Dcs controller and its real-time synchronization method and system of trusted policy and trusted state

Abstract

The application belongs to the field of DCS controllers, and discloses a DCS controller, a real-time synchronization method and system for a trusted policy and a trusted state of the DCS controller, which comprises the following steps: when the trusted policy and the trusted state of the DCS controller are changed, obtaining change data of the trusted policy and the trusted state of the DCS controller and generating a change trigger signal; generating a change notification file according to the change data of the trusted policy and the trusted state of the DCS controller, and storing the change notification file in a first preset directory; obtaining a process PID number of a trusted agent process, and sending the change trigger signal to the trusted agent process based on the process PID number of the trusted agent process; in response to the change trigger signal, moving the change notification file in the first preset directory to a processing directory of the trusted agent process, and obtaining a parsing result by parsing the change notification file and uploading the parsing result to a trusted management platform. Real-time synchronization between the DCS controller and the trusted management platform is realized, and data loss is effectively avoided.

Description

Technical Field

[0001] This invention belongs to the field of DCS controllers and relates to a DCS controller and its trusted strategy and trusted state real-time synchronization method and system. Background Technology

[0002] The trusted DCS (Distributed Control System) controller integrates trusted computing capabilities, enabling trusted verification of the DCS controller's u-boot, operating system kernel, file system, critical files, and processes to ensure the integrity of the DCS controller's hardware and software. The DCS controller connects to a trusted agent and management platform, synchronizing trusted policies and object trusted states from the DCS controller to the management platform. Simultaneously, the management platform can also distribute trusted policies to the DCS controller. Therefore, when the trusted policies and trusted states of the DCS controller change, a real-time notification mechanism is needed to transmit change notification files to the management platform, allowing the platform to promptly receive and display the changes.

[0003] Currently, the synchronization method for trusted policies and trusted states of DCS controllers is achieved through polling. However, this method suffers from untimely synchronization, and the length of the polling time affects system performance. Summary of the Invention

[0004] The purpose of this invention is to overcome the shortcomings of the prior art, namely, the untimely synchronization of the trusted policy and trusted state of the DCS controller, and to provide a DCS controller and a method and system for real-time synchronization of its trusted policy and trusted state.

[0005] To achieve the above objectives, the present invention employs the following technical solution:

[0006] In a first aspect, the present invention provides a method for real-time synchronization of trusted policies and trusted states of a DCS controller, comprising: when the trusted policies and trusted states of the DCS controller change, acquiring change data of the trusted policies and trusted states of the DCS controller and generating a change trigger signal; generating a change notification file based on the change data of the trusted policies and trusted states of the DCS controller and storing the change notification file in a first preset directory; acquiring the process PID number of a trusted agent process and sending the change trigger signal to the trusted agent process based on the process PID number of the trusted agent process; the trusted agent process responding to the change trigger signal by moving the change notification file in the first preset directory to the processing directory of the trusted agent process, parsing the change notification file to obtain a parsing result, and uploading the parsing result to a trusted management platform.

[0007] Optionally, generating a change notification file based on the change data of the trusted policy and trusted state of the DCS controller, and storing the change notification file in the first preset directory includes: encapsulating the change data of the trusted policy and trusted state of the DCS controller into a JSON format file according to a predefined format to obtain the change notification file and storing the change notification file in the first preset directory.

[0008] Optionally, it also includes: when the trusted agent process starts, generating a process PID number of the trusted agent process and storing the process PID number of the trusted agent process in a second preset directory; obtaining the process PID number of the trusted agent process includes: obtaining the process PID number of the trusted agent process from the second preset directory.

[0009] Optionally, when uploading the parsing result to the trusted management platform fails: the change notification file is stored in the processing directory of the trusted agent process, and the change notification file in the processing directory of the trusted agent process is deleted after the parsing result is successfully uploaded to the trusted management platform.

[0010] Optionally, the DCS controller and the trusted management platform maintain a communication connection through a heartbeat mechanism.

[0011] In a second aspect, the present invention provides a real-time synchronization system for trusted policies and trusted states of a DCS controller, comprising a trusted verification module and a trusted agent module; the trusted verification module includes a change response module, a change notification file processing module, and a change trigger signal sending module; wherein: the change response module is used to acquire change data of the trusted policies and trusted states of the DCS controller and generate a change trigger signal when the trusted policies and trusted states of the DCS controller change; the change notification file processing module is used to generate a change notification file based on the change data of the trusted policies and trusted states of the DCS controller and store the change notification file in a first preset directory; the change trigger signal sending module is used to acquire the process PID number of the trusted agent process and send the change trigger signal to the trusted agent process based on the process PID number of the trusted agent process; the trusted agent module is used to run the trusted agent process, the trusted agent process responds to the change trigger signal, moves the change notification file in the first preset directory to the processing directory of the trusted agent process, parses the change notification file to obtain the parsing result, and uploads it to the trusted management platform.

[0012] Optionally, generating a change notification file based on the change data of the trusted policy and trusted state of the DCS controller, and storing the change notification file in the first preset directory includes: encapsulating the change data of the trusted policy and trusted state of the DCS controller into a JSON format file according to a predefined format to obtain the change notification file and storing the change notification file in the first preset directory.

[0013] Optionally, a process processing module is also included; the process processing module is used to generate the process PID number of the trusted agent process when the trusted agent process starts, and store the process PID number of the trusted agent process in a second preset directory; obtaining the process PID number of the trusted agent process includes: obtaining the process PID number of the trusted agent process from the second preset directory.

[0014] Optionally, the trusted proxy module is further configured to: when uploading the parsing result to the trusted management platform fails, store the change notification file in the processing directory of the trusted proxy process, and delete the change notification file in the processing directory of the trusted proxy process after the parsing result is successfully uploaded to the trusted management platform.

[0015] In a third aspect, the present invention provides a DCS controller, wherein the DCS controller is equipped with the aforementioned DCS controller trusted policy and trusted state real-time synchronization system.

[0016] Compared with the prior art, the present invention has the following beneficial effects:

[0017] This invention discloses a real-time synchronization method for trusted policies and trusted states of a DCS controller. When the trusted policies and trusted states of the DCS controller change, the method acquires the change data and generates a change trigger signal. Then, based on the change data, it generates a change notification file and stores it in a first preset directory. Simultaneously, based on the process PID of a trusted agent process, the change trigger signal is sent to the trusted agent process. The trusted agent process responds to the change trigger signal by moving the change notification file from the first preset directory to its processing directory, parsing the change notification file to obtain the parsing result, and uploading the parsing result to the trusted management platform. The trusted management platform updates the trusted policies and trusted states of the corresponding DCS controller based on the received parsing result, thus maintaining data consistency between the DCS controller and the trusted management platform. Using this signal response mechanism ensures that the trusted agent process can promptly process changes upon receiving a change trigger signal. Even if the trusted agent process is unable to process the change in a given instance for some reason, the change notification file persists. The next time the trusted agent process receives a change trigger signal, it can process the change simultaneously, preventing data loss. This avoids data loss issues that can occur with synchronous mechanisms like socket communication due to socket connection drops or excessive network load. Furthermore, a single change notification file can contain multiple change messages. Therefore, when multiple changes occur simultaneously, only one change trigger signal needs to be sent, avoiding frequent sending of change trigger signals to the trusted agent process and thus reducing its processing overhead. Attached Figure Description

[0018] Figure 1 This is a flowchart of the real-time synchronization method for trusted policies and trusted states of a DCS controller according to an embodiment of the present invention.

[0019] Figure 2 This is a schematic diagram illustrating the principle of the real-time synchronization method for trusted policies and trusted states of a DCS controller according to an embodiment of the present invention.

[0020] Figure 3 This is a block diagram of the DCS controller trusted policy and trusted state real-time synchronization system structure according to an embodiment of the present invention. Detailed Implementation

[0021] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0022] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0023] The present invention will now be described in further detail with reference to the accompanying drawings:

[0024] See Figure 1 and 2 In one embodiment of the present invention, a method for real-time synchronization of trusted policies and trusted states of a DCS controller is provided, which can effectively ensure the consistency and real-time performance of trusted policies and trusted states between the trusted management platform and the DCS controller. Specifically, it includes the following steps:

[0025] S1: When the trusted policy and trusted state of the DCS controller change, obtain the change data of the trusted policy and trusted state of the DCS controller and generate a change trigger signal.

[0026] S2: Generate a change notification file based on the change data of the trusted policy and trusted state of the DCS controller, and store the change notification file in the first preset directory.

[0027] S3: Obtain the process PID of the trusted agent process, and send a change trigger signal to the trusted agent process based on the process PID of the trusted agent process.

[0028] S4: The trusted agent process responds to the change trigger signal, moves the change notification file in the first preset directory to the processing directory of the trusted agent process, parses the change notification file to obtain the parsing result, and uploads the parsing result to the trusted management platform.

[0029] When the trusted policy of the DCS controller or the trusted state of a specific file, process, etc., changes, in order to maintain the consistency of the trusted policy and trusted state, these changes need to be notified to the trusted management platform in real time, so that the trusted policy and trusted state of the trusted management platform are consistent with those of the DCS controller.

[0030] This invention discloses a real-time synchronization method for trusted policies and trusted states of a DCS controller. When the trusted policies and trusted states of the DCS controller change, the method acquires the change data and generates a change trigger signal. Then, based on the change data, it generates a change notification file and stores it in a first preset directory. Simultaneously, based on the process PID of a trusted agent process, the change trigger signal is sent to the trusted agent process. The trusted agent process responds to the change trigger signal by moving the change notification file from the first preset directory to its processing directory, parsing the change notification file to obtain the parsing result, and uploading the parsing result to the trusted management platform. The trusted management platform updates the trusted policies and trusted states of the corresponding DCS controller based on the received parsing result, thus maintaining data consistency between the DCS controller and the trusted management platform. Using this signal response mechanism ensures that the trusted agent process can promptly process changes upon receiving a change trigger signal. Even if the trusted agent process is unable to process the change in a given instance for some reason, the change notification file persists. The next time the trusted agent process receives a change trigger signal, it can process the change simultaneously, preventing data loss. This avoids data loss issues that can occur with synchronous mechanisms like socket communication due to socket connection drops or excessive network load. Furthermore, a single change notification file can contain multiple change messages. Therefore, when multiple changes occur simultaneously, only one change trigger signal needs to be sent, avoiding frequent sending of change trigger signals to the trusted agent process and thus reducing its processing overhead.

[0031] In one possible implementation, generating a change notification file based on the change data of the trusted policy and trusted state of the DCS controller, and storing the change notification file in a first preset directory includes: encapsulating the change data of the trusted policy and trusted state of the DCS controller into a JSON format file according to a predefined format to obtain the change notification file and storing the change notification file in the first preset directory.

[0032] In one possible implementation, the real-time synchronization method for the trusted policy and trusted state of the DCS controller further includes: when the trusted agent process starts, generating a process PID number for the trusted agent process and storing the process PID number of the trusted agent process in a second preset directory. Obtaining the process PID number of the trusted agent process includes: retrieving the process PID number of the trusted agent process from the second preset directory.

[0033] In one possible implementation, if the trusted agent process fails to start or the change trigger signal fails to be sent, the newly generated change notification file on the DCS controller will be appended to the existing change notification file and will be retrieved all at once when the trusted agent process starts again, which can effectively avoid data loss.

[0034] In one possible implementation, when uploading the parsing result to the trusted management platform fails: the change notification file is stored in the processing directory of the trusted agent process, and the change notification file in the processing directory of the trusted agent process is deleted after the parsing result is successfully uploaded to the trusted management platform.

[0035] Specifically, if the connection between the DCS controller and the trusted management platform is interrupted, the change notification files obtained by the trusted agent process are temporarily stored in the processing directory of the trusted agent process until the DCS controller and the trusted management platform resume communication. Then, all change notification files will be uploaded to the trusted management platform at once, which can effectively avoid data loss.

[0036] In one possible implementation, the DCS controller and the trusted management platform maintain communication via a heartbeat mechanism. Specifically, the connection is considered interrupted if the DCS controller does not receive a heartbeat. Furthermore, if a change notification file cannot be transmitted to the trusted management platform, it will remain locally on the DCS controller until the next successful connection, thus preventing the loss of the change notification file.

[0037] In summary, the real-time synchronization method for trusted policies and trusted states of the DCS controller in this invention involves the trusted agent process writing its process PID to a second preset directory upon startup. When the trusted policies and trusted states of the DCS controller change, the changed data is encapsulated into a JSON format to obtain a change notification file. The trusted agent process's process PID is retrieved from the recorded PID, and a change trigger signal is sent to it. Upon receiving the signal, the trusted agent process parses the corresponding change notification file and reports the parsing result to the trusted management platform. The trusted management platform updates the trusted policies and trusted states based on the received parsing result, thus maintaining data consistency between the DCS controller and the trusted management platform. When multiple changes occur simultaneously, all corresponding change notification files are appended together, requiring only one change trigger signal, thus avoiding additional overhead for the trusted agent process due to excessive change trigger signals.

[0038] Through trusted policies and trusted policy synchronization mechanisms, changes to trusted policies and trusted states on the DCS controller can be transmitted to the trusted management platform in real time for display and alerts. This avoids data loss that can occur when socket connections are broken or network load is too high, which is a problem with synchronization mechanisms like socket communication. It ensures that the trusted agent thread can promptly process changes upon receiving a change trigger signal. Even if the trusted agent process cannot process the change in a given instance, the change notification file persists and can be processed the next time the trusted agent process receives a change trigger signal, preventing data loss.

[0039] The following are embodiments of the apparatus of the present invention, which can be used to execute embodiments of the method of the present invention. For details not disclosed in the apparatus embodiments, please refer to the embodiments of the method of the present invention.

[0040] See Figure 3 In another embodiment of the present invention, a real-time synchronization system for trusted policies and trusted states of a DCS controller is provided, which can be used to implement the above-mentioned real-time synchronization method for trusted policies and trusted states of a DCS controller. Specifically, the real-time synchronization system for trusted policies and trusted states of a DCS controller includes a trusted verification module and a trusted agent module; the trusted verification module includes a change response module, a change notification file processing module, and a change trigger signal sending module.

[0041] The change response module is used to obtain the change data of the trusted policy and trusted state of the DCS controller and generate a change trigger signal when the trusted policy and trusted state of the DCS controller change. The change notification file processing module is used to generate a change notification file based on the change data of the trusted policy and trusted state of the DCS controller and store the change notification file in a first preset directory. The change trigger signal sending module is used to obtain the process PID number of the trusted agent process and send the change trigger signal to the trusted agent process based on the process PID number of the trusted agent process. The trusted agent module is used to run the trusted agent process. The trusted agent process responds to the change trigger signal, moves the change notification file in the first preset directory to the processing directory of the trusted agent process, parses the change notification file to obtain the parsing result, and uploads it to the trusted management platform.

[0042] In one possible implementation, generating a change notification file based on the change data of the trusted policy and trusted state of the DCS controller, and storing the change notification file in a first preset directory includes: encapsulating the change data of the trusted policy and trusted state of the DCS controller into a JSON format file according to a predefined format to obtain the change notification file and storing the change notification file in the first preset directory.

[0043] In one possible implementation, a process processing module is further included; the process processing module is used to generate a process PID number of the trusted agent process when the trusted agent process starts, and store the process PID number of the trusted agent process in a second preset directory; the process PID number of the trusted agent process is obtained by obtaining the process PID number of the trusted agent process from the second preset directory.

[0044] In one possible implementation, the trusted proxy module is further configured to: when uploading the parsing result to the trusted management platform fails, store the change notification file in the processing directory of the trusted proxy process, and delete the change notification file in the processing directory of the trusted proxy process after the parsing result is successfully uploaded to the trusted management platform.

[0045] All relevant content of each step involved in the aforementioned embodiments of the DCS controller trusted policy and trusted state real-time synchronization method can be referenced from the functional description of the corresponding functional module of the DCS controller trusted policy and trusted state real-time synchronization system in the embodiments of the present invention, and will not be repeated here.

[0046] The module division in this embodiment of the invention is illustrative and represents only one logical functional division. In actual implementation, other division methods may be used. Furthermore, the functional modules in the various embodiments of the invention can be integrated into a single processor, exist as separate physical entities, or be integrated into a single module. The integrated modules described above can be implemented in hardware or as software functional modules.

[0047] In another embodiment of the present invention, a DCS controller is provided, wherein the DCS controller is equipped with the aforementioned DCS controller trusted policy and trusted state real-time synchronization system.

[0048] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0049] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0050] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0051] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0052] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit it. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that modifications or equivalent substitutions can still be made to the specific implementation of the present invention. Any modifications or equivalent substitutions that do not depart from the spirit and scope of the present invention should be covered within the scope of protection of the claims of the present invention.

Claims

1. A method for real-time synchronization of trusted policies and trusted states of a DCS controller, characterized in that, include: When the trusted policy and trusted state of the DCS controller change, acquire the change data of the trusted policy and trusted state of the DCS controller and generate a change trigger signal; A change notification file is generated based on the change data of the trusted policy and trusted state of the DCS controller, and the change notification file is stored in the first preset directory; Obtain the process PID of the trusted agent process, and send a change trigger signal to the trusted agent process based on the process PID of the trusted agent process; The trusted agent process responds to the change trigger signal by moving the change notification file in the first preset directory to the processing directory of the trusted agent process, parsing the change notification file to obtain the parsing result, and uploading the parsing result to the trusted management platform.

2. The real-time synchronization method for trusted strategy and trusted state of DCS controller according to claim 1, characterized in that, The step of generating a change notification file based on the change data of the trusted policy and trusted state of the DCS controller, and storing the change notification file in the first preset directory, includes: encapsulating the change data of the trusted policy and trusted state of the DCS controller into a JSON format file according to a predefined format to obtain the change notification file and storing the change notification file in the first preset directory.

3. The real-time synchronization method for trusted strategy and trusted state of DCS controller according to claim 1, characterized in that, Also includes: When the trusted agent process starts, a process PID number is generated for the trusted agent process, and the process PID number of the trusted agent process is stored in the second preset directory; The process PID number of the trusted proxy process obtained includes: Obtain the process PID of the trusted agent process from the second preset directory.

4. The real-time synchronization method for trusted strategy and trusted state of DCS controller according to claim 1, characterized in that, When uploading the parsing results to the trusted management platform fails: The change notification file is stored in the processing directory of the trusted agent process. After the parsing result is successfully uploaded to the trusted management platform, the change notification file is deleted from the processing directory of the trusted agent process.

5. The real-time synchronization method for trusted strategy and trusted state of DCS controller according to claim 1, characterized in that, The DCS controller and the trusted management platform maintain a communication connection through a heartbeat mechanism.

6. A real-time synchronization system for trusted policies and trusted states of a DCS controller, characterized in that, Includes a trusted verification module and a trusted proxy module; The trusted verification module includes a change response module, a change notification file processing module, and a change trigger signal sending module; wherein: The change response module is used to obtain the change data of the trusted policy and trusted state of the DCS controller and generate a change trigger signal when the trusted policy and trusted state of the DCS controller change. The change notification file processing module is used to generate change notification files based on the change data of the trusted policy and trusted status of the DCS controller, and store the change notification files in the first preset directory; The change trigger signal sending module is used to obtain the process PID number of the trusted agent process, and send the change trigger signal to the trusted agent process based on the process PID number of the trusted agent process; The trusted proxy module is used to run the trusted proxy process. The trusted proxy process responds to the change trigger signal, moves the change notification file in the first preset directory to the processing directory of the trusted proxy process, parses the change notification file to obtain the parsing result, and uploads it to the trusted management platform.

7. The real-time synchronization system for trusted strategies and trusted states of a DCS controller according to claim 6, characterized in that, The step of generating a change notification file based on the change data of the trusted policy and trusted state of the DCS controller, and storing the change notification file in the first preset directory, includes: encapsulating the change data of the trusted policy and trusted state of the DCS controller into a JSON format file according to a predefined format to obtain the change notification file and storing the change notification file in the first preset directory.

8. The real-time synchronization system for trusted strategies and trusted states of a DCS controller according to claim 6, characterized in that, It also includes a process processing module; The process processing module is used to generate the process PID number of the trusted agent process when the trusted agent process starts, and store the process PID number of the trusted agent process in the second preset directory; The process PID number of the trusted proxy process obtained includes: Obtain the process PID of the trusted agent process from the second preset directory.

9. The real-time synchronization system for trusted strategies and trusted states of a DCS controller according to claim 6, characterized in that, The trusted proxy module is also used to: when uploading the parsing result to the trusted management platform fails, store the change notification file in the processing directory of the trusted proxy process, and delete the change notification file in the processing directory of the trusted proxy process after the parsing result is successfully uploaded to the trusted management platform.

10. A DCS controller, characterized in that, The DCS controller is equipped with a real-time synchronization system for the trusted policy and trusted state of the DCS controller as described in any one of claims 6 to 9.

Images