Communication method for enterprise network and remote router equipment of DCS (Distributed Control System)

Abstract

The invention discloses a communication method for an enterprise network and remote router equipment of a DCS (Distributed Control System). A communication adaptation module is arranged at an enterprise network end and comprises a protocol conversion unit, a data encryption unit, a flow regulation and control unit and a timestamp embedding unit; the far-end router equipment end is provided with a corresponding reverse communication adaptation module. Two-way interaction of data and control instructions is realized through a two-way communication link, and a dynamic link detection and repair sub-module is configured to guarantee stability of the link. According to the method, the problems of protocol compatibility, data security, flow regulation and control, time management, link maintenance and the like are solved, the communication efficiency and quality are improved, efficient, safe and stable operation of remote communication and control functions of the DCS in industrial production is ensured, and the method has a good application prospect.

Description

Technical Field

[0001] The present invention relates to the field related to the communication between an enterprise network and a remote router device of a DCS system, and in particular to a communication method between an enterprise network and a remote router device of a DCS system. Background Art

[0002] With the continuous development of industrial automation, distributed control systems (DCS) have been widely used in various industrial production fields, such as chemical, electric power, metallurgy and other industries. The DCS system is responsible for collecting and controlling a large amount of key data and equipment operating status in the industrial production process, and plays a vital role in ensuring the efficiency, stability and safety of production.

[0003] However, in actual applications, enterprises often need to connect the DCS system to the enterprise network and communicate with remote router devices through the enterprise network to achieve remote monitoring, data analysis, remote control and other functions. At present, there are many problems with the existing communication methods.

[0004] On the one hand, most DCS systems in industrial environments use specific industrial communication protocols to transmit data. These protocols have compatibility differences with the common communication protocols of enterprise networks and the Internet, resulting in a complex protocol conversion process when data enters the enterprise network from the DCS system and is subsequently transmitted outward. Traditional protocol conversion methods are often not smart enough to cope with diverse industrial protocols and frequently updated equipment, and are prone to problems such as data format mismatch and transmission errors.

[0005] On the other hand, data security is a key consideration in industrial communications. Since industrial production data involves important information such as the core secrets of the enterprise and production safety, once it is stolen or tampered with during transmission, the consequences will be disastrous. Existing encryption methods have certain limitations in security in the face of increasingly complex network attack environments. For example, traditional encryption keys are at risk of being cracked and cannot provide sufficiently strong security for data transmission.

[0006] Furthermore, the load of enterprise networks changes dynamically. The data traffic generated by different production stages and different businesses has different demands for network resources. However, existing communication methods lack an effective traffic control mechanism and cannot reasonably allocate bandwidth according to real-time network conditions and data priority. Important data transmission delays and network congestion often occur, affecting overall communication efficiency. Summary of the invention

[0007] The object of the present invention is to provide a method for communicating between an enterprise network and a remote router device of a DCS system, so as to solve the problems raised in the above background technology.

[0008] To achieve the above object, the present invention provides the following technical solution: a method for communication between an enterprise network and a remote router device of a DCS system, comprising the following steps: Communication adapter module configuration steps: A communication adapter module is provided at the enterprise network end of the DCS system, and the communication adapter module integrates a protocol conversion unit, a data encryption unit, a flow control unit and a timestamp embedding unit, and each unit works together to ensure effective preprocessing and transmission of data; The protocol conversion unit has a built-in industrial communication protocol library covering a variety of mainstream industrial communication protocols and a general network communication protocol library that complies with the general Internet standards. It has an intelligent recognition function and can accurately determine the industrial communication protocol followed by the data output from the DCS system, and automatically convert it into a corresponding data format that complies with the general network communication protocol, ensuring that the data can smoothly enter the communication link between the enterprise network and the external network; The data encryption unit uses a dynamic encryption key generated based on quantum key distribution technology, and ensures the high security of the key by taking advantage of the uncertainty and non-cloning properties of quantum mechanics, so as to perform real-time encryption processing on the data after protocol conversion, so that the data has high confidentiality during transmission, and effectively resists the risk of external malicious interception and cracking; The traffic control unit uses an intelligent algorithm to control the traffic distribution of the data to be sent based on the preset multi-level traffic priority strategy and the real-time and accurately monitored network load. Specifically, it prioritizes different data according to factors such as data type and business urgency, and dynamically adjusts the sending order and transmission rate of each data in combination with the real-time margin of the current network bandwidth to ensure the timely transmission of important data and the efficient operation of the overall network. The timestamp embedding unit is connected to a high-precision clock source with synchronization and calibration functions configured on the enterprise network end, and adds timestamp information accurate to the millisecond level to the data after protocol conversion, encryption and traffic regulation. This timestamp can uniquely identify the specific time point when the data is sent from the enterprise network end, providing a key time basis for subsequent data tracing, transmission timeliness verification and other operations; Reverse communication adapter module configuration steps: A corresponding reverse communication adapter module is set at the remote router device end, which matches the communication adapter module at the enterprise network end and also includes a protocol conversion unit, a data decryption unit, a traffic feedback unit, and a timestamp parsing and verification unit, for realizing reverse processing of received data and related monitoring feedback; The protocol conversion unit has a reverse conversion function, which can accurately identify the received data that complies with the general network communication protocol, and convert it back to the corresponding data format that complies with the industrial communication protocol that can be recognized by the DCS system according to the preset mapping relationship, ensuring that the data can be correctly parsed and processed by the DCS system; The data decryption unit uses a dynamic encryption key generated based on quantum key distribution technology that matches the data encryption unit of the enterprise network end communication adapter module, and performs accurate decryption operations on the received encrypted data according to the corresponding decryption algorithm, ensuring that the data can be restored to the original plaintext data that can be used for subsequent operations after reaching the remote router device; The traffic feedback unit counts the received data traffic in real time, not only recording basic information such as data volume and transmission rate, but also analyzing the fluctuation of traffic and whether there are abnormal peaks based on a preset analysis model, and then feeding back comprehensive and detailed traffic information to the communication adapter module of the enterprise network end, assisting the enterprise network end to further optimize the traffic control strategy according to the actual situation; After receiving the data carrying the timestamp information, the timestamp parsing and verification unit first performs high-precision parsing on the timestamp to obtain the sending time recorded therein, and then compares it with the current time recorded by the high-precision clock configured by the remote router device itself and calibrated by the authoritative clock source, and judges the time accuracy and whether there is abnormal delay in the data transmission process according to the preset time deviation threshold; if the time deviation exceeds the preset threshold, the alarm mechanism is immediately triggered, and the relevant abnormal information including the time abnormality details, the data identification involved, etc. is fed back to the enterprise network end through a dedicated feedback channel, so that the enterprise network end can timely check the possible network failures, transmission congestion and other problems; Steps for establishing a two-way communication link and exchanging data: A two-way communication link is established between the enterprise network and the remote router device, and the link has high bandwidth, low latency and redundant backup functions to ensure stable and reliable communication; through the two-way communication link, the production process data collected by the DCS system is subjected to a series of pre-processing operations such as protocol conversion, encryption, flow control and timestamp embedding by the communication adapter module of the enterprise network end, and then sent to the remote router device according to the transmission rules of the link; after receiving the data, the remote router device performs corresponding processing such as protocol conversion, decryption, feedback-based flow statistics, timestamp analysis and verification on the data in sequence through the reverse communication adapter module, and after inspection, the data is sent to the remote router device. After the verification is correct and the format conversion is completed, the data that can be recognized by its associated terminal device is transmitted to the corresponding terminal device for display, analysis or storage, so as to realize the effective transmission of data from the DCS system to the remote terminal device; at the same time, for the control instructions generated by the terminal device of the remote router device and intended to control the DCS system, according to the reverse process above, that is, firstly pre-processed by the reverse communication adapter module, then transmitted to the enterprise network end through the communication link, and finally transmitted to the DCS system after reverse processing by the communication adapter module of the enterprise network end, so as to realize the remote and accurate control of the DCS system and ensure the closed-loop operation of the entire control system; Dynamic link detection and repair steps: A dynamic link detection and repair submodule is arranged between the communication adapter module and the reverse communication adapter module, and the submodule has a built-in intelligent timer and a multi-dimensional link status monitoring mechanism; the intelligent timer sends a link detection signal to the other party at a preset and flexibly configurable time interval, and the link detection signal contains unique identification information and a sending timestamp, etc., which is convenient for the other party to accurately identify and verify; if the detection confirmation signal containing the corresponding identification information and the receiving timestamp is not received from the other party within the prescribed time reasonably set based on network communication performance and business requirements, the link repair mechanism is automatically started; the link repair mechanism first intelligently switches to an available backup communication channel according to the channel priority order based on the pre-stored backup communication channel information, and renegotiates communication parameters such as transmission rate, data verification method, etc. to adapt to the new channel environment, restore the two-way communication link between the enterprise network and the remote router device, ensure the continuity and stability of communication, and minimize the impact of link failure on the remote communication and control functions of the entire DCS system.

[0009] Furthermore, the industrial communication protocol library built into the protocol conversion unit in the communication adapter module supports a dynamic update function; specifically, a protocol monitoring module is provided on the enterprise network end, which monitors the newly introduced DCS system equipment or updated industrial communication protocol requirements in the enterprise in real time; when a new protocol is detected, it will automatically connect to the preset authoritative industrial protocol publishing platform, download the corresponding protocol update package, and after security verification and compatibility testing, add the new protocol information to the industrial communication protocol library of the protocol conversion unit to ensure that it always covers the latest and most complete industrial communication protocols, thereby ensuring that the data output by DCS system equipment of different versions and different manufacturers can be accurately converted to protocols, adapt to the constantly developing and changing industrial production network environment of the enterprise, avoid data transmission obstacles caused by protocol incompatibility, and enhance the adaptability of the entire communication method to diversified industrial scenarios.

[0010] Furthermore, the data encryption unit adopts a dynamic encryption key generated based on quantum key distribution technology, and its key generation process involves a multi-node collaboration mechanism; in the enterprise network environment, multiple nodes distributed in different physical locations and equipped with quantum communication functions are set up, and these nodes establish connections with each other through quantum entanglement states; when it is necessary to generate an encryption key, each node participates in the measurement and information interaction of the quantum state according to a preset encryption strategy, and jointly generates a unique and highly secure dynamic encryption key based on the non-cloning and uncertainty of quantum mechanics; this multi-node collaboration method further increases the difficulty of cracking the key. Even if some nodes are attacked externally, they can still rely on other nodes to ensure the integrity and validity of the key, which greatly enhances the confidentiality of data during transmission and safeguards the security of communication between the enterprise network and remote router devices.

[0011] Furthermore, the preset traffic priority strategy of the traffic control unit has an adaptive learning function; an intelligent learning module is provided inside the unit, which collects feedback information on data transmission effects in different time periods and business scenarios in the past, such as data delays and timeliness feedback on business execution; based on these large amounts of historical data, machine learning algorithms are used for analysis and modeling, and the traffic priority weights and network load judgment thresholds corresponding to each data type are automatically adjusted, so that the traffic control strategy can be continuously optimized with the dynamic changes of the company's production business, accurately adapt to the actual network conditions, and effectively avoid resource waste or key data transmission obstruction caused by fixed priority strategies, thereby ensuring that the overall communication efficiency is always at a high level.

[0012] Furthermore, when embedding the timestamp information, the timestamp embedding unit will also associate the source device identifier and the business type identifier of the embedded corresponding data at the same time; by interacting with the device management system and the business classification system in the enterprise network, it can obtain accurate key information such as the source device number, name and business category, and encapsulate it together with the timestamp in a specific field of the data; in this way, when performing timestamp parsing and verification on the remote router device side, it can not only determine the accuracy of the transmission time, but also quickly trace the specific source of the data and the business to which it belongs, which is convenient for targeted troubleshooting, data analysis and business process optimization, and further improves the manageability and refinement of the entire communication process.

[0013] Furthermore, the protocol conversion unit in the reverse communication adaptation module has an error correction and fault tolerance mechanism when performing reverse conversion of the data format; it has a built-in comparison and error correction module based on data checksum and pre-stored standard protocol template. When the received data has partial format abnormalities or protocol field mismatches during the conversion process, it will automatically attempt to perform error correction based on the checksum and standard template. Through intelligent speculation, completion of missing fields or correction of erroneous fields and other operations, it ensures to the greatest extent that the data can be accurately converted into an industrial communication protocol format that can be recognized by the DCS system, reduces the probability of data conversion failure due to factors such as network interference, and improves the accuracy and reliability of reverse data transmission.

[0014] Furthermore, the data decryption unit of the reverse communication adapter module will start the data integrity verification process after the decryption operation is completed; the decrypted plaintext data will be checked for integrity using the preset encrypted data feature library and hash verification algorithm; the feature library stores the original feature information of the corresponding encrypted data before encryption, and determines whether the data has been tampered with during transmission by comparing the hash value of the decrypted data with the standard hash value in the feature library; if the data integrity is found to be damaged, in addition to triggering the alarm mechanism to notify the enterprise network end, it will also try to obtain the correct copy of the corresponding data from the near-end cache area or the remote backup server based on the redundant backup mechanism for replacement, to ensure that the data transmitted to subsequent terminal devices is accurate and to ensure the data quality of the entire communication link.

[0015] Furthermore, the traffic feedback unit of the reverse communication adaptation module adopts a hierarchical feedback structure when feeding back traffic status information to the enterprise network end; first, the traffic information is classified and counted according to multiple dimensions such as data type, transmission direction, and time interval to form traffic reports at different levels.

[0016] Furthermore, the link repair mechanism of the dynamic link detection and repair submodule will execute a channel quality assessment and optimization process when switching the backup communication channel; before selecting the backup channel, the channel detection signal is first used to perform a multi-parameter quality assessment on each backup channel, including channel bandwidth, signal strength, and bit error rate indicators; based on these evaluation results, an intelligent algorithm is used to screen out the optimal backup channel, and after switching, the operating status of the channel is monitored in real time, and channel-related parameters are dynamically adjusted according to actual transmission conditions, such as optimizing signal strength through power control and adjusting transmission rate using adaptive modulation technology, to ensure that the switched channel can ensure the stable operation of the communication link in the best state and reduce short-term communication interruptions or transmission performance degradation caused by channel switching.

[0017] Furthermore, after restoring the communication link, the dynamic link detection and repair submodule will automatically generate a link failure report and send it to the operation and maintenance management system of the enterprise network; the report records in detail the time when the link failure occurred, the link status parameters when the failure was detected, the process of attempting to repair, and the key information of the time when communication was finally restored; based on this detailed report, the operation and maintenance personnel can deeply analyze the cause of the failure, summarize the lessons learned, and carry out targeted optimization and improvement of the enterprise network and communication links to prevent the recurrence of similar failures, continuously improve the reliability and stability of the entire communication system, and ensure the long-term stable operation of the remote communication and control functions of the DCS system.

[0018] Compared with the prior art, the present invention has the following beneficial effects: The present invention uses a protocol conversion unit in the communication adapter module set at the enterprise network end, which has a built-in dynamically updateable industrial communication protocol library and an intelligent recognition function, and can accurately respond to industrial communication protocols used by DCS systems of different versions and manufacturers, and smoothly convert them into a universal network communication protocol, ensuring that data can be accurately transmitted between the enterprise network and the remote router device. Whether the enterprise introduces new DCS equipment or the industrial protocol is updated, it can automatically adapt, effectively avoiding data transmission obstacles caused by protocol incompatibility, greatly enhancing the adaptability of the entire communication method to diversified industrial scenarios, and ensuring the smooth flow of industrial production data in different network environments.

[0019] The dynamic encryption key generated based on quantum key distribution technology is used for data encryption, and the unique properties of quantum mechanics, such as uncertainty and non-cloning, ensure the high security of the key. The mechanism of multi-node collaborative key generation further increases the difficulty of key cracking. Even if some nodes are attacked by external attacks, the integrity and validity of the key can still be guaranteed. During the data transmission process, this high-intensity encryption method can effectively resist various types of malicious network interception and cracking behaviors, protect the core secrets and key data in industrial production from being leaked or tampered with, and build a solid line of defense for the safe production and information security of enterprises.

[0020] The traffic control unit uses intelligent algorithms to dynamically adjust the data transmission order and transmission rate based on the preset traffic priority strategy with adaptive learning function and the real-time and accurate monitoring of network load. By collecting feedback information on past transmission effects, the traffic priority weights and network load judgment thresholds corresponding to each data type are continuously optimized, so that important data can be transmitted first when network resources are tight, avoiding resource waste or key data transmission obstruction caused by fixed priority strategies, effectively improving overall communication efficiency, ensuring that the enterprise network can operate efficiently, and meeting the requirements of different production businesses for timely data transmission.

[0021] When data is sent from the enterprise network, timestamp information accurate to the millisecond level is embedded, and the source device identifier and business type identifier are associated. This can not only accurately determine the time accuracy and whether there is abnormal delay during data transmission, but also facilitate the rapid tracing of the specific source and business of the data on the remote router device. This is of great significance for troubleshooting, data analysis and business process optimization in the production process, and can help enterprises manage and monitor industrial production more finely, discover potential problems in a timely manner and take corresponding measures, and improve the scientificity and accuracy of production management.

[0022] The reverse communication adapter module at the remote router device has set up multiple protection mechanisms for the reverse transmission of data. The error correction and fault tolerance mechanism of the protocol conversion unit can automatically perform error correction and repair when abnormalities occur in the data format conversion, ensuring to the greatest extent that the data can be accurately converted into an industrial communication protocol format that can be recognized by the DCS system. The data decryption unit starts the data integrity verification process after decryption, detects whether the data has been tampered with through feature comparison and hash verification algorithms, and has corresponding remedial measures when problems are found, such as using redundant backup mechanisms to ensure the stable implementation of remote control functions.

[0023] The traffic feedback unit in the reverse communication adaptation module adopts a hierarchical feedback structure, classifies and counts traffic information according to multiple dimensions, and sends it to the enterprise network end through feedback channels of different priorities according to the preset importance level. This enables the enterprise network end to receive and analyze traffic information more clearly and systematically, optimize traffic control strategies in a targeted manner according to the needs of different levels, and form a closed-loop traffic management mechanism, further improving the coordination and rationality of the overall communication resources and ensuring that the network is always in an efficient operating state.

[0024] The dynamic link detection and repair submodule sends link detection signals regularly and intelligently judges the link status, and can quickly start the link repair mechanism when a link fails. It performs channel quality assessment and optimization processes when switching backup communication channels, selects the optimal channel, and dynamically adjusts channel parameters after switching to ensure that the switched channel can guarantee the stable operation of the communication link in the best state, effectively reducing the communication interruption time caused by link failure, minimizing the impact on the remote communication and control functions of the DCS system, and ensuring the continuity and stability of industrial production.

[0025] After restoring the communication link, the dynamic link detection and repair submodule will automatically generate a detailed link failure report and send it to the enterprise network operation and maintenance management system. Based on this report, the operation and maintenance personnel can deeply analyze the cause of the failure, summarize the experience and lessons, and carry out targeted optimization and improvement of the enterprise network and communication links. This mechanism helps to continuously improve the reliability and stability of the entire communication system and prevent similar failures from happening again. In the long run, it can reduce the enterprise's operation and maintenance costs and improve the overall benefits of industrial production. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 It is a flow chart of the present invention. DETAILED DESCRIPTION

[0027] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0028] See also Figure 1The present invention provides a technical solution: a communication method between an enterprise network and a remote router device of a DCS system; the communication system involved mainly includes a DCS system, an enterprise network, a remote router device, and a bidirectional communication link connecting them. Among them, the enterprise network end is configured with a communication adapter module, the remote router device end is provided with a reverse communication adapter module, and a dynamic link detection and repair submodule is also provided between the two to ensure the stability and reliability of communication and the smooth implementation of various data processing and interaction functions.

[0029] Communication adapter module on the enterprise network side 1. Protocol conversion unit In the communication adapter module on the enterprise network side, the protocol conversion unit first builds the industrial communication protocol library and the general network communication protocol library. The industrial communication protocol library collects common industrial communication protocols involved in various DCS systems currently used in enterprises, such as Modbus, Profibus, etc., and stores them according to protocol standards and specifications, while reserving extensible interfaces for subsequent updates. The general network communication protocol library covers common Internet protocol formats such as TCP / IP and HTTP. During the initialization phase, these protocols are loaded into memory in the form of code modules for quick calling.

[0030] When the data output by the DCS system enters the protocol conversion unit, its built-in intelligent recognition algorithm will parse the data packet header, feature fields, etc. to determine the specific industrial communication protocol followed by the data. For example, if a specific Modbus protocol identification field is detected, it is determined that the data follows the Modbus protocol. Subsequently, according to the pre-stored protocol mapping table, the data in the industrial communication protocol format is converted to the corresponding general network communication protocol format. During the conversion process, the field order, length, encoding method, etc. of the data are adjusted strictly in accordance with the corresponding protocol standards to ensure that the converted data can be accurately transmitted in the enterprise network and subsequent communication links.

[0031] (II) Data encryption unit The data encryption unit relies on quantum key distribution technology to generate dynamic encryption keys. To this end, multiple nodes with quantum communication functions are reasonably deployed in the enterprise network environment. These nodes are distributed in different physical areas (such as different computer rooms or workshops, etc.) and are interconnected through dedicated quantum communication optical fiber links to form a quantum communication network. Each node is equipped with high-precision quantum state preparation and measurement equipment and corresponding control processing units to participate in the quantum key generation process.

[0032] When it is necessary to encrypt the data after protocol conversion, each quantum node works together according to the preset encryption strategy. For example, a specific master node first initiates the key generation instruction, and each node begins to prepare and distribute photon pairs in a quantum entangled state. Through the measurement of photons and information interaction based on the principles of quantum mechanics, each node obtains part of the key information, and then after a series of complex negotiations and error correction processes, it finally converges to generate a unique and highly secure dynamic encryption key. The key is updated in real time, and a new key is regenerated each time data is transmitted to ensure the security of data encryption.

[0033] The generated dynamic encryption key is used to encrypt the data using a symmetric encryption algorithm (such as AES). The data is divided into fixed data block sizes, and each data block is encrypted using a key to obtain the encrypted data blocks, which are then combined in sequence to form the final encrypted data, ready to enter the subsequent traffic control unit.

[0034] (III) Flow Control Unit When the traffic control unit is initialized, it sets a multi-level traffic priority strategy based on the importance of the enterprise's production business and the requirements for data real-time performance. For example, data involving emergency control instructions for production equipment is set to the highest priority, key production parameter data for real-time monitoring is set to a higher priority, and general equipment status query data is set to a normal priority. At the same time, combined with the topological structure of the enterprise network and the bandwidth resource situation, the initial bandwidth allocation ratio corresponding to different priorities and the maximum and minimum bandwidth limits and other parameters are set.

[0035] Deploy network traffic monitoring sensors at key network nodes in the enterprise network. These sensors can collect network load-related indicator information such as bandwidth utilization, packet throughput, and packet loss rate of network links in real time, and send this information to the traffic control unit regularly. Based on these real-time monitoring data, the traffic control unit uses intelligent algorithms, such as fuzzy logic control algorithms, to conduct a comprehensive assessment of the current network load and determine whether the network is in a congested, idle, or normal load state.

[0036] When data is ready to be sent, the traffic control unit first determines the type of data and its corresponding priority. Then, combined with the current network load evaluation results, the data transmission order and transmission rate are adjusted according to the priority strategy. For example, when the network is congested, the transmission of high-priority data is prioritized, and the network bandwidth is reasonably allocated by limiting the transmission rate of low-priority data or temporarily caching some low-priority data, ensuring that important data can be sent out in a timely and accurate manner through the two-way communication link.

[0037] 4. Timestamp Embedding Unit The timestamp embedding unit is connected to the high-precision clock source configured on the enterprise network side. The clock source uses high-precision clock devices such as atomic clocks or GPS clocks as the benchmark, and synchronizes the clocks with other related devices in the enterprise network through methods such as the Network Time Protocol (NTP), ensuring that the time benchmark in the entire network environment is consistent and accurate to the millisecond level. At the same time, a regular clock calibration mechanism is set to deal with possible minor deviations in the clock source to ensure the accuracy of time.

[0038] After the data has been processed by the previous protocol conversion, encryption, and traffic regulation, the timestamp embedding unit obtains the current precise time and embeds it into a specific field of the data in a specific data format (such as extending the ISO8601 time format to millisecond accuracy). At the same time, by interacting with the device management system and business classification system in the enterprise network, the source device identification (such as device number, name, etc.) and business type identification (such as temperature monitoring business, pressure control business, etc.) corresponding to the data are obtained and encapsulated into the data, forming data with complete time, source, and business information, providing a comprehensive basis for subsequent data tracing and analysis.

[0039] The reverse communication adapter module is located at the remote router device end. 1. Protocol conversion unit After the protocol conversion unit in the reverse communication adapter module at the remote router device receives the data from the enterprise network, it also first identifies the general network communication protocol that the data follows. By parsing the data's protocol header, port number and other characteristic information, the corresponding general network protocol type (such as different application layer protocols in the TCP / IP protocol, etc.) is determined. Then, based on the pre-stored reverse protocol mapping table, the data in the general network communication protocol format is converted back to the industrial communication protocol format that can be recognized by the DCS system. During the conversion process, the error correction and fault tolerance mechanism is activated for possible partial damage or abnormalities in the data format caused by network transmission. For example, if it is found that the length of a certain protocol field does not meet the standard, it will refer to the pre-stored standard protocol template for intelligent speculation and completion operations to ensure that the converted data can be correctly parsed and processed by the DCS system. 2. Data decryption unit After the data decryption unit obtains the received encrypted data, it uses the dynamic encryption key generated based on quantum key distribution technology that matches the data encryption unit on the enterprise network to decrypt it. Since the key generation mechanisms at both ends are consistent and synchronized, the corresponding decryption key can be accurately obtained. According to the corresponding symmetric decryption algorithm (such as the AES decryption algorithm corresponding to encryption), the encrypted data blocks are decrypted in turn to restore the original plaintext data, ready to enter the subsequent processing links such as traffic feedback and timestamp analysis and verification.

[0040] After decryption is completed, the integrity of the decrypted plaintext data is verified using the preset encrypted data feature library and hash verification algorithm. The encrypted data feature library stores the original feature information of the corresponding encrypted data before encryption, such as specific data fingerprints (fixed-length summary information calculated by hash functions), etc. The hash value is calculated again for the decrypted plaintext data and compared with the corresponding standard hash value in the feature library. If the two are consistent, it means that the data has not been tampered with during transmission and the data integrity is good; if they are inconsistent, the alarm mechanism is triggered, and at the same time, an attempt is made to obtain the correct copy of the corresponding data from the near-end cache area (if there is a cached copy of the corresponding data) or the remote backup server (the relevant data copy is stored according to the preset backup strategy) for replacement to ensure that the data transmitted to the subsequent terminal device is accurate.

[0041] (III) Flow feedback unit The traffic feedback unit monitors and counts the received data traffic in real time. First, traffic information is classified according to multiple dimensions, such as control instruction, monitoring data, status feedback, etc. according to data type, uplink traffic from the enterprise network end to the remote router device end and downlink traffic in the opposite direction according to transmission direction, and traffic conditions at different time periods such as hourly, daily, and weekly according to time intervals. For each dimension classification, basic traffic indicator information such as data volume, transmission rate, and number of data packets is recorded in detail, and corresponding traffic statistics reports are constructed based on this information.

[0042] After completing the classification and statistics of traffic information, the traffic feedback unit further uses data analysis algorithms (such as moving average method, standard deviation analysis, etc.) to analyze the fluctuation of traffic to determine whether there are abnormal traffic peaks, valleys or periodic abnormal fluctuations. According to the analysis results and the preset importance level, traffic information of different dimensions and levels is sent to the communication adapter module of the enterprise network end through feedback channels of different priorities (such as high-priority real-time feedback channels for emergency traffic anomalies, and ordinary priority timed feedback channels for regular traffic statistics, etc.), to assist the enterprise network end to further optimize the traffic control strategy according to the actual situation.

[0043] (IV) Timestamp parsing and verification unit After receiving the data with timestamp information, the timestamp parsing and verification unit first parses the timestamp according to the preset data format (such as ISO8601 time format), extracts the specific time information when the recorded data is sent from the enterprise network end, and obtains the source device identification and business type identification associated with it, in preparation for subsequent verification and analysis.

[0044] The time corresponding to the parsed timestamp is compared with the current time recorded by the high-precision clock configured by the remote router device itself and calibrated by an authoritative clock source, and the time accuracy and abnormal delay in the data transmission process are judged according to the preset time deviation threshold (such as ±500 milliseconds, which can be adjusted according to actual communication requirements). If the time deviation exceeds the preset threshold, the alarm mechanism is triggered immediately, and the relevant abnormal information including the details of the time anomaly (such as the specific duration of the deviation, the data identification involved, etc.) is fed back to the enterprise network end through a dedicated feedback channel, so that the enterprise network end can promptly check for possible network failures, transmission congestion and other problems to ensure the timeliness and accuracy of data transmission.

[0045] Establishment and maintenance of two-way communication links 1. Establishing a communication link When establishing a two-way communication link between the enterprise network and the remote router device, select appropriate communication media (such as optical fiber, microwave, etc.) and communication technology (such as Ethernet, SDH, etc.) to build the physical link based on factors such as the enterprise's network layout, geographical distance, and communication needs. At the same time, configure the corresponding network interface devices (such as optical transceivers, router ports, etc.) at both ends of the link, and set network parameters such as IP address allocation and routing protocol configuration to ensure that the devices at both ends of the link can recognize and communicate with each other, establish a stable two-way communication channel, and meet the two-way data transmission needs.

[0046] 2. Implementation of dynamic link detection and repair submodule The dynamic link detection and repair submodule has a built-in intelligent timer, which sends a link detection signal to the other party at a preset time interval (such as every 5 minutes, which can be adjusted according to the network stability requirements). The link detection signal contains unique identification information (such as serial number, etc.) and sending timestamps, so that the other party can accurately identify and verify it. At the same time, a corresponding detection signal receiving processing program is set at the receiving end to receive and parse the detection signal from the other party, extract the identification information and timestamp, and compare and verify it with the local record.

[0047] If the detection confirmation signal is not received from the other party within the specified time (for example, it is set to 1 minute), the link is determined to be faulty and the link repair mechanism is automatically started. The link repair mechanism first intelligently switches to the available backup communication channel according to the channel priority order (pre-set priority according to factors such as channel bandwidth and stability) based on the pre-stored backup communication channel information (the enterprise has configured and maintained multiple backup communication channels in advance, such as backup optical fiber links, etc.). After switching channels, the communication parameters are renegotiated, including adjusting the transmission rate, updating the data verification method, optimizing the link layer protocol, etc., to adapt to the new channel environment and ensure the continuity and stability of communication. At the same time, during the repair process, key information such as the time when the link failure occurred, the link status parameters when the failure was detected (such as signal strength, packet loss rate, etc.), the process of attempting to repair (including the switching of backup channels, renegotiated communication parameters, etc.), and the time when communication was finally restored are recorded in real time, and this information is used to generate a link failure report and send it to the operation and maintenance management system of the enterprise network, so as to facilitate the operation and maintenance personnel to conduct subsequent fault analysis and system optimization.

[0048] Data interaction process 1. Data transmission from DCS system to remote terminal equipment 1. After the DCS system collects various data in the production process (such as monitoring data such as temperature, pressure, flow, and equipment control status data, etc.), it sends it to the enterprise network.

[0049] 2. On the enterprise network side, the communication adapter module converts the data into a universal network communication protocol format through the protocol conversion unit in the order described above, encrypts it using the data encryption unit, and then controls the flow through the flow control unit. Finally, the timestamp and related identification information are added through the timestamp embedding unit, and the data is sent to the remote router device through a two-way communication link.

[0050] 3. After the reverse communication adapter module at the remote router device receives the data, its protocol conversion unit converts the data back to the industrial communication protocol format recognizable by the DCS system, the data decryption unit decrypts it, the traffic feedback unit counts and feeds back the traffic situation, and the timestamp parsing and verification unit verifies the timestamp and data integrity. After verification, the data is passed to the corresponding terminal device (such as monitoring terminal, data analysis server, etc.) for display, analysis or storage.

[0051] 2. Transmission of control instructions from remote terminal equipment to DCS system 1. The remote terminal device (such as a remote control workstation) generates control instructions based on the operator's operations or preset control strategies, and prepares to send them to the DCS system for remote control operations.

[0052] 2. The control command first enters the reverse communication adaptation module at the remote router device end. In this module, it is converted into a universal network communication protocol format by a protocol conversion unit, encrypted by a data encryption unit, and then the flow control unit performs flow control and the timestamp embedding unit adds timestamps and other related information before sending it to the enterprise network end through a two-way communication link.

[0053] 3. After receiving the control command, the communication adapter module on the enterprise network side performs reverse processing through the corresponding protocol conversion, data decryption, traffic feedback, and timestamp parsing and verification units in sequence to ensure the accuracy and security of the control command, and finally transmits it to the DCS system to realize the remote control function of the DCS system-related equipment.

Claims

1. A method for communication between an enterprise network and a remote router device of a DCS system, characterized in that: The following steps are involved: Communication adapter module configuration steps: A communication adapter module is provided at the enterprise network end of the DCS system, and the communication adapter module integrates a protocol conversion unit, a data encryption unit, a flow control unit and a timestamp embedding unit, and each unit works together to ensure effective preprocessing and transmission of data; The protocol conversion unit has a built-in industrial communication protocol library covering a variety of mainstream industrial communication protocols and a general network communication protocol library that complies with the general Internet standards. It has an intelligent recognition function and can accurately determine the industrial communication protocol followed by the data output from the DCS system, and automatically convert it into a corresponding data format that complies with the general network communication protocol, ensuring that the data can smoothly enter the communication link between the enterprise network and the external network; The data encryption unit uses a dynamic encryption key generated based on quantum key distribution technology, and ensures the high security of the key by taking advantage of the uncertainty and non-cloning properties of quantum mechanics, so as to perform real-time encryption processing on the data after protocol conversion, so that the data has high confidentiality during transmission, and effectively resists the risk of external malicious interception and cracking; The traffic control unit uses an intelligent algorithm to control the traffic allocation of the data to be sent based on the preset multi-level traffic priority strategy and the real-time and accurately monitored network load. Specifically, it prioritizes different data according to the data type and business urgency factors, and dynamically adjusts the sending order and transmission rate of each data in combination with the real-time margin of the current network bandwidth to ensure the timely transmission of important data and the efficient operation of the overall network. The timestamp embedding unit is connected to a high-precision clock source with synchronization and calibration functions configured on the enterprise network end, and adds timestamp information accurate to the millisecond level to the data after protocol conversion, encryption and traffic regulation. This timestamp can uniquely identify the specific time point when the data is sent from the enterprise network end, providing a key time basis for subsequent data tracing and transmission timeliness verification operations; Reverse communication adapter module configuration steps: A corresponding reverse communication adapter module is set at the remote router device end, which matches the communication adapter module at the enterprise network end and also includes a protocol conversion unit, a data decryption unit, a traffic feedback unit, and a timestamp parsing and verification unit, for realizing reverse processing of received data and related monitoring feedback; The protocol conversion unit has a reverse conversion function, which can accurately identify the received data that complies with the general network communication protocol, and convert it back to the corresponding data format that complies with the industrial communication protocol that can be recognized by the DCS system according to the preset mapping relationship, ensuring that the data can be correctly parsed and processed by the DCS system; The data decryption unit uses a dynamic encryption key generated based on quantum key distribution technology that matches the data encryption unit of the enterprise network end communication adapter module, and performs accurate decryption operations on the received encrypted data according to the corresponding decryption algorithm, ensuring that the data can be restored to the original plaintext data that can be used for subsequent operations after reaching the remote router device; The traffic feedback unit counts the received data traffic in real time, not only recording the data volume and basic information of the transmission rate, but also analyzing the fluctuation of the traffic and whether there is an abnormal peak according to the preset analysis model, and then feeding back comprehensive and detailed traffic information to the communication adapter module of the enterprise network end, so as to assist the enterprise network end to further optimize the traffic control strategy according to the actual situation; After receiving the data carrying the timestamp information, the timestamp parsing and verification unit first performs high-precision parsing on the timestamp to obtain the sending time recorded therein, and then compares it with the current time recorded by the high-precision clock configured by the remote router device itself and calibrated by the authoritative clock source, and judges the time accuracy and whether there is abnormal delay in the data transmission process according to the preset time deviation threshold; if the time deviation exceeds the preset threshold, the alarm mechanism is immediately triggered, and the abnormal information including the time abnormality details and the data identification involved is fed back to the enterprise network end through a dedicated feedback channel, so that the enterprise network end can timely check the possible network failure and transmission congestion problems; Steps for establishing a two-way communication link and exchanging data: A two-way communication link is established between the enterprise network and the remote router device, and the link has high bandwidth, low latency and redundant backup functions to ensure stable and reliable communication; through the two-way communication link, the production process data collected by the DCS system is subjected to a series of pre-processing operations such as protocol conversion, encryption, flow regulation and timestamp embedding by the communication adapter module at the enterprise network end, and then sent to the remote router device according to the transmission rules of the link; after receiving the data, the remote router device performs protocol conversion, decryption, feedback-based flow statistics, timestamp analysis and verification on the data in sequence through the reverse communication adapter module, and after inspection After the format conversion is completed, the data that can be recognized by its associated terminal device is transmitted to the corresponding terminal device for display, analysis or storage, so as to realize the effective transmission of data from the DCS system to the remote terminal device; at the same time, the control instructions generated by the terminal device of the remote router device for controlling the DCS system are in accordance with the reverse process mentioned above, that is, they are first pre-processed by the reverse communication adapter module, and then transmitted to the enterprise network end through the communication link, and finally transmitted to the DCS system after reverse processing by the communication adapter module of the enterprise network end, so as to realize the remote and accurate control of the DCS system and ensure the closed-loop operation of the entire control system; Dynamic link detection and repair steps: A dynamic link detection and repair submodule is provided between the communication adapter module and the reverse communication adapter module, and the submodule has a built-in intelligent timer and a multi-dimensional link status monitoring mechanism; the intelligent timer sends a link detection signal to the other party at a preset and flexibly configurable time interval, and the link detection signal contains unique identification information and a sending timestamp content, which is convenient for the other party to accurately identify and verify; If the detection confirmation signal containing the corresponding identification information and the receiving timestamp is not received from the other party within the specified time that is reasonably set based on the network communication performance and business requirements, the link repair mechanism is automatically started; the link repair mechanism first intelligently switches to the available backup communication channel according to the channel priority order based on the pre-stored backup communication channel information, and renegotiates the communication parameters, such as the transmission rate and the data verification method, to adapt to the new channel environment, and restores the two-way communication link between the enterprise network and the remote router device, ensuring the continuity and stability of the communication, and minimizing the impact of the link failure on the remote communication and control functions of the entire DCS system.

2. The method for communicating between an enterprise network and a remote router device of a DCS system according to claim 1, characterized in that: The industrial communication protocol library built into the protocol conversion unit in the communication adapter module supports a dynamic update function; specifically, a protocol monitoring module is provided at the enterprise network end, which monitors the newly introduced DCS system equipment or updated industrial communication protocol requirements in the enterprise in real time; when a new protocol is detected, it will automatically connect to the preset authoritative industrial protocol publishing platform, download the corresponding protocol update package, and after security verification and compatibility testing, add the new protocol information to the industrial communication protocol library of the protocol conversion unit to ensure that it always covers the latest and most complete industrial communication protocols, thereby ensuring that the data output by DCS system equipment of different versions and different manufacturers can be accurately converted to protocols, adapt to the constantly developing and changing industrial production network environment of the enterprise, avoid data transmission obstacles caused by protocol incompatibility, and enhance the adaptability of the entire communication method to diversified industrial scenarios.

3. The method for communicating between an enterprise network and a remote router device of a DCS system according to claim 1, characterized in that: The data encryption unit adopts a dynamic encryption key generated based on quantum key distribution technology, and its key generation process involves a multi-node collaboration mechanism; in the enterprise network environment, multiple nodes distributed in different physical locations and equipped with quantum communication functions are set up, and these nodes establish connections with each other through quantum entanglement states; when it is necessary to generate an encryption key, each node participates in the measurement and information interaction of the quantum state in accordance with a preset encryption strategy, and jointly generates a unique and highly secure dynamic encryption key based on the non-cloning and uncertainty of quantum mechanics; this multi-node collaboration method further increases the difficulty of the key being cracked. Even if some nodes are attacked externally, they can still rely on other nodes to ensure the integrity and validity of the key, which greatly enhances the confidentiality of data during transmission and safeguards the security of communication between the enterprise network and remote router devices.

4. The method for communicating between an enterprise network and a remote router device of a DCS system according to claim 1, characterized in that: The preset traffic priority strategy of the traffic control unit has an adaptive learning function; it is internally provided with an intelligent learning module, which collects feedback information on data transmission effects in different time periods and different business scenarios in the past, such as data delays and timeliness feedback on business execution; based on these large amounts of historical data, machine learning algorithms are used for analysis and modeling, and the traffic priority weights corresponding to each data type and the network load judgment threshold are automatically adjusted, so that the traffic control strategy can be continuously optimized with the dynamic changes of the enterprise's production business, accurately adapt to the actual network conditions, effectively avoid resource waste or key data transmission obstruction caused by fixed priority strategies, and ensure that the overall communication efficiency is always at a high level.

5. The method for communication between an enterprise network and a remote router device of a DCS system according to claim 1, characterized in that: When embedding the timestamp information, the timestamp embedding unit will also associate and embed the source device identifier and the service type identifier of the corresponding data; By interacting with the device management system and business classification system within the enterprise network, the precise source device number, name, and key business category information are obtained, and encapsulated together with the timestamp in a specific field of the data; in this way, when the timestamp is parsed and verified on the remote router device side, not only can the accuracy of the transmission time be determined, but the specific source of the data and the business to which it belongs can also be quickly traced, facilitating targeted troubleshooting, data analysis, and business process optimization, further improving the manageability and refinement of the entire communication process.

6. The method for communication between an enterprise network and a remote router device of a DCS system according to claim 1, characterized in that: The protocol conversion unit in the reverse communication adaptation module has an error correction and fault tolerance mechanism when performing reverse conversion of the data format; it has a built-in comparison and error correction module based on data checksum and pre-stored standard protocol template. When the received data has partial format abnormalities or protocol field mismatches during the conversion process, it will automatically attempt to perform error correction and repair based on the checksum and standard template. Through intelligent speculation, completion of missing fields or correction of erroneous fields, it ensures to the greatest extent that the data can be accurately converted into an industrial communication protocol format that can be recognized by the DCS system, reduces the probability of data conversion failure due to network interference factors, and improves the accuracy and reliability of reverse data transmission.

7. The method for communication between an enterprise network and a remote router device of a DCS system according to claim 1, characterized in that: After the decryption operation is completed, the data decryption unit of the reverse communication adapter module will start the data integrity verification process; use the preset encrypted data feature library and hash verification algorithm to perform integrity verification on the decrypted plaintext data; the feature library stores the original feature information of the corresponding encrypted data before encryption, and by comparing the hash value of the decrypted data with the standard hash value in the feature library, it is determined whether the data has been tampered with during the transmission process; If data integrity is found to be compromised, in addition to triggering an alarm mechanism to notify the enterprise network, an attempt will be made to obtain the correct copy of the corresponding data from the nearby cache area or the remote backup server based on the redundant backup mechanism for replacement, ensuring that the data transmitted to subsequent terminal devices is accurate and that the data quality of the entire communication link is guaranteed.

8. The method for communication between an enterprise network and a remote router device of a DCS system according to claim 1, characterized in that: The traffic feedback unit of the reverse communication adaptation module adopts a hierarchical feedback structure when feeding back traffic information to the enterprise network end; first, the traffic information is classified and counted according to multiple dimensions such as data type, transmission direction, and time interval to form traffic reports at different levels.

9. The method for communication between an enterprise network and a remote router device of a DCS system according to claim 1, characterized in that: The link repair mechanism of the dynamic link detection and repair submodule executes a channel quality assessment and optimization process when switching to a standby communication channel; Before selecting a backup channel, use the channel detection signal to perform a multi-parameter quality assessment on each backup channel, including channel bandwidth, signal strength, and bit error rate indicators; based on these evaluation results, use an intelligent algorithm to screen out the optimal backup channel, and after switching, monitor the operating status of the channel in real time, and dynamically adjust channel-related parameters according to actual transmission conditions, such as optimizing signal strength through power control and adjusting transmission rate using adaptive modulation technology, to ensure that the switched channel can guarantee the stable operation of the communication link in the best state and reduce short-term communication interruptions or transmission performance degradation caused by channel switching.

10. The method for communication between an enterprise network and a remote router device of a DCS system according to claim 1, characterized in that: After the communication link is restored, the dynamic link detection and repair submodule will automatically generate a link failure report and send it to the enterprise network operation and maintenance management system; the report records in detail the time when the link failure occurred, the link status parameters when the failure was detected, the process of attempting to repair it, and the key information of the time when communication was finally restored; Based on this detailed report, operation and maintenance personnel can deeply analyze the cause of the failure, summarize the experience and lessons, and carry out targeted optimization and improvement of the enterprise network and communication links to prevent the recurrence of similar failures, continuously improve the reliability and stability of the entire communication system, and ensure the long-term stable operation of the DCS system's remote communication and control functions.

Images