KR102735462B1 - Smart ship system and operation method thereof - Google Patents

Abstract

A smart ship system and an operating method thereof are provided. The smart ship system includes a first smart ship management part which receives actual operation information of a ship; and a second smart ship management part which is linked with the first smart ship management part and performs cybersecurity management of the smart ship using the actual operation information, wherein the first smart ship management part is installed on a ship to monitor and control the actual operation information, the second smart ship management part is installed on land to monitor and control the actual operation information, and at least one of the first smart ship management part and the second smart ship management part includes a cybersecurity management unit for performing the cybersecurity management.

Description

Smart ship system and operation method thereof {Smart ship system and operation method thereof}

The present invention relates to a smart ship system and an operating method thereof.

Ship security is required for ship operations. To this end, it is required to monitor and control actual ship operation data on board and on land. In particular, it is necessary to ensure that the smart ship system operates safely and comprehensively on board and on land to prevent damage such as data deletion due to cyber hacking.

Korean Patent Publication No. 10-2009-0004873

The problem that the present invention seeks to solve is to effectively apply and operate a security means for a ship according to ship operation.

In particular, it is intended to comprehensively monitor and control actual operation data for ships both on board and on land.

In addition, it provides a cyber security response processor that prevents damage such as data deletion due to cyber hacking while safely operating the smart ship system on ships and land.

The tasks of the present invention are not limited to the tasks mentioned above, and other tasks not mentioned will be clearly understood by those skilled in the art from the description below.

According to an aspect of the present invention for achieving the above object, a method for operating a smart ship system includes: a step in which a real-time information generation part generates real-time information on a payload of a ship; and a step in which a first smart ship management part receives the real-time information of the ship and performs cybersecurity management of the smart ship related to the operation of the real-time information by being interlinked with a second smart ship management part, wherein the first smart ship management part is provided on the ship to monitor and control the real-time information, the second smart ship management part is provided on land to monitor and control the real-time information, and at least one of the first smart ship management part and the second smart ship management part includes a cybersecurity management unit for performing the cybersecurity management.

In addition, the cybersecurity management unit includes an IP identification module that identifies whether a user accessing the actual operation information of the ship is a connectable IP and, if identified as the connectable IP, allows access to the actual operation information of the ship; a user authentication module that requests periodic user authentication for the user according to preset conditions and maintains or deprives the connectable IP status of the user according to whether the user authentication is completed; a connection blocking module that blocks the connection of the user to limit access to the actual operation information if the user is not identified as the connectable IP by the IP identification module and sets the IP of the blocked user as a target for connection blocking; and a safety confirmation module that performs a virus check on a connection medium used by the user whose connection is blocked to attempt to access the actual operation information and monitors recently saved files at preset intervals to confirm the safety of the operation of the actual operation information, wherein the first smart ship management part and the second smart ship management part are configured to perform a safety The operation of the above actual flight information is continued or stopped based on the above safety confirmation of the verification module.

In addition, the user authentication module requests additional user authentication for the user whose access has been blocked by the access blocking module, and the first smart ship management part and the second smart ship management part can operate the actual operation information based on the completed additional user authentication when the additional user authentication is completed by the user authentication module.

In addition, the safety verification module performs either a first safety verification mode that performs the safety verification depending on whether the additional user authentication is completed or a second safety verification mode that performs the safety verification regardless of whether the additional user authentication is completed.

In addition, the above-described actual operation information generation part includes a navigation information generation module that generates navigation information related to the operating speed of the vessel as one of the above-described actual operation information, an engine information generation module that generates engine information related to the operation of the vessel's generator and pump as one of the above-described actual operation information, and a fuel information generation module that generates fuel information related to the fuel status of the vessel as one of the above-described actual operation information.

According to another aspect of the present invention for achieving the above object, a smart ship system comprises: a first smart ship management part which receives actual operation information of a ship; and a second smart ship management part which is linked with the first smart ship management part and performs cybersecurity management of the smart ship using the actual operation information, wherein the first smart ship management part is provided on the ship to monitor and control the actual operation information, the second smart ship management part is provided on land to monitor and control the actual operation information, and at least one of the first smart ship management part and the second smart ship management part includes a cybersecurity management unit for performing the cybersecurity management.

According to the smart ship system and its operating method of the present invention as described above, one or more of the following effects are achieved.

The present invention can effectively apply and operate a security means for a ship according to ship operation.

In particular, it can perform complex monitoring and control of actual operation data for ships both on board and on land.

In addition, a cyber security response processor can be provided to safely operate the smart ship system on ships and land while preventing damage such as data deletion due to cyber hacking.

FIG. 1 is a block diagram illustrating the configurations of a smart ship system according to one embodiment of the present invention.
Figures 2 to 4 are block diagrams illustrating a configuration according to Figure 1.
Figures 5 and 6 are block diagrams specifically illustrating the configuration according to Figure 1.
Figure 7 is a flowchart sequentially illustrating a method for operating a smart ship system according to one embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. The advantages and features of the present invention, and the methods for achieving them, will become apparent with reference to the embodiments described in detail below together with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but may be implemented in various different forms, and the present embodiments are provided only to make the disclosure of the present invention complete and to fully inform those skilled in the art of the scope of the invention, and the present invention is defined only by the scope of the claims. Like reference numerals refer to like elements throughout the specification.

The spatially relative terms "below," "beneath," "lower," "above," "upper," and the like can be used to easily describe the relationship between one object or component and another object or component, as depicted in the drawings. The spatially relative terms should be understood to include different directions of the objects when used or operated in addition to the directions depicted in the drawings. For example, if an object depicted in the drawings is turned over, an object described as "below" or "beneath" another object may be located "above" the other object. Thus, the exemplary term "below" can include both the above and below directions. The objects may also be oriented in other directions, and thus the spatially relative terms may be interpreted according to the orientation.

Although the terms first, second, etc. are used to describe various objects, components, and/or sections, it should be understood that these objects, components, and/or sections are not limited by these terms. These terms are merely used to distinguish one object, component, or section from another object, component, or section. Accordingly, it should be understood that a first object, a first component, or a first section referred to hereinafter may also be a second object, a second component, or a second section within the technical spirit of the present invention.

The terminology used herein is for the purpose of describing embodiments only and is not intended to be limiting of the present invention. As used herein, the singular includes the plural unless the context clearly dictates otherwise. The terms "comprises" and/or "comprising" as used herein do not exclude the presence or addition of one or more other elements, steps, operations, and/or objects mentioned. Unless otherwise defined, all terms (including technical and scientific terms) used herein may be used in the same sense as would be commonly understood by one of ordinary skill in the art to which the present invention belongs. In addition, terms defined in commonly used dictionaries shall not be ideally or excessively interpreted unless explicitly specifically defined.

Hereinafter, embodiments of the present invention will be described in detail with reference to the attached drawings. When describing with reference to the attached drawings, identical or corresponding components are given the same reference numerals regardless of the drawing symbols, and redundant descriptions thereof will be omitted.

Referring to FIG. 1, a smart ship system (100) according to one embodiment of the present invention includes a real-time information generation part (110), a first smart ship management part (120), and a second smart ship management part (130).

In addition, the first actual operation information generation part (110) of the smart ship system (100) includes a navigation information generation module (111), an engine information generation module (112), and a fuel information generation module (113). (See Fig. 6)

At least one of the first smart ship management part (120) and the second smart ship management part (130) of the above starship system (100) includes a cybersecurity management unit (140).

Here, the cybersecurity management unit (140) includes an IP identification module (141), a user authentication module (142), an access blocking module (143), and a safety verification module (144). (See Fig. 6)

The above-mentioned actual operation information generation part (110) generates actual operation information on the payload of the ship (S). The above-mentioned first smart ship management part (120) receives actual operation information of the ship (S).

The above second smart ship management part (130) is operated in conjunction with the above first smart ship management part (120) to perform cybersecurity management of the smart ship using the actual operation information. The above first smart ship management part (120) is installed in the ship (S) to monitor and control the actual operation information.

Meanwhile, referring to Fig. 2, the second smart ship management part (130) is installed on land to monitor and control the actual operation information. The cyber security management unit (140) is installed in the first smart ship management part (120).

Referring to FIG. 3, the cybersecurity management unit (140) can be equipped in the second smart ship management part (130) rather than the first smart ship management part (120).

In addition, referring to FIG. 4, the cybersecurity management unit (140) can be provided in both the first smart ship management part (120) and the second smart ship management part (130).

Referring to FIGS. 5 and 6, the IP identification module (141) of the cybersecurity management unit (140) identifies whether the user accessing the actual operation information of the ship (S) has an IP address that can be accessed.

The above IP identification module (141) allows access to the actual operation information of the ship (S) when identified as the above accessible IP. The above user authentication module (142) requests periodic user authentication for the connected user according to preset conditions.

The above user authentication module (142) maintains or revoke the access-enabled IP status of the connected user depending on whether the user authentication corresponding to the request for the above user authentication is completed.

The above-mentioned access blocking module (143) blocks the access of the user to restrict access to the actual operation information if the user is not identified as having the connectable IP in the IP identification module (141).

In addition, the above-mentioned access blocking module (143) sets the IP address of the blocked user as a target for access blocking so that access is automatically blocked thereafter. The above-mentioned safety verification module (144) performs actual security management operations for cyber security management.

Specifically, when the user whose access has been blocked attempts to access the actual flight information, the safety verification module (144) performs a safety verification operation on the access medium used for such access attempt.

For example, the safety verification module (144) performs the safety verification operation by performing a virus check on the connection medium and monitoring the most recently saved files at a preset cycle to verify the safety of the actual operation information.

The above first smart ship management part (120) and the above second smart ship management part (130) allow the operation of the actual operation information to continue or stop based on the safety confirmation of the safety confirmation module (144).

In addition, the user authentication module (142) requests additional user authentication for the user whose access has been blocked by the access blocking module (143). The user authentication module (142) enables the operation of the actual flight information based on the additional user authentication request.

For example, when the first smart ship management part (120) and the second smart ship management part (130) complete the additional user authentication in the user authentication module (142), the operation of the actual operation information becomes possible based on the completed additional user authentication.

The above safety verification module (144) operates in the first safety verification mode and the second safety verification mode to verify the safety. The first safety verification mode performs the safety verification depending on whether the additional user authentication is completed.

The above second safety verification mode performs one of the second safety verification modes that performs the safety verification regardless of whether the additional user authentication is completed.

Here, the navigation information generation module (111) of the actual operation information generation part (110) generates navigation information related to the operating speed of the ship (S) as one of the actual operation information.

The above-mentioned engine information generation module (112) of the above-mentioned actual operation information generation part (110) generates engine information related to the operation of the generator and pump of the ship (S) as one of the above-mentioned actual operation information.

In addition, the fuel information generation module (113) of the actual operation information generation part (110) generates fuel information related to the fuel status of the ship (S) as one of the actual operation information.

Referring to Fig. 7, in a smart ship system operation method (S100) according to one embodiment of the present invention, a real operation information generation part generates real operation information on a ship's payload. In addition, a first smart ship management part receives the ship's real operation information.

The above first smart ship management part is interconnected with the second smart ship management part to perform cybersecurity management of the smart ship related to the operation of the above actual operation information. The above first smart ship management part is installed on the ship to monitor and control the above actual operation information.

In addition, the second smart ship management part is installed on land to monitor and control the actual operation information. A cybersecurity management unit performs cybersecurity management in at least one of the first smart ship management part and the second smart ship management part.

Although the embodiments of the present invention have been described with reference to the above and the attached drawings, those skilled in the art to which the present invention pertains will understand that the present invention can be implemented in other specific forms without changing the technical idea or essential characteristics thereof. Therefore, it should be understood that the embodiments described above are exemplary in all respects and not restrictive.

110: Actual operation information generation part 111: Navigation information generation module
112: Agency information generation module 113: Fuel information generation module
120: 1st Smart Ship Management Part 130: 2nd Smart Ship Management Part
140: Cyber Security Management Unit 141: IP Identification Module
142: User authentication module 143: Access blocking module
144: Safety Verification Module

Claims (6)

A step in which the actual operation information generation part generates actual operation information for the ship's payload; and
A step in which the first smart ship management part receives the actual operation information of the ship and performs cybersecurity management of the smart ship related to the operation of the actual operation information by interworking with the second smart ship management part,
The above first smart ship management part is installed on the ship to monitor and control the actual operation information.
The above second smart ship management part is installed on land and monitors and controls the actual operation information.
At least one of the first smart ship management part and the second smart ship management part includes a cybersecurity management unit for performing the cybersecurity management.
The above cybersecurity management unit,
An IP identification module that identifies whether a user accessing the actual operation information of the vessel is an accessible IP, and if identified as an accessible IP, allows access to the actual operation information of the vessel;
A user authentication module that requests periodic user authentication for the above-mentioned user according to preset conditions and maintains or revoke the above-mentioned connection-enabled IP status of the above-mentioned user according to whether the above-mentioned user authentication is completed;
A connection blocking module that blocks the connection of the user to block access to the actual operation information if the user is not identified as the connectable IP in the IP identification module, and sets the IP of the blocked user as a target for connection blocking;
Including a safety verification module that performs virus checks and monitors recently saved files at preset intervals on the connection medium used by the above-mentioned user, whose connection has been blocked, to attempt to access the above-mentioned actual flight information, thereby verifying the safety of the operation of the above-mentioned actual flight information.
A smart ship system operation method in which the first smart ship management part and the second smart ship management part continue or stop operation of the actual operation information based on the safety confirmation of the safety confirmation module. delete In the first paragraph,
The above user authentication module requests additional user authentication for the user whose access has been blocked by the above access blocking module.
A method for operating a smart ship system, wherein the first smart ship management part and the second smart ship management part can operate the actual operation information based on the completed additional user authentication when the additional user authentication is completed in the user authentication module. In the third paragraph,
The above safety verification module is,
A first safety verification mode that performs the safety verification based on whether the above additional user authentication is completed;
A method for operating a smart ship system, wherein one of the second safety verification modes for performing the safety verification is performed regardless of whether the above additional user authentication is completed. In the first paragraph,
The above actual flight information generation part is,
A navigation information generation module that generates navigation information related to the operating speed of the vessel as one of the above actual operation information,
An engine information generation module that generates engine information related to the operation of the ship's generator and pump as one of the above-mentioned actual operation information,
A smart ship system operation method, comprising a fuel information generation module that generates fuel information related to the fuel status of the ship as one of the above actual operation information. The first smart ship management part that receives the actual operation information of the ship; and
Including a second smart ship management part that is linked to the first smart ship management part and performs cyber security management of the smart ship using the actual operation information as a medium,
The above first smart ship management part is installed on the ship to monitor and control the actual operation information.
The above second smart ship management part is installed on land and monitors and controls the actual operation information.
At least one of the first smart ship management part and the second smart ship management part includes a cybersecurity management unit for performing the cybersecurity management,
The above cybersecurity management unit,
An IP identification module that identifies whether a user accessing the actual operation information of the vessel is an accessible IP, and if identified as an accessible IP, allows access to the actual operation information of the vessel;
A user authentication module that requests periodic user authentication for the above-mentioned user according to preset conditions and maintains or revoke the above-mentioned connection-enabled IP status of the above-mentioned user according to whether the above-mentioned user authentication is completed;
A connection blocking module that blocks the connection of the user to block access to the actual operation information if the user is not identified as the connectable IP in the IP identification module, and sets the IP of the blocked user as a target for connection blocking;
Including a safety verification module that performs virus checks and monitors recently saved files at preset intervals on the connection medium used by the above-mentioned user, whose connection has been blocked, to attempt to access the above-mentioned actual flight information, thereby verifying the safety of the operation of the above-mentioned actual flight information.
A smart ship system in which the first smart ship management part and the second smart ship management part continue or stop the operation of the actual operation information based on the safety confirmation of the safety confirmation module.