Switch encryption system

Abstract

The invention discloses a switch encryption system. The system is characterized in that a CPU control management system comprises an initialization module, a security module, a scheduling module and an authentication module; and a core chip network flow processing system comprises a packet header analysis module, a two-layer switching module, a three-layer switching module, a state checking module, a white list strategy searching module, a black list strategy searching module, a flow classification and flow control module and an input and output module. Through the system, basic functions of data conversion, data filtering, operation processing, historical data storage, statistical processing, alarm processing, service request and the like are realized, stability of the chip is improved byadopting a software multi-stage detection and hardware multi-protection mechanism, so requirements of industrial-grade standards and industrial users are completely met, and the system has capabilities of intrusion monitoring, flow prediction, intelligent scheduling and the like, realizes data aggregation, data distribution and self-adaptive transmission of control flow data, and provides a safeservice information communication function for an industrial control network.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a switch encryption system. Background technique [0002] In recent years, with the increasing development of industrial control networks, the continuous introduction of technologies and new applications, and the continuous improvement of various industrial control network protocols, the threat of industrial control network information security has become increasingly prominent, such as the Stuxnet virus that appeared before and the recent The Siemens distributed control system SPPA-T3000 vulnerability directly threatens and affects the reliability and security of the equipment, confidentiality and overall operation and maintenance of the industrial control network. With the rapid deployment of 5G and the Industrial Internet, the security issues of industrial control networks will become more prominent. At present, my country's industrial control network uses traditiona...

AI Technical Summary

Problems solved by technology

[0003] Realizing network security based on a secure server platform cannot meet the real-time requirements of industrial control networks; while ordinary hardware gateways cannot meet the high-bandwidth and large-capacity requirements of industrial control networks for multi-service transmission;

[0004] Although commercial industrial gateways (such as Easy ProfiBus) currently on the market can complete the maintenance, management and information forwarding of industrial field equipment, they solve relatively single problems and cannot meet the differentiated needs of industrial

Images