Method and system for realizing trusted DCS (Distributed Control System) fusing point-to-point and server architectures

Abstract

The invention discloses a trusted DCS implementation method and system fusing point-to-point and server architectures, and relates to the technical field of industrial control systems, and the method comprises the steps: building a data link of a calculation part and a protection part on a terminal of a trusted DCS; establishing a data link between the trusted upper computer and the trusted management platform on the trusted upper computer; releasing trusted data of the trusted DCS in the point-to-point architecture of the DCS; and credible state prompting and alarming functions are added in a diagnosis page of the DCS, and credible item starting and stopping, credible abnormity alarming and alarming processing are carried out. According to the invention, by establishing a trusted data link, realizing data intercommunication and introducing a dynamic credibility evaluation mechanism, real-time data release and transmission of trusted information are realized in a point-to-point architecture of the DCS, so that the DCS system can know trusted state change in real time and give an alarm, the ability of the system to resist security threats is remarkably improved, and the reliability of the system is improved. And meanwhile, the compatibility with the existing DCS architecture is kept.

Description

Technical Field

[0001] The present invention relates to the technical field of industrial control systems, and in particular to a trusted DCS implementation method and system integrating point-to-point and server architectures. Background Art

[0002] The trusted control system of a thermal power plant includes a trusted controller at the field control layer, a trusted terminal at the human-machine interface at the process monitoring layer, and a trusted management platform. The series of devices in the field control layer and the process monitoring layer are trusted enhancement objects, including trusted enhancement of computing hardware, trusted enhancement of firmware, trusted enhancement of software, and unified management of trusted enhancement objects. Trusted enhancement objects include computing devices (such as trusted DPU, trusted host computer, etc.), communication network equipment (such as switches, gateways, etc.), regional boundary equipment (such as firewalls, network gates, intrusion prevention systems, intrusion detection systems, etc.) and network security equipment (such as operation and maintenance systems, log audit systems, USB isolation devices, etc.).

[0003] The trusted enhancement objects related to DCS include trusted controllers and trusted host computers. The trusted controllers and trusted host computers include computing parts and protection parts. The protection part realizes the trusted enhancement function, and the computing part realizes the DCS business function.

[0004] The unified management of trusted enhanced objects is achieved through a trusted management platform, which is management software running on the host computer of the power generation control system. The trusted management platform can realize trusted monitoring of the operating status of the trusted enhancement of the operating system, including file integrity protection monitoring, process protection monitoring, application integrity verification monitoring, etc. At the same time, it can configure the trusted policies of each terminal and perform alarms and alarm disposal. The trusted policy is the basis for the management platform to monitor the status of trusted enhanced objects.

[0005] At present, the communication between the trusted management platform and the trusted enhanced object adopts a custom protocol to realize trusted state monitoring, policy issuance, alarm handling, etc. The custom protocol is distinguished from the DCS business communication protocol. In addition to realizing communication with computing devices, it can also realize communication with communication network devices, regional boundary devices and network security devices. In order to reduce the impact on the real-time and load rate of DCS computing devices, the integrity and confidentiality verification requirements of trusted related communications are high, and the real-time requirements are not high, which leads to the system being unable to know the trusted state changes in real time. When a series of failures occur due to trusted anomalies, it is not clear to know the order of occurrence of trusted anomalies and other failures, resulting in unclear fault analysis. At the same time, the server of the trusted management platform is generally arranged separately. When the trusted management platform server fails, the DCS system will not be able to know the trusted state of the trusted terminal, and the trusted management and control platform requires the relevant permissions of the security administrator to log in, which is not conducive to timely monitoring and abnormal handling when the trusted state changes. Summary of the invention

[0006] In view of the above-mentioned DCS's inadequacies in terms of safety, reliability and real-time monitoring capability, the present invention is proposed.

[0007] Therefore, the technical problem solved by the present invention is: by establishing a trusted data link, realizing data intercommunication and introducing a comprehensive credibility score and an object dynamic load measurement value, the real-time data publishing and transmission of trusted information is realized in the point-to-point architecture of the DCS, so that the DCS system can be aware of the trusted state changes and generate alarms in real time, which significantly improves the system's ability to resist security threats while maintaining compatibility with the existing DCS architecture.

[0008] To solve the above technical problems, the present invention provides the following technical solutions: a method for implementing a trusted DCS that integrates point-to-point and server architectures, comprising: establishing a computing part and a protection part data link on a terminal of the trusted DCS; establishing a data link between the trusted host computer and a trusted management platform on a trusted host computer; based on the computing part and the protection part data link and the data link between the trusted host computer and the trusted management platform, publishing trusted data of the trusted DCS in the point-to-point architecture of the DCS; based on the computing part and the protection part data link, the data link between the trusted host computer and the trusted management platform, and the trusted data generated by the trusted terminal and the trusted platform, adding a trusted status prompt and an alarm function to the diagnosis page of the DCS, and performing trusted item start and stop, trusted abnormal alarm and alarm disposal.

[0009] As a preferred solution of the trusted DCS implementation method of the present invention that integrates point-to-point and server architecture, establishing a data link between the computing part and the protection part includes the computing part obtaining the trusted data of the protection part, and the trusted data includes the trusted process heartbeat, startup trusted state, static trusted state, dynamic trusted state, program whitelist interception state, process protection state and application access control state.

[0010] As a preferred solution of the trusted DCS implementation method integrating point-to-point and server architecture of the present invention, wherein: building data intercommunication between the trusted host computer and the management platform includes establishing a connection between the trusted host computer and the trusted management platform, adopting a redundant configuration, and setting a first trusted client and a second trusted client; determining key data for intercommunication, the key data for intercommunication includes trusted item start and stop instructions, trusted abnormal alarms and alarm information disposal; adopting a custom encryption protocol between the protection part of the trusted host computer and the trusted management platform; the computing part of the trusted host computer obtains trusted data from the trusted management platform; based on the point-to-point architecture of DCS, publishing the obtained data in the business system so that the data can be subscribed, read and written; establishing compatibility with the existing architecture, and maintaining the interaction mode and logic between the trusted management platform and the trusted enhanced object.

[0011] As a preferred solution of the trusted DCS implementation method of the present invention that integrates point-to-point and server architecture, maintaining the interaction mode and logic between the trusted management platform and the trusted enhanced object includes maintaining the identity authentication mechanism, maintaining data encryption transmission, maintaining status monitoring function, maintaining policy issuance capability and maintaining data backtracking function.

[0012] As a preferred solution of the trusted DCS implementation method integrating point-to-point and server architecture of the present invention, wherein: adding a trusted status prompt and alarm function in the DCS diagnostic page includes: evaluating the current trusted status, evaluating the current trusted status includes collecting trusted process heartbeat status data, startup trusted status data, dynamic trusted status data, application access control status data and process protection status data; summing the collected status data, combining the square root function and the logarithmic function to calculate the weighted data; integrating each weighted data, adding the time factor in combination with the exponential decay function, and using the trusted data of the trusted enhancement object and the trust distribution function to normalize the integration result to obtain a comprehensive trust score, and the calculation formula of the comprehensive trust score is as follows:

[0013]

[0014] Among them, T represents the comprehensive credibility score, H i represents the heartbeat data of the i-th trusted process, S i represents the i-th startup trusted state data, D i represents the ith dynamic trusted state data, A i represents the access control status data of the i-th application, P i represents the protection state data of the i-th process, γ is a constant, λ represents the attenuation coefficient, n represents the total number of state data, m represents the total number of trusted enhancement objects, G j represents the credibility data of the jth credible enhancement object, k is the gain coefficient, F j represents the credibility distribution threshold of the jth credibility enhancement object, and θ represents the translation parameter of the credibility distribution; adds a credibility status display, and provides a credibility status prompt based on the credibility data and the comprehensive credibility score; creates a secondary page for credibility status details, builds a credibility enabling operation interface, and restricts permissions through the security administrator identity; adds credibility-related alarms, sets up two types of alarm mechanisms, and establishes an alarm handling process.

[0015] As a preferred solution of the trusted DCS implementation method integrating point-to-point and server architecture of the present invention, the two types of alarm mechanisms include trusted real-time alarm of DCS system and trusted management and control platform alarm; trusted real-time alarm of DCS system includes calculating the dynamic load measurement value of the object; adjusting the security policy in real time according to the dynamic load measurement value of the object; judging whether the security policy meets the configuration requirements according to the comprehensive credibility score; judging whether to generate trusted real-time alarm information according to the comprehensive credibility score and the dynamic load measurement value of the object, and if the judgment result is yes, using the DCS platform to generate trusted real-time alarm information; trusted management and control platform alarm is an alarm that is important and allows delayed processing and is generated and transmitted on the DCS system host computer through the first trusted client and the second trusted client.

[0016] As a preferred solution of the trusted DCS implementation method integrating point-to-point and server architecture of the present invention, wherein: calculating the dynamic load measurement value of the object includes determining the time attenuation coefficient and the integration interval, integrating the process load data, calculating the load measurement value, and normalizing the load measurement value. The calculation formula of the dynamic load measurement value of the object is as follows:

[0017]

[0018] Among them, W k represents the load metric value of the kth object, D j represents the load of the jth process of the object, μ is the time attenuation coefficient, a and b are the lower and upper limits of the integral respectively, S j represents the load normalization constant of the jth process of the object, and q represents the total number of processes of the object

[0019] Another object of the present invention is to provide a trusted DCS implementation system integrating point-to-point and server architectures, comprising:

[0020] A first data link establishment module is used to establish a computing part and a protection part data link on a terminal of a trusted DCS;

[0021] The second data link establishment module is used to establish a data link between the trusted host computer and the trusted management platform on the trusted host computer;

[0022] A publishing module is used to publish the trusted data of the trusted DCS in the point-to-point architecture of the DCS based on the data links between the computing part and the protection part and the data links between the trusted host computer and the trusted management platform;

[0023] The alarm module is used to add trusted status prompts and alarm functions to the DCS diagnostic page based on the data links between the computing part and the protection part, the data links between the trusted host computer and the trusted management platform, and the trusted data generated by the trusted terminal and the trusted platform, and to start and stop trusted items, alarm trusted anomalies, and handle alarms.

[0024] A computer device includes a memory and a processor, wherein the memory stores a computer program, and is characterized in that when the processor executes the computer program, the steps of the above-mentioned trusted DCS implementation method integrating point-to-point and server architectures are implemented.

[0025] A computer-readable storage medium having a computer program stored thereon, characterized in that when the computer program is executed by a processor, the steps of the above-mentioned trusted DCS implementation method integrating point-to-point and server architectures are implemented.

[0026] The beneficial effects of the present invention are as follows: the point-to-point architecture is used to realize the real-time transmission and distribution of trusted information, which improves the real-time response capability, scalability and fault isolation capability of the system, and realizes seamless integration with the existing system. Without significantly increasing the burden on the system, the security, efficiency and reliability of the entire system are effectively enhanced. By establishing a data link between the calculation part and the protection part on the trusted DCS terminal, the real-time acquisition and transmission of trusted information are realized, and the security and reliability of the system are improved; by building data intercommunication between the trusted host computer and the management platform, the controllability and fault tolerance of the system are enhanced, and the comprehensive credibility scoring mechanism and the calculation of the dynamic load measurement value of the object are introduced to realize the accurate quantification of the security status of the system and the dynamic adjustment of the security strategy; the trusted status prompt and alarm function are added to improve the detection and response capabilities of security issues, and multiple security measures such as encrypted communication, authority control and redundant configuration are adopted to comprehensively improve the security protection capability of the system. At the same time, the invention maintains compatibility with the original DCS system, realizes seamless upgrade, improves the overall security management level of the system, and avoids additional system overhead, providing an efficient, flexible and comprehensive solution for the security enhancement of industrial control systems. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.

[0028] Figure 1 Schematic diagram of the peer-to-peer architecture for trust-enhanced objects.

[0029] Figure 2A schematic diagram of the server architecture of the trusted enhancement object and the trusted management center.

[0030] Figure 3 Schematic diagram of the communication method of the trusted enhanced object.

[0031] Figure 4 Schematic diagram of the communication method of the trusted client.

[0032] Figure 5 This is a flow chart of the system diagnosis function structure of a trusted DCS.

[0033] Figure 6 This is a flow chart of the alarm function structure of a trusted DCS.

[0034] Figure 7 A schematic diagram of the structure of a computer device. DETAILED DESCRIPTION

[0035] In order to make the above-mentioned purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the drawings of the specification. Obviously, the described embodiments are part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary persons in the art without creative work should fall within the scope of protection of the present invention.

[0036] In the following description, many specific details are set forth to facilitate a full understanding of the present invention, but the present invention may also be implemented in other ways different from those described herein, and those skilled in the art may make similar generalizations without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0037] Example 1

[0038] like Figure 1 to Figure 6 As shown, an embodiment of the present invention provides a trusted DCS implementation method integrating point-to-point and server architectures, comprising the following steps:

[0039] S1: Establish data links between the computing part and the protection part on the terminal of the trusted DCS.

[0040] Specifically, based on the architecture of DCS (Distributed Control System) trusted enhanced objects (including trusted DPU and trusted host computer), the data link between the computing part and the protection part is opened through inter-process communication, so that the computing part can obtain information on the key status of trusted jumps and trusted operations. The existing point-to-point architecture of the DCS system is used to realize real-time data publishing and transmission of trusted information, so that the DCS system can be aware of changes in trusted status in real time and generate real-time alarms.

[0041] Furthermore, the data link between the computing part and the protection part preferably uses a socket connection for inter-process communication, and can also be implemented using a named pipe, a message queue, and a shared memory.

[0042] Furthermore, the trusted data acquired by the computing part from the protection part includes: trusted process heartbeat, startup trusted state, static trusted state, dynamic trusted state, program whitelist interception state, process protection state, and application access control state.

[0043] Furthermore, the terminals of the trusted DCS include a trusted DPU and a trusted host computer. The terminals have all undergone trusted computing hardware, firmware and software enhancements, and have achieved encrypted communication with the trusted management platform.

[0044] Furthermore, a server architecture is adopted between the trusted management platform and the protection part of the trusted enhanced object, which does not occupy the data processing capacity of the point-to-point architecture communication protocol, realizes the centralized control of the trusted enhanced object, and does not destroy the interaction mode (such as identity authentication, data encryption transmission, etc.) and interaction logic (such as status monitoring, policy issuance and backtracking, etc.) between the trusted management platform and the trusted enhanced object.

[0045] S2: Establish a data link between the trusted host computer and the trusted management platform on the trusted host computer.

[0046] Specifically, the key data interface between the computing part of the trusted host computer of the DCS and the trusted management platform is realized. The trusted host computer of the DCS is redundantly configured and is divided into a first trusted client and a second trusted client. Since the real-time requirements of this part of the communication are not high, the redundancy method can be cold standby or hot standby. The key data for intercommunication include trusted item start and stop instructions, trusted abnormal alarms, and alarm information disposal. At the same time, the trusted client of the trusted host computer publishes the information intercommunication with the trusted management platform to the DCS system in a point-to-point architecture, and realizes trusted item start and stop instructions, trusted abnormal alarms, and alarm disposal in the DCS system architecture.

[0047] Furthermore, the protection part of the DCS's trusted host computer and the interface with the trusted management platform use a custom encryption protocol.

[0048] Furthermore, the key data interface between the trusted host computer of the DCS and the trusted management platform can be connected via a socket connection or a REST interface.

[0049] S3: Based on the data links between the computing part and the protection part and the data links between the trusted host computer and the trusted management platform, the trusted data of the trusted DCS is published in the point-to-point architecture of the DCS.

[0050] Specifically, the trusted host computing part of the DCS obtains the trusted data of the trusted management platform through the interface with the trusted management platform, and then publishes the data in the business system for subscription, reading and writing based on the point-to-point architecture of the DCS.

[0051] Preferably, using the existing point-to-point architecture of DCS to transmit trusted information can significantly improve the real-time performance of data transmission, integrate trusted functions into the existing DCS point-to-point architecture, avoid additional communication system overhead, simplify the system structure, and improve overall efficiency. The point-to-point architecture is easy to expand, and with the addition of new trusted nodes (such as DPU, host computer), the system can be flexibly expanded.

[0052] S4: Based on the data link between the computing part and the protection part, the data link between the trusted host computer and the trusted management platform, and the trusted data generated by the trusted terminal and the trusted platform, add trusted status prompts and alarm functions to the DCS diagnostic page to start and stop trusted items, alarm trusted exceptions, and handle alarms.

[0053] Specifically, the system diagnosis function of the trusted DCS adds a comprehensive credibility score on the basis of the original function, evaluates the current trusted state, and evaluates the current trusted state, which includes collecting trusted process heartbeat state data, startup trusted state data, dynamic trusted state data, application access control state data, and process protection state data; summing the collected state data, combining the square root function and the logarithmic function, and calculating the weighted data; integrating each weighted data, combining the exponential decay function to add the time factor, and using the trusted data of the trusted enhancement object and the credibility distribution function to normalize the integration result to obtain a comprehensive credibility score. The calculation formula of the comprehensive credibility score is as follows:

[0054]

[0055] Among them, T represents the comprehensive credibility score, H i represents the heartbeat data of the i-th trusted process, S i represents the i-th startup trusted state data, D i represents the ith dynamic trusted state data, A i represents the access control status data of the i-th application, P i represents the protection state data of the i-th process, γ is a constant, λ represents the attenuation coefficient, n represents the total number of state data, m represents the total number of trusted enhancement objects, G j represents the credibility data of the jth credible enhancement object, k is the gain coefficient, F j represents the credibility distribution threshold of the jth credible enhancement object, and θ represents the translation parameter of the credibility distribution.

[0056] Preferably, the comprehensive credibility score comprehensively considers multiple trust status factors, provides a comprehensive trust evaluation, and provides an intuitive credibility indicator for system administrators. The time factor is introduced through the exponential decay function so that the score can reflect the real-time status of the system. The square root and logarithmic functions are used for nonlinear mapping, which is helpful for processing data of different magnitudes. Administrators can adjust the scoring strategy according to actual needs to ensure the comparability of scores between systems of different sizes. Based on the comprehensive credibility score, the system can intuitively display the current trust status on the diagnostic page.

[0057] Preferably, the comprehensive credibility scoring formula accurately evaluates the credibility of the system at the current point in time by focusing on data that dynamically changes and reflects the system status in real time. Static credibility status data refers to the credibility assessment of the system at startup, which has relative stability and low variability. Due to its static characteristics, its impact on the comprehensive credibility assessment is not as significant as that of dynamic data changes. In the scenarios of dynamic adjustment and real-time monitoring, dynamic data (such as dynamic credibility status data and process heartbeat data) can better reflect the immediate credibility status of the system, so the static credibility status is not included in the calculation of the comprehensive credibility scoring formula.

[0058] Preferably, the program whitelist interception status is mainly used to protect the system from access by unauthorized programs. It is a preventive measure. Although it is important when evaluating the overall system credibility, its changes and impacts are relatively indirect. The comprehensive credibility evaluation tends to directly reflect the indicators of the current operating status of the system, so it pays more attention to dynamic and real-time changing data. Therefore, the program whitelist interception status is not included in the calculation of the comprehensive credibility score.

[0059] Furthermore, a trusted status display is added, and a trusted status prompt is given based on trusted data and comprehensive trustworthiness scores. When it is necessary to view specific trusted status information, the startup trusted status, static trusted status, dynamic trusted status, program whitelist interception status, process protection status, and application access control status are monitored through the secondary page.

[0060] Furthermore, when it is necessary to enable startup trust, static trust, dynamic trust, program whitelist interception, process protection and application access control, permission restrictions are performed through the security administrator identity and the enabling information is sent to the trusted management platform.

[0061] Furthermore, the alarm function of the trusted DCS adds trusted related alarm and alarm handling functions on the basis of the original functions. The trusted real-time alarm of the DCS system includes calculating the dynamic credibility adjustment value, adjusting the security policy in real time according to the dynamic credibility adjustment value, and using the DCS platform to generate trusted real-time alarm information according to the adjusted security policy.

[0062] Further, the object dynamic load measurement value is calculated, including the process load, the time attenuation coefficient and the integration interval are determined, the process load data are integrated, the load measurement data is calculated, and the integration result is normalized to obtain the object dynamic load measurement value; the calculation formula of the object dynamic load measurement value is as follows:

[0063]

[0064] Among them, W k represents the load metric value of the kth object, D j represents the load of the jth process of the object, μ is the time attenuation coefficient, a and b are the lower and upper limits of the integral respectively, S j represents the load normalization constant of the jth process of the object, and q represents the total number of processes of the object.

[0065] Preferably, by calculating the dynamic load measurement data of the object in real time, the system can dynamically adapt to different operating conditions. The integral operation takes into account the impact of historical data instead of relying solely on instantaneous values. The exponential decay factor is used to give a higher weight to recent data, thereby increasing the system's response speed to new situations. By adjusting the integral interval and the decay coefficient, the sensitivity of the system can be flexibly configured. Based on the calculated load measurement value, the system can adjust its security policy in real time, so that the system can dynamically change its security behavior according to the current process load, and use this load measurement data to adjust the dynamic security policy to ensure that the business process can run stably and balance the resource competition relationship between the business process and the dynamic security policy. At the same time, the system can analyze the changing trend of the load measurement data, which helps to predict load changes and achieve preventive maintenance.

[0066] Furthermore, the comprehensive credibility score and the object dynamic load measurement value together provide a precise, dynamic and configurable credibility evaluation mechanism for the DCS system, which enables the system to judge the current status more accurately.

[0067] Furthermore, the alarm from the trusted control platform generates a trusted related alarm on the DCS system host computer through the trusted client. Since it passes through the trusted control platform, the real-time performance is not high, and it is used to generate important alarms but the real-time performance requirements are not high.

[0068] Furthermore, when the alarm needs to be handled, the authority is restricted through the security administrator identity, and then the handling information is sent to the trusted management platform.

[0069] Example 2

[0070] Reference Figure 1 to Figure 6 , as an embodiment of the present invention, provides a trusted DCS implementation system integrating point-to-point and server architectures, including:

[0071] For the specific definition of the trusted DCS implementation system integrating point-to-point and server architecture, please refer to the definition of the trusted DCS implementation method integrating point-to-point and server architecture mentioned above, which will not be repeated here. Each module in the above-mentioned trusted DCS implementation system integrating point-to-point and server architecture can be implemented in whole or in part by software, hardware and their combination. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0072] Example 3

[0073] Reference Figure 7 , which is the third embodiment of the present invention. Based on the first two embodiments, the embodiment of the present invention provides a computer device, which may be a server, and its internal structure diagram may be as shown in FIG. Figure 7 As shown. The computer device includes a processor, a memory and a network interface connected via a system bus. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium.

[0074] The database of the computer device is used to store action detection data. The network interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, the steps in any of the above-mentioned sparse tensor operation acceleration method embodiments are implemented.

[0075] Those skilled in the art will understand that Figure 7 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0076] In one embodiment, an embodiment of the present invention provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps in any of the above-mentioned sparse tensor operation acceleration method embodiments are implemented.

[0077] Those of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory may include read-only memory (ROM), magnetic tape, floppy disk, flash memory or optical memory, etc. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM).

[0078] Example 4

[0079] As an embodiment of the present invention, a trusted DCS implementation method integrating point-to-point and server architecture is provided. In order to verify the beneficial effects of the present invention, a scientific demonstration is carried out through simulation experiments.

[0080] Specifically, all DPUs and host computers were transformed into trusted enhancements, including trusted enhancements for computing hardware, firmware, and software. Then, data links between the computing part and the protection part were implemented on each terminal. Socket connections are preferred for inter-process communication, and named pipes, message queues, and shared memory are also prepared as alternatives. Through these data links, the computing part can obtain the trusted data of the protection part in real time, including trusted process heartbeats, startup trusted status, static trusted status, dynamic trusted status, program whitelist interception status, process protection status, and application access control status.

[0081] Furthermore, the data intercommunication between the trusted host computer and the management platform was established. Trusted clients were deployed on 5 host computers respectively, with redundant configuration, 3 of which were in hot standby mode and 2 in cold standby mode. Trusted status prompts and alarm functions were added to the DCS diagnostic page.

[0082] Furthermore, the entire experiment lasted for 3 months and a large amount of operation data was collected. The following table shows the comparative data of the system in various safety indicators before and after the experiment.

[0083] Table 1 Comparison of experimental data on safety performance improvement of trusted DCS system

[0084]

[0085] Furthermore, from the data in Table 1, we can draw the following conclusions: Compared with the traditional DCS system, the response time of the trusted DCS system is slightly increased (3.33% for hot standby and 5.33% for cold standby), which is due to the addition of a safety check mechanism. However, considering the significant improvement in security, this slight performance loss is acceptable.

[0086] Furthermore, the security incident detection rate of the trusted DCS system has been significantly improved, reaching 99.2% in the hot standby configuration, an increase of 26.37% compared to the traditional system. This shows that the new system can detect potential security threats more comprehensively and timely.

[0087] Furthermore, the false alarm rate of the trusted DCS system has been significantly reduced, from the original 12.3% to 2.1% (hot standby) and 2.5% (cold standby), a decrease of 82.93%. This means that the system can more accurately identify real security threats and reduce the workload of operation and maintenance personnel in dealing with false alarms.

[0088] Furthermore, the data transmission delay of the trusted DCS system increased slightly (4% for hot standby and 8% for cold standby), which is mainly due to the addition of data encryption and security verification steps. Considering the significant improvement in security, this delay increase is acceptable and will not significantly affect the overall performance of the system.

[0089] Furthermore, the comprehensive credibility score is a newly introduced indicator, and there is no corresponding data in the traditional system. The trusted DCS system achieved 95.8 points in the hot standby configuration, indicating that the system is in a highly reliable state.

[0090] Furthermore, the number of dynamic adjustments of security policies is also a newly introduced indicator. During the three-month experiment, the system made 1,250 (hot standby) and 1,180 (cold standby) dynamic adjustments of security policies, which fully demonstrated the system's ability to respond quickly to security threats.

[0091] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A trusted DCS implementation method integrating point-to-point and server architecture, characterized in that: include: Establish data links between the computing part and the protection part on the terminal of the trusted DCS; Establish a data link between the trusted host computer and the trusted management platform on the trusted host computer; Based on the data link between the computing part and the protection part and the data link between the trusted host computer and the trusted management platform, the trusted data of the trusted DCS is published in the point-to-point architecture of the DCS; Based on the data link between the computing part and the protection part, the data link between the trusted host computer and the trusted management platform, and the trusted data generated by the trusted terminal and the trusted platform, a trusted status prompt and alarm function are added to the DCS diagnostic page to start and stop trusted items, and to perform trusted abnormal alarms and alarm handling.

2. The method for implementing a trusted DCS integrating a point-to-point and server architecture as claimed in claim 1, characterized in that: The establishment of the data link between the computing part and the protection part includes the computing part obtaining the trusted data of the protection part, and the trusted data includes the trusted process heartbeat, startup trusted state, static trusted state, dynamic trusted state, program whitelist interception state, process protection state and application access control state.

3. The method for implementing a trusted DCS integrating a point-to-point and server architecture as claimed in claim 2, characterized in that: The data link between the trusted host computer and the trusted management platform is established by: Establish a connection between the trusted host computer and the trusted management platform, adopt a redundant configuration, and set up a first trusted client and a second trusted client; Determine the key data for intercommunication, which includes trusted item start and stop instructions, trusted abnormal alarms, and alarm information processing; A custom encryption protocol is used between the protection part of the trusted host computer and the trusted management platform; The trusted host computer computing part obtains trusted data from the trusted management platform; Based on the point-to-point architecture of DCS, the acquired data is published in the business system, enabling data to be subscribed, read and written; Establish compatibility with the existing architecture and maintain the interaction mode and logic between the trusted management platform and the trusted enhanced objects.

4. The method for implementing a trusted DCS integrating a point-to-point and server architecture as claimed in claim 3, characterized in that: The maintenance of the interaction mode and logic between the trusted management platform and the trusted enhancement object includes maintaining the identity authentication mechanism, maintaining data encryption transmission, maintaining the status monitoring function, maintaining the policy issuance capability, and maintaining the data backtracking function.

5. The method for implementing a trusted DCS integrating a point-to-point and server architecture as claimed in claim 4, characterized in that: The adding of trusted status prompt and alarm function in the DCS diagnostic page includes: Evaluating the current trusted state, wherein the evaluating the current trusted state includes collecting trusted process heartbeat state data, startup trusted state data, dynamic trusted state data, application access control state data, and process protection state data; Sum the collected status data, combine the square root function and the logarithmic function, and calculate the weighted data; Each weighted data is integrated, and the time factor is added in combination with the exponential decay function. The integration result is normalized using the trusted data of the trusted enhancement object and the trust distribution function to obtain a comprehensive trust score. The calculation formula for the comprehensive trust score is as follows: Among them, T represents the comprehensive credibility score, H i represents the heartbeat data of the i-th trusted process, S i represents the i-th startup trusted state data, D i represents the ith dynamic trusted state data, A i represents the access control status data of the i-th application, P i represents the protection state data of the i-th process, γ is a constant, λ represents the attenuation coefficient, n represents the total number of state data, m represents the total number of trusted enhancement objects, G j represents the credibility data of the jth credible enhancement object, k is the gain coefficient, F j represents the credibility distribution threshold of the jth credible enhancement object, θ represents the translation parameter of the credibility distribution; Added trust status display, providing trust status prompts based on trust data and comprehensive trust score; Create a secondary page for trusted status details, build a trusted enabling operation interface, and restrict permissions through security administrator identities; Add trusted related alarms, set up two types of alarm mechanisms, and establish an alarm handling process.

6. The method for implementing a trusted DCS integrating a point-to-point and server architecture as claimed in claim 5, characterized in that: The two types of alarm mechanisms include DCS system trusted real-time alarm and trusted management and control platform alarm; The DCS system reliable real-time alarm includes calculating the dynamic load measurement value of the object; Adjust security policies in real time based on the dynamic load measurement value of the object; Determine whether the security policy meets the configuration requirements based on the comprehensive credibility score; Based on the comprehensive credibility score and the object dynamic load measurement value, determine whether to generate credible real-time alarm information. If the judgment result is yes, use the DCS platform to generate credible real-time alarm information; The trusted management and control platform alarm is an alarm that is generated and transmitted on the DCS system host computer through the first trusted client and the second trusted client, which is important and allows delayed processing.

7. The method for implementing a trusted DCS integrating a point-to-point and server architecture as claimed in claim 6, characterized in that: Calculating the dynamic load metric value of the object includes determining a time attenuation coefficient and an integration interval, integrating the process load data, calculating the load metric value, and normalizing the load metric value. The calculation formula of the dynamic load metric value of the object is as follows: Among them, W k represents the load metric value of the kth object, D j represents the load of the jth process of the object, μ is the time attenuation coefficient, a and b are the lower and upper limits of the integral respectively, S j represents the load normalization constant of the jth process of the object, and q represents the total number of processes of the object.

8. A system using the trusted DCS implementation method integrating point-to-point and server architecture as claimed in any one of claims 1 to 7, characterized in that: include: A first data link establishment module is used to establish a computing part and a protection part data link on a terminal of a trusted DCS; The second data link establishment module is used to establish a data link between the trusted host computer and the trusted management platform on the trusted host computer; A publishing module, used for publishing the trusted data of the trusted DCS in the point-to-point architecture of the DCS based on the data link between the computing part and the protection part and the data link between the trusted host computer and the trusted management platform; The alarm module is used to add trusted status prompts and alarm functions in the DCS diagnostic page based on the data links between the computing part and the protection part, the data links between the trusted host computer and the trusted management platform, and the trusted data generated by the trusted terminal and the trusted platform, and to start and stop trusted items, alarm trusted anomalies, and handle alarms.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method for implementing a trusted DCS integrating a point-to-point and server architecture according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method for implementing a trusted DCS integrating a point-to-point and server architecture according to any one of claims 1 to 7 are implemented.

Images