Abstract:
A machine controller for controlling a machine includes a data memory configured to store maintenance data for at least one of the machine controller or the machine in an electronically processable manner, an imaging processing unit configured to at least partially read the maintenance data from the data memory and to generate image information relating to a graphical representation that includes a first representation area representing a first section of the maintenance data in a form designed for machine readability. The machine controller includes at least one of: a display unit configured to display the graphical representation based on the image information or a data transmission interface configured to transmit the image information indirectly or directly to a service computer to display or evaluate the graphical representation on the service computer.

Description:
CROSS-REFERENCE TO RELATED APPLICATIONS 
       [0001]    This application is a continuation of and claims priority under 35 U.S.C. §120 to PCT Application No. PCT/EP2014/000099 filed on Jan. 16, 2014, which claimed priority to German Application No. DE 10 2013 200 798.1, filed on Jan. 18, 2013. The contents of all these priority applications are hereby incorporated by reference in their entirety. 
     
    
     TECHNICAL FIELD 
       [0002]    The invention relates to methods, systems, and apparatus for machine maintenance using a machine controller, and more particularly for allowing secure data transmission to a service computer. 
       BACKGROUND 
       [0003]    The global orientation of today&#39;s machine manufacturers with worldwide located customers/machine operators requires being able to perform maintenance, fault diagnosis and also repairs of the machines and machine controllers not only directly on site, but more and more frequently by remote access. 
         [0004]    Machine controllers are electronic data processing apparatuses, for example an industrial PC, on which are often installed conventional operating systems and software for intervention in the machine. Such machine controllers are exposed to comparable risks as conventional electronic data processing apparatuses, for example by malicious software such as computer viruses or worms, stealth software (e.g. “rootkits”) and software allowing unauthorized access to the system (e.g. “Trojan horses”). Moreover, such machine controllers are subject to comparable maintenance requirements as conventional electronic data processing devices, e.g., the necessity of installing system updates, of evaluating and testing software functionality and of general software installations. 
         [0005]    Besides the direct dial-in formerly commonly used for the remote maintenance from a service computer via an analog modem or an ISDN connection to the machine, modern communication technologies occur primarily through so-called virtual private networks (VPN), which allow encrypted remote access via wide area networks such as the Internet. 
         [0006]    It is problematic that such communication links cause high and error-prone configuration effort, which themselves can already constitute the cause of fault and therefore can impede remedy of the fault by means of remote maintenance. Moreover, there is the risk that malicious software is transmitted from the service computer to the machine controller or from the machine controller to the service computer in case of maintenance in such systems. 
         [0007]    EP 1 715 395 A1 discloses a system and a method for remote communication between a service computer and a machine controller.  FIG. 1  shows a previously known remote communication system  1  that includes a central computer  5  protected to the outside by a firewall  6 . A communication link  8  is established from the central computer  5  to a machine controller  3 . A service computer  2  is not directly connected to the machine controller  3 , but the connection of the service computer  2  is effected via the central computer  5 , which is connected to the service computer  2  via a communication link  9 . By means of remote desktop protocols such as RDP, it is accessed to the central computer  5  from the service computer  2 , and to the machine controller  3  via it by means of remote desktop protocols such as RDP. If these communication links are available, maintenance works can be performed on the machine controller  3  via the service computer  2  or the central computer  5 . In contrast, if the communication links are not available, a case of fault, in particular a faulty configuration of the communication link on the part of the machine controller, is not remediable or with difficultly remotely remediable in many cases. 
         [0008]    Since even with available communication links in the above described system, exclusively desktop data such as image data, keyboard input data and mouse operation data are transmitted, capability of mutually compromising the involved systems by malicious software is reduced. The described system is especially conceived to the effect that data transmission of a file or other data between machine controller  3  and central computer  5  or service computer  2  is not required or even possible. 
         [0009]    Therefore, it is problematic that direct data access from the central computer  5  or the service computer  2  to data of the machine controller is not possible or only possible with high effort and using additional protocols and communication links for data transmission, the use of which in turn can increase the compromising risk. 
       SUMMARY 
       [0010]    One aspect of the invention features a machine controller for controlling a machine. The machine controller has a data memory configured to store maintenance data of at least one of the machine controller or the machine in an electronically processable manner. The machine controller also includes an imaging apparatus, e.g., an imaging processing unit or an imaging processor, configured to at least partially read out the maintenance data from the data memory and generate image information of a graphical representation. The graphical representation includes a first presentation area representing a first section of the maintenance data in a form designed for machine readability. The machine controller can include a display apparatus, e.g., a monitor, configured to display the graphical representation based on the image information. The machine controller can also include a data transmission interface configured to indirectly or directly transmit the image information to a service computer to display or evaluate the graphical representation on the service computer. The machine controller allows secure data transmission with the service computer. 
         [0011]    The machine controller allows representing information, e.g., on a screen, for displaying operating data of the machine controller in an area in machine-readable form, for example, as a bar code, Quick Response (QR) code or data matrix code. 
         [0012]    If a communication link is available, this screen output can be transmitted to the service computer by means of a remote desktop protocol. The service computer is able to interpret the machine-readable information and electronically further process the extracted data, although only image information is transmitted to the service computer. Thus mutual compromise of machine controller and service computer by malicious software is reduced. Moreover, if a communication link is faulty, the screen of the machine controller can be photographed by a user and be transmitted to the personnel for remote maintenance of the machine controller via alternative communication channels and there be evaluated in machine assisted manner. 
         [0013]    If the imaging apparatus is set up such that the image information of the graphical representation is generated such that the graphical representation includes a second representation area, which includes a second section of the maintenance data in a form readable by a user, the remote maintenance personnel can both capture the machine-readable error messages on the screen and electronically further process the digital information with functioning communication link. 
         [0014]    Herein, the graphical representation does not necessarily have to be a single image with static machine-readable information, but can be an image sequence, in which the first representation area and/or the second representation area varies in the image sequence to transmit the first partial information as a data stream. This has the advantage that via the consecutively varying first representation area with machine-readable data, a data stream and thus higher amount of data can be transmitted and processed. This also allows applications such as a liveticker of arbitrary information (e.g., production plan status, current error message list, etc.) of the machine in the teleservice. 
         [0015]    The first section of the maintenance data and the second section of the maintenance data can be disjunct. However, the first section of the maintenance data and the second section of the maintenance data can also partially include the same maintenance data. Thereby, it is possible to also transmit such maintenance data in the first representation area besides maintenance data exclusively relevant to electronic further processing, which additionally or exclusively is relevant to maintenance actions by maintenance personnel and also is represented in the second representation area. 
         [0016]    In the graphical representation, the first representation area can be disposed spatially separated from the second representation area. This allows simple automated capture of the machine-readable data from the first representation area and good readability of the data capturable by a user in the second representation area. 
         [0017]    The first representation area and the second representation area can partially or even completely overlap. This is in particular advantageous if little or too little space for a separate representation of the first representation area is present in the graphical representation. Herein, it is in particular possible to overlay the first representation area by the second representation area by means of steganographic methods such that the first representation area remains capturable and evaluable by machine, but is not or hardly perceived by a user. The first representation can for example be a bar code, a QR code, a data matrix code or the like. 
         [0018]    Another aspect of the invention features a machine controller maintenance system which has at least one of the above described machine controllers and a service computer. The service computer is set up to be connected to the machine controller via a first communication link preferably by means of a remote desktop protocol such that the image information is transmitted to the service computer. The service computer has a data extraction apparatus configured to capture the first representation and to read out the first section of the maintenance data therefrom. 
         [0019]    If the service computer has a service computer display apparatus, it is possible to represent the first representation area and in particular the second representation area such that the first representation area and/or the second representation area can be captured by the remote maintenance personnel. 
         [0020]    If the machine maintenance system further has a central computer, which is set up to be connected to the machine controller via the first communication link and to the service computer via a second communication link, preferably by means of a remote desktop protocol such that the image information is transmitted from the machine controller via the central computer to the service computer, it is not required to carry out the maintenance works from a single central computer or maintenance computer, which allows simultaneous maintenance works with numerous remote maintenance personnel and multiple service PCs. 
         [0021]    Another aspect of the invention features a machine controller maintenance method for maintaining a machine controller intended for controlling a machine. The method includes storing maintenance data of at least one of the machine controller or the machine in electronically processable form, generating image information of a graphical representation that includes a first representation area representing a first section of the maintenance data in a form designed for machine readability, and displaying, on a display unit of the machine controller, the graphical representation based on the image information to an operator or indirectly or directly transmitting the image information to a service computer. 
         [0022]    Herein, the generation of the image information can be effected such that the graphical representation includes a second representation area, which includes a second section of the maintenance data in a form readable by a user. 
         [0023]    Further, the method can include capturing the first representation by the service computer and reading out the first maintenance data from the first representation by the service computer. 
         [0024]    As used herein, the term “machine” or “machine tool” presents all of the processing plants, e.g., for laser processing, punching, or bending, and appliances such as laser beam sources, plasma or induction generators. 
         [0025]    Other advantages and advantageous embodiments of the subject-matter of the invention will be appreciated from the description, the claims and the drawings. The features mentioned above and those set out below may also be used individually per se or together in any combination. The embodiments shown and described are not intended to be understood to be a conclusive listing but are instead of exemplary character for describing the invention. The Figures of the drawings show the subject-matter according to the invention in a highly schematic manner and are not intended to be understood to be to scale. 
     
    
     
       DESCRIPTION OF DRAWINGS 
         [0026]      FIG. 1  shows a known communication system for remote maintenance between a service computer and a machine controller with interposition of a central computer. 
           [0027]      FIG. 2  shows an example machine controller according to a first embodiment. 
           [0028]      FIG. 3  shows an example display of a graphical representation of the first embodiment of  FIG. 2 . 
           [0029]      FIG. 4  shows an example machine controller remote maintenance system according to a second embodiment. 
           [0030]      FIG. 5  shows an example representation of a service computer display from the second embodiment of  FIG. 4 . 
       
    
    
     DETAILED DESCRIPTION 
       [0031]    In  FIG. 2 , a machine controller  103  of a machine  104  is illustrated in a first embodiment. The machine  104  is a machine located at a machine operator or processing plant, e.g., for laser processing, punching, or bending, and appliances such as laser beam sources, plasma or induction generators, or any other machine for manipulation of a workpiece. 
         [0032]    The machine  104  has a machine controller  103  and an internal machine communication network  142 , via which data is transmitted and control operations between the machine controller  103  and a numerical control (NC) or a memory-programmable control (PLC)  151  or further technical controllers  152 ,  153  and  154  are handled. 
         [0033]    The machine controller  103  is an electronic data processing apparatus located at a machine operator, for example an industrial PC, via which the machine  104  can be programmed, operated and maintained, and which monitors the operation of the machine. The machine controller  103  is connected to a communication network  132 , for example a communication network operated based on Ethernet of the machine operator for intra-corporate data transmission and processing. The machine controller  103  has a data memory  131 , which can be configured as a magnetic hard disk drive (HDD) or as a semiconductor storage drive (SSD). Different data is stored on the data memory  131 , such as application data or maintenance data. Herein, maintenance data includes information about the current or past operating state of the machine controller or the machine. For example, this can be current configuration parameters of the machine controller  103  or the machine  104 , current states of the machine controller  103  or the machine  104  or former configuration data or operating states of the machine controller  103  or the machine  104 , for example identification and location information or log files about working operations or error messages. The machine controller  103  further has a display apparatus  134 , for example a monitor, and input devices, for example mouse and keyboard, via which the machine controller  103  can be operated by a user. 
         [0034]    Further, the machine controller  103  with its resources as its main processor and working memory has an imaging apparatus  135 , e.g., an imaging processing unit or an imaging processor, via which the display presented on the display apparatus  134  can be generated based on the maintenance data among other things. 
         [0035]      FIG. 3  shows such a display of the display apparatus  134 . In case of maintenance, a display in the form of a graphical representation  200  is generated by the imaging apparatus  135 , and a first section of the maintenance data stored in the data memory  131  in machine-readable form, for example by means of a QR code, is graphically represented in a first representation area  201 . 
         [0036]    In a second representation area  202 , a second section of the maintenance data is represented in written form such that the information can be captured by a user. Herein, it is not necessarily required that the second representation area  202  is present. For example, to maximize the represented amount of data of the first section of the maintenance data in the first representation area  201 , it is possible to increase the first representation area at the expense of the second representation area  202 . 
         [0037]    Further, it is possible to maximize the second representation area  202  for maximizing the user-readable information and to overlay the first representation area  201  for example in semi-transparent manner by it such that besides the machine-readable information more user-readable information can be displayed. In particular, in the latter case, it is possible to overlay the first representation area by the second representation area by means of graphical steganographic methods, e.g., an LBS (Least Significant Bits) method, in which the least significant bit of the color values of the second representation area is used for representing the first representation area and thus is not or hardly perceivable by the user, but can be electronically utilized. 
         [0038]    During the operation of the machine controller  103  and the machine  104 , maintenance data is stored on the data memory  131 . In case of maintenance, the machine controller  103  generates a display of the display apparatus  134  in the form of the graphical representation  200  by the imaging device  135 , which includes the first representation area  201  representing a first section of the maintenance data in a form designed for machine readability, e.g., a bar code, a QR code, a data matrix code or any other graphical encoding method. Optionally, the graphical representation includes the second representation area  202 , which represents the second section of the maintenance data in written form. 
         [0039]    The graphical representation  200  is then represented on the display apparatus  134  based on the image information generated by the imaging apparatus  135 . The graphical representation  200  can be photographed from the display apparatus  134 , e.g., by means of a conventional camera, and transmitted to the remote maintenance personnel on any way, who evaluates the information from the first representation area and/or the second representation area in case of fault or maintenance. 
         [0040]      FIG. 4  shows a second embodiment of the invention. The second embodiment has the machine  104  and the machine controller  103  of the machine operator from the first embodiment. The machine controller  103  differs from the first embodiment in that the machine controller  103  can be connected via a data transmission interface by means of a first communication link  108 . Further, an operating system is installed on the machine controller  103 , which allows by means of the service “terminal services” and RDP that other computers can access to desktop applications and data of the machine controller  103  via the remote desktop protocol. 
         [0041]    In this embodiment, the remote desktop protocol and the service “terminal services” are used for the data transmission of the image information, but this is not required to the invention. Instead, other protocols and services can also be used, which provide the same or comparable functionality such as for example the “independent computing architecture” (ICA), “remote frame buffer” (RFB) or others. Protocols as these allowing the access to graphical use surfaces of operating systems or applications on remote computers are referred to as remote desktop protocols in this specification. Remote desktop protocols are substantially characterized in that they transmit pixel information of an operating system or of an application on a remote computer in one direction to a user computer and input information such as mouse movements and keyboard inputs from the user computer in an opposite direction to the remote computer. 
         [0042]    The system of the second embodiment has a central computer  105  located at the machine manufacturer. It is an electronic data processing apparatus, which implements a telepresence system. On the central computer  105 , for example, a “TRUMPF Internet telepresence portal” is installed. More exactly, an operating system is installed, which allows by means of the service “terminal services” and RDP that other computers can access to desktop applications and data of the central computer  105  via the remote desktop protocol. Further, application software is installed on the central computer  105 , which is able to access to the content of desktops or applications of remote computers by means of remote desktop protocol (RDP) and allows the operation of the remote computers. 
         [0043]    The central computer  105  is connected to the machine controller  103  via the first communication link  108  such that data can be transmitted between the machine controller  103  and the central computer  105 . 
         [0044]    The central computer  105  can further have a computer display apparatus, for example a monitor, and input devices, for example mouse and keyboard, via which the central computer  105  can be operated and image information can be displayed to a user. However, this is not required, and the central computer  105  does not have the computer display apparatus and the input devices in this embodiment. 
         [0045]    The system of the second embodiment further has a service computer  102 , which serves for the maintenance personnel of the machine manufacturer performing maintenance works on the machine controller  103  by means of remote maintenance. The service computer  102  has a service computer display apparatus  121 , for example a monitor, and input devices, for example mouse and keyboard, via which the service computer  102  can be operated and image information can be displayed to a user. 
         [0046]    The service computer  102  is connected to the central computer  105  via a second communication link  109 , for example via a communication network of the machine manufacturer operated based on Ethernet for intra-corporate data transmission and processing, such that data can be transmitted between the machine controller  103  and the central computer  105 . 
         [0047]    Application software is installed on the service computer  102 , which can represent the content of desktops of remote computers by means of remote desktop protocol (RDP) in the embodiment, alternatively also via other remote desktop protocols, and allows the operation of the remote computers. 
         [0048]    Further, the service computer  102  with its resources as its main processor and working memory has a data extraction apparatus  122 , which is set up to capture the first representation area  201  from the image information of the graphical representation  200  and to read out the first section of the maintenance data therefrom. Herein, by the data extraction apparatus  122 , the machine-readable code of the first representation area  201  is captured by conventional image processing methods, evaluated and the extracted data is stored. Alternatively, the data extraction apparatus  122  can also be embedded in the central computer  105 . 
         [0049]    In case of maintenance, now, by the machine controller  103 , as described above, the image information of the graphical representation  200  is generated by the imaging apparatus  135  based on the previously stored maintenance data. 
         [0050]    The image information is now transmitted to the central computer  105  either additionally or alternatively to the representation on the display apparatus  134  via the data transmission interface and the first communication link  108  by means of RDP. Hereto, the first communication link  108  is established between the central computer  105  and the machine controller  103 . In the embodiment, this link is provided via the Internet. For securing the first communication link  108 , the data traffic is transmitted in encrypted manner via the first communication link  108  and thus a VPN tunnel is realized. 
         [0051]    The image information is further transmitted via the second communication link  109  by means of RPD to the service computer  102 . Hereto, the second communication link  109  is established between the central computer  105  and the service computer  102 . In the embodiment, this link is provided via a local data network of the machine operator. 
         [0052]    The graphical representation is displayed on the service computer display apparatus  121  in the display  203  shown in  FIG. 5  in a machine controller dispay area  204  based on the image information. By the data extraction apparatus  122 , the first representation area  201  is determined in conventional form, for example by recognizing distinctive corner areas of the QR code, the machine-readable graphical code is evaluated and read out in conventional form and the first section of the maintenance data extracted thereby is stored. Moreover, the second section of the maintenance data or parts thereof is displayed on the display  203  for control by a user in a data evaluation display area  205 . Based on the automatically captured first section of the maintenance data, further method steps can be performed by the service computer  102  in automated manner as the initiation of automatic test methods based on type and location information of the machine contained in the first section of the maintenance data, etc. 
         [0053]    The shown and described embodiments are not to be understood as conclusive enumeration, but rather have an exemplary character for describing the invention. 
         [0054]    Thus, in the first embodiment, the maintenance data is stored on a permanent storage medium. However, it is equally possible to work with maintenance data, which is stored in a volatile storage medium such as a volatile working memory with random access (“random access memory”, RAM). 
         [0055]    Further, in the second embodiment, the image information is transmitted by means of RDP. However, besides further remote desktop protocols, each protocol is here suitable, by which image information can be transmitted. For example, the first section of the maintenance data can also be transmitted in a non-illustrated area of the signal of an analog video transmission, in so-called blanking intervals. 
         [0056]    In the second embodiment, the service computer has the data extraction apparatus  122 . It is also possible that the central computer instead includes the data extraction apparatus, reads out the first section of the maintenance data from the first representation area  201  and further processes it itself or transmits it to the service computer  102  for further processing by means of a suitable protocol. 
         [0057]    In the second embodiment, the service computer  102  is connected to the central computer  105  via a local data network of the machine manufacturer. However, the service computer  102  can also in turn be connected to the central computer  105  via wide area networks such as the Internet, preferably by means of a VPN tunnel. 
         [0058]    A number of embodiments of the invention have been described. Nevertheless, it will be understood that various modifications may be made without departing from the spirit and scope of the invention. Accordingly, other embodiments are within the scope of the following claims.