Control system data transmission system, control device and transmission method

Abstract

The invention provides a control system data transmission system and method. The control system data transmission system comprises a one-way gatekeeper and a file receiving device, the one-way gatekeeper is connected with the file receiving device, the one-way gatekeeper is further used for being connected with a control system outputting fault log files, and the one-way gatekeeper transmits the fault log files sent by the control system to the file receiving device. And blocking data transmitted from the file receiving device to the control system. According to the transmission system, remote transmission of data of the control system can be realized, and the safety can be ensured.

Description

Technical Field

[0001] The present application relates to the field of electronic technology, and in particular to a transmission system, a control device and a transmission method for control system data. Background Art

[0002] For some power production plants (especially nuclear power plants and other places with high information security requirements), when a control system (such as a distributed control system, DCS system) fails and a fault log file needs to be viewed, the instrumentation and control maintenance personnel need to copy the control system's fault log file for all parties to analyze the cause of the fault.

[0003] In order to meet security requirements, the existing fault log file copying methods include: one is to use a dedicated control system USB flash drive and directly insert it into the control system server for file copying after it has been disinfected by the information security department; the other is to use a dedicated blank burning CD that has been checked by the information security department to burn it in the control system server's built-in burning CD-ROM drive.

[0004] Both methods require the I&C maintenance personnel to go to the information security department to check the USB flash drive or CD before entering the DCS (distributed control system) control room of the power generation unit to operate. In the case where the fault log files need to be copied multiple times, there is a problem of low efficiency, and the I&C operation and maintenance personnel need to keep running between the office and the unit DCS control room, and go to the information security department for virus disinfection during this period. This inefficiency is especially obvious when multiple units are involved. In addition, there is a certain possibility of human error when copying and burning directly in the DCS system, which may affect the security of the DCS system. Summary of the invention

[0005] In order to solve the above technical problems, the embodiments of the present application provide a transmission system, a control device and a transmission method for control system data to solve at least one of the above problems.

[0006] According to the first aspect of an embodiment of the present application, a control system data transmission system is provided, comprising a one-way network gate and a file receiving device, wherein the one-way network gate is connected to the file receiving device, and the one-way network gate is also used to connect to a control system that outputs a fault log file, and the one-way network gate transmits the fault log file sent by the control system to the file receiving device, and blocks data transmitted from the file receiving device to the control system.

[0007] Optionally, the transmission system further includes a first switch and a second switch, the first switch is connected between the one-way network switch and the control system, and the second switch is arranged between the control system and the first switch.

[0008] Optionally, the second switch is configured in the first operating room where the control system is located, the first switch and the one-way network switch are configured in the second operating room away from the first operating room, the first switch has at least one first input port and at least one first output port, the second switch includes at least one second output port, and the second output port is connected to the first input port via optical fiber.

[0009] Optionally, there are multiple control systems, and the number of the first input ports of the first switch is greater than or equal to the number of the control systems.

[0010] Optionally, the first switch is configured such that at least some of the multiple first input ports and the first output port form a first VLAN network, at least another part of the multiple first input ports and the first output port form a second VLAN network, data input by at least some of the first input ports are transmitted to the file receiving device via the first VLAN network, and data input by at least another part of the first input ports are transmitted to the file receiving device via the second VLAN network, so that data input by at least some of the first input ports is isolated from data input by at least another part of the first input ports.

[0011] Optionally, the unidirectional network switch includes a fourth input port, the first output port of the first switch is connected to the fourth input port, and the first output port and the fourth input port are RJ45 network ports.

[0012] Optionally, the unidirectional network switch also includes a fourth output port, the transmission system also includes a third switch, the third switch includes at least one third input port, the fourth output port is connected to the third input port, and the fourth output port and the third input port are RJ45 network ports.

[0013] Optionally, the third switch further includes a third output port, and the third output port is connected to the file receiving device via an optical fiber.

[0014] Optionally, a first firewall is provided between the second switch and the control system.

[0015] Optionally, the transmission system further includes a fourth switch, and a second firewall is arranged between the fourth switch and the file receiving device.

[0016] Optionally, the transmission system also includes a controller, which is used to connect to the control system and the file receiving device. When it is detected that a target fault log file is generated in the control system, the controller obtains the target fault log file from the control system, and processes the target fault log file into a data packet that complies with the transmission protocol based on the transmission protocol between the control system and the file receiving device, and sends the data packet to the connected one-way network switch.

[0017] According to another aspect of the present application, a control device is provided, including a control system and the above-mentioned transmission system, the control system is connected to a one-way network gate of the transmission system, and the one-way network gate is connected to a file receiving device.

[0018] According to another aspect of the present application, a transmission method is provided, which is configured in a control system of a control device, and the method includes: establishing a connection between the control system and the file receiving device based on a transmission protocol between the control system and the file receiving device; when a target fault log file is detected to be generated in the control system, processing the target fault log file into a data packet that complies with the transmission protocol; sending the data packet to a one-way network gate connected to the control system, so that the one-way network gate sends the data packet to the file receiving device connected to the one-way network gate.

[0019] Through the transmission system of the embodiment of the present application, the one-way network gate is connected to the control system to receive the fault log file output by the control system and transmit it to the file receiving device. The one-way network gate has the function of isolating data. It only allows data transmitted from the control system to the file receiving device to pass through, but does not allow data transmitted from the file receiving device to the control system to pass through. This ensures the security of the data and effectively avoids the problem of possible damage or virus infection after the control system is connected to external devices through the network. The remote transmission of the fault log file of the control system is realized through the transmission system, which avoids the staff running back and forth to copy files and improves efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 It is a schematic diagram of a transmission system and a control system provided in an embodiment of the present application;

[0021] Figure 2 is a schematic diagram of the connection between the transmission system provided by the embodiment of the present application and multiple control systems;

[0022] Figure 3 It is a schematic diagram of the steps of the control system data transmission method provided in the embodiment of the present application;

[0023] List of reference numerals:

[0024] 10. First switch; 20. One-way network switch; 30. File receiving device; 40. Control system; 50. Second switch; 71. Third switch; 72. Fourth switch; 80. First firewall; 90. Second firewall; 92. Controller.

[0025] Step S301: establishing a connection between the control system and the file receiving device according to a transmission protocol between the control system and the file receiving device.

[0026] Step S302: When it is detected that a target fault log file is generated in the control system, the target fault log file is processed into a data packet that complies with a transmission protocol.

[0027] Step S303: sending the data packet to a one-way network gate connected to the control system, so that the one-way network gate sends the data packet to a file receiving device connected to the one-way network gate. DETAILED DESCRIPTION

[0028] In order to make the objectives, technical solutions and advantages of the present application clearer, the implementation methods of the present application will be further described in detail below with reference to the accompanying drawings.

[0029] In the description of the present application, it should be understood that the terms "center", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", etc., indicating orientations or positional relationships, are based on the orientations or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present application and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as a limitation on the present application.

[0030] Reference Figure 1 , shows a schematic diagram of the structure of the transmission system of the control system data of the embodiment of the present application. In this embodiment, the control system is a DCS system configured in a power plant as an example for description. The transmission system can be adapted to the application scenario of configuring one or more DCS systems in a power plant, and can also be adapted to the application scenario of multiple power plants, without limitation.

[0031] like Figure 1 As shown, the control system data transmission system includes a one-way network gate 20 and a file receiving device 30. The one-way network gate 20 is connected to the file receiving device 30. The one-way network gate 20 is also used to connect to a control system 40 that outputs a fault log file. The one-way network gate 20 transmits the fault log file sent by the control system 40 to the file receiving device 30, and blocks the data transmitted from the file receiving device 30 to the control system 40.

[0032] The one-way network gate 20 of the transmission system is connected to the control system 40 to receive the fault log file output by the control system 40 and transmit it to the file receiving device 30. The one-way network gate 20 has the function of isolating data, and only allows data transmitted from the control system 40 to the file receiving device 30 to pass through, but does not allow data transmitted from the file receiving device 30 to the control system 40 to pass through, thus ensuring the security of the data and effectively avoiding the problem of possible damage or virus infection after the control system 40 is connected to external devices through the network. The remote transmission of the fault log file of the control system 40 is realized through the transmission system, avoiding the staff running back and forth to copy files, and improving efficiency.

[0033] It should be noted that the one-way network gate 20 in this embodiment refers to any network gate that can enable the control system 40 to transmit data to the file receiving device 30 and blocks the file receiving device 30 from transmitting data in the reverse direction to the control system 40 .

[0034] The following is combined with Figure 2 , taking a scenario of a multi-control system 40 as an example, the structure and working process of the transmission system are explained as follows. Figure 2 In the figure, thin solid lines represent RJ45 network cable connections, and thick solid lines represent optical fiber connections.

[0035] like Figure 2 As shown, the transmission system can support multiple control systems 40 for data transmission. The figure shows that three control systems 40 are connected to one file receiving device 30, but the number and combination form are not limited thereto.

[0036] In this embodiment, in order to better adapt to the architecture and line connection relationship of different control systems, the transmission system further includes a first switch 10 and a second switch 50. The first switch 10 is connected between the one-way network gate 20 and the control system 40, and the second switch 50 is arranged between the control system 40 and the first switch 10. The first switch 10 and the one-way network gate 20 are arranged in the second operating room.

[0037] For example, the second switch 50 may include one or more second input ports and one or more second output ports, and the control system 40 may be connected to the second input port via a network cable (such as a network cable that complies with RJ45) to achieve data link connection. In this embodiment, the second switch 50 is configured in the first operating room where the control system 40 is located, so that the distance between the two is relatively close, and it is convenient to connect via the RJ45 network cable. The first operating room and the second operating room are far apart, and the far apart means that the two are two independent operating rooms. For example, the far apart in this embodiment means that the distance between the first operating room and the second operating room is greater than or equal to 1 meter.

[0038] Optionally, in order to further ensure security, a first firewall 80 is provided between the second switch 50 and the control system 40. The first firewall 80 can filter the data transmitted between the second switch 50 and the control system 40 to reduce or avoid the transmission of harmful data such as viruses, thereby ensuring security. The firewall can be understood as a filter plug. By filtering the communication packets carrying communication data through the firewall, a part of viruses and / or unconfirmed instructions can be prevented from passing. In some examples, the first firewall 80 can be configured with some filtering rules, and only data that meets the rules is allowed to be transmitted. For example, the filtering rules are: only the data packets corresponding to the fault log files that comply with the TCPIP protocol are allowed to be transmitted from the set port, and all external incoming data are rejected.

[0039] In this embodiment, the first switch 10 has at least one first input port and at least one first output port, and the second switch 50 includes at least one second output port, and the second output port is connected to the first input port through an optical fiber. The first switch 10 and the second switch 50 are connected through an optical fiber, which can effectively improve the output transmission speed.

[0040] Optionally, in the scenario of multiple control systems 40 of this embodiment, the number of first input ports of the first switch 10 is greater than or equal to the number of control systems 40. In this way, fewer first switches 10 can meet the data transmission requirements of multiple different control systems 40, thereby reducing costs.

[0041] Optionally, the first switch 10 is configured such that at least some of the multiple first input ports and the first output port form a first VLAN network, at least another part of the multiple first input ports and the first output port form a second VLAN network, data input by at least some of the first input ports are transmitted to the file receiving device via the first VLAN network, and data input by at least another part of the first input ports are transmitted to the file receiving device via the second VLAN network, so that data input by at least some of the first input ports is isolated from data input by at least another part of the first input ports.

[0042] By configuring the first switch 10 supporting the VLAN function and forming mutually isolated and different VLAN networks between the first input ports and the first output ports corresponding to different control systems 40, data isolation between them can be achieved even if different control systems 40 are connected to the same first switch 10, thereby further improving information security. In other words, because the first VLAN network and the second VLAN network are different networks, and data between different networks are not interoperable, it can be ensured that data between different control systems 40 are isolated from each other.

[0043] by Figure 2 For example, the first switch 10 is connected to three different control systems 40. Each control system 40 corresponds to a first input port, which are respectively recorded as the first input port A, the first input port B and the first input port C. The first input port A and the first output port form a VLAN network recorded as VLAN network a, the second input port B and the first output port form a VLAN network recorded as VLAN network b, and the first input port C and the first output port form a VLAN network recorded as VLAN network c. The three VLAN networks are independent of each other, thereby ensuring data isolation between the control systems 40. The first output port is connected to the one-way network gate 20 to ensure that the fault log files output by these control systems 40 can be transmitted to the file receiving device 30 through the one-way network gate 20. The full name of the one-way network gate (GAP) is a security isolation network gate. The security isolation network gate is a network security device that uses dedicated hardware with multiple control functions to cut off the link layer connection between networks on the circuit and can exchange application data safely and appropriately between networks.

[0044] In this embodiment, the one-way network gate 20 includes a fourth input port, the first output port of the first switch 10 is connected to the fourth input port, and the first output port and the fourth input port are RJ45 network ports. In this way, data connection between the two can be achieved, and additional line laying can be avoided, reducing the cost of transformation. In this embodiment, the first switch 10 and the one-way network gate 20 are arranged in the second operating room. By arranging the first switch 10 and the one-way network gate 20 in the same operating room, it is convenient to connect through an RJ45 network cable.

[0045] Optionally, in order to ensure the transmission efficiency between the one-way network gate 20 and the file receiving device 30, the one-way network gate 20 further includes a fourth output port, the transmission system further includes a third switch 71, the third switch 71 includes at least one third input port, the fourth output port is connected to the third input port, and the fourth output port and the third input port are RJ45 network ports. The third switch 71 further includes a third output port, and the third output port is connected to the file receiving device 30 via an optical fiber.

[0046] Optionally, the transmission system further includes a fourth switch 72 , and a second firewall 90 is provided between the fourth switch 72 and the file receiving device 30 .

[0047] The fourth switch 72 may include a fifth input port and a fifth output port. The fifth input port may be connected to the third output port of the third switch 71, and both may be optical fiber ports to achieve fast data transmission. The fifth output port may be an RJ45 network port to connect to the file receiving device 30. By setting the second firewall 90, the data input to the file receiving device 30 and the data output from the file receiving device 30 may be effectively filtered, thereby improving security. The second firewall 90 may be configured with appropriate data screening rules, which are not limited in this embodiment.

[0048] In summary, in some usage scenarios, the transmission system can be applied to power plants, and the three-level security zone division method is adopted to realize the remote and secure transmission of fault log files. Among them, the transmission system can include the unit control area (i.e., the first operation room), the information security management area (i.e., the second operation room) and the instrumentation and control maintenance area. The DCS control rooms of multiple units in the unit control area can be distributed in different areas and different buildings. The information security management area is the only control area that is allowed to receive data from the unit DCS control system, such as fault log files. This area is generally located in the computer room of the information security management center, while the instrumentation and control maintenance area is the daily office of the instrumentation and control maintenance personnel. Among them, the computer room of the information security management center and the instrumentation and control maintenance area may be in the same building or in different buildings in different areas.

[0049] In this embodiment, appropriate physical isolation devices are provided between different control areas to prevent the DCS control system from being infected by programs such as viruses and Trojans from the outside and unconfirmed instructions, thereby realizing a securely controlled transmission link. A one-way network gate 20 is provided in the information security management area of ​​the transmission system to connect the DCS control system in the unit control area and the file receiving device 30 in the instrumentation and control maintenance area. The one-way network gate 20 is an isolation device that realizes communication on the basis of ensuring safety. In this way, it is completely possible to avoid the transmission of harmful data or illegal commands such as viruses and Trojans from the file receiving device 30 to the DCS control system 40 from the file receiving device 30 at the physical level.

[0050] In addition, in this embodiment, the installation space for laying optical cables from the DCS control system to the information security control area and the cabinet of the DCS control system is limited, and the need to transmit other data of the DCS control system to other devices through this transmission system is taken into account. The switches in the transmission system all have VLAN functions and have sufficient optical fibers and RJ45 network interfaces. In this way, by dividing the ports used for different functions into different VLAN networks, the data of different control systems are transmitted through the same optical fiber link, but the data isolation is guaranteed, and only the data in the same VLAN can be interoperable, thereby avoiding possible data theft and interference.

[0051] Optionally, the transmission system also includes a controller 92, which is used to connect to the control system 40 and the file receiving device 30. When the controller 92 detects that a target fault log file is generated in the control system 40, the controller 92 processes the target fault log file into a data packet that complies with the transmission protocol based on the transmission protocol between the control system 40 and the file receiving device 30, and sends the data packet to the connected one-way network switch 20.

[0052] For example, the controller 92 can scan whether a new fault log file is generated in the control system 40 (the new fault log file refers to a fault log file newly added relative to the last scan result). If it exists, the new fault log file is used as the target fault log file. The controller 92 obtains the fault log file, processes it into a data packet that complies with the transmission protocol, and sends the data packet to the one-way network gate 20, which forwards the data packet to the file receiving device 30.

[0053] Optionally, according to another aspect of the present application, a control device is provided, which includes a control system 40 and the above-mentioned transmission system, the control system 40 is connected to the one-way network gate 20 of the transmission system, and the one-way network gate 20 is connected to the file receiving device 30. The control device can realize that the fault log file generated by the control system 40 is sent to the file receiving device 30 through the network, without the need for staff to arrive at the location of the control system 40 to copy it.

[0054] The controller 92 in the transmission system can be hardware independent of the control system 40. The hardware can be configured outside the control system 40 and connected to the control system 40. Alternatively, the controller 92 can also be set in the shell of the control system 40 and connected to the control system 40 to realize the transmission of data and instructions.

[0055] like Figure 3 According to another aspect of the present application, a transmission method is provided, the method comprising the following steps:

[0056] Step S301 : establishing a connection between the control system 40 and the file receiving device 30 according to a transmission protocol between the control system 40 and the file receiving device 30 .

[0057] The control system 40 is configured with a data transmission protocol (such as TCPIP protocol) used for communication with the file receiving device 30. The control system 40 and the file receiving device 30 are connected. After the connection is established, step S302 can be executed.

[0058] Step S302: When it is detected that a target fault log file is generated in the control system 40, the target fault log file is processed into a data packet that complies with a transmission protocol.

[0059] In some examples, the method can be configured in a separate controller 92, which is located outside the control system 40 (e.g., Figure 2 The controller 92 is connected to the control system 40 to control the control system 40. Alternatively, the controller 92 may be disposed in the control system 40 (eg, Figure 2 The controller 92 is connected to a processor (such as a CPU) of the control system 40 to control the control system 40. Alternatively, the controller 92 can also be configured in the control system 40 in a software manner (such as Figure 2 The third control system 40 shown in FIG. 4 ). For example, the controller 92 may be a script or program configured in the control system 40 to automatically detect files in a set path in the control system 40, thereby realizing automatic detection of fault log files. This step may be performed by the controller 92 or by a data processor in the control system 40, without limitation.

[0060] Regardless of the form adopted by the controller 92, when it is detected that a target fault log file is generated under the path where the fault log file is stored, the fault log file can be automatically processed into a data packet that complies with the transmission protocol (such as the TCPIP protocol) according to the rules of the set transmission protocol to ensure that the fault log file can be correctly transmitted.

[0061] The target fault log file may be a newly added fault log file, that is, a fault log file newly added in this detection relative to the previous detection.

[0062] Step S303 : sending the data packet to the one-way network gate 20 connected to the control system 40 , so that the one-way network gate 20 sends the data packet to the file receiving device 30 connected to the one-way network gate 20 .

[0063] The control system 40 can automatically send the processed data packet to the one-way network gate 20. After receiving the data packet, the one-way network gate 20 forwards the data packet to the connected file receiving device 30 according to the set configuration, thereby realizing the automatic transmission of the fault log file from the control system 40 to the file receiving device 30. Alternatively, in other embodiments, the controller 92 can also send the data packet, which is not limited to this.

[0064] After receiving the data packet, the file receiving device 30 can parse it according to the protocol rules to obtain the fault log file, which will not be described in detail.

[0065] Through the transmission system and related transmission methods, the data of the DCS control system is transmitted to the file receiving device 30 located in the instrumentation and control maintenance area through this secure link, which facilitates the rapid collection of DCS fault log files by instrumentation and control maintenance personnel.

[0066] In addition, it is also convenient to expand the data collection of other DCS control systems in the future, without the need to lay optical fibers over long distances again and add switches in the cabinet of the DCS control system (only different VLANs need to be configured for different network ports in the installed switches). This solves the problem of time-consuming and labor-intensive collection of fault data of the DCS control system by the instrumentation and control maintenance personnel, and enables the fault log files transmitted by the unit to be viewed on the file receiving device 30 at the first time. Since the entire link has avoided possible network attacks such as viruses and Trojans on the DCS control system by external devices, the instrumentation and control maintenance personnel can copy the data from the file receiving device through a U disk for analysis. The entire network security transmission link can also be expanded to more units of the DCS control system data external transmission function when needed through simple VLAN division and firewall, network gate and other settings, without the need to repeatedly lay optical fibers and add additional switches in the cabinet.

[0067] It should be noted that not all steps and modules in the above-mentioned processes and system structure diagrams are necessary, and some steps or modules can be ignored according to actual needs. The execution order of each step is not fixed and can be adjusted as needed. The system structure described in the above-mentioned embodiments can be a physical structure or a logical structure, that is, some modules may be implemented by the same physical entity, or some modules may be implemented by multiple physical entities, or some components in multiple independent devices may be implemented together.

[0068] In the above embodiments, the hardware module can be implemented mechanically or electrically. For example, a hardware module can include a permanent dedicated circuit or logic (such as a dedicated processor, FPGA or ASIC) to complete the corresponding operation. The hardware module can also include programmable logic or circuits (such as a general-purpose processor or other programmable processors), which can be temporarily set by software to complete the corresponding operation. The specific implementation method (mechanical method, or dedicated permanent circuit, or temporarily set circuit) can be determined based on cost and time considerations.

[0069] The present application is presented and described in detail above through the accompanying drawings and preferred embodiments; however, the present application is not limited to these disclosed embodiments, and those skilled in the art may know based on the above-mentioned multiple embodiments that the code review methods in the above-mentioned different embodiments may be combined to obtain more embodiments of the present application, and these embodiments are also within the protection scope of the present application.

Claims

1. A transmission system for control system data, characterized in that: The invention comprises a one-way network gate (20) and a file receiving device (30), wherein the one-way network gate (20) is connected to the file receiving device (30), and the one-way network gate (20) is also used to connect to a control system (40) that outputs a fault log file, wherein the one-way network gate (20) transmits the fault log file sent by the control system (40) to the file receiving device (30), and blocks data transmitted from the file receiving device (30) to the control system (40).

2. The control system data transmission system according to claim 1, characterized in that: The transmission system further comprises a first switch (10) and a second switch (50), wherein the first switch (10) is connected between the one-way network switch (20) and the control system (40), and the second switch (50) is arranged between the control system (40) and the first switch (10).

3. The control system data transmission system according to claim 2, characterized in that: The second switch (50) is arranged in a first operating room where the control system (40) is located, the first switch (10) and the one-way network switch (20) are arranged in a second operating room away from the first operating room, the first switch (10) has at least one first input port and at least one first output port, the second switch (50) includes at least one second output port, and the second output port is connected to the first input port via an optical fiber.

4. The control system data transmission system according to claim 3, characterized in that: The number of the control systems (40) is plural, and the number of the first input ports of the first switch (10) is greater than or equal to the number of the control systems (40).

5. The control system data transmission system according to claim 3 or 4, characterized in that: The first switch (10) is configured such that at least some of the first input ports among the plurality of the first input ports form a first VLAN network with the first output port, and at least another part of the first input ports among the plurality of the first input ports form a second VLAN network with the first output port, data input by at least some of the first input ports is transmitted to the file receiving device (30) via the first VLAN network, and data input by at least another part of the first input ports is transmitted to the file receiving device (30) via the second VLAN network, so that data input by at least some of the first input ports is isolated from data input by at least another part of the first input ports.

6. The control system data transmission system according to claim 3, characterized in that: The one-way network switch (20) comprises a fourth input port, the first output port of the first switch (10) is connected to the fourth input port, and the first output port and the fourth input port are RJ45 network ports.

7. The control system data transmission system according to claim 3 or 6, characterized in that: The one-way network switch (20) further comprises a fourth output port, the transmission system further comprises a third switch (71), the third switch (71) comprises at least one third input port, the fourth output port is connected to the third input port, and the fourth output port and the third input port are RJ45 network ports.

8. The control system data transmission system according to claim 7, characterized in that: The third switch (71) further comprises a third output port, wherein the third output port is connected to the file receiving device (30) via an optical fiber.

9. The control system data transmission system according to claim 2, characterized in that: A first firewall (80) is provided between the second switch (50) and the control system (40).

10. The control system data transmission system according to claim 1, characterized in that: The transmission system further comprises a fourth switch (72), and a second firewall (90) is arranged between the fourth switch (72) and the file receiving device (30).

11. The control system data transmission system according to claim 1, characterized in that: The transmission system further comprises a controller (92), wherein the controller (92) is connected to the control system (40) and the file receiving device (30), and when detecting that a target fault log file is generated in the control system (40), the controller (92) obtains the target fault log file from the control system (40), processes the target fault log file into a data packet conforming to the transmission protocol according to a transmission protocol between the control system (40) and the file receiving device (30), and sends the data packet to the connected one-way network switch (20).

12. A control device, characterized in that: The invention comprises a control system (40) and the transmission system according to any one of claims 1 to 11, wherein the control system (40) is connected to a one-way network gate (20) of the transmission system, and the one-way network gate (20) is connected to a file receiving device (30).

13. A transmission method, characterized in that: The method comprises: Establishing a connection between the control system (40) and the file receiving device (30) according to a transmission protocol between the control system (40) and the file receiving device (30); When it is detected that a target fault log file is generated in the control system (40), processing the target fault log file into a data packet that complies with a transmission protocol; The data packet is sent to a one-way network gate (20) connected to the control system (40), so that the one-way network gate (20) sends the data packet to a file receiving device (30) connected to the one-way network gate (20).

Images