Remote secure connection method and system for industrial Internet of Things

Abstract

The invention discloses a remote secure connection method and system for an industrial internet of things, and belongs to the technical field of remote secure connection, and the method comprises the steps: obtaining the polling interval data of target industrial equipment, analyzing a polling mode characterization factor, judging a polling interval execution scheme of the remote connection of the target industrial equipment, and carrying out the remote connection of the target industrial equipment; synchronously analyzing a polling mode characterization factor deviation value, executing dynamic polling interval adjustment of remote connection of the target industrial equipment, analyzing dynamic polling interval adjustment effect information, analyzing a network state characterization factor of remote connection, and executing dynamic protocol timeout adjustment of remote connection of the target industrial equipment. And analyzing the dynamic protocol overtime adjustment effect information to obtain a protocol overtime execution scheme of remote connection of the target industrial equipment. According to the invention, the dynamic polling interval is dynamically changed, the inherent rule is broken, the protocol timeout time is dynamically adjusted, the security and real-time performance of remote secure connection are improved, and the compatibility and standardization of the system protocol are enhanced.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of remote secure connection, in particular to a remote secure connection method and system for industrial Internet of Things. BACKGROUND

[0002] The vigorous development of Internet of Things makes traditional industrial equipment gradually transform to network and intelligence. Industrial Internet of Things is the application of Internet of Things in the industrial field. The existing remote secure connection technology for industrial Internet of Things is through intelligent sensors, edge computing, cloud computing, secure communication protocols, identity authentication and access control, and data analysis and protection technology to realize real-time data interaction of equipment, to realize equipment maintenance based on data analysis through remote access, to realize intrusion detection and protection, so as to simplify operation and maintenance management and optimize resource efficiency, and to enhance the security of remote connection, improve the reliability of data transmission, and realize real-time monitoring and control of remote connection process through industrial Internet of Things.

[0003] For example, the Chinese invention patent with the publication number CN113632437B discloses a secure remote connection in industrial Internet of Things, wherein the target device does not have a direct Internet connection. The first gateway receives a first connection request from a user device, the first connection request including an access token. The access token is verified in an identity and access management service, and after successful verification, a first tunnel is established between the user device and the target device via one or more intermediate gateways. The target device receives a second connection request from the user device, the second connection request including an access token. A second tunnel is established between the target device and the identity and access management service via one or more intermediate gateways, and the access token is verified in the identity and access management service via the second tunnel.

[0004] For example, the Chinese invention patent with the publication number CN114070559B discloses a multi-factor based industrial Internet of Things session key agreement method. The user saves personal information using a smart card and communicates with the smart devices and Internet of Things nodes deployed in the industrial Internet of Things through a connected mobile phone or other smart terminal device, and real-time device state information is obtained, and the device is remotely managed and monitored. Based on the semi-trustworthy management center environment, the pseudonym of the user is generated by the user and the server, and after each key agreement process, the pseudonym of the user is updated in real time. The pre-distributed key method is adopted, based on multi-factor authentication, i.e. biometric features, passwords, smart cards, and the main encryption operation is bit operation and hash function.

[0005] The above-mentioned technology at least has the following technical problems: The current technology for remote secure connection of industrial Internet of Things focuses on encryption and decryption of remote connection and information updating and instruction sending between devices. In the remote secure connection of industrial Internet of Things, a fixed polling interval is usually used. However, the fixed interval is easy to be recognized and attacked by attackers, which causes security risks and wastes resources. The protocol timeout problem is ignored, which affects the system stability and protocol compatibility and reduces the device operation efficiency. SUMMARY

[0006] To solve the above technical problems existing in the prior art, the embodiments of the present application provide a remote secure connection method and system for industrial Internet of Things. The technical scheme is as follows: On the one hand, a remote secure connection method for industrial Internet of Things is provided, comprising the following steps: S1, obtaining polling interval data of a target industrial device, analyzing a polling mode characteristic factor, and judging a polling interval execution scheme of remote connection of the target industrial device.

[0007] S2, when the polling interval execution scheme of remote connection of the target industrial device is dynamic polling interval adjustment, synchronously analyzing a polling mode characteristic factor deviation value, executing dynamic polling interval adjustment of remote connection of the target industrial device, and after the adjustment is completed, analyzing dynamic polling interval adjustment effect information.

[0008] S3, after the dynamic polling interval adjustment, analyzing a network state characteristic factor of remote connection, executing dynamic protocol timeout adjustment of remote connection of the target industrial device, analyzing dynamic protocol timeout adjustment effect information, and thus obtaining a protocol timeout execution scheme of remote connection of the target industrial device.

[0009] On the other hand, a remote secure connection system for industrial Internet of Things is provided, comprising: A polling interval judgment module is configured to obtain polling interval data of a target industrial device, analyze a polling mode characteristic factor, and judge a polling interval execution scheme of remote connection of the target industrial device.

[0010] A polling interval adjustment module is configured to, when the polling interval execution scheme of remote connection of the target industrial device is dynamic polling interval adjustment, synchronously analyze a polling mode characteristic factor deviation value, execute dynamic polling interval adjustment of remote connection of the target industrial device, and after the adjustment is completed, analyze dynamic polling interval adjustment effect information.

[0011] A protocol timeout analysis module is configured to, after the dynamic polling interval adjustment, analyze a network state characteristic factor of remote connection, execute dynamic protocol timeout adjustment of remote connection of the target industrial device, analyze dynamic protocol timeout adjustment effect information, and thus obtain a protocol timeout execution scheme of remote connection of the target industrial device.

[0012] The technical scheme provided by the embodiment of the present application has at least the following beneficial effects: 1. The remote secure connection method and system for industrial Internet of Things provided by the present application can dynamically adjust the fixed polling interval, so that the polling interval dynamically changes, the inherent rules are broken, the ability to resist external attacks is enhanced, the security of remote connection is improved, the dynamic timeout time is adjusted for the protocol timeout problem caused by the dynamic polling interval, the security and real-time performance of remote secure connection are improved, the resource efficiency of the system is improved, in practical application scenarios such as numerical control machine tool monitoring, resources are allocated on demand, the service life of the equipment is prolonged, and the compatibility and standardization of the system protocol are enhanced.

[0013] 2. The present application analyzes the effect information of dynamic polling interval adjustment, judges the effect of polling interval adjustment with more strict judgment standard through the time interval entropy value of polling interval and the first polling mode characteristic factor, so as to ensure the accuracy of the equipment after polling interval adjustment, does not adjust the effective polling interval, prevents introducing other unstable factors, continues to perform remote connection of the target industrial equipment, sends early warning information for the polling interval which is not effective, prompts that this adjustment is not effective, and does not use the polling interval, which helps to maintain the security and stability of remote connection.

[0014] 3. The present application dynamically adjusts the polling interval through dynamic polling interval adjustment, improves the communication efficiency, avoids resource waste caused by fixed interval, enhances the system stability, optimizes the utilization of resources, saves bandwidth and server computing power, reduces unnecessary network traffic, improves the security of remote connection, fewer invalid requests mean fewer exposure opportunities, and can be cooperated with encryption protocol to strengthen protection, can support real-time demand, in practical application scenarios such as numerical control machine tool monitoring, dynamic adjustment can balance real-time data acquisition and system burden.

[0015] 4. The present application adjusts the timeout time of the protocol through dynamic protocol timeout adjustment, can significantly optimize the system performance and security by intelligently matching the network state and business demand, optimizes the network efficiency, improves the protocol compatibility, enhances the real-time performance of the protocol, in practical application scenarios such as numerical control machine tool control, reduces the end-to-end delay, avoids operation blockage, upgrades security protection, can better defend against man-in-the-middle attacks, detects abnormal behavior, and reduces resource consumption. BRIEF DESCRIPTION OF DRAWINGS

[0016] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings needed in the embodiments description. Obviously, the drawings in the following description only show some embodiments of the present application, and for those skilled in the art, other drawings can also be obtained based on these drawings without any creative effort.

[0017] Figure 1 is a remote secure connection method flowchart for industrial Internet of Things provided by the embodiments of the present application.

[0018] Figure 2 is a remote secure connection system structure schematic diagram for industrial Internet of Things provided by the embodiments of the present application.

[0019] Figure 3 is a polling interval execution scheme flowchart for judging target industrial equipment remote connection related by the embodiments of the present application.

[0020] Figure 4 is a dynamic protocol timeout adjustment flowchart for executing target industrial equipment remote connection related by the embodiments of the present application. DETAILED DESCRIPTION

[0021] The technical solutions in the present application will be described below with reference to the drawings.

[0022] In the embodiments of the present application, the words such as "example", "for example" and the like are used to represent as an example, illustration or description. Any embodiment or design scheme described as "example" in the present application should not be interpreted as more preferred or more advantageous than other embodiments or design schemes. Rather, the word "example" is intended to present the concept in a specific way. In addition, in the embodiments of the present application, the meaning expressed by "and / or" can be both, or one of the two.

[0023] In the embodiments of the present application, "image" and "picture" can be used interchangeably at times. It should be pointed out that when the distinction is not emphasized, the meanings expressed are consistent. "Of", "corresponding" and "corresponding" can be used interchangeably at times. It should be pointed out that when the distinction is not emphasized, the meanings expressed are consistent.

[0024] In the embodiments of the present application, sometimes the subscript such as W1 can be written in the form of non-subscript such as W1. When the distinction is not emphasized, the meanings expressed are consistent.

[0025] In order to make the technical problems, technical solutions and advantages of the present application more clear, the following will be described in detail with reference to the drawings and specific embodiments.

[0026] The embodiment of the application provides a remote secure connection method and system for an industrial Internet of Things, as shown in Figure 1 The remote secure connection method flow chart for the industrial Internet of Things, the method comprises the following steps of: S1, acquiring polling interval data of a target industrial equipment, analyzing a polling mode representation factor, and judging a polling interval execution scheme of remote connection of the target industrial equipment.

[0027] Referring to Figure 3 As shown in the figure, the polling interval execution scheme of remote connection of the target industrial equipment is judged, the polling mode representation parameter is collected, the polling mode representation factor is analyzed, the polling mode representation factor threshold value preset in the database is extracted, the polling mode representation factor is compared with the polling mode representation factor threshold value, when the polling mode representation factor is less than the polling mode representation factor threshold value, the remote connection of the target industrial equipment is continued, and when the polling mode representation factor is greater than or equal to the polling mode representation factor threshold value, dynamic polling interval adjustment is performed.

[0028] It should be noted that the remote secure connection of the numerical control machine tool is taken as an example in the embodiment, and in actual application, the industrial equipment can also be a mechanical arm, a punching machine, a water conservancy pump station unit, a large generator set and a mining equipment and the like for remote secure connection of the industrial Internet of Things.

[0029] In the embodiment, the polling mode representation factor is analyzed, and the analysis process is as follows: The polling mode representation parameter is collected, including a resource consumption rate of the target industrial equipment, an invalid polling proportion and a response time deviation degree.

[0030] It should be noted that the resource consumption rate refers to the resource use efficiency of the equipment, that is, the ratio of the resource use rate to the safety threshold value preset in the database, and is used to quantify the deviation degree of the resource load and the safety threshold value. The invalid polling proportion refers to the proportion of the polling request that does not obtain an effective state update in the total polling times. The response time deviation degree refers to the deviation degree of the actual response time and the expected target time, and the deviation degree refers to the difference between the actual response time and the expected target time.

[0031] When the invalid polling proportion increases, it is indicated that the resources occupied by the invalid communication in the system increase, the invalid resources not only increase the resource consumption rate, but also bring a lot of meaningless data, the deviation degree of the response time and the expected target is large, and the response time deviation degree becomes large, and the increase of the resource consumption rate leads to the decrease of the system processing capacity, the response time of the polling is delayed, and the response time deviation degree becomes large.

[0032] It should be noted that the resource consumption rate, the invalid polling proportion and the response time deviation degree can be obtained through python.

[0033] The polling mode characterization parameter is analyzed based on a polling mode characterization factor.

[0034] The reference values of the resource consumption rate, the invalid polling proportion and the response time deviation are compared with the resource consumption rate, the invalid polling proportion and the response time deviation respectively, and the comparison results are coupled by weighting with the corresponding measurement coefficients, so as to obtain the polling mode characterization factor.

[0035] The polling mode characterization factor quantitatively characterizes the polling mode of the target industrial equipment by the resource consumption rate, the invalid polling proportion and the response time deviation of the target industrial equipment.

[0036] It should be noted that the reference resource consumption rate, the reference invalid polling proportion and the reference response time deviation stored in the database are extracted.

[0037] The resource consumption rate measurement coefficient, the invalid polling proportion measurement coefficient and the response time deviation measurement coefficient preset in the database are extracted.

[0038] It should be noted that in the embodiment, in order to realize the weighted coupling of the polling mode characterization factor, the database is pre-constructed with a mapping relationship of multiple parameters, which is used to associate different resource consumption rates, invalid polling proportions and response time deviations with their corresponding measurement coefficients. The mapping relationship is stored in the form of a structured configuration data table (for example, a measurement configuration table), and the configuration table defines the measurement coefficient values corresponding to different resource consumption rates, invalid polling proportions and response time deviations. The above configuration table is combined with the polling mode characterization parameter through conditional matching, and realizes the dynamic adaptation of the polling mode of the target industrial equipment. Based on the configuration table, the system can automatically extract the measurement coefficient matched with the current polling mode characterization parameter, which is used for subsequent weighted coupling calculation. The value range of each measurement coefficient is limited to 0 to 1, and the sum of the three is 1, so as to ensure that the multi-parameter fusion result has the properties of normalization and physical consistency, and meets the weight constraint conditions required by the polling mode analysis.

[0039] In specific embodiments, the polling mode characterization factor is specifically represented as follows: ; Wherein, A is the polling mode characterization factor, T is the resource consumption rate of the target industrial equipment, U is the invalid polling proportion of the target industrial equipment, P is the response time deviation of the target industrial equipment, T vef is the reference resource consumption rate, U vef is the reference invalid polling proportion, P vef is the reference response time deviation, T1 is the resource consumption rate measurement coefficient of the target industrial equipment, U1 is the invalid polling proportion measurement coefficient of the target industrial equipment, and P1 is the response time deviation measurement coefficient of the target industrial equipment.

[0040] In this embodiment, the polling interval execution scheme of the remote connection of the target industrial equipment is judged, and the judgment process is as follows: The preset polling mode representation factor threshold value in the database is extracted.

[0041] If the polling mode representation factor is less than or equal to the polling mode representation factor threshold value, the polling interval execution scheme of the remote connection of the target industrial equipment is recorded as continuing the remote connection of the target industrial equipment.

[0042] It should be noted that if the polling mode representation factor is less than or equal to the polling mode representation factor threshold value, it means that the polling mode is not fixed at this time, and the polling interval is dynamically changed, which is beneficial to the remote safe connection of the equipment. In order to reduce the consumption of computing power and save system resources, no longer adjust, and record the polling interval execution scheme of the remote connection of the target industrial equipment as continuing the remote connection of the target industrial equipment.

[0043] If the polling mode representation factor is greater than the polling mode representation factor threshold value, the polling interval execution scheme of the remote connection of the target industrial equipment is recorded as performing dynamic polling interval adjustment.

[0044] It should be noted that if the polling mode representation factor is greater than the polling mode representation factor threshold value, it means that the polling mode is a fixed mode at this time, which is easy to be recognized and attacked by attackers, and is not conducive to safe connection. In order to enhance the security of remote connection, dynamic adjustment of polling interval is performed to enhance the ability to defend against attacks, so the polling interval execution scheme of the remote connection of the target industrial equipment is recorded as performing dynamic polling interval adjustment.

[0045] S2, when the polling interval execution scheme of the remote connection of the target industrial equipment is dynamic polling interval adjustment, the polling mode representation factor deviation value is analyzed synchronously, the dynamic polling interval adjustment of the remote connection of the target industrial equipment is performed, and after the adjustment is completed, the dynamic polling interval adjustment effect information is analyzed.

[0046] Referring to Figure 4 As shown in the flow chart of the dynamic protocol timeout adjustment of the remote connection of the target industrial equipment, the network state representation parameter of the remote connection is collected, the network state representation factor of the remote connection is analyzed, the network state representation factor threshold value in the database is extracted, the network state representation factor of the remote connection is compared with the network state representation factor threshold value, when the network state representation factor is greater than or equal to the network state representation factor threshold value, the remote connection of the target industrial equipment is continued, and when the network state representation factor is less than the network state representation factor threshold value, the dynamic protocol timeout adjustment of the remote connection of the target industrial equipment is performed.

[0047] By performing dynamic polling interval adjustment, the polling interval is dynamically adjusted, the communication efficiency is improved, the resource waste caused by fixed interval is avoided, the system stability is enhanced, the resource utilization is optimized, the bandwidth and server computing power are saved, unnecessary network traffic is reduced, the security of remote connection is improved, fewer invalid requests mean fewer exposure opportunities, and the encryption protocol can be used to strengthen the protection, real-time requirements can be supported, and in practical application scenarios such as numerical control machine tool monitoring, dynamic adjustment can balance real-time data acquisition and system burden.

[0048] By analyzing the dynamic polling interval adjustment effect information, the time interval entropy value of the polling interval and the first polling mode characteristic factor are jointly judged, the effect of the polling interval adjustment is judged with a more strict judgment standard, the accuracy of the equipment after the polling interval adjustment is ensured, the polling interval that is adjusted effectively is not adjusted, other unstable factors are prevented, the remote connection of the target industrial equipment is continued, the polling interval that is adjusted invalidly sends a warning information, prompts that this adjustment is invalid, and the polling interval is not used, which helps to maintain the security and stability of the remote connection.

[0049] In this embodiment, the polling mode characteristic factor deviation value is analyzed, and the dynamic polling interval adjustment of the target industrial equipment remote connection is performed, and the specific analysis process is as follows: The polling mode characteristic factor and the polling mode characteristic factor threshold value are subjected to difference processing to obtain the polling mode characteristic factor deviation value.

[0050] The polling interval offset is extracted based on the polling mode characteristic factor deviation value.

[0051] It should be noted that the system pre-constructs a mapping relationship between the polling mode characteristic factor deviation value and the corresponding polling interval offset in the database, and the mapping relationship is managed in the form of a structured configuration table (for example, a polling interval parameter configuration table). In the matching process, the system takes the deviation value as a query key to retrieve the corresponding polling interval offset in the configuration table. By finding the polling interval offset that matches the polling mode characteristic factor deviation value, the system can dynamically adjust the polling interval, thereby optimizing the polling mode, saving system resources, and improving the security of remote connection.

[0052] It should be noted that the larger the polling mode characteristic factor deviation value is, the more the polling mode is a fixed interval, and the larger the mismatch between the interval and the system is. In order to change the fixed polling mode, the polling interval is dynamically matched with the system state, and the corresponding polling interval offset is extracted. Therefore, the polling interval dynamically changes, making it difficult for attackers to be identified and attacked, and facilitating remote secure connection.

[0053] The number of requests per unit of time of the network traffic is collected, so as to determine the polling interval adjustment label, the polling interval adjustment label including increasing the polling interval and decreasing the polling interval.

[0054] It should be noted that the number of requests per unit of time refers to the number of requests per unit of time of the network traffic, which is the ratio of the total number of requests in the time window to the preset standard time window in the database, and the number of requests per unit of time can be obtained by python.

[0055] When the polling interval is fixed, the number of requests per unit of time of the network traffic is also constant, and when the business demand surges or is subjected to malicious attacks, the number of requests per unit of time increases. When the server is throttled, part of the request is discarded or delayed processing, and at this time, the number of requests per unit of time decreases.

[0056] If the number of requests per unit of time of the network traffic increases, the polling interval adjustment label is marked as increasing the polling interval, and if the number of requests per unit of time of the network traffic decreases, the polling interval adjustment label is marked as decreasing the polling interval.

[0057] The reference polling interval of the target industrial equipment remote connection is extracted.

[0058] The polling interval adjustment value is obtained based on the polling interval adjustment label and the polling interval offset.

[0059] It should be noted that the polling interval adjustment label includes increasing the polling interval and decreasing the polling interval.

[0060] In one specific embodiment, if the polling interval offset is L1, the polling interval adjustment label is increasing the polling interval, and the polling interval adjustment value is L1, if the polling interval offset is L2, the polling interval adjustment label is decreasing the polling interval, and the polling interval adjustment value is -L2.

[0061] The dynamic polling interval adjustment of the target industrial equipment remote connection is performed based on the reference polling interval of the target industrial equipment remote connection and the polling interval adjustment value.

[0062] It should be noted that the reference polling interval of the target industrial equipment remote connection is added to the polling interval adjustment value as the adjustment value for dynamic polling interval adjustment.

[0063] In this embodiment, the dynamic polling interval adjustment effect information is analyzed, and the specific analysis process is as follows: The time interval entropy value of the polling interval is obtained.

[0064] It should be noted that the time interval entropy value of the polling interval refers to the calculation of the Shannon entropy of the polling time interval, and the essence is to measure the unpredictability of the time interval through the Shannon entropy in information theory, which can be obtained by python.

[0065] Re-analyze the current polling mode characterization factor, denoted as the first polling mode characterization factor.

[0066] Extract the preset time interval entropy threshold value in the database.

[0067] If the time interval entropy of the polling interval is greater than the time interval entropy threshold value and the first polling mode characterization factor is less than the polling mode characterization factor threshold value, the dynamic polling interval adjustment effect information is recorded as effective adjustment, and the remote connection of the target industrial equipment is continued, otherwise the dynamic polling interval adjustment effect information is recorded as invalid adjustment, and a warning information is sent.

[0068] It should be noted that if the time interval entropy of the polling interval is greater than the time interval entropy threshold value and the first polling mode characterization factor is less than the polling mode characterization factor threshold value, it means that the adjusted polling interval has become a dynamic interval, which is not easy to be identified by attack, maintains the security of the connection, and no longer adjusts to prevent the introduction of other unstable factors, so the dynamic polling interval adjustment effect information is recorded as effective adjustment, in order to perform stable remote connection, and continue the remote connection of the target industrial equipment. If the condition is not met, it means that the adjusted polling interval is still not in good dynamic change, at which time the remote security connection of the device is at risk, so the dynamic polling interval adjustment effect information is recorded as invalid adjustment, and a warning information is sent.

[0069] S3, after the dynamic polling interval adjustment, analyze the network state characterization factor of the remote connection, execute the dynamic protocol timeout adjustment of the target industrial equipment remote connection, analyze the dynamic protocol timeout adjustment effect information, and thus obtain the protocol timeout execution scheme of the target industrial equipment remote connection.

[0070] By performing dynamic protocol timeout adjustment, the timeout time of the protocol is adjusted, and by intelligently matching the network state and business demand, the system performance and security can be significantly optimized, the network efficiency can be optimized, the protocol compatibility can be improved, the real-time performance of the protocol can be enhanced, in the practical application scenarios such as numerical control machine tool control, the end-to-end delay can be reduced, the operation blockage can be avoided, the security protection can be upgraded, the man-in-the-middle attack can be better defended, the abnormal behavior detection can be performed, and the resource consumption can be reduced.

[0071] In this embodiment, the network state characterization factor of the remote connection is analyzed, and the analysis process is as follows: Collect the network state characterization parameters of the remote connection, including the network state bandwidth utilization deviation value, the network delay deviation value, and the memory usage deviation value.

[0072] It should be noted that the bandwidth utilization deviation value, the network delay deviation value and the memory usage deviation value refer to the values of the bandwidth utilization, the network delay and the memory usage at the end of the monitoring period in the database, respectively minus the values of the bandwidth utilization, the network delay and the memory usage at the beginning of the period.

[0073] It should also be noted that the bandwidth utilization reflects network congestion or abnormal occupation. The network delay represents the network transmission efficiency. The memory usage indicates the pressure on the computing resources of the device.

[0074] When the bandwidth utilization deviation value is too large, the network queue is accumulated, causing the delay to rise, which belongs to nonlinear congestion, causing the receiving buffer to be accumulated, the memory occupation to rise, causing the memory usage deviation value to increase, resulting in network congestion, and the memory overload being too large, causing the encryption or decryption processing delay to increase, causing the network delay deviation value to increase.

[0075] It should be noted that the bandwidth utilization deviation value, the network delay deviation value and the memory usage deviation value of the network state can be obtained through python.

[0076] The network state characterization parameter based on the remote connection is used to analyze the network state characterization factor of the remote connection.

[0077] The reference bandwidth utilization deviation value, the reference network delay deviation value and the reference memory usage deviation value preset in the database are extracted.

[0078] When the bandwidth utilization deviation value is greater than or equal to zero, the bandwidth utilization deviation value is compared with the reference bandwidth utilization deviation value to obtain the bandwidth utilization deviation value proportion coefficient, that is, the bandwidth utilization deviation value is divided by the reference bandwidth utilization deviation value, and when the bandwidth utilization deviation value is less than zero, the reference bandwidth utilization deviation value is compared with the absolute value of the bandwidth utilization deviation value to obtain the bandwidth utilization deviation value proportion coefficient, that is, the reference bandwidth utilization deviation value is divided by the absolute value of the bandwidth utilization deviation value.

[0079] When the network delay deviation value is greater than or equal to zero, the reference network delay deviation value is compared with the network delay deviation value to obtain the network delay deviation value proportion coefficient, that is, the reference network delay deviation value is divided by the network delay deviation value, and when the network delay deviation value is less than zero, the network delay deviation value is compared with the reference network delay deviation value to obtain the network delay deviation value proportion coefficient, that is, the absolute value of the network delay deviation value is divided by the reference network delay deviation value.

[0080] When the memory usage deviation value is greater than or equal to zero, the memory usage deviation value is compared with the reference memory usage deviation value to obtain a memory usage deviation value proportionality coefficient, that is, the memory usage deviation value is divided by the reference memory usage deviation value, and when the memory usage deviation value is less than zero, the reference memory usage deviation value is compared with the absolute value of the memory usage deviation value to obtain a memory usage deviation value proportionality coefficient, that is, the reference memory usage deviation value is divided by the absolute value of the memory usage deviation value.

[0081] The bandwidth utilization deviation value proportionality coefficient, the network delay deviation value proportionality coefficient, and the memory usage deviation value proportionality coefficient are combined with corresponding metric coefficients for weighted coupling processing, so as to obtain a network state representation factor of the remote connection.

[0082] The network state representation factor of the remote connection is a quantitative representation of the network state of the bandwidth utilization deviation value, the network delay deviation value, and the memory usage deviation value.

[0083] It should be noted that the preset bandwidth utilization deviation value metric coefficient, the network delay deviation value metric coefficient, and the memory usage deviation value metric coefficient in the database are extracted.

[0084] It should be noted that in order to implement the weighted coupling of the network state representation factor of the remote connection, the database has pre-constructed mapping relationships of multiple groups of parameters for associating different bandwidth utilization deviation values, network delay deviation values, and memory usage deviation values with their corresponding metric coefficients. The mapping relationships are stored in the form of a structured configuration data table (for example, a metric configuration table), and the configuration table defines the metric coefficient values corresponding to different bandwidth utilization deviation values, network delay deviation values, and memory usage deviation values. The above configuration table is combined with the network state representation parameters through conditional matching to implement dynamic adaptation of the network state of the remote connection of the target industrial equipment. Based on the configuration table, the system can automatically extract the metric coefficients matched with the current network state representation parameters for subsequent weighted coupling calculation. The value range of each metric coefficient is limited to 0 to 1, and the sum of the three is 1, so as to ensure that the multi-parameter fusion result has the properties of normalization and physical consistency, and meets the weight constraint conditions required for network state analysis.

[0085] In the specific implementation process, the network state representation factor of the remote connection is specifically represented as follows: ; Wherein, B is a network state representation factor of remote connection, a is a bandwidth utilization deviation value proportion coefficient of network state, E1 is a bandwidth utilization deviation value measurement coefficient, b is a network delay deviation value proportion coefficient of network state, E2 is a network delay deviation value measurement coefficient, c is a memory usage deviation value proportion coefficient of network state, and E3 is a memory usage deviation value measurement coefficient.

[0086] Extracting a network state representation factor threshold value in the database.

[0087] If the network state representation factor of remote connection is greater than or equal to the network state representation factor threshold value, the remote connection of the target industrial equipment is continued.

[0088] It should be noted that if the network state representation factor of remote connection is greater than or equal to the network state representation factor threshold value, it indicates that the network state of the device is good after the polling interval adjustment, indicating that the remote connection is stable and safe, in order to maintain the safe remote connection, no other adjustment is performed, and therefore the remote connection of the target industrial equipment is continued.

[0089] If the network state representation factor of remote connection is less than the network state representation factor threshold value, dynamic protocol timeout adjustment of the remote connection of the target industrial equipment is performed.

[0090] It should be noted that if the network state representation factor of remote connection is less than the network state representation factor threshold value, the network state of the device is abnormal after the polling interval adjustment, because the dynamic change of the polling interval leads to a protocol timeout problem, and the fixed timeout time of the protocol itself no longer meets the dynamic polling interval at this time, so the timeout time of the protocol also needs to be dynamically changed, and the dynamic protocol timeout adjustment of the remote connection of the target industrial equipment is performed.

[0091] In this embodiment, the dynamic protocol timeout adjustment of the remote connection of the target industrial equipment is performed, and the specific execution process is as follows: Obtaining a basic timeout multiple of the protocol.

[0092] It should be noted that the basic timeout multiple of the protocol is possessed by the protocol itself and stored in the system, and is obtained from the system program log when used.

[0093] The network state representation factor threshold value and the network state representation factor are subjected to difference processing to obtain a network state representation factor deviation value.

[0094] Based on the network state representation factor deviation value of remote connection, a timeout adjustment value of the protocol is extracted.

[0095] It should be noted that in the present embodiment, the system previously builds a corresponding relationship between the network state representation factor deviation value of the remote connection and the timeout adjustment value of the corresponding protocol in the database. The corresponding relationship is managed by a structured data table (such as a timeout parameter configuration table of the protocol). In the matching link, the system retrieves the corresponding timeout adjustment value of the protocol according to the network state representation factor deviation value of the remote connection, taking the deviation value as a query key value.

[0096] It should be noted that the greater the network state representation factor deviation value of the remote connection, the greater the degree of abnormality of the network state of the system at this time, and the unstable operation of the system. The dynamic change of the polling interval leads to the change of the timeout time of the system protocol, and in order to realize the stable operation of the remote connection, the timeout time of the protocol also needs to be dynamically changed, so the corresponding extracted timeout time adjustment value of the protocol is greater, which improves the accuracy of the remote connection.

[0097] The dynamic timeout multiplier of the protocol is obtained based on the timeout adjustment value of the protocol and the basic timeout multiplier of the protocol, and is recorded as the first timeout multiplier of the protocol.

[0098] It should be noted that the dynamic timeout multiplier is obtained by adding the timeout adjustment value of the protocol and the basic timeout multiplier, and is recorded as the first timeout multiplier of the protocol.

[0099] The dynamic protocol timeout adjustment of the target industrial equipment remote connection is based on the first timeout multiplier of the protocol and the current polling interval.

[0100] It should be noted that the dynamic protocol timeout adjustment of the target industrial equipment remote connection refers to multiplying the first timeout multiplier of the protocol and the current polling interval as the adjustment value of the dynamic protocol timeout adjustment of the target industrial equipment remote connection.

[0101] In the present embodiment, the dynamic protocol timeout adjustment effect information is analyzed, and thus the protocol timeout execution scheme of the target industrial equipment remote connection is obtained, and the specific analysis process is as follows: The limit range of the timeout time of the protocol is extracted from the database.

[0102] The first timeout time of the protocol is obtained based on the first timeout multiplier of the protocol and the current polling interval.

[0103] It should be noted that the first timeout time of the protocol is obtained by multiplying the first timeout multiplier of the protocol and the current polling interval.

[0104] If the first timeout time of the protocol is within the limit range of the timeout time of the protocol, the dynamic protocol timeout adjustment effect information is recorded as effective adjustment, and the protocol timeout execution scheme of the target industrial equipment remote connection is that the first timeout time of the protocol is recorded as the protocol execution timeout time.

[0105] It should be noted that if the first timeout time of the protocol is within the limit range of the protocol timeout time, it means that the timeout time of the protocol is changed through dynamic protocol timeout adjustment, the timeout time at this time meets the change of the system dynamic polling interval, and the timeout time is within the limit range of the protocol timeout time, which is beneficial to the continuous monitoring of the system remote connection, therefore the dynamic protocol timeout adjustment effect information is recorded as effective adjustment, and the first timeout time of the protocol is recorded as the protocol execution timeout time.

[0106] If the first timeout time of the protocol is not within the limit range of the protocol timeout time, the dynamic protocol timeout adjustment effect information is recorded as invalid adjustment, and it is concluded that the protocol timeout execution scheme of the target industrial equipment remote connection is to perform protocol timeout adjustment.

[0107] It should be noted that if the first timeout time of the protocol is not within the limit range of the protocol timeout time, the timeout time of the protocol is changed beyond the limit of the protocol timeout time at this time in order to meet the dynamic polling interval, therefore the dynamic protocol timeout adjustment effect information is recorded as invalid adjustment, although the timeout time is dynamically changed, the protocol compatibility is destroyed, and the protocol timing sensitivity collapses, in order to change the timeout time of the protocol, maintain the remote safe connection, and perform protocol timeout adjustment.

[0108] In this embodiment, protocol timeout adjustment is performed, and the specific adjustment process is as follows: Based on the first timeout time of the protocol and the limit range of the protocol timeout time, the protocol timeout time adjustment set is obtained, and then the protocol timeout time multiple adjustment set is obtained.

[0109] The protocol timeout time adjustment set includes the timeout time adjustment supplement value and the timeout time adjustment reduction value, and the protocol timeout time multiple adjustment set includes the timeout time multiple adjustment supplement value and the timeout time multiple adjustment reduction value.

[0110] It should be noted that the limit range of the protocol timeout time includes the maximum limit value of the protocol timeout time and the minimum limit value of the protocol timeout time. If the first timeout time of the protocol is greater than the maximum limit value of the protocol timeout time, the difference between the first timeout time of the protocol and the maximum limit value of the protocol timeout time is processed to obtain the timeout time adjustment reduction value of the protocol timeout time, and if the first timeout time of the protocol is less than the minimum limit value of the protocol timeout time, the difference between the minimum limit value of the protocol timeout time and the first timeout time of the protocol is processed to obtain the timeout time adjustment supplement value of the protocol timeout time. The timeout time multiple adjustment supplement value of the protocol timeout time is obtained by dividing the timeout time adjustment supplement value of the protocol timeout time by the current polling interval, and the timeout time multiple adjustment reduction value of the protocol timeout time is obtained by dividing the timeout time adjustment reduction value of the protocol timeout time by the current polling interval.

[0111] The current network state characteristic factor is reanalyzed and is denoted as a first network state characteristic factor.

[0112] The network state characteristic factor threshold is subtracted from the first network state characteristic factor to obtain a first network state characteristic factor deviation value.

[0113] Based on the first network state characteristic factor deviation value, a protocol overrun adjustment value is extracted.

[0114] It should be noted that in the embodiment, the system pre-constructs a mapping relationship between the first network state characteristic factor deviation value and the corresponding protocol overrun adjustment value in the database, and the mapping relationship is managed in the form of a structured configuration table (for example, a protocol overrun parameter configuration table). In the matching process, the system takes the first network state characteristic factor deviation value as a query key to locate the corresponding protocol overrun adjustment value in the configuration table. By searching for the overrun adjustment value matching the first network state characteristic factor deviation value, the protocol timeout time can be dynamically adjusted, so that the protocol timeout time meets the limit range, optimizes the protocol time synchronization damaged by overrun, guarantees the real-time performance of the protocol, and enhances the security of remote connection.

[0115] Based on the protocol overrun adjustment value and an overrun multiple adjustment set of the protocol timeout time, a protocol timeout multiple adjustment value is obtained.

[0116] It should be noted that when the overrun multiple adjustment set is an overrun multiple adjustment supplement value, the protocol overrun adjustment value is added to the overrun multiple adjustment supplement value of the protocol timeout time to obtain a protocol timeout multiple supplement adjustment value, and when the overrun multiple adjustment set is an overrun multiple adjustment reduction value, the protocol overrun adjustment value is added to the overrun multiple adjustment reduction value of the protocol timeout time to obtain a protocol timeout multiple reduction adjustment value.

[0117] Based on the protocol timeout multiple adjustment value and a basic timeout multiple of the protocol, a protocol timeout time is obtained, denoted as a second protocol timeout time.

[0118] It should be noted that the value obtained by adding the protocol timeout multiple adjustment value to the basic timeout multiple of the protocol is multiplied by the current polling interval to obtain the second protocol timeout time.

[0119] If the second protocol timeout time is not within the limit range of the protocol timeout time, it indicates that the protocol overrun adjustment is invalid at this time, and a warning information is sent.

[0120] It should be noted that if the second protocol timeout is not within the limit of the protocol timeout, it means that after the protocol over-limit adjustment, the timeout is still not within the limit. At this time, the adjustment is ineffective, and the protocol over-limit problem can no longer be changed by adjustment to make the protocol timeout conform to the dynamic polling interval. Therefore, no further adjustments will be made, and a warning message will be sent directly.

[0121] If the second protocol timeout is within the limit of the protocol timeout time, then the second protocol timeout time is recorded as the protocol execution timeout time.

[0122] It should be noted that if the second protocol timeout is within the limit of the protocol timeout, it means that the timeout of the protocol has been brought back to the limit through the over-limit adjustment, strictly following the baseline constraints of the protocol standard, so that security and real-time performance are balanced. Therefore, the second protocol timeout is recorded as the protocol execution timeout.

[0123] like Figure 2 The diagram shown illustrates a remote secure connection system architecture for the Industrial Internet of Things (IIoT). This system provides a remote secure connection system for the IIoT, including: The polling interval determination module is used to obtain the polling interval data of the target industrial equipment, analyze the polling mode characterization factors, and determine the polling interval execution scheme for remote connection of the target industrial equipment.

[0124] The polling interval adjustment module is used to simultaneously analyze the deviation value of the polling mode characterization factor when the polling interval execution scheme of the remote connection of the target industrial equipment is to perform dynamic polling interval adjustment, execute the dynamic polling interval adjustment of the remote connection of the target industrial equipment, and analyze the dynamic polling interval adjustment effect information after the adjustment is completed.

[0125] The protocol timeout analysis module is used to analyze the network status characterization factors of the remote connection after adjusting the dynamic polling interval, perform dynamic protocol timeout adjustment of the target industrial equipment remote connection, analyze the dynamic protocol timeout adjustment effect information, and thus derive the protocol over-limit execution scheme for the target industrial equipment remote connection.

[0126] The above-described embodiments can be implemented in whole or in part by software, hardware (e.g., circuitry), firmware, or any combination thereof. When implemented in software, the above-described embodiments can be implemented in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, the processes or functions according to the embodiments of the present application are entirely or partially generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions can be stored in a computer-readable storage medium or transferred from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions can be transferred from one website, computer, server, or data center to another website, computer, server, or data center through a wired (e.g., infrared, wireless, microwave, etc.) manner. The computer-readable storage medium can be any available medium accessible by a computer or a data storage device such as a server, data center, etc. containing one or more available medium collections. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium. The semiconductor medium can be a solid-state disk.

[0127] It should be understood that the term "and / or" herein merely describes an association relationship of associated objects, which means that there can be three relationships, for example, A and / or B can represent the following three cases: A exists alone, A and B exist together, and B exists alone, where A and B can be singular or plural. In addition, the character " / " herein generally represents an "or" relationship between the associated objects before and after it, but it can also represent an "and / or" relationship, which can be understood according to the context before and after it.

[0128] In the present application, "at least one" means one or more, and "multiple" means two or more. "At least one of the following" or the like means any combination of the items, including any combination of single item or multiple items. For example, at least one of a, b, or c can represent a, b, c, a-b, a-c, b-c, or a-b-c, where a, b, and c can be single or multiple.

[0129] It should be understood that in various embodiments of the present application, the size of the sequence number of the above-described processes does not mean the order of execution, and the execution order of the processes should be determined according to their functions and inherent logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0130] Those skilled in the art can clearly understand that the units and algorithm steps of each example described in combination with the embodiments disclosed herein can be realized by electronic hardware or a combination of computer software and electronic hardware. Whether the functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the present application.

[0131] Those skilled in the art can clearly understand that, for the convenience and brevity of the description, the specific working processes of the devices, apparatuses and units described above can refer to the corresponding processes in the foregoing method embodiments, which will not be repeated here.

[0132] In addition, each functional unit in each embodiment of the present application can be integrated into one processing unit, or each unit can exist physically, or two or more units can be integrated into one unit.

[0133] If the functions are realized in the form of software functional units and sold or used as independent products, they can be stored in a computer readable storage medium. Based on this understanding, the technical solutions of the present application or the parts of the present application that essentially contribute to the prior art or the parts of the technical solutions can be embodied in the form of software products. The computer software product is stored in a storage medium and includes a plurality of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method of each embodiment of the present application. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and various program code storage media.

[0134] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of changes or replacements within the technical scope disclosed by the present application, which should be covered within the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A remote secure connection method for the Industrial Internet of Things, characterized in that, Includes the following steps: S1. Obtain polling interval data of the target industrial equipment, analyze polling pattern characterization factors, and determine the polling interval execution scheme for remote connection of the target industrial equipment. S2, when the polling interval execution scheme for remote connection of the target industrial equipment is to perform dynamic polling interval adjustment, simultaneously analyze the deviation value of the polling mode characterization factor, execute the dynamic polling interval adjustment for remote connection of the target industrial equipment, and analyze the dynamic polling interval adjustment effect information after the adjustment is completed. S3, after adjusting the dynamic polling interval, analyzes the network state characterization factors of the remote connection, performs dynamic protocol timeout adjustment for the remote connection of the target industrial equipment, analyzes the dynamic protocol timeout adjustment effect information, and thus derives the protocol over-limit execution scheme for the remote connection of the target industrial equipment.

2. The remote secure connection method for the Industrial Internet of Things according to claim 1, characterized in that, The analysis process for the polling pattern characterization factors is as follows: Collect polling mode characterization parameters, including the resource consumption rate of the target industrial equipment, the proportion of invalid polls, and the deviation of response time; Analysis of polling pattern characterization factors based on polling pattern characterization parameters; The reference values ​​of resource consumption rate, invalid polling ratio, and response time deviation are compared with the resource consumption rate, invalid polling ratio, and response time deviation, respectively. The comparison results are then weighted and coupled with the corresponding metric coefficients to obtain the polling mode characterization factor. The polling pattern characterization factors are the resource consumption rate, invalid polling ratio, and response time deviation of the target industrial equipment, which together quantitatively characterize the polling pattern of the target industrial equipment.

3. The remote secure connection method for the Industrial Internet of Things according to claim 1, characterized in that, The polling interval execution scheme for determining the remote connection of the target industrial equipment is as follows: Extract the preset polling pattern characterization factor threshold from the database; If the polling mode characterization factor is less than or equal to the polling mode characterization factor threshold, then the polling interval execution scheme for remote connection of the target industrial equipment is recorded as continuing the remote connection of the target industrial equipment. If the polling mode characterization factor is greater than the polling mode characterization factor threshold, then the polling interval execution scheme for remote connection of the target industrial equipment is recorded as dynamic polling interval adjustment.

4. The remote secure connection method for the Industrial Internet of Things according to claim 3, characterized in that, The analysis polling mode characterizes the factor deviation value and performs dynamic polling interval adjustment for remote connection of the target industrial equipment. The specific analysis process is as follows: The difference between the polling mode characterization factor and the polling mode characterization factor threshold is used to obtain the polling mode characterization factor deviation value. Extracting polling interval offset based on polling pattern characterization factor deviation value; The number of network traffic requests per unit time is collected to determine the polling interval adjustment label, which includes increasing the polling interval and decreasing the polling interval. Extract the baseline polling interval for remote connections to the target industrial equipment; The polling interval adjustment value is obtained based on the polling interval adjustment label and the polling interval offset; Dynamic polling interval adjustment for remote connection of target industrial equipment is performed based on the baseline polling interval and the polling interval adjustment value.

5. The remote secure connection method for the Industrial Internet of Things according to claim 1, characterized in that, The analysis of the dynamic polling interval adjustment effect information is as follows: Obtain the time interval entropy value of the polling interval; Re-analyze the current polling pattern characterization factors and denote them as the first polling pattern characterization factors; Extract the preset time interval entropy threshold from the database; If the time interval entropy value of the polling interval is greater than the time interval entropy value threshold and the first polling mode characterization factor is less than the polling mode characterization factor threshold, then the dynamic polling interval adjustment effect information is recorded as effective adjustment, and the remote connection to the target industrial equipment continues; otherwise, the dynamic polling interval adjustment effect information is recorded as invalid adjustment, and an early warning message is sent.

6. The remote secure connection method for the Industrial Internet of Things according to claim 1, characterized in that, The analysis process for the network state characterization factors of remote connections is as follows: Collect network status characteristics parameters for remote connections, including network bandwidth utilization deviation, network latency deviation, and memory usage deviation. Analysis of network state characterization factors for remote connections based on network state characterization parameters of remote connections. Extract the preset reference bandwidth utilization deviation value, reference network latency deviation value, and reference memory utilization deviation value from the database; When the bandwidth utilization deviation is greater than or equal to zero, the bandwidth utilization deviation is compared with the reference bandwidth utilization deviation to obtain the bandwidth utilization deviation ratio coefficient. When the bandwidth utilization deviation is less than zero, the reference bandwidth utilization deviation is compared with the absolute value of the bandwidth utilization deviation to obtain the bandwidth utilization deviation ratio coefficient. When the network latency deviation value is greater than or equal to zero, the reference network latency deviation value is compared with the network latency deviation value to obtain the network latency deviation value ratio coefficient. When the network latency deviation value is less than zero, the absolute value of the network latency deviation value is compared with the reference network latency deviation value to obtain the network latency deviation value ratio coefficient. When the memory usage deviation is greater than or equal to zero, the memory usage deviation is compared with the reference memory usage deviation to obtain the memory usage deviation ratio coefficient. When the memory usage deviation is less than zero, the reference memory usage deviation is compared with the absolute value of the memory usage deviation to obtain the memory usage deviation ratio coefficient. The network status characterization factor of remote connection is obtained by weighting and coupling the bandwidth utilization deviation value ratio coefficient, the network latency deviation value ratio coefficient, and the memory utilization deviation value ratio coefficient with the corresponding metric coefficients. The network status characterization factor of the remote connection is a quantitative characterization of the network status by the bandwidth utilization deviation, network latency deviation, and memory utilization deviation. Extract the threshold values ​​of network state characterization factors from the database; If the network state characterization factor of the remote connection is greater than or equal to the network state characterization factor threshold, then the remote connection to the target industrial equipment continues. If the network state characterization factor of the remote connection is less than the network state characterization factor threshold, then the dynamic protocol timeout adjustment for the remote connection of the target industrial equipment will be executed.

7. The remote secure connection method for the Industrial Internet of Things according to claim 6, characterized in that, The dynamic protocol timeout adjustment for remote connection of the target industrial equipment is executed as follows: Get the base timeout multiple of the protocol; The difference between the network state characterization factor threshold and the network state characterization factor is used to obtain the network state characterization factor deviation value. The timeout adjustment value of the protocol is obtained by extracting the deviation value of the network state characterization factor based on the remote connection; The dynamic timeout multiple of the protocol is obtained based on the protocol's timeout adjustment value and the protocol's base timeout multiple, and is denoted as the protocol's first timeout multiple; Dynamic protocol timeout adjustment for remote connection of target industrial equipment is performed based on the first timeout multiple of the protocol and the current polling interval.

8. The remote secure connection method for the Industrial Internet of Things according to claim 1, characterized in that, The analysis of dynamic protocol timeout adjustment effect information leads to a protocol over-limit execution scheme for remote connection of the target industrial equipment. The specific analysis process is as follows: Extract the preset protocol timeout time limit range from the database; The first timeout period of the protocol is obtained based on the first timeout multiple of the protocol and the current polling interval; If the first timeout of the protocol is within the limit of the protocol timeout time, the dynamic protocol timeout adjustment effect information is recorded as effective adjustment, and the protocol over-limit execution scheme for remote connection of the target industrial equipment is to record the first timeout of the protocol as the protocol execution timeout time. If the first timeout period of the protocol is not within the timeout limit of the protocol, the dynamic protocol timeout adjustment effect information will be recorded as invalid adjustment, and the protocol over-limit execution scheme for remote connection of the target industrial equipment will be determined as protocol over-limit adjustment.

9. The remote secure connection method for the Industrial Internet of Things according to claim 8, characterized in that, The protocol over-limit adjustment process is as follows: Based on the first timeout time of the protocol and the limit range of the protocol timeout time, the set of over-limit adjustment of the protocol timeout time is obtained, and then the set of over-limit multiple adjustment of the protocol timeout time is derived. The set of over-limit adjustment for protocol timeout includes over-limit adjustment supplementary value and over-limit adjustment reduction value; the set of over-limit multiple adjustment for protocol timeout includes over-limit adjustment supplementary value and over-limit adjustment reduction value. The current network state characterization factor is re-analyzed and denoted as the first network state characterization factor; The difference between the threshold of the network state characterization factor and the first network state characterization factor is used to obtain the deviation value of the first network state characterization factor. The over-limit adjustment value of the protocol is obtained by extracting the deviation value of the first network state characterization factor; The timeout multiple adjustment value of the protocol is obtained by combining the over-limit adjustment value of the protocol with the over-limit multiple adjustment set of the protocol timeout time. The protocol timeout time is obtained by adjusting the protocol timeout multiple and the protocol base timeout multiple, and is denoted as the second protocol timeout time. If the second protocol timeout is not within the timeout limit, it means that the protocol timeout adjustment is ineffective and a warning message will be sent. If the second protocol timeout is within the limit of the protocol timeout time, then the second protocol timeout time is recorded as the protocol execution timeout time.

10. A remote secure connection system for the Industrial Internet of Things (IIoT), employing the remote secure connection method for the IIoT as described in any one of claims 1-9, characterized in that, The system includes: The polling interval determination module is used to obtain the polling interval data of the target industrial equipment, analyze the polling mode characterization factors, and determine the polling interval execution scheme for remote connection of the target industrial equipment. The polling interval adjustment module is used to simultaneously analyze the deviation value of the polling mode characterization factor when the polling interval execution scheme of the remote connection of the target industrial equipment is to perform dynamic polling interval adjustment, execute the dynamic polling interval adjustment of the remote connection of the target industrial equipment, and analyze the dynamic polling interval adjustment effect information after the adjustment is completed. The protocol timeout analysis module is used to analyze the network status characterization factors of the remote connection after adjusting the dynamic polling interval, perform dynamic protocol timeout adjustment of the target industrial equipment remote connection, analyze the dynamic protocol timeout adjustment effect information, and thus derive the protocol over-limit execution scheme for the target industrial equipment remote connection.

Images