A multi-link management system and method

Abstract

The present invention relates to a multi-link management system and method. The multi-link management system includes at least one industrial control terminal and a management center. Each industrial control terminal includes a registration module, an information sending module, a multi-link management module, and a heartbeat detection module. The management center has multiple communication protocol addresses for configuring with the industrial control terminals, where: The registration module is used for the corresponding industrial control terminal to register on the current communication protocol address; The information sending module is used to send the configuration information in the industrial control terminal to the management center through the current communication protocol address to establish a primary communication link; The multi-link management module is used to configure multiple backup communication links for the industrial control terminal; The heartbeat detection module is used to detect whether the primary communication link is communicating normally. If not, it searches for a target backup communication link with normal communication. If found, it notifies the multi-link management module to perform a link switch.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a multi-link management system and method. Background Art

[0002] With the development of computer and network technology, and the advent of the trends of "Industry 4.0", "Integration of Industrialization and Informationization", and "Internet Plus", the traditional industrial control system network security (referred to as industrial control security) has become a serious challenge facing enterprises and national security, and has attracted the attention of more and more enterprises and governments.

[0003] The commonly used mode of the industrial control terminal security management system is the terminal configuration program whitelist, security baseline, peripheral control, emergency response and other functions. Multiple industrial control terminal devices are connected to a management platform for centralized management. Combined with the terminal software and the management platform linkage, the list of files to be confirmed of the programs running on each industrial control host in the file information collection is filtered, and the peripheral devices are centrally managed. However, when this management platform fails, the current network card of this management platform fails, or this network line fails, all centrally controlled industrial control terminal devices will not be able to perform any linkage, and new policies cannot be sent to the terminal, and new alarms cannot be uploaded to the management platform for summary and demonstration. The emergency response function and mechanism will be completely ineffective, which will seriously affect the effect of centralized control.

[0004] Therefore, in view of the above shortcomings, this invention is proposed. Summary of the Invention

[0005] The technical problem to be solved by the present invention is how to ensure that the industrial control terminal can still be centrally controlled and the system can safely and stably exchange information when the current management device of the centrally controlled industrial control terminal fails and communication is impossible. In response to the defects in the existing technology, a multi-link management system and method are provided.

[0006] To solve the above technical problems, the present invention provides a multi-link management system, comprising at least one industrial control terminal and a management center, wherein each industrial control terminal includes a registration module, an information sending module, a multi-link management module, and a heartbeat detection module, and the management center has multiple communication protocol addresses for configuring with the industrial control terminal, wherein:

[0007] The registration module is used for the corresponding industrial control terminal to register on the current communication protocol address;

[0008] The information sending module is used to send the configuration information in the industrial control terminal to the management center via the current communication protocol address if the industrial control terminal is successfully registered, so as to establish a primary communication link between the industrial control terminal and the management center;

[0009] The multi-link management module is used to configure the multiple communication protocol addresses for the industrial control terminal, forming multiple backup communication link configurations between the industrial control terminal and the management center;

[0010] The heartbeat detection module is used to detect whether the primary communication link is communicating normally. If it is normal, continue to monitor. If it is not normal, search for a target backup communication link that is communicating normally among the multiple backup communication link configurations. If found, notify the multi-link management module to perform a link switch;

[0011] The multi-link management module is used to switch the target backup communication link as the new primary communication link, so that the industrial control terminal and the management center communicate through the new primary communication link.

[0012] The present invention also provides a multi-link management method, which is executed by the above multi-link management system. The system includes at least one industrial control terminal and a management center. Among them, each industrial control terminal includes a registration module, an information sending module, a multi-link management module, and a heartbeat detection module. The management center has multiple communication protocol addresses for configuring with the industrial control terminal. The method includes:

[0013] The corresponding industrial control terminal uses the registration module to register on the current communication protocol address;

[0014] If the industrial control terminal registers successfully, the information sending module sends the configuration information in the industrial control terminal to the management center through the current communication protocol address, establishing a primary communication link between the industrial control terminal and the management center;

[0015] The multi-link management module configures the multiple communication protocol addresses for the industrial control terminal, forming multiple backup communication link configurations between the industrial control terminal and the management center;

[0016] The heartbeat detection module detects whether the primary communication link is communicating normally. If it is normal, continue to monitor. If it is not normal, search for a target backup communication link that is communicating normally among the multiple backup communication link configurations. If found, notify the multi-link management module to perform a link switch;

[0017] The multi-link management module switches the target backup communication link as the new primary communication link, so that the industrial control terminal and the management center communicate through the new primary communication link.

[0018] Implementing the multi-link management system and method of the present invention has the following beneficial effects:

[0019] By setting up a multi-link management module in each industrial control terminal, multiple backup communication links are configured for each industrial control terminal; when the established primary communication link fails, it can be detected by the set heartbeat detection module, and the heartbeat detection module can also find a backup communication link that can communicate normally among multiple backup communication links; if found, the multi-link management module can switch the currently faulty primary communication link to the backup communication link and use the backup communication link as the new primary communication link for communication. The above technical solution overcomes the problem that the existing management device for centralized control of industrial control terminals fails, resulting in the industrial control terminals being unable to receive any instructions and the system being almost paralyzed. Even if the primary communication link where the industrial control terminal is located fails, there is still a backup communication link that can replace the primary communication link for communication, increasing the robustness of the connection between the industrial control terminal and the management center, reducing the dependence on network devices or network environments, and enabling the entire system to perform information interaction and centralized control safely and stably. By setting up a registration module, an information sending module, a multi-link management module, and a heartbeat detection module in the industrial control terminal, a communication environment is pre-deployed in the industrial control terminal in advance. During specific applications, only the communication information needs to be sent to the successfully registered management center, without backing up the communication information in multiple management centers, reducing the redundancy of the system. Description of the Drawings

[0020] Figure 1 is a schematic structural diagram of a multi-link management system provided in Embodiment 1 of the present invention;

[0021] Figure 2 is a schematic flowchart of a multi-link management method provided in Embodiment 2 of the present invention.

[0022] In the figure: 1: Industrial control terminal; 2: Management center; 11: Registration module; 12: Information sending module; 13: Multi-link management module; 14: Heartbeat detection module. Detailed Embodiments

[0023] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Apparently, the described embodiments are some, but not all, of the embodiments of the present invention. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the protection scope of the present invention.

[0024] Embodiment 1

[0025] As Figure 1As shown in the figure, the multi-link management system provided by the embodiment of the present invention includes at least one industrial control terminal 1 and a management center 2. Each industrial control terminal 1 includes a registration module 11, an information sending module 12, a multi-link management module 13, and a heartbeat detection module 14. The management center 2 has multiple communication protocol addresses for configuration with the industrial control terminal. Specifically: The registration module 11 is used for the corresponding industrial control terminal 1 to register on the current communication protocol address. Exemplarily, the multi-link management system includes industrial control terminal A and industrial control terminal B. Industrial control terminal A can use its included registration module a to register on the current communication protocol address, and industrial control terminal B can also use its included registration module b to register on the current communication protocol address. Here, the current communication protocol address is any one of the multiple communication protocol addresses, and each communication protocol address corresponds to a management center.

[0026] Preferably, the management center 2 includes: The number of management centers 2 is one, and this management center is configured with multiple network cards, where each network card corresponds to a communication protocol address; or, the number of management centers 2 is multiple, and each management center is configured with one network card, where each network card corresponds to a communication protocol address; or, the number of management centers 2 is multiple, and each management center is configured with multiple network cards, where each network card corresponds to a communication protocol address.

[0027] The information sending module 12 is used to, if the industrial control terminal 1 registers successfully, send the configuration information in the industrial control terminal 1 to the management center 2 through the current communication protocol address, and establish a primary communication link between the industrial control terminal 1 and the management center 2. Among them, the configuration information includes a pre-created whitelist library, configuration information of various functions, and configuration information of the whitelist switch, etc. The whitelist library is calculated by the corresponding industrial control terminal for operating system programs, service self-start programs, and traditional application programs. It can be understood that the number of management centers 2 may be multiple. The information sending module 12 sends the configuration information in the industrial control terminal 1 to one management center corresponding to the current communication protocol address, that is, the registered management center. The number of successfully registered industrial control terminals 1 may also be multiple. The information sending module 12 of each successfully registered industrial control terminal 1 can send the configuration information in its corresponding industrial control terminal to the management center 2 through the current communication protocol address, so that the corresponding management center can centrally manage different configuration information.

[0028] The multi-link management module 13 is used to configure multiple communication protocol addresses for the industrial control terminal 1, forming multiple backup communication link configurations between the industrial control terminal 1 and the management center 2. Among them, the multiple backup communication links can be the communication links between the industrial control terminal 1 and the communication protocol addresses corresponding to multiple network cards in one management center, or the communication links between the industrial control terminal 1 and the communication protocol addresses corresponding to multiple management centers. Among them, each management center includes one network card, or the communication links between the industrial control terminal 1 and the communication protocol addresses corresponding to multiple network cards in multiple management centers, which can be specifically set according to the actual needs of the system and are not specially limited here.

[0029] The heartbeat detection module 14 is used to detect whether the primary communication link is communicating normally. If it is normal, continue to monitor. If it is not normal, find the target backup communication link that can communicate normally among the multiple backup communication link configurations. If found, notify the multi-link management module 13 to perform link switching.

[0030] The multi-link management module 13 is used to switch the target backup communication link as the new primary communication link, so that the industrial control terminal 1 and the management center 2 communicate through the new primary communication link.

[0031] The multi-link management system provided in this embodiment configures multiple backup communication links for each industrial control terminal by setting a multi-link management module in each industrial control terminal. When the established primary communication link fails, it can be detected by the set heartbeat detection module, and the heartbeat detection module can also find a backup communication link that can communicate normally among the multiple backup communication links. If found, the multi-link management module can switch the current faulty primary communication link to a backup communication link and use the backup communication link as the new primary communication link for communication. The above technical solution overcomes the problem that the existing management device for centrally controlling industrial control terminals fails, resulting in the industrial control terminals being unable to receive any instructions and the system being almost paralyzed. Even if the primary communication link where the industrial control terminal is located fails, there is still a backup communication link that can replace the primary communication link for communication, increasing the robustness of the connection between the industrial control terminal and the management center, reducing the dependence on network devices or network environments, and enabling the entire system to safely and stably perform information interaction and centralized control. By setting a registration module, an information sending module, a multi-link management module, and a heartbeat detection module in the industrial control terminal, a communication environment is pre-deployed in the industrial control terminal in advance. In specific applications, only the communication information needs to be sent to the successfully registered management center, without backing up the communication information in multiple management centers, reducing the redundancy of the system.

[0032] Preferably, the multi-link management module 13 is further configured to determine whether the first management center corresponding to the target backup communication protocol address is the same as the second management center corresponding to the current communication protocol address; if the same, it is determined that the new primary communication link communicates based on the configuration information stored in the second management center, where the target backup communication protocol address is the communication protocol address corresponding to the target backup communication link.

[0033] Both the first management center and the second management center are one of the management centers in Management Center 2, where the second management center is a registered management center. It can be understood that after receiving the configuration information of the industrial control terminal 1, the second management center preferably sends the configuration information to the storage module for storage. If the first management center and the second management center are the same management center, that is, the target backup communication protocol address and the current communication protocol address are respectively the communication protocol addresses corresponding to two different network cards of the second management center, and the two different network cards share the same storage module, then the target backup communication link can directly communicate using the configuration information stored in the storage module.

[0034] Preferably, the multi-link management module 13 is further configured to, if it is determined that the first management center and the second management center are different, notify the registration module 11 to register on the target backup communication protocol address; the registration module 11 is further configured to register on the target backup communication protocol address; if the registration is successful, the information sending module 12 is further configured to send the configuration information to the first management center through the target backup communication protocol address; the multi-link management module 13 is further configured to determine that the new primary communication link communicates based on the configuration information stored in the first management center.

[0035] Wherein, if the first management center and the second management center are different management centers, the first management center corresponding to the target backup communication protocol address and the second management center corresponding to the current communication protocol address cannot share the same storage module. Therefore, the industrial control terminal 1 needs to re-register on the target backup communication protocol address to store the configuration information of the industrial control terminal 1 in the storage module of the first management center, so that the target backup communication link can communicate using the configuration information.

[0036] Preferably, the registration module 11 is configured to receive the information of the management center to be registered, generate a registration request based on the information of the management center to be registered, and send the registration request to the management center to be registered, where the information of the management center to be registered includes the current communication protocol address and the corresponding port information, or the target backup communication protocol address and the corresponding port information; the management center to be registered is configured to send the registration result to the registration module 11 in response to the registration request, where the registration result includes successful registration and failed registration; the registration module 11 is further configured to, if the registration fails, re-determine the registration strategy according to the error information until the industrial control terminal 1 is successfully registered.

[0037] In this embodiment, the management center to be registered is a management center corresponding to the current communication protocol address or a management center corresponding to the target backup communication protocol address. Exemplarily, if the registration result is a registration failure, the error message can be that the industrial control terminal 1 has been registered or that there is no available authorization point, etc. Among them, if the error message is that the industrial control terminal 1 has been registered, it can be determined that the industrial control terminal 1 has completed registration on the management center to be registered before sending the registration request. At this time, the re-determined registration strategy can be that the industrial control terminal 1 no longer sends a registration request to the management center to be registered through the registration module 11, but directly sends its configuration information to the management center to be registered through the information sending module 12 to establish a communication link between the industrial control terminal 1 and the management center to be registered. If the error message is that there is no available authorization point, it can be determined that the available authorization points of the management center to be registered are being occupied. At this time, the re-determined registration strategy can be to send a registration request to the management center to be registered through the registration module 11 every preset time until the industrial control terminal 1 is successfully registered.

[0038] Preferably, the heartbeat detection module 14 is specifically configured to, after the industrial control terminal 1 is successfully registered on the management center to be registered, create an encrypted channel between the industrial control terminal 1 and the registered management center, send heartbeat information to the registered management center through the encrypted channel every preset time period, and detect whether a heartbeat response from the registered management center is received. If it is detected that no heartbeat response is received for a continuous preset number of times, it is determined that the main communication link cannot communicate normally; otherwise, it is determined that the main communication link communicates normally, and the steps of sending heartbeat information to the registered management center through the main communication link every preset time period and detecting whether a heartbeat response from the registered management center is received are repeated until it is determined that the main communication link cannot communicate normally. In this embodiment, creating an encrypted channel between the industrial control terminal 1 and the registered management center can ensure the stability, integrity, and confidentiality of information transmission. Sending heartbeat information every preset time period can relieve the working pressure of the heartbeat detection module. At the same time, only when the number of consecutive detections of no received heartbeat response reaches the preset number is it determined that the main communication link cannot communicate normally, avoiding misjudging a temporary inability to communicate normally caused by a temporary network anomaly as an abnormal main communication link, and improving the accuracy of link anomaly judgment.

[0039] In this embodiment, the national cryptographic algorithms SM2 (elliptic curve public key cryptography algorithm) and SM4 (block symmetric cryptography algorithm) can be used to establish an encrypted channel between the industrial control terminal 1 and the registered management center. The preset time interval in this embodiment can be every minute, that is, every minute, a heartbeat message is sent to the registered management center through the main communication link. The continuous preset number of times can be three consecutive times, that is, if it is detected that the heartbeat response has not been received three consecutive times, it is determined that the main communication link cannot communicate normally. It can be understood that if the number of times of continuously detecting that the heartbeat response has not been received does not reach three times (including two times, one time, and zero times), it can be determined that the main communication link is communicating normally, and the steps of repeating sending a heartbeat message to the registered management center through the encrypted channel every preset time interval and detecting whether the heartbeat response from the registered management center is received are repeated until it is determined that the main communication link cannot communicate normally.

[0040] Preferably, the heartbeat message includes an encryption certificate, a physical address generation code of the industrial control terminal 1 (i.e., the industrial control terminal ID generation code), a communication protocol address of the industrial control terminal 1 (i.e., the industrial control terminal IP address), and a media access control address of the industrial control terminal 1 (i.e., the industrial control terminal MAC address); among them, the physical address generation code of the industrial control terminal 1 can preferably be generated by encrypting information such as the hard disk serial number, volume serial number, and computer name through an algorithm.

[0041] The registered management center is used to match the heartbeat message with the corresponding information in the configuration information of the industrial control terminal 1 after receiving the heartbeat message. If the match is successful, a heartbeat response is sent to the heartbeat detection module 14 through the encrypted channel. Specifically, the received encryption certificate can be matched with the public key in the configuration information, the decrypted physical address of the industrial control terminal 1 can be matched with the physical address in the configuration information, and the communication protocol address and media access control address of the industrial control terminal 1 can be matched with the communication protocol address and media access control address in the configuration information. If all the information in the heartbeat message matches successfully, the registered management center sends a heartbeat response to the heartbeat detection module 14. By verifying the heartbeat message including the ID, IP address, and MAC address of the industrial control terminal, this embodiment can ensure that the two devices establishing the heartbeat are the corresponding industrial control terminal and the registered management center respectively, improving the accuracy of communication.

[0042] Preferably, each industrial control terminal 1 further includes a file download module and a transmission module, where: the file download module is used to download the configuration information to be used from the registered management center, where the registered management center stores the configuration information of all successfully registered industrial control terminals; among them, the configuration information to be used can be the configuration information of the current industrial control terminal, or the configuration information of other industrial control terminals among all successfully registered industrial control terminals except the current industrial control terminal. The transmission module is used for data transmission between the industrial control terminal and the management center through the main communication link. Exemplarily, the transmission module can perform information transmission such as alarm reporting and instruction issuing. In this embodiment, the registered management center centrally manages the configuration information of all successfully registered industrial control terminals, which is convenient for each successfully registered industrial control terminal to obtain the configuration information required for performing corresponding tasks.

[0043] Preferably, the configuration information in each industrial control terminal 1 includes a whitelist library, where the whitelist library includes process paths, process names, parent process names, and process file hash values. The configuration information can also include configuration information for various functions and configuration information for the whitelist switch, etc., where the function configuration information can be peripheral control function configuration information. The configuration information in this embodiment includes a whitelist library, which enables the registered management center to filter the list of files to be confirmed for each running program in the file information set according to the whitelist library to ensure secure communication. It can be understood that the configuration information in each industrial control terminal 1 also includes the ID, IP address, and MAC address of the industrial control terminal 1.

[0044] Preferably, each industrial control terminal 1 further includes an uninstallation module. If the corresponding industrial control terminal has not been registered with other management centers before registering with the current registered management center, the uninstallation module is used to send a first uninstallation instruction to the current registered management center after the communication ends; the current registered management center is used to delete the configuration file of the corresponding industrial control terminal according to the first uninstallation instruction;

[0045] If the corresponding industrial control terminal has been registered with an interrupted management center before registering with the current registered management center, the heartbeat detection module is further used to determine whether the corresponding industrial control terminal is communicating normally with the interrupted management center. If so, the uninstallation module is further used to send a second uninstallation instruction to the interrupted management center; the interrupted management center is used to delete the configuration file of the corresponding industrial control terminal according to the second uninstallation instruction; if not, the system controls to delete the configuration file of the corresponding industrial control terminal in the interrupted management center.

[0046] In this embodiment, by setting an uninstallation module in the industrial control terminal, the configuration file in the registered management center and / or the interrupted management center is deleted after the communication ends, so as to reduce the storage space occupied by the management center.

[0047] Embodiment Two

[0048] As Figure 2 shown, the multi-link management method provided by the embodiment of the present invention is preferably executed by the multi-link management system of Embodiment 1. The system includes at least one industrial control terminal and a management center. Among them, each industrial control terminal includes a registration module, an information sending module, a multi-link management module, and a heartbeat detection module. The management center has multiple communication protocol addresses for configuring with the industrial control terminal. The method includes:

[0049] S210. The corresponding industrial control terminal uses the registration module to register on the current communication protocol address;

[0050] S220. If the industrial control terminal registers successfully, the information sending module sends the configuration information in the industrial control terminal to the management center through the current communication protocol address, and establishes a primary communication link between the industrial control terminal and the management center;

[0051] S230. The multi-link management module configures the multiple communication protocol addresses for the industrial control terminal to form multiple backup communication link configurations between the industrial control terminal and the management center;

[0052] S240. The heartbeat detection module detects whether the primary communication link is communicating normally. If it is normal, continue to monitor. If it is not normal, find a target backup communication link that is communicating normally among the multiple backup communication link configurations. If found, notify the multi-link management module to perform link switching;

[0053] S250. The multi-link management module switches the target backup communication link as the new primary communication link, so that the industrial control terminal and the management center communicate through the new primary communication link.

[0054] The multi-link management method provided in this embodiment configures multiple backup communication links for each industrial control terminal through the multi-link management module set in each industrial control terminal; when the established primary communication link fails, it can be detected by the heartbeat detection module, and the heartbeat detection module can also find a backup communication link that can communicate normally among the multiple backup communication links; if found, the multi-link management module can switch the currently faulty primary communication link to the backup communication link and use the backup communication link as the new primary communication link for communication. The above technical solution overcomes the problem that the existing management device for centrally controlling industrial control terminals fails, resulting in the industrial control terminals being unable to receive any instructions and the system being almost paralyzed. Even if the primary communication link where the industrial control terminal is located fails, there is still a backup communication link that can replace the primary communication link for communication, increasing the robustness of the connection between the industrial control terminal and the management center, reducing the dependence on network devices or network environments, and enabling the entire system to perform information interaction and centralized control safely and stably. By setting a registration module, an information sending module, a multi-link management module, and a heartbeat detection module in the industrial control terminal, a communication environment is pre-deployed in the industrial control terminal in advance. In specific applications, only the communication information needs to be sent to the successfully registered management center, without backing up the communication information in multiple management centers, reducing the redundancy of the system.

[0055] Based on the above embodiments, further, the management center includes:

[0056] The number of the management centers is one, and this management center is configured with multiple network cards, where each network card corresponds to a communication protocol address;

[0057] Or, the number of the management centers is multiple, and each management center is configured with one network card, where each network card corresponds to a communication protocol address;

[0058] Or, the number of the management centers is multiple, and each management center is configured with multiple network cards, where each network card corresponds to a communication protocol address.

[0059] Based on the above embodiments, further, after the multi-link management module switches the target backup communication link as the new primary communication link, the multi-link management module determines whether the first management center corresponding to the target backup communication protocol address is the same as the second management center corresponding to the current communication protocol address; if the same, it is determined that the new primary communication link communicates based on the configuration information stored in the second management center, where the target backup communication protocol address is the communication protocol address corresponding to the target backup communication link.

[0060] Based on the above embodiments, further, if it is determined that the first management center and the second management center are different, the multi-link management module notifies the registration module to register on the target backup communication protocol address; the registration module is also used to register on the target backup communication protocol address; if the registration is successful, the information sending module is also used to send the configuration information to the first management center through the target backup communication protocol address; the multi-link management module is also used to determine that the new primary communication link communicates based on the configuration information stored in the first management center.

[0061] Based on the above embodiments, further, the registration module is used for the corresponding industrial control terminal to register on the current communication protocol address, including: the registration module receives the information of the management center to be registered, generates a registration request based on the information of the management center to be registered, and sends the registration request to the management center to be registered, where the information of the management center to be registered includes the current communication protocol address and the corresponding port information, or the target backup communication protocol address and the corresponding port information; the management center to be registered is used to send the registration result to the registration module in response to the registration request, where the registration result includes successful registration and failed registration; the registration module is also used to, if the registration fails, re-determine the registration strategy according to the error information until the industrial control terminal is successfully registered.

[0062] Based on the above embodiments, further, the heartbeat detection module detects whether the primary communication link is communicating normally, including: after the industrial control terminal is successfully registered in the management center to be registered, the heartbeat detection module creates an encrypted channel between the industrial control terminal and the registered management center, and every preset time period, sends heartbeat information to the registered management center through the encrypted channel, and detects whether the heartbeat response from the registered management center is received. If it is detected that the heartbeat response is not received for a continuous preset number of times, it is determined that the primary communication link cannot communicate normally, otherwise, it is determined that the primary communication link is communicating normally, and the steps of sending heartbeat information to the registered management center through the encrypted channel and detecting whether the heartbeat response from the registered management center is received are repeated every preset time period until it is determined that the primary communication link cannot communicate normally.

[0063] Based on the above embodiments, further, the heartbeat information includes an encryption certificate, a physical address generation code of the industrial control terminal, a communication protocol address of the industrial control terminal, and a media access control address of the industrial control terminal;

[0064] Before detecting whether the heartbeat response from the registered management center is received, the following steps are also included: after receiving the heartbeat information, the registered management center matches the heartbeat information with the corresponding information in the configuration information of the industrial control terminal. If the matching is successful, the heartbeat response is sent to the heartbeat detection module through the encrypted channel.

[0065] Based on the above embodiments, further, each industrial control terminal further includes a file download module and a transmission module, where: after the information sending module sends the configuration information in the industrial control terminal to the management center through the current communication protocol address, the file download module downloads the configuration information to be used from the registered management center, where the registered management center stores the configuration information of all industrial control terminals that have been successfully registered.

[0066] During the communication between the industrial control terminal and the management center through the main communication link, the transmission module performs data transmission.

[0067] Based on the above embodiments, further, the configuration information of each industrial control terminal includes a whitelist library, where the whitelist library includes process paths, process names, parent process names, and process file hash values.

[0068] Based on the above embodiments, further, each industrial control terminal further includes an uninstallation module. If the corresponding industrial control terminal has not been registered with other management centers before registering with the current registered management center, the uninstallation module sends a first uninstallation instruction to the current registered management center after the communication ends; the current registered management center deletes the configuration file of the corresponding industrial control terminal according to the first uninstallation instruction.

[0069] If the corresponding industrial control terminal has been registered with an interrupted management center before registering with the current registered management center, the heartbeat detection module determines whether the corresponding industrial control terminal communicates normally with the interrupted management center. If it does, the uninstallation module sends a second uninstallation instruction to the interrupted management center; the interrupted management center deletes the configuration file of the corresponding industrial control terminal according to the second uninstallation instruction; if not, the system controls to delete the configuration file of the corresponding industrial control terminal in the interrupted management center.

[0070] The multi-link management method provided by the embodiments of the present invention can be executed by the multi-link management system provided by the device embodiments of the present invention. The execution steps and beneficial effects are not described herein again.

[0071] In summary, for the multi-link management system and method provided by the present invention, a multi-link management module is set in each industrial control terminal, and multiple backup communication links are configured for each industrial control terminal; when the established primary communication link fails, it can be detected by the set heartbeat detection module, and the heartbeat detection module can also find a backup communication link that can communicate normally among the multiple backup communication links; if found, the multi-link management module can switch the current faulty primary communication link to the backup communication link and use the backup communication link as the new primary communication link for communication. The above technical solution overcomes the problem that in the prior art, due to the failure of the management device for centrally controlling industrial control terminals, the industrial control terminals cannot receive any instructions and the system is almost paralyzed. Even if the primary communication link where the industrial control terminal is located fails, there is still a backup communication link that can replace the primary communication link for communication, increasing the robustness of the connection between the industrial control terminal and the management center, reducing the dependence on network devices or network environments, and enabling the entire system to perform information interaction and centralized control safely and stably.

[0072] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still modify the technical solutions described in the foregoing embodiments or perform equivalent replacements for some of the technical features; and these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A multi-link management system, characterized in that, It includes at least one industrial control terminal and a management center. Each industrial control terminal includes a registration module, an information sending module, a multi-link management module, and a heartbeat detection module. The management center has multiple communication protocol addresses for configuration with the industrial control terminals, where: The registration module is used for the corresponding industrial control terminal to register on the current communication protocol address; The information sending module is used to, if the registration of the industrial control terminal is successful, send the configuration information in the industrial control terminal to the management center through the current communication protocol address, and establish a primary communication link between the industrial control terminal and the management center; The multi-link management module is used to configure the multiple communication protocol addresses for the industrial control terminal to form multiple backup communication link configurations between the industrial control terminal and the management center; The heartbeat detection module is used to detect whether the primary communication link is communicating normally. If it is normal, continue to monitor. If it is not normal, search for a target backup communication link with normal communication among the multiple backup communication link configurations. If found, notify the multi-link management module to perform link switching; The multi-link management module is used to switch the target backup communication link as the new primary communication link, so that the industrial control terminal and the management center communicate through the new primary communication link; The multi-link management module is also used to determine whether the first management center corresponding to the target backup communication protocol address is the same as the second management center corresponding to the current communication protocol address; if the same, determine that the new primary communication link communicates based on the configuration information stored in the second management center, where the target backup communication protocol address is the communication protocol address corresponding to the target backup communication link.

2. The system according to claim 1, wherein The management center includes: The number of management centers is one, and this management center is configured with multiple network cards, where each network card corresponds to a communication protocol address; Or, the number of management centers is multiple, and each management center is configured with one network card, where each network card corresponds to a communication protocol address; Or, the number of management centers is multiple, and each management center is configured with multiple network cards, where each network card corresponds to a communication protocol address.

3. The system according to claim 1, characterized in that The multi-link management module is also used to, if it determines that the first management center and the second management center are different, notify the registration module to register on the target backup communication protocol address; The registration module is also used to register on the target backup communication protocol address; If the registration is successful, the information sending module is also used to send the configuration information to the first management center through the target backup communication protocol address; The multi-link management module is also used to determine that the new primary communication link communicates based on the configuration information stored in the first management center.

4. The system according to any one of claims 1 to 3, characterized in that The registration module is used to receive the information of the management center to be registered, generate a registration request based on the information of the management center to be registered, and send the registration request to the management center to be registered, where the information of the management center to be registered includes the current communication protocol address and the corresponding port information, or the target backup communication protocol address and the corresponding port information; The management center to be registered is used to send the registration result to the registration module in response to the registration request, where the registration result includes successful registration and failed registration; The registration module is also used to re-determine the registration strategy according to the error information if the registration fails until the industrial control terminal is successfully registered.

5. The system according to claim 4, wherein The heartbeat detection module is used to create an encrypted channel between the industrial control terminal and the registered management center after the industrial control terminal is successfully registered with the management center to be registered, send heartbeat information to the registered management center through the encrypted channel at every preset time interval, and detect whether the heartbeat response from the registered management center is received. If it is detected that the heartbeat response is not received for a continuous preset number of times, it is determined that the main communication link cannot communicate normally; otherwise, it is determined that the main communication link communicates normally. Repeat the steps of sending heartbeat information to the registered management center through the encrypted channel at every preset time interval and detecting whether the heartbeat response from the registered management center is received until it is determined that the main communication link cannot communicate normally.

6. The system according to claim 5, wherein The heartbeat information includes an encryption certificate, a physical address generation code of the industrial control terminal, a communication protocol address of the industrial control terminal, and a media access control address of the industrial control terminal; The registered management center is used to match the heartbeat information with the corresponding information in the configuration information of the industrial control terminal after receiving the heartbeat information. If the match is successful, the heartbeat response is sent to the heartbeat detection module through the encrypted channel.

7. The system according to any one of claims 1 to 3, characterized in that, Each industrial control terminal further includes a file download module and a transmission module, where: The file download module is used to download the configuration information to be used from the registered management center, where the registered management center stores the configuration information of all the industrial control terminals that have been successfully registered; The transmission module is used for data transmission between the industrial control terminal and the management center through the main communication link.

8. The system according to any one of claims 1 to 3, characterized in that, Each industrial control terminal further includes an uninstallation module. If the corresponding industrial control terminal has not been registered with other management centers before being registered with the current registered management center, the uninstallation module is used to send a first uninstallation instruction to the current registered management center after the communication ends; the current registered management center is used to delete the configuration file of the corresponding industrial control terminal according to the first uninstallation instruction; If the corresponding industrial control terminal has been registered with the interrupted management center before registering with the current registered management center, the heartbeat detection module is further configured to determine whether the corresponding industrial control terminal communicates normally with the interrupted management center. If so, the uninstallation module is further configured to send a second uninstallation instruction to the interrupted management center; the interrupted management center is configured to delete the configuration file of the corresponding industrial control terminal according to the second uninstallation instruction; if not, the system controls to delete the configuration file of the corresponding industrial control terminal in the interrupted management center.

9. A multi-link management method, characterized in that, Executed by the multi-link management system according to any one of claims 1-8, the system includes at least one industrial control terminal and a management center. Each industrial control terminal includes a registration module, an information sending module, a multi-link management module, and a heartbeat detection module. The management center has multiple communication protocol addresses for configuring with the industrial control terminal. The method includes: The corresponding industrial control terminal uses the registration module to register on the current communication protocol address; If the registration of the industrial control terminal is successful, the information sending module sends the configuration information in the industrial control terminal to the management center through the current communication protocol address to establish a primary communication link between the industrial control terminal and the management center; The multi-link management module configures the multiple communication protocol addresses for the industrial control terminal to form multiple backup communication link configurations between the industrial control terminal and the management center; The heartbeat detection module detects whether the primary communication link communicates normally. If so, continue to monitor. If not, find a target backup communication link that communicates normally among the multiple backup communication link configurations. If found, notify the multi-link management module to perform link switching; The multi-link management module switches the target backup communication link as the new primary communication link so that the industrial control terminal and the management center communicate through the new primary communication link.

Images