SCADA web HMI client device and SCADA web HMI system

Patent metadata

Field	Value
Publication number	US-12585236-B2
Application number	US-202218554800-A
Country	US
Kind code	B2
Filing date	Mar 30, 2022
Priority date	Mar 30, 2022
Publication date	Mar 24, 2026
Grant date	Mar 24, 2026

Abstract

A SCADA web HMI client device comprises a processor and a memory. The memory stores a user access level, image data for an HMI screen, and screen access authority information, all received from a web server. The screen access authority information includes an operation access level of the HMI screen and operation permission/prohibition of the HMI screen by the web browser. The processor draws the HMI screen in an operable state on the web browser in a case where the user access level is greater than or equal to the operation access level and where operation of the HMI screen by the web browser is permitted. The processor draws the HMI screen in an inoperable state on the web browser in a case where the user access level is less than the operation access level or operation of the HMI screen by the web browser is not permitted.

First claim

The invention claimed is:

1 . A Supervisory Control And Data Acquisition (SCADA) web Human Machine Interface (HMI) client device executing at least one web browser communicating with a web server, the SCADA web HMI client device comprising a processor, a memory, and a monitor, wherein
the memory stores a user access level corresponding to a login user, image data for an HMI screen for supervising an industrial plant, and screen access authority information, all received from the web server, the screen access authority information including an operation access level of the HMI screen and operation permission/prohibition of the HMI screen by the web browser, the processor is configured to execute the web browser displayed on the monitor, to draw the HMI screen in an operable state on the web browser in a case where the user access level is greater than or equal to the operation access level of the HMI screen and where operation of the HMI screen by the web browser is permitted, and the processor is configured to draw the HMI screen in an inoperable state on the web browser in a case where the user access level is less than the operation access level of the HMI screen or operation of the HMI screen by the web browser is not permitted.

2 . The SCADA web HMI client device according to claim 1 , wherein
the memory further stores exceptional access authority information, the exceptional access authority information including a specific operation access level of a specific part on the HMI screen, the specific part being a part of a plurality of parts on the HMI screen, and the processor is configured to draw the specific part in the operable state on the web browser and to draw parts other than the specific part among the plurality of parts in the inoperable state on the web browser, in a case where the user access level is less than the operation access level of the HMI screen, and where the user access level is greater than or equal to the specific operation access level of the specific part, and where operation of the HMI screen by the web browser is permitted.

3 . The SCADA web HMI client device according to claim 1 , wherein
the screen access authority information further includes a display access level of the HMI screen, the processor is configured to prohibit drawing of the HMI screen on the web browser in a case where the user access level is less than the display access level of the HMI screen, the processor is configured to draw the HMI screen in the operable state on the web browser in a case where the user access level is greater than or equal to the display access level of the HMI screen, and where the user access level is greater than or equal to the operation access level of the HMI screen, and where operation of the HMI screen by the web browser is permitted, and the processor is configured to draw the HMI screen in the inoperable state on the web browser in a case where the user access level is greater than or equal to the display access level of the HMI screen, and where the user access level is less than the operation access level of the HMI screen or operation of the HMI screen by the web browser is not permitted.

4 . The SCADA web HMI client device according to claim 3 , wherein
the memory further stores exceptional access authority information, the exceptional access authority information including a specific display access level of a specific part on the HMI screen, the specific part being a part of a plurality of parts on the HMI screen, and the processor is configured to draw, on the web browser, the specific part in an operation state based on the operation access level of the HMI screen and the operation permission/prohibition of the HMI screen by the web browser and to prohibit drawing of parts other than the specific part among the plurality of parts on the web browser, in a case where the user access level is less than the display access level of the HMI screen and where the user access level is greater than or equal to the specific display access level of the specific part.

5 . A Supervisory Control And Data Acquisition (SCADA) web Human Machine Interface (HMI) system, comprising:
an HMI server device configured to execute a web server; and an HMI client device configured to execute at least one web browser communicating with the web server, wherein the HMI server device includes a server processor and a server memory, the server memory stores login information, image data for an HMI screen for supervising an industrial plant, and screen access authority information, the login information including a user access level corresponding to a login username, the screen access authority information including an operation access level of the HMI screen and operation permission/prohibition of the HMI screen by the web browser, the server processor is configured to execute the web server that transmits the user access level corresponding to the login username, the image data, and the screen access authority information to the web browser, in response to a login request including the login username from the web browser, the HMI client device includes a client processor, a client memory, and a monitor, the client memory stores the user access level corresponding to the login user, the image data, and the screen access authority information, all received from the web server, and the client processor is configured to execute the web browser displayed on the monitor, the client processor is configured to draw the HMI screen in an operable state on the web browser in a case where the user access level is greater than or equal to the operation access level of the HMI screen and where operation of the HMI screen by the web browser is permitted, and the client processor is configured to draw the HMI screen in an inoperable state on the web browser in a case where the user access level is less than the operation access level of the HMI screen or operation of the HMI screen by the web browser is not permitted.

6 . The SCADA web HMI system according to claim 5 , wherein
the client memory further stores exceptional access authority information, the exceptional access authority information including a specific operation access level of a specific part on the HMI screen, the specific part being a part of a plurality of parts on the HMI screen, and the client processor is configured to draw the specific part in the operable state on the web browser and to draw parts other than the specific part among the plurality of parts in the inoperable state on the web browser, in a case where the user access level is less than the operation access level of the HMI screen, and where the user access level is greater than or equal to the specific operation access level of the specific part, and where operation of the HMI screen by the web browser is permitted.

7 . The SCADA web HMI system according to claim 5 , wherein
the screen access authority information further includes a display access level of the HMI screen, the client processor is configured to prohibit drawing of the HMI screen on the web browser in a case where the user access level is less than the display access level of the HMI screen, the client processor is configured to draw the HMI screen in the operable state on the web browser in a case where the user access level is greater than or equal to the display access level of the HMI screen, and where the user access level is greater than or equal to the operation access level of the HMI screen, and where operation of the HMI screen by the web browser is permitted, and the client processor is configured to draw the HMI screen in the inoperable state on the web browser in a case where the user access level is greater than or equal to the display

Assignees

• Tmeic Corp

Inventors

• Shimizu Ryo
• Nojima Akira
• Shimizu Nobuo

Classifications

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06F21/629

  to features or functions of an application · CPC title

• G06F21/62

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title