Oil and gas pipeline information physical security intelligent risk identification method, device and equipment

Abstract

The embodiment of the application provides a kind of oil and gas pipeline information physical security intelligent risk identification method, device and equipment, the method comprises: by constructing the system model corresponding to oil and gas pipeline system;Predict the accident that information security threat system operation can produce possibly, and corresponding processing strategy.According to the control logic relationship between the nodes of oil and gas pipeline system, the oil and gas pipeline system model is constructed;And determine the executable action of the node in model, accessible information and preparation information, make the feedback control relationship of model more concise;While according to the accident that model predicts information security threat attack system different node appears, improve the comprehensiveness of predicted risk accident, and according to the accident and the control logic relationship of node in model, corresponding processing strategy is formulated, improve the accuracy of strategy, to improve the ability of oil and gas pipeline system to deal with information security threat, improve the security of oil and gas pipeline system.

Description

TECHNICAL FIELD

[0001] The present application relates to the oil and gas field, and particularly relates to an oil and gas pipeline information physical security intelligent risk identification method, device and equipment. BACKGROUND

[0002] With the development of intelligent and digital pipeline systems, an oil and gas intelligent pipeline system combines a computer network, a control system and an oil and gas long-distance system. Since the intelligent pipeline needs to be connected to the Internet, the oil and gas intelligent system is exposed to an open system, and there may be factors threatening information security, which can destroy the information security in the system and affect the safety of the physical function in the system.

[0003] At present, the oil and gas intelligent pipeline information security risk analysis method mainly constructs a database according to known information security threats and accidents, builds a safety management system and a safety emergency system, but there is still a problem of poor safety. SUMMARY

[0004] The embodiments of the present application provide an oil and gas pipeline information physical security intelligent risk identification method, device and equipment to improve the safety of the system.

[0005] In a first aspect, the embodiments of the present application provide an oil and gas pipeline information physical security intelligent risk identification method, and the method comprises the following steps.

[0006] A system model corresponding to an oil and gas pipeline system is determined, wherein the system model comprises a plurality of levels, each level comprises at least one node, the node is used to represent a device or a person, and a directed connection line between the nodes is used to represent feedback information or control information.

[0007] According to the system model, executable actions, accessible information and preparation information corresponding to each node are determined, wherein the executable actions are control information executable by the node, the accessible information is information used by the node when performing an action, and the preparation information is control information of an upper level of the node.

[0008] According to the executable actions, the accessible information and the preparation information of each node, accidents possibly generated when the system runs and corresponding processing strategies are determined.

[0009] According to the accidents possibly generated and the corresponding processing strategies, when the accidents occur during the running of the system, the corresponding processing strategies are executed.

[0010] Optionally, the system model corresponding to the oil and gas pipeline system is determined, comprising the following steps.

[0011] An overall layout diagram of the oil and gas pipeline system is acquired.

[0012] determining at least one functional route of the oil and gas pipeline system according to the overall layout diagram;

[0013] determining the system model according to nodes contained in the at least one functional route;

[0014] wherein each functional route comprises at least one level of nodes.

[0015] Optionally, the at least one functional route comprises a production route, a safety emergency route, and a unified coordination route; and determining the at least one functional route of the oil and gas pipeline system according to the overall layout diagram comprises:

[0016] determining production equipment, safety emergency equipment, and unified coordination equipment in the oil and gas pipeline system;

[0017] determining the production route according to the production equipment and nodes having upstream and downstream relationships with the production equipment based on the overall layout diagram;

[0018] determining the safety emergency route according to the safety emergency equipment and nodes having upstream and downstream relationships with the safety emergency equipment;

[0019] determining the unified coordination route according to the unified coordination equipment and nodes having upstream and downstream relationships with the unified coordination equipment.

[0020] Optionally, determining accidents possibly generated during system operation and corresponding processing strategies according to executable actions, accessible information, and prepared information of each node comprises:

[0021] traversing nodes in the system model, and for each traversed node, determining changes in executable actions, accessible information, and prepared information of the node after the node is attacked by at least one type of information security threat, and determining accidents possibly generated during system operation according to the changes;

[0022] determining corresponding processing strategies according to the accidents possibly generated;

[0023] wherein the at least one type of information security threat comprises at least one of personnel operation errors, tampering with process parameters, and tampering with control information.

[0024] Optionally, for each node, determining changes in executable actions, accessible information, and prepared information of the node after the node is attacked by at least one type of information security threat, and determining accidents possibly generated during system operation according to the changes comprises:

[0025] For each node, after determining at least one type of information security threat attacking the node, a change of executable actions, accessible information and prepared information of the node occurs;

[0026] Determining whether the change will cause node failure, if yes, determining the accident caused by the change as the possible accident.

[0027] Optionally, determining a corresponding processing strategy according to the possible accident, including:

[0028] For each type of information security threat, according to the accident of the node after being attacked by the information security threat, determining a processing strategy of the node and / or related nodes, so that after executing the processing strategy, the executable actions, accessible information and prepared information of the node return to the state before being attacked, or the accident is eliminated;

[0029] Wherein, the related nodes are nodes of the previous level and / or the next level of the node.

[0030] In a second aspect, an embodiment of the present application provides an oil and gas pipeline information physical security intelligent risk identification device, the device comprising:

[0031] A first determining module is configured to determine a system model corresponding to an oil and gas pipeline system; wherein the system model comprises multiple levels, each level comprises at least one node, the node is used to represent equipment or personnel, and a directed connection line between nodes is used to represent feedback information or control information;

[0032] A second determining module is configured to determine, according to the system model, executable actions, accessible information and prepared information corresponding to each node; wherein the executable actions are control information executable by the node; the accessible information is information used by the node when executing actions; and the prepared information is control information of an upper level of the node;

[0033] A third determining module is configured to determine, according to the executable actions, accessible information and prepared information of each node, a possible accident occurring during system operation and a corresponding processing strategy;

[0034] An executing module is configured to execute, according to the possible accident and the corresponding processing strategy, the corresponding processing strategy when the accident occurs during system operation.

[0035] In a third aspect, an embodiment of the present application provides an electronic device, comprising a memory and at least one processor;

[0036] The memory stores computer execution instructions;

[0037] The at least one processor executes the computer-executable instructions stored in the memory, so that the at least one processor executes the oil and gas pipeline information physical security intelligent risk identification method according to any one of the preceding aspects.

[0038] In a fourth aspect, an embodiment of the present application provides a computer readable storage medium, wherein computer-executable instructions are stored in the computer readable storage medium, and when a processor executes the computer-executable instructions, the oil and gas pipeline information physical security intelligent risk identification method according to any one of the preceding aspects is implemented.

[0039] In a fifth aspect, an embodiment of the present application provides a computer program product, comprising a computer program, and when a processor executes the computer program, the oil and gas pipeline information physical security intelligent risk identification method according to any one of the preceding aspects is implemented.

[0040] The oil and gas pipeline information physical security intelligent risk identification method, device and equipment provided by the embodiment of the present application, the method comprises: determining a system model corresponding to an oil and gas pipeline system; determining an executable action, accessible information and preparation information corresponding to each node of the system model; determining an accident possibly generated during system operation and a corresponding processing strategy according to the executable action, accessible information and preparation information of each node; when the accident occurs during system operation, executing the corresponding processing strategy. By constructing the oil and gas pipeline system model according to the control logic relationship between the nodes of the oil and gas pipeline system, and determining the executable action, accessible information and preparation information of the nodes in the model, the feedback control relationship of the model is more concise; at the same time, according to the model, the accident occurring when an information security threat attacks different nodes of the system is predicted, the comprehensiveness of predicting the risk accident is improved, and according to the accident and the control logic relationship of the nodes in the model, the corresponding processing strategy is formulated, the accuracy of the strategy is improved, new risk accidents caused by redundant security measures or wrong security measures are avoided, so that the ability of the oil and gas pipeline system to cope with information security threats is improved, and the safety of the oil and gas pipeline system is improved. BRIEF DESCRIPTION OF DRAWINGS

[0041] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings needed to be used in the embodiments or prior art description. Obviously, the drawings in the following description are some embodiments of the present application, and for those skilled in the art, other drawings can also be obtained without creative labor.

[0042] Figure 1 An application scenario diagram provided by an embodiment of the present application;

[0043] Figure 2A flowchart of an accident processing method of an oil and gas smart pipeline system according to an embodiment of the present application is provided.

[0044] Figure 3 A flowchart of determining a system model corresponding to an oil and gas smart pipeline system according to an embodiment of the present application is provided.

[0045] Figure 4 A schematic diagram of an oil and gas smart pipeline system model according to an embodiment of the present application is provided.

[0046] Figure 5 A schematic diagram of a system model of a first station metering and pressure regulating according to an embodiment of the present application is provided.

[0047] Figure 6 A schematic diagram of a node role expression of a system model of a first station metering and pressure regulating according to an embodiment of the present application is provided.

[0048] Figure 7 A schematic diagram of a node role expression of a system model of a first station metering and pressure regulating according to another embodiment of the present application is provided.

[0049] Figure 8 A flowchart of determining an accident according to an embodiment of the present application is provided.

[0050] Figure 9 A user interface according to an embodiment of the present application is provided.

[0051] Figure 10 A structural block diagram of an accident processing device of an oil and gas smart pipeline according to an embodiment of the present application is provided.

[0052] Figure 11 A structural block diagram of an electronic device according to an embodiment of the present application is provided. DETAILED DESCRIPTION

[0053] In order to make the objects, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the protection scope of the present application.

[0054] The application can be used for oil and gas pipeline system information physical security intelligent risk identification, and processing of accidents caused by information security risks of the oil and gas pipeline system, especially the risk accidents caused by intelligent risks due to information security threats leading to physical device failure in the system. By identifying the source and cause of the intelligent information risk leading to the accident, targeted measures are developed to improve the safety of the oil and gas smart pipeline system.

[0055] The oil and gas pipeline system can also be referred to as an oil and gas smart pipeline system. The oil and gas smart pipeline system is based on standard unification and pipeline digitization, with the goal of comprehensive data unification, visual perception interaction, system fusion interconnection, precise supply matching, intelligent and efficient operation, and controllable prediction and early warning. Through the "end + cloud + big data" architecture, the pipeline full life cycle data is integrated to provide intelligent analysis and decision support, realize the visual, networked and intelligent management of the pipeline, and ultimately form an intelligent oil and gas pipeline network with comprehensive perception, automatic prediction, intelligent optimization and self-adjustment capabilities.

[0056] The oil and gas smart pipeline system combines computer networks, control systems and oil and gas long-distance systems. When considering the physical function safety of the oil and gas long-distance system, the information security threats that have an impact on the oil and gas long-distance physical system cannot be ignored. The information security threats that may arise from the oil and gas smart pipeline must be considered comprehensively, accurately monitored and warned, and countermeasures must be proposed. Since the smart pipeline needs to be connected to the Internet, the oil and gas smart system is exposed to an open system. In cyberspace, anyone can enter the oil and gas process site by breaking through the oil and gas smart pipeline system, which is equivalent to the real space. Although the oil and gas smart pipeline system protects the intruder from being harmed by accidents such as leaks, the intruder can change any process through the oil and gas smart pipeline system, posing an information threat to the oil and gas smart pipeline system.

[0057] Currently, the main information security risk analysis method for the oil and gas smart pipeline system is to build a database, establish a safety management system and a safety emergency system, build a digital model of the transmission and distribution system, construct a failure database, and build a safety management system from the perspective of gas pipeline integrity management. From the perspective of intelligent modules of the system, the influence of different intelligent module construction on improving the comprehensive safety of the pipeline network is analyzed. Through the construction goal of the smart gas management platform, the system architecture and emergency demand, safety emergency system are discussed, and the dynamic management, monitoring and early warning, and emergency rescue capabilities of urban gas are improved. From the perspective of emergency, a safety emergency system of the smart gas management platform is constructed.

[0058] However, these methods cannot detect new information threats, nor can they detect the source and cause of the risk, resulting in the inability to take targeted safety measures.

[0059] To solve the above problems, the present application provides an accident handling method of an oil and gas intelligent pipeline system. According to the composition of the oil and gas intelligent pipeline system, the functional logical relationship of different nodes in the oil and gas intelligent pipeline system is analyzed, and an oil and gas intelligent pipeline system model is established according to the information feedback and control relationship between different components. According to the model, intelligent information risk factors are identified from the perspective of node physical function failure, and the risk caused by the accident of the oil and gas pipeline system during operation is predicted through intelligent information physical security risk identification, and the accident scene is deduced, and the corresponding plan is made to improve the comprehensiveness of the identified intelligent information security risk, improve the effectiveness and accuracy of the risk handling strategy, and improve the safety of the entire oil and gas intelligent pipeline system.

[0060] Figure 1 An application scenario provided by an embodiment of the present application is provided. The oil and gas pipeline system includes various devices and various personnel responsible for different work. As shown in Figure 1 The control device can analyze the oil and gas pipeline system, establish a corresponding system model by simulating the state of the oil and gas pipeline system during normal operation, and simulate the system suffering from information security threats on the system model to deduce the risk accidents caused by the system model suffering from information security threats during operation, and formulate the corresponding handling strategy. The control device can display the system model and / or the handling strategy to the user, and the user can adjust or confirm. The control device communicates with the oil and gas pipeline system, and can send the corresponding handling strategy to the oil and gas pipeline system. The oil and gas pipeline system can execute the strategy to handle the accident and improve the safety of the oil and gas pipeline system.

[0061] Some embodiments of the present application will be described in detail below with reference to the accompanying drawings. The embodiments described below and the features in the embodiments can be combined with each other without conflict.

[0062] Figure 2 A flowchart of an accident handling method of an oil and gas intelligent pipeline system provided by an embodiment of the present application is shown in Figure 2 As shown in the figure, the accident handling method of the oil and gas intelligent pipeline system includes:

[0063] Step 201, determining the system model corresponding to the oil and gas intelligent pipeline system; wherein the system model includes multiple levels, each level includes at least one node, and the node is used to represent a device or a personnel, and the directed connection line between the nodes is used to represent feedback information or control information.

[0064] Specifically, the system model is determined according to the composition of the oil and gas smart pipeline system and the information interaction state of each node of the oil and gas smart pipeline system in normal operation, i.e., without information security threats. The system model can correctly reflect the information interaction of the oil and gas smart pipeline system, and can serve as a basis for creating the accident handling method. Through the system model, subsequent steps such as deducing accidents and formulating strategies can be performed, which can reduce complex work while ensuring the accuracy of the results.

[0065] According to the positions of the devices or personnel in the oil and gas smart pipeline system, the oil and gas smart pipeline system hierarchy is determined, and the devices or personnel at different positions are layered according to the control relationship. The devices or personnel are nodes of the system model.

[0066] Optionally, the oil and gas smart pipeline system includes multiple devices or personnel. The purpose of constructing the system model in the embodiment of the present application is from the perspective of physical failure, so the devices, facilities that have an impact on the normal process flow, or devices and facilities that maintain and ensure the normal process flow are selected to construct the system model. For devices or personnel in the oil and gas smart pipeline system that are subjected to information security threats but do not cause accidents or physical failure, they do not need to be considered in constructing the system model.

[0067] Therefore, before constructing the system model, the important devices or personnel for constructing the system model in the oil and gas smart pipeline system can be identified. The important devices or personnel are devices or personnel that maintain and ensure the normal process flow and devices or personnel that have an impact on the normal process flow.

[0068] Optionally, Figure 3 A flowchart for determining a system model corresponding to an oil and gas smart pipeline system is provided in an embodiment of the present application, as shown in Figure 3 The system model corresponding to the oil and gas smart pipeline system is determined, including:

[0069] Step 301: Obtain the overall layout of the oil and gas smart pipeline system.

[0070] Specifically, when constructing the model, first, the overall layout of the oil and gas smart pipeline system can be obtained, which can be obtained from the server or storage in the system. The overall layout includes data information such as the responsibilities, positions, and information interaction processes of all devices or personnel in the system.

[0071] Step 302: Determine at least one functional route of the oil and gas smart pipeline system according to the overall layout.

[0072] Specifically, the oil and gas smart pipeline system can perform a plurality of functions, and the performance of each function requires the participation of a plurality of devices or personnel. The function route is composed of devices or personnel required by the system to perform the function. Different function routes are analyzed by analyzing the system layout diagram, and the important devices or personnel are sorted out from different function routes. Each function route includes at least one level of nodes.

[0073] Optionally, the devices or personnel participating in the execution of the function route, and the devices or personnel affected by the information security threat to cause physical failure and affect the execution of the function route are important devices or personnel for constructing the system model as nodes on the function route.

[0074] There are many specific implementation schemes for determining at least one function route according to the overall layout diagram.

[0075] In an optional implementation, the overall layout diagram can carry information of the function route of the system and device or personnel information of each function route.

[0076] In another optional implementation, different function routes can be automatically analyzed according to the overall layout diagram, and devices that have an impact on the process or maintain the process and devices that perform actual functions are sorted out from different function routes. Other devices or personnel that have information interaction with the devices are analyzed and determined as important devices or personnel to determine nodes.

[0077] Optionally, the at least one function route includes a production route, a safety emergency route, and a unified coordination route; and at least one function route of the oil and gas pipeline system is determined according to the overall layout diagram, including:

[0078] The production device, the safety emergency device, and the unified coordination device in the oil and gas pipeline system are determined.

[0079] The production route is determined according to the production device and nodes having upstream and downstream relationships with the production device based on the overall layout diagram;

[0080] The safety emergency route is determined according to the safety emergency device and nodes having upstream and downstream relationships with the safety emergency device;

[0081] The unified coordination route is determined according to the unified coordination device and nodes having upstream and downstream relationships with the unified coordination device.

[0082] The production route guarantees the automatic production of the normal process flow, and is a core function route of the whole oil and gas intelligent pipeline system. Starting from the process, the production equipment is the process site, and according to the overall layout, the controller is used to control the process site, the HMI (Human Machine Interface) is used to realize the interaction between the human and the process site, the PCS (Process Control Systems) is used to control the production process of the process site, and the SCADA (Supervisory Control And Data Acquisition) provides the basis for decision-making for the PCS; therefore, the controller, the HMI, the field personnel of the operating interface, and the PCS and the SCADA are upstream and downstream nodes of the process site, and together with the process site form the production route.

[0083] Therefore, the nodes for building a system model on the production route include the process site, the controller for controlling the process site, the HMI, the field personnel of the operating interface, and the PCS and the SCADA of the production route.

[0084] Similarly, based on the overall layout and the safety emergency equipment and the overall coordination equipment, the safety emergency route and the overall coordination route can be determined respectively, and the corresponding nodes can be determined.

[0085] Specifically, the safety emergency route is started when the system alarm eliminates the abnormality, mainly including the alarm route and the elimination route. The alarm route is from the data acquisition and monitoring system alarm to the operator station. The elimination route is to send the elimination action to the intelligent production route to eliminate the abnormality after the operator station receives the alarm. For unknown abnormalities that are difficult to eliminate, the operator station reports to the engineer station, and the engineer station guides the elimination of the abnormality. Therefore, the important equipment and facilities in the emergency function route are mainly used to monitor the site abnormality, report the correct abnormality elimination behavior to the site personnel or directly control the process control system to eliminate the operator station, and handle the abnormality that the operator cannot handle, combined with the operator report and the SCADA to make command action, and send the action to the engineer station of the operator.

[0086] Therefore, the nodes for building a system model on the safety emergency route include the operator station and the engineer station, and can also include upstream and downstream nodes.

[0087] Specifically, the overall coordination route provides a layer of protection for the safe operation of the system, and coordinates all parties when the system is paralyzed. Therefore, the important equipment and facilities in the overall coordination route are mainly used to store all process-related data (including operation data and sensor data) computer stations, and to schedule all personnel in the system paralysis.

[0088] Therefore, the nodes for constructing the system model on the overall coordination route include the computer station and the dispatch center, and can further include upstream and downstream nodes.

[0089] In step 303, the system model is determined according to the nodes included in the at least one function route.

[0090] Specifically, when the system model is constructed, the levels of the system model are determined according to the positions of the nodes constituting the oil and gas smart pipeline system, and the nodes at different positions are layered according to the control relationship. The feedback information and the control information between the nodes are represented by the directed connection lines. The feedback information includes the data information of each node, and the direction of the connection line is used to represent the data receiving and transmission direction. The control information includes the control actions of each node, and the direction of the connection line is used to represent the action direction.

[0091] Exemplarily, Figure 4 An oil and gas smart pipeline system model schematic diagram provided by an embodiment of the present application is shown in FIG. 1. Figure 4 As shown in the figure, the solid line represents the control information, and the dashed line represents the feedback information. According to the positions of the nodes, the process site, the controller, and the site personnel are determined to be in the bottom layer; the operator station and the engineer station are in the upper layer; in order to realize the interaction of the operator and the engineer with the site, the SCADA and the PCS are inserted in the middle layer; the computer station and the dispatch center are not easily enabled, and are in the uppermost layer. Therefore, the levels of the system model and the nodes of each level are: the process site, the controller, the site personnel, and the HMI in the bottom layer; the SCADA and the PCS in the upper layer; the console operator station and the engineer station in the uppermost layer; and the computer station and the dispatch center in the uppermost layer.

[0092] Exemplarily, in the process site, the site personnel can enter the process site to perform inspection and control, and the site personnel can use the controller to monitor and control the site through the human-computer interaction interface.

[0093] In the normal production process, the process data is transmitted to the data acquisition and monitoring system and the process control system through the controller, the data acquisition and monitoring system transmits the information to the process control system, the information is compared and verified in the process control system to make correct control actions, the control information is sent to the data acquisition and monitoring system, and the process site is controlled through the controller.

[0094] When an abnormality occurs, the data acquisition system issues an alarm, the operator station sends the action for eliminating the abnormality to the process control system after discovering the abnormality, and the abnormality is eliminated through the controller. Or the action information for eliminating the abnormality is sent from the site personnel. When the operator does not know the measures for eliminating the newly occurring abnormality, the engineer station sends the action for eliminating the abnormality to the operator.

[0095] By analyzing the overall layout of the system and screening nodes for constructing the model according to a production route, a safety emergency route and a unified coordination route, it is ensured that the devices or personnel corresponding to the nodes have an influence on the process flow of the normal system, and the accuracy of risk prediction and accident deduction through the system model from the perspective of physical failure is improved.

[0096] In step 202, executable actions, accessible information and preparation information corresponding to each node are determined according to the system model; the executable actions are control information executable by the node; the accessible information is information on which the node relies when performing an action, and specifically can include feedback information of a lower node; and the preparation information is control information of an upper level of the node.

[0097] Specifically, in order to clearly express the information interaction relationship of different nodes in the system model and the relationship between each node and system operation, the role of each node in the system model needs to be expressed, and the role of each node can be expressed from three aspects of executable actions, accessible information and preparation information. The accessible information of the node comes from the lower node of the node, and the preparation information of the node comes from the upper node of the node.

[0098] Table 1 is a node role expression table provided by an embodiment of the present application. Table 1 lists the executable actions, accessible information and preparation information corresponding to each node of the system model constructed above.

[0099] Table 1 Node Role Expression Table

[0100]

[0101]

[0102] In order to elaborate the role of each node in the system model, an embodiment of the present application takes a metering and pressure regulating process of a certain gas sending station as an example to introduce the role allocation of the node in detail. Figure 5 A system model schematic diagram of metering and pressure regulation of a first station is provided by an embodiment of the present application. As shown in Figure 5 According to the above method, the system model is constructed, and the level of the system model is: the bottom layer is the equipment required for metering and pressure regulation of the first station; the upper layer is the field personnel, HMI and controller; the upper layer is the PCS and SCADA; and the top layer is the operator station and the engineer station.

[0103] Figure 6 A node role expression schematic diagram of a system model of metering and pressure regulation of a first station is provided by an embodiment of the present application. In the execution of metering and pressure regulation of the first station, the executable actions, accessible information and preparation information corresponding to each node of the system model are as followsFigure 6 As shown. Each node in the system is based on... Figure 5 The actionable actions, accessible information, and preparation information shown are used to carry out the work.

[0104] Figure 7 This is a schematic diagram illustrating the node roles in a system model for first-station metering and pressure regulation provided in an embodiment of the present invention. Figure 7 It shows Figure 6 A schematic diagram illustrating information feedback and control of the initial station's metering and pressure regulating device, controller, and PCS in the medium-scale system model. (For example...) Figure 7 As shown, pressure gauge 1 feeds back the current pressure information to the pressure regulating inlet device of the controller; this information is the controller's accessible information. The controller feeds back the received pressure information to the PCS; this information is the PCS's accessible information. The PCS controls the controller based on the pressure information fed back by the controller; this is the PCS's executable action. The controller controls valve 1 based on the PCS's control. Similarly, each node works according to its corresponding executable action, accessible information, and preparation information to ensure the system operates normally. The working principle of each node in the system model is similar to that described above.

[0105] Step 203: Based on the executable actions, accessible information, and preparation information of each node, determine the accidents that may occur during system operation and the corresponding handling strategies.

[0106] Specifically, when the system is subjected to an information security threat attack, the information feedback and control between the nodes will change compared to normal operation. This will lead to changes in the executable actions and / or accessible information and / or preparation information of some nodes, thereby causing an accident. By simulating the impact of an information security threat attack on the system operation in the smart oil and gas pipeline model, accidents are deduced, and corresponding plans and strategies are formulated based on the accidents.

[0107] Optionally, based on the executable actions, accessibility information, and readiness information of each node, determine potential incidents during system operation and corresponding handling strategies, including:

[0108] The system traverses the nodes in the system model. For each traversed node, it determines the changes in the executable actions, accessible information, and preparation information of the node after at least one type of information security threat attack. Based on the changes, it determines the accidents that may occur during system operation.

[0109] Determine the corresponding handling strategy based on the possible accidents described;

[0110] The at least one type of information security threat includes at least one of the following: human error, tampering with process parameters, and tampering with control information.

[0111] The process parameters are parameter information required for normal operation of the system. Specifically, when an information security threat attacks the oil and gas smart pipeline system, it will eventually cause failures in personnel, equipment, and environment of the oil and gas smart pipeline system. Therefore, the types of information security threats can be divided into three types: personnel operation error, tampering with process parameters, and tampering with control information.

[0112] The unsafe behaviors corresponding to the personnel operation error include that the personnel (remote operators and on-site personnel) cannot issue or issue incorrect instructions due to loss or forgery of process parameters; the personnel cause greater accidents when taking remedial measures; and the operators make operation errors due to physiological or psychological reasons.

[0113] The unsafe behaviors corresponding to the tampering with process parameters include that tampering with process parameters causes the nodes to perform incorrect actions according to incorrect parameter information; and the nodes perform incorrect actions due to process parameter delay, loss, or replay. The information security threat behavior of the tampering with process parameters type is to cause the nodes to make errors by tampering with related data.

[0114] The unsafe behaviors corresponding to the tampering with control information include that tampering with the control information or feedback information of the nodes causes the nodes or other nodes to make incorrect actions; and the control information or feedback information of the nodes is delayed or lost, thereby causing the nodes or other nodes to make incorrect actions. The information security threat behavior of the tampering with control information type is to directly attack the nodes, thereby causing incorrect actions.

[0115] Optionally, Figure 8 A flowchart for determining an accident is provided for an embodiment of the present application. As shown in Figure 8 For each node, the changes in executable actions, accessible information, and prepared information of the node after the node is attacked by at least one type of information security threat are determined, and the possible accidents of the system during operation are determined according to the changes.

[0116] Step 801, for each node, the changes in executable actions, accessible information, and prepared information of the node after the node is attacked by at least one type of information security threat are determined.

[0117] Specifically, the system model is constructed under the condition that the system is normally operated, and each node in the system model works according to the corresponding executable actions, accessible information, and prepared information. Optionally, the nodes in the system model can be attacked by information security threats, the corresponding executable actions, accessible information, and prepared information of the nodes change, the feedback or control information of the nodes changes, the nodes or other nodes in the model make incorrect actions, and thus the system produces accidents.

[0118] In step 802, it is determined whether the change will cause a node to fail, and if so, it is determined that the accident caused by the change is the possible accident.

[0119] Specifically, from the perspective of physical functions, the failed node performs an incorrect action or feeds back incorrect information to other nodes.

[0120] Optionally, when a node is attacked, the failed node is the node or another node.

[0121] For example, in the above first station metering pressure regulating system model, by tampering with the information security threat attack controller of the control information type, the executable action of the controller changes. In the normal state, the executable action should be to open the valve, but after being attacked, the executable action is to open the valve small, which will cause the corresponding valve to open small, thereby increasing the pressure of the pipeline and possibly causing a fire hazard.

[0122] By determining that the nodes of the system model are attacked by information security threats, the nodes in the system will fail, thereby determining the accidents caused by the failed nodes, ensuring that the information security threats identified according to the system model can cause physical failure during system operation, thereby improving the accuracy of predicting accidents.

[0123] By attacking the system model with information security threats, the accidents that will occur in the oil and gas smart pipeline intelligent system after being attacked by information security threats are predicted. For each of the accidents, a corresponding handling strategy needs to be developed, and when the strategy is executed, it can effectively deal with information security threats or solve the accidents.

[0124] Optionally, the corresponding handling strategy is determined according to the possible accident, comprising:

[0125] For each information security threat, the handling strategy of the node and / or related nodes is determined according to the accident caused by the information security threat attack on the node, so that after the handling strategy is executed, the executable action, accessible information, and prepared information of the node are restored to the state before the attack, or the accident is eliminated.

[0126] The related nodes are nodes at the previous level and / or nodes at the next level of the node.

[0127] For example, in the above first station metering pressure regulating system model, by tampering with the information security threat attack controller of the control information type, the executable action of the controller changes. In the normal state, the executable action should be to open the valve, but after being attacked, the executable action is to open the valve small, which will cause the corresponding valve to open small.

[0128] Optionally, strategy 1 can be formulated for the controller, and strategy 1 is executed to correct the executable action of the controller to the correct state, so that the valve is opened wide;

[0129] Optionally, strategy 2 can be formulated for the valve, and strategy 2 is executed, although the executable action of the controller is still wrong, the valve remains normal, thereby eliminating the accident.

[0130] By formulating the handling strategy for the accident from the perspective of eliminating the accident, the accuracy and comprehensiveness of the handling strategy corresponding to the accident are improved.

[0131] Based on the executable action of the node in the system model, the accessible information and the prepared information, the accident caused by the different types of information security threats suffered by different nodes in the system running is predicted, the comprehensiveness of the risk prediction is improved, and the corresponding handling strategy is formulated, so that redundant steps in the handling strategy are avoided, the pertinence of the handling strategy is improved, and the efficiency of coping with information security threats is improved.

[0132] Step 204, according to the possible accident and the corresponding handling strategy, when the accident occurs during the system running, the corresponding handling strategy is executed.

[0133] Optionally, the accident predicted by the system model analysis and the corresponding handling strategy are summarized into a strategy table, and when the oil and gas intelligent pipeline system is running and an accident is caused by an information security threat, the corresponding handling strategy is queried and executed according to the strategy table, so that the ability and efficiency of the system to cope with information security threats are improved.

[0134] Illustratively, according to the above-mentioned method, the strategy table formulated for the gas transmission first station metering and pressure regulating pipeline is table 2, table 3 and table 4. Table 2 is a strategy table for the information security threat type of personnel operation error; Table 3 is a strategy table for the information security threat type of tampering with process parameters, and table 4 is a strategy table for the information security threat type of tampering with control information.

[0135] Table 2 Strategy table for information security threat type of personnel operation error

[0136]

[0137] Table 2 Strategy table for information security threat type of personnel operation error (continued)

[0138]

[0139] Table 2 Strategy table for information security threat type of personnel operation error (continued)

[0140]

[0141] Table 2 Policy Table for Information Security Threat Types for Human Error (continued)

[0142]

[0143] Table 2 Policy Table for Information Security Threat Types for Human Error (continued)

[0144]

[0145] Table 2 Policy Table for Information Security Threat Types for Human Error (continued)

[0146]

[0147] Table 3 Policy Table for Information Security Threat Types for Tampering with Process Parameters

[0148]

[0149] Table 3 Policy Table for Information Security Threat Types for Tampering with Process Parameters (continued)

[0150]

[0151] Table 4 Policy Table for Information Security Threat Types for Tampering with Control Information

[0152]

[0153] Table 4 Policy Table for Information Security Threat Types for Tampering with Control Information (continued)

[0154]

[0155] Table 4 Policy Table for Information Security Threat Types for Tampering with Control Information (continued)

[0156]

[0157] Table 4 Policy Table for Information Security Threat Types for Tampering with Control Information (continued)

[0158]

[0159] Table 4 Policy Table for Information Security Threat Types for Tampering with Control Information (continued)

[0160]

[0161] Table 4 Policy Table for Information Security Threat Types for Tampering with Control Information (continued)

[0162]

[0163] Optionally, in the risk prediction, accident derivation and corresponding treatment strategy formulation through the system model, a database can be pre-set in advance, which includes information of historical successful experience of the system suffering from information security threats to cause accidents, and accident strategy information that can be directly derived according to the information interaction relationship between nodes. In the prediction of accidents and the formulation of strategies, all or part of the results are obtained directly according to the database. For new risk accidents and uncertain strategy risk accidents identified according to the system model, they can be fed back to the user, and the user formulates the corresponding strategy and synchronizes it to the database. At the same time, the user can change the strategy obtained through the database according to the safety requirements of system operation, for example, change the corresponding strategy of the accident according to the different process functions of the system. Optionally, the embodiment of the present application provides a user interface, Figure 9 A user interface schematic diagram provided by an embodiment of the present application is shown in the figure. Figure 9 As shown, the user can view or adjust the system model or overall layout diagram corresponding to the oil and gas intelligent pipeline oil and gas pipeline system through the user interface, for example, select important nodes on the displayed overall layout diagram to make the control device construct the system model according to the important nodes; the user can also view or adjust the executable actions, accessible information and prepared information corresponding to each node; at the same time, the derived accidents and corresponding strategies can be displayed to the user through the page, and the user can change or confirm the accidents and strategies on the page.

[0164] By constructing the oil and gas pipeline system model according to the control logic relationship between the nodes of the oil and gas pipeline system, and determining the executable actions, accessible information and prepared information of the nodes in the model, the feedback control relationship of the model is more concise; at the same time, the accidents that occur when the information security threat attacks different nodes of the system are predicted according to the model, which improves the comprehensiveness of the prediction of risk accidents, and the corresponding treatment strategies are formulated according to the accidents and the control logic relationship of the nodes in the model, which improves the accuracy of the strategies, avoids new risk accidents caused by redundant safety measures or wrong safety measures, thereby improving the ability of the oil and gas pipeline system to cope with information security threats, and improving the safety of the oil and gas pipeline system.

[0165] Optionally, the execution subject of the oil and gas pipeline information physical security intelligent risk identification method provided by the embodiment of the present application can be a control device, which constructs the model, derives the accident, formulates the corresponding treatment strategy, and controls the corresponding nodes in the system to execute the corresponding strategy when the system operation occurs accident.

[0166] Optionally, the execution subject of the oil and gas pipeline information physical security intelligent risk identification method provided by the embodiment of the present application can also be a device with overall coordination and data processing function in the oil and gas intelligent pipeline system, such as a computer station. The device can control the nodes in the system or can send information to the nodes in the system.

[0167] Optionally, the oil and gas pipeline information physical security intelligent risk identification method provided by the embodiment of the present application can be executed by the control device and the device in the oil and gas intelligent pipeline system together, for example, the control device is used to build a model, deduce an accident, and formulate a strategy; the device in the oil and gas intelligent pipeline system executes according to the strategy information formulated by the control device to handle the accident and cope with the information security threat.

[0168] Corresponding to the oil and gas pipeline information physical security intelligent risk identification method provided by the above embodiment, the embodiment of the present application also provides an oil and gas pipeline information physical security intelligent risk identification device. Figure 10 The structure block diagram of an oil and gas pipeline information physical security intelligent risk identification device provided by an embodiment of the present application. For the sake of convenience, only the part related to the embodiment of the present application is shown. For details, refer to Figure 10 The device comprises:

[0169] The first determination module 1001 is configured to determine the system model corresponding to the oil and gas intelligent pipeline system; wherein the system model comprises a plurality of levels, each level comprises at least one node, the node is used to represent a device or a person, and the directed connection line between the nodes is used to represent feedback information or control information;

[0170] The second determination module 1002 is configured to determine the executable action, accessible information and preparation information corresponding to each node according to the system model; wherein the executable action is the control information executable by the node; the accessible information is the information relied on by the node when executing the action; and the preparation information is the control information of the upper level of the node;

[0171] The third determination module 1003 is configured to determine the possible accident and the corresponding processing strategy when the system runs according to the executable action, accessible information and preparation information of each node;

[0172] The execution module 1004 is configured to execute the corresponding processing strategy when the accident occurs in the system running process according to the possible accident and the corresponding processing strategy.

[0173] Optionally, when determining the system model corresponding to the oil and gas intelligent pipeline system, the first determination module 1001 is specifically configured to:

[0174] Obtain the overall layout of the oil and gas pipeline system;

[0175] determine at least one function route of the oil and gas pipeline system according to the overall layout diagram;

[0176] determine the system model according to nodes contained in the at least one function route;

[0177] wherein each function route comprises at least one level of nodes.

[0178] Optionally, the at least one function route comprises a production route, a safety emergency route, and a unified coordination route; the first determining module 1001, when determining the at least one function route of the oil and gas pipeline system according to the overall layout diagram, is specifically configured to:

[0179] determine production equipment, safety emergency equipment, and unified coordination equipment in the oil and gas pipeline system;

[0180] determine the production route according to the production equipment and nodes having upstream and downstream relationships with the production equipment based on the overall layout diagram;

[0181] determine the safety emergency route according to the safety emergency equipment and nodes having upstream and downstream relationships with the safety emergency equipment;

[0182] determine the unified coordination route according to the unified coordination equipment and nodes having upstream and downstream relationships with the unified coordination equipment.

[0183] Optionally, the third determining module 1003, when determining accidents possibly generated during system operation and corresponding processing strategies according to executable actions, accessible information, and prepared information of each node, is specifically configured to:

[0184] traverse the nodes in the system model, for each node traversed, determine changes in executable actions, accessible information, and prepared information of the node after the node is attacked by at least one type of information security threat, and determine accidents possibly generated during system operation according to the changes;

[0185] determine corresponding processing strategies according to the accidents possibly generated;

[0186] wherein the at least one type of information security threat comprises at least one of personnel operation errors, tampering with process parameters, and tampering with control information.

[0187] Optionally, the third determining module 1003, when determining, for each node, changes in executable actions, accessible information, and prepared information of the node after the node is attacked by at least one type of information security threat, and determining accidents possibly generated during system operation according to the changes, is specifically configured to:

[0188] For each node, determine the change of executable action, accessible information and prepared information of the node after the node is attacked by at least one type of information security threat;

[0189] Determine whether the change will cause the node to fail, if so, determine the accident caused by the change as the possible accident.

[0190] Optionally, the third determination module 1003 is configured to determine the corresponding processing strategy according to the possible accident.

[0191] For each information security threat, determine the processing strategy of the node and / or related node according to the accident of the node after the node is attacked by the information security threat, so that the executable action, accessible information and prepared information of the node can return to the state before the attack or eliminate the accident after the processing strategy is executed.

[0192] The related node is a node at a previous level and / or a node at a next level of the node.

[0193] The device provided by the embodiments of the present application can be used for executing the above-mentioned Figures 1 to 9 The technical solutions of the embodiments shown in the drawings have similar implementation principles and technical effects, and the embodiments will not be described here.

[0194] The above description is only the preferred embodiments of the present application and the explanation of the applied technical principles. Those skilled in the art should understand that the scope of the present application is not limited to the technical solutions formed by the specific combinations of the above technical features, and also covers other technical solutions formed by any combinations of the above technical features or equivalent features without departing from the inventive concept. For example, the technical solutions formed by replacing the above features with the technical features disclosed in the present application (but not limited to) having similar functions.

[0195] In addition, although each operation is described in a specific order, this should not be understood as requiring the operations to be performed in the specific order shown or in a sequential order. In certain circumstances, multitasking and parallel processing can be advantageous. Similarly, although the above discussion contains many specific details, these should not be interpreted as limiting the scope of the application. Certain features described in the context of separate embodiments can also be combined in a single embodiment. Conversely, various features described in the context of a single embodiment can also be separated and implemented in multiple embodiments.

[0196] Corresponding to the oil and gas pipeline information physical security intelligent risk identification method provided in the above embodiments, an electronic device is provided. Figure 11 A structural diagram of an electronic device is provided for an embodiment of the present application. For ease of illustration, only parts related to the embodiments of the present application are shown. Figure 11 A structural diagram of an electronic device is provided for an embodiment of the present application. As shown in the figure, Figure 11 The electronic device of the present embodiment can include:

[0197] a memory 1101 and at least one processor 1102;

[0198] The memory 1101 stores computer execution instructions;

[0199] The at least one processor 1102 executes the computer execution instructions stored in the memory, so that the at least one processor 1102 executes the method described in any of the preceding embodiments.

[0200] The implementation principle and technical effects of the electronic device provided in the present embodiment can be referred to the preceding embodiments, which will not be described here.

[0201] In addition, the present application further provides a computer readable storage medium, wherein the computer readable storage medium stores computer execution instructions, and the computer execution instructions are executed by a processor to implement the method in any of the preceding embodiments.

[0202] The present application further provides a computer program product, comprising a computer program, which is executed by a processor to implement the method in any of the preceding embodiments.

[0203] In several embodiments provided by the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the modules is only a logical function division. In actual implementation, additional division can be made, or a plurality of modules can be combined or integrated into another system, or some features can be ignored or not executed.

[0204] It should be noted that in this document, the term "comprising" or "including" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements not only includes those elements, but also includes other elements not explicitly listed or inherent to such a process, method, article or device. Without more limitations, the element defined by the statement "including a" does not exclude the presence of additional identical elements in the process, method, article or device including the element.

[0205] The integrated modules in the form of software function modules can be stored in a computer readable storage medium. The software function modules are stored in a storage medium, and include a plurality of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor to execute part of steps of the method according to various embodiments of the present application.

[0206] It should be understood that the processor can be a central processing unit (CPU), and can also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), etc. The general-purpose processor can be a microprocessor or any conventional processor, etc. The steps of the method disclosed in the application can be directly embodied in the form of hardware processor execution, or be executed by a combination of hardware and software modules in the processor. The memory can include a high-speed RAM memory, and can also include a non-volatile storage NVM, for example, at least one disk memory, and can also be a U disk, a mobile hard disk, a read-only memory, a magnetic disk or an optical disk, etc.

[0207] The storage medium can be realized by any type of volatile or non-volatile storage devices or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk or optical disk. The storage medium can be any available medium that can be accessed by a general-purpose or special-purpose computer.

[0208] An exemplary storage medium is coupled to the processor, so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be an integral part of the processor. The processor and the storage medium can be located in an application specific integrated circuit (ASIC). Of course, the processor and the storage medium can also exist as discrete components in an electronic device or a host device. The embodiments of the present application provide a computer readable storage medium, and the computer readable storage medium stores computer execution instructions. When the processor executes the computer execution instructions, the method according to any one of the above embodiments is realized.

[0209] Although the subject matter has been described in language specific to structural features and / or methodological acts, it is to be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or acts described above. Rather, the specific features and acts described above are disclosed as example forms of implementing the claims.

Claims

1. An oil and gas pipeline information physical security intelligent risk identification method, comprising: determining a system model corresponding to an oil and gas pipeline system; wherein the system model comprises a plurality of levels, each level comprising at least one node, the node being used to represent a device or a person, and a directed connection line between nodes being used to represent feedback information or control information; determining, according to the system model, an executable action, accessible information and preparation information corresponding to each node; wherein the executable action is control information executable by the node; the accessible information is information relied on by the node when performing an action; and the preparation information is control information of an upper level of the node; traversing the nodes in the system model, for each node traversed, determining a change in the executable action, accessible information and preparation information of the node after the node is attacked by at least one type of information security threat, and determining a possible accident during system operation according to the change; determining a corresponding handling strategy according to the possible accident; wherein the at least one type of information security threat comprises at least one of a personnel operation error, tampering with process parameters, and tampering with control information; according to the possible accident and the corresponding handling strategy, when the accident occurs during system operation, executing the corresponding handling strategy; the determination of the system model corresponding to the oil and gas pipeline system comprises: obtaining an overall layout of the oil and gas pipeline system; based on the overall layout, determining a production route according to production equipment and nodes having an upstream and downstream relationship with the production equipment, determining a safety emergency route according to safety emergency equipment and nodes having an upstream and downstream relationship with the safety emergency equipment, and determining a unified coordination route according to unified coordination equipment and nodes having an upstream and downstream relationship with the unified coordination equipment; at least one functional route of the oil and gas pipeline system comprises the production route, the safety emergency route and the unified coordination route; determining the system model according to nodes included in the at least one functional route; wherein each functional route comprises nodes of at least one level.

2. The method of claim 1, wherein, for each node, determining a change in the executable action, accessible information and preparation information of the node after the node is attacked by at least one type of information security threat, and determining a possible accident during system operation according to the change, comprises: for each node, determining a change in the executable action, accessible information and preparation information of the node after the node is attacked by at least one type of information security threat; determining whether the change will cause the node to fail, and if so, determining that the change causes the accident as the possible accident.

3. The method of claim 1, wherein, determining a corresponding handling strategy according to the possible accident, comprises: for each type of information security threat, determining a handling strategy of the node and / or related nodes according to the accident corresponding to the information security threat attacking the node, so that after the handling strategy is executed, the executable action, accessible information and preparation information of the node return to a state before the attack, or the accident is eliminated. The related node is a node at a previous level and / or a node at a next level of the node.

4. An oil and gas pipeline information physical security intelligent risk identification device, characterized in that, The device comprises: A first determining module configured to determine a system model corresponding to the oil and gas pipeline system, wherein the system model comprises a plurality of levels, each level comprises at least one node, the node is configured to represent equipment or personnel, and a directed connection line between the nodes is configured to represent feedback information or control information. A second determining module configured to determine, according to the system model, an executable action, accessible information and preparation information corresponding to each node, wherein the executable action is control information executable by the node, the accessible information is information on which the node executes the action, and the preparation information is control information of a previous level of the node. A third determining module configured to traverse the nodes in the system model, for each node traversed, determine a change in the executable action, the accessible information and the preparation information of the node after the node is attacked by at least one type of information security threat, and determine a possible accident generated during system operation according to the change, determine a corresponding processing strategy according to the possible accident, and wherein the at least one type of information security threat comprises at least one of a personnel operation error, tampering with process parameters and tampering with control information. An executing module configured to execute the corresponding processing strategy when the accident occurs during system operation according to the possible accident and the corresponding processing strategy. The first determining module is specifically configured to: Obtain a general layout of the oil and gas pipeline system. Determine a production route according to production equipment and nodes having an upstream and downstream relationship with the production equipment, determine a safety emergency route according to safety emergency equipment and nodes having an upstream and downstream relationship with the safety emergency equipment, and determine a unified coordination route according to unified coordination equipment and nodes having an upstream and downstream relationship with the unified coordination equipment, wherein at least one functional route of the oil and gas pipeline system comprises the production route, the safety emergency route and the unified coordination route. Determine the system model according to the nodes contained in the at least one functional route, wherein each functional route comprises nodes of at least one level.

5. An electronic device, comprising: Comprise: A memory and at least one processor; The memory stores computer execution instructions; The at least one processor executes the computer execution instructions stored in the memory, so that the at least one processor executes the oil and gas pipeline information physical security intelligent risk identification method according to any one of claims 1-3.

6. A computer-readable storage medium, characterized in that, The computer readable storage medium stores computer execution instructions, and when the processor executes the computer execution instructions, the oil and gas pipeline information physical security intelligent risk identification method according to any one of claims 1-3 is realized.

7. A computer program product comprising a computer program, characterized in that, The computer program is executed by the processor to realize the oil and gas pipeline information physical security intelligent risk identification method according to any one of claims 1-3.

Images