Industrial network data isolation method, device and storage medium

Abstract

The invention provides an industrial network data isolation method, a device and a storage medium. The method comprises the following steps: receiving a message sent by an external management network side host, and determining the type of the message under the condition that the source IP address of the message belongs to the trusted source IP address range; under the condition that the type of the message is an instruction message, determining a danger level of the instruction message; under the condition that the danger level of the instruction message is lower than a preset danger level, sending the instruction message to an industrial system network side host; receiving industrial data sent by the industrial system network side host, performing data encryption on the industrial data, and sending the encrypted ciphertext and the key to the external management network side host to enable the external management network side host to decrypt the ciphertext; wherein the safety level of the external management network is lower than that of the industrial system network. The isolation effect of data isolation of an industrial system is improved.

Description

technical field [0001] The present application relates to the technical field of industrial network security, in particular to an industrial network data isolation method, device and storage medium. Background technique [0002] In the process of industrial production, with the development of automation control and the Internet of Things, it has become a trend in industrial production to interconnect production equipment or smart devices to form an industrial system network. Since the security level of the enterprise industrial system network is extremely high, and the external management network often needs to be connected to the Internet, the security level is very low, and it is always threatened by viruses and malicious software from the Internet side. The industrial system network and the external management network Interconnection and communication are very likely to cause important data in the industrial system network to be stolen, causing major losses to the enterpr...

AI Technical Summary

Problems solved by technology

[0004] In view of the problems existing in the above-mentioned prior art, the embodiment of the present application proposes an industrial network data isolation method, device and storage medium, which solves the problem that the existing data isolation method has low command filtering efficiency and cannot guarantee the security of the filtered message nature, and the lack of protection mechanisms for industrial data

Images