Industrial access control method and device

Abstract

The invention relates to an industrial access control method. The method comprises the following steps: a virtual access control gateway receives a first request sent by a control station, wherein the first request is used for requesting to operate target control equipment or is used for requesting to access the target control equipment; after the first request is received, the virtual access control gateway authenticates the control station in accordance with an authorization strategy; if the authorization passes, the virtual access control gateway carries out authorization check operation in accordance with authorization rules; if the authorization check passes, the virtual access control gateway sends a second request to the target control equipment, wherein the second request is used for requesting to operate the target control equipment. The invention also relates to an industrial access control device and a virtual access control gateway. The method, the device and the equipment disclosed by the invention have the capability of reducing the risk of suffering network attack of an industrial control system, have no need to transform the traditional systems, and can be used for a heritage industrial control system.

Description

technical field [0001] The invention relates to the field of industrial automation, in particular to an industrial access control technology. Background technique [0002] With the continuous development of the industry, the requirements of industrial automation are getting higher and higher. In order to realize industrial automation, the industrial control system came into being. An industrial control system (Industrial Control System, ICS) can realize remote monitoring and control of control equipment. ICS can collect data from industrial sites, process and display the collected data. Further, the ICS can also send instructions to the field control equipment according to the collected data, so as to control the operation process of the field equipment. [0003] Typically, ICS are closed systems and rely on private networks and proprietary hardware, making them less vulnerable to cyberattacks. However, with the continuous development of network technology, ICS also began...

AI Technical Summary

Problems solved by technology

Also not applicable to legacy ICS due to hardware changes involved

Moreover, because the simple fixed password is easy to be cracked, the security is low, and the different needs of different users cannot be realized, for example, only the administrator can perform control operations, while other monitoring personnel can only obtain on-site monitoring data, etc.

Images