Method and system for detecting exception instructions in a hardware device

Abstract

Embodiments of the present disclosure provide a method and system for detecting abnormal instructions in a hardware device, which is applied to the technical field of network security. The method comprises receiving a mixed signal sent by a DCS device, wherein the mixed signal is obtained by mixing a side phase waveform and a low-frequency modulation signal by the DCS device, the side phase waveform is obtained by executing a DCS instruction by the DCS device, and the low-frequency modulation signal is obtained by a control device according to a first signature value corresponding to the DCS instruction; extracting a second signature value according to the mixed signal; verifying the second signature value according to the first signature value, and sending a verification result to the control device, wherein the verification result comprises a legal instruction or an illegal instruction. In this way, the identifiable execution of abnormal instructions can be realized without modifying the control device.

Description

TECHNICAL FIELD

[0001] The present disclosure relates to the technical field of computers, in particular to the technical field of network security, and specifically to a method and system for detecting abnormal instructions in a hardware device. BACKGROUND

[0002] In the physical level components, hardware devices such as controllers and industrial switches may have abnormal instructions during interaction, and abnormal instructions can cause serious information leakage and other major hazards. Currently, it is difficult to detect abnormal instruction running of the controller by non-destructive means, that is, it is difficult to execute the identifiable abnormal instructions without modifying the controller. SUMMARY

[0003] The present disclosure provides a method and system for detecting abnormal instructions in a hardware device.

[0004] According to a first aspect of the present disclosure, a method for detecting abnormal instructions in a hardware device is provided. The method comprises:

[0005] receiving a mixed signal sent by a DCS device, the mixed signal being obtained by mixing a side phase waveform and a low-frequency modulation signal by the DCS device, the side phase waveform being obtained by executing a DCS instruction by the DCS device, and the low-frequency modulation signal being obtained by the control device according to a first signature value corresponding to the DCS instruction;

[0006] extracting a second signature value according to the mixed signal;

[0007] verifying the second signature value according to the first signature value, and sending a verification result to the control device, the verification result including a legal instruction or an illegal instruction.

[0008] As described above, the aspect and any possible implementation manner are further provided, and the receiving a mixed signal sent by a DCS device comprises:

[0009] receiving a mixed signal sent by a DCS device, and performing low-frequency filtering processing on the mixed signal.

[0010] As described above, the aspect and any possible implementation manner are further provided, and the low-frequency modulation signal is obtained by signing the DCS instruction executed by the control device to obtain a first signature value corresponding to the DCS instruction, and performing low-frequency modulation on the first signature value.

[0011] As described above, the aspect and any possible implementation manner are further provided, and the control device receives the DCS instruction, and obtaining the first signature value corresponding to the DCS instruction comprises:

[0012] The control device receives the DCS instruction, and signs the DCS instruction using a certificate to obtain a first signature value corresponding to the DCS instruction.

[0013] According to a second aspect of the present disclosure, a system for detecting abnormal instructions in a hardware device is provided. The system comprises a control device, a DCS device, and a detection device.

[0014] The control device is configured to execute a DCS instruction to obtain a first signature value corresponding to the DCS instruction, and to modulate the first signature value at a low frequency to obtain a low-frequency modulation signal.

[0015] The DCS device is configured to receive and execute a DCS instruction sent by the control device to obtain a side phase waveform, and to receive a low-frequency modulation signal sent by the control device and mix the side phase waveform and the low-frequency modulation signal to obtain a mixed signal.

[0016] The detection device is configured to receive the mixed signal sent by the DCS device, extract a second signature value from the mixed signal, and verify the second signature value based on the first signature value. The detection device is further configured to send a verification result to the control device, wherein the verification result comprises a legal instruction or an illegal instruction.

[0017] According to any possible implementation of the above-mentioned aspects, a further implementation is provided, wherein the control device is specifically configured to receive the DCS instruction, sign the DCS instruction using a certificate to obtain a first signature value corresponding to the DCS instruction, and modulate the first signature value at a low frequency to obtain a low-frequency modulation signal.

[0018] According to a third aspect of the present disclosure, a device for detecting abnormal instructions in a hardware device is provided. The device comprises:

[0019] A receiving module is configured to receive a mixed signal sent by a DCS device, wherein the mixed signal is obtained by mixing a side phase waveform and a low-frequency modulation signal by the DCS device, the side phase waveform is obtained by executing a DCS instruction by the DCS device, and the low-frequency modulation signal is obtained by the control device based on a first signature value corresponding to the DCS instruction.

[0020] An extracting module is configured to extract a second signature value from the mixed signal.

[0021] A verifying module is configured to verify the second signature value based on the first signature value, and to send a verification result to the control device, wherein the verification result comprises a legal instruction or an illegal instruction.

[0022] According to the aspect and any possible implementation manner described above, further provided is an implementation manner, the receiving module is specifically configured to receive a mixed frequency signal sent by the DCS device, and perform low frequency filtering processing on the mixed frequency signal.

[0023] According to a fourth aspect of the present disclosure, an electronic device is provided. The electronic device comprises a memory and a processor, the memory has a computer program stored thereon, and the processor implements the method described above when executing the program.

[0024] According to a fifth aspect of the present disclosure, a computer readable storage medium is provided, and the computer readable storage medium has a computer program stored thereon, and the program is executed by a processor to implement the method described above.

[0025] The method and system for detecting an abnormal instruction in a hardware device provided by the embodiments of the present application can receive a mixed frequency signal sent by a DCS device through a detection device, and extract a second signature value according to the mixed frequency signal, wherein the mixed frequency signal is obtained by mixing a side phase waveform and a low frequency modulation signal by the DCS device, the side phase waveform is obtained by executing a DCS instruction by the DCS device, and the low frequency modulation signal is obtained by the control device according to a first signature value corresponding to the DCS instruction; then, the second signature value is verified according to the first signature value, and a verification result including a legal instruction or an illegal instruction is sent to the control device, so as to realize the identifiable execution of the abnormal instruction without modifying the control device.

[0026] It should be understood that the content described in the summary section is not intended to limit the key or important features of the embodiments of the present disclosure, nor to limit the scope of the present disclosure. Other features of the present disclosure will become apparent through the following description. BRIEF DESCRIPTION OF DRAWINGS

[0027] The above and other features, advantages, and aspects of embodiments of the present disclosure will become more apparent by describing in detail the following embodiments with reference to the attached drawings. The drawings are intended to better understand the present disclosure and do not limit the present disclosure. In the drawings, the same or similar reference numerals refer to the same or similar elements, and:

[0028] Figure 1 A schematic diagram showing an exemplary operating environment in which embodiments of the present disclosure can be implemented is shown;

[0029] Figure 2 A schematic diagram showing the interaction method between the control device, the DCS device and the detection device shown in Figure 1

[0030] Figure 3 A schematic diagram showing the component deployment according to the embodiments of the present disclosure is shown;

[0031] Figure 4 ​A flowchart illustrating a method of detecting an abnormal instruction in a hardware device according to an embodiment of the present disclosure is shown.

[0032] Figure 5 A block diagram illustrating a device of detecting an abnormal instruction in a hardware device according to an embodiment of the present disclosure is shown.

[0033] Figure 6 A block diagram of an exemplary electronic device capable of implementing an embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0034] For the purposes of making the objects, technical solutions, and advantages of the embodiments of the present disclosure clearer, the technical solutions in the embodiments of the present disclosure will be described clearly and completely below with reference to the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are some but not all of the embodiments of the present disclosure. Based on the embodiments in the present disclosure, all other embodiments obtained by a person of ordinary skill in the art without creative work fall within the protection scope of the present disclosure.

[0035] In addition, the term “and / or” herein merely describes an association relationship of associated objects, and indicates that there can be three relationships, for example, A and / or B can represent the three cases of A existing alone, A and B existing simultaneously, and B existing alone. In addition, the character “ / ” herein generally represents an “or” relationship between the front and rear associated objects.

[0036] In the present disclosure, a mixed signal sent by a DCS device can be received by a detection device, and a second signature value can be extracted according to the mixed signal, wherein the mixed signal is obtained by mixing a side phase waveform and a low-frequency modulation signal by the DCS device, the side phase waveform is obtained by executing a DCS instruction by the DCS device, and the low-frequency modulation signal is obtained by a control device according to a first signature value corresponding to the DCS instruction; then the second signature value is verified according to the first signature value, and a verification result including a legal instruction or an illegal instruction is sent to the control device, so as to achieve the identifiable execution of an abnormal instruction without modifying the control device.

[0037] Figure 1 A schematic diagram of an exemplary operating environment 100 in which embodiments of the present disclosure can be implemented is shown. The operating environment 100 includes a control device 101, a DCS device 102, and a detection device 103.

[0038] Figure 2 A flowchart illustrating a method 200 of interaction between the control device 101, the DCS device 102, and the detection device 103 shown in FIG. 1 is shown. Figure 1

[0039] At block 201, the control device 101 executes a DCS instruction. ​

[0040] At block 202, the control device 101 signs the DCS instruction to obtain a first signature value corresponding to the DCS instruction.

[0041] At block 203, the control device 101 low-frequency modulates the first signature value to obtain a low-frequency modulation signal.

[0042] At block 204, the control device 101 sends the DCS instruction to the DCS device 102.

[0043] At block 205, the DCS device 102 executes the DCS instruction.

[0044] At block 206, the DCS device 102 collects a side phase waveform.

[0045] At block 207, the control device 101 sends the low-frequency modulation signal to the DCS device 102.

[0046] At block 208, the DCS device 102 mixes the side phase waveform and the low-frequency modulation signal to obtain mixing information.

[0047] At block 209, the DCS device 102 sends the mixing signal to the detection device 103.

[0048] At block 210, the detection device 103 extracts a second signature value according to the mixing signal.

[0049] At block 211, the detection device 103 verifies the second signature value according to the first signature value.

[0050] At block 212, the detection device 103 sends a verification result to the control device 101, and the verification result includes a legal instruction or an illegal instruction.

[0051] According to the embodiments of the present disclosure, the following technical effects are achieved:

[0052] The detection device receives the mixing signal sent by the DCS device, and extracts a second signature value according to the mixing signal, wherein the mixing signal is obtained by mixing the side phase waveform and the low-frequency modulation signal by the DCS device, the side phase waveform is obtained by executing the DCS instruction by the DCS device, and the low-frequency modulation signal is obtained by the control device according to the first signature value corresponding to the DCS instruction; then, the second signature value is verified according to the first signature value, and a verification result including a legal instruction or an illegal instruction is sent to the control device, so as to realize the identification of the abnormal instruction without modifying the control device.

[0053] In some embodiments, at block 202, the control device 101 can also use a certificate to sign the DCS instruction to obtain a first signature value corresponding to the DCS instruction.

[0054] According to embodiments of the present disclosure, by signing the DCS instruction using a certificate, the accuracy of the signature can be ensured.

[0055] Figure 3 A schematic diagram of assembly deployment is shown according to embodiments of the present disclosure. As shown, Figure 3

[0056] The control device includes a distributed control system (DCS) instruction module, a signature module, and a low-frequency modulation module.

[0057] In some embodiments, the control device can be a host computer, i.e., a controller.

[0058] In some embodiments, the DCS instruction module is configured to execute and send the DCS instruction. The signature module is configured to sign the DCS instruction to obtain a first signature value corresponding to the DCS instruction. The low-frequency modulation module can be a low-frequency signal modulator configured to modulate the first signature value at a low frequency to obtain a low-frequency modulation signal.

[0059] In some embodiments, the low-frequency modulation module is specifically configured to sign the DCS instruction using a certificate to obtain the first signature value corresponding to the DCS instruction.

[0060] The DCS device includes a DCS control module, a side phase acquisition module, and a mixing module.

[0061] In some embodiments, the DCS device can be a DCS system host.

[0062] In some embodiments, the DCS control module is configured to receive and execute the DCS instruction sent by the control device. The side phase acquisition module is configured to acquire a side phase waveform. The mixing module is configured to receive the low-frequency modulation signal sent by the control device, and mix the side phase waveform and the low-frequency modulation signal to obtain a mixed signal.

[0063] The detection device includes a receiving module, an extracting module, and a signature verification module.

[0064] In some embodiments, the receiving module can be a low-frequency filter configured to receive the mixed signal sent by the DCS device and perform low-frequency filtering processing on the mixed signal. The extracting module is configured to extract a second signature value from the mixed signal. The signature verification module is configured to verify the second signature value according to the first signature value, and further configured to send a verification result to the control device, the verification result including a legal instruction or an illegal instruction.

[0065] In some embodiments, when the verification result is an illegal instruction, the signature verification module is further configured to send an abnormal alarm information to the control device.

[0066] Figure 4 ​A flowchart of a method 400 for detecting an abnormal instruction in a hardware device according to an embodiment of the present disclosure is shown. The method 400 can be performed by the detection device 103 in the system 100. Figure 1

[0067] At block 410, a mixed signal sent by the DCS device is received, the mixed signal being obtained by mixing a side phase waveform obtained by the DCS device executing a DCS instruction and a low-frequency modulation signal obtained by the control device according to a first signature value corresponding to the DCS instruction.

[0068] In some embodiments, the DCS instruction is a known instruction, and the mixed signal is obtained by encrypting the executed instruction based on a cryptographic technique in the control device and converting the obtained signature value into a low-frequency signal and modulating and integrating the side phase signal collected when the DCS device executes the DCS instruction.

[0069] In some embodiments, the DCS instruction can be an automatically detected DCS instruction retrieved from a database, or a pre-input DCS instruction for automatic detection by an operator.

[0070] At block 420, a second signature value is extracted according to the mixed signal.

[0071] In some embodiments, the signature information is separated from the mixed signal by signature decryption according to the same cryptographic technique as that used for signature encryption of the executed instruction in the control device, and the extraction of the second signature value is completed.

[0072] At block 430, the second signature value is verified according to the first signature value, and a verification result including a legal instruction or an illegal instruction is sent to the control device.

[0073] In some embodiments, the second signature value after the DCS device executes the DCS instruction is verified according to the first signature value before the DCS device executes the DCS instruction, and a detection result is obtained. Without changing the hardware and software of the DCS, the audit of illegal instruction execution can be realized, so as to effectively reduce the loss caused by the illegal execution of the DCS device and information leakage due to the backdoor program.

[0074] According to the embodiments of the present disclosure, the following technical effects are achieved:

[0075] ​The detection device receives the mixed frequency signal sent by the DCS device, and extracts a second signature value according to the mixed frequency signal, wherein the mixed frequency signal is obtained by mixing a side phase waveform and a low-frequency modulation signal, the side phase waveform is obtained by executing the DCS instruction by the DCS device, and the low-frequency modulation signal is obtained by the control device according to the first signature value corresponding to the DCS instruction; then, the second signature value is verified according to the first signature value, and a verification result including a legal instruction or an illegal instruction is sent to the control device, so as to realize the identification of the execution of the abnormal instruction without modifying the control device.

[0076] In some embodiments, the above receiving the mixed frequency signal sent by the DCS device comprises:

[0077] The mixed frequency signal sent by the DCS device is received, and the mixed frequency signal is subjected to low-frequency filtering processing.

[0078] In some embodiments, a low-pass filter can be built in the detection device, and the mixed frequency signal sent by the DCS device is received while the mixed frequency signal is subjected to low-frequency filtering processing, so as to effectively separate the useful signal and the noise, and improve the anti-interference and noise ratio of the mixed frequency signal.

[0079] According to the embodiments of the present disclosure, the mixed frequency signal is subjected to low-frequency filtering processing, and the mixed frequency signal is subjected to noise reduction, further improving the accuracy of identifying the execution of the abnormal instruction without modifying the control device.

[0080] In some embodiments, the above low-frequency modulation signal is obtained by the control device executing the DCS instruction, signing the DCS instruction to obtain the first signature value corresponding to the DCS instruction, and low-frequency modulating the first signature value.

[0081] In some embodiments, in order to reduce the loss during transmission, the first signature value can be low-frequency modulated by frequency modulation or amplitude modulation to generate a low-frequency modulation signal, that is, a low-frequency carrier, so as to subsequently verify the second signature value according to the first signature value.

[0082] According to the embodiments of the present disclosure, the first signature value is low-frequency modulated to obtain the low-frequency modulation signal, which can reduce the loss of the first signature value during transmission, and further improve the accuracy of identifying the execution of the abnormal instruction without modifying the control device.

[0083] In some embodiments, the above receiving the DCS instruction by the control device to obtain the first signature value corresponding to the DCS instruction comprises:

[0084] The control device receives the DCS instruction, and signs the DCS instruction using a certificate to obtain the first signature value corresponding to the DCS instruction.

[0085] In some embodiments, the DCS instruction is signed using a certificate, and a digest algorithm can be used to generate a digest, i.e., a very short string, from the DCS instruction, and the string is used for signing, which can improve the efficiency of generating a signature value.

[0086] It should be noted that the algorithm for generating the digest and the algorithm for verifying the signature need to be consistent with the signature, so that the second signature value is verified based on the first signature value.

[0087] According to embodiments of the present disclosure, by signing the DCS instruction using a certificate, the efficiency of generating a signature value can be improved, and the efficiency of identifying abnormal instructions without modifying the control device can be further improved.

[0088] It should be noted that for the above-mentioned method embodiments, in order to simply describe, they are all expressed as a combination of a series of actions, but those skilled in the art should know that the present disclosure is not limited by the order of the described actions, because according to the present disclosure, certain steps can be performed in other order or simultaneously. Secondly, those skilled in the art should know that the embodiments described in the specification are all optional embodiments, and the actions and modules involved are not necessarily required by the present disclosure.

[0089] The above is the introduction of the method embodiment, and the scheme of the present disclosure will be further described through the device embodiment.

[0090] Figure 5 A block diagram of an abnormal instruction detection device 500 in a hardware device according to an embodiment of the present disclosure is shown. The device 500 can be included in the detection device 103 of the control device 100 or implemented as the detection device 103. As shown in Figure 1 , the device 500 includes: Figure 5

[0091] The receiving module 510 is configured to receive a mixed signal sent by the DCS device, the mixed signal being obtained by mixing a side phase waveform and a low-frequency modulation signal, the side phase waveform being obtained by executing a DCS instruction by the DCS device, and the low-frequency modulation signal being obtained by the control device according to a first signature value corresponding to the DCS instruction;

[0092] The extraction module 520 is configured to extract a second signature value from the mixed signal.

[0093] The verification module 530 is configured to verify the second signature value based on the first signature value and send a verification result to the control device, the verification result including a legal instruction or an illegal instruction.

[0094] In some embodiments, the receiving module 510 is specifically configured to receive the mixed signal sent by the DCS device and perform low-frequency filtering processing on the mixed signal.​

[0095] Those skilled in the art can clearly understand that, for the convenience and brevity of the description, the specific working process of the described modules can refer to the corresponding process in the foregoing method embodiments, which will not be repeated here.

[0096] In the technical solutions of the present disclosure, the acquisition, storage and application of user personal information involved comply with relevant laws and regulations and do not violate public order and good customs.

[0097] According to embodiments of the present disclosure, the present disclosure also provides an electronic device, a readable storage medium and a computer program product.

[0098] Figure 6 A schematic block diagram of an electronic device 600 that can be used to implement embodiments of the present disclosure is shown. The electronic device is intended to represent various forms of digital computers, such as laptops, desktops, tablets, personal digital assistants, servers, blade servers, mainframes, and other appropriate computers. The electronic device can also represent various forms of mobile devices, such as personal digital processors, cellular telephones, smart phones, wearable devices, and other similar computing devices. The components shown here, their connections and relationships, and their functions, are meant to be examples only, and are not meant to limit implementations of the present disclosure described and / or claimed in this document.

[0099] The electronic device 600 includes a computing unit 601 that can perform various appropriate actions and processes according to a computer program stored in a ROM 602 or a computer program loaded from the storage unit 608 to the RAM 603. In the RAM 603, various programs and data required for the operation of the electronic device 600 can also be stored. The computing unit 601, the ROM 602, and the RAM 603 are connected to each other through a bus 604. An I / O interface 605 is also connected to the bus 604.

[0100] Various components in the electronic device 600 are connected to the I / O interface 605, including: an input unit 606, such as a keyboard, a mouse, etc.; an output unit 607, such as various types of displays, speakers, etc.; a storage unit 608, such as a magnetic disk, an optical disk, etc.; and a communication unit 609, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 609 allows the electronic device 600 to exchange information / data with other devices through a computer network, such as the Internet, and / or various telecommunications networks.

[0101] The computing unit 601 can be various general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of the computing unit 601 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various specialized artificial intelligence (AI) computing chips, various computing units running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, and the like. The computing unit 601 performs various methods and processes described above, such as the method 400. For example, in some embodiments, the method 400 can be implemented as a computer software program tangibly embodied in a machine-readable medium, such as the storage unit 608. In some embodiments, part or all of the computer program can be loaded and / or installed onto the electronic device 600 via the ROM 602 and / or the communication unit 609. When the computer program is loaded onto the RAM 603 and executed by the computing unit 601, one or more steps of the method 400 described above can be performed. Alternatively, in other embodiments, the computing unit 601 can be configured to perform the method 400 by any other suitable means, such as by means of firmware.

[0102] Various implementations of the systems and techniques described above can be realized in digital electronic circuitry, integrated circuitry, a field programmable gate array (FPGA), an application specific integrated circuit (ASIC), a system on a chip (SOC), a programmable logic device (PLD), a computer hardware, firmware, software, and / or combinations thereof. These various implementations can include implementation in one or more computer programs that are executable and / or interpretable on a programmable system including at least one programmable processor, which can be special or general purpose, coupled to receive data and instructions from, and to transmit data and instructions to, a storage system, at least one input device, and at least one output device.

[0103] Program code for carrying out methods of the present disclosure can be written in any combination of one or more programming languages. The program code can be provided to a processor or controller of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the program code, when executed by the processor or controller, produces the functions / operations specified in the flowcharts and / or the block diagrams. The program code can be executed entirely on a machine, partially on a machine, partially on a machine as a stand-alone software package, partially on a machine and partially on a remote machine or entirely on a remote machine or server.

[0104] In the context of this disclosure, a machine-readable medium can be a tangible medium that contains or stores a program for use by or in connection with an instruction execution system, apparatus, or device. The machine-readable medium can be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium can include but is not limited to an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples of the machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0105] To provide for interaction with a user, the systems and techniques described here can be implemented on a computer having a display device for displaying information to the user and a keyboard and a pointing device (e.g., a mouse or a trackball) by which the user can provide input to the computer. Other kinds of devices can be used to provide for interaction with a user as well; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form, including acoustic, speech, or tactile input.

[0106] The systems and techniques described here can be implemented in a computing system that includes a back end component (e.g., as a data server), or that includes a middleware component (e.g., an application server), or that includes a front end component (e.g., a user computer having a graphical user interface or a Web browser through which a user can interact with an implementation of the systems and techniques described here), or any combination of such back end, middleware, or front end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include a local area network (LAN), a wide area network (WAN), and the Internet.

[0107] The computer system can include clients and servers. A client and server are generally remote from each other and typically interact through a communication network. The relationship of client and server can arise by virtue of computer programs running on the respective computers and having a client-server relationship to each other. The server can be a cloud server, a server of a distributed system, or a server combined with a blockchain.

[0108] It should be understood that the various forms of flow shown above can be used to reorder, add, or remove steps. For example, the steps recited in the present disclosure can be performed in parallel, in series, or in a different order, as long as the desired results of the technology disclosed in the present disclosure are achieved, which is not limited herein.

[0109] The specific implementation described above does not constitute a limitation on the protection scope of the present disclosure. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent replacements, and improvements made within the spirit and principles of the present disclosure shall be included in the protection scope of the present disclosure.

Claims

1. A method of detecting an exception instruction in a hardware device, the method comprising: The method comprises the following steps: receiving a mixed signal sent by a DCS device, wherein the mixed signal is obtained by mixing a side phase waveform and a low-frequency modulation signal, the side phase waveform is obtained by executing a DCS instruction by the DCS device, and the low-frequency modulation signal is obtained by the control device according to a first signature value corresponding to the DCS instruction; the receiving of the mixed signal sent by the DCS device comprises: receiving the mixed signal sent by the DCS device and performing low-frequency filtering processing on the mixed signal; extracting a second signature value according to the mixed signal; verifying the second signature value according to the first signature value and sending a verification result to the control device, wherein the verification result comprises a legal instruction or an illegal instruction.

2. The method of claim 1, wherein, the low-frequency modulation signal is obtained by performing the DCS instruction by the control device, signing the DCS instruction to obtain the first signature value corresponding to the DCS instruction, and performing low-frequency modulation on the first signature value.

3. The method of claim 2, wherein, the control device receives the DCS instruction, and the obtaining of the first signature value corresponding to the DCS instruction comprises: the control device receives the DCS instruction and signs the DCS instruction using a certificate to obtain the first signature value corresponding to the DCS instruction.

4. A system for detecting an exception instruction in a hardware device, the system comprising: The method comprises the following steps: the control device is used for executing a DCS instruction, obtaining a first signature value corresponding to the DCS instruction, and performing low-frequency modulation on the first signature value to obtain a low-frequency modulation signal; the DCS device is used for receiving and executing a DCS instruction sent by the control device, obtaining a side phase waveform, receiving a low-frequency modulation signal sent by the control device, and mixing the side phase waveform and the low-frequency modulation signal to obtain a mixed signal; the detection device is used for receiving the mixed signal sent by the DCS device, extracting a second signature value according to the mixed signal, verifying the second signature value according to the first signature value, and sending a verification result to the control device, wherein the verification result comprises a legal instruction or an illegal instruction.

5. The system of claim 4, wherein, the control device is specifically used for receiving the DCS instruction, signing the DCS instruction using a certificate to obtain the first signature value corresponding to the DCS instruction, and performing low-frequency modulation on the first signature value to obtain a low-frequency modulation signal.

6. An apparatus for detecting an exception instruction in a hardware device, the apparatus comprising: The method comprises the following steps: a receiving module is used for receiving a mixed signal sent by a DCS device, wherein the mixed signal is obtained by mixing a side phase waveform and a low-frequency modulation signal, the side phase waveform is obtained by executing a DCS instruction by the DCS device, and the low-frequency modulation signal is obtained by the control device according to a first signature value corresponding to the DCS instruction; the receiving module is specifically used for receiving the mixed signal sent by the DCS device and performing low-frequency filtering processing on the mixed signal; a signature verifying module is used for verifying the second signature value according to the first signature value and sending a verification result to the control device, wherein the verification result comprises a legal instruction or an illegal instruction. The method comprises the following steps:

7. An electronic device, comprising: ​ at least one processor; and a memory communicatively connected to the at least one processor; the memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to perform the method of any one of claims 1-3.

8. A non-transitory computer-readable storage medium having stored thereon computer instructions, wherein, the computer instructions are for causing the computer to perform the method of any one of claims 1-3.

Images