Controller self-keep-alive method and system in trusted configuration mode

Abstract

The invention discloses a controller self-keep-alive method and system in a trusted configuration mode, and the method comprises the steps: firstly configuring a controller self-keep-alive function block, downloading the self-keep-alive function block to a controller, and enabling the controller to execute the function of the self-keep-alive function block according to the configuration item of the self-keep-alive function block, the controller uploads an execution result to the upper computer in real time, selects a keep-alive mode and sends the keep-alive mode to the controller when the execution result is abnormal, the controller executes corresponding keep-alive operation according to the selected keep-alive mode and uploads a keep-alive result, and the self-keep-alive function block can quickly respond and start corresponding keep-alive measures, so that the self-keep-alive function block can be used for starting the corresponding keep-alive measures. Therefore, the continuous and stable operation of the application program of the controller is ensured, the potential influence of credible configuration on the original application program of the controller is effectively reduced, and the overall stability of the system is greatly improved.

Description

Technical Field

[0001] The present invention relates to the field of industrial automation control, and in particular to a controller self-preservation method and system in a trusted configuration mode. Background Art

[0002] With the rapid development and popularization of Internet technology, network security issues have become increasingly prominent. Malicious attacks such as computer viruses, Trojans, and hackers not only occur frequently, but also become increasingly complex and hidden, posing a huge challenge to the stable operation of the power system. As an important part of the country's critical infrastructure, the security of the power system is directly related to the stable operation of the country's economy and society and the daily life of the general public. As an emerging security protection method, the trusted protection system has higher security and reliability. Therefore, the application of the trusted protection system in the power system can better ensure the safe and stable operation of the power system.

[0003] However, in practical applications, integrating the trusted protection system into the traditional distributed control system may introduce new risks and challenges. These risks and challenges mainly come from compatibility issues between the two systems and the stability issues of the trusted protection system itself. If not handled properly, it may have a negative impact on the stability and reliability of the original system, and may even lead to serious consequences such as system crashes. In order to ensure that the safe operation of the original distributed system will not be affected when the trusted protection system is unstable, it is necessary to design a complete keep-alive mechanism. This keep-alive mechanism needs to have real-time monitoring, alarm, and recovery functions, and be able to take corresponding measures quickly when an abnormality occurs in the trusted protection system to ensure the stable operation of the original distributed system. In summary, designing a keep-alive method for a trusted protection system is of great significance for ensuring the safe and stable operation of the power system. Summary of the invention

[0004] In view of the problems existing in the prior art, the present invention provides a method and system for self-preservation of a controller in a trusted configuration mode, which significantly enhances the self-protection and recovery capabilities of the controller in the trusted configuration mode.

[0005] The present invention is achieved through the following technical solutions: 1. A controller self-preservation method in a trusted configuration mode, comprising the following processes: Step 1: configure a controller self-keep alive function block and download the self-keep alive function block to the controller; Step 2: The controller executes the self-preservation function block function according to the configuration items of the self-preservation function block; Step 3: The controller sends the execution result to the host computer in real time. If the execution result is abnormal, the keep-alive mode is selected and sent to the controller; Step 4: The controller performs corresponding keep-alive operations according to the selected keep-alive mode and sends the keep-alive result.

[0006] Preferably, the configuration process of the self-keep alive function block is as follows: Configure the input items, parameter items and output items of the self-keep alive function block; The input items include the self-keep alive function block keep alive enable, the controller total load threshold, and the controller memory growth rate threshold pin; The parameters include the total load that the controller can bear, the abnormal time of process running memory, and the keep alive option of the self-keep alive function block; The output items include trusted chip operating status output, controller total load output, corresponding important task sub-load output, controller process running memory ratio output, controller process running memory ratio growth rate output, controller load abnormality alarm output, controller memory abnormality alarm output and controller keep-alive execution result output.

[0007] Preferably, the keep-alive option of the self-keep-alive function block is a process that can be killed when performing a keep-alive operation.

[0008] Preferably, the controller executes the self-preservation function block function periodically according to the configuration item of the self-preservation function block.

[0009] Preferably, the configuration item periodically executes the self-keep alive function block function, and the execution order is as follows: Get the link status between the application process and the trusted chip. If the link is normal, the output item of the self-keep alive function block - the trusted chip running status value is incremented by 1. Obtain the total running load of the controller tasks, the running load of the corresponding important tasks and the running memory ratio of the process, and output them to the total load output pin, the important task sub-load output pin and the running memory ratio output pin of the controller self-keep alive function block; According to the configured input items and parameter items, determine whether the controller is in an abnormal state: When the controller total load exceeds the controller total load threshold continuously within the abnormal time but the corresponding important task sub-load value is normal, the controller load abnormal alarm output value is set to TRUE; When the total controller load is continuously lower than the total controller load threshold within the abnormal time and the corresponding important task sub-load value is normal, the controller load abnormal alarm output value is set to FALSE; When the controller process running memory percentage growth rate exceeds the controller memory growth rate threshold continuously within an abnormal period of time, the controller memory abnormality alarm output value is set to TRUE, otherwise it is set to FALSE; Determine the load abnormality alarm output value and the memory abnormality alarm output value. If one of them is TRUE, set the quality of this self-preservation function block to "OVERFLOW", otherwise it is "GOOD".

[0010] Preferably, the controller sends the execution result to the host computer in real time, and when the execution result is abnormal, a keep-alive mode is selected and sent to the controller, including: The controller sends the execution result to the host computer in real time. When the host computer detects that the self-preservation function block is in an abnormal operating state, it changes the mark of the self-preservation function block, and the mark serves as a warning signal. The controller selects the keep-alive mode and sets the keep-alive enable input item to a pulse and sends it to the controller.

[0011] Preferably, the mark is to change the color of the self-keeping function block.

[0012] Preferably, the controller performs corresponding keep-alive operations according to the selected keep-alive mode and sends the keep-alive result, including: The controller periodically executes the self-keep alive function block. When the running state is abnormal, the keep alive enable input item of the self-keep alive function block is detected. If a pulse is detected, the keep alive operation is performed according to the keep alive mode. After the execution is completed, the execution result is output to the keep alive execution result output item. If the execution is successful, the quality of the self-keep alive function block is set to "GOOD", otherwise it remains to "OVERFLOW"; At the same time, returning to step 2, the controller periodically executes the self-preservation function block function according to the configuration item of the self-preservation function block.

[0013] Preferably, when the keep-alive operation is executed, if the running state of the controller is still abnormal, the execution result is sent to the upper layer in real time, and the controller fault is checked.

[0014] A controller self-preservation system in a trusted configuration mode, comprising: A configuration module, used for configuring a controller self-preservation function block and downloading the self-preservation function block to the controller; A keep-alive execution module is used for the controller to execute the self-keep-alive function block function according to the configuration items of the self-keep-alive function block; Diagnostic module, used for the controller to send the execution results to the host computer in real time. When the execution results are abnormal, the keep-alive mode is selected and sent to the controller; The keep-alive module is used for the controller to perform corresponding keep-alive operations according to the selected keep-alive mode and send the keep-alive results.

[0015] Compared with the prior art, the present invention has the following beneficial technical effects: The present invention introduces a self-preservation function block, which significantly enhances the self-protection and recovery capabilities of the controller in the trusted configuration mode. During the operation of the controller, once any abnormal condition is detected, the self-preservation function block can respond quickly and start the corresponding preservation measures, thereby ensuring the continuous and stable operation of the controller application, effectively reducing the potential impact of the trusted configuration on the original application of the controller, and greatly improving the overall stability of the system; not only that, the present invention also takes advantage of the visual display of the function block to present the operating status and self-protection results of the controller in an intuitive way. This design enhances the human-computer interaction ability of the system, ensuring that engineering personnel can quickly perceive changes in the operating status of the controller and make timely responses; further, through the collaborative work of the host computer and the controller, the operating status of the controller is promptly reminded to the control personnel, and the control personnel can choose the preservation method based on experience, thereby further improving the reliability and safety of the control system. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without creative work.

[0017] Figure 1 The present invention is a flow chart of a controller self-preservation method in a trusted configuration mode. DETAILED DESCRIPTION

[0018] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. The components of the embodiments of the present application described and shown in the drawings here can be arranged and designed in various different configurations.

[0019] Therefore, the following detailed description of the embodiments of the present application provided in the accompanying drawings is not intended to limit the scope of the present application for which protection is sought, but merely represents selected embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.

[0020] See also Figure 1 , a controller self-preservation method in a trusted configuration mode, comprising the following steps: Step 1: Configure a controller self-preservation function block and download the self-preservation function block to the controller.

[0021] The self-preservation function block is a preventive mechanism that monitors the operating status of the controller and automatically restores or maintains the normal operation of the controller when potential problems are detected. In embedded systems, industrial automation or similar fields, controllers often need to run stably for a long time. The self-preservation function block monitors the operating status and performance parameters of the controller to promptly detect and handle various potential abnormal situations. When the controller encounters problems such as overload, memory overflow, program errors, etc., the function block can automatically trigger corresponding protection measures, such as restarting the controller, clearing memory, terminating abnormal processes, restoring default configurations, etc., to prevent the controller from crashing or system downtime.

[0022] The configuration method of the self-keep alive function block is as follows: My keep-alive function block contains the following pins: input items, parameter items and output items; 1. Configure the input items of the self-keep alive function block: self-keep alive function block keep alive enable, controller total load threshold, and controller memory growth rate threshold pin; Self-Keep Alive Function Block Keep Alive Enable is a specific setting or instruction that allows or enables the self-keep alive function of the controller.

[0023] 2. Configure the parameters of the self-keep alive function block: the total load that the controller can bear, the abnormal time of process running memory, the keep alive option of the self-keep alive function block (that is, the process that can be killed when performing the keep alive operation), that is, the list of trusted processes that the controller needs to terminate; The trusted process list contains all the processes in the controller that need to be monitored by the self-preservation function block. When these processes have abnormal conditions, the self-preservation function block chooses to terminate these processes to prevent them from causing further damage to the controller. When setting up the trusted process list, you need to carefully consider which processes are critical, which processes may have problems, and which processes termination may have the least impact on the system. Each process in the list should have a unique identifier (such as a process ID or name) so that the self-preservation function block can accurately identify and terminate them.

[0024] 3. Configure the output items of the self-keep alive function block: Output of trusted chip operation status; output of controller total load; output of corresponding important task sub-load; output of controller process running memory ratio; output of controller process running memory ratio growth rate; output of controller load abnormality alarm; output of controller memory abnormality alarm; output of controller keep-alive execution result.

[0025] Configuring the self-keep alive function block at the host computer is to set the values ​​of the input items and parameter items of the self-keep alive function block at the host computer side, wherein the values ​​of the input items may be derived from a section of logic output.

[0026] Step 2: The controller periodically executes the self-preservation function block function according to the configuration item of the self-preservation function block; The keep-alive enable controller receives the self-keep-alive function block and starts the operation according to the configured input and parameter values: If the controller application process and the trusted chip heartbeat link are established normally, the trusted chip operation status output value of the self-keep alive function block will be incremented by 1 in each operation cycle; The self-preservation function block periodically obtains the total load of the controller, the corresponding important task sub-load and the process running memory ratio, and outputs these operating parameters to the total load output pin, important task sub-load output pin and running memory ratio output pin of the controller self-preservation function block.

[0027] Compare the operating parameters with the parameter thresholds to determine whether the controller is in an abnormal state and output the corresponding alarm signal and quality: When the controller total load exceeds the controller total load threshold continuously within the abnormal time, but the corresponding important task sub-load value is normal, the controller load abnormal alarm output value is set to TRUE (correct); When the controller total load is continuously lower than the controller total load threshold within the abnormal time, and the corresponding important task sub-load value is normal, the controller load abnormal alarm output value is set to FALSE (error); When the controller process running memory percentage growth rate continuously exceeds the controller memory growth rate threshold within an abnormal period of time, the controller memory abnormality alarm output value is set to TRUE (correct); The self-preservation function block determines whether the load abnormality alarm output value and the memory abnormality alarm output value are TRUE. If one of them is TRUE, the quality of this self-preservation function block is set to "OVERFLOW", otherwise it is set to "GOOD".

[0028] Step 3: The controller sends the execution result to the host computer in real time. When the execution result is abnormal, the controller is reminded to select the keep-alive mode and send it to the controller; The controller sends these operation results to the host computer in real time. When the host computer detects that the operation status of the self-preservation function block is abnormal (the quality of the function block is "OVERFLOW"), it changes the display color of the self-preservation function block to prompt the control personnel (abnormal is "red", normal is "green").

[0029] When the self-keep alive function block is in an abnormal operating state, the control personnel will choose whether to perform a keep alive operation on the controller according to the actual situation on site. If keep alive is necessary, the control personnel will select a keep alive method based on engineering experience, and at the same time set the pulse value of the enable pin (keep alive instruction) and send it to the controller.

[0030] Step 4: The controller performs corresponding keep-alive operations according to the selected keep-alive mode and sends the keep-alive result.

[0031] When the controller receives the keep-alive instruction, it will perform the corresponding keep-alive operation according to the keep-alive parameters, such as killing the trusted related processes and restoring the controller default configuration. If the keep-alive operation is executed successfully, the controller keep-alive execution result output is set to TRUE, otherwise it is set to FALSE and the execution result and output value are fed back to the host computer in real time, so that the control personnel can judge whether the keep-alive is successful and whether the controller operation status has improved.

[0032] Controller self-preservation function block related alarms and quality recovery conditions: When the controller total load is continuously lower than the controller total load threshold within the abnormal time and the corresponding important task sub-load value is normal, the controller load abnormal alarm output value is set to FALSE; when the controller process running memory percentage growth rate is continuously lower than the controller memory growth rate threshold within the abnormal time, the controller memory abnormal alarm output value is set to FALSE.

[0033] When the controller load abnormality alarm output value and the controller process running memory percentage growth rate are both FALSE, the quality of the self-preservation function block is set to "GOOD".

[0034] This application introduces a self-preservation function block, so that the controller can respond quickly when an abnormal condition is detected and start the corresponding preservation measures, thereby ensuring the continuous and stable operation of the application. This greatly reduces the risk of system crashes and data loss due to system failures or incorrect operations. Secondly, in the trusted configuration mode, the design of the self-preservation function block fully considers the impact on the original application of the controller, ensuring that the normal operation of the application will not be interfered with or interrupted when the preservation measures are started. In addition, since the self-preservation function block can respond to and handle abnormal situations in a timely manner, the overall stability of the system has been significantly improved. This helps to reduce production stoppages and maintenance costs caused by system instability.

[0035] Through the visualization of the function block, the operating status and self-protection results of the controller can be presented to the engineering staff in an intuitive way. This enables the engineering staff to quickly perceive the state changes of the controller and make timely responses and adjustments. Through the collaborative work of the host computer and the controller, the control personnel can obtain the operating status information of the controller in real time and select the appropriate keep-alive method based on experience. This design not only improves the reliability of the control system, but also enhances the security of the system and reduces the risks caused by human operation errors. In addition, the design of the self-keep-alive function block has certain flexibility and scalability, and can be customized and optimized according to different application scenarios and requirements. This enables the technical solution to adapt to a wider range of control system requirements and improve the adaptability and competitiveness of the system. Through the introduction of the self-keep-alive function block, the controller can achieve self-repair and recovery to a certain extent, reducing the downtime and maintenance costs caused by system failures. This is of great significance for improving production efficiency and reducing operating costs.

[0036] To sum up, the technical solution of the present application significantly enhances the self-protection and recovery capability, stability and human-computer interaction capability of the control system by introducing a self-preservation function block, while improving the reliability and safety of the control system and reducing maintenance costs. It has broad application prospects and market potential.

[0037] Correspondingly, the present application also provides a controller self-preservation system in a trusted configuration mode, including: A configuration module, used for configuring a controller self-preservation function block and downloading the self-preservation function block to the controller; A keep-alive execution module is used for the controller to execute the self-keep-alive function block function according to the configuration items of the self-keep-alive function block; Diagnostic module, used for the controller to send the execution results to the host computer in real time. When the execution results are abnormal, the keep-alive mode is selected and sent to the controller; The keep-alive module is used for the controller to perform corresponding keep-alive operations according to the selected keep-alive mode and send the keep-alive results.

[0038] It should be noted that in the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of each module is only a logical function division. There may be other division methods in actual implementation. For example, multiple modules can be combined or integrated into another device, or some features can be ignored or not executed. The module described as a separate component may or may not be physically separated. The component displayed as a module may be a physical unit or multiple physical units, that is, it may be located in one place, or it may be distributed in multiple different places. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment.

[0039] In addition, each module in each embodiment of the present invention may be integrated into a processing unit, each module may exist physically separately, or two or more modules may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of a software functional unit.

[0040] An electronic device provided in an embodiment of the present application includes a memory and a processor. The memory stores a computer program. When the processor executes the computer program, the steps of the controller self-preservation method in the trusted configuration mode described in any of the above embodiments are implemented.

[0041] Another electronic device provided in the embodiment of the present application may also include: an input port connected to the processor, used to transmit multimodal data collected by an external acquisition device to the processor; and a display unit connected to the processor, used to display the processing results of the processor to the outside world; a communication module connected to the processor, used to realize the communication between the electronic device and the outside world. The display unit can be a display panel, a laser scanning display, etc.; the communication mode adopted by the communication module includes but is not limited to mobile high-definition link technology (HML), universal serial bus (USB), high-definition multimedia interface (HDMI), wireless connection (including wireless fidelity technology (WiFi), Bluetooth communication technology, low-power Bluetooth communication technology, and communication technology based on IEEE802.11s).

[0042] An embodiment of the present application provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, the steps of the controller self-preservation method in the trusted configuration mode described in any of the above embodiments are implemented.

[0043] The computer-readable storage medium involved in the present application includes random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disks, removable disks, CD-ROMs, or any other form of storage medium known in the technical field.

[0044] For the description of the relevant parts of the controller self-preservation system, electronic device and computer-readable storage medium in the trusted configuration mode provided in the embodiment of the present application, please refer to the detailed description of the corresponding parts of the controller self-preservation method in the trusted configuration mode provided in the embodiment of the present application, which will not be repeated here. In addition, the parts of the above technical solutions provided in the embodiment of the present application that are consistent with the implementation principles of the corresponding technical solutions in the prior art are not described in detail to avoid excessive elaboration.

[0045] The above contents are only for explaining the technical idea of ​​the present invention and cannot be used to limit the protection scope of the present invention. Any changes made on the basis of the technical solution in accordance with the technical idea proposed by the present invention shall fall within the protection scope of the claims of the present invention.

Claims

1. A controller self-preservation method in a trusted configuration mode, characterized in that: The process includes: Step 1: configure a controller self-keep alive function block and download the self-keep alive function block to the controller; Step 2: The controller executes the self-preservation function block function according to the configuration items of the self-preservation function block; Step 3: The controller sends the execution result to the host computer in real time. If the execution result is abnormal, the keep-alive mode is selected and sent to the controller; Step 4: The controller performs corresponding keep-alive operations according to the selected keep-alive mode and sends the keep-alive result.

2. According to the method of claim 1, the controller self-preservation method in the trusted configuration mode is characterized in that: The configuration process of the self-keep alive function block is as follows: Configure the input items, parameter items and output items of the self-keep alive function block; The input items include the self-keep alive function block keep alive enable, the controller total load threshold, and the controller memory growth rate threshold pin; The parameters include the total load that the controller can bear, the abnormal time of process running memory, and the keep alive option of the self-keep alive function block; The output items include trusted chip operating status output, controller total load output, corresponding important task sub-load output, controller process running memory ratio output, controller process running memory ratio growth rate output, controller load abnormality alarm output, controller memory abnormality alarm output and controller keep-alive execution result output.

3. According to the controller self-preservation method in the trusted configuration mode of claim 2, it is characterized in that: The self-keep alive function block keep alive option is a process that can be killed when performing a keep alive operation.

4. According to the method of claim 2, the controller self-preservation method in a trusted configuration mode is characterized in that: The controller executes the self-keep alive function block function periodically according to the configuration item of the self-keep alive function block.

5. According to the method of claim 4, the controller self-preservation method in the trusted configuration mode is characterized in that: The configuration item periodically executes the self-keep alive function block function, and the execution order is as follows: Get the link status between the application process and the trusted chip. If the link is normal, the output item of the self-keep alive function block - the trusted chip running status value is incremented by 1. Obtain the total running load of the controller tasks, the running load of the corresponding important tasks and the running memory ratio of the process, and output them to the total load output pin, the important task sub-load output pin and the running memory ratio output pin of the controller self-keep alive function block; According to the configured input items and parameter items, determine whether the controller is in an abnormal state: When the controller total load exceeds the controller total load threshold continuously within the abnormal time but the corresponding important task sub-load value is normal, the controller load abnormal alarm output value is set to TRUE; When the total controller load is continuously lower than the total controller load threshold within the abnormal time and the corresponding important task sub-load value is normal, the controller load abnormal alarm output value is set to FALSE; When the controller process running memory percentage growth rate exceeds the controller memory growth rate threshold continuously within an abnormal period of time, the controller memory abnormality alarm output value is set to TRUE, otherwise it is set to FALSE; Determine the load abnormality alarm output value and the memory abnormality alarm output value. If one of them is TRUE, set the quality of this self-preservation function block to "OVERFLOW", otherwise it is "GOOD".

6. The controller self-preservation method in a trusted configuration mode according to claim 1, characterized in that: The controller sends the execution results to the host computer in real time. When the execution results are abnormal, the keep-alive method is selected and sent to the controller, including: The controller sends the execution result to the host computer in real time. When the host computer detects that the self-preservation function block is in an abnormal operating state, it changes the mark of the self-preservation function block, and the mark serves as a warning signal. The controller selects the keep-alive mode and sets the keep-alive enable input item to a pulse and sends it to the controller.

7. The controller self-preservation method in a trusted configuration mode according to claim 1, characterized in that: The mark is to change the color of the self-keep alive function block.

8. The controller self-preservation method in a trusted configuration mode according to claim 1, characterized in that: The controller performs corresponding keep-alive operations according to the selected keep-alive mode and sends the keep-alive results, including: The controller periodically executes the self-keep alive function block. When the running state is abnormal, the keep alive enable input item of the self-keep alive function block is detected. If a pulse is detected, the keep alive operation is performed according to the keep alive mode. After the execution is completed, the execution result is output to the keep alive execution result output item. If the execution is successful, the quality of the self-keep alive function block is set to "GOOD", otherwise it remains to "OVERFLOW"; At the same time, returning to step 2, the controller periodically executes the self-preservation function block function according to the configuration item of the self-preservation function block.

9. A controller self-preservation method in a trusted configuration mode according to claim 8, characterized in that: When the keep-alive operation is executed and the controller operation status is still abnormal, the execution result is sent to the server in real time and the controller fault is checked.

10. A controller self-preservation system in a trusted configuration mode, characterized in that: include: A configuration module, used for configuring a controller self-preservation function block and downloading the self-preservation function block to the controller; A keep-alive execution module is used for the controller to execute the self-keep-alive function block function according to the configuration items of the self-keep-alive function block; Diagnostic module, used for the controller to send the execution results to the host computer in real time. When the execution results are abnormal, the keep-alive mode is selected and sent to the controller; The keep-alive module is used for the controller to perform corresponding keep-alive operations according to the selected keep-alive mode and send the keep-alive results.

Images