Industrial data encryption method, storage medium and execution equipment

Abstract

The invention discloses an industrial data encryption method, a storage medium and execution equipment, and aims to comprehensively protect the security and integrity of industrial data in storage and transmission processes. The method comprises the steps of firstly obtaining industrial data and generating a data set, and then generating an encryption value and an initial vector to write into a storage system; the statistical information of the storage system is serialized and compressed, redundant information is removed, and the transmission and storage efficiency is improved. And the byte array is encrypted by adopting an advanced encryption algorithm, so that the security of the data is ensured. When decryption is needed, the same encryption algorithm and the same encryption value are used for decryption, and the original data format is recovered through deserialization operation. Meanwhile, the integrity and authenticity of the decrypted data are verified through additional check codes or hash values. The method not only enhances the security and integrity of the data, but also improves the processing efficiency, and supports various industrial application scenes and requirements.

Description

Technical Field

[0001] The present invention relates to the technical field of data encryption, and in particular to an industrial data encryption method, a storage medium and an execution device. Background Art

[0002] Driven by Industry 4.0 and the era of big data, industrial data has become a core asset for enterprise operations and decision-making. However, with the rapid growth of data scale and the enhancement of data mobility, the security and privacy protection of industrial data are facing unprecedented challenges. Unauthorized access, data leakage, malicious tampering and other security threats are emerging in an endless stream, bringing huge risks to enterprise data security.

[0003] Traditional data protection methods, such as access control and firewalls, can resist external attacks to a certain extent, but it is difficult to fully deal with internal threats and data security issues during transmission. Especially in industrial environments, data often needs to be transmitted and shared between different devices, systems and networks, which further increases the risk of data leakage and tampering.

[0004] Therefore, it is particularly important to develop an efficient and reliable industrial data encryption method. This method needs to be able to ensure the security and integrity of industrial data during storage and transmission, while not affecting the normal use and processing efficiency of the data. In addition, with the development of industrial Internet and cloud computing technologies, encryption methods also need to be scalable and compatible to adapt to the ever-changing industrial application scenarios and needs. Summary of the invention

[0005] 1. Technical issues to be resolved To solve the above problems, the present invention proposes an industrial data encryption method, storage medium and execution device, aiming to solve the problem in the prior art that data often needs to be transmitted and shared between different devices, systems and networks, which increases the risk of data leakage and tampering.

[0006] (II) Technical solution An industrial data encryption method of the present invention comprises: Obtaining industrial data to generate a data set, generating an encrypted value and an initial vector based on the data set generated by the industrial data, and writing the encrypted value and the initial vector into a storage system; Obtaining first statistical information of the storage system, and serializing the statistical information of the storage system into a byte array to remove redundant information; Encrypting the byte array by using the encryption algorithm to obtain encrypted data, decrypting the byte array by using the encryption algorithm when necessary, and deserializing the decrypted byte array into second statistical information; The first statistical information, the encrypted data, and the second statistical information are output.

[0007] In the present invention, the step of acquiring industrial data to generate a data set includes: Preprocess industrial data, including data cleaning, data format conversion, and data normalization, to generate a data set that meets the requirements of the encryption algorithm.

[0008] In the present invention, the generation of encrypted values ​​and initial vectors based on the data set generated by industrial data includes: A random number generator is used to generate encryption values ​​and initialization vectors to ensure the security and unpredictability of each encryption operation.

[0009] In the present invention, before the statistical information of the storage system is serialized into a byte array, a step of compressing the statistical information is also included to reduce the size of the byte array and improve the transmission and storage efficiency.

[0010] In the present invention, the encrypted data is also attached with a check code or hash value during storage or transmission to verify the integrity and authenticity of the data before decryption. In the present invention, the outputting of the first statistical information, the encrypted data and the second statistical information includes: The first statistical information, the encrypted data, and the second statistical information are displayed to the user in a visual form, or stored in a specified log file, or sent to a remote monitoring system for further analysis.

[0011] Another computer-readable storage medium of the present invention stores a computer program, which, when executed by a processor, implements the steps of the industrial data encryption method described in the above technical solution.

[0012] Another execution device of the present invention includes an execution device body and a controller, wherein the controller includes a processor and a computer program stored in a memory and executable on the processor, and when the processor executes the program, the steps of the industrial data encryption method described in the above technical solution are implemented.

[0013] (III) Beneficial effects Compared with the prior art, the present invention has the following beneficial effects: The present invention uses advanced encryption algorithms (such as AES-128) combined with randomly generated encryption values ​​and initial vectors to ensure the security and unpredictability of each encryption operation. This greatly improves the security of industrial data during storage and transmission, and effectively prevents unauthorized access and data leakage.

[0014] By adding a check code or hash value and verifying before decryption, the present invention can ensure the integrity and authenticity of the decrypted data. Even if the data is tampered with during storage or transmission, it can be discovered in time and corresponding processing measures can be taken. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0016] Figure 1 It is a schematic diagram of the logical structure of the encryption method; Figure 2 It is a schematic diagram of the framework structure of the encryption method; Figure 3 Schematic diagram of the framework structure of the execution equipment.

[0017] 10. Processor, 11. Memory, 12. Communication interface, 13. Communication bus. DETAILED DESCRIPTION

[0018] The technical solution of the present invention will be clearly and completely described below in conjunction with the embodiments. Obviously, the described embodiments are part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention. Embodiment 1:

[0019] like Figure 1-Figure 2 The industrial data encryption method shown is intended to ensure the security and integrity of industrial data during storage and transmission. The specific implementation of the present invention will be described in detail below in conjunction with the background technology.

[0020] In industrial environments, data security and privacy are of vital importance. With the development of industrial Internet and big data technology, the scale of industrial data continues to grow. How to effectively protect this data from unauthorized access and tampering has become an urgent problem to be solved. The industrial data encryption method proposed in this invention provides comprehensive protection for industrial data through a series of encryption, serialization, compression and verification steps.

[0021] S100, obtaining industrial data to generate a data set, generating an encrypted value and an initial vector based on the data set generated by the industrial data, and writing the encrypted value and the initial vector into a storage system.

[0022] The method of the present invention starts with acquiring industrial data. These industrial data may come from various sensors, production equipment or management systems, and are diverse and complex. In order to generate a data set that meets the requirements of the encryption algorithm, the present invention preprocesses the acquired industrial data. The preprocessing steps include data cleaning to remove invalid or erroneous data; data format conversion to unify data in different formats into a format that can be processed by the encryption algorithm; and data normalization to map the value range of the data to the range required by the encryption algorithm. These preprocessing operations ensure the quality of the data set and the encryption effect.

[0023] S200: Obtain first statistical information of a storage system, and serialize the statistical information of the storage system into a byte array to remove redundant information.

[0024] Based on the preprocessed data set, the present invention uses a random number generator to generate an encrypted value and an initial vector. The encrypted value is the key used to encrypt data, and the initial vector is used to enhance the anti-attack capability of the encryption algorithm and ensure the security and unpredictability of each encryption operation. The generated encrypted value and initial vector are written into the storage system for subsequent encryption and decryption operations.

[0025] The present invention obtains first statistical information of the storage system, which may include the storage location, size, creation time, etc. of the data. In order to remove the redundant parts in the statistical information, the present invention serializes it into a byte array. Before serialization, the statistical information can also be compressed to reduce the size of the byte array and improve the transmission and storage efficiency. The compression process can adopt an existing compression algorithm, such as ZIP, GZIP, etc.

[0026] The present invention uses an encryption algorithm to encrypt the byte array. The encryption algorithm can be a common encryption algorithm such as AES, RSA, DES, etc. The specific selection depends on the application scenario and security requirements. In this embodiment, the AES-128 encryption algorithm is used. During the encryption process, the encrypted value and the initial vector are used as input parameters of the encryption algorithm to ensure the security and unbreakability of the encrypted data. The encrypted data is stored in the storage system or transmitted over the network when necessary.

[0027] S300, encrypting the byte array by using an encryption algorithm to obtain encrypted data, decrypting the byte array by using the encryption algorithm when necessary, and deserializing the decrypted byte array into second statistical information.

[0028] When the data needs to be decrypted, the present invention uses the same encryption algorithm and encryption value to decrypt the encrypted data. The decrypted byte array is restored to the second statistical information through a deserialization operation. In order to verify the integrity and authenticity of the decrypted data, the present invention can also add a check code or a hash value to the encrypted data. Before decryption, by calculating the check code or hash value of the decrypted data and comparing it with the added check code or hash value, it can be determined whether the data has been tampered with during storage or transmission.

[0029] Deserialization is the process of converting a byte array or other serialized format back to the original data format (such as an object, structure, etc.). Therefore, after the statistics are deserialized, they are converted from a byte array or other serialized format back to the original data structure or object state.

[0030] During the deserialization process, the program may perform a series of data verification operations to ensure the integrity and consistency of the data. For example, verify the data type, range, constraints, etc. Therefore, after the statistical information is deserialized, it will go through these verification steps to ensure its accuracy and reliability.

[0031] S100, output first statistical information, encrypted data and second statistical information.

[0032] The present invention outputs first statistical information, encrypted data and second statistical information. This information can be displayed to the user in a visual form, so that the user can intuitively understand the encryption status and decryption results of the data; it can also be stored in a specified log file for subsequent auditing and tracking; it can also be sent to a remote monitoring system for further analysis to achieve comprehensive monitoring and management of industrial data. The first statistical information is unprocessed statistical information, which includes encryption operation records, data access logs, security event alarm information, etc., while the second statistical information is restored statistical information and verified statistical information. Embodiment 2:

[0033] An embodiment of the present invention provides a computer-readable storage medium.

[0034] The computer-readable storage medium provided in the embodiment of the present invention stores a computer program, and when the computer program is executed by a processor, the steps of any one of the above industrial data encryption methods can be implemented.

[0035] The computer-readable storage medium may include: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and other media that can store program codes.

[0036] For an introduction to the computer-readable storage medium provided in an embodiment of the present invention, please refer to the above method embodiment, and the present invention will not elaborate on it here.

[0037] The various embodiments in the specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part description.

[0038] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0039] The steps of the method or algorithm described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art. Embodiment 3:

[0040] An embodiment of the present invention provides an execution device.

[0041] Please refer to Figure 3 , Figure 3 This is a schematic diagram of the structure of an execution device provided by the present invention, and the execution device may include: Memory for storing computer programs; The processor is used to implement the steps of any one of the above industrial data encryption methods when executing a computer program.

[0042] like Figure 3 , which is a schematic diagram of the composition structure of the execution device, the execution device may include: a processor 10, a memory 11, a communication interface 12 and a communication bus 13. The processor 10, the memory 11 and the communication interface 12 all communicate with each other through the communication bus 13.

[0043] In the embodiment of the present invention, the processor 10 may be a central processing unit (CPU), an application specific integrated circuit, a digital signal processor, a field programmable gate array or other programmable logic devices.

[0044] The processor 10 may call a program stored in the memory 11. Specifically, the processor 10 may execute the operations in the embodiment of the push button switch fault detection method.

[0045] The memory 11 is used to store one or more programs, which may include program codes, and the program codes include computer operation instructions. In the embodiment of the present invention, the memory 11 at least stores programs for implementing the following functions: Obtaining industrial data to generate a data set, generating an encrypted value and an initial vector based on the data set generated by the industrial data, and writing the encrypted value and the initial vector into a storage system; Obtaining first statistical information of the storage system, and serializing the statistical information of the storage system into a byte array to remove redundant information; Encrypting the byte array by using the encryption algorithm to obtain encrypted data, decrypting the byte array by using the encryption algorithm when necessary, and deserializing the decrypted byte array into second statistical information; The first statistical information, the encrypted data, and the second statistical information are output.

[0046] In a possible implementation, the memory 11 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and an application required for at least one function, etc.; the data storage area may store data created during use.

[0047] In addition, the memory 11 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device or other volatile solid-state storage device.

[0048] The communication interface 12 may be an interface of a communication module, and is used to connect to other devices or systems.

[0049] Of course, it should be noted that Figure 3 The structure shown does not constitute a limitation on the execution device in the embodiment of the present invention. In actual applications, the execution device may include Figure 3 More or fewer components than shown, or combinations of certain components.

[0050] Finally, the evaluation results and evaluation content are sent to the end user and the cloud for data storage.

[0051] The above-described embodiments are merely descriptions of preferred implementations of the present invention, and are not intended to limit the concept and scope of the present invention. Without departing from the design concept of the present invention, various modifications and improvements made by ordinary persons in the art to the technical solution of the present invention should fall within the protection scope of the present invention, and the technical contents for which protection is sought in the present invention have been fully recorded in the claims.

[0052] The above-described embodiments are merely descriptions of preferred implementations of the present invention, and are not intended to limit the concept and scope of the present invention. Without departing from the design concept of the present invention, various modifications and improvements made by ordinary persons in the art to the technical solution of the present invention should fall within the protection scope of the present invention, and the technical contents for which protection is sought in the present invention have been fully recorded in the claims.

Claims

1. An industrial data encryption method, characterized in that: The industrial data encryption method comprises: Obtaining industrial data to generate a data set, generating an encrypted value and an initial vector based on the data set generated by the industrial data, and writing the encrypted value and the initial vector into a storage system; Obtaining first statistical information of the storage system, and serializing the statistical information of the storage system into a byte array to remove redundant information; Encrypting the byte array by using the encryption algorithm to obtain encrypted data, decrypting the byte array by using the encryption algorithm when necessary, and deserializing the decrypted byte array into second statistical information; The first statistical information, the encrypted data, and the second statistical information are output.

2. The industrial data encryption method according to claim 1, characterized in that: The obtaining of industrial data to generate a data set comprises: Preprocess industrial data, including data cleaning, data format conversion, and data normalization, to generate a data set that meets the requirements of the encryption algorithm.

3. The industrial data encryption method according to claim 2, characterized in that: The generating of encrypted values ​​and initial vectors based on the data set generated by industrial data includes: A random number generator is used to generate encryption values ​​and initialization vectors to ensure the security and unpredictability of each encryption operation.

4. The industrial data encryption method according to claim 3, characterized in that: Before serializing the statistical information of the storage system into a byte array, the method also includes a step of compressing the statistical information to reduce the size of the byte array and improve transmission and storage efficiency.

5. The industrial data encryption method according to claim 4, characterized in that: During storage or transmission of the encrypted data, a check code or hash value is also attached to verify the integrity and authenticity of the data before decryption.

6. The industrial data encryption method according to claim 5, characterized in that: The outputting of the first statistical information, the encrypted data and the second statistical information comprises: The first statistical information, the encrypted data, and the second statistical information are displayed to the user in a visual form, or stored in a specified log file, or sent to a remote monitoring system for further analysis.

7. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the steps of the industrial data encryption method according to any one of claims 1 to 6 are implemented.

8. An execution device, comprising an execution device body and a controller, characterized in that: The controller includes a processor and a computer program stored in a memory and executable on the processor. When the processor executes the program, the steps of the industrial data encryption method according to any one of claims 1 to 6 are implemented.

Images