Industrial control system with intrusion tolerance and security protection method

Abstract

The invention provides an industrial control system with intrusion tolerance and a security protection method. The method comprises N main control computers, a parsing switch and at least one controlled device. The main control computers are used for sending control instructions to the parsing switch; the parsing switch is used for sending the control instructions to the controlled device after receiving at least [(N-1) / 2] identical control instructions; and the controlled device is used for sending status data to the main control computers via the parsing switch, wherein N is an integer greater than or equal to 3, and [(N-1) / 2] is the integer part of (N-1) / 2. According to the embodiments of the invention, the parsing switch compares the control instructions received from the multiple main control computers, and only when the parsing switch receives at least [(N-1) / 2] identical control instructions, the parsing switch sends the control instructions to the controlled device. Thus, malicious control instructions cannot be sent to the controlled device even if the main control computers are intruded, and the network security of the industrial control system is improved.

Description

technical field [0001] The invention relates to the technical field of industrial control security, in particular to an intrusion-tolerant industrial control system and a security protection method. Background technique [0002] This section introduces readers to background technologies that may be related to various aspects of the present invention, and it is believed that useful background information can be provided to readers, thereby helping readers to better understand various aspects of the present invention. Accordingly, it is to be understood that the descriptions in this section are for the purposes stated above and do not constitute admissions of prior art. [0003] Industrial control system is a complex and mature system. A simple industrial control system includes a main control unit and one or more PLC controllers, a more complex computer centralized control system CCS, and a more complex distributed control system DCS, as well as computer-based data acquisiti...

AI Technical Summary

Problems solved by technology

[0013] Embodiments of the present invention provide an intrusion-tolerant industrial control system and a security protection method, which are used to solve the problem of how to ensure that malicious control commands cannot be sent to controlled devices after the master computer is invaded

Images