A terminal verification device for a safety system of a new energy power plant

Abstract

The present application discloses a terminal verification device for a new energy power plant safety system applied in the field of new energy power plants. Through the setting of online and offline synchronous verification modules, users need to pass the verification of the offline verification module first to activate the verification device, and then they can continue to perform online verification on the verification device. By setting the offline verification module, a new barrier is provided for data security. When it fails, users cannot perform online verification operations, which greatly improves data security compared with the prior art and effectively avoids data tampering. The online verification module establishes a rule library on the basis of the control module, making any operation of the system a transmission method that must conform to the rules. The operations and commands of users need to be verified by the rule library, and operations and commands that do not conform to the rules cannot run, thus further providing a security barrier for data and further protecting the data from being tampered with.

Description

Technical Field

[0001] This application relates to the field of new energy power plants, and particularly to a terminal verification device for a new energy power plant safety system. Background Art

[0002] The industrialization and informatization of the power industry started early, developed rapidly, and reached a high level of maturity. There are more and more network-based business applications. While the network brings convenience, its openness also introduces huge security risks. In recent years, frequent industrial control security incidents and incidents of Internet leakage or data tampering have made it increasingly important to strengthen the security protection of the network boundary.

[0003] To overcome the security of new energy power plant data, generally, verification is added to the program through the blockchain and the whitelist, so that only the programs within the whitelist and passing the verification can run, thereby protecting the data and reducing the development of tampering events. However, in the prior art, the operation verification of the new energy power plant data terminal is relatively simple, resulting in being easily broken through and having a poor anti-tampering effect on the data. Summary of the Invention

[0004] The purpose of this application is to improve the rigor of terminal instruction and program verification, greatly improve data security, and effectively avoid being tampered with. Compared with the prior art, a terminal verification device for a new energy power plant safety system is provided, including an online verification module and an offline verification module. The online verification module includes a control module and a rule library established based on the control module. The online verification module also includes a trusted cloud service, a blockchain, and a security management platform. The security application program is pushed to the trusted cloud service through the security management platform, and the Hash is calculated, authorized, and then distributed to each intelligent terminal device. The service data on the blockchain node is managed through the security management platform to ensure the consistency of ACL data. A security kernel model is installed on the intelligent terminal, and the OP instructions on the intelligent terminal will be forcibly intercepted and verified by the control module according to the security rule library. The verification device uses the LSM security module and the HOOK technology to implement the interception verification control of the ACL permission access of the terminal.

[0005] The specific method of interception verification includes the following steps:

[0006] S1. Establish a system trusted program hash library, and only the programs that are in the rule library and allowed to execute can run;

[0007] S2. Intercept and protect unauthorized external storage devices and newly added input / output hardware devices;

[0008] S3. The access of processes to files in the system is not restricted by default. Files protected by mandatory access control rules can only be accessed by programs allowed by the rules;

[0009] S4. By default, other processes in the system can access a process without restriction. For a process protected by mandatory access control rules, only programs permitted by the rules (such as kill, debug, etc.) can access it;

[0010] S5. By default, a process has no restrictions on network communication;

[0011] S6. For a network protected by mandatory access control rules, only programs permitted by the rules can access it.

[0012] Through the setting of the verification module synchronized online and offline, before the user operates on the terminal, it is necessary to first pass the verification of the offline verification module to activate the verification device, and then the user can continue to perform online verification on the verification device. Through the setting of the offline verification module, a new barrier is provided for data security. When it fails, the user cannot perform online verification operations, which greatly improves data security compared with the prior art and effectively prevents data from being tampered with. The online verification module establishes a rule library based on the control module, making any operation of the system a transfer method that must conform to the rules. The operations and commands of the user need to be verified by the rule library, and operations and commands that do not conform to the rules cannot run, thus continuing to provide a security barrier for data and effectively protecting data from being easily tampered with.

[0013] Furthermore, any operation on the terminal verification device used by the security system becomes a transfer method that must conform to the rules. The operations and commands of the user are first verified by the rule library. If the rules permit, they are transferred to the system access interface; otherwise, the user's instructions are rejected.

[0014] Furthermore, the rule library includes two forms: standard security template rules provided by the security management platform and custom security rules. The custom security rules are custom-set according to the needs of the new energy power plant security system.

[0015] Furthermore, in step S1, the running process of the permitted program is as follows: when a program is executed, it first needs to access a certain executable file. After the system call, the Linux security module is started for Hook operation; if the current operation is not to execute a program, it can pass; if the current operation is to start a program, then calculate the MD5 of the executable file, and use the MD5 value to compare with the whitelist in the trusted software library and the MD5 of the trusted program. If the comparison is consistent, the verification can pass and the program is executed; otherwise, record the error log and reject the program execution.

[0016] Furthermore, the whitelist service adopts blockchain technology, which is decentralized, establishes a trust mechanism, shares data, ensures data consistency, and prevents tampering.

[0017] Further, the offline verification module includes a verification slot provided on the tabletop of the terminal body and a verification rod matching the verification slot. The verification slot includes an inner slot and a limiting slot at the mouth of the inner slot. A double-layer moving rod is fixedly connected to the bottom end inside the inner slot. The verification rod includes an outer moving rod matching the inner slot and an inner inserting rod matching the limiting slot. A square slot matching the double-layer moving rod is drilled inside the inner inserting rod. Before operation, the user needs to insert the verification rod into the verification slot for offline verification. Only on the basis of successful offline verification can online verification continue, effectively preventing the situation where data is illegally tampered with due to the operation of external personnel.

[0018] Further, the double-layer moving rod includes a light-transmitting circular rod at the center and four outer light-blocking layers respectively slidably connected to the outer ends of the light-transmitting circular rod. The four outer light-blocking layers enclose a cuboid with a square cross-section. A light-transmitting interlayer is fixedly embedded in the middle of the outer light-blocking layer. A sub-electrical contact is installed at the upper end of the light-transmitting interlayer. Two mother electrical contacts are installed at the top end inside the square slot. The two mother electrical contacts are respectively matched with the positions of two cross-corresponding light-transmitting interlayers. The light-transmitting circular rod and the inner inserting rod are both transparent structures, allowing laser beams to pass through both of them. The outer light-blocking layer is a hard opaque structure with light-blocking performance. When the verification rod is just inserted into the verification slot, the laser beam is blocked by the outer light-blocking layer. At this time, only the verification switch is turned on, and the laser beam is not received by the receiving end of the laser device, so the offline verification fails. The light-transmitting interlayer is made of electrochromic glass. When the verification rod is inserted into the verification slot, the two mother electrical contacts on the verification rod will contact two of the opposite sub-electrical contacts, causing the light-transmitting interlayer to be powered on. Then, two opposite diagonal light-transmitting interlayers become transparent. At this time, the verification rod can be rotated to make all the outer light-blocking layers rotate with it. When the light-transmitting interlayer coincides with the laser beam, the offline verification is passed.

[0019] Further, a laser device is installed on the inner wall of the inner slot. The connection line between the emitting end and the receiving end of the laser device passes through the central axis of the double-layer moving rod. A verification switch is installed at the upper end of the light-transmitting circular rod. Both the verification switch and the laser device are signal-connected to the control module inside the terminal body.

[0020] Further, a horizontal marking line is engraved at the mouth of the inner slot, and four vertical marking lines respectively corresponding to the vertical sides of the square slot are engraved on the outer surface of the outer moving rod. When inserting the verification rod into the verification slot or taking it out of the verification slot, it is necessary to control the position of one of the vertical marking lines to correspond to the horizontal marking line. When the horizontal marking line and the vertical marking line are in corresponding positions, the vertical plane of the cuboid is perpendicular to the laser beam emitted by the laser device, so that the initial position of the verification rod when inserted into the verification slot is such that the laser beam of the laser device does not correspond to the light-transmitting interlayer, and the receiving end of the laser device cannot receive the laser signal. Only when the verification rod is rotated to make the laser beam emitted by the emitting end of the laser device coincide with the light-transmitting interlayer can the receiving end receive the signal. At the same time, when the verification switch is squeezed and starts, the offline verification can be passed.

[0021] Compared with the prior art, the advantages of the present application are as follows:

[0022] (1) By setting up synchronous online and offline verification modules, before the user operates the terminal, they need to pass the verification of the offline verification module first to activate the verification device, and then the user can continue with the online verification on the verification device. By setting up the offline verification module, a new barrier is provided for data security. When it fails, the user cannot perform online verification operations, greatly improving data security compared with the prior art and effectively preventing data tampering. The online verification module establishes a rule library based on the control module, making any operation of the system a transmission method that must conform to the rules. The operations and commands of the user need to be verified by the rule library, and operations and commands that do not conform to the rules cannot run, thus further providing a security barrier for data and effectively protecting data from being tampered with.

[0023] (2) Before the user operates, they need to insert the verification rod into the verification slot for offline verification. Only based on the successful offline verification can they continue with the online verification, effectively ensuring that data is not illegally tampered due to the operation of external personnel.

[0024] (3) When the verification rod is just inserted into the verification slot, the laser beam is blocked by the outer light-blocking layer. At this time, only the verification switch is turned on, and the laser beam is not received by the receiving end of the laser device, so the offline verification fails. The light-transmitting interlayer is made of electrochromic glass. When the verification rod is inserted into the verification slot, the two female electrical contacts on the verification rod will contact two of the corresponding male electrical contacts, making the light-transmitting interlayer energized, and then the light-transmitting interlayers at two opposite diagonals become transparent. At this time, the verification rod can be rotated to drive all the outer light-blocking layers to rotate with it. When the light-transmitting interlayer coincides with the laser beam, the offline verification passes.

[0025] (4) When the verification rod is initially inserted into the verification slot, the laser beam of the laser device does not correspond to the light-transmitting interlayer, so the receiving end of the laser device cannot receive the laser signal. Only when the verification slot is rotated to make the laser beam of the transmitting end of the laser device coincide with the light-transmitting interlayer can the receiving end receive the signal. At the same time, when the verification switch is squeezed and starts, the offline verification can pass. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 is the main framework diagram of the online verification module of the present application;

[0027] Figure 2 is the schematic diagram of the control flow when the terminal of the present application is accessed;

[0028] Figure 3 is the flowchart of the program of the present application when it is securely executed;

[0029] Figure 4 This is the main structural schematic diagram of the offline verification module of this application;

[0030] Figure 5 This is the three-dimensional placement structural schematic diagram of the verification rod of this application;

[0031] Figure 6 This is the structural schematic diagram of the verification slot of this application;

[0032] Figure 7 This is the structural schematic diagram of the cross-section of the double-layer moving rod of this application;

[0033] Figure 8 This is the structural schematic diagram when the outer layer of the double-layer moving rod of this application rotates to allow the laser beam to pass through.

[0034] Explanation of the reference numerals in the figure:

[0035] 1 Terminal body, 2 Verification rod, 21 Outer moving rod, 22 Inner inserted rod, 23 Square groove, 3 Verification slot, 31 Inner insertion slot, 32 Limiting slot, 4 Double-layer moving rod, 41 Translucent round rod, 42 Outer light-blocking layer, 43 Translucent interlayer, 51 Horizontal marking line, 52 Vertical marking line, 6 Sub-electrical contact, 7 Laser. Specific implementation manners

[0036] Next, the technical solutions in the embodiments of this application will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of this application. Obviously, the described embodiments are only a part of the embodiments of this application, rather than all the embodiments. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without making creative efforts shall fall within the protection scope of this application.

[0037] Embodiment 1:

[0038] This application discloses a terminal verification device for a new energy power plant safety system, including an online verification module and an offline verification module. Please refer to Figure 1 , the online verification module includes a control module and a rule library established based on the control module. The online verification module also includes a trusted cloud service, a blockchain, and a security management platform. The security application program is pushed to the trusted cloud service through the security management platform, and calculates Hash, authorizes, and distributes it to each intelligent terminal device. The service data on the blockchain node is managed through the security management platform to ensure the consistency of ACL data. The security kernel model is installed on the intelligent terminal, and the OP instructions on the intelligent terminal will be forcibly intercepted and verified by the control module according to the security rule library. The verification device uses the LSM security module and adopts the HOOK technology to implement the interception verification control of the ACL permission access of the terminal;

[0039] The specific method for interception verification includes the following steps:

[0040] S1. Establish a hash library of trusted programs in the system. Only programs that are in the rule library and are allowed to execute can run. The rule library includes two forms: standard security template rules provided by the security management platform and custom security rules. The custom security rules are customized according to the needs of the new energy power plant security system;

[0041] S2. Intercept and protect unauthorized external storage devices and newly added input / output hardware devices;

[0042] S3. By default, file access by processes in the system is not restricted. Files protected by mandatory access control rules can only be accessed by programs permitted by the rules;

[0043] S4. By default, process access to other processes in the system is not restricted. Processes protected by mandatory access control rules can only be accessed by programs permitted by the rules (such as kill, debug, etc.);

[0044] S5. By default, process access to network communication is not restricted;

[0045] S6. Networks protected by mandatory access control rules can only be accessed by programs permitted by the rules.

[0046] Please refer to Figure 2 , any operation on the terminal verification device used by the security system becomes a transfer method that must comply with the rules. The operations and commands of the user first go through the blockchain-based whitelist ACL verification of the rule library. If the rules permit, they are transferred to the system access interface; otherwise, the user's instructions are rejected.

[0047] As Figure 3 , in step S1, the running process of the permitted program is as follows: when a program is executed, it first needs to access an executable file. After the system call, the Linux security module is started for Hook operation; if the current operation is not the execution of a program, it can pass; if the current operation is starting a program, then calculate the MD5 of the executable file, and use the MD5 value to compare with the whitelist in the trusted software library and the MD5 of the trusted program. If the comparison is consistent, it can pass the verification and the program is executed; otherwise, record an error log and reject the program execution.

[0048] The whitelist service uses blockchain technology, is decentralized, establishes a trust mechanism, shares data, ensures data consistency, and prevents tampering.

[0049] Please refer to Figure 4 , the offline verification module includes a verification slot 3 set on the tabletop of the terminal body 1 and a verification rod 2 matching the verification slot. As Figure 5The verification rod 2 includes an outer movable rod 21 that matches the inner slot 31 and an inner insert rod 22 that matches the limit slot 32. The inner insert rod 22 has a square groove 23 that matches the double-layer movable rod 4. Figure 6 The verification slot includes an inner slot 31 and a limit slot 32 located at the mouth of the inner slot 31. The bottom end of the inner slot 31 is fixedly connected to a double-layer movable rod 4. A laser 7 is installed on the inner wall of the inner slot 31. The connection line between the transmitting end and the receiving end of the laser 7 passes through the central axis of the double-layer movable rod 4. A verification switch is installed on the upper end of the light-transmitting round rod 41. The verification switch and the laser 7 are both connected to the control module signal in the terminal body 1. Before operating, the user needs to insert the verification rod 2 into the verification slot 3 for offline verification. Only after the offline verification is passed can the online verification be continued, effectively preventing the illegal tampering of data caused by outsider operation.

[0050] Please refer to Figure 7 The double-layer movable rod 4 includes a light-transmitting round rod 41 in the center and four outer light-blocking layers 42 that are slidably connected to the outer ends of the light-transmitting round rod 41. The four outer light-blocking layers 42 form a rectangular parallelepiped with a square cross-section. A light-transmitting interlayer 43 is fixedly embedded in the middle of the outer light-blocking layer 42. A sub-electrical contact 6 is installed on the upper end of the light-transmitting interlayer 43. Two female electric contacts are installed at the top end of the square groove 23. The two female electric contacts are respectively matched with the positions of the two cross-corresponding light-transmitting interlayers 43. The light-transmitting round rod 41 and the inner rod 22 are both transparent structures, so that both can be passed through by the laser beam. The outer light-blocking layer 42 is a hard opaque structure with light-shielding performance, so that the verification When the rod 2 is just inserted into the verification slot 3, the laser beam is blocked by the external light-blocking layer 42. At this time, only the verification switch is turned on, and the laser beam is not received by the receiving end of the laser 7. The offline verification cannot pass. The light-transmitting interlayer 43 is made of electro-atomized glass. When the verification rod 2 is inserted into the verification slot 3, the two female electrical contacts on the verification rod 2 will contact two of the opposite sub-electrical contacts 6, so that the light-transmitting interlayer 43 is energized, and then the light-transmitting interlayers 43 at two opposite diagonals are in a transparent state. At this time, the verification rod 2 can be rotated to drive multiple external light-blocking layers 42 to rotate with it. When the light-transmitting interlayer 43 coincides with the laser beam, the offline verification passes.

[0051] It is also worth noting that in order to avoid the accidental passing of offline verification, the receiving end of the laser 7 can be programmed through logic language to pass the offline verification only when it stably receives the laser beam for more than 5-10 seconds.

[0052] like Figure 4-5, a horizontal marking line 51 is engraved at the mouth of the inner slot 31, and four vertical marking lines 52 corresponding to the vertical sides of the square groove 23 are engraved on the outer surface of the outer moving rod 21. When inserting the verification rod 2 into the verification slot 3 or taking it out of the verification slot 3, it is necessary to control the position of one of the vertical marking lines 52 to correspond to the horizontal marking line 51. When the horizontal marking line 51 and the vertical marking line 52 are in corresponding positions, the vertical plane of the cuboid is perpendicular to the laser beam emitted by the laser 7, so that the initial position of the laser beam of the laser 7 does not correspond to the light-transmitting interlayer 43 when the verification rod 2 is inserted into the verification slot 3, and the receiving end of the laser 7 cannot receive the laser signal. Only when the verification slot 3 is rotated to make the laser beam emitted by the emitting end of the laser 7 coincide with the light-transmitting interlayer 43 can the receiving end receive the signal. At the same time, when the verification switch is squeezed and starts, offline verification can be carried out.

[0053] During verification, just rotate the horizontal marking line 51 to the position between the two vertical marking lines 52, and the rotation angle is an odd multiple of 45°. When the first rotation and positioning cannot pass the verification, just rotate 90° forward or backward to pass the verification again.

[0054] Through the setting of the online and offline synchronous verification module, before the user operates the terminal, it is necessary to pass the verification of the offline verification module first to activate the verification device, and the user can continue to perform online verification on the verification device. Through the setting of the offline verification module, a new barrier is provided for data security. When it fails to pass, the user cannot perform the operation of online verification, which greatly improves data security compared with the prior art and effectively avoids data tampering. The online verification module establishes a rule library based on the control module, making any operation of the system a transfer method that must conform to the rules. The operations and commands of the user need to be verified by the rule library, and the operations and commands that do not conform to the rules cannot run, thus providing another security barrier for data and effectively protecting the data from being tampered with.

[0055] The above is only a preferred specific implementation manner of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art within the technical scope disclosed by the present application, according to the technical solution and its improved concept of the present application, makes equivalent replacement or change, and should be covered by the protection scope of the present application.

Claims

1. A terminal verification device for a new energy power plant safety system, comprising an online verification module and an offline verification module, characterized in that: The online verification module includes a control module and a rule base established on the basis of the control module. The online verification module also includes a trusted cloud service, a blockchain and a security management platform. The security application is pushed to the trusted cloud service through the security management platform, and the hash is calculated and authorized, and then sent to each smart terminal device. The service data on the blockchain node is managed by the security management platform to ensure the consistency of ACL data. The smart terminal is equipped with a security kernel model. The OP instruction on the smart terminal will be forcibly intercepted and verified by the control module according to the security rule base. The verification device uses the LSM security module and the HOOK technology to implement the interception and verification control of the terminal's ACL permission access; The offline verification module comprises a verification slot (3) arranged on the table of the terminal body (1) and a verification rod (2) matched with the verification slot, the verification slot comprises an inner slot (31) and a limiting slot (32) located at the mouth of the inner slot (31), a double-layer movable rod (4) is fixedly connected to the inner bottom end of the inner slot (31), the verification rod (2) comprises an outer movable rod (21) matched with the inner slot (31) and an inner insert rod (22) matched with the limiting slot (32), and a square slot (23) matched with the double-layer movable rod (4) is bored in the inner insert rod (22); The double-layer movable rod (4) comprises a light-transmitting round rod (41) located in the center and four outer light-blocking layers (42) respectively connected in a sliding manner to the outer ends of the light-transmitting round rod (41); the four outer light-blocking layers (42) form a rectangular parallelepiped with a square cross-section; a light-transmitting interlayer (43) is fixedly embedded in the middle of the outer light-blocking layer (42); a sub-electrical contact (6) is installed at the upper end of the light-transmitting interlayer (43); two female electric contacts are installed at the top end of the square groove (23); the two female electric contacts are respectively matched with the positions of two cross-corresponding light-transmitting interlayers (43); The mouth of the inner slot (31) is engraved with a horizontal marking line (51), and the outer surface of the outer movable rod (21) is engraved with four vertical marking lines (52) corresponding to the vertical sides of the square slot (23). When the verification rod (2) is inserted into the verification slot (3) or removed from the verification slot (3), the position of one of the vertical marking lines (52) is controlled to correspond to the horizontal marking line (51), and when the horizontal marking line (51) corresponds to the position of the vertical marking line (52), the vertical surface of the cuboid is perpendicular to the laser beam emitted by the laser (7); The specific method of interception verification includes the following steps: S1. Establish a system trusted program hash library. Only programs in the rule library and allowed to be executed can be run. S2. Block and protect unauthorized external storage devices and newly added input and output hardware devices; S3. By default, processes have no restrictions on file access in the system. Files protected by mandatory access control rules can only be accessed by programs permitted by the rules. S4. By default, a process has no restrictions on access to other processes in the system. A process protected by mandatory access control rules can only be accessed by programs permitted by the rules. S5. The process has no restrictions on network communication by default; S6. A network protected by mandatory access control rules can only be accessed by programs permitted by the rules.

2. A terminal verification device for a new energy power plant safety system according to claim 1, characterized in that: Any operation on the terminal verification device used by the security system must comply with the rules. The user's operations and commands are first verified by the rule base. If the rules allow, they are passed to the system access interface. Otherwise, the user instructions are rejected.

3. A terminal verification device for a new energy power plant safety system according to claim 1, characterized in that: The rule base includes two forms: standard security template rules provided by the security management platform and customized security rules. The customized security rules are customized according to the needs of the new energy power plant safety system.

4. A terminal verification device for a new energy power plant safety system according to claim 1, characterized in that: In step S1, the running process of the program allowed to be executed is as follows: when a program is executed, it first needs to access a certain executable file, and after the system call, the Linux security module is started to perform the Hook operation; if the current operation is not to execute a program, it can pass; if the current operation is to start a program, then the MD5 of the executable file is calculated, and the MD5 value is compared with the whitelist in the trusted software library and the MD5 of the trusted program. If the comparison is consistent, it can pass the verification and the program is executed; otherwise, an error log is recorded and the program execution is rejected.

5. A terminal verification device for a new energy power plant safety system according to claim 1, characterized in that: It also includes a whitelist service, which uses blockchain technology, decentralization, establishes a trust mechanism, shares data, ensures data consistency, and prevents tampering.

6. A terminal verification device for a new energy power plant safety system according to claim 1, characterized in that: The light-transmitting round rod (41) and the inner inserting rod (22) are both transparent structures, the outer light-blocking layer (42) is a hard opaque structure, and the light-transmitting interlayer (43) is made of electrically atomized glass.

7. A terminal verification device for a new energy power plant safety system according to claim 6, characterized in that: A laser (7) is installed on the inner wall of the inner slot (31), and a line connecting the transmitting end and the receiving end of the laser (7) passes through the central axis of the double-layer movable rod (4). A verification switch is installed on the upper end of the light-transmitting round rod (41), and both the verification switch and the laser (7) are connected to the control module signal in the terminal body (1).

Images