A kind of address protection method, device and electronic equipment

Abstract

The present disclosure relates to an address protection method, device and electronic device, including: acquiring a pre-created linked list, wherein each resource node of the linked list includes: an identifier, a client handle and an address name, and the identifier is used to identify a successful Start the OPC client and OPC server of the subscription function; when the first subscription message from the OPC server passes through, parse the first identifier, the first client handle and the first address name in the first subscription message; Find the target resource node containing the first identifier and the handle of the first client in the resource nodes of the linked list; obtain the second address name recorded in the target resource node; determine the first address name by comparing the first address name and the second address name Security of subscription messages. The present disclosure can better protect the address data of the OPCDA subscription function.

Description

technical field [0001] The present disclosure relates to the field of communication technologies, and in particular, to an address protection method, an apparatus, and an electronic device. Background technique [0002] OPC (OLE for Process Control, object connection and embedding applied to process control) real-time data access protocol (OPCDA) as a traditional mainstream industrial control protocol, is highly used in the industrial control environment. With the development of industrial intelligence, the traditional closed industrial control network and the Internet are more and more closely integrated, and the security problem of industrial control network is becoming more and more prominent. [0003] In the actual industrial control network environment, to ensure the security of the OPCDA protocol, it is necessary to limit the transmitted OPCDA protocol data on the gateway device to protect the security of the on-site industrial control network. [0004] The subscripti...

AI Technical Summary

Problems solved by technology

However, with such a processing mechanism, when encountering the subscription function of OPCDA, based on the global nature of OPCDA resources, the same resource can be used in different sessions, so gateway devices need to associate and use resources across sessions; at the same time, subscriptions generate The session may be a connection established from the server to the client, or it may be a connection established by ipv6, which will result in the failure to associate related resources on the gateway device, unable to control the reading of data, and unable to guarantee data security

[0005] In response to the above requirements, it is currently possible to restrict the function codes of OPCDA subscriptions on the gateway; although this method is simple and convenient, after the function codes are restricted, it will cause extreme results that the data cannot be read and the functions cannot be used, and it is impossible to enable the subscription Protection of address data after function

Images