and made a part of this specification.

BACKGROUND OF THE DISCLOSURE

Technical Field

The present disclosure relates to a support apparatus, a support program, and a setting method.

Related Art

Conventionally, in the field of FA (factory automation), a system in which a control apparatus and various devices such as a sensor, an actuator or the like are connected via a network is used. With the development of the ICT (Information and Communication Technology), application of more advanced communication technology is progressing.

For example, a network technology, which is managed and provided by the ODVA, Inc. whose headquarters are located in the U.S. and referred to as the CIP (Common Industrial Protocol), can be employed to implement communication between control apparatuses and between a control apparatus and any other device (see non-patent literature 1: ODVA, “The Common Industrial Protocol”, [online], [searched on Mar. 15, 2018], Internet <URL: https://www.odva.org/Technology-Standards/Common-Industrial-Protocol-CIP/Overview>).

In order to implement the communication which uses the aforementioned advanced communication technology, the control apparatus and/or the devices which are connected to the same network should be appropriately set respectively. On the other hand, multiple devices may be connected to the same network, and there is a problem that the setting operation is complicated and time-consuming.

SUMMARY

According to an example of this disclosure, a support apparatus capable of communicating with a control apparatus network-connected to one or a plurality of safety devices is provided. Each of the safety devices has a memory part for keeping device identification information that specifies the device itself. The support apparatus includes: an obtaining part, which refers, in each network, to a connection setting list that defines a network address of a safety device belonging to the network, and obtains status information respectively from the one or a plurality of safety devices network-connected to the control apparatus; a selecting part, which selects, based on the status information of each safety device, the safety device to which the device identification information is to be newly set among the one or a plurality of safety devices to which the status information is obtained; and a setting part, which determines and sets corresponding device identification information for each of the selected safety devices in accordance with an instruction from a user based on network identification information set for the network to which each safety device belongs and a network address of each safety device.

According to another example of this disclosure, a support program executed in a computer capable of communicating with a control apparatus network-connected to one or a plurality of safety devices is provided. Each of the safety devices has a memory part for keeping device identification information that specifies the device itself. The support program makes the computer execute: a step to refer, in each network, to a connection setting list that defines a network address of a safety device belonging to the network, and obtain status information respectively from the one or a plurality of safety devices network-connected to the control apparatus; a step to selects, based on the status information of each safety device, the safety device to which the device identification information is to be newly set among the one or a plurality of safety devices to which the status information is obtained; and a step to determine and set corresponding device identification information for each of the selected safety devices in accordance with an instruction from a user based on network identification information set for the network to which each safety device belongs and a network address of each safety device.

According to still another example of this disclosure, a setting method to one or a plurality of safety devices network-connected to a control apparatus is provided. Each of the safety devices has a memory part for keeping device identification information that specifies the device itself. The setting method includes: a step to refer, in each network, to a connection setting list that defines a network address of a safety device belonging to the network, and obtain status information respectively from the one or a plurality of safety devices network-connected to the control apparatus; a step to selects, based on the status information of each safety device, the safety device to which the device identification information is to be newly set among the one or a plurality of safety devices to which the status information is obtained; and a step to determine and set corresponding device identification information for each of the selected safety devices in accordance with an instruction from a user based on network identification information set for the network to which each safety device belongs and a network address of each safety device.

DESCRIPTION OF THE EMBODIMENTS

The present disclosure provides an approach by which required identification information can be easily set even when multiple safety devices are connected to the same network.

According to this disclosure, the support apparatus obtains the status information from each of the safety devices registered in the connection setting list, and selects the safety devices to which the device identification information is to be newly set based on the obtained status information. Then, the support apparatus sets the device identification information that corresponds to each of the selected safety devices for the selected safety devices. By this function of the support apparatus, the setting of appropriate device identification information can be achieved even when there are multiple safety devices or when a user lacks expertise.

In the aforementioned disclosure, the setting part may obtain routing information that shows a route from the control apparatus to a target safety device and transmits the determined device identification information to the control apparatus, and the control apparatus may transmit the device identification information to the target safety device based on the routing information from the setting part. According to this disclosure, because the support apparatus even generates or obtains the routing information, when the device identification information is transmitted from the control apparatus to multiple safety devices, the route information to each safety device is generated by the support apparatus, and thus the load in the control apparatus can be reduced.

In the aforementioned disclosure, the setting part may transmit the determined device identification information to the control apparatus along with the network address of the target safety device, and the control apparatus may determine the route to the target safety device based on the network address from the setting part and transmits the device identification information to the safety device. According to this disclosure, the support apparatus may transmits the determined device identification information to the control apparatus along with the network address of the target safety device, and transmission of the device identification information to the actual safety device is performed by the control apparatus. Therefore, it is unnecessary to install the routing function and the like on the support apparatus, the configuration is simplified and the load in the support apparatus can be reduced.

In the aforementioned disclosure, the setting part may determine the route to the target safety device and transmits the device identification information to the target safety device. According to this disclosure, the support apparatus directly transmits the device identification information to the target safety device, and thus the control apparatus may perform only data relay between the support apparatus and the safety device. Therefore, the load in the control apparatus can be reduced.

In the aforementioned disclosure, the setting part may obtain, from the device identification information already set to any safety device, the network identification information of the network to which the safety device belongs, and determines the device identification information to other safety devices belonging to the same network as the safety device based on the obtained network identification information. According to this disclosure, addition and the like of new safety devices can be easily performed while maintaining the already set network identification information.

In the aforementioned disclosure, the setting part may set corresponding device identification information after the device identification information already set to the target safety device is cleared temporarily. According to this disclosure, even when information other than the desired device identification information is stored in the target safety device, the risk of being influenced by such information can be reduced.

In the aforementioned disclosure, the support apparatus may further include a reception part which receives from the user an arbitrary selection of the safety device to which the device identification information is to be newly set among one or a plurality of safety devices to which the status information is obtained. According to this disclosure, such an operation that the user intentionally not setting the device identification information can be easily achieved.

In the aforementioned disclosure, the device identification information may be determined based on an IP (Internet Protocol) address of the target safety device and a SNN (Safety Network Number) set to the network to which the target safety device belongs. According to this disclosure, the device identification information in accordance with CIP Safety specification can be generated.

According to the present disclosure, required identification information can be easily set even when multiple safety devices are connected to the same network.

Embodiments of the present disclosure are described in detail with reference to the drawings. Moreover, identical or correspondent parts in the drawings are denoted by identical symbols and the description is not repeated.

A. Application Example

First, an example of a case in which the present disclosure is applied is described.FIG. 1is a schematic diagram showing a functional configuration example of a safety control system of this embodiment. The safety control system of this embodiment provides, for example, an architecture for achieving function safety stipulated in IEC 61508 and the like.

Typically, the safety control system includes a control apparatus2achieving safety control of the function safety, and one or a plurality of safety devices10-1,10-2,10-3. . . (also generally referred to as “the safety device10” hereinafter) network-connected to the control apparatus2.

In this specification, typically, the “standard control” is a general term of treatments for controlling a control target according to a predetermined requirement specification. Besides, in this specification, the “safety control” is a general term of treatments for preventing the safety of a person from being threatened by any malfunction, any equipment or machine or the like. The safety control includes, for example, a treatment in which the control target is stopped not only in a case that behaviour of the control target itself is different from original behaviour but also in a case that any abnormality occurs in the control apparatus2itself.

In this specification, the “device” includes apparatuses capable of being connected via an arbitrary network. The device includes at least a portion of a single sensor, a single actuator, a relay apparatus for connecting one or a plurality of sensors or actuators to the network, and various control apparatus such as a robot controller, a temperature controller, a flow amount controller and so on. In particular, the “device” for achieving safety control is also referred to as the “safety device”.

The connection between the control apparatus2and the safety device10is achieved using at least device identification information allocated to each safety device10. Each safety device10has a memory part11for keeping the device identification information that specifies the device itself.

Moreover, in this embodiment, regarding the device identification information, the device identification information of each safety device10is determined based on network identification information set for the network to which each safety device10belongs and network address of each safety device10.

In this specification, the “network identification information” means the identification information for setting a group of one or a plurality of safety devices10connected to the network. The network identification information specifies a range of the network defined by the control apparatus2. In this embodiment, even when a plurality of safety devices10is connected to the same physical network, the safety devices10can be logically distinguished by using a plurality of network identification information.

In this specification, the “network address” means the information for physically specifying the safety device10connected to the network. Typically, an IP (Internet Protocol) address may be used as the network address. However, a MAC (Media Access Control) address and so on may also be used without being limited to the IP address.

The safety control system further includes a support apparatus300capable of communicating with the control apparatus2.

The support apparatus300assists the setting of the device identification information to the safety device10. Specifically, the support apparatus300refers to a connection setting list244and respectively obtains status information from one or a plurality of safety devices10network-connected to the control apparatus2.

The connection setting list244is a list which defines, for the network defined by the network identification information, the network address of the safety device10belonging to this network. The connection setting list244is arranged at least on the control apparatus2, and thus the support apparatus300may refer to the connection setting list244of the control apparatus2. However, it is also common that the connection setting list244is set on the support apparatus300and delivered to the control apparatus2; therefore, the connection setting list244may also be arranged on the support apparatus300too. In this case, the support apparatus300may access each safety device10by referring to the connection setting list244kept by the support apparatus300itself.

In this specification, the “status information” is a term including information accessible from the target safety device10. Typically, the status information includes a movement state or various attribute information (format, vendor name, detail information and so on) of the target safety device10.

Based on the status information of each safety device10, the support apparatus300selects the safety device10to which the device identification information is to be newly set from one or a plurality of safety devices10from which the status information is obtained. The safety device10to which the device identification information is to be newly set may be displayed in a list form.

Finally, in accordance with an instruction from a user, the support apparatus300determines and sets corresponding device identification information for each of the safety device10that is selected based on the network identification information set for the network to which each safety device10belongs and the network address of each safety device10.

By employing this configuration, the user can easily implement the setting of the device identification information required for the establishment of the connection between the control apparatus2and each safety device10.

B. Configuration Example of Safety Control System

Next, a configuration example of the safety control system1of this embodiment is described.FIG. 2is a schematic diagram showing a configuration example of the safety control system1of this embodiment.

InFIG. 2, the safety control system1including two control apparatuses2A,2B (also generally referred to as “the control apparatus2” hereinafter) is shown as an example.

The control apparatus2is capable of standard control and safety control for controlling the control target that is not shown.

Although the standard control and the safety control may be achieved by the same unit, the control apparatus2is constituted of a standard control unit100that is mainly responsible for the control to the control target, and a safety control unit200that is mainly responsible for the safety control. As described later, by executing a standard control program in the standard control unit100, the standard control is achieved, and by executing a safety program in the safety control unit200, the safety control is achieved. One or a plurality of safety IO units250may be mounted on the control apparatus2.

The safety IO unit250is responsible for input of signals from safety components and/or output of signals to the safety components. In this specification, the “safety component” mainly includes arbitrary apparatuses used in the safety control, for example, including a safety relay, all types of safety sensors and the like.

The standard control unit100is communicably connected to the safety control unit200and the safety IO unit250via an internal bus. In the control apparatus2shown inFIG. 2, in the standard control unit100, communication ports14,16for the connection with another control apparatus2or device are arranged, and the safety control unit200uses the standard control unit100that is connected via the internal bus to exchange data with another control apparatus2or device.

The standard control unit100includes the communication port14for physical connection with a subordinate network4, and the communication port16for physical connection with a superordinate network6. As an example, one or a plurality of the safety devices10-1,10-2,10-3,10-4,10-5,10-6. . . is connected to the subordinate network4, and one or a plurality of HMIs (Human Machine Interface)400and a server apparatus500are connected to the superordinate network6. In addition, the control apparatus2A and the control apparatus2B are also connected via the superordinate network6.

The HMI400displays state values and the like kept by the control apparatus2and receives user operation to output content of the user operation that is received to the control apparatus2.

The server apparatus500contains a database that collects information from the control apparatus2or an operation management system and the like which give various settings such as a recipe to the control apparatus2.

InFIG. 2, a safety IO device is shown as an example of the safety device10. The safety IO device is one type of relay apparatus for forming a network for signals exchanged with one or a plurality of safety components (for example, an emergency stop button, a safety switch, light curtain and the like), which sends out detection signals and the like output from the safety component to the network and outputs instructions transmitted via the network to the target safety component. Moreover, the safety device is not limited to the safety IO device shown inFIG. 2, and any apparatus for achieving function safety can be used.

A protocol related to the data transmission of the subordinate network4and the superordinate network6may be an industrial network protocol such as EtherNet/IP, DeviceNet, CompoNet, ControlNet and the like. As described later, a program (application) executed in the standard control unit100and/or the safety control unit200employs such protocols related to the data transmission to achieve a data exchange in accordance with a communication protocol such as CIP (Common Industrial Protocol), CIP Safety or the like.

That is, the control apparatus2may employ an architecture in which the industrial network protocol such as EtherNet/IP, DeviceNet, CompoNet, ControlNet or the like is combined with the communication protocol (function at application level) such as CIP, CIP Safety or the like.

The description below mainly illustrates the architecture in which the CIP Safety is employed in addition to EtherNet/IP between the safety control unit200and one or a plurality of safety devices10. Moreover, the CIP Safety is the communication protocol based on CIP and corresponding to function safety specifications such as IEC 61508 and the like.

Each of the safety device10has the memory part11for storing the information required for establishing the connection with the control apparatus2. The memory part11keeps the device identification information that specifies each of the safety device10. The memory part11is implemented using a flash memory, NVRAM (Non-Volatile RAM) or the like.

The support apparatus300is communicable with the control apparatus2via a communication port18. That is, the support apparatus300is configured to be capable of communicating with the control apparatus2that is network-connected to one or a plurality of safety devices10. The support apparatus300provides the user with functions such as development, debugging or the like of the program executed in the control apparatus2(the standard control unit100and/or the safety control unit200), and provides the user with the function of performing network setting and the like to the safety device10which is connected via the subordinate network4. The setting function provided by the support apparatus300is described later in detail.

C. Hardware Configuration Example

Next, hardware configuration examples of main apparatuses constituting the safety control system1of this embodiment are described.

FIG. 3is a schematic diagram showing a hardware configuration example of the standard control unit100constituting the control apparatus2of this embodiment. Referring toFIG. 3, the standard control unit100includes a processor102, a main memory104, a storage106, a superordinate network controller108, subordinate network controllers110,112, a USB (Universal Serial Bus) controller114, a memory card interface116, and an internal bus controller120. These components are connected via a processor bus130.

The processor102corresponds to an operation processing part that implements a control operation and the like and is formed of a CPU (Central Processing Unit), a GPU (Graphics Processing Unit) or the like. Specifically, the processor102reads out programs (for example, a system program1060and a standard control program1062) stored in the storage106and develops the programs in the main memory104for execution, thereby achieving the control corresponding to the control target and various processing as described later.

The main memory104is formed of a volatile memory apparatus and the like such as a DRAM (Dynamic Random Access Memory), a SRAM (Static Random Access Memory) and the like. The storage106is formed of a non-volatile memory apparatus and the like, for example, a HDD (Hard Disk Drive), a SSD (Solid State Drive) and the like.

In the storage106, in addition to the system program1060for achieving the basic function, the standard control program1062which is created corresponding to the control target such as equipment or a machine is stored. Furthermore, in the storage106, memory mapping information1064for relaying the data transmission which is done by the safety control unit200and employs the superordinate network controller108and/or the subordinate network controllers110,112is stored.

The superordinate network controller108exchanges data with an arbitrary information processing apparatus such as another control apparatus2, the HMI400, the server apparatus500or the like via the superordinate network6.

The subordinate network controllers110,112exchanges data with the device and/or the safety device10via the subordinate network4. InFIG. 3, two subordinate network controllers110,112are shown, but it may also be that only one subordinate network controller is employed.

The USB controller114exchanges data with the support apparatus300and the like via a USB connection.

The memory card interface116receives a memory card118which is an example of detachable recording medium. The memory card interface116is capable of writing data into the memory card118and reading various data (log, trace data and so on) out from the memory card118.

The internal bus controller120exchanges data with the safety control unit200or the safety IO unit250via the internal bus12. More specifically, the internal bus controller120includes a master controller122, an IO data memory124, a transmission circuit (TX)126, and a reception circuit (RX)128.

The IO data memory124is the memory which temporarily keeps data (input data and output data) exchanged with various units via the internal bus12, and an address corresponding to each unit is specified in advance. The transmission circuit126generates a communication frame that includes the output data and sends out the communication frame to the internal bus12. The reception circuit128receives the communication frame transmitted through the internal bus12and demodulates the communication frame into the input data. The master controller122controls the IO data memory124, the transmission circuit126, and the reception circuit128according to data transmission timing and the like on the internal bus12. The master controller122provides the control as a communication master that manages the data transmission and the like on the internal bus12.

InFIG. 3, the configuration example in which the necessary functions are provided by the processor102executing the programs is shown, but dedicated hardware circuit (for example, ASIC (Application Specific Integrated Circuit), FPGA (Field-Programmable Gate Array) or the like) may be used to implement part or all of the functions that are provided. Elsewise, hardware in accordance with a general-purpose architecture (for example, an industrial PC based on a general-purpose PC) may be used to implement main parts of the standard control unit100. In this case, a virtualization technology may be used to execute a plurality of OSs (Operating System) with different purposes in parallel and execute necessary application in each OS. Furthermore, the configuration in which the functions of a display apparatus, a support apparatus or the like are integrated into the standard control unit100may be employed.

FIG. 4is a schematic diagram showing a hardware configuration example of the safety control unit200constituting the control apparatus2of this embodiment. Referring toFIG. 4, the safety control unit200includes a processor202, a main memory204, a storage206, and an internal bus controller220. These components are connected via a processor bus230.

The internal bus controller220functions as a communication slave and provides a communication interface the same as other units. That is, the internal bus controller220exchanges data with the standard control unit100and the function units via the internal bus12.

On the internal bus12, the safety control unit200and the safety IO unit250are daisy-chain connected. That is, on receiving the communication frame from an apparatus existing on the upper-stream side on the internal bus12, the internal bus controller220copies inside all or part of the data of the communication frame and delivers the data to an apparatus existing on the lower-stream side. Similarly, on receiving the communication frame from the apparatus existing on the lower-stream side on the internal bus12, the internal bus controller220copies inside all or part of the data of the communication frame and delivers the data to the apparatus existing on the upper-stream side. The data transmission between the standard control unit100and the function units and the safety control unit200is achieved by this sequential delivery of the communication frame.

More specifically, the internal bus controller220includes a slave controller222, a buffer memory224, transmission circuits (TX)225,226, and reception circuits (RX)227,228.

The buffer memory224temporarily keeps the communication frame transmitted through the internal bus12.

On receiving the communication frame transmitted through the internal bus12, the reception circuit227stores all or part of the communication frame in the buffer memory224. The transmission circuit226sends out the communication frame received by the reception circuit227to the internal bus12on the lower-stream side.

Similarly, on receiving the communication frame transmitted through the internal bus12, the reception circuit228stores all or part of the communication frame in the buffer memory224. The transmission circuit225sends out the communication frame received by the reception circuit228to the internal bus12on the lower-stream side.

The slave controller222controls the transmission circuits225,226, the reception circuits227,228, and the buffer memory224to achieve the sequential delivery of the communication frame on the internal bus12.

The processor202corresponds to an operation processing part that implements a control operation and the like and is formed of a CPU, a GPU or the like. Specifically, the processor202reads out programs (for example, a system program2060, a connection management program2062, and a safety program2066) stored in the storage206and develops the programs in the main memory204for execution, thereby achieving the control corresponding to the control target and various processings as described later.

The main memory204is formed of a volatile memory apparatus and the like such as a DRAM, a SRAM and the like. The storage206is formed of a non-volatile memory apparatus and the like, for example, a HDD, a SSD and the like.

In the storage206, in addition to the system program2060for achieving the basic function, the connection management program2062for establishing and maintaining the connection used to exchange data with the safety device10, originator setting information2064that contains setting information required for the data exchange with the safety device10, and the safety program2066which is created corresponding to the target safety device10are stored.

InFIG. 4, the configuration example in which the necessary functions are provided by the processor202executing the programs is shown, but dedicated hardware circuit (for example, ASIC, FPGA or the like) may be used to implement part or all of the functions that are provided. Elsewise, hardware in accordance with a general-purpose architecture (for example, an industrial PC based on a general-purpose PC) may be used to implement main parts of the safety control unit200.

FIG. 5is a schematic diagram showing a hardware configuration example of the support apparatus300connected to the control apparatus2of this embodiment. As an example, the support apparatus300is achieved by using hardware in accordance with a general-purpose architecture (for example, a general-purpose PC) to execute the programs.

Referring toFIG. 5, the support apparatus300includes a processor302, a main memory304, a storage306, an input part308, a display part310, an optical drive312, and a USB controller316. These components are connected via a processor bus318.

The processor302is formed of a CPU and the like, reads out the programs (for example, an OS3060and a support program3062) stored in the storage306and develops the programs in the main memory304for execution, thereby implementing various processings described later.

The main memory304is formed of a volatile memory apparatus or the like such as a DRAM, a SRAM or the like. The storage306is formed of, for example, a non-volatile memory apparatus or the like such as a HDD, a SSD or the like.

In the storage306, in addition to the OS3060for achieving the basic functions, the support program3062for providing the function as the support apparatus300is stored.

The input part308is formed of a keyboard, a mouse or the like and receives user operations. The display part310is formed of a display, various indicators, a printer and so on and outputs processing results and the like from the processor302.

The USB controller316controls, via USB connection, the data exchange with the standard control unit100and the like of the control apparatus2.

The support apparatus300has an optical drive312, and from a recording medium314(for example, an optical recording medium such as a DVD (Digital Versatile Disc) or the like) which stores computer-readable programs in a non-transitory manner, the programs stored therein are read out to be installed in the storage306and the like.

The programs executed in the support apparatus300may be installed via the computer-readable recording medium314, or be installed in a form downloaded from the server apparatus and the like on the network. Besides, the functions provided by the support apparatus300of this embodiment may also be achieved in a form employing part of the module provided by the OS.

InFIG. 5, the configuration example is shown in which necessary functions as the support apparatus300are provided by the processor302executing the programs, but dedicated hardware circuits (for example, ASIC, FPGA or the like) may be used to implement part or all of the functions that are provided.

The safety IO unit250is an example of the function units that are connected to the standard control unit100via the internal bus12, and performs the signal input from the safety device10and/or the signal output to the safety device10. Compared with a standard IO unit, the safety IO unit250is installed with signal input-output and management function required for achieving the safety of feedback signals and so on. The hardware configuration of the safety IO unit250is publicly known, and thus more detailed description is not performed.

The HMI400may employ a hardware configuration mounted as a dedicated machine or employ a hardware configuration in accordance with a general-purpose architecture (for example, an industrial PC based on a general-purpose PC). When the HMI400is implemented by the industrial PC based on a general-purpose PC, the hardware configuration similar to the support apparatus300as shown in the aforementionedFIG. 5is employed. However, an application program for achieving HMI processing is installed instead of the support program3062in the configuration example shown inFIG. 5.

As an example, the server apparatus500can be achieved using a general-purpose file server or database server. The hardware configuration of such an apparatus is publicly known, and thus more detailed description is not performed.

D. Communication Between Safety Control Unit200and Safety Device10

Next, the communication between the safety control unit200and the safety device10is described.

FIG. 6is a schematic diagram for describing the data transmission between the safety control unit200and the safety device in the safety control system1of this embodiment. Referring toFIG. 6, when obtaining the input data from the safety device10-1,10-2,10-3. . . , or giving arbitrary output to the safety device10-1,10-2,10-3. . . , the safety control unit200performs one type of message transmission communication with each safety device10-1,10-2,10-3. . . .

As shown inFIG. 6, a connection31for performing the message transmission between the safety control unit200and the safety device10-1, a connection32for performing the message transmission between the safety control unit200and the safety device10-2, and a connection33for performing the message transmission between the safety control unit200and the safety device10-3are respectively established.

In the description below, the safety control unit200that functions as the communication master is also referred to as an “originator”, and the safety device10that functions as the communication slave is also referred to as a “target”.

In this kind of message transmission, identification information such as an IP address, a SNN (Safety Network Number), an OUNID (Originator Unit Number Identifier), a TUNID (Target Number Identifier), a SCID (Safety Configuration Identifier) and the like are used in the connection establishment and message exchange.

The IP address is a network address allocated to the safety control unit200(the control apparatus2) and each device. The IP address is set so as not to repeat in the same network.

The SNN is an example of the network identification information, and is the identification information set in a range in which the safety control unit200is handled as a single network. The SNN is set so as not to mutually repeat in each network in the safety control system1. Moreover, in the SNN, values defined by hexadecimal numbers may be set. However, in the following, for convenience of description, an example is shown in which values defined by numbers and characters are set. InFIG. 6, an example is shown in which the SNN is set for the network including the safety device10-1,10-2,10-3.

The OUNID is the identification information for specifying the safety control unit200that is the originator.

The TUNID is the identification information for specifying each safety device that is the target. Typically, a data string in which the SNN of the network to which each target device belongs and the IP address of each target device are combined is used as the TUNID. In this way, the TUNID which the device identification information may be determined based on the IP address of the target safety device10and the SNN which is the network identification information set for the network to which the target safety device10belongs.

The SCID is the identification information allocated when necessary setting is performed on each safety device (target), and is used to ensure that the setting kept on an originator side is the same as the setting kept on in the target.

More specifically, each of the safety devices10-1,10-2,10-3. . . that is the target has target setting information50. The target setting information50includes an IP address52, a TUNID54, and a SCID56.

On the other hand, the safety control unit200which is the originator has originator setting information2064for performing communication with each safety device. The originator setting information2064includes, in addition to an OUNID240that is the identification information of the safety control unit200, a target setting list242and a connection setting list244related to each safety device.

The target setting list242consists of the identification information of each safety device and includes an IP address2420, a TUNID2422, a SCID2424, and model information2426related to each safety device.

The connection setting list244defines for each network the IP address which is the network address of the safety device10belonging to this network. Detail of the connection setting list244is described later.

FIG. 7is a schematic diagram showing an example of the message exchanged between the safety control unit200and the safety device in the safety control system1of this embodiment.

Referring toFIG. 7, for example, when the safety control unit200that is the originator establishes a connection with each safety device10, a message including a command such as “Safety Open” is transmitted. A data format of the message includes the TUNID allocated to the target safety device, a CPCRC (Configuration Portion Cyclic Redundancy Check) for checking errors that may occur in the OUNID, the TUNID and the OUNID of the originator, the SCID allocated to the target safety device, entity data (Data), and a DataCRC (Data Cyclic Redundancy Check) for checking the errors that may occur in the entity data (a case of message (i)).

Elsewise, when there is no entity data to be transmitted, a simplified data format of the message may be employed. This data format includes the TUNID allocated to the target safety device, the OUNID of the originator, the CPCRC for checking the errors that may occur in the TUNID and the OUNID, and the SCID allocated to the target safety device (a case of message (ii)).

As for the TUNID and the SCID included in the data format shown inFIG. 7, the values kept by the safety control unit200that is the originator (that is, the TUNID2422and the SCID2424included in the target setting list242shown inFIG. 6) are used. Also for the OUNID, the values kept by the safety control unit200that is the originator (that is, the OUNID240shown inFIG. 6) are used.

On receiving the message (i) or (ii) from the safety control unit200, each safety device10compares the message respectively with the TUNID54and the SCID56of the target setting information50kept by the device itself. Then, when the TUNID and the SCID in the message match with the TUNID54and the SCID56in the target setting information50respectively, a judgment is made that the message to the device itself is correctly received, and the processing designated by the command included in the received message is implemented.

Moreover, although it is not illustrated, the data format of the message in which the SCID is omitted may also be employed. In this case, the comparison of the TUNID included in the message and the TUNID54in the target setting information50becomes a main verification processing.

As described above, in the safety control system1of this embodiment, the originator (the safety control unit200) is required to keep at least the TUNID which is the same as the TUNID set for the target (the safety device10).

E. Setting of TUNID to Target

Next, the setting of the TUNID to the safety device10which is the target is described.

As described above, the originator (the safety control unit200) and the target (the safety device10) are required to keep the same TUNID. On the other hand, because the TUNID is determined depending on the SNN which is the identification information of the network to which each target belongs, in a case that a target is newly added to the network or the network which is a connection destination is altered, the TUNID is required to be set to the target from outside.

FIGS. 8A and 8Bare schematic diagrams for describing the setting of the TUNID in the safety control system1of this embodiment. InFIG. 8A, a case is shown in which a target is newly connected to the network, and inFIG. 8Ba case is shown in which the network which is the connection destination of the target is altered. Moreover, the SNN which is the identification information of the network is set in advance.

Referring toFIG. 8A, in an initial state, no setting is registered in the target setting list242of the originator, and only the IP address52is set in the target setting information50of the target.

In this state, the originator obtains the IP address of the target to generate the TUNID to the target. For example, when the IP address of the target is “192.168.1.2” and the SNN of the network which is the connection destination is “Network1”, the TUNID is determined as “192168001002_Network1”.

Then, the originator designates the IP address and transmits the generated TUNID. Hereupon, the target having the designated IP address sets the received TUNID as the TUNID54of the target setting information50.

Besides, the target adds the IP address and the TUNID related to the target which is a transmission destination as the IP address2420and the TUNID2422of the target setting list242.

According to this kind of processing, the same TUNID is set in the target setting list242of the originator and the target setting information50of the target.

InFIG. 8B, an example is shown in which the connection destination of the SNN is altered from the network of “Network1” to the network of “Network2”. Immediately after the network which is the connection destination is altered, “192168001002_Network1” that is the TUNID before the alteration is set in the target setting list242of the originator. Similarly, “192168001002_Network1” that is the TUNID before the alteration is also set in the target setting information50of the target.

In this state, the originator confirms the IP address of the target to generate the TUNID to the target. In this example, the new TUNID is determined as “192168001002_Network2”. Then, the originator designates the IP address and transmits the generated TUNID. Hereupon, the target having the designated IP address updates the received TUNID as the new TUNID54of the target setting information50.

Besides, the target updates the value of the TUNID2422of the target setting list242to the value of the TUNID transmitted to the target.

According to this kind of processing, the same TUNID is set in the target setting list242of the originator and the target setting information50of the target.

Moreover, the originator can refer to a connection setting list that is prepared in advance to obtain the IP address of the target belonging to each network.

FIG. 9is a schematic diagram showing an example of the connection setting list244in the safety control system1of this embodiment. Referring toFIG. 9, the connection setting list244is associated with each network to which the SNN is given and the IP address of the target belonging to each network is associated with the connection setting list244.

The originator can specify the IP address of the target belonging to each network by referring to the connection setting list244. Typically, the connection setting list244is generated by being set in advance by the user.

F. Setting Form of TUNID to Target

Next, a setting form of the TUNID to the safety device10that is the target is described. The aforementioned setting of the TUNID is implemented using the support apparatus300connected to the control apparatus2. That is, in the setting of the TUNID, the support apparatus300, the safety control unit200and the safety device10are related. Division of functions among these apparatuses may be arbitrarily designed, and three typical forms are illustrated in the following.

FIGS. 10A to 10Care schematic diagrams for describing setting forms of the TUNID in the safety control system1of this embodiment.

InFIG. 10A, an example is shown in which the support apparatus300generates or obtains the TUNID to the safety device10that is the target and routing information to the safety device10.

More specifically, referring toFIG. 10A, the support apparatus300generates or obtains the TUNID to the safety device10that is the setting target (A1), and generates or obtains the routing information from the safety control unit200to the safety device10that is a setting destination of the TUNID (A2).

The routing information is information showing a route to the safety device10that is the destination. In a case or the like in which the network is hierarchical, it is necessary to relay a router or the like to arrive at the destination, and the routing information includes the information to designate such a router or the like that is to be relayed.

In the form shown inFIG. 10A, the support apparatus300has a routing function and generates the routing information from the safety control unit200to the safety device10that is the setting target based on the IP address of the safety device10that becomes the setting target of the TUNID.

Then, the TUNID and the routing information are given from the support apparatus300to the safety control unit200(A3).

The safety control unit200transmits the TUNID to the safety device10that is the destination in accordance with the routing information from the support apparatus300(A4). The safety device10set the TUNID from the safety control unit200to the target setting information50.

As shown inFIG. 10A, the support apparatus300obtains the routing information showing the route from the control apparatus2(the safety control unit200) to the target safety device10and transmits the TUNID (device identification information) that is determined to the control apparatus2(the safety control unit200). Then, the control apparatus2(the safety control unit200) may transmits the TUNID to a target safety device20based on the routing information from the support apparatus300.

InFIG. 10B, an example is shown in which the support apparatus300generates or obtains the TUNID to the safety device10that is the target, and the safety control unit200performs the routing to the safety device10that is the destination.

More specifically, referring toFIG. 10B, the support apparatus300generates or obtains the TUNID to the safety device10that is the setting target (B1), and gives the TUNID to the safety control unit200along with the IP address of the safety device10that is the setting target (B2).

The safety control unit200generates or obtains the routing information to the destination based on the IP address of the safety device10that is the setting target from the support apparatus300(B3). That is, the safety control unit200has the routing function, and the routing information from the safety control unit200to the safety device10that is the setting target is generated based on the IP address of the safety device10that becomes the setting target of the TUNID.

Then, the safety control unit200transmits the TUNID to the safety device10that is the destination in accordance with the generated routing information (B4). The safety device10sets the TUNID from the safety control unit200to the target setting information50.

As shown inFIG. 10B, the support apparatus300transmits the TUNID (device identification information) that is determined to the control apparatus2(the safety control unit200) along with the IP address (network address) of the target safety device10. Then, the control apparatus2(the safety control unit200) may determine the route to the target safety device10based on the IP address from the support apparatus300and transmits the TUNID to the target safety device10.

InFIG. 10C, an example is shown in which the support apparatus300generates or obtains the TUNID to the safety device10that is the target and also performs the routing to the safety device10that is the destination. In this form, the safety control unit200actually exhibits the function of data relay only.

More specifically, referring toFIG. 10C, the support apparatus300generates or obtains the TUNID to the safety device10that is the setting target (C1). Then, the support apparatus300generates or obtains the routing information to the destination based on the IP address of the safety device10that is the setting target (C2). That is, the support apparatus300has the routing function, and relays the safety control unit200from the support apparatus300to generate the routing information reaching the safety device10that is the setting target based on the IP address of the safety device10that becomes the setting target of the TUNID.

Then, the support apparatus300transmits the TUNID to the safety device10that is the destination in accordance with the generated routing information (C3). The safety device10sets the TUNID from the safety control unit200to the target setting information50.

As shown inFIG. 10C, the support apparatus300may determine the route to the target safety device10and transmits the TUNID (device identification information) to the target safety device10.

As described above, in the processing of setting the TUNID for the safety device10, the division of functions between the support apparatus300and the safety control unit200can be determined arbitrarily.

In the description above, the configuration in which the support apparatus300generates the TUNID is mainly described, but the present disclosure is not limited hereto. For example, the TUNID may be obtained regardless of the server apparatus and the like which manage the setting.

G. Setting Procedures of TUNID in Support Apparatus300

Next, setting procedures of the TUNID in the support apparatus300is described. As for the basic setting processing of the TUNID, first, (1) when the TUNID is not set to the target safety device10, the TUNID generated or obtained by the support apparatus300is set. On the other hand, (2) when the TUNID is already set to the target safety device10, the processing of (2-1) updating the TUNID of a target belonging to the same network as the aforementioned target prior to the SNN defined in the TUNID that is already set, or (2-2) updating the TUNID of the aforementioned target prior to the SNN of the network that is already set is implemented.

In the safety control system1of this embodiment, the support apparatus300is used to set the TUNID for the target safety device10. In the following, the processing procedures related to the setting of the TUNID in the support apparatus300are described.

FIG. 11is a flowchart showing the processing procedures related to the setting of the TUNID in the safety control system1of this embodiment. Each step shown inFIG. 11is implemented by the processor302of the support apparatus300executing the support program3062.

FIG. 12is a schematic diagram showing an example of a setting screen600related to the setting of the TUNID in the safety control system1of this embodiment. The setting screen600shown inFIG. 12is presented on a display part310of the support apparatus300.

Referring toFIG. 11, the support apparatus300obtains the IP addresses of all the targets that are set with reference to the connection setting list244(step S100). When an obtaining instruction of the status information is received from the user (“YES” in step S102), the support apparatus300obtains the status information of each target based on the IP address obtained in step S100(step S104). When the obtaining instruction of the status information is not received from the user (“NO” in step S102), the processing of step S102is repeated.

Accordingly, in steps S100and S104, the support apparatus300refers, in each network, to the connection setting list244that defines the network address of the safety device10belonging to this network, and obtains the status information respectively from one or a plurality of the safety device10network-connected to the control apparatus2. This processing corresponds to a status information obtaining function of the support apparatus300.

As a specific example, the setting screen600shown inFIG. 12has a status information obtaining button602, and the status information obtaining instruction is given to the support apparatus300by the user selecting the status information obtaining button602.

The status information of each target includes, in addition to the movement state, various attribute information (format, vendor name, detailed information and so on). In the setting screen600shown inFIG. 12, in addition to an IP address614of each target, a model (Model)616, a vendor name (Vendor name)618, and detailed information (Details)620are displayed as the status information that is obtained.

Then, a judgment is made, in accordance with the procedures as follows, for each target to which the status information is obtained on whether the target becomes the setting target of the TUNID.

Specifically, the support apparatus300selects an arbitrary target to which the status information is obtained (step S106). Then, the support apparatus300judges whether the target that is selected at present is the safety device capable of setting the TUNID (step S108). That is, a judgment is made on whether any TUNID is already set for the target that is selected at present.

When the target selected at present is the safety device capable of setting the TUNID (“YES” in step S108), the support apparatus300checks the target selected at present as the setting target of the TUNID (step S110).

In the setting screen600shown inFIG. 12, a checkbox610is arranged in association with each target, and the corresponding checkbox610is checked. Moreover, the checkbox610of the setting screen600can be arbitrarily checked or unchecked by the user. That is, the support apparatus300may be capable of receiving from the user an arbitrary selection of the safety device10to which the TUNID (device identification information) is to be newly set from one or a plurality of safety devices10to which the status information is obtained.

Besides, the support apparatus300determines the TUNID set for the target that is selected at present based on the IP address of the target selected at present and the SNN of the network to which the target selected at present belongs (step S112).

Then, the support apparatus300judges whether the selection of all the targets to which the status information is obtained is finished (step S114).

When the selection of the targets to which the status information is obtained is not finished (“NO” in step S114), the support apparatus300selects an arbitrary target to which the selection is not finished (step S116) and repeats the processing after step S108.

On the other hand, when the selection of all the targets to which the status information is obtained is finished (“YES” in step S114), the processing after step S150is implemented.

Besides, when the target selected at present is the safety device incapable of setting the TUNID (“NO” in step S108), the support apparatus300judges whether the target selected at present is in a normal movement (step S120).

When the target selected at present is not in the normal movement (“NO” in step S120), the support apparatus300informs the fact that the target selected at present is in an abnormal movement on the setting screen (step S122), and excludes the target selected at present from the setting target of the TUNID (step S124). Then, the processing of step S114is implemented.

When the target selected at present is in the normal movement (“YES” in step S120), the support apparatus300attempts to obtain the TUNID that is already set from the target selected at present (step S126). Then, the support apparatus300judges whether the TUNID that is already set can be obtained from the target selected at present (step S128).

When the TUNID that is already set cannot be obtained from the target selected at present (“NO” in step S128), the support apparatus300excludes the target selected at present from the setting target of the TUNID (step S124). Then, the processing of step S114is implemented.

When the TUNID that is already set can be obtained from the target selected at present (“YES” in step S128), the support apparatus300obtains the SNN from the TUNID that is obtained (step S130) and informs the obtained SNN on the setting screen (step S132). Then, the support apparatus300receives the selection of the user on whether to also reflect the obtained SNN on other targets belonging to the same network (step S134).

When the selection that the obtained SNN is also reflected on other targets belonging to the same network is received (“YES” in step S134), the support apparatus300updates the TUNID related to all other targets belonging to the same network as the target selected at present (step S136). Then, the processing of step S114is implemented.

In this way, the support apparatus300may obtain, from the TUNID (device identification information) already set to any of the safety device10, the SNN (network identification information) of the network to which this safety device10belongs, and determine the TUNID to other safety devices10belonging to the same network as this safety device10based on the obtained SNN.

When the selection that the obtained SNN is not reflected on other targets belonging to the same network is received (“NO” in step S134), the support apparatus300receives the selection of the user on whether to update the TUNID of the target selected at present (step S138).

When the selection to update the TUNID of the target selected at present is received (“YES” in step S138), the support apparatus300displays a memory clear function screen to the target selected at present (step S140). Then, the support apparatus300receives the information required for memory clear via the memory clear function screen (step S142). Then, the support apparatus300implements the memory clear to the target selected at present in accordance with the information input in step S142(step S144). Then, the processing after step S110is implemented.

Accordingly, corresponding TUNID (device identification information) may be set after the TUNID (device identification information) already set for the target safety device10is temporarily cleared. Moreover, when the configuration is employed in which the original TUNID is automatically memory cleared when the TUNID is newly set, the memory clear may not be implemented explicitly.

When the selection not to update the TUNID of the target selected at present is received (“NO” in step S138), the support apparatus300excludes the target selected at present from the setting target of the TUNID (step S146). Then, the processing of step S114is implemented.

Accordingly, in steps S108, S110, S120-S134, S138, S146, the support apparatus300selects, based on the status information of each safety device10, the safety device to which the TUNID (device identification information) is to be newly set among one or a plurality of safety devices10to which the status information is obtained. This processing corresponds to a safety device selection function of the support apparatus300.

In step S150, the support apparatus300judges whether the user selection on whether to implement the TUNID setting is received (step S150). As a specific example, the setting screen600shown inFIG. 12has a TUNID setting button604, and the instruction to implement the TUNID setting is given to the support apparatus300by the user selecting the TUNID setting button604.

When the user selection to implement the TUNID setting is received (“YES” in step S150), the support apparatus300transmits the TUNID determined for each target to each target that is checked as the setting target of the TUNID (step S152). Accordingly, in steps S112, S136, S150, S152, the support apparatus300determines and sets corresponding TUNID (device identification information) for each of the selected safety device10in accordance with the instruction from the user based on the SNN (network identification information) set for the network to which each safety device10belongs and the IP address (network address) of each safety device10. This processing corresponds to a device identification information setting function of the support apparatus300.

Setting results of the TUNID may be reflected in result612of the setting screen600shown inFIG. 12. Then, the processing is ended.

When the user selection not to implement the TUNID setting is received (“NO” in step S150), the processing is ended directly. That is, the setting screen600shown inFIG. 12has a close button606, and a series of processing is ended by the user selecting the close button606.

In the safety control system1shown inFIG. 2, the control apparatus2and the support apparatus300are mutually independent configurations, but all or part of the functions of the support apparatus300may be incorporated into the control apparatus2. For example, by installing the support program3062that is installed in the support apparatus300in the control apparatus2, the processing such as the setting of the TUNID can be implemented more easily.

In the description above, the control apparatus2in which the standard control unit100and the safety control unit200are combined is mainly illustrated. However, the present disclosure is not limited hereto and it is evident that the technical ideas of the disclosure of this application are also applicable to the control apparatus in which a plurality of standard control units100is combined and the control apparatus in which a plurality of safety control units200is combined. Furthermore, the present disclosure is not limited to the standard control unit and the safety control unit and may be the combination of arbitrary control units.

The embodiment as described above includes the following technical ideas.

A support apparatus (300) capable of communicating with a control apparatus (2;200) network-connected to one or a plurality of safety devices (10), wherein each of the safety devices has a memory part (11) for keeping device identification information (54) that specifies the device itself, and the support apparatus includes:

an obtaining part (S100, S104), which refers, in each network, to a connection setting list (244) that defines a network address of a safety device belonging to the network, and obtains status information respectively from the one or a plurality of safety devices network-connected to the control apparatus;

a selecting part (S108, S110, S120-S134, S138, S146), which selects, based on the status information of each safety device, the safety device to which the device identification information is to be newly set among the one or a plurality of safety devices to which the status information is obtained; and

a setting part (S112, S136, S150, S152), which determines and sets corresponding device identification information for each of the selected safety devices in accordance with an instruction from a user based on network identification information set for the network to which each safety device belongs and a network address of each safety device.

The support apparatus according to configuration 1, wherein the setting part obtains routing information that shows a route from the control apparatus to a target safety device and transmits the determined device identification information to the control apparatus, and the control apparatus transmits the device identification information to the target safety device based on the routing information from the setting part.

The support apparatus according to configuration 1, wherein the setting part transmits the determined device identification information to the control apparatus along with the network address of the target safety device, and the control apparatus determines a route to a target safety device based on the network address from the setting part and transmits the device identification information to the target safety device.

The support apparatus according to configuration 1, wherein the setting part determines a route to a target safety device and transmits the device identification information to the target safety device.

The support apparatus according to any one of configurations 1-4, wherein the setting part obtains, from the device identification information already set to any safety device, the network identification information of the network to which the safety device belongs, and determines the device identification information to other safety devices belonging to the same network as the safety device based on the obtained network identification information (S136).

The support apparatus according to any one of configurations 1-5, wherein the setting part sets corresponding device identification information after the device identification information already set to the target safety device is cleared temporarily (S144).

The support apparatus according to any one of configurations 1-6, further including a reception part (610) which receives from the user an arbitrary selection of the safety device to which the device identification information is to be newly set among one or a plurality of safety devices to which the status information is obtained.

The support apparatus according to any one of configurations 1-7, wherein the device identification information is determined based on an IP (Internet Protocol) address of the target safety device and a SNN (Safety Network Number) set to the network to which the target safety device belongs.

A support program (3062) executed in a computer (300) capable of communicating with a control apparatus (2;200) network-connected to one or a plurality of safety devices (10), wherein each of the safety devices has a memory part (11) for keeping device identification information (54) that specifies the device itself, and the support program makes the computer execute:

a step (S100, S104) to refer, in each network, to a connection setting list (244) that defines a network address of a safety device belonging to the network, and obtain status information respectively from the one or a plurality of safety devices network-connected to the control apparatus;

a step (S108, S110, S120-S134, S138, S146) to selects, based on the status information of each safety device, the safety device to which the device identification information is to be newly set among the one or a plurality of safety devices to which the status information is obtained; and

a step (S112, S136, S150, S152) to determine and set corresponding device identification information for each of the selected safety devices in accordance with an instruction from a user based on network identification information set for the network to which each safety device belongs and a network address of each safety device.

A setting method to one or a plurality of safety devices (10) network-connected to a control apparatus (2;200), wherein each of the safety devices has a memory part (11) for keeping device identification information (54) that specifies the device itself, and the setting method includes:

a step (S100, S104) to refer, in each network, to a connection setting list (244) that defines a network address of a safety device belonging to the network, and obtain status information respectively from the one or a plurality of safety devices network-connected to the control apparatus;

a step (S108, S110, S120-S134, S138, S146) to selects, based on the status information of each safety device, the safety device to which the device identification information is to be newly set among the one or a plurality of safety devices to which the status information is obtained; and

a step (S112, S136, S150, S152) to determine and set corresponding device identification information for each of the selected safety devices in accordance with an instruction from a user based on network identification information set for the network to which each safety device belongs and a network address of each safety device.

In the control system of this embodiment, required identification information can be easily set even when multiple safety devices are connected the same network.

It should be considered that the embodiment disclosed here is illustrative instead of limitative in all aspects. The scope of the present disclosure is shown by the claims instead of the description above and meanings equivalent to the claims and all modifications within the scope are intended to be included in the scope of the present disclosure.