A secure edge server system for industrial early warning

Abstract

The present invention discloses a secure edge server system for industrial early warning, which is composed of an interface layer, a data layer, an application layer, and a digital twin layer in the Baetyl / Link IoT Edge / ROS 2.0 architecture to build an edge collaborative service framework. By establishing a digital virtual model, the present invention not only realizes advanced fault warning reminders, handles hidden dangers in equipment in advance, and improves equipment utilization, but also has a built-in statistical system that records historical data and combines it with the pre-simulation operation data of the digital twin layer. According to data analysis, it derives the optimal control parameters for equipment operation, or judges various key production data during equipment operation based on data inflection points, thereby improving the equipment management level of the production line and the control level of the production process. At the same time, it conducts comprehensive and integrated situational awareness and monitoring and early warning from aspects such as personnel, equipment, environment, and network systems, and enhances the self-protection capability of the monitoring and early warning platform.

Description

Technical Field

[0001] The present invention relates to the field of industrial early warning technology, and in particular to a secure edge server system for industrial early warning. Background Art

[0002] With the deepening of industrialization, people have put forward higher requirements for the operating efficiency of industrial equipment. They hope to build a monitoring and early warning platform for industrial equipment through technologies such as the Internet of Things. The monitoring and early warning platform collects relevant data from industrial control systems, industrial Internet platforms, and safety equipment, analyzes and processes the data, and realizes functions such as safety monitoring, emergency response, and situational awareness to enhance the protection capabilities of industrial production.

[0003] In the prior art, for example, the "Intelligent Monitoring and Early Warning System for Industrial Automation" with Chinese patent number CN 104065165 A includes an industrial-specific distribution transformer, a current transformer for a metering device, an intelligent electrical parameter collector, industrial electric equipment, industrial instruments, sensors, switchgear, multiple signal conditioners, multiple 485 bus collectors, a GPRS wireless communication data transmitter, and an industrial control computer in a monitoring center. This system collects the operating status data of each terminal electrical appliance by configuring the intelligent electrical parameter collector, and uploads the data to the industrial control computer in the monitoring center via GPRS wirelessly for online display and control, thereby realizing online monitoring and early warning of industrial automation.

[0004] However, in the existing technology, production lines all use post-alarm methods to provide fault prompts. The alarm signal will only be generated after the production line has failed. The video monitoring or visualization system reminds the management and control personnel to inspect the production line equipment. There are generally deficiencies in the pre-fault prediction, and it is also impossible to achieve quality monitoring, process improvement and preventive maintenance, which greatly reduces the controllability of production line industrial equipment.

[0005] Therefore, we propose a secure edge server system for industrial early warning to solve the problems raised above. Summary of the Invention

[0006] The purpose of the present invention is to provide a secure edge server system for industrial early warning, so as to solve the problem that the production lines proposed in the above background technology all use a post-alarm method to realize fault prompts. The alarm signal will only be generated after the production line has failed. The video monitoring or visualization system reminds the management and control personnel to inspect the production line equipment. It is generally insufficient in the pre-fault prediction, and it is also impossible to achieve quality monitoring, process improvement and preventive maintenance, which greatly reduces the controllability of production line industrial equipment.

[0007] To achieve the above objectives, the present invention provides the following technical solutions: a secure edge server system for industrial early warning, which builds an edge collaborative service framework based on the Baetyl / Link IoT Edge / ROS 2.0 architecture, consisting of an interface layer, a data layer, an application layer, and a digital twin layer;

[0008] The interface layer is used to connect with industrial control equipment, acquisition probes, security equipment, and terminal equipment for secure data transmission, and transmit data through a secure transmission channel;

[0009] The data layer is used to manage the security data, including data collection, transmission, analysis and storage;

[0010] The application layer is used to realize security situation awareness, monitoring and early warning, and security incident handling based on the data analysis and processing results of the data layer and the digital twin layer, and provide visual display and security protection and handling suggestions;

[0011] The digital twin layer is used to perform real-time dynamic adjustment and iterative optimization based on the real-time data collected by the data layer, and to schedule and optimize the operation of industrial equipment through the interface layer, as well as the optimization selection and early warning of the application layer.

[0012] Preferably, the interface layer includes a communication security module, an access module, a device interface and an application system interface;

[0013] The communication security module uses SM / SM / SM cryptographic technology to achieve confidentiality of important data and sensitive information, and is equipped with identity authentication, access control, and security auditing;

[0014] The access module is used for border protection and intrusion protection;

[0015] The device interface parses, stores, applies and manages data from multiple protocol buses on the edge side of industrial equipment, and can provide low-latency interaction with the data layer through northbound interfaces including MQTT, OPCUA, HTTP and RestFul;

[0016] The application system interface includes a webservice interface and an http api interface, and the interface protocol uses one or more combinations of the OPC protocol, ODBC, WebService protocol, and Http Restful protocol.

[0017] Preferably, the boundary protection is used for industrial enterprises and industrial Internet platform enterprises. The intranet and extranet boundaries should be well isolated, and unauthorized devices that access should be alarmed and blocked; the intrusion protection is used to perform deep packet inspection on data accessing the network, and record relevant information of attack behavior and issue alarms.

[0018] Preferably, the data layer includes a data acquisition module, a data transmission module, a data analysis module and a data storage module;

[0019] The data acquisition module is used to receive real-time operation data information of industrial equipment from the application system interface;

[0020] The data transmission module is used to reserve a fixed IP address and port for data transmission via 4G / 5G wireless signals;

[0021] The data analysis module is used to perform data analysis on security threat intelligence and various security situation information from the time and space dimensions to achieve refined operation, maintenance and management of the digital twin layer;

[0022] The data storage module supports SQL Server database and MySQL database, is used to store and update historical data information of industrial equipment, and has a built-in report function, which is displayed in the form of an EXCEL table.

[0023] Preferably, the application layer includes a perception module, an early warning module, an emergency response module and a visualization module;

[0024] The perception module is used to analyze whether the collected data from the data layer is accessed normally through big data;

[0025] The early warning module is used to provide all-round and full-view threat identification and early warning for data sources through monitoring and early warning technology, and to issue security protection information through proactive behavior;

[0026] The emergency response module is used to send virtual instructions to the digital twin layer for simulation debugging based on the early warning information, screen the debugging solutions that can be used for emergency response and feed them back to the data layer for industrial equipment debugging;

[0027] The visualization module is used to dynamically display the operating status of the system / all connected devices in real time through image information.

[0028] Preferably, the digital twin layer includes a pre-adjustment module, a model driver, a twin module and a discrimination module;

[0029] The pre-adjustment module is used to receive the virtual instructions from the emergency handling module and import them into the model drive after interpreting them;

[0030] The model driver is used to establish a logical model of the business operation of the twin module through the dynamic debugging information uploaded by the pre-adjustment module or the data analysis module;

[0031] The twin module includes the basic twins of all connected industrial equipment, the basic twins of information access, the twins of the industrial equipment operating environment, the digital twin models of production planning, and the digital twin models of debugging and optimization.

[0032] Preferably, the twin module uses the unity engine to perform 3D modeling on the basic twins of all connected industrial equipment, the basic twins of information access, the twins of the industrial equipment operating environment, and the digital twin models of production planning, analyzes the action data of the connected industrial equipment, selects key action data and compares it with the action of the equipment on the physical production line to realize the interaction of data twins.

[0033] Preferably, the data analysis module is used to record historical data and combine it with the pre-simulation operation data of the digital twin layer to derive the optimal control parameters for equipment operation based on data analysis, or to judge various key production data during equipment operation based on data inflection points.

[0034] Compared with the prior art, the present invention has the following beneficial effects:

[0035] The present invention realizes the data interaction and fusion control mode of the physical production line, virtual production line and production line management system by establishing a digital virtual model. It not only realizes advanced fault warning reminders, but also allows enterprise equipment and operation and maintenance personnel to carry out targeted maintenance and debugging of equipment, deal with hidden dangers of equipment in advance, and improve equipment utilization. In addition, the built-in statistical system records historical data and combines it with the pre-simulation operation data of the digital twin layer. According to data analysis, it derives the optimal control parameters of equipment operation, or judges the various key production data of equipment operation according to the data inflection point, thereby improving the equipment management level of the production line and the control level of the production process. At the same time, it conducts comprehensive and integrated situational awareness and monitoring and early warning from the aspects of personnel, equipment, environment and network system, and improves the self-protection capability of the monitoring and early warning platform. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] Figure 1 This is a block diagram of a secure edge server system for industrial early warning according to the present invention. DETAILED DESCRIPTION

[0037] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the implementation regulations described are only part of the embodiments of the present invention, not all of the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.

[0038] See also Figure 1This invention provides a technical solution: a secure edge server system for industrial early warning. This system uses edge model deployment, deploying locally trained fault warning models on the edge cloud. This system then accesses production data in real time to implement fault warnings. The system builds an edge collaborative service framework based on the Baetyl / Link IoT Edge / ROS 2.0 architecture, comprising an interface layer 1, a data layer 2, an application layer 3, and a digital twin layer 4.

[0039] Among them, interface layer 1 is used to connect with industrial control equipment, collection probes, security equipment, and terminal equipment for secure data, and transmit data through secure transmission channels; data layer 2 is used to manage security data, including data collection, transmission, analysis, and storage; application layer 3 is used to realize security situation awareness, monitoring and early warning, and security incident handling based on the data analysis and processing results of data layer 2 and digital twin layer 4, and provide visual display and security protection and disposal recommendations; digital twin layer 4 is used to perform real-time dynamic adjustment and iterative optimization based on the real-time data collected by data layer 2, and to schedule and optimize the operation of industrial equipment through interface layer 1, as well as optimization selection and early warning of application layer 3.

[0040] In addition, the interface layer 1 includes a communication security module 10, an access module 11, a device interface 12, and an application system interface 13. Specifically, the communication security module 10 uses SM2 / SM3 / SM4 cryptographic technology to ensure the confidentiality of important data and sensitive information, and is equipped with identity authentication, access control, and security auditing. The access module 11 is used for boundary protection and intrusion protection. The device interface 12 parses, stores, applies, and manages data from multiple protocol buses on the edge side of industrial equipment, and can provide low-latency interaction with the data layer 2 via northbound interfaces including MQTT, OPC UA, HTTP, and RestFul. The application system interface 13 includes a webservice interface and an http api interface, and the interface protocol uses one or more combinations of the OPC protocol, ODBC, WebService protocol, and HttpRestful protocol.

[0041] The webService interface uses the SOAP protocol for transmission over HTTP. Both the request and return messages are in XML format. During testing, we use tools to call and test. The HTTP API interface uses the HTTP protocol and distinguishes the calling method by path. Request messages are in key-value format, and return messages are generally JSON strings. There are methods such as GET and POST, which are also the two most commonly used request methods.

[0042] Among them, boundary protection is used for industrial enterprises and industrial Internet platforms. The boundaries between the intranet and the extranet should be isolated, and unauthorized devices connected should be warned and blocked; intrusion protection is used to perform deep packet inspection on data accessing the network, and record relevant information of the attack behavior and issue an alarm.

[0043] In addition, the data layer 2 includes a data acquisition module 20, a data transmission module 21, a data analysis module 22 and a data storage module 23. The details are as follows:

[0044] The data acquisition module 20 is used to receive real-time operation data of industrial equipment from the application system interface 13. The data transmission module 21 is used to reserve a fixed IP address and port for data transmission via 4G / 5G wireless signals.

[0045] The data analysis module 22 is used to perform data analysis on security threat intelligence and various security situation information from the time and space dimensions to achieve refined operation, maintenance and management of the digital twin layer 4. The data analysis module 22 can also be used to record historical data and combine it with the pre-simulation operation data of the digital twin layer 4 to obtain the optimal control parameters for equipment operation based on data analysis, or to judge various key production data during equipment operation based on data inflection points, such as calculating the extract yield, extraction end point judgment, concentration end point judgment, finding the optimal control parameters, golden batches, and intelligent decision-making.

[0046] The data storage module 23 supports SQL Server and MySQL databases for storing and updating historical data of industrial equipment. It also has a built-in reporting function. The report function displays in the form of an Excel table. Different manufacturers have different requirements for the content and format of the report. It is necessary for this system to support the adjustment of the table format like Excel: such as row height, column width, cell merging and splitting, hiding and showing blank cells with a slash, border, line width, font size and format, date display format, and the number of decimal places.

[0047] Part of the report data is entered directly or in advance and imported when used. Part of it is read from the underlying control system. The data read is generally real-time data and some flags. The system needs to calculate and process the data. The data processing mechanism must be flexible. Different manufacturers have different requirements for data processing, especially when pauses or failures occur. Reports must also have permission management and support electronic signatures. At the same time, the report display method is manual historical data query, data report export and printing functions; all measurement point names must be provided by the owner, and all process logic must be further confirmed by the owner before it is given. Users can query all of the above reports through the browser. In addition, data cannot be modified according to set requirements.

[0048] Application layer 3 includes a perception module 30, an early warning module 31, an emergency response module 32, and a visualization module 33. Specifically, the perception module 30 uses big data analysis to determine whether the collected data from data layer 2 is accessing normally. The early warning module uses monitoring and early warning technology to provide comprehensive, full-view threat identification and early warning for the data source, and issues security protection information through proactive actions. The emergency response module 32 sends virtual instructions to the digital twin layer 4 for simulation debugging based on the early warning information, selects debugging solutions that can be handled urgently, and feeds them back to the data layer 2 for industrial equipment debugging. The visualization module 33 uses image information to dynamically display the operating status of the system / all connected devices in real time.

[0049] Among them, the digital twin layer 4 includes a pre-adjustment module 40, a model driver 41, a twin module 42 and a discrimination module 43. The pre-adjustment module 40 is used to receive virtual instructions from the emergency response module 32 and import them into the model driver 41 after interpretation; the model driver 41 is used to establish a logical model of the business operation of the twin module 42 through the dynamic debugging information uploaded by the pre-adjustment module 40 or the data analysis module 22; the twin module 42 includes the basic twins of all connected industrial equipment, the basic twins of information access, the twins of the industrial equipment operating environment, the digital twin models of production planning and the digital twin models of debugging optimization, and the twin module 42 uses the unity engine to perform 3D modeling on the basic twins of all connected industrial equipment, the basic twins of information access, the twins of the industrial equipment operating environment, and the digital twin models of production planning, analyze the action data of the connected industrial equipment, select key action data and compare it with the action of the equipment on the physical production line to realize the interaction of data twins.

[0050] The present invention establishes a digital virtual model to realize the data interaction and fusion control mode of the physical production line, virtual production line, and production line management system. It not only realizes advanced fault warning reminders, but also allows enterprise equipment and operation and maintenance personnel to carry out targeted maintenance and debugging of equipment, deal with hidden dangers of equipment in advance, and improve equipment utilization. In addition, the built-in statistical system records historical data and combines it with the pre-simulation operation data of the digital twin layer 4. According to data analysis, it derives the optimal control parameters of equipment operation, or judges the various key production data of equipment operation according to the data inflection point, thereby improving the equipment management level of the production line and the control level of the production process. At the same time, it conducts comprehensive and integrated situational awareness and monitoring and early warning from the aspects of personnel, equipment, environment and network system, and improves the self-protection capability of the monitoring and early warning platform.

[0051] Although the present invention has been described in detail with reference to the aforementioned embodiments, it is still possible for those skilled in the art to modify the technical solutions described in the aforementioned embodiments, or to make equivalent substitutions for some of the technical features therein. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A secure edge server system for industrial early warning, characterized in that: An edge collaborative service framework is constructed based on the Baetyl / Link IoT Edge / ROS 2.0 architecture, consisting of the interface layer (1), data layer (2), application layer (3), and digital twin layer (4); The interface layer (1) includes a communication security module (10), an access module (11), a device interface (12) and an application system interface (13), and is used for secure data connection with industrial control equipment, acquisition probes, security equipment and terminal equipment, and for data transmission through a secure transmission channel; The data layer (2) includes a data acquisition module (20), a data transmission module (21), a data analysis module (22) and a data storage module (23), and is used for managing the security data, including data acquisition, transmission, analysis and storage; The data analysis module (22) is used to record historical data and combine it with the pre-simulation operation data of the digital twin layer (4), and obtain the optimal control parameters of the equipment operation according to the data analysis, or to judge various key production data of the equipment operation according to the data inflection point; The application layer (3) includes a perception module (30), an early warning module (31), an emergency response module (32) and a visualization module (33), which are used to realize security situation perception, monitoring and early warning, security incident handling, and provide visual display and security protection handling suggestions based on the data analysis and processing results of the data layer (2) and the digital twin layer (4); The perception module (30) is used to analyze whether the collected data from the data layer (2) is accessed normally through big data; the early warning module (31) is used to provide threat identification and early warning for the data source through monitoring and early warning technology, and to issue security protection information through active behavior; the emergency response module (32) is used to send virtual instructions to the digital twin layer (4) for simulation debugging based on the early warning information, and then screen the debugging solutions that can be handled in an emergency and feed them back to the data layer (2) for industrial equipment debugging; the visualization module (33) is used to dynamically display the operating status of the system / all access devices in real time through image information; The digital twin layer (4) includes a pre-adjustment module (40), a model drive (41), a twin module (42) and a discrimination module (43), which are used to perform real-time dynamic adjustment and iterative optimization based on the real-time data collected by the data layer (2), and to schedule and optimize the operation of industrial equipment through the interface layer (1), as well as the optimization selection and early warning of the application layer (3); the twin module (42) uses the unity engine to perform 3D modeling on the basic twins of all industrial equipment connected, the basic twins of information access, the twins of the industrial equipment operating environment, and the digital twin models of production planning, analyze the action data of the industrial equipment connected, select key action data and compare them with the actions of the equipment on the physical production line, and realize the interaction of data twins.

2. The secure edge server system for industrial early warning according to claim 1, characterized in that: The communication security module (10) achieves confidentiality of important data and sensitive information by using SM2 / SM3 / SM4 cryptographic technology, and is provided with identity authentication, access control, and security audit; The access module (11) is used for border protection and intrusion protection; The device interface (12) parses, stores, applies and manages data from multiple protocol buses on the edge side of industrial equipment, and provides northbound interfaces including MQTT, OPCUA, HTTP and RestFul for interacting with the data layer (2); The application system interface (13) includes a webservice interface and an http api interface, and the interface protocol uses one or more combinations of the OPC protocol, ODBC, WebService protocol, and Http Restful protocol.

3. The secure edge server system for industrial early warning according to claim 2, characterized in that: The boundary protection is used for industrial enterprises and industrial Internet platforms. The intranet and extranet boundaries of enterprises should be isolated, and unauthorized devices that access the network should be warned and blocked; the intrusion protection is used to perform deep packet inspection on data accessing the network, and record relevant information about the attack behavior and issue an alarm.

4. The secure edge server system for industrial early warning according to claim 1, characterized in that: The data acquisition module (20) is used to receive real-time operation data information of industrial equipment from the application system interface (13); The data transmission module (21) is used to reserve a fixed IP address and port for data transmission via 4G / 5G wireless signals; The data analysis module (22) is used to perform data analysis on security threat intelligence and various security situation information from the time and space dimensions, so as to realize the operation, maintenance and management of the digital twin layer (4); The data storage module (23) supports SQL Server database and MySQL database, is used to store and update historical data information of industrial equipment, and has a built-in report function, and the report function is displayed in the form of an EXCEL table.

5. The secure edge server system for industrial early warning according to claim 1, characterized in that: The pre-adjustment module (40) is used to receive the virtual instruction from the emergency handling module (32), interpret the virtual instruction, and then import it into the model driver (41); The model driver (41) is used to establish a logical model of the business operation of the twin module (42) through the dynamic debugging information uploaded by the pre-adjustment module (40) or the data analysis module (22).

Images