Industrial control system authentication method, device and computer equipment

Abstract

This application provides an industrial control system authentication method, apparatus, and computer device, belonging to the field of computer technology. The method includes: receiving an access request sent by a terminal device; sending device authentication information to the terminal device, the device authentication information including verification information and a public key; receiving a digital certificate of a target user sent by the terminal device; authenticating the digital certificate and obtaining a certificate authentication result; sending the certificate authentication result to the terminal device, the digital certificate including issuance information and the target user's user identity information, the user identity information being encrypted based on a public key; determining the target user's role and permission level based on the user identity information; sending the target user's role and permission level to the terminal device; and determining the target user's target permission level based on the role and permission level and the target user's configuration permission level recorded in the hardware control module. This application can improve the security of industrial control systems.

Description

Technical Field

[0001] This application relates to the field of computer technology, and more specifically, to an industrial control system authentication method, apparatus, and computer equipment. Background Technology

[0002] With the development of science and technology, many factories are now using industrial control systems with processing capabilities in their industrial production. Generally, after successful user authentication, industrial control systems can grant users corresponding permissions, allowing them to view and / or operate the industrial control system.

[0003] In related technologies, most industrial control systems generally use user password authentication technology. When a user needs to view and / or operate the industrial control system, they need to enter the corresponding user password, such as a user account and password. If the user password is correct, they can obtain the right to view and / or operate the industrial control system.

[0004] However, this approach is vulnerable to user password leaks, dictionary attacks, and brute-force attacks. In such cases, other personnel or users could directly gain access to the industrial control system to steal data or even perform destructive operations. Therefore, this approach suffers from low security for the industrial control system. Summary of the Invention

[0005] The purpose of this application is to provide an industrial control system authentication method, apparatus, and computer equipment that can improve the security of industrial control systems.

[0006] The embodiments of this application are implemented as follows:

[0007] A first aspect of this application provides an industrial control system authentication method, applied to an industrial control system, the method comprising:

[0008] The system receives an access request from a terminal device and sends device authentication information to the terminal device, the device authentication information including verification information and a public key.

[0009] The system receives a digital certificate of the target user sent by the terminal device, authenticates the digital certificate and obtains a certificate authentication result, and sends the certificate authentication result to the terminal device. The digital certificate includes issuance information and user identity information of the target user. The user identity information is encrypted based on the public key. The certificate authentication result is used to indicate whether the digital certificate has passed verification.

[0010] The target user's role and permission level is determined based on the user's identity information, and the target user's role and permission level is sent to the terminal device.

[0011] The target permission level of the target user is determined based on the role permission level and the configuration permission level recorded in the hardware control module.

[0012] Optionally, before determining the target permission level of the target user based on the role permission level and the configuration permission level recorded in the hardware control module, the method further includes:

[0013] Acquire and parse the status value output by the hardware control module, and determine the system configuration corresponding to the status value;

[0014] Based on the system configuration, the highest configuration permission level that the hardware control module allows the industrial control system to grant to the terminal device is determined, and the highest configuration permission level is used as the configuration permission level.

[0015] Optionally, the target permission level of the target user is determined based on the role permission level and the configuration permission level recorded in the hardware control module, including:

[0016] Receive a login request sent by the terminal device, wherein the login request includes the target user's password and the role permission level;

[0017] If the password verification of the target user is successful, the target permission level of the target user is determined according to the role permission level and the configuration permission level recorded in the hardware control module.

[0018] Optionally, determining the target permission level of the target user based on the role permission level and the configuration permission level recorded in the hardware control module includes:

[0019] Based on the role permission level, determine the highest role permission level corresponding to the target user;

[0020] Compare the highest role permission level with the configuration permission level;

[0021] The lowest of the highest role permission level and the configuration permission level is taken as the target permission level.

[0022] Optionally, after receiving the login request sent by the terminal device, wherein the login request includes the target user's password and the role permission level, the method further includes:

[0023] If the password verification of the target user fails, a verification failure response is sent to the terminal device.

[0024] Optionally, authenticating the digital certificate and obtaining the certificate authentication result includes:

[0025] The root certificate is invoked to authenticate the issuance information in the digital certificate;

[0026] If the issuance information is successfully authenticated, a first certificate authentication result is generated, which indicates that the issuance information has been successfully authenticated.

[0027] If the authentication of the issued information fails, the terminal device is denied access, and a second certificate authentication result is generated, which indicates that the authentication of the issued information has failed.

[0028] Optionally, determining the role permission level of the target user based on the user identity information includes:

[0029] The user's identity information is decrypted using the private key corresponding to the public key;

[0030] The decrypted user identity information is parsed to obtain the default user role permissions indicated by the user identity information, and the default user role permissions are used as the user role permissions.

[0031] A second aspect of this application provides an industrial control system authentication device, the device comprising:

[0032] The receiving and sending module is used to receive access requests sent by terminal devices and send device authentication information to the terminal devices, wherein the device authentication information includes verification information and a public key;

[0033] The authentication receiving module is used to receive the digital certificate of the target user sent by the terminal device, authenticate the digital certificate and obtain the certificate authentication result, and send the certificate authentication result to the terminal device. The digital certificate includes issuance information and the user identity information of the target user. The user identity information is encrypted based on the public key. The certificate authentication result is used to indicate whether the digital certificate has passed the verification.

[0034] The sending module is used to determine the role and permission level of the target user based on the user identity information, and send the role and permission level of the target user to the terminal device.

[0035] The determination module is used to determine the target permission level of the target user based on the role permission level and the configuration permission level recorded in the hardware control module.

[0036] A third aspect of this application provides a computer device, the computer device including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, implements the industrial control system authentication method described in the first aspect.

[0037] A fourth aspect of this application provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the industrial control system authentication method described in the first aspect.

[0038] The beneficial effects of the embodiments of this application include:

[0039] This application provides an industrial control system authentication method that receives an access request from a terminal device, sends device authentication information to the terminal device, receives a digital certificate of a target user from the terminal device, authenticates the digital certificate and obtains a certificate authentication result, sends the certificate authentication result to the terminal device, determines the role and permission level of the target user based on the user's identity information, sends the role and permission level of the target user to the terminal device, and determines the target permission level of the target user based on the role and permission level and the configuration permission level recorded in the hardware control module.

[0040] Specifically, the system receives access requests from terminal devices and sends device authentication information to those devices. This ensures that the terminal device only interacts with the industrial control system or electronic device if the authentication information has not been tampered with or forged. Furthermore, the terminal device can use the public key to encrypt data before sending it to the industrial control system or electronic device, thus enhancing the confidentiality of interactions between the terminal device and the industrial control system.

[0041] The system receives the target user's digital certificate from the terminal device, authenticates the digital certificate, obtains the authentication result, and sends the authentication result back to the terminal device. Upon receiving the target user's digital certificate from the terminal device, it authenticates the digital certificate and obtains an authentication result indicating whether the digital certificate has passed verification. This enables two-way authentication between the terminal device and the industrial control system, further enhancing the security of their interaction.

[0042] The system determines the target user's role and permission level based on the user's identity information and sends this level to the terminal device. It can accurately determine the role and permission level that can be assigned or configured to the target user based on the default user role and permissions in the digital certificate obtained by the target user, and promptly inform the target user of the acquired role and permission level so that the user can perform corresponding processing or operations according to this level.

[0043] Based on the role's permission level and the configuration permission level recorded in the hardware control module, the target permission level for the target user is determined. Since the hardware control module includes a hardware controller, which requires adjustment or triggering by relevant technical personnel or users, even if other users or personnel obtain the role's permission level through other means, they cannot trigger or adjust the hardware controller, and therefore cannot obtain a higher configuration permission level. This achieves a dual guarantee, further enhancing the security of the industrial control system.

[0044] This can improve the security of industrial control systems. Attached Figure Description

[0045] To more clearly illustrate the technical solutions of the embodiments of this application, the accompanying drawings used in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of this application and should not be regarded as a limitation of the scope. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0046] Figure 1 A flowchart illustrating the first industrial control system authentication method provided in this application embodiment;

[0047] Figure 2 A flowchart illustrating the second industrial control system authentication method provided in this application embodiment;

[0048] Figure 3 A flowchart illustrating the third industrial control system authentication method provided in this application embodiment;

[0049] Figure 4 A flowchart illustrating the fourth industrial control system authentication method provided in this application embodiment;

[0050] Figure 5 A flowchart illustrating the fifth industrial control system authentication method provided in this application embodiment;

[0051] Figure 6 A flowchart of the sixth industrial control system authentication method provided in the embodiments of this application;

[0052] Figure 7 An interactive flowchart illustrating an industrial control system authentication method provided in this application embodiment;

[0053] Figure 8 This is a schematic diagram of the structure of an industrial control system authentication device provided in an embodiment of this application;

[0054] Figure 9 This is a schematic diagram of the structure of a computer device provided in an embodiment of this application. Detailed Implementation

[0055] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. The components of the embodiments of this application described and shown in the accompanying drawings can generally be arranged and designed in various different configurations.

[0056] Therefore, the following detailed description of the embodiments of this application provided in the accompanying drawings is not intended to limit the scope of the claimed application, but merely to illustrate selected embodiments of the application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without inventive effort are within the scope of protection of this application.

[0057] It should be noted that similar labels and letters in the following figures indicate similar items. Therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures.

[0058] In related technologies, most industrial control systems generally employ user password authentication technology. When a user needs to view and / or operate the industrial control system, they must enter a corresponding user password, such as a username and password. If the password is correct, the user can obtain permission to view and / or operate the industrial control system. However, this approach is vulnerable to user password leaks, dictionary attacks, or brute-force attacks. Unauthorized personnel or users can then directly gain access to the industrial control system to steal data or even perform destructive operations. Therefore, this approach suffers from low security in industrial control systems.

[0059] Furthermore, the solutions in the relevant technologies do not clearly define the access permissions of the industrial control system. Once other personnel obtain access to the industrial control system, they can arbitrarily modify any system configuration of the industrial control system.

[0060] To address this, this application provides an industrial control system authentication method. This method involves receiving an access request from a terminal device, sending device authentication information to the terminal device, receiving a digital certificate of the target user from the terminal device, authenticating the digital certificate and obtaining the certificate authentication result, sending the certificate authentication result to the terminal device, determining the target user's role and permission level based on the user's identity information, sending the target user's role and permission level to the terminal device, and determining the target user's target permission level based on the role and permission level and the configuration permission level recorded in the hardware control module. This method can improve the security of the industrial control system.

[0061] This application uses an industrial control system certification method applied in industrial control systems as an example for illustration. However, it does not imply that this application's embodiments can only be applied to industrial control system certification.

[0062] Optionally, the industrial control system may include electronic devices with communication, processing, and storage functions. These electronic devices may be processors, terminals, servers, or other similar devices. This application embodiment does not limit the scope of the electronic devices.

[0063] The industrial control system authentication method provided in the embodiments of this application will be explained in detail below.

[0064] Figure 1 A flowchart illustrating an industrial control system authentication method provided in this application is shown. This method can be applied to electronic devices within the aforementioned industrial control system. See also... Figure 1 This application provides an industrial control system authentication method, including:

[0065] Step 1001: Receive the access request sent by the terminal device and send device authentication information to the terminal device.

[0066] Optionally, the terminal device can refer to any device that can interact with the electronic device, such as a computer, smartphone, tablet computer, or any other device with processing and communication functions.

[0067] The access request can refer to a request generated based on access information entered by a user or relevant technical personnel on the terminal device via an input device, for requesting to log in or access the industrial control system, interact with the industrial control system, view information of the industrial control system, and / or operate the industrial control system. This application does not limit this.

[0068] The terminal device can generate and send the access request immediately after the user inputs the access information, or it can wait for a period of time after the user inputs the access information or receive a re-input sending instruction from the user before generating and sending the access request. This application embodiment does not limit this.

[0069] Optionally, the device authentication information may be a digital certificate for the electronic device or the industrial control system. This device authentication information includes verification information and a public key.

[0070] For example, the verification information could be CA signature information, which could specifically include the electronic signature of the CA authority. After receiving the verification information, the terminal device can use it to verify whether the device authentication information has been forged or tampered with. Therefore, the terminal device can only interact with the electronic device after confirming that the device authentication information has not been forged or tampered with, or that the verification information has been successfully verified. This improves the confidentiality of the interaction between the terminal device and the industrial control system.

[0071] The public key can be an algorithm used to encrypt data and verify electronic signatures. When the terminal device receives the public key, it can use the public key to encrypt the data before sending it to the industrial control system or the electronic device. This can improve the confidentiality of the interaction between the terminal device and the industrial control system.

[0072] In addition, the public key can be the public key corresponding to the industrial control system. That is to say, the industrial control system also stores or deploys the secret key corresponding to the public key. In this way, it can be ensured that the industrial control system or the electronic device can correctly decrypt the data encrypted by the terminal device using the public key.

[0073] It is worth noting that this allows the industrial control system or electronic device to send authentication information to the terminal device, ensuring that the terminal device only interacts with the industrial control system or electronic device if the authentication information has not been tampered with or forged. Furthermore, by sending the public key to the terminal device, the terminal device can use the public key to encrypt data before sending it to the industrial control system or electronic device, thus improving the confidentiality of interactions between the terminal device and the industrial control system.

[0074] Step 1002: Receive the target user's digital certificate sent by the terminal device, authenticate the digital certificate and obtain the certificate authentication result, and send the certificate authentication result back to the terminal device.

[0075] Optionally, the digital certificate includes issuance information and the target user's identity information. The digital certificate can be stored in software or hardware, and can be issued to the target user by a corresponding certificate authority using any issuance method. For example, the digital certificate can be a UK certificate; this embodiment of the application does not limit this.

[0076] Optionally, the issuance information includes information such as the issuing authority of the digital certificate, the issuance algorithm, the certificate issuer's signature on the digital certificate, and the validity period of the digital certificate.

[0077] The target user can refer to the user currently operating the terminal device, the user who needs to obtain permissions for the industrial control system, or the user corresponding to the digital certificate. This application embodiment does not limit this.

[0078] The user identity information may include the default user role permissions written into the digital certificate by relevant technical personnel when it was issued. It may also include the user's identity information, such as their name, age, and department.

[0079] Since the public key has been sent to the terminal device in step 1001, the terminal device can use the public key to encrypt the digital certificate or the user identity information within it before sending the digital certificate to the industrial control system or the electronic device. In other words, the user identity information is encrypted using the public key. This improves the confidentiality of the interaction between the terminal device and the industrial control system.

[0080] The certificate authentication result is used to indicate whether the digital certificate has passed verification.

[0081] It is worth noting that if the digital certificate is verified, it indicates that the target user has gained access to the industrial control system, and further steps should be performed. Otherwise, it indicates that the target user cannot gain access to the industrial control system, and the authentication process can be terminated without further steps.

[0082] It is worth noting that after receiving the verification information, the terminal device can determine whether it can interact with the industrial control system by verifying whether the verification information has been forged or tampered with. Therefore, when the terminal device sends the digital certificate, it can be confirmed that the verification information has not been forged or tampered with, and the terminal device can interact with the industrial control system. Then, upon receiving the target user's digital certificate from the terminal device, the digital certificate is authenticated, and a certificate authentication result indicating whether the digital certificate has passed verification is obtained. This enables two-way authentication between the terminal device and the industrial control system, further improving the security of their interaction.

[0083] Step 1003: Determine the target user's role and permission level based on the user's identity information, and send the target user's role and permission level to the terminal device.

[0084] Optionally, the role permission level may refer to the default user role permissions written in the digital certificate. This role permission level can be used to indicate or restrict the user's ability to view information about the industrial control system or the operations they can perform on the industrial control system.

[0085] The role permission level can be a software-level permission level, meaning that the role permission level is a permission level obtained by the industrial control system after authenticating the digital certificate.

[0086] Generally, the role permission level can be set by relevant technical personnel according to actual needs, and different role permission levels can be set for different users.

[0087] For example, the role's permission level can be divided into levels 1-3, where level 1 represents the highest permission level. A user with level 1 permission can view more information about the industrial control system or perform more operations on it. Level 3 represents the lowest permission level, where a user with level 3 permission can view less information about the industrial control system or perform fewer operations on it.

[0088] It is worth noting that when performing step 1003, only the user permission level that can be granted or configured to the target user is determined. At this time, the user permission level will not be directly granted or configured to the target user, nor will the target user be directly allowed to log in or access the industrial control system to view the information of the industrial control system or operate the industrial control system.

[0089] It's worth noting that by determining the target user's role and permission level based on their identity information, the system can accurately determine the role and permission levels that can be assigned or configured to the target user based on the default user role and permissions in the digital certificate they have obtained. Then, by sending the target user's role and permission level to the terminal device, the system can promptly inform the target user of the acquired role and permission level, allowing them to perform corresponding processing or operations based on that level.

[0090] Step 1004: Determine the target permission level of the target user based on the role's permission level and the configuration permission level recorded in the hardware control module.

[0091] Optionally, the target permission level may refer to the permission level ultimately granted or configured to the target user, allowing them to view information about the industrial control system or operate the industrial control system. Furthermore, since a terminal device may be operated by multiple users, the target permission level corresponds to the target user; that is, the target permission level corresponds to the role identity information in the digital certificate.

[0092] Optionally, the hardware control module may include a hardware controller, which may be a DIP switch, knob, or other hardware that can adjust the output signal.

[0093] For example, the configuration permission level can also be divided into 1-3 levels, where level 1 represents the highest configuration permission level. Users with level 1 configuration permission can view more information about the industrial control system or perform more operations on it. Level 3 represents the lowest configuration permission level, where users with level 3 configuration permission can view less information about the industrial control system or perform fewer operations on it.

[0094] Generally, the number of levels for the configuration permission level and the role permission level can be the same, which makes it easier to compare the levels of the configuration permission level and the role permission level.

[0095] It is worth noting that since this hardware control module includes a hardware controller, which needs to be adjusted or triggered by relevant technical personnel or users, even if other users or personnel obtain the required role and permission levels through other means, they will not be able to trigger or adjust the hardware controller, and therefore will not be able to obtain higher configuration permission levels. This achieves a dual guarantee, further enhancing the security of the industrial control system.

[0096] It's worth noting that since both the role permission level and the configuration permission level can be used to instruct or restrict users from viewing information about the industrial control system or performing operations on it, when determining the target permission level for a target user based on these two levels, the lower of the two can be chosen as the target permission level. This ensures that even if other personnel acquire the role permission level, they cannot obtain a higher target permission level to view information about or operate the industrial control system. This significantly improves the security of the industrial control system.

[0097] Generally, since the role permission level has been sent to the terminal device during step 1003, the user can adjust the configuration permission level recorded in the hardware control module according to the role permission level so that the configuration permission level recorded in the hardware control module matches the role permission level. In this way, the user can correctly obtain the corresponding target permission level.

[0098] In this embodiment of the application, by receiving an access request sent by a terminal device, sending device authentication information to the terminal device, receiving the target user's digital certificate sent by the terminal device, authenticating the digital certificate and obtaining the certificate authentication result, sending the certificate authentication result to the terminal device, determining the target user's role permission level based on the user's identity information, sending the target user's role permission level to the terminal device, and determining the target user's target permission level based on the role permission level and the configuration permission level recorded in the hardware control module.

[0099] Specifically, the system receives access requests from terminal devices and sends device authentication information to those devices. This ensures that the terminal device only interacts with the industrial control system or electronic device if the authentication information has not been tampered with or forged. Furthermore, the terminal device can use the public key to encrypt data before sending it to the industrial control system or electronic device, thus enhancing the confidentiality of interactions between the terminal device and the industrial control system.

[0100] The system receives the target user's digital certificate from the terminal device, authenticates the digital certificate, obtains the authentication result, and sends the authentication result back to the terminal device. Upon receiving the target user's digital certificate from the terminal device, it authenticates the digital certificate and obtains an authentication result indicating whether the digital certificate has passed verification. This enables two-way authentication between the terminal device and the industrial control system, further enhancing the security of their interaction.

[0101] The system determines the target user's role and permission level based on the user's identity information and sends this level to the terminal device. It can accurately determine the role and permission level that can be assigned or configured to the target user based on the default user role and permissions in the digital certificate obtained by the target user, and promptly inform the target user of the acquired role and permission level so that the user can perform corresponding processing or operations according to this level.

[0102] Based on the role's permission level and the configuration permission level recorded in the hardware control module, the target permission level for the target user is determined. Since the hardware control module includes a hardware controller, which requires adjustment or triggering by relevant technical personnel or users, even if other users or personnel obtain the role's permission level through other means, they cannot trigger or adjust the hardware controller, and therefore cannot obtain a higher configuration permission level. This achieves a dual guarantee, further enhancing the security of the industrial control system.

[0103] This can improve the security of industrial control systems.

[0104] In one possible implementation, see [link to relevant documentation]. Figure 2 Before determining the target user's target permission level based on the role's permission level and the configuration permission level recorded in the hardware control module, the following steps are also included:

[0105] Step 1005: Obtain and parse the status value output by the hardware control module, and determine the system configuration corresponding to the status value.

[0106] Generally, the hardware control module can output a default status value. After the user triggers or adjusts the hardware control module, the status value output by the hardware control module will change accordingly.

[0107] Furthermore, relevant technical personnel can pre-assign a corresponding system configuration to each different state value, and these system configurations can be divided into multiple configuration levels. Generally, a higher configuration level system configuration contains more system information, thus allowing for more information to be viewed and more operations to be performed on the industrial control system. Conversely, a lower configuration level system configuration contains less system information, resulting in fewer viewable and operational options for the industrial control system.

[0108] Therefore, the configuration permission level recorded in the hardware control module can be the system configuration level corresponding to the current output status value of the hardware control module. In other words, the configuration permission level can also indicate or restrict the user's ability to view information about the industrial control system or the operations that the user can perform on the industrial control system.

[0109] Alternatively, the system configuration corresponding to the default output status value of the hardware control module can be set to be unable to view any information of the industrial control system and unable to perform any operation on the industrial control system. The configuration level of the system configuration corresponding to the default output status value of the hardware control module can also be set to the lowest level. This application embodiment does not limit this.

[0110] It is worth noting that since the role permission level has been sent to the terminal device during step 1003, the user can adjust the status value output by the hardware control module according to the role permission level so that the configuration permission level corresponding to the status value output by the hardware control module matches the role permission level. In this way, the user can correctly obtain the corresponding target permission level.

[0111] Step 1006: Determine the highest configuration permission level that the hardware control module allows the industrial control system to grant to the terminal device based on the system configuration, and use the highest configuration permission level as the configuration permission level.

[0112] It is worth noting that since each status value matches the system configuration, which specifically indicates which system information can be displayed, and this configuration level or configuration permission level is set by relevant technical personnel, the actual system information indicated by the system configuration may not be exactly the same as the configuration level or configuration permission level. Therefore, in order to ensure that the target user can be granted or configured with a configuration permission level that fully covers all system information, the lowest configuration permission level among all configuration permission levels that can display all system information needs to be taken as the highest configuration permission level.

[0113] In addition, if the security of the industrial control system is to be improved, the highest configuration permission level can be the configuration permission level that is one level lower than the lowest configuration permission level among the configuration permission levels that can display information about each system. This application does not limit this.

[0114] This increases the flexibility in determining the configuration permission level.

[0115] In one possible implementation, see [link to relevant documentation]. Figure 3 Based on the role's permission level and the configuration permission level recorded in the hardware control module, the target permission level of the target user is determined, including:

[0116] Step 1007: Receive the login request sent by the terminal device.

[0117] Optionally, the login request may include the target user's password and the role's permission level.

[0118] Optionally, the password may refer to a key for logging into or accessing the industrial control system. For example, the password may be a text message verification code sent to the target user, a virtual account and password set by the target user, or a password set by the administrator of the industrial control system. This application embodiment does not limit this.

[0119] Step 1008: If the password verification of the target user is successful, the target permission level of the target user is determined according to the role permission level and the configuration permission level recorded in the hardware control module.

[0120] It is worth noting that if the target user's password verification is successful, it indicates that the target user can correctly log in or access the industrial control system to view relevant information or perform corresponding operations.

[0121] In one possible way, see continue. Figure 3 After receiving a login request sent by the terminal device, which includes the target user's password and the role permission level, the method further includes:

[0122] Step 1009: If the password verification of the target user fails, a verification failure response is sent to the terminal device.

[0123] Optionally, the verification failure response may include a message indicating that login failed or password verification was unsuccessful.

[0124] The verification failure response can also be used to instruct the terminal device to disconnect from the industrial control system or the electronic device, and can also be used to instruct or control the terminal device to delete the aforementioned device authentication information.

[0125] It is worth noting that if the target user's password verification fails, it indicates that the target user cannot log in or access the industrial control system. Therefore, this verification failure response can be used to cut off the interaction between the terminal device and the industrial control system, or it can be used to prompt the user to re-enter their password or stop the login process.

[0126] This can improve the reliability and security of the interaction between the terminal device and the industrial control system or the electronic device, thereby enhancing the security of the industrial control system.

[0127] In one possible implementation, see [link to relevant documentation]. Figure 4Based on the role's permission level and the configuration permission level recorded in the hardware control module, the target permission level of the target user is determined, including:

[0128] Step 1010: Determine the highest role permission level corresponding to the target user based on the role permission level.

[0129] Optionally, if the digital certificate includes multiple different levels of role permissions, then the highest level among these different levels of role permissions can be selected to determine the target permission level for the target user.

[0130] Alternatively, the lowest level among these multiple different levels of role permissions can be selected to determine the target permission level for the target user; however, this embodiment does not limit this approach.

[0131] This increases the flexibility in determining the permission level of the role and / or the permission level of the target.

[0132] Step 1011: Compare the highest role permission level with the configuration permission level.

[0133] For example, if the same level of role permission and configuration permission indicates or restricts the user to view information about the industrial control system or to perform the same operations on the industrial control system, then the highest level of role permission and configuration permission can be directly compared.

[0134] If the same level of role permission and configuration permission level indicates or restricts the user from viewing information about the industrial control system or performing operations on the industrial control system, then the number of times the highest role permission level and the configuration permission level indicate or restrict the user from viewing information about the industrial control system or performing operations on the industrial control system can be compared.

[0135] For example, suppose the highest role permission level indicates or restricts the number of information a user can view and the number of operations they can perform on the industrial control system to both be 100, while the configuration permission level indicates or restricts the number of information a user can view and the number of operations they can perform on the industrial control system to both be 50. Then it can be determined that the highest role permission level is higher than the configuration permission level. This application does not limit this aspect.

[0136] Step 1012: Use the lowest of the highest role permission level and the configured permission level as the target permission level.

[0137] For example, if the same level of role permission and configuration permission indicates or restricts the user to view information about the industrial control system or to perform the same operations on the industrial control system, assuming the highest role permission level is level 2 and the configuration permission level is level 3, then the target permission level can be determined to be level 3.

[0138] It's important to note that since this configuration permission level can be adjusted by the target user triggering the aforementioned hardware control module, and the role permission level is determined through authentication using the digital certificate, and the information in the digital certificate is already written at the time of issuance, the user cannot control the predetermined role permission level, but can change it by triggering or adjusting the hardware control module. Therefore, by using the lowest of the highest role permission level and the configuration permission level as the target permission level, it's possible to prevent users from increasing the configuration permission level by triggering or adjusting the hardware control module to obtain a higher target permission level.

[0139] This not only ensures that other personnel acquire the required role and privilege level, but also prevents them from obtaining a higher level of privilege and / or the target privilege configuration by triggering or adjusting the hardware controller. It also prevents users from increasing the privilege level by triggering or adjusting the hardware control module to obtain a higher target privilege level. This significantly improves the security of the industrial control system.

[0140] In one possible implementation, see [link to relevant documentation]. Figure 5 The digital certificate is authenticated, and the authentication result is obtained, including:

[0141] Step 1013: Call the root certificate to verify the issuance information in the digital certificate.

[0142] Alternatively, the root certificate can be a CA root certificate.

[0143] In addition, the root certificate can be invoked to authenticate the issued information using any authentication algorithm or authentication procedure, and this application embodiment does not limit this.

[0144] Step 1014: If the issuance information is successfully authenticated, the first certificate authentication result is generated.

[0145] Optionally, the first certificate authentication result is used to indicate that the issuance information has been authenticated, that is, the digital certificate has been verified.

[0146] Step 1015: If the authentication of the issued information fails, the terminal device is denied access, and a second certificate authentication result is generated.

[0147] Optionally, if the issuance information fails to be authenticated, it may indicate that the issuance information has been tampered with or forged, meaning that the digital certificate may be forged or tampered with.

[0148] Optionally, denying access to the terminal device may mean that the industrial control system or the electronic device cuts off the communication connection with the terminal device, or it may instruct or control the terminal device to delete the aforementioned device authentication information.

[0149] Optionally, the second certificate authentication result is used to indicate that the issuance information authentication failed, that is, the digital certificate failed verification.

[0150] This allows for accurate verification of the digital certificate, facilitating subsequent operations. Furthermore, if the certificate's verification fails, access to the terminal device can be promptly denied, preventing prolonged communication between the terminal device and the industrial control system or electronic device, thus reducing the risk of data leakage or attack on the industrial control system or electronic device.

[0151] In one possible implementation, see [link to relevant documentation]. Figure 6 The role and permission level of the target user is determined based on the user's identity information, including:

[0152] Step 1016: Decrypt the user's identity information using the private key corresponding to the public key.

[0153] Alternatively, the private key may be an algorithm used to decrypt data encrypted by the public key.

[0154] In this embodiment, the public key and the private key can be any form of algorithm, such as the public key and the private key can be obtained by hash functions such as MD2 and MD5. This embodiment does not limit this.

[0155] Step 1017: Parse the decrypted user identity information to obtain the default user role permissions indicated by the user identity information, and use the default user role permissions as the role permission level.

[0156] Optionally, if the default user role permissions only indicate or restrict the user to view information about the industrial control system or to perform operations on the industrial control system, then the default user role permissions can be compared with the role permission levels assigned by relevant technical personnel, which indicate that the user can view information about the industrial control system or to perform operations on the industrial control system, and the level that best matches the default user role permissions can be selected as the role permission level.

[0157] This allows for the accurate reading of the default user role permissions written into the digital certificate when it was issued, thereby improving the accuracy of determining the role's permission level.

[0158] To provide a detailed explanation of the industrial control system authentication method provided in this application, this application also provides an interactive flowchart of the industrial control system authentication method, see below. Figure 7 The method includes:

[0159] Step 2001: The terminal device sends an access request to the industrial control system.

[0160] Alternatively, the access request can be sent to electronic devices in an industrial control system.

[0161] Step 2002: The industrial control system receives the access request sent by the terminal device.

[0162] Step 2003: The industrial control system sends device authentication information to the terminal device.

[0163] Step 2004: The terminal device sends the target user's digital certificate to the industrial control system.

[0164] Step 2005: The industrial control system receives the digital certificate of the target user sent by the terminal device, authenticates the digital certificate, and obtains the certificate authentication result.

[0165] Step 2006: The industrial control system sends the certificate authentication result to the terminal device.

[0166] Step 2007: The industrial control system determines the role and permission level of the target user based on the user's identity information.

[0167] Step 2008: The industrial control system sends the target user's role and permission level to the terminal device.

[0168] Step 2009: The industrial control system determines the target permission level of the target user based on the role's permission level and the configuration permission level recorded in the hardware control module.

[0169] The following describes the apparatus, equipment, and computer-readable storage medium used to implement the industrial control system authentication method provided in this application. The specific implementation process and technical effects are described above and will not be repeated below.

[0170] Figure 8 This is a schematic diagram of the structure of an industrial control system authentication device provided in an embodiment of this application. See also... Figure 8 The device includes:

[0171] The receiving and sending module 301 is used to receive access requests sent by terminal devices and send device authentication information to the terminal devices.

[0172] Optionally, the device authentication information includes verification information and a public key.

[0173] The authentication receiving module 302 is used to receive the digital certificate of the target user sent by the terminal device, authenticate the digital certificate and obtain the certificate authentication result, and send the certificate authentication result to the terminal device.

[0174] Optionally, the digital certificate includes issuance information and the target user's identity information, which is encrypted based on the public key, and the certificate authentication result is used to indicate whether the digital certificate has passed verification.

[0175] The sending module 303 is used to determine the role and permission level of the target user based on the user's identity information and send the role and permission level of the target user to the terminal device.

[0176] The determination module 304 is used to determine the target permission level of the target user based on the role's permission level and the configuration permission level recorded in the hardware control module.

[0177] The above-described device is used to execute the method provided in the foregoing embodiments, and its implementation principle and technical effect are similar, so they will not be described again here.

[0178] These modules can be one or more integrated circuits configured to implement the above methods, such as one or more Application Specific Integrated Circuits (ASICs), one or more microcontrollers, or one or more Field Programmable Gate Arrays (FPGAs). Alternatively, when a module is implemented using processing element scheduler code, the processing element can be a general-purpose processor, such as a Central Processing Unit (CPU) or other processor capable of calling program code. Furthermore, these modules can be integrated together as a system-on-a-chip (SoC).

[0179] Figure 9 This is a schematic diagram of the structure of a computer device provided in an embodiment of this application. See also... Figure 9 The computer device includes: a memory 401 and a processor 402. The memory 401 stores a computer program that can run on the processor 402. When the processor 402 executes the computer program, it implements the steps in any of the above method embodiments.

[0180] This application also provides a computer-readable storage medium storing a computer program that, when executed by a processor, can implement the steps in the various method embodiments described above.

[0181] Optionally, this application also provides a program product, such as a computer-readable storage medium, including a program that, when executed by a processor, performs any of the above-described industrial control system authentication method embodiments.

[0182] In the several embodiments provided by this invention, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0183] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0184] Furthermore, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or in the form of hardware plus software functional units.

[0185] The integrated units implemented as software functional units described above can be stored in a computer-readable storage medium. These software functional units, stored in a storage medium, include several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) or processor to execute partial steps of the methods of the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0186] The above are merely specific embodiments of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

[0187] The above description is merely a preferred embodiment of this application and is not intended to limit this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the protection scope of this application.

Claims

1. An industrial control system authentication method, characterized in that, Applied to industrial control systems, the method includes: The system receives an access request from a terminal device and sends device authentication information to the terminal device, the device authentication information including verification information and a public key. The system receives a digital certificate of the target user sent by the terminal device, authenticates the digital certificate and obtains a certificate authentication result, and sends the certificate authentication result to the terminal device. The digital certificate includes issuance information and user identity information of the target user. The user identity information is encrypted based on the public key. The certificate authentication result is used to indicate whether the digital certificate has passed verification. The target user's role and permission level is determined based on the user's identity information, and the target user's role and permission level is sent to the terminal device. The target permission level of the target user is determined based on the role permission level and the configuration permission level recorded in the hardware control module. Determining the target permission level of the target user based on the role permission level and the configuration permission level recorded in the hardware control module includes: receiving a login request sent by the terminal device, the login request including the target user's password and the role permission level; if the target user's password verification is successful, determining the highest role permission level corresponding to the target user based on the role permission level; comparing the highest role permission level with the configuration permission level; and taking the lowest of the highest role permission level and the configuration permission level as the target permission level.

2. The industrial control system certification method as described in claim 1, characterized in that, Before determining the target user's target permission level based on the role permission level and the configuration permission level recorded in the hardware control module, the method further includes: Acquire and parse the status value output by the hardware control module, and determine the system configuration corresponding to the status value; Based on the system configuration, the highest configuration permission level that the hardware control module allows the industrial control system to grant to the terminal device is determined, and the highest configuration permission level is used as the configuration permission level.

3. The industrial control system certification method as described in claim 1, characterized in that, After receiving the login request sent by the terminal device, wherein the login request includes the target user's password and the role permission level, the method further includes: If the password verification of the target user fails, a verification failure response is sent to the terminal device.

4. The industrial control system certification method as described in claim 1, characterized in that, The process of authenticating the digital certificate and obtaining the certificate authentication result includes: The root certificate is invoked to authenticate the issuance information in the digital certificate; If the issuance information is successfully authenticated, a first certificate authentication result is generated, which indicates that the issuance information has been successfully authenticated. If the authentication of the issued information fails, the terminal device is denied access, and a second certificate authentication result is generated, which indicates that the authentication of the issued information has failed.

5. The industrial control system certification method as described in claim 1, characterized in that, Determining the role and permission level of the target user based on the user identity information includes: The user's identity information is decrypted using the private key corresponding to the public key; The decrypted user identity information is parsed to obtain the default user role permissions indicated by the user identity information, and the default user role permissions are used as the role permission level.

6. An industrial control system authentication device, characterized in that, The device includes: The receiving and sending module is used to receive access requests sent by terminal devices and send device authentication information to the terminal devices, wherein the device authentication information includes verification information and a public key; The authentication receiving module is used to receive the digital certificate of the target user sent by the terminal device, authenticate the digital certificate and obtain the certificate authentication result, and send the certificate authentication result to the terminal device. The digital certificate includes issuance information and the user identity information of the target user. The user identity information is encrypted based on the public key. The certificate authentication result is used to indicate whether the digital certificate has passed the verification. The sending module is used to determine the role and permission level of the target user based on the user identity information, and send the role and permission level of the target user to the terminal device. The determination module is used to determine the target permission level of the target user based on the role permission level and the configuration permission level recorded in the hardware control module; The determining module is specifically used to receive a login request sent by the terminal device, the login request including the password of the target user and the role permission level; if the password of the target user is verified, the highest role permission level corresponding to the target user is determined according to the role permission level; the highest role permission level and the configuration permission level are compared; and the lowest level between the highest role permission level and the configuration permission level is taken as the target permission level.

7. A computer device, characterized in that, include: A memory and a processor, wherein the memory stores a computer program that can run on the processor, and when the processor executes the computer program, it implements the steps of the method described in any one of claims 1 to 5.

8. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the steps of the method according to any one of claims 1 to 5.

Images