Trusted DCS system credible strategy batch issuing method and related device

Abstract

The invention belongs to the technical field of DCS controller safe operation, and discloses a credible DCS system credible strategy batch issuing method and a related device, and the method comprises the steps: obtaining a credible strategy data file, and reading the state of the credible strategy data file; according to the state of the credible policy data file, storing policy information in the credible policy data file into a credible security management platform database, and creating a credible policy template; and sending the strategy template information in the credible security management platform database to the target host, recording a strategy issuing log, and completing batch issuing of credible strategies. According to the method, the strategies are issued to the multiple devices in batches, the tedious process of configuring the devices one by one in a traditional method is remarkably reduced, and therefore the strategy issuing efficiency is greatly improved, and the project cost generated by issuing the devices in batches is remarkably reduced.

Description

Technical Field

[0001] The invention belongs to the technical field of safe operation of DCS controllers, and relates to a method for batch issuing trusted policies of a trusted DCS system and a related device. Background Art

[0002] In the wave of digital transformation in the power industry, building an efficient and reliable domestic thermal power DCS (distributed control system) system is not only related to the autonomous control and security of technology, but also a key driving force for promoting the high-quality development of the power industry, and directly affects the operational efficiency and cost control of power plants. With the optimization and adjustment of the global energy structure and the rapid development of smart grids, thermal power, as an important part of traditional energy supply, is particularly urgent to upgrade to digital and intelligent power. As the heart of thermal power plants, these DCS systems are responsible for monitoring, controlling and optimizing the entire power generation process, and their stability and reliability are crucial. An efficient DCS system can achieve refined management and optimized control of the entire power generation process of thermal power plants. From fuel supply, combustion adjustment, load distribution to environmental emissions, each link can be accurately controlled, significantly improving power generation efficiency and reducing energy consumption and emissions. At the same time, by integrating advanced technologies such as big data analysis and artificial intelligence algorithms, the system can automatically analyze operating data, predict equipment failures, arrange maintenance plans in advance, and reduce unplanned downtime, thereby effectively controlling operation and maintenance costs and improving the economic benefits of power plants. Therefore, registering these systems on a unified trusted management platform for centralized and intelligent management has become a general trend in the industry.

[0003] A trusted domestic thermal power DCS system is generally composed of a DCS controller, an engineer station, a history station, and an operator station. These devices are registered in the management platform and are managed uniformly by the trusted management platform. This centralized and intelligent management model can not only improve management efficiency and reduce management costs, but also optimize resource allocation through data-driven decision-making. Trusted protection strategies and trusted enhancement strategies are issued to each device. Each strategy can only be issued to one device at a time. If strategies are issued to multiple devices, it will take a long time for the project and easily cause the project to exceed the planned cost. Summary of the invention

[0004] The purpose of the present invention is to provide a trusted DCS system trusted policy batch distribution method and related devices to solve the problem of low efficiency in the existing policy distribution process.

[0005] In order to achieve the above object, the present invention adopts the following technical solutions: A method for batch issuing trusted policies of a trusted DCS system, comprising: Obtain a trusted policy data file and read the status of the trusted policy data file; According to the status of the trusted policy data file, the policy information in the trusted policy data file is stored in the trusted security management platform database, and a trusted policy template is created; Send the policy template information in the trusted security management platform database to the target host, record the policy issuance log, and complete the batch issuance of trusted policies.

[0006] Furthermore, the format of the trusted policy data file is json format.

[0007] Furthermore, the process of storing the policy information in the trusted policy data file into the trusted security management platform database includes: Determine the read status of the trusted security management platform database; When the read status is yes, the policy information in the trusted policy data file is stored in the trusted security management platform database, and a trusted policy template is created; When the read status is no, the instruction of the data file is changed and the read strategy is re-executed.

[0008] Furthermore, the process of sending the policy template information in the trusted security management platform database to the target host includes: Establish communication connection between the trusted security management platform and the target host; Check the connection status and make a policy request after the connection is successful; According to the policy issuance request, the policy template information in the trusted security management platform database is read, and the read policy template information is sent to the target host.

[0009] Furthermore, the method of issuing logs for the recording strategy is: Monitor the policy delivery status and determine the policy delivery results; Generate a policy issuance log based on the policy issuance result, and save the policy issuance log to the trusted security management platform database.

[0010] Furthermore, the results of issuing the policies include success and failure; When the policy issuance result is successful, a policy issuance success log is generated and transmitted to the trusted security management platform database; When the policy delivery result is a failure, a policy delivery failure log is generated and transmitted to the trusted security management platform database.

[0011] Furthermore, it also includes: after the policy is issued, a policy issuance report is formed according to the policy issuance log in the trusted security management platform database to record the operation of adding, deleting or updating the trusted policy.

[0012] A trusted DCS system trusted policy batch distribution system, comprising: A reading module, the reading module is used to obtain a trusted policy data file and read the status of the trusted policy data file; A storage module, the storage module is used to store the policy information in the trusted policy data file into the trusted security management platform database according to the state of the trusted policy data file, and create a trusted policy template; The sending module is used to send the policy template information in the trusted security management platform database to the target host, record the policy sending log, and complete the batch sending of trusted policies.

[0013] A computer device comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the steps of the method are implemented when the processor executes the computer program.

[0014] A computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method are implemented.

[0015] Compared with the prior art, the present invention has the following beneficial effects: The present invention provides a trusted DCS system trusted policy batch distribution method. According to the state of the trusted policy data file, a policy template is created through a management platform visualization page, and the policy template information is written into a background database, thereby ensuring the consistency and accuracy of the policy. When the policy is distributed, the trusted agent communication with the DCS controller, the engineer station, the history station, the operator station and other devices is used to reduce the possibility of human error and improve the quality of policy distribution. The policies in the database are distributed to multiple devices at the same time, and the policy distribution status is monitored throughout the process on the trusted security management platform visualization page, so that problems that may occur during the distribution process can be discovered and solved in time to ensure the correct execution of the policy. The present invention significantly reduces the cumbersome process of configuring each device one by one in the traditional method by distributing policies in batches to multiple devices, thereby greatly improving the efficiency of policy distribution. The speed and quality of batch device policy distribution can be effectively improved, the security and management convenience of the system are enhanced, and it is of great significance to improve the overall operation and maintenance level and safety performance of the industrial control system. At the same time, the additional costs such as system downtime and maintenance that may be caused by improper policy distribution are reduced, and the project cost generated by batch device policy distribution can be significantly reduced. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments are briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without creative work.

[0017] Figure 1 This is a flowchart of a method for batch issuing trusted policies for a trusted DCS system of the present invention.

[0018] Figure 2 This is a schematic diagram of the structure of a system for batch issuing trusted policies of a trusted DCS system in a preferred embodiment of the present invention.

[0019] Figure 3 It is a schematic diagram of the structure of an electronic device according to a preferred embodiment of the present invention. DETAILED DESCRIPTION

[0020] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0021] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the invention claimed for protection, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0022] The following is a description of exemplary embodiments of the present application in conjunction with the accompanying drawings, including various details of the embodiments of the present application to facilitate understanding, which should be considered as merely exemplary. Therefore, it should be recognized by those of ordinary skill in the art that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the present application. Similarly, for the sake of clarity and conciseness, the description of well-known functions and structures is omitted in the following description.

[0023] Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making any creative work shall fall within the scope of protection of this application.

[0024] It should be noted that the terminals involved in the embodiments of the present application may include but are not limited to mobile phones, personal digital assistants (PDAs), wireless handheld devices, tablet computers, personal computers (PCs), MP3 players, MP4 players, wearable devices (for example, smart glasses, smart watches, smart bracelets, etc.), smart home devices and other smart devices.

[0025] In addition, the term "and / or" in this article is only a description of the association relationship between the associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0026] The present invention is further described in detail below in conjunction with the accompanying drawings: See also Figure 1 The present invention provides a method for batch issuing trusted policies of a trusted DCS system, which specifically includes the following steps: Step 1: Obtain a trusted policy data file and read the status of the trusted policy data file.

[0027] The system first locates and obtains the trusted policy data file through a preset file path or user input. The trusted policy data file is stored in json format for easy parsing and processing. The trusted security management platform system uses a visual page to read the file content and check the status of the file.

[0028] The application of the management platform's visual page makes the creation and modification of policy templates and the monitoring of policy issuance status intuitive and easy to operate, greatly improving the work efficiency and management convenience of system administrators. At the same time, it also facilitates subsequent policy auditing and tracing.

[0029] Step 2: According to the status of the trusted policy data file, the policy information in the trusted policy data file is stored in the trusted security management platform database, and a trusted policy template is created.

[0030] After parsing the json file, the system will traverse the policy information in the file. Before storing this information in the trusted security management platform database, the system will first determine the read status of the trusted security management platform database. When the read status is yes, the policy information in the trusted policy data file is stored in the trusted security management platform database and a trusted policy template is created. The template is designed to standardize policy expression for subsequent management and distribution. When the read status is no, the system will try to reconnect or change the instructions of the data file and continue to re-execute the read policy until it succeeds.

[0031] Step 3: Send the policy template information in the trusted security management platform database to the target host, record the policy issuance log, and complete the trusted policy batch issuance.

[0032] After the policy template is successfully created and stored in the trusted security management platform database, the system needs to distribute the template information to the target host. The trusted security management platform needs to communicate with multiple target hosts, which can be a direct network connection or through an intermediate agent or management protocol. After the connection is established, check the connection status. When the connection is successful, make a policy delivery request and listen for the response to confirm whether the request is accepted. Once the confirmation request is accepted, the system will read the policy information in the trusted security management platform database according to the policy delivery request and send the read policy delivery information to the target host.

[0033] During the policy delivery process, the system monitors the delivery status and determines the policy delivery results, including whether each policy is successfully received and applied by the target host. A policy delivery log is generated based on the policy delivery results, including a list of successfully delivered policies, failed policies and their reasons, etc. The policy delivery log is saved in the trusted security management platform database for subsequent analysis and report generation.

[0034] Determine the policy issuance result, generate a policy issuance success log when the issuance result is successful, and transmit the policy issuance success log to the trusted security management platform database; generate a policy issuance failure log when the issuance result is failed, and transmit the policy issuance failure log to the trusted security management platform database.

[0035] Step 4: After the policy is issued, a policy issuance report is generated based on the policy issuance log in the trusted security management platform database, recording the operations of adding, deleting or updating the trusted policy.

[0036] After all target hosts have completed policy delivery, the system will generate a policy delivery report based on the policy delivery log stored in the trusted security management platform database. This report will record in detail the addition, deletion, or update operations of all trusted policies during this batch delivery process, as well as the results of these operations. The report can also include statistical information, such as the number of policies that were successfully delivered, the number of policies that failed to be delivered, and the distribution of their causes. This information is of great value for evaluating the effectiveness of policy delivery, optimizing policy configuration, and subsequent operation and maintenance management.

[0037] The present invention creates a policy template by using the management platform visualization page, batches the policies to multiple devices, and communicates with multiple devices through a trusted agent during the policy issuance process, thereby reducing the possibility of human error and improving the quality of policy issuance. The batch issuance and full-process monitoring of trusted policies of a trusted DCS system not only improves the efficiency and quality of policy issuance, but also reduces project costs, reduces manual intervention and repetitive work, thereby reducing the labor cost during project execution. It also enhances the security and management convenience of the system, which is of great significance for improving the overall operation and maintenance level and safety performance of industrial control systems.

[0038] Another object of the present invention is to provide a trusted DCS system trusted policy batch distribution system of the present invention, such as Figure 2 As shown, the embodiment of the system includes: a reading module, a storage module and a sending module.

[0039] A reading module, the reading module is used to obtain a trusted policy data file and read the status of the trusted policy data file; A storage module, the storage module is used to store the policy information in the trusted policy data file into the trusted security management platform database according to the state of the trusted policy data file, and create a trusted policy template; The sending module is used to send the policy template information in the trusted security management platform database to the target host, record the policy sending log, and complete the batch sending of trusted policies.

[0040] It can be understood that the trusted DCS system trusted policy batch issuing system provided by the present invention corresponds to the trusted DCS system trusted policy batch issuing method provided by the aforementioned embodiments. The relevant technical features of the trusted DCS system trusted policy batch issuing system can refer to the relevant technical features of the trusted DCS system trusted policy batch issuing method, which specifically includes the following steps: Obtain a trusted policy data file, and read the status of the trusted policy data file through a reading module; The storage module stores the policy information in the trusted policy data file into the trusted security management platform database according to the state of the trusted policy data file, and creates a trusted policy template; The policy template information in the trusted security management platform database is sent to the target host through the issuing module, and the policy issuing log is recorded to complete the batch issuing of trusted policies.

[0041] The third object of the present invention is to provide an electronic device, such as Figure 3 As shown, it includes a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor executes the steps of the method for batch issuing trusted policies of a trusted DCS system.

[0042] The method for batch issuing trusted policies of a trusted DCS system comprises the following steps: Obtain a trusted policy data file and read the status of the trusted policy data file; According to the status of the trusted policy data file, the policy information in the trusted policy data file is stored in the trusted security management platform database, and a trusted policy template is created; Send the policy template information in the trusted security management platform database to the target host, record the policy issuance log, and complete the batch issuance of trusted policies.

[0043] A fourth object of the present invention is to provide a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method for batch issuing trusted policies of a trusted DCS system are implemented.

[0044] The method for batch issuing trusted policies of a trusted DCS system comprises the following steps: Obtain a trusted policy data file and read the status of the trusted policy data file; According to the status of the trusted policy data file, the policy information in the trusted policy data file is stored in the trusted security management platform database, and a trusted policy template is created; Send the policy template information in the trusted security management platform database to the target host, record the policy issuance log, and complete the batch issuance of trusted policies.

[0045] It should be understood by those skilled in the art that the embodiments of the present invention may be provided as methods, systems or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0046] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0047] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0048] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0049] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the relevant field should understand that the specific implementation methods of the present invention can still be modified or replaced by equivalents. Any modification or equivalent replacement that does not depart from the spirit and scope of the present invention should be covered within the scope of protection of the claims of the present invention.

[0050] The above are only preferred embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A method for batch issuing trusted policies of a trusted DCS system, characterized in that: include: Obtain a trusted policy data file and read the status of the trusted policy data file; According to the status of the trusted policy data file, the policy information in the trusted policy data file is stored in the trusted security management platform database, and a trusted policy template is created; Send the policy template information in the trusted security management platform database to the target host, record the policy issuance log, and complete the batch issuance of trusted policies.

2. A method for batch issuing trusted policies of a trusted DCS system according to claim 1, characterized in that: The format of the trusted policy data file is json format.

3. A method for batch issuing trusted policies of a trusted DCS system according to claim 1, characterized in that: The process of storing the policy information in the trusted policy data file into the trusted security management platform database includes: Determine the read status of the trusted security management platform database; When the read status is yes, the policy information in the trusted policy data file is stored in the trusted security management platform database, and a trusted policy template is created; When the read status is no, the instruction of the data file is changed and the read strategy is re-executed.

4. A method for batch issuing trusted policies of a trusted DCS system according to claim 1, characterized in that: The process of sending the policy template information in the trusted security management platform database to the target host includes: Establish communication connection between the trusted security management platform and the target host; Check the connection status and make a policy request after the connection is successful; According to the policy issuance request, the policy template information in the trusted security management platform database is read, and the read policy template information is sent to the target host.

5. The method for batch issuing trusted policies of a trusted DCS system according to claim 1 is characterized in that: The method for sending logs by the recording strategy is: Monitor the policy delivery status and determine the policy delivery results; Generate a policy issuance log based on the policy issuance result, and save the policy issuance log to the trusted security management platform database.

6. A method for batch issuing trusted policies of a trusted DCS system according to claim 5, characterized in that: The results of issuing the policy include success and failure; When the policy issuance result is successful, a policy issuance success log is generated and transmitted to the trusted security management platform database; When the policy delivery result is a failure, a policy delivery failure log is generated and transmitted to the trusted security management platform database.

7. A method for batch issuing trusted policies of a trusted DCS system according to claim 1, characterized in that: Also includes: After the policy is issued, a policy issuance report is generated based on the policy issuance log in the trusted security management platform database, recording the operations of adding, deleting or updating the trusted policy.

8. A trusted DCS system trusted policy batch distribution system, characterized by: include: A reading module, the reading module is used to obtain a trusted policy data file and read the status of the trusted policy data file; A storage module, the storage module is used to store the policy information in the trusted policy data file into the trusted security management platform database according to the state of the trusted policy data file, and create a trusted policy template; The sending module is used to send the policy template information in the trusted security management platform database to the target host, record the policy sending log, and complete the batch sending of trusted policies.

9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images