Intelligent safety assessment method for port industrial control
By building a control model and a safety net, externally monitoring the port industrial control system and identifying abnormal information, the system stability problems caused by information security monitoring are solved, and the dual guarantees of information security and system stability are achieved.
Patent Information
- Application Number
- CN202411450925.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-10-17
- Publication Date
- 2024-12-10
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
During the port industrial control process, existing information security monitoring methods require the system to be safely deployed, resulting in system stability problems and deactivation, affecting normal demand.
Intelligent security assessment method is adopted to build a control model by obtaining port industrial control information, setting up a safety net, collecting status information, identifying abnormal information for security assessment, avoiding deployment within the system, and realizing external monitoring.
Effectively monitor information security, ensure information security and system stability, avoid system deactivation, and improve information security guarantees.
Smart Images

Figure CN119105472A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of industrial safety control, and in particular to an intelligent safety assessment method for port industrial control. Background Art
[0002] With the rapid development of global economic integration and information technology, the importance of logistics industry as the core link of international trade has become increasingly prominent. As a transit station and core node of logistics, the automation and intelligence level of ports plays a vital role in improving logistics efficiency and reducing costs. At present, due to the problem of information security in the process of port industrial control, it is necessary to ensure the information security of the port industrial control process. When the existing port industrial control is used for information security monitoring, the port industrial control system needs to be deployed securely. Therefore, in the process of security deployment, the stability of the port industrial control system will be caused, which will bring greater insecurity or the port industrial control system will be deactivated, affecting the normal needs of the port. Summary of the invention
[0003] The purpose of the present invention is to provide an intelligent safety assessment method for port industrial control to solve the shortcomings of the background technology.
[0004] In order to achieve the above object, the present invention provides the following technical solution: an intelligent safety assessment method for port industrial control, comprising the following steps: Acquire port industrial control information, wherein the port industrial control information includes a plurality of control ports and connection relationships between the plurality of control ports, and construct a control model based on the port industrial control information; A safety network is set up corresponding to the port industrial control information based on the control model, wherein the safety network includes a main safety network and multiple sub-safety networks; The status information of port industrial control information is collected based on the safety network, and the status information that does not meet the preset conditions is regarded as abnormal information. Based on the abnormal information, the safety assessment of port industrial control is carried out.
[0005] In a preferred embodiment, the step of constructing a control model based on port industry control information includes: Acquire multiple control ports and connection relationships between the multiple control ports as port industrial control information; Virtually constructing multiple control ports respectively to obtain port models, and based on the connection relationship between the multiple control ports, virtually constructing the connection between the multiple control ports to obtain a control model; Establish a corresponding relationship between the port model in the control model and the corresponding control port.
[0006] In a preferred embodiment, the step of establishing a correspondence between a port model in a control model and a corresponding control port includes: Respectively obtain control type information of multiple control ports, wherein the control type information includes control mode and control behavior information; Based on the control type information, corresponding synchronization points are set in the port model in the corresponding control model and the corresponding control port, and based on the synchronization points, the port model and the corresponding control port are associated to obtain the corresponding relationship between the port model in the control model and the corresponding control port.
[0007] In a preferred embodiment, the step of associating the port model with the corresponding control port based on the synchronization point to obtain the corresponding relationship between the port model and the corresponding control port in the control model includes: Acquire multiple communication channels of the corresponding control port based on the control type information, and set synchronization points on the multiple communication channels; Constructing multiple communication channel corresponding port models of the control port to obtain multiple communication channel models, and setting synchronization points on the multiple communication channel models; The synchronization points on the multiple communication channels are communicatively associated with the synchronization points on the corresponding multiple communication channel models to obtain the corresponding relationship between the port model in the control model and the corresponding control port.
[0008] In a preferred embodiment, the step of acquiring multiple communication channels of the corresponding control port based on the control type information and setting synchronization points on the multiple communication channels includes: Acquire multiple communication channels corresponding to the control port for data transmission based on the control type information; Corresponding synchronization channels are respectively set in the multiple communication channels as multiple twin communication channels corresponding to the multiple communication channels, and state information of the communication channels is acquired in real time based on the multiple twin communication channels, wherein the state information includes the communication transmission state of the communication channel and the data information transmitted in the communication channel; Synchronization points are respectively set in multiple twin communication channels as synchronization points of the multiple communication channels.
[0009] In a preferred embodiment, the step of setting up a safety net corresponding to the port industry control information based on the control model includes: A safety net is set in the control model, wherein the safety net includes a main safety net and a plurality of sub-safety nets; Based on the corresponding relationship between the port model in the control model and the corresponding control port, the safety net is loaded into the control port through the communication channel to obtain the safety net of the port industry control information.
[0010] In a preferred embodiment, the step of setting a safety net in the control model includes: A plurality of monitoring points are set corresponding to the port model in the control model, preset conditions are set corresponding to the plurality of monitoring points, and the plurality of monitoring points in the port model are associated as a sub-safety network; Set up a main safety network, and connect multiple sub-safety networks corresponding to multiple port models in the control model through the main safety network; The main safety net and multiple sub-safety nets are used as safety nets.
[0011] In a preferred embodiment, the step of collecting status information of port industrial control information based on the safety network, treating status information that does not meet preset conditions as abnormal information, and performing safety assessment on port industrial control based on the abnormal information includes: Based on the state information of the monitoring point position on the corresponding control port collected by the sub-safety network through the synchronization point, the state information that does not meet the preset conditions is regarded as abnormal information; The safety assessment of port industrial control is carried out based on abnormal information, and the monitoring points corresponding to the abnormal information are used as abnormal monitoring points.
[0012] In the above technical solution, the technical effects and advantages provided by the present invention are: The present invention can better monitor the information security of port industrial control. When performing security monitoring, it is not necessary to set it up in the port industrial control system itself, which means that when the system needs to be deployed for security protection, it is not necessary to deploy the port industrial control system itself. Therefore, there is no need to deactivate the port industrial control system when it is deployed. It can be deployed in an external control model that communicates information with the port industrial control system, and then the information security is monitored through the synchronization point. While ensuring information security, it can also ensure the stability of the port industrial control system. BRIEF DESCRIPTION OF THE DRAWINGS
[0013] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present invention. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.
[0014] Figure 1 The present invention is a flow chart of the method. DETAILED DESCRIPTION
[0015] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0016] Example 1, please refer to Figure 1 As shown, the intelligent safety assessment method for port industrial control described in this embodiment includes the following steps: S1. Acquire port industrial control information, wherein the port industrial control information includes a plurality of control ports and connection relationships between the plurality of control ports, and construct a control model based on the port industrial control information; S2. Setting a safety network corresponding to the port industrial control information based on the control model, wherein the safety network includes a main safety network and multiple sub-safety networks; S3, collecting status information of port industrial control information based on the safety network, treating status information that does not meet preset conditions as abnormal information, and conducting a safety assessment of port industrial control based on the abnormal information; As described in the above steps S1-S3, with the rapid development of global economic integration and information technology, the importance of logistics industry as the core link of international trade is becoming increasingly prominent. As a transit station and core node of logistics, the automation and intelligence level of the port plays a vital role in improving logistics efficiency and reducing costs. At present, due to the problem of information security in the process of port industrial control, it is necessary to ensure information security in the process of port industrial control. When the existing port industrial control performs information security monitoring, the port industrial control system needs to be safely deployed. Therefore, in the process of safe deployment, the use stability of the port industrial control system will be caused. The system of the port industrial control will bring greater insecurity or the port industrial control system will be deactivated to affect the normal needs of the port. In this application, the information security of the port industrial control can be better monitored. When performing security monitoring, it is not necessary to set it in the system of the port industrial control itself, which means that when the system needs to be deployed for security protection, it is not necessary to deploy the port industrial control system itself. Then, it is not necessary to deactivate the port industrial control system when deploying it. It can be deployed in the control model of information exchange between the external and the port industrial control system, and then the information security is monitored through the synchronization point. While ensuring information security, the stability of the port industrial control system can also be ensured.
[0017] In one embodiment, the step S1 of constructing a control model based on port industry control information includes: S11, acquiring multiple control ports and connection relationships between the multiple control ports as port industrial control information; S12, virtually constructing the multiple control ports respectively to obtain a port model, and virtually constructing the connection between the multiple control ports based on the connection relationship between the multiple control ports to obtain a control model; S13, establishing a corresponding relationship between the port model in the control model and the corresponding control port; As described in the above steps S11-S13, in port operations, port equipment needs to be controlled. In the process of control, there are multiple control ports, where the control ports can be control ports that issue instructions and control ports that receive instructions. Then, the connection relationship between the multiple control ports is obtained, where the connection relationship is a communication relationship. Then, a control model is constructed according to the control system of the current port. The construction method is: virtually construct multiple control ports respectively to obtain port models, and virtually construct the connections between the multiple control ports based on the connection relationship between the multiple control ports to obtain a control model, so as to obtain a control model of the port, and then correspond the port model in the control model to the corresponding control port; In one embodiment, the step S13 of establishing the correspondence between the port model in the control model and the corresponding control port includes: S131, respectively obtaining control type information of a plurality of control ports, wherein the control type information includes control mode and control behavior information; S132, setting corresponding synchronization points in the port model in the corresponding control model and the corresponding control port based on the control type information, and associating the port model with the corresponding control port based on the synchronization point to obtain a corresponding relationship between the port model in the control model and the corresponding control port; As described in the above steps S131 and S132, the control type information of multiple control ports is obtained separately, and the control ports are bound to the corresponding control type information, wherein the control type information includes a control method and control behavior information, wherein the control method is the way in which the control port is controlled and the type of information being controlled, wherein the controlled method is communication control, and the type of information being controlled is control by code data or control by data instructions; the control behavior information is how the control port reacts after receiving the control method, wherein the reaction may be the action reaction of the device corresponding to the control port or the reaction of the control port receiving the control code data or data instruction for data distribution, wherein the control type information of the control port in the control system is fully collected, and the type of information being controlled is control by code data or data instructions. Code data is used for control or data instructions are used for control, and the action response of the control port corresponding to the device or the response of the control port receiving the control code data or data instructions for data distribution all require information transmission, so there is a corresponding communication channel, and then the corresponding synchronization point is set in the port model in the control model and the corresponding control port according to the control type information. Based on the synchronization point, the port model and the corresponding control port are associated to obtain the corresponding relationship between the port model and the corresponding control port in the control model, and the control model can be associated with the port industrial control information. The control model can reflect the port industrial control information and exchange information through the synchronization point at the same time, so as to better manage the port industrial control safely, ensure the monitoring of the subsequent port control port transmission information and the security of the information, and improve the information security protection; In one embodiment, the step S132 of associating the port model with the corresponding control port based on the synchronization point to obtain the corresponding relationship between the port model and the corresponding control port in the control model includes: S1321. Acquire multiple communication channels of the corresponding control port based on the control type information, and set synchronization points on the multiple communication channels; S1322, constructing port models corresponding to multiple communication channels of the control port to obtain multiple communication channel models, and setting synchronization points on the multiple communication channel models; S1323, performing communication association between synchronization points on multiple communication channels and synchronization points on corresponding multiple communication channel models to obtain a correspondence between a port model in a control model and a corresponding control port; As described in the above steps S1311-S1323, in order to associate the control model with the port industry control information, multiple communication channels of the corresponding control port are obtained in the control type information, synchronization points are set on the multiple communication channels, and the same operation is performed in the control model, the multiple communication channels of the control port are constructed corresponding to the port model to obtain multiple communication channel models, synchronization points are set on the multiple communication channel models, and then the synchronization points on the multiple communication channels are communicatively associated with the synchronization points on the corresponding multiple communication channel models to obtain the corresponding relationship between the port model and the corresponding control port in the control model, and the virtual control model can be associated with the actual port industry control information through the synchronization point, and subsequently, the information security monitoring of the port industry control information can be realized by performing information security monitoring on the virtual control model, and the information security protection operation is more convenient; In one embodiment, the step S1321 of acquiring multiple communication channels of the corresponding control port based on the control type information and setting synchronization points on the multiple communication channels includes: S13211, acquiring multiple communication channels corresponding to the control port for data transmission based on the control type information; S13212. respectively setting corresponding synchronization channels in the multiple communication channels as multiple twin communication channels corresponding to the multiple communication channels, and acquiring status information of the communication channels in real time based on the multiple twin communication channels, wherein the status information includes the communication transmission status of the communication channels and the data information transmitted in the communication channels; S13213. Setting synchronization points in multiple twin communication channels respectively as synchronization points of the multiple communication channels; As described in the above steps S13211-S13213, in order to set the synchronization point without affecting the normal communication of the control port, multiple communication channels corresponding to the control port for data transmission are obtained based on the control type information. In addition, corresponding synchronization channels are respectively set in the multiple communication channels as multiple twin communication channels corresponding to the multiple communication channels. The status information of the communication channels is obtained in real time based on the multiple twin communication channels, wherein the status information includes the communication transmission status of the communication channel and the data information transmitted in the communication channel. In this way, the information of the control port can be obtained, and the association between the virtual control model and the actual port industrial control information can also be established. While ensuring information security, the stability of the port industrial control information itself can also be ensured; In one embodiment, the step S2 of setting up a safety net based on the control model corresponding to the port industry control information includes: S21. Setting a safety net in the control model, wherein the safety net includes a main safety net and a plurality of sub-safety nets; S22, based on the correspondence between the port model in the control model and the corresponding control port, the safety net is loaded into the control port through the communication channel to obtain the safety net of the port industrial control information; As described in the above steps S21 and S22, it is necessary to set a safety net in the control model. Through the correspondence between the port model in the control model and the corresponding control port, the safety net is loaded into the control port through the communication channel to obtain the safety net of the port industrial control information. Here, the safety net is directly used to monitor the port industrial control itself through the correspondence between the port model in the control model and the corresponding control port, and the information is transmitted through the channel constructed by the synchronization point; In one embodiment, the step S21 of setting a safety net in the control model includes: S211, setting a plurality of monitoring points corresponding to the port model in the control model, setting preset conditions corresponding to the plurality of monitoring points, and associating the plurality of monitoring points in the port model as a sub-safety network; S212, setting a main safety network, and connecting multiple sub-safety networks corresponding to multiple port models in the control model through the main safety network; S213, using the main safety net and multiple sub-safety nets as safety nets; As described in the above steps S211-S213, the monitoring points here are the information of the control port corresponding to the port model being instructed and the status information such as the operating parameters of the equipment corresponding to the control port being controlled. This information needs to be transmitted through the communication channel, so the monitoring points are also set on the communication channel, and preset conditions are set for multiple monitoring points. Multiple monitoring points in the port model are associated as sub-safety networks, and a main safety network is set. The main safety network is connected to multiple sub-safety networks corresponding to multiple port models in the control model. The main safety network here is used to store data collected by multiple sub-safety networks; In one embodiment, the step S3 of collecting the status information of the port industrial control information based on the safety network, treating the status information that does not meet the preset conditions as abnormal information, and performing a safety assessment on the port industrial control based on the abnormal information includes: S31, based on the sub-safety network, collects the status information of the monitoring point position on the corresponding control port through the synchronization point, and regards the status information that does not meet the preset conditions as abnormal information; S32, based on the abnormal information, the port industrial control is evaluated for security, and the monitoring points corresponding to the abnormal information are used as abnormal monitoring points. The more abnormal monitoring points there are, the lower the security of the port industrial control is. As described in the above steps S31 and S32, the main safety network is used to store information collected by the sub-safety network. The sub-safety network collects the status information of the monitoring point position on the corresponding control port through the synchronization point. The status information can reflect the information interaction displayed in the corresponding port model through the channel established between the synchronization points. The status information here is, for example, the information of the control port being instructed and the operating parameters of the corresponding device of the control port being controlled. Corresponding monitoring points are set here, and preset conditions are set for multiple monitoring points. A monitoring point represents a project that needs to be monitored by data security. The status information that does not meet the preset conditions is regarded as abnormal information. The status information here needs to be compared with the corresponding monitoring point. The preset conditions of the point are judged, and the port industrial control is evaluated based on the abnormal information. The monitoring points corresponding to the abnormal information are used as abnormal monitoring points. The more abnormal monitoring points there are, the lower the security of the port industrial control is. It can better monitor the information security of the port industrial control. When conducting security monitoring, there is no need to set it up in the port industrial control system itself, which means that when the system needs to be deployed for security protection, there is no need to deploy the port industrial control system itself. Then, there is no need to deactivate the port industrial control system when it is deployed. It can be deployed in an external control model that exchanges information with the port industrial control system, and then the information security is monitored through the synchronization point.
[0018] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.
Claims
1. An intelligent safety assessment method for port industrial control, characterized in that: The following steps are involved: Acquire port industrial control information, wherein the port industrial control information includes a plurality of control ports and connection relationships between the plurality of control ports, and construct a control model based on the port industrial control information; A safety network is set up corresponding to the port industrial control information based on the control model, wherein the safety network includes a main safety network and multiple sub-safety networks; The status information of port industrial control information is collected based on the safety network, and the status information that does not meet the preset conditions is regarded as abnormal information. Based on the abnormal information, the safety assessment of port industrial control is carried out.
2. According to claim 1, the intelligent safety assessment method for port industrial control is characterized by: The step of constructing a control model based on port industry control information includes: Acquire multiple control ports and connection relationships between the multiple control ports as port industrial control information; Virtually constructing multiple control ports respectively to obtain port models, and based on the connection relationship between the multiple control ports, virtually constructing the connection between the multiple control ports to obtain a control model; Establish a corresponding relationship between the port model in the control model and the corresponding control port.
3. The intelligent safety assessment method for port industrial control according to claim 1 is characterized by: The step of establishing a corresponding relationship between a port model in the control model and a corresponding control port comprises: Respectively obtain control type information of multiple control ports, wherein the control type information includes control mode and control behavior information; Based on the control type information, corresponding synchronization points are set in the port model in the corresponding control model and the corresponding control port, and based on the synchronization points, the port model and the corresponding control port are associated to obtain the corresponding relationship between the port model in the control model and the corresponding control port.
4. The intelligent safety assessment method for port industrial control according to claim 1 is characterized by: The step of associating the port model with the corresponding control port based on the synchronization point to obtain the corresponding relationship between the port model and the corresponding control port in the control model includes: Acquire multiple communication channels of the corresponding control port based on the control type information, and set synchronization points on the multiple communication channels; Constructing multiple communication channel corresponding port models of the control port to obtain multiple communication channel models, and setting synchronization points on the multiple communication channel models; The synchronization points on the multiple communication channels are communicatively associated with the synchronization points on the corresponding multiple communication channel models to obtain the corresponding relationship between the port model in the control model and the corresponding control port.
5. The intelligent safety assessment method for port industrial control according to claim 1 is characterized by: The step of acquiring multiple communication channels of the corresponding control port based on the control type information and setting synchronization points on the multiple communication channels includes: Acquire multiple communication channels corresponding to the control port for data transmission based on the control type information; Corresponding synchronization channels are respectively set in the multiple communication channels as multiple twin communication channels corresponding to the multiple communication channels, and state information of the communication channels is acquired in real time based on the multiple twin communication channels, wherein the state information includes the communication transmission state of the communication channel and the data information transmitted in the communication channel; Synchronization points are respectively set in multiple twin communication channels as synchronization points of the multiple communication channels.
6. The intelligent safety assessment method for port industrial control according to claim 1 is characterized by: The step of setting up a safety net corresponding to the port industry control information based on the control model includes: A safety net is set in the control model, wherein the safety net includes a main safety net and a plurality of sub-safety nets; Based on the corresponding relationship between the port model in the control model and the corresponding control port, the safety net is loaded into the control port through the communication channel to obtain the safety net of the port industry control information.
7. The intelligent safety assessment method for port industrial control according to claim 1 is characterized by: The step of setting a safety net in the control model comprises: A plurality of monitoring points are set corresponding to the port model in the control model, preset conditions are set corresponding to the plurality of monitoring points, and the plurality of monitoring points in the port model are associated as a sub-safety network; Set up a main safety network, and connect multiple sub-safety networks corresponding to multiple port models in the control model through the main safety network; The main safety net and multiple sub-safety nets are used as safety nets.
8. The intelligent safety assessment method for port industrial control according to claim 1 is characterized by: The step of collecting the status information of the port industrial control information based on the safety network, treating the status information that does not meet the preset conditions as abnormal information, and performing a safety assessment on the port industrial control based on the abnormal information includes: Based on the state information of the monitoring point position on the corresponding control port collected by the sub-safety network through the synchronization point, the state information that does not meet the preset conditions is regarded as abnormal information; The safety assessment of port industrial control is carried out based on abnormal information, and the monitoring points corresponding to the abnormal information are used as abnormal monitoring points.
Citation Information
Patent Citations
Software / hardware joint simulation system based on OPC-UA and self-adaptive collaboration method thereof
CN111897300A
Industrial control system information security attack risk assessment method and system
CN114879613A
Industrial network security risk assessment method and system based on attention mechanism
CN117254980A
AI auxiliary evaluation strategy system for realizing safety operation maturity
CN117973861A
Internet of Things terminal management method based on block chain
CN118018324A
