Control logic verification method of trusted distributed control system and related device
By generating search conditions in a trusted distributed control system, comparing the classic application case library and expert rule library, the problems of low efficiency and safety hazards of control logic inspection are solved, and efficient and accurate control logic inspection is achieved to prevent Malicious changes.
Patent Information
- Application Number
- CN202411229206.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-03
- Publication Date
- 2024-12-31
AI Technical Summary
The existing trusted distributed control system has no preventive measures for malicious changes in control logic, and the inspection is inefficient and not meticulous, which affects the normal operation of the system and leads to economic losses and production safety risks.
By generating search conditions, searching the classic application case library and expert rule library of the expert knowledge base, comparing the control logic, obtaining verification results, improving inspection efficiency and accuracy, and preventing malicious tampering.
It realizes efficient and accurate inspection of control logic, improves the work efficiency of configuration personnel, ensures the correctness of control logic, and avoids malicious damage.
Smart Images
Figure CN119226336A_ABST
Abstract
Description
Technical Field
[0001] The invention belongs to the field of distributed control systems and relates to a control logic verification method and related devices for a trusted distributed control system. Background Art
[0002] Trusted distributed control system is a computer control system that emphasizes system trustworthiness based on distributed control system. It integrates computer technology, network technology, communication technology and automatic control technology, and pays special attention to system reliability, security, availability and maintainability. Trusted distributed control system can effectively protect against social engineering attacks within the control system through hardware trusted root-based approach, and can prevent important configuration files from being maliciously tampered with and virus files from being maliciously implanted into the system.
[0003] However, engineers have the right to modify the control logic. The current trusted distributed control system has no preventive measures against malicious changes to the control logic, which poses a security risk. In addition, the current configuration and inspection of the control logic mainly rely on manpower, which is inefficient, and there are problems such as intricate inspection and insufficient cognitive level, which leads to defects in the control logic, which ultimately seriously affects the normal operation of the controlled system and even causes the controlled system to fail and shut down, resulting in economic losses and affecting production safety. Summary of the invention
[0004] The purpose of the present invention is to overcome the shortcomings of the above-mentioned prior art and provide a control logic verification method and related devices for a trusted distributed control system.
[0005] In order to achieve the above object, the present invention adopts the following technical solutions:
[0006] In a first aspect, the present invention provides a control logic verification method for a trusted distributed control system, comprising: obtaining the control logic to be verified, and generating a retrieval condition based on the control logic to be verified; searching a classic application case library of an expert knowledge base based on the retrieval condition, and when there are classic application cases in the classic application case library whose similarity meets the preset requirements with the retrieval condition, using the classic application cases that meet the preset requirements as classic application cases to be compared, and obtaining a control logic file of the classic application case to be compared and comparing it with the control logic to be verified to obtain a verification result of the control logic to be verified; when there are no classic application cases in the classic application case library whose similarity meets the preset requirements with the retrieval condition, searching an expert rule library of an expert knowledge base based on the retrieval condition to obtain an expert rule to be compared; and comparing the expert rule to be compared with the control logic to be verified to obtain a verification result of the control logic to be verified.
[0007] Optionally, generating retrieval conditions based on the control logic to be verified includes: parsing the control logic to be verified, obtaining the application scenario type, system type and device type of the control logic to be verified, and generating retrieval conditions based on the application scenario type, system type and device type of the control logic to be verified.
[0008] Optionally, the method of obtaining the control logic file of the classic application case to be compared and comparing it with the control logic to be verified to obtain the verification result of the control logic to be verified includes: obtaining the control logic file of the classic application case to be compared; classifying the control logic to be verified according to the logic type, and processing the classified control logic to be verified according to the preset processing rules of the corresponding logic type to obtain the processing result to be compared; according to the logic type of the control logic to be verified, selecting a control logic sub-file with the same logic type as the control logic to be verified from the control logic file of the classic application case to be compared as the control logic sub-file to be compared; comparing the control logic sub-file to be compared with the processing result to be compared A comparison is performed, and when the comparison results are inconsistent, error information of the control logic to be checked is generated and fed back; when the comparison results are consistent, reasonable information of the control logic to be checked is generated and fed back; the comparison of the expert rules to be compared with the control logic to be checked to obtain the inspection result of the control logic to be checked includes: classifying the control logic to be checked according to the logic type, and processing the classified control logic to be checked according to the preset processing rules of the corresponding logic type to obtain the processing result to be compared; comparing the expert rules to be compared with the processing result to be compared, and when the comparison results are inconsistent, error information of the control logic to be checked is generated and fed back; when the comparison results are consistent, reasonable information of the control logic to be checked is generated and fed back.
[0009] Optionally, the logic type includes one or more of the following: equipment operation sequence control logic, equipment operation protection logic, and automatic control logic of equipment operation status.
[0010] Optionally, the classified control logic to be checked is processed according to the preset processing rules of the corresponding logic type, and the processing results to be compared include: when the control logic to be checked is the equipment operation sequential control logic, a logic map is established according to the sequence of implementation of the control logic to be checked; when the control logic to be checked is the equipment operation protection logic, the protection conditions and threshold settings of the control logic to be checked are obtained; when the control logic to be checked is the automatic control logic of the equipment operation status, the control method of the control logic to be checked and the input parameter type and output parameter type of the control method are obtained.
[0011] Optionally, it also includes: obtaining several classic application cases by pre-building the control logic of several application scenarios of trusted distributed control systems, several systems and several devices' actual application projects; and obtaining the control logic files of each classic application case, and classifying and storing the control logic files of several classic application cases according to application scenario type, system type and device type to obtain a classic application case library.
[0012] Optionally, it also includes: obtaining engineering application experience, system operating procedures, equipment operating conditions and equipment operating principles of the field implementation process of the trusted distributed control system to obtain a number of knowledge items; classifying the number of knowledge items according to application scenario type, system type and equipment type, and parsing and expressing each knowledge item according to the IF-THEN rule generation method to obtain a number of expert rules; and classifying and storing the number of expert rules according to application scenario type, system type and equipment type to obtain an expert rule library.
[0013] According to a second aspect of the present invention, a control logic verification system for a trusted distributed control system is provided, comprising: a data acquisition module for acquiring the control logic to be verified and generating a retrieval condition based on the control logic to be verified; a first comparison module for searching a classic application case library of an expert knowledge base based on the retrieval condition, and when there are classic application cases in the classic application case library whose similarity meets the preset requirements with the retrieval condition, the classic application cases that meet the preset requirements are used as classic application cases to be compared, and a control logic file of the classic application case to be compared is obtained and compared with the control logic to be verified to obtain a verification result of the control logic to be verified; a second comparison module for searching an expert rule library of an expert knowledge base based on the retrieval condition to obtain an expert rule to be compared when there are no classic application cases in the classic application case library whose similarity meets the preset requirements with the retrieval condition; and comparing the expert rule to be compared with the control logic to be verified to obtain a verification result of the control logic to be verified.
[0014] According to a third aspect of the present invention, a computer device is provided, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the above-mentioned trusted distributed control system control logic verification method when executing the computer program.
[0015] According to a fourth aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the above-mentioned trusted distributed control system control logic verification method are implemented.
[0016] Compared with the prior art, the present invention has the following beneficial effects:
[0017] The control logic verification method of a trusted distributed control system of the present invention first generates a search condition according to the control logic to be verified, and then based on a two-layer design of a classic application case library and an expert rule library of an expert knowledge base, first searches the classic application case library, and when there is a classic application case in the classic application case library whose similarity meets the preset requirements with the search condition, obtains the control logic file of the classic application case to be compared and compares it with the control logic to be verified, obtains the verification result of the control logic to be verified, and obtains the verification reference information based on the control logic file of the classic application case to achieve efficient verification of the control logic to be verified; and when no classic application case meeting the preset requirements is retrieved, the expert rule library of the expert knowledge base is searched according to the search condition to obtain the expert rule to be compared, and the verification reference information is continuously provided to achieve accurate verification of the control logic to be verified, which can improve the work efficiency of the configuration personnel and the correctness of the control logic, and also avoid the situation where malicious personnel damage the system by changing the control logic. BRIEF DESCRIPTION OF THE DRAWINGS
[0018] Figure 1 This is a flow chart of a control logic verification method for a trusted distributed control system according to an embodiment of the present invention.
[0019] Figure 2 This is a detailed flow chart of a control logic verification method for a trusted distributed control system according to an embodiment of the present invention.
[0020] Figure 3 It is a structural block diagram of a control logic verification system of a trusted distributed control system according to an embodiment of the present invention. DETAILED DESCRIPTION
[0021] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.
[0022] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.
[0023] The present invention is further described in detail below in conjunction with the accompanying drawings:
[0024] See also Figure 1 In one embodiment of the present invention, a control logic verification method for a trusted distributed control system is provided, which can realize automatic and high-accuracy verification of the control logic of the trusted distributed control system.
[0025] Specifically, the control logic verification method of the trusted distributed control system of the present invention includes the following steps:
[0026] S1: Obtain the control logic to be verified, and generate search conditions according to the control logic to be verified;
[0027] S2: searching the classic application case library of the expert knowledge base according to the search conditions, and when there are classic application cases in the classic application case library whose similarity and the search conditions meet the preset requirements, taking the classic application cases that meet the preset requirements as the classic application cases to be compared, and obtaining the control logic file of the classic application cases to be compared and comparing it with the control logic to be verified, and obtaining the verification result of the control logic to be verified;
[0028] S3: When there is no classic application case in the classic application case library whose similarity and retrieval conditions meet the preset requirements, the expert rule library of the expert knowledge base is searched according to the retrieval conditions to obtain the expert rules to be compared; and the expert rules to be compared are compared with the control logic to be verified to obtain the verification result of the control logic to be verified.
[0029] The control logic verification method of a trusted distributed control system of the present invention first generates a search condition according to the control logic to be verified, and then based on a two-layer design of a classic application case library and an expert rule library of an expert knowledge base, first searches the classic application case library, and when there is a classic application case in the classic application case library whose similarity meets the preset requirements with the search condition, obtains the control logic file of the classic application case to be compared and compares it with the control logic to be verified, obtains the verification result of the control logic to be verified, and obtains the verification reference information based on the control logic file of the classic application case to achieve efficient verification of the control logic to be verified; and when no classic application case meeting the preset requirements is retrieved, the expert rule library of the expert knowledge base is searched according to the search condition to obtain the expert rule to be compared, and the verification reference information is continuously provided to achieve accurate verification of the control logic to be verified, which can improve the work efficiency of the configuration personnel and the correctness of the control logic, and also avoid the situation where malicious personnel damage the system by changing the control logic.
[0030] In a possible implementation, the trusted distributed control system control logic verification method further includes:
[0031] By pre-building the control logic of several application scenarios of trusted distributed control systems, several systems and several devices' actual application projects, several classic application cases are obtained; and the control logic files of each classic application case are obtained, and the control logic files of several classic application cases are classified and stored according to the application scenario type, system type and device type to obtain a classic application case library.
[0032] Specifically, engineers and others provide the control logic of actual application projects of several application scenarios, several systems and several devices through the human-machine interface to obtain several classic application cases. The control logic architecture of the control logic in the classic application cases is refined to obtain the control logic file, which mainly includes the control sequence, control conditions and protection actions, etc., and can be stored locally in the form of text for easy access at any time. Among them, when storing, the control logic files of several classic application cases can be classified and stored according to the application scenario type, system type and equipment type, so that when the control logic to be verified is verified later, the control logic files of the corresponding classic application cases can be retrieved in time.
[0033] In a possible implementation, the trusted distributed control system control logic verification method further includes:
[0034] The engineering application experience, system operation procedures, equipment operation conditions and equipment operation principles of the field implementation process of the trusted distributed control system are obtained to obtain a number of knowledge items; the number of knowledge items are classified according to the application scenario type, system type and equipment type, and each knowledge item is parsed and expressed according to the IF-THEN rule generation method to obtain a number of expert rules; and the number of expert rules are classified and stored according to the application scenario type, system type and equipment type to obtain an expert rule library.
[0035] Specifically, knowledge items are mainly derived from engineering application experience during the on-site implementation process, as well as system operation procedures, equipment operating conditions, and equipment operating principles. Knowledge items will be defined as scenarios, systems, and equipment through knowledge tags added by engineers, so that they can be conveniently classified. After the knowledge items are classified, the individual knowledge items will be parsed and expressed according to the IF-THEN rule generation method, and finally a complete knowledge expression link for the equipment operation function, namely, expert rules, will be established.
[0036] Among them, the IF-THEN rule generation method is mainly based on logic and conditional judgment. This rule usually consists of a condition and a corresponding action or result, expressed in the form of "if the condition is met, then the action is performed" or "if this condition is met, then this result will occur".
[0037] The classic application case library and the expert rule library together form the expert knowledge base. The two-layer functional expert knowledge base is more powerful and efficient than the traditional single-structure expert knowledge base.
[0038] In a possible implementation, generating retrieval conditions based on the control logic to be verified includes: parsing the control logic to be verified, obtaining the application scenario type, system type and device type of the control logic to be verified, and generating retrieval conditions based on the application scenario type, system type and device type of the control logic to be verified.
[0039] Specifically, after completing the control logic configuration of the controlled object, the configuration personnel obtain the control logic to be verified. First, the application scenario, system type and equipment type of the control logic to be verified are determined, and the search conditions of the expert knowledge base are established according to the current application scenario, system type and equipment type. When searching, first determine whether the application scenario is in compliance. The application scenarios mainly include different application types such as thermal power, hydropower and photovoltaic power. After finding the application scenario, further check whether there are systems and equipment of the same type.
[0040] See also Figure 2In a possible implementation, the obtaining of the control logic file of the classic application case to be compared and comparing it with the control logic to be verified to obtain the verification result of the control logic to be verified includes: obtaining the control logic file of the classic application case to be compared; classifying the control logic to be verified according to the logic type, and processing the classified control logic to be verified according to the preset processing rules of the corresponding logic type to obtain the processing result to be compared; according to the logic type of the control logic to be verified, selecting a control logic sub-file with the same logic type as the control logic to be verified from the control logic file of the classic application case to be compared as the control logic sub-file to be compared; comparing the control logic sub-file to be compared with the processing result to be compared, and when the comparison results are inconsistent, generating and feeding back error information of the control logic to be verified; when the comparison results are consistent, generating and feeding back reasonable information of the control logic to be verified.
[0041] The method of comparing the expert rules to be compared with the control logic to be checked to obtain the test result of the control logic to be checked includes: classifying the control logic to be checked according to the logic type, and processing the classified control logic to be checked according to the preset processing rules of the corresponding logic type to obtain the processing result to be compared; comparing the expert rules to be compared with the processing result to be compared, when the comparison results are inconsistent, generating and feeding back error information of the control logic to be checked; when the comparison results are consistent, generating and feeding back reasonable information of the control logic to be checked.
[0042] Specifically, the two-layer functional expert knowledge base is searched according to the search conditions. First, the first-layer expert knowledge base, i.e., the classic application case library, is called to determine whether there are classic application cases with the same application scenario type, system type, and device type as the control logic to be verified. If so, it is used as the classic application case to be compared and the control logic file stored locally in text form in the classic application case to be compared is called to compare with the control logic to be verified. The classified control logic to be verified is processed according to the preset processing rules of the corresponding logic type. This is to facilitate comparison of the processed control logic to be verified, and then the comparison and verification can be completed by sorting out the functions and boundary conditions of the control logic.
[0043] If the classic application case to be compared is not found in the classic application case library, the expert rule library is called to obtain expert rules with the same application scenario type, system type and equipment type as the control logic to be verified as the expert rules to be compared, and the expert rules to be compared are compared with the processing results to be compared. This can be achieved by comparing the initial conditions, judgment conditions and logical expressions of the processing results to be compared with the expert rules.
[0044] When the comparison results are inconsistent, the control logic error information to be verified is generated. The control logic error information to be verified can include the comparison consistent parts and the control logic sub-file to be compared, and can be fed back to the human-machine interface for visual display, so that engineering personnel can understand the inspection results and provide modification assistance.
[0045] In a possible implementation manner, the logic type includes one or more of the following: equipment operation sequence control logic, equipment operation protection logic, and automatic control logic of equipment operation status.
[0046] Specifically, the equipment operation sequential control logic mainly includes the sequential control of the equipment start and stop process, the equipment operation protection logic mainly includes the equipment start and stop protection in fault conditions, etc. The automatic control logic of the equipment operation status mainly includes the automatic adjustment logic of the equipment parameters, such as the temperature, pressure and water level adjustment process using PID control.
[0047] In a possible implementation manner, the classified control logic to be checked is processed according to a preset processing rule of the corresponding logic type to obtain a processing result to be compared, including:
[0048] When the control logic to be checked is the sequential control logic of the equipment operation, establish a logic map according to the sequence of implementation of the control logic to be checked; when the control logic to be checked is the protection logic of the equipment operation, obtain the protection conditions and threshold settings of the control logic to be checked; when the control logic to be checked is the automatic control logic of the equipment operation status, obtain the control method of the control logic to be checked and the input parameter type and output parameter type of the control method.
[0049] Specifically, after the classification of the control logic to be verified is completed, the control logic to be verified is analyzed according to the different classifications. For the control logic to be verified of the equipment operation sequential control logic type, a logic map will be established in the order of implementation to clarify the order of logic implementation steps, the content of logic implementation steps, and the setting delay time parameters of the logic implementation steps; for the control logic to be verified of the equipment operation protection logic, the main analysis process is to clarify the protection conditions and threshold settings; for the control logic to be verified of the automatic control logic type of the equipment operation status, the main analysis mainly includes obtaining the control method, such as PID (Proportional-Integral-Derivative) control and PI (Proportional-Integral) control, as well as the input parameter type and output parameter type of the control method.
[0050] The following are device embodiments of the present invention, which can be used to implement the method embodiments of the present invention. For details not disclosed in the device embodiments, please refer to the method embodiments of the present invention.
[0051] See also Figure 3 In yet another embodiment of the present invention, a trusted distributed control system control logic verification system is provided, which can be used to implement the above-mentioned trusted distributed control system control logic verification method. Specifically, the trusted distributed control system control logic verification system includes a data acquisition module, a first comparison module and a second comparison module.
[0052] Among them, the data acquisition module is used to obtain the control logic to be verified and generate search conditions according to the control logic to be verified; the first comparison module is used to search the classic application case library of the expert knowledge base according to the search conditions, when there are classic application cases in the classic application case library whose similarity and search conditions meet the preset requirements, the classic application cases that meet the preset requirements are used as classic application cases to be compared, and the control logic files of the classic application cases to be compared are obtained and compared with the control logic to be verified to obtain the verification results of the control logic to be verified; the second comparison module is used to search the expert rule library of the expert knowledge base according to the search conditions to obtain the expert rules to be compared when there are no classic application cases in the classic application case library whose similarity and search conditions meet the preset requirements; and compare the expert rules to be compared with the control logic to be verified to obtain the verification results of the control logic to be verified.
[0053] All relevant contents of each step involved in the aforementioned embodiment of the trusted distributed control system control logic verification method can be referred to the functional description of the functional module corresponding to the trusted distributed control system control logic verification system in the embodiment of the present invention, and will not be repeated here.
[0054] The division of modules in the embodiments of the present invention is schematic and is only a logical function division. There may be other division methods in actual implementation. In addition, each functional module in each embodiment of the present invention may be integrated into one processor, or may exist physically separately, or two or more modules may be integrated into one module. The above-mentioned integrated modules may be implemented in the form of hardware or in the form of software functional modules.
[0055] In another embodiment of the present invention, a computer device is provided, the computer device includes a processor and a memory, the memory is used to store a computer program, the computer program includes program instructions, and the processor is used to execute the program instructions stored in the computer storage medium. The processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc., which are the computing core and control core of the terminal, which are suitable for implementing one or more instructions, and are specifically suitable for loading and executing one or more instructions in the computer storage medium to implement the corresponding method flow or corresponding function; the processor described in the embodiment of the present invention can be used for the operation of the control logic verification method of the trusted distributed control system.
[0056] In another embodiment of the present invention, the present invention also provides a storage medium, specifically a computer-readable storage medium (Memory), which is a memory device in a computer device for storing programs and data. It can be understood that the computer-readable storage medium here can include both built-in storage media in the computer device and, of course, extended storage media supported by the computer device. The computer-readable storage medium provides a storage space, which stores the operating system of the terminal. In addition, one or more instructions suitable for being loaded and executed by the processor are also stored in the storage space, and these instructions can be one or more computer programs (including program codes). It should be noted that the computer-readable storage medium here can be a high-speed RAM memory or a non-volatile memory, such as at least one disk memory. The processor can load and execute one or more instructions stored in the computer-readable storage medium to implement the corresponding steps of the control logic verification method of the trusted distributed control system in the above embodiment.
[0057] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.
[0058] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.
[0059] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.
[0060] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.
[0061] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the relevant field should understand that the specific implementation methods of the present invention can still be modified or replaced by equivalents. Any modification or equivalent replacement that does not depart from the spirit and scope of the present invention should be covered within the scope of protection of the claims of the present invention.
Claims
1. A control logic verification method for a trusted distributed control system, characterized in that: include: Obtaining the control logic to be verified, and generating a search condition according to the control logic to be verified; According to the search conditions, a classic application case library of the expert knowledge base is searched. When there are classic application cases in the classic application case library whose similarity and the search conditions meet the preset requirements, the classic application cases that meet the preset requirements are used as the classic application cases to be compared, and the control logic files of the classic application cases to be compared are obtained and compared with the control logic to be verified, so as to obtain the verification results of the control logic to be verified; When there is no classic application case in the classic application case library whose similarity and retrieval conditions meet the preset requirements, the expert rule library of the expert knowledge base is searched according to the retrieval conditions to obtain the expert rules to be compared; and the expert rules to be compared are compared with the control logic to be verified to obtain the verification result of the control logic to be verified.
2. The control logic verification method of a trusted distributed control system according to claim 1, characterized in that: The generating of the search condition according to the control logic to be verified includes: parsing the control logic to be verified, obtaining the application scenario type, system type and device type of the control logic to be verified, and generating the search condition according to the application scenario type, system type and device type of the control logic to be verified.
3. The control logic verification method of a trusted distributed control system according to claim 1, characterized in that: The obtaining of the control logic file of the classic application case to be compared and comparing it with the control logic to be verified, and obtaining the verification result of the control logic to be verified includes: Obtain the control logic file of the classic application case to be compared; classify the control logic to be verified according to the logic type, and process the classified control logic to be verified according to the preset processing rules of the corresponding logic type to obtain the processing result to be compared; according to the logic type of the control logic to be verified, select a control logic sub-file with the same logic type as the control logic to be verified from the control logic file of the classic application case to be compared as the control logic sub-file to be compared; compare the control logic sub-file to be compared with the processing result to be compared, and when the comparison results are inconsistent, generate and feedback the error information of the control logic to be verified; when the comparison results are consistent, generate and feedback the reasonable information of the control logic to be verified; The step of comparing the expert rules to be compared with the control logic to be verified to obtain the verification result of the control logic to be verified includes: The control logic to be checked is classified according to the logic type, and the classified control logic to be checked is processed according to the preset processing rules of the corresponding logic type to obtain the processing result to be compared; the expert rules to be compared are compared with the processing result to be compared. When the comparison results are inconsistent, error information of the control logic to be checked is generated and fed back; when the comparison results are consistent, reasonable information of the control logic to be checked is generated and fed back.
4. The control logic verification method of a trusted distributed control system according to claim 3 is characterized in that: The logic type includes one or more of the following: equipment operation sequence control logic, equipment operation protection logic and automatic control logic of equipment operation status.
5. The control logic verification method of a trusted distributed control system according to claim 4, characterized in that: The classified control logic to be checked is processed according to the preset processing rules of the corresponding logic type to obtain the processing results to be compared, including: When the control logic to be checked is the sequential control logic of the equipment operation, establish a logic map according to the sequence of implementation of the control logic to be checked; when the control logic to be checked is the protection logic of the equipment operation, obtain the protection conditions and threshold settings of the control logic to be checked; when the control logic to be checked is the automatic control logic of the equipment operation status, obtain the control method of the control logic to be checked and the input parameter type and output parameter type of the control method.
6. The control logic verification method of a trusted distributed control system according to claim 1, characterized in that: Also includes: By pre-building several application scenarios of trusted distributed control systems, the control logic of several systems and several devices' actual application projects, several classic application cases are obtained; And obtain the control logic files of each classic application case, and classify and store the control logic files of several classic application cases according to application scenario type, system type and device type to obtain a classic application case library.
7. The control logic verification method of a trusted distributed control system according to claim 1, characterized in that: Also includes: The engineering application experience, system operation procedures, equipment operation conditions and equipment operation principles of the field implementation process of the trusted distributed control system are obtained to obtain a number of knowledge items; the number of knowledge items are classified according to the application scenario type, system type and equipment type, and each knowledge item is parsed and expressed according to the IF-THEN rule generation method to obtain a number of expert rules; and the number of expert rules are classified and stored according to the application scenario type, system type and equipment type to obtain an expert rule library.
8. A trusted distributed control system control logic verification system, characterized in that: include: A data acquisition module, used to acquire the control logic to be verified and generate search conditions according to the control logic to be verified; A first comparison module is used to search the classic application case library of the expert knowledge base according to the search conditions, and when there are classic application cases in the classic application case library whose similarity and the search conditions meet the preset requirements, the classic application cases that meet the preset requirements are used as the classic application cases to be compared, and the control logic files of the classic application cases to be compared are obtained and compared with the control logic to be verified, so as to obtain the verification results of the control logic to be verified; The second comparison module is used to retrieve the expert rule library of the expert knowledge base according to the retrieval conditions to obtain the expert rules to be compared when there is no classic application case whose similarity and retrieval conditions meet the preset requirements in the classic application case library; and compare the expert rules to be compared with the control logic to be verified to obtain the verification result of the control logic to be verified.
9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the steps of the control logic verification method of the trusted distributed control system as claimed in any one of claims 1 to 7 are implemented.
10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of the control logic verification method of a trusted distributed control system as claimed in any one of claims 1 to 7 are implemented.