Security policy matching method based on onsite layer device, and onsite layer device

Abstract

The invention discloses a security policy matching method based on an onsite layer device, and an onsite layer device. The onsite layer device is an important part in an industrial Internet operation system and comprises an industrial process control and management module, a heterogeneous onsite device integration module, an industrial management software loading module and an onsite bus communication protocol module. The security policy matching method is used for solving the problems of low matching speed and low matching efficiency of a security policy matching process of the onsite bus communication protocol module, and the to-be-matched table items are complex to maintain. In a multi-stage TCAM combination process, the security policy association action information in the policy information obtained by the previous stage matching can be used for determining the composition of the matching keyword used by the next stage matching and realizing flexible matching of feature information, and the screening of the security policy messages promotes the localized manufacture of safe and reliable chips.

Description

technical field [0001] The invention relates to the technical field of industrial Internet operating systems, in particular to a security policy matching method based on messages of field layer devices and field layer devices. Background technique [0002] At present, the security policy matching of messages in the switch chip is mostly maintained and searched in a binary tree structure. In the Ethernet switch chip, the security policy matching often involves quickly searching for ACL (Access Control List, Access Control List), routing, etc. Table and other functions, at this time, the search efficiency will affect the performance of the chip. In the current method for the switch chip to match the security policy of the message, the search operation for the table needs to perform multi-level search in the tree, and the security policies of different levels for the same message are not associated. Therefore, when performing security policy matching, the matching process is c...

AI Technical Summary

Problems solved by technology

[0005] Embodiments of the present invention provide a security policy matching method based on messages of field layer devices and field layer devices to solve the problem of complex security policy matching process in the prior art and complicated maintenance of table items to be matched. During the matching process Technical issues with slow matching speed and low matching efficiency

Images