Abstract: This controller system includes: a program acquisition unit that acquires, by turning on the controller system, a control program from a server in which the control program is stored; a main storage device that stores the control program acquired by the program acquisition unit while electric power is supplied to the controller system; and a program execution unit that executes the control program stored in the main storage device.

Abstract: A network system includes: a first master device configured to carry out, in every cycle, (i) a process of receiving data from a first slave device, (ii) a process of carrying out, in accordance with pre-allocation, a part of a first process with respect to the data, (iii) a process of transmitting data corresponding to a remainder of the first process to an outside entity in accordance with the pre-allocation and receiving a result corresponding the remainder of the first process, and (iv) a process of transmitting, to the first slave device, a result corresponding to the first process; and at least one second master device configured to transmit, to the first master device before a period allocated to the first process within the cycle ends, the result corresponding to the remainder of the first process with respect to the data received from the first master device.

Abstract: A control system including a controller system and a support device is provided. The controller system controls a control target. The support device supports setting of the controller system. The support device includes a system-configuration input part, a threat analysis database, a threat-scenario creating part, a countermeasure database, a countermeasure creating part, and a security setting part. The countermeasure creating part creates a countermeasure scenario containing a countermeasure for each of protected assets of the controller system according to a threat scenario and countermeasures of the countermeasure database.

Abstract: This controller system includes: a program acquisition unit that acquires, by turning on the controller system, a control program from a server in which the control program is stored; a main storage device that stores the control program acquired by the program acquisition unit while electric power is supplied to the controller system; and a program execution unit that executes the control program stored in the main storage device.

Abstract: The purpose of the present invention is to solve the new problem of appropriately protecting a control apparatus and a controller system including the control apparatus against a security event possible to occur. The support apparatus includes: a forming/editing part, providing a user interface for forming or editing a user program defining contents of the control arithmetic operation executed by the control apparatus; and an output part outputting the user program formed via the user interface provided by the forming/editing part. The forming/editing part provides a user interface receiving selection of a change instruction for changing a behavior of the security monitoring device carried out by executing the security protection process as an instruction constituting the user program.

Abstract: The purpose of the present invention is to solve the new problem of appropriately protecting a control apparatus and a controller system including the control apparatus against a security event. The execution content of a security protection process performed by a security-monitoring device is determined in accordance with the action state of this control apparatus and/or a notification issued through a control arithmetic operation by the control apparatus.

Abstract: The present invention addresses the novel problem of protecting against threats that can arise as a result of the development of networked or intelligent control devices and control systems. This controller system includes: a control unit that executes a control operation for controlling a control target; and a security unit that is connected to the control unit and oversees and manages security functions for the controller system. The security unit includes a detection means that detects whether any unauthorized intrusion into the controller system has occurred. The control unit includes a command transmission means that transmits commands for changing the behavior of the detection means of the security unit.

Abstract: A network system includes: a first master device configured to carry out, in every cycle, (i) a process of receiving data from a first slave device, (ii) a process of carrying out, in accordance with pre-allocation, a part of a first process with respect to the data which has been received, (iii) a process of transmitting data corresponding to a remainder of the first process to an outside entity in accordance with the pre-allocation and receiving a result corresponding the remainder of the first process, and (iv) a process of transmitting, to the first slave device, a result corresponding to the first process; at least one second master device configured to transmit, to the first master device before a period allocated to the first process within the cycle ends, the result corresponding to the remainder of the first process with respect to the data received from the first master device; a first network configured to transmit data between the first slave device and the first master device; and a second networ

Abstract: An objective of the present invention is to facilitate settings to be performed for a relay device. A control device, configured to be able to communicate with other devices via a relay device, is provided with: a storage unit that stores a user program including at least one of instructions for performing communication settings that are settings related to communication with the other devices; and a communication setting unit that performs the communication settings. The communication setting unit performs transmission and reception of commands together with the relay device on the basis of fulfillment of conditions of executing the instruction and performs the communication settings indicated by the instruction.

Abstract: A mechanism which can easily acquire a connection relationship of each device even in a multilayered network system having a plurality of protocols is provided. A network system has at least one network including a master processing unit and one or a plurality of slave processing units. Each of first, second, and third devices holds characteristic information indicating whether or not the device has a master processing unit or a slave processing unit. The first device includes a network management unit that acquires single-layer network configuration information from each master processing unit included in the network system to generate multilayer network configuration information indicating a connection relationship of each device in the network system.

Abstract: A mechanism which can easily acquire a connection relationship of each device even in a multilayered network system having a plurality of protocols is provided. A network system has at least one network including a master processing unit and one or a plurality of slave processing units. Each of first, second, and third devices holds characteristic information indicating whether or not the device has a master processing unit or a slave processing unit. The first device includes a network management unit that acquires single-layer network configuration information from each master processing unit included in the network system to generate multilayer network configuration information indicating a connection relationship of each device in the network system.

Abstract: A control system and control device are provided capable of flexibly realizing communication processing without requiring an additional unit even when a plurality of units having a communication function are present is provided. The control system includes a first unit having a first communication port for transmitting and receiving data, and one or more second units electrically connected to the first unit. Each of the second units includes a logical communication unit for transmitting/receiving data to/from the device electrically connected to the first communication port of the first unit. The first unit includes a forwarding processing unit which forwards transmission data transmitted from the second unit to the device which is a transmission destination.

Abstract: A technique is provided for detecting a connection abnormality of a slave device, in a network system including a master device and slave devices. The technique includes a connection abnormality detection method in a network system including a master device and a plurality of slave devices. In the network system, data is transmitted from the master device and then returned to the master device through respective slave devices. Each slave device has an upstream-side port and a downstream-side port. The connection abnormality detection method includes acquiring topology information of the network system, closing or opening the port of each slave device such that a serial topology is formed to include a target slave device located on the downmost stream side, transmitting inspection data after the control of the port, and detecting a connection abnormality of the device on the basis of a status of return of the inspection data.

Abstract: A network system includes a master device (200), a plurality of slave devices; and a hub device including a plurality of ports on a downstream side. The master device (200) includes: a storage unit (204) in which setting information is stored, information on a device and topological information being set in the setting information; a real configuration information generating unit (202) that generates real configuration information including information on the device constituting an actual network system and topological information on the device; and a determination unit (203) that determines whether a destination of each device is correct by comparing the real configuration information to the setting information. The determination unit (203) determines that the destination of the slave device is correct, even if a position of the connected port is incorrect with respect to the slave device connected to the hub device.

Abstract: A design assistance device includes: a design information storage section configured to store design information containing at least information of slave devices and information of a topology in a network system in accordance with a design created by a user; an actual configuration information generation section configured to generate actual configuration information containing at least the information of the slave devices and the information of the topology in the actual network system; a comparison section configured to compare the design information and the actual configuration information; and an output section configured to generate a comparison screen indicating the respective configurations of the designed network system and the actual network system along with their commonalities and differences and outputting the comparison screen to a display device.

Abstract: A network system includes a master device (200), a plurality of slave devices; and a hub device including a plurality of ports on a downstream side. The master device (200) includes: a storage unit (204) in which setting information is stored, information on a device and topological information being set in the setting information; a real configuration information generating unit (202) that generates real configuration information including information on the device constituting an actual network system and topological information on the device; and a determination unit (203) that determines whether a destination of each device is correct by comparing the real configuration information to the setting information. The determination unit (203) determines that the destination of the slave device is correct, even if a position of the connected port is incorrect with respect to the slave device connected to the hub device.

Abstract: A design assistance device includes: a design information storage section configured to store design information containing at least information of slave devices and information of a topology in a network system in accordance with a design created by a user; an actual configuration information generation section configured to generate actual configuration information containing at least the information of the slave devices and the information of the topology in the actual network system; a comparison section configured to compare the design information and the actual configuration information; and an output section configured to generate a comparison screen indicating the respective configurations of the designed network system and the actual network system along with their commonalities and differences and outputting the comparison screen to a display device.

Abstract: A technique is provided for detecting a connection abnormality of a slave device, in a network system including a master device and slave devices. The technique includes a connection abnormality detection method in a network system including a master device and a plurality of slave devices. In the network system, data is transmitted from the master device and then returned to the master device through respective slave devices. Each slave device has an upstream-side port and a downstream-side port. The connection abnormality detection method includes acquiring topology information of the network system, closing or opening the port of each slave device such that a serial topology is formed to include a target slave device located on the downmost stream side, transmitting inspection data after the control of the port, and detecting a connection abnormality of the device on the basis of a status of return of the inspection data.