Software package management and operation method and device for industrial control system, industrial control system and computer readable medium

Abstract

The invention relates to a software package management and operation method for an industrial control system. The method comprises the steps of a software package used for performing software installation or upgrading on an industrial control host is uploaded to a safety management center; the safety management center performs virus scanning on the uploaded software package to ensure the safety; the bidirectional authentication is carried out between the safety management center and the industrial control host; a software package and a temporary white list are issued to the industrial controlhost by the safety management center which passes the bidirectional authentication with the industrial control host, and the industrial control host is authorized to carry out software installation orupgrading operation; and the industrial control host decompresses the software package to obtain a decompressed file for software installation or upgrading, and executes the decompressed file according to the temporary white list, thereby performing software installation or upgrading operation. According to the invention, the unique legal source of the software package is ensured, the safety of data transmission between the industrial control host and the safety management center is ensured, and the safety protection of the operating environment of the industrial control host in the softwareinstallation or upgrading process is ensured.

Description

Technical field [0001] The present invention relates to methods and apparatus for management and operation of a package, in particular to a method, apparatus, industrial control system, and computer readable medium for software package management and operation of industrial control systems. Background technique [0002] In the industrial control system, the mainframe is generally the frequency of professional software, update, and upgrades. At the same time, the industrial control system has strict requirements for the reliability of the business, so the industrial control environment is, for example, the application software white List technology. The so-called software whitelist refers to only trusted software to allow execution, and only trusted messages can be transmitted on the network. [0003] However, although the software update frequency of the industrial control system is low, it is avoided that they need to be upgraded or maintained. For industrial control hosts, if t...

AI Technical Summary

Problems solved by technology

For industrial control hosts, if the current industrial control host has whitelist protection or other file protection policies, the files or directories used for upgrading will be restricted by whitelist protection or other file protection policies, and may be identified as files that pose a threat to the system. Therefore, the operation of the upgrade file is restricted, which affects the normal installation and upgrade of the software.

[0004] At this time, if you copy the software package for installing or upgrading the software of the industrial control mainframe to the industrial control mainframe through the peripherals, you need to register and authorize the use of the relevant peripherals first. The operation is more complicated, and the use of the peripherals also increases the system Risk of virus infection; if the software package is transmitted through network download, there are also cumbersome registration and authorization steps, and the security is not guaranteed

Images