OPC safety proxy system and proxy method thereof

Abstract

The present invention discloses OPC safe agent system and agent method thereof, which relates to information systems safety technique field to resolve technical problems of OPC system safety; the OPC safe agent system includes OPC safe agent server, at least a OPC customer terminal respectively connecting with OPC safe agent server and at least a OPC server respectively connecting with OPC safe agent server; OPC safe agent server as safety gateway cross inside and outside net with different safety demand in user; the safe agent server uses Linux operation system platform; the safe agent server includes coadjacent identity authentication based on USBkey X.509 and cipher key exchange module, OPC demand authority checking and agent forwarding module, data ciphering module. The present invention discloses consistency of various authorizations OPC transparent visit between producing system inside and outside nets, and satisfies higher safety separating demand.

Description

technical field [0001] The invention relates to information system security technology, in particular to a technology of an OPC security agent system and an agent method that can meet higher security isolation requirements. Background technique [0002] OPC specification overview: [0003] In the field of power system control, various fieldbus control systems are increasingly playing an important role. However, due to the wide variety of fieldbus systems that can be used for power system control, their access methods and interfaces are all different, which makes the application systems of power control increasingly complex. Any application that needs to access any fieldbus system must follow the fieldbus system. The specification of the bus system develops a set of bottom-level drivers and communication modules, and its control modes are as follows: figure 1 shown. [0004] For such a control method, it is very inconvenient to upgrade and maintain the software and hardwar...

AI Technical Summary

Problems solved by technology

The isolation gatekeeper can cut off the TCP / IP connection between the internal and external networks and provide strong security isolation. However, the current isolation gatekeeper only provides general network services such as Web access, FTP file transfer, and e-mail sending and receiving. Provide strong security user authentication means, so far there is no isolated gatekeeper that supports OPC protocol

Images