Industrial control equipment interface protection device and system

Abstract

The invention provides an industrial control equipment interface protection device and system. The device comprises a control module, a first interface module and an interface online monitoring module, wherein the control module is connected with the interface online monitoring module, the interface online monitoring module is connected with the first interface module, and the control module controls the interface online monitoring module to monitor the state of each interface of the first interface module. The scheme provided by the invention has the following beneficial effects: all data ofa data interface can be screened, an illegal data packet can be intercepted, the state of an idle interface can be monitored in real time, the interface is physically protected from being invaded, andan alarm is given when danger occurs.

Description

Technical field

[0001] The present invention relates to the technical field of industrial control equipment safety protection, in particular to an industrial control equipment interface protection device and system. Background technique

[0002] The production and processing equipment in the industrial control environment has multiple communication interfaces, and some of these interfaces are usually used to transmit data in actual applications: if the transmission data of the data interface does not go through the security check, there is a risk of malicious attack, virus infection, and problems It can’t be traced afterwards; and other idle interfaces are exposed, and there are also major security risks, especially in military units, which can seriously affect factory production, or cause core model data leakage, cause huge property losses, and seriously threaten national security .

[0003] The existing instruments have the following shortcomings: they cannot effectively protect...

Examples

Embodiment 1

[0032] An interface protection device for industrial control equipment, such as figure 1 , figure 2 As shown, it includes: a control module, a first interface module, an interface online monitoring module, the control module is connected to the interface online monitoring module, the interface online monitoring module is connected to the first interface module, and the control module controls the interface online monitoring module to monitor the first The status of each interface of the interface module.

[0033] Access equipment includes equipment in an industrial control environment, etc., referred to as industrial control equipment.

[0034] The interface online monitoring module includes a detection module for detecting the online status of the idle port accessed by the first interface module.

[0035] The control module includes the main control chip, which communicates with the interface online monitoring module, receives the status of the protected idle interface in real time...

Embodiment 2

[0039] Each of the following technical features can be combined with Embodiment 1 alone to form an independent technical solution, or any of the following technical features can be combined with Embodiment 1 to form an independent technical solution.

[0040] Such as figure 2 As shown, further, the first interface module includes a plurality of interface connection terminals, one end of the plurality of interface connection terminals is connected to the interface online monitoring module, and the other end is connected to the idle interface of the access device.

[0041] The interface terminal is a universal interface, which can be directly connected to the idle network port, serial port, and USB port of the access device.

[0042] The idle interface of the protected access device is connected to the terminal through a cable that matches the universal interface, such as image 3 Shown is the wiring terminal and the interface online monitoring circuit diagram, where P1 is the wiring t...

Embodiment 3

[0056] Each of the following technical features can be combined with the first and / or second embodiment alone to form an independent technical solution, or any of the following technical features can be combined with the first and / or second embodiment alone to form an independent technical solution.

[0057] Further, it also includes a second interface module. The second interface module includes one or more interfaces of a network port, a serial port, and a USB port in pairs; one end of each pair of interfaces is connected to the control module, and the other end is connected to the upstream Or downlink device connection; the control module controls the forwarding or discarding of uplink and downlink data for each pair of interfaces.

[0058] The main control chip in the protective device is serially connected between the industrial control equipment data interface and the management terminal (or USB equipment), and the system can obtain the data interface to receive and send all d...

Technical field

[0001] The present invention relates to the technical field of industrial control equipment safety protection, in particular to an industrial control equipment interface protection device and system. Background technique

[0002] The production and processing equipment in the industrial control environment has multiple communication interfaces, and some of these interfaces are usually used to transmit data in actual applications: if the transmission data of the data interface does not go through the security check, there is a risk of malicious attack, virus infection, and problems It can’t be traced afterwards; and other idle interfaces are exposed, and there are also major security risks, especially in military units, which can seriously affect factory production, or cause core model data leakage, cause huge property losses, and seriously threaten national security .

[0003] The existing instruments have the following shortcomings: they cannot effectively protect...

Examples

Embodiment 1

[0032] An interface protection device for industrial control equipment, such as figure 1 , figure 2 As shown, it includes: a control module, a first interface module, an interface online monitoring module, the control module is connected to the interface online monitoring module, the interface online monitoring module is connected to the first interface module, and the control module controls the interface online monitoring module to monitor the first The status of each interface of the interface module.

[0033] Access equipment includes equipment in an industrial control environment, etc., referred to as industrial control equipment.

[0034] The interface online monitoring module includes a detection module for detecting the online status of the idle port accessed by the first interface module.

[0035] The control module includes the main control chip, which communicates with the interface online monitoring module, receives the status of the protected idle interface in real time...

Embodiment 2

[0039] Each of the following technical features can be combined with Embodiment 1 alone to form an independent technical solution, or any of the following technical features can be combined with Embodiment 1 to form an independent technical solution.

[0040] Such as figure 2 As shown, further, the first interface module includes a plurality of interface connection terminals, one end of the plurality of interface connection terminals is connected to the interface online monitoring module, and the other end is connected to the idle interface of the access device.

[0041] The interface terminal is a universal interface, which can be directly connected to the idle network port, serial port, and USB port of the access device.

[0042] The idle interface of the protected access device is connected to the terminal through a cable that matches the universal interface, such as image 3 Shown is the wiring terminal and the interface online monitoring circuit diagram, where P1 is the wiring t...

Embodiment 3

[0056] Each of the following technical features can be combined with the first and / or second embodiment alone to form an independent technical solution, or any of the following technical features can be combined with the first and / or second embodiment alone to form an independent technical solution.

[0057] Further, it also includes a second interface module. The second interface module includes one or more interfaces of a network port, a serial port, and a USB port in pairs; one end of each pair of interfaces is connected to the control module, and the other end is connected to the upstream Or downlink device connection; the control module controls the forwarding or discarding of uplink and downlink data for each pair of interfaces.

[0058] The main control chip in the protective device is serially connected between the industrial control equipment data interface and the management terminal (or USB equipment), and the system can obtain the data interface to receive and send all d...

Images