OPC safety proxy system and proxy method thereof

Abstract

The present invention discloses OPC safe agent system and agent method thereof, which relates to information systems safety technique field to resolve technical problems of OPC system safety; the OPC safe agent system includes OPC safe agent server, at least a OPC customer terminal respectively connecting with OPC safe agent server and at least a OPC server respectively connecting with OPC safe agent server; OPC safe agent server as safety gateway cross inside and outside net with different safety demand in user; the safe agent server uses Linux operation system platform; the safe agent server includes coadjacent identity authentication based on USBkey X.509 and cipher key exchange module, OPC demand authority checking and agent forwarding module, data ciphering module. The present invention discloses consistency of various authorizations OPC transparent visit between producing system inside and outside nets, and satisfies higher safety separating demand.

Description

technical field [0001] The invention relates to information system security technology, in particular to a technology of an OPC security proxy system and its proxy method that can meet higher security isolation requirements. Background technique [0002] Overview of the OPC specification: [0003] In the field of power system control, various fieldbus control systems are playing an increasingly important role. However, due to the wide variety of fieldbus systems that can be used for power system control, their access methods and interfaces are different, resulting in increasingly complex power control application systems. Any application that needs to access any fieldbus system must comply with the field bus system. The specification of the bus system develops a complete set of underlying drivers and communication modules, whose control modes are as follows figure 1 shown. [0004] For such a control method, it is very inconvenient to upgrade and maintain the software and...

AI Technical Summary

Problems solved by technology

The isolation gatekeeper can cut off the TCP / IP connection between the internal and external networks and provide strong security isolation. However, the current isolation gatekeeper only provides general network services such as Web access, FTP file transfer, and e-mail sending and receiving. Provide strong security user authentication means, so far there is no isolated gatekeeper that supports OPC protocol

Images