Security access control method, device and system

Abstract

The invention provides a security access control method and system and devices. The method comprises the following steps: setting an access control gateway on a communication channel of an upper computer and a control unit, receiving an access request message sent by the upper computer and analyzing the access request message by the access control gateway, obtaining application layer information in the access request message, judging whether a corresponding relation between an upper computer identifier and a to-be-accessed control unit identifier is searched in a security strategy library and whether operation information of the upper computer on the to-be-accessed control unit satisfies the operation authority of the upper computer by the access control gateway according to the application layer information, and if so, sending the operation information to the to-be-accessed control unit. By adoption of the security access control method and system and the devices provided by the invention, security monitoring of the access request message sent by the upper computer is realized, and the security threats faced by an industrial control system are solved.

Description

technical field [0001] The invention relates to the field of industrial control, in particular to a security access control method, device and system. Background technique [0002] Modern industrial infrastructure includes key industries such as electric power, oil and natural gas, chemical industry, water conservancy, industrial manufacturing, and traffic control, which constitute an important foundation for my country's national economy, modern society, and national security. Among them, the industrial control system (Industrial Control System, ICS) constitutes the nervous system of modern industrial infrastructure. Most of the traditional industrial control systems are closed networks using special technology, and there is no interconnection with the outside world, and the information security threats they face are not prominent. Correspondingly, various industrial control equipment, applications, systems, and communication protocols are mainly designed for proprietary c...

AI Technical Summary

Problems solved by technology

[0004] At present, the biggest threat is that the existing industrial control communication protocol does not consider the requirements of information security at the beginning of design, resulting in the lack of safe access control when the upper computer in the industrial control system accesses the field control equipment through the industrial control protocol mechanism, so that attacks such as eavesdropping, tampering, replay, and insertion can be applied to key industrial control network communications, resulting in serious consequences

Images