Industrial communication gateway, and industrial data security isolation system and method

Abstract

The invention relates to an industrial communication gateway comprising: an industrial multi-protocol gateway used for collecting, converting and transmitting data; and a security protocol gateway used for receiving the data transmitted by the industrial multi-protocol gateway through a one-way data bus. The data are sent to the security protocol gateway by the industrial multi-protocol gateway byusing the one-way data bus, so that the security protocol gateway cannot access or modify the data of a collection layer. This physical link layer isolation mode is different from the existing software layer isolation mode, the isolation effect is more thorough, and the security performance is better.

Description

technical field [0001] The invention relates to a communication gateway, in particular to an industrial communication gateway, an industrial data security isolation system and a method thereof. Background technique [0002] As port equipment enters the era of Industry 4.0, smart terminals and automated terminals emerge as the times require. [0003] There are many types of automation equipment on the port site. In the prior art, device communication usually adopts industrial bus and various other custom protocols, so the communication conversion between devices limits the integration application. [0004] Industrial field equipment has been in the harsh outdoor environment for a long time, and is tested by factors such as high temperature, high humidity, and high salinity, and communication will be interfered. How to effectively diagnose, isolate, and analyze communication fault nodes is a difficult problem in application. [0005] At the same time, due to the increasing a...

AI Technical Summary

Problems solved by technology

[0009] Industrial machines in industrial networks are often not installed with anti-virus software and firewalls, and because there are some differences in system topology and communication protocols between industrial control networks and enterprise-level general information systems, existing network security products such as enterprise-level firewalls cannot Directly and effectively applied to industrial control network

[0010] And it will run for several months without updating security patches or anti-virus software. Therefore, the interior of the industrial network is a potential source of multi-point intrusion infection or attack, such as mobile portable devices, USB devices, serial connections, wireless connection systems, The access and eavesdrop...

Images