Industrial Internet information encryption method, device, equipment and computer-readable medium

Abstract

The embodiments of the present disclosure disclose an industrial Internet information encryption method, device, equipment and computer-readable medium. A specific implementation of the method includes: collecting the operating data of each intelligent industrial equipment in real time to obtain an operating data set; performing data processing on the operating data in the operating data set to obtain a monitoring data set; encrypting the monitoring data in the monitoring data set according to the category of the monitoring data included in the monitoring data set to generate encrypted monitoring data to obtain an encrypted monitoring data set; in response to determining that there is abnormal monitoring data in the monitoring data set, storing the abnormal monitoring data as abnormal monitoring data; encrypting and transmitting the abnormal monitoring data to the intelligent industrial equipment control terminal for parameter adjustment of the intelligent industrial equipment with abnormalities. This implementation can improve the security of industrial Internet data.

Description

Technical Field

[0001] The embodiments of the present disclosure relate to the field of computer technology, and specifically to industrial Internet information encryption methods, devices, equipment and computer-readable media. Background Art

[0002] Information encryption is a technology for encrypting Internet information. At present, the method commonly used to encrypt industrial Internet information is to use a preset encryption key for encryption.

[0003] However, when the above method is used to encrypt industrial Internet information, the following technical problems often occur:

[0004] First, directly using the preset encryption key to encrypt data for transmission will lead to data leakage when the key is leaked, threatening data security;

[0005] Second, the encryption of data is not specific, and it is difficult to ensure the security of the encrypted data. Summary of the invention

[0006] The content of this disclosure is used to introduce concepts in a brief form, which will be described in detail in the detailed implementation section below. The content of this disclosure is not intended to identify the key features or essential features of the technical solution claimed for protection, nor is it intended to limit the scope of the technical solution claimed for protection.

[0007] Some embodiments of the present disclosure propose industrial Internet information encryption methods, devices, equipment and computer-readable media to solve one or more of the technical problems mentioned in the above background technology section.

[0008] In a first aspect, some embodiments of the present disclosure provide an industrial Internet information encryption method, the method comprising: collecting operating data of each intelligent industrial device in real time to obtain an operating data set, wherein each operating data in the operating data set corresponds to a different intelligent industrial device, and the operating data in the operating data set comprises: an intelligent industrial device identifier, an operating parameter set, a receiving instruction set and an instruction response data set; in response to reaching a preset time point, processing the operating data in the operating data set to obtain a monitoring data set, wherein the preset time point is set according to a target time interval; processing the monitoring data in the monitoring data set according to the category of the monitoring data included in the monitoring data set The data is encrypted to generate encrypted monitoring data, an encrypted monitoring data set is obtained, and the encrypted monitoring data set is stored; according to the network type of the intelligent industrial equipment with abnormalities corresponding to each abnormal monitoring data in the abnormal monitoring data set, each abnormal monitoring data in the abnormal monitoring data set is encrypted and transmitted to the corresponding intelligent industrial equipment control terminal, so as to adjust the parameters of each intelligent industrial equipment with abnormalities; in response to detecting that any one of the intelligent industrial equipment with abnormalities among the intelligent industrial equipment with abnormalities resumes normal operation, the parameter adjustment data of any one of the intelligent industrial equipment with abnormalities is obtained, and the parameter adjustment data is stored.

[0009] In a second aspect, some embodiments of the present disclosure provide an industrial Internet information encryption device, the device comprising: a collection unit, configured to collect the operating data of each intelligent industrial equipment in real time to obtain an operating data set, wherein each operating data in the above operating data set corresponds to a different intelligent industrial equipment, and the operating data in the above operating data set comprises: an intelligent industrial equipment identifier, an operating parameter set, a receiving instruction set and an instruction response data set; a processing unit, configured to perform data processing on the operating data in the above operating data set in response to reaching a preset time point to obtain a monitoring data set; a first encryption unit, configured to perform encryption processing on the monitoring data in the above monitoring data set according to the category of the monitoring data included in the above monitoring data set to generate encrypted monitoring data, obtain an encrypted monitoring data set, and The data set is stored; the first storage unit is configured to, in response to determining that there is abnormal monitoring data in the above monitoring data set, store the above abnormal monitoring data as abnormal monitoring data; the second encryption unit is configured to encrypt and transmit each abnormal monitoring data in the above abnormal monitoring data set to the corresponding intelligent industrial equipment control terminal according to the network type of the intelligent industrial equipment with abnormalities corresponding to each abnormal monitoring data in the above abnormal monitoring data set, so as to adjust the parameters of each intelligent industrial equipment with abnormalities; the second storage unit is configured to, in response to detecting that any one of the above intelligent industrial equipment with abnormalities has resumed normal operation, obtain the parameter adjustment data of any one of the above intelligent industrial equipment with abnormalities, and store the above parameter adjustment data.

[0010] In a third aspect, some embodiments of the present disclosure provide an electronic device comprising: one or more processors; a storage device on which one or more programs are stored, and when the one or more programs are executed by the one or more processors, the one or more processors implement the method described in any implementation manner of the above-mentioned first aspect.

[0011] In a fourth aspect, some embodiments of the present disclosure provide a computer-readable medium having a computer program stored thereon, wherein when the program is executed by a processor, the method described in any implementation manner of the above-mentioned first aspect is implemented.

[0012] The above-mentioned various embodiments of the present disclosure have the following beneficial effects: through the industrial Internet information encryption method of some embodiments of the present disclosure, the security of data storage and transmission can be improved to a certain extent. Specifically, the reason why data security is threatened is that directly using a preset encryption key to encrypt and transmit data will cause data leakage when the key is leaked, threatening data security. Based on this, the industrial Internet information encryption method of some embodiments of the present disclosure, first, collects the operation data of each intelligent industrial device in real time to obtain an operation data set, wherein each operation data in the above operation data set corresponds to a different intelligent industrial device, and the operation data in the above operation data set includes: an intelligent industrial device identifier, an operation parameter set, a receiving instruction set and an instruction response data set. Then, in response to reaching a preset time point, the operation data in the above operation data set is processed to obtain a monitoring data set, wherein the above preset time point is set according to the target time interval. Then, according to the category of the monitoring data included in the above monitoring data set, the monitoring data in the above monitoring data set is encrypted to generate encrypted monitoring data, obtain an encrypted monitoring data set, and store the above encrypted monitoring data set. Thus, specific encryption of the monitoring data set can be achieved according to different categories of monitoring data. Next, in response to determining that there is abnormal monitoring data in the above monitoring data set, the above abnormal monitoring data is stored as abnormal monitoring data. Finally, according to the network type of the intelligent industrial equipment with abnormalities corresponding to each abnormal monitoring data in the above abnormal monitoring data set, each abnormal monitoring data in the above abnormal monitoring data set is encrypted and transmitted to the corresponding intelligent industrial equipment control terminal for parameter adjustment of each intelligent industrial equipment with abnormalities. And in response to detecting that any one of the above-mentioned intelligent industrial equipment with abnormalities has resumed normal operation, the parameter adjustment data of any one of the above-mentioned intelligent industrial equipment with abnormalities is obtained, and the above-mentioned parameter adjustment data is stored. In this way, dynamic encryption of data can be achieved according to the real-time connected network status, thereby improving the security of data. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] The above and other features, advantages and aspects of the embodiments of the present disclosure will become more apparent with reference to the following detailed description in conjunction with the accompanying drawings. Throughout the accompanying drawings, the same or similar reference numerals represent the same or similar elements. It should be understood that the drawings are schematic and that components and elements are not necessarily drawn to scale.

[0014] Figure 1 is a flow chart of some embodiments of the industrial Internet information encryption method according to the present disclosure;

[0015] Figure 2It is a schematic diagram of the structure of some embodiments of the industrial Internet information encryption device disclosed in the present invention;

[0016] Figure 3 It is a schematic diagram of the structure of an electronic device suitable for implementing some embodiments of the present disclosure. DETAILED DESCRIPTION

[0017] Embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although certain embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be construed as being limited to the embodiments set forth herein. On the contrary, these embodiments are provided to provide a more thorough and complete understanding of the present disclosure. It should be understood that the drawings and embodiments of the present disclosure are only for exemplary purposes and are not intended to limit the scope of protection of the present disclosure.

[0018] It should also be noted that, for ease of description, only the parts related to the invention are shown in the drawings. In the absence of conflict, the embodiments and features in the embodiments of the present disclosure can be combined with each other.

[0019] It should be noted that the concepts such as "first" and "second" mentioned in the present disclosure are only used to distinguish different devices, modules or units, and are not used to limit the order or interdependence of the functions performed by these devices, modules or units.

[0020] It should be noted that the modifications of "one" and "plurality" mentioned in the present disclosure are illustrative rather than restrictive, and those skilled in the art should understand that unless otherwise clearly indicated in the context, it should be understood as "one or more".

[0021] The names of the messages or information exchanged between multiple devices in the embodiments of the present disclosure are only used for illustrative purposes and are not used to limit the scope of these messages or information.

[0022] The present disclosure will be described in detail below with reference to the accompanying drawings and in conjunction with embodiments.

[0023] refer to Figure 1 , shows a process 100 of some embodiments of the industrial Internet information encryption method according to the present disclosure. The industrial Internet information encryption method includes the following steps:

[0024] Step 101, collect the operation data of each intelligent industrial equipment in real time to obtain an operation data set.

[0025] In some embodiments, the execution subject of the industrial Internet information encryption method can collect the operation data of each intelligent industrial device in real time through a wired connection or a wireless connection to obtain an operation data set. Among them, each operation data in the above operation data set can correspond to different intelligent industrial devices respectively. The operation data in the above operation data set may include: an intelligent industrial equipment identifier, an operation parameter set, a receiving instruction set and an instruction response data set. The intelligent industrial equipment identifier can be used to uniquely identify an intelligent industrial device. The receiving instruction in the receiving instruction set is the instruction received by the intelligent industrial device. The instruction response data in the instruction response data set is the response data of the intelligent industrial device to the received instruction.

[0026] Step 102 : in response to reaching a preset time point, processing the operation data in the operation data set to obtain a monitoring data set.

[0027] In some embodiments, the preset time point may be midnight of each day. In response to reaching the preset time point, the execution subject processes the operation data in the operation data set to obtain the monitoring data set, which may include the following steps:

[0028] The first step is to determine whether there is an operating parameter that meets the preset condition in the above operating parameter set according to each pre-set parameter interval. The above preset condition can be that the operating parameter is greater than the maximum value of the corresponding parameter interval in the above parameter intervals, or the operating parameter is less than the minimum value of the corresponding parameter interval in the above parameter intervals.

[0029] In practice, each parameter range can be set according to actual application needs and is not limited here.

[0030] In the second step, in response to determining that there are operating parameters satisfying the preset conditions in the operating parameter set, the operating parameters satisfying the preset conditions are determined as abnormal operating parameters.

[0031] The third step is to generate a parameter trend graph according to the change trend of the abnormal operation parameter within a preset operation cycle, wherein the preset operation cycle may be the time interval between two adjacent preset time points.

[0032] The fourth step is to determine the above abnormal operating parameters and the above parameter trend graph as monitoring data.

[0033] Optionally, in response to reaching a preset time point, the execution subject processes the operation data in the operation data set to obtain a monitoring data set, and may further include the following steps:

[0034] In the first step, for each receiving instruction in the above receiving instruction set, perform the following verification sub-steps:

[0035] The first verification sub-step is to obtain the log file of the above-mentioned receiving instruction.

[0036] The second verification sub-step is to determine the user ID of the user who sent the receiving instruction according to the log file to obtain the target user ID. The log file includes the user ID and the receiving instruction.

[0037] The third verification sub-step is to determine the permission information of the user represented by the target user identifier using the pre-stored user permission information set to obtain the target permission information. The user permission information in the user permission information set may include a user identifier and an instruction set.

[0038] A fourth verification sub-step, in response to determining that the target authority information does not include the receiving instruction, determines that the receiving instruction is an abnormal instruction.

[0039] The second step is to determine the above abnormal instructions and the above target authority information as monitoring data.

[0040] Optionally, in response to reaching a preset time point, the execution subject processes the operation data in the operation data set to obtain a monitoring data set, further comprising the following steps:

[0041] The first step is to match the receiving instructions in the receiving instruction set with the instruction response data in the instruction response data set to obtain a matching set, wherein the matching subset includes at least one receiving instruction and at least one instruction response data.

[0042] The second step is to determine whether there are unmatched received instructions and instruction response data in the received instruction set and the instruction response data set.

[0043] In a third step, in response to determining that there are unmatched received instructions and instruction response data in the received instruction set and the instruction response data set, the unmatched received instructions and instruction response data are determined as monitoring data.

[0044] Step 103 , according to the category of the monitoring data included in the monitoring data set, encrypt the monitoring data in the monitoring data set to generate encrypted monitoring data, obtain the encrypted monitoring data set, and store the encrypted monitoring data set.

[0045] In some embodiments, the execution subject encrypts the monitoring data in the monitoring data set to generate encrypted monitoring data according to the category of the monitoring data included in the monitoring data set, obtains the encrypted monitoring data set, and stores the encrypted monitoring data set, which may include the following steps:

[0046] The first step is to determine that the monitoring data set meets the first preset condition, and to determine the encryption method of the monitoring data set to be the first encryption method. The first preset condition may be that the monitoring data set only includes the abnormal operation parameter and the parameter trend graph.

[0047] The second step is to determine whether the monitoring data set meets the second preset condition, and to determine the encryption method of the monitoring data set to be the second encryption method. The second preset condition may be that the monitoring data set includes the abnormal instruction and the target authority information.

[0048] In the third step, in response to determining that the encryption method of the monitoring data set is the first encryption method, the following transformation processing sub-steps are performed on the initial encryption key parameters to obtain the target encryption key:

[0049] The first transformation processing sub-step is to send a key generation response request to the above-mentioned intelligent industrial device with abnormality. The above-mentioned key generation response request may include a parameter name. The parameter name included in the above-mentioned key generation response request may be randomly selected from various parameter names of the above-mentioned intelligent industrial device with abnormality.

[0050] The second transformation processing sub-step is to receive the response data returned by the abnormal intelligent industrial device in response to the key generation response request. The response data may be the parameter value corresponding to the parameter name when the abnormal intelligent industrial device receives the key generation response request.

[0051] The third transformation processing sub-step uses a pseudo-random number generator to generate a first pseudo-random number.

[0052] The fourth transformation processing sub-step randomly inserts each numerical value in the corresponding data into the first pseudo-random number to obtain a first concatenated key parameter.

[0053] The fifth transformation processing sub-step is to concatenate the first concatenated key parameter onto the tail end of the initial encryption key parameter to obtain a target encryption parameter.

[0054] The sixth transformation processing sub-step is to generate a target encryption key using the target encryption parameters, wherein the target encryption key can be generated using a DES (Data Encryption Standard) algorithm.

[0055] The fourth step is to encrypt the monitoring data set using the target encryption key to obtain an encrypted monitoring data set.

[0056] In step 5, in response to determining that the encryption method of the monitoring data set is the second encryption method, the monitoring data set is encrypted using the first initial encryption key to obtain an encrypted monitoring data set. The first initial encryption key may be updated periodically.

[0057] The above-mentioned steps of encrypting the monitoring data in the monitoring data set to generate encrypted monitoring data according to the category of the monitoring data included in the monitoring data set, obtaining the encrypted monitoring data set, and storing the encrypted monitoring data set and its extended sub-steps are an inventive point of an embodiment of the present disclosure, which solves the second technical problem mentioned in the background technology, "the encryption of data is not specific, and it is difficult to ensure the security of the encrypted data". The factors that lead to the above technical problems are often as follows: directly using a preset encryption key to encrypt and transmit data. If the above factors are solved, the effect of improving data security can be achieved. In order to achieve this effect, the present disclosure determines the collective encryption method for the monitoring data set according to the data type included in the above-mentioned monitoring data set. When the above-mentioned monitoring data set only includes abnormal operating parameters and parameter trend charts, the real-time response data of the intelligent industrial equipment is used to change the initial encryption key parameters, and then the transformed initial encryption key parameters are used to generate an encryption key. In this way, the security of the encryption key can be improved, and the security of the encrypted data can be improved.

[0058] Step 104 : in response to determining that the monitoring data set contains abnormal monitoring data, the abnormal monitoring data is stored as abnormal monitoring data.

[0059] In some embodiments, the execution entity may store the abnormal monitoring data as abnormal monitoring data in response to determining that the monitoring data set contains abnormal monitoring data.

[0060] Step 105, according to the network type of the intelligent industrial equipment with abnormalities corresponding to each abnormal monitoring data in the abnormal monitoring data set, encrypt and transmit each abnormal monitoring data in the abnormal monitoring data set to the corresponding intelligent industrial equipment control terminal, so as to adjust the parameters of each intelligent industrial equipment with abnormalities.

[0061] In some embodiments, the execution subject encrypts and transmits each abnormal monitoring data in the abnormal monitoring data set to the corresponding intelligent industrial equipment control terminal according to the network type of the intelligent industrial equipment with abnormalities corresponding to each abnormal monitoring data in the abnormal monitoring data set, so as to adjust the parameters of each intelligent industrial equipment with abnormalities, and the following steps can be performed for each intelligent industrial equipment with abnormalities:

[0062] The first step is to determine the network type of the network to which the above-mentioned abnormal intelligent industrial equipment is connected, and obtain the target network type.

[0063] In the second step, in response to determining that the target network type is an intranet, the abnormal monitoring data is encrypted using a second initial encryption key to obtain encrypted abnormal monitoring data, and the encrypted abnormal monitoring data is transmitted to the intelligent industrial equipment control terminal using the intranet. The second initial encryption key can be updated regularly.

[0064] In the third step, in response to determining that the target network type is an external network, the following encryption sub-steps are performed:

[0065] The first encryption sub-step is to send the administrator's biometric verification information to the above-mentioned intelligent industrial equipment control terminal.

[0066] The second encryption sub-step is to receive the administrator's biometric characteristics returned by the intelligent industrial equipment control terminal to obtain the target administrator's biometric characteristics.

[0067] The third encryption sub-step is to match the biometric features of the target administrator using a pre-stored set of administrator biometric features.

[0068] The fourth encryption sub-step, in response to determining that the administrator biometric feature that matches the target administrator biometric feature exists in the administrator biometric feature set, encrypts the abnormality monitoring data using the second initial encryption key to obtain encrypted abnormality monitoring data, and transmits the encrypted abnormality monitoring data to the intelligent industrial equipment control terminal using an external network.

[0069] The fourth step, in response to determining that there is no administrator biometric feature matching the target administrator biometric feature in the administrator biometric feature set, controls the alarm device to sound an alarm, and uses the second initial encryption key to encrypt the abnormal monitoring data to obtain encrypted abnormal monitoring data, and uses the intranet to transmit the encrypted abnormal monitoring data to the intelligent industrial equipment control terminal.

[0070] Step 106 , in response to detecting that any one of the intelligent industrial devices with abnormalities has resumed normal operation, obtaining parameter adjustment data of any one of the intelligent industrial devices with abnormalities, and storing the parameter adjustment data.

[0071] In some embodiments, the above-mentioned execution entity obtains parameter adjustment data of any one of the above-mentioned abnormal intelligent industrial devices in response to detecting that the above-mentioned abnormal intelligent industrial devices have resumed normal operation, and stores the above-mentioned parameter adjustment data.

[0072] In some optional implementation methods of some embodiments, the above-mentioned execution entity can also send the re-monitored abnormal monitoring data and the above-mentioned parameter adjustment data to the above-mentioned intelligent industrial equipment control terminal in response to the abnormal monitoring data of any of the above-mentioned intelligent industrial equipment with abnormality being detected again.

[0073] The above-mentioned various embodiments of the present disclosure have the following beneficial effects: through the industrial Internet information encryption method of some embodiments of the present disclosure, the security of data storage and transmission can be improved to a certain extent. Specifically, the reason why data security is threatened is that directly using a preset encryption key to encrypt and transmit data will cause data leakage when the key is leaked, threatening data security. Based on this, the industrial Internet information encryption method of some embodiments of the present disclosure, first, collects the operation data of each intelligent industrial device in real time to obtain an operation data set, wherein each operation data in the above operation data set corresponds to a different intelligent industrial device, and the operation data in the above operation data set includes: an intelligent industrial device identifier, an operation parameter set, a receiving instruction set and an instruction response data set. Then, in response to reaching a preset time point, the operation data in the above operation data set is processed to obtain a monitoring data set, wherein the above preset time point is set according to the target time interval. Then, according to the category of the monitoring data included in the above monitoring data set, the monitoring data in the above monitoring data set is encrypted to generate encrypted monitoring data, obtain an encrypted monitoring data set, and store the above encrypted monitoring data set. Thus, specific encryption of the monitoring data set can be achieved according to different categories of monitoring data. Next, in response to determining that there is abnormal monitoring data in the above monitoring data set, the above abnormal monitoring data is stored as abnormal monitoring data. Finally, according to the network type of the intelligent industrial equipment with abnormalities corresponding to each abnormal monitoring data in the above abnormal monitoring data set, each abnormal monitoring data in the above abnormal monitoring data set is encrypted and transmitted to the corresponding intelligent industrial equipment control terminal for parameter adjustment of each intelligent industrial equipment with abnormalities. And in response to detecting that any one of the above-mentioned intelligent industrial equipment with abnormalities has resumed normal operation, the parameter adjustment data of any one of the above-mentioned intelligent industrial equipment with abnormalities is obtained, and the above-mentioned parameter adjustment data is stored. In this way, dynamic encryption of data can be achieved according to the real-time connected network status, thereby improving the security of data.

[0074] Further references Figure 2 As an implementation of the methods shown in the above figures, the present disclosure provides some embodiments of an industrial Internet information encryption device. These device embodiments are similar to Figure 1 Corresponding to the method embodiments shown, the device can be specifically applied to various electronic devices.

[0075] like Figure 2 As shown, the industrial Internet information encryption device 200 of some embodiments includes: a collection unit 201, a processing unit 202, a first encryption unit 203, a first storage unit 204, a second encryption unit 205 and a second storage unit 206. The collection unit 201 is configured to collect the operation data of each intelligent industrial device in real time to obtain an operation data set, wherein each operation data in the above operation data set corresponds to a different intelligent industrial device, and the operation data in the above operation data set includes: an intelligent industrial device identifier, an operation parameter set, a receiving instruction set and an instruction response data set; the processing unit 202 is configured to process the operation data in the above operation data set in response to reaching a preset time point to obtain a monitoring data set, wherein the above preset time point is set according to a target time interval; the first encryption unit 203 is configured to encrypt the monitoring data in the above monitoring data set according to the category of the monitoring data included in the above monitoring data set to generate encrypted monitoring data, obtain an encrypted monitoring data set, and store the above encrypted monitoring data set. storage; the first storage unit 204 is configured to, in response to determining that the monitoring data set contains abnormal monitoring data, store the abnormal monitoring data as abnormal monitoring data; the second encryption unit 205 is configured to encrypt and transmit each abnormal monitoring data in the abnormal monitoring data set to the corresponding intelligent industrial equipment control terminal according to the network type of the intelligent industrial equipment with abnormalities corresponding to each abnormal monitoring data in the abnormal monitoring data set, so as to adjust the parameters of each intelligent industrial equipment with abnormalities; the second storage unit 206 is configured to, in response to detecting that any one of the intelligent industrial equipment with abnormalities among the intelligent industrial equipment with abnormalities resumes normal operation, obtain the parameter adjustment data of any one of the intelligent industrial equipment with abnormalities, and store the parameter adjustment data.

[0076] It is understandable that the units recorded in the industrial Internet information encryption device 200 and the reference Figure 1 The steps in the described method correspond to each other. Therefore, the operations, features and beneficial effects described above for the method are also applicable to the industrial Internet information encryption device 200 and the units contained therein, and will not be repeated here.

[0077] Reference below Figure 3 , which shows a structural schematic diagram of an electronic device 300 suitable for implementing some embodiments of the present disclosure. Figure 3 The electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0078] like Figure 3 As shown, the electronic device 300 may include a processing device (e.g., a central processing unit, a graphics processing unit, etc.) 301, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 302 or a program loaded from a storage device 308 to a random access memory (RAM) 303. In the RAM 303, various programs and data required for the operation of the electronic device 300 are also stored. The processing device 301, the ROM 302, and the RAM 303 are connected to each other via a bus 304. An input / output (I / O) interface 305 is also connected to the bus 304.

[0079] Typically, the following devices may be connected to the I / O interface 305: an input device 306 including, for example, a touch screen, a touch pad, a keyboard, a mouse, a camera, a microphone, an accelerometer, a gyroscope, etc.; an output device 307 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; and a communication device 309. The communication device 309 may allow the electronic device 300 to communicate with other devices wirelessly or by wire to exchange data. Figure 3 The electronic device 300 is shown with various devices, but it should be understood that it is not required to implement or possess all the devices shown. More or fewer devices may be implemented or possessed instead. Figure 3 Each block shown in the figure may represent one device, or may represent multiple devices as required.

[0080] In particular, according to some embodiments of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, some embodiments of the present disclosure include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In some such embodiments, the computer program can be downloaded and installed from the network through the communication device 309, or installed from the storage device 308, or installed from the ROM 302. When the computer program is executed by the processing device 301, the above-mentioned functions defined in the method of some embodiments of the present disclosure are executed.

[0081] It should be noted that the computer-readable medium recorded in some embodiments of the present disclosure may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In some embodiments of the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, device or device. In some embodiments of the present disclosure, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer readable signal media may also be any computer readable medium other than computer readable storage media, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer readable medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination of the above.

[0082] In some embodiments, the client and the server may communicate using any currently known or future developed network protocol such as HTTP (HyperText Transfer Protocol), and may be interconnected with any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include a local area network ("LAN"), a wide area network ("WAN"), an internet (e.g., the Internet), and a peer-to-peer network (e.g., an ad hoc peer-to-peer network), as well as any currently known or future developed network.

[0083] The above-mentioned computer-readable medium may be included in the above-mentioned electronic device; or it may exist independently without being assembled into the electronic device. The above-mentioned computer-readable medium carries one or more programs. When the above-mentioned one or more programs are executed by the electronic device, the electronic device: collects the operation data of each intelligent industrial device in real time to obtain an operation data set, wherein each operation data in the above-mentioned operation data set corresponds to a different intelligent industrial device, and the operation data in the above-mentioned operation data set includes: an intelligent industrial device identification, an operation parameter set, a receiving instruction set and an instruction response data set; in response to reaching a preset time point, the operation data in the above-mentioned operation data set is processed to obtain a monitoring data set, wherein the above-mentioned preset time point is set according to a target time interval; according to the category of the monitoring data included in the above-mentioned monitoring data set, the monitoring data in the above-mentioned monitoring data set is encrypted to generate encrypted monitoring data , obtain an encrypted monitoring data set, and store the encrypted monitoring data set; in response to determining that there is abnormal monitoring data in the monitoring data set, store the abnormal monitoring data as abnormal monitoring data; according to the network type of the intelligent industrial equipment with abnormalities corresponding to each abnormal monitoring data in the abnormal monitoring data set, encrypt and transmit each abnormal monitoring data in the abnormal monitoring data set to the corresponding intelligent industrial equipment control terminal for parameter adjustment of each intelligent industrial equipment with abnormalities; in response to detecting that any one of the intelligent industrial equipment with abnormalities among the intelligent industrial equipment with abnormalities resumes normal operation, obtain parameter adjustment data of any one of the intelligent industrial equipment with abnormalities, and store the parameter adjustment data.

[0084] Computer program code for performing the operations of some embodiments of the present disclosure may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0085] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present disclosure. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some implementations as replacements, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0086] The units described in some embodiments of the present disclosure may be implemented by software or by hardware. The described units may also be provided in a processor, for example, may be described as: a processor including a collection unit, a processing unit, a first encryption unit, a first storage unit, a second encryption unit, and a second storage unit. The names of these units do not, in some cases, constitute limitations on the units themselves, for example, the collection unit may also be described as a "unit for collecting the operating data of each intelligent industrial device in real time".

[0087] The functions described above herein may be performed at least in part by one or more hardware logic components. For example, without limitation, exemplary types of hardware logic components that may be used include: field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), and the like.

Claims

1. An industrial Internet information encryption method, comprising: Collecting the operation data of each intelligent industrial device in real time to obtain an operation data set, wherein each operation data in the operation data set corresponds to a different intelligent industrial device, and the operation data in the operation data set includes: an intelligent industrial device identifier, an operation parameter set, a received instruction set, and an instruction response data set; In response to reaching a preset time point, performing data processing on the operation data in the operation data set to obtain a monitoring data set, wherein the preset time point is set according to a target time interval; According to the category of the monitoring data included in the monitoring data set, encrypt the monitoring data in the monitoring data set to generate encrypted monitoring data, obtain the encrypted monitoring data set, and store the encrypted monitoring data set; In response to determining that the monitoring data set contains abnormal monitoring data, taking the abnormal monitoring data as abnormal monitoring data to obtain the abnormal monitoring data set, and storing the abnormal monitoring data set; According to the network type of the intelligent industrial equipment with abnormalities corresponding to each abnormal monitoring data in the abnormal monitoring data set, each abnormal monitoring data in the abnormal monitoring data set is encrypted and transmitted to the corresponding intelligent industrial equipment control terminal, so as to adjust the parameters of each intelligent industrial equipment with abnormalities; In response to detecting that any one of the intelligent industrial devices with abnormalities has resumed normal operation, parameter adjustment data of the intelligent industrial device with abnormalities is obtained, and the parameter adjustment data is stored.

2. The method according to claim 1, wherein: The method further comprises: In response to detecting the abnormal monitoring data of any one of the intelligent industrial devices with abnormality again, the abnormal monitoring data and the parameter adjustment data monitored again are sent to the intelligent industrial device control terminal.

3. The method according to claim 2, wherein: In response to reaching a preset time point, processing the operation data in the operation data set to obtain a monitoring data set includes: According to each preset parameter interval, determining whether there is an operating parameter that meets a preset condition in the operating parameter set, wherein the preset condition is that the operating parameter is greater than the maximum value of the corresponding parameter interval in each parameter interval, or the operating parameter is less than the minimum value of the corresponding parameter interval in each parameter interval; In response to determining that there is an operating parameter satisfying the preset condition in the operating parameter set, determining the operating parameter satisfying the preset condition as an abnormal operating parameter; Generate a parameter trend graph according to the change trend of the abnormal operation parameter within a preset operation cycle; The abnormal operation parameter and the parameter trend graph are determined as monitoring data.

4. The method according to claim 3, wherein: In response to reaching a preset time point, processing the operation data in the operation data set to obtain a monitoring data set also includes: For each receiving instruction in the receiving instruction set, the following verification sub-steps are performed: Obtaining a log file of the received instruction; Determine the user ID that sends the receiving instruction according to the log file, and obtain the target user ID; Determine the permission information of the user represented by the target user identifier by using a pre-stored user permission information set to obtain target permission information, wherein the user permission information in the user permission information set includes a user identifier and an instruction set; In response to determining that the target permission information does not include the received instruction, determining that the received instruction is an abnormal instruction; The abnormal instruction and the target authority information are determined as monitoring data.

5. The method according to claim 4, wherein: In response to reaching a preset time point, processing the operation data in the operation data set to obtain a monitoring data set also includes: Matching the receiving instructions in the receiving instruction set with the instruction response data in the instruction response data set to obtain a matching group set, wherein the matching group set includes at least one receiving instruction and at least one instruction response data; Determine whether there are unmatched received instructions and instruction response data in the received instruction set and the instruction response data set.

6. The method according to claim 5, wherein: In response to reaching a preset time point, processing the operation data in the operation data set to obtain a monitoring data set also includes: In response to determining that unmatched received instructions and instruction response data exist in the received instruction set and the instruction response data set, the unmatched received instructions and instruction response data are determined as monitoring data.

7. An industrial Internet information encryption device, comprising: The collecting unit is configured to collect the operation data of each intelligent industrial device in real time to obtain an operation data set, wherein each operation data in the operation data set corresponds to a different intelligent industrial device, and the operation data in the operation data set includes: an intelligent industrial device identifier, an operation parameter set, a received instruction set, and an instruction response data set; a processing unit configured to, in response to reaching a preset time point, perform data processing on the operation data in the operation data set to obtain a monitoring data set, wherein the preset time point is set according to a target time interval; a first encryption unit configured to encrypt the monitoring data in the monitoring data set according to the category of the monitoring data included in the monitoring data set to generate encrypted monitoring data, obtain the encrypted monitoring data set, and store the encrypted monitoring data set; a first storage unit configured to, in response to determining that the monitoring data set contains abnormal monitoring data, use the abnormal monitoring data as abnormal monitoring data to obtain the abnormal monitoring data set, and store the abnormal monitoring data set; The second encryption unit is configured to encrypt and transmit each abnormal monitoring data in the abnormal monitoring data set to the corresponding intelligent industrial equipment control terminal according to the network type of the intelligent industrial equipment with abnormalities corresponding to each abnormal monitoring data in the abnormal monitoring data set, so as to adjust the parameters of each intelligent industrial equipment with abnormalities; The second storage unit is configured to obtain parameter adjustment data of any one of the abnormal intelligent industrial devices in response to detecting that the abnormal intelligent industrial device resumes normal operation, and store the parameter adjustment data.

8. An electronic device comprising: one or more processors; a storage device having one or more programs stored thereon, When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 6.

9. A computer readable medium having a computer program stored thereon, wherein: When the program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.

Images