Trusted DCS controller configuration file updating method, system, device, medium and program

Abstract

The invention discloses a trusted DCS controller configuration file updating method, system and device, a medium and a program, and belongs to the technical field of industrial automation. The method comprises the steps that a trusted DCS controller is connected with trusted configuration software, trusted verification is triggered, and whether the trusted DCS controller and the trusted configuration software are registered on a trusted management platform or not is verified; when the trusted DCS controller and the trusted configuration software are registered on the trusted management platform, the trusted management platform can maintain the trusted states of the trusted DCS controller and the trusted configuration software in real time, and update and delete configuration files. According to the method, only trusted equipment and software can be connected and perform data exchange, internal security defense is enhanced, updating efficiency and resource utilization rate are improved, data protection and recovery capability is enhanced, and overall system security is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of industrial automation, and in particular to a trusted DCS controller configuration file updating method, system, equipment, medium and program. Background Art

[0002] In today's highly information-based and digitalized power industry, trusted DCS (distributed control system) controllers, as the heart of the industry, not only have a profound impact on the stable operation and efficient dispatch of the power grid, but are also directly related to the safety of electricity use in thousands of households and the lifeline of the national economy. These advanced control systems integrate advanced computer technology, communication technology, and control theory, and ensure the continuity, safety, and efficiency of the power production process through real-time monitoring, precise control, and data analysis. However, with the rapid development of industrial Internet and Internet of Things technologies, power systems have increasingly become the focus of cyber attacks, and the threats to their cyberspace security are becoming increasingly complex and changeable.

[0004] The occurrence of this series of major security incidents not only reveals the continuous upgrading and innovation of the means of network attackers, but also deeply reflects the inability of traditional security defense strategies - the "old three" (i.e. firewalls, intrusion detection systems and virus prevention software) to cope with new, complex and advanced threats. Although firewalls can block unauthorized external access, they are difficult to resist internal threats or advanced bypass techniques; although intrusion detection systems can identify known attack patterns, their defense capabilities against unknown threats and zero-day vulnerabilities are limited; virus prevention software often lags behind the speed of virus mutations and is difficult to provide comprehensive protection. Summary of the invention

[0005] The existing firewalls in the prior art can block unauthorized external access, but are difficult to resist internal threats or advanced bypass technologies; the intrusion detection system can identify known attack patterns, but has limited defense capabilities against unknown threats and zero-day vulnerabilities; and the virus prevention software often lags behind the speed of virus mutations, making it difficult to provide comprehensive protection. The present invention provides a trusted DCS controller configuration file update method, which ensures that only trusted devices and software can connect and exchange data, enhances internal security defense, improves update efficiency and resource utilization, enhances data protection and recovery capabilities, and improves overall system security.

[0006] In order to achieve the above object, the present invention provides the following technical solutions.

[0007] In a first aspect, the present invention provides a method for updating a configuration file of a trusted DCS controller, comprising:

[0008] The trusted DCS controller is connected to the trusted configuration software and the trusted verification is triggered to verify whether the trusted DCS controller and the trusted configuration software are registered on the trusted management platform;

[0009] When the trusted DCS controller and the trusted configuration software are registered in the trusted management platform, the trusted management platform will maintain the trusted status of the trusted DCS controller and the trusted configuration software in real time, and update and delete the configuration files.

[0010] As a further improvement of the present invention, the verification of whether the trusted DCS controller and the trusted configuration software are registered in the trusted management platform includes:

[0011] If any one of the trusted DCS controller and the trusted configuration software is not registered in the trusted management platform, the trusted DCS controller and the trusted configuration software are reconnected and the trusted verification is triggered.

[0012] As a further improvement of the present invention, when the trusted DCS controller and the trusted configuration software are registered in the trusted management platform, the trusted management platform will maintain the trusted status of the trusted DCS controller and the trusted configuration software in real time, including:

[0013] When the trusted management platform maintains the trusted status of the trusted DCS controller and the trusted configuration software in real time, if it is determined that either the trusted DCS controller or the trusted configuration software is in an untrusted state, the connection between the trusted DCS controller and the trusted configuration software will be disconnected; and the abnormal signal will be uploaded to the trusted management platform for processing. After the processing is completed, the trusted DCS controller and the trusted configuration software will be reconnected and the trusted verification will be triggered.

[0014] As a further improvement of the present invention, when the trusted DCS controller and the trusted configuration software are registered in the trusted management platform, the trusted management platform will maintain the trusted status of the trusted DCS controller and the trusted configuration software in real time and update the configuration file, including:

[0015] The trusted management platform initiates a configuration file update request and determines whether it passes the differential update confirmation;

[0016] If the differential update confirmation is not passed, the full file update is performed and the update is successful;

[0017] If the differential update is confirmed, obtain the differential update package and verify it. After the verification is passed, execute the differential update and then determine whether the system is running normally.

[0018] If the system runs normally, the update is successful;

[0019] If the system does not function properly, record the error log and re-verify.

[0020] As a further improvement of the present invention, the differential update includes:

[0021] Create a file to store original data and differential data, where the original data is used for the actual data set to be processed, and the differential data is used to record the changes in the original data;

[0022] When the original data changes, the changes are recorded in the differential data;

[0023] When accessing or operating on updated data, the original data is merged with the differential data; the differential data is applied to the original data to produce the latest data set with all changes.

[0024] As a further improvement of the present invention, when the trusted DCS controller and the trusted configuration software are registered in the trusted management platform, the trusted management platform will maintain the trusted status of the trusted DCS controller and the trusted configuration software in real time and delete the configuration file, including:

[0025] The trusted management platform initiates a configuration file deletion request to determine whether the trusted management platform has the authority to delete the configuration file;

[0026] If the trusted management platform does not have the authority to delete the file, the file deletion fails;

[0027] If a trusted management platform has the authority to delete, a safe deletion check is performed to determine whether it can be safely deleted;

[0028] If it cannot be safely deleted, the file deletion fails;

[0029] If it is safe to delete, the deletion operation is performed and the file is deleted successfully.

[0030] In a second aspect, the present invention provides a trusted DCS controller configuration file update system, comprising:

[0031] Verification and registration module: used to connect the trusted DCS controller with the trusted configuration software and trigger the trusted verification to verify whether the trusted DCS controller and the trusted configuration software are registered on the trusted management platform;

[0032] Update and delete module: When the trusted DCS controller and trusted configuration software are registered in the trusted management platform, the trusted management platform will maintain the trusted status of the trusted DCS controller and trusted configuration software in real time, and update and delete the configuration files.

[0033] In a third aspect, the present invention provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the method for updating a configuration file of a trusted DCS controller when executing the computer program.

[0034] In a fourth aspect, the present invention provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method for updating a configuration file of a trusted DCS controller are implemented.

[0035] In a fifth aspect, the present invention provides a computer program product, comprising computer instructions, which, when executed by a processor, implement the steps of the method for updating a configuration file of a trusted DCS controller.

[0036] Compared with the prior art, the present invention has the following beneficial effects:

[0037] The present invention fundamentally improves the security protection level of the system by constructing a set of verification and update mechanisms between the DCS controller and the configuration software based on a trusted management platform. Specifically, the method not only requires the DCS controller and the configuration software to pass a strict security review and register on the trusted management platform to ensure the credibility of each link, but also realizes the real-time and secure update management of the configuration file on this basis. First, from the perspective of internal security defense, the present invention effectively curbs the access of unauthorized internal devices or software through a strict registration and verification process, greatly reducing the risk of internal threats. Under the unified management of the trusted management platform, any device or software attempting to access the system must undergo strict identity authentication and authority review, ensuring the purity and controllability of the entire system environment. In addition, through the real-time monitoring and auditing mechanism, the system can timely discover and respond to potential internal security threats, realizing the transition from passive defense to active defense. Secondly, in terms of improving update efficiency and resource utilization, the present invention adopts a real-time update strategy based on a trusted state. Once the DCS controller and the configuration software pass the verification and register on the trusted management platform, the platform can automatically push the latest configuration file to the corresponding device according to actual needs without manual intervention, greatly improving the update efficiency. At the same time, by precisely controlling the update scope and timing, unnecessary waste of resources is avoided and the overall resource utilization of the system is improved. Finally, from the perspective of improving the overall system security, the implementation of the present invention is not only a supplement and improvement to a single protection method, but also a comprehensive upgrade of the traditional security protection system. By constructing a comprehensive security protection system that integrates identity authentication, real-time monitoring, automatic updates, and data protection, the present invention effectively improves the overall security protection capabilities of industrial automation systems. In summary, the trusted DCS controller configuration file update method proposed in the present invention, with its unique trusted verification mechanism and real-time update strategy, provides an innovative solution to the security challenges currently faced by the field of industrial automation. This method not only enhances internal security defense, improves update efficiency and resource utilization, and enhances data protection and recovery capabilities, but also improves the overall security protection level of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] The drawings described herein are for illustrative purposes only and are not intended to limit the scope of the present disclosure in any way. In the drawings:

[0039] Figure 1 A flow chart of a method for updating configuration files of a trusted DCS controller according to the present invention;

[0040] Figure 2 A schematic diagram of the connection between a DCS controller and trusted configuration software in a trusted DCS controller configuration file update method of the present invention;

[0041] Figure 3 A schematic diagram of a configuration file update process of a trusted DCS controller configuration file update method of the present invention;

[0042] Figure 4 A schematic diagram of a configuration file deletion process of a configuration file updating method for a trusted DCS controller of the present invention;

[0043] Figure 5 A structural schematic diagram of a trusted DCS controller configuration file update system of the present invention;

[0044] Figure 6 Schematic diagram of an electronic device in an embodiment of the present invention. DETAILED DESCRIPTION

[0045] In order to enable those skilled in the art to better understand the technical solutions in the present invention, the technical solutions in the present invention will be clearly and completely described below in conjunction with the drawings in the present invention. The described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in the field without creative work should fall within the scope of protection of the present invention.

[0046] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those generally understood by those skilled in the art of the present invention. The terms used herein in the specification of the present invention are only for the purpose of describing specific embodiments and are not intended to limit the present invention. The term "and / or" used herein includes any and all combinations of one or more related listed items.

[0047] The existing firewalls in the prior art can block unauthorized external access, but are difficult to resist internal threats or advanced bypass techniques; the intrusion detection system can identify known attack patterns, but has limited defense capabilities against unknown threats and zero-day vulnerabilities; and the virus prevention software often lags behind the speed of virus mutations and is difficult to provide comprehensive protection. The present invention provides a trusted DCS controller configuration file update method, such as Figure 1 As shown, including:

[0048] S101: The trusted DCS controller is connected to the trusted configuration software, and the trusted verification is triggered to verify whether the trusted DCS controller and the trusted configuration software are registered in the trusted management platform;

[0049] S201: When the trusted DCS controller and the trusted configuration software are registered in the trusted management platform, the trusted management platform will maintain the trusted status of the trusted DCS controller and the trusted configuration software in real time, and update and delete the configuration files.

[0050] The present invention ensures that only trusted devices and software can connect and exchange data, enhances internal security defense, improves update efficiency and resource utilization, enhances data protection and recovery capabilities, and improves overall system security.

[0051] The present invention is further explained below in conjunction with the specific drawings.

[0052] like Figure 2 As shown, the trusted DCS controller and trusted configuration software are connected, including:

[0053] (1) The trusted DCS controller and the trusted configuration software will be verified every time they connect;

[0054] (2) Trusted DCS controllers and trusted configuration software are all maintained by the trusted management platform. Only after the software and devices are registered on the trusted management platform can they be connected;

[0055] (3) When the trusted DCS controller and the trusted configuration software are connected, it will determine whether both parties have been registered on the platform. If both are registered on the trusted management platform, they can be connected;

[0056] (4) Afterwards, the trusted management platform will maintain the trusted status of the trusted DCS controller and trusted configuration software in real time;

[0057] (5) When the trusted management platform determines that one party is untrustworthy, the connection is disconnected and handled by the administrator;

[0058] (6) If the status is always reliable, the configuration file can be updated and deleted at any time.

[0059] like Figure 3As shown, the configuration file is updated, including:

[0060] Differential Update:

[0061] Using differential update technology, only the changed parts of the configuration file are transmitted, reducing network transmission volume and improving update efficiency.

[0062] Differential updates can also reduce the use of system resources during the update process and reduce the impact on normal operation.

[0063] The key steps to implement differential update are:

[0064] (1) Initialize data structure: First, create a data structure to store original data and differential data. The original data is the actual data set to be processed, while the differential data is used to record the changes in the original data.

[0065] (2) Record changes: When the original data changes (for example, the value of an element is updated), record these changes in the differential data instead of directly modifying the original data. Determine which elements have changed and record these changes.

[0066] (3) Apply differential data: When accessing or operating updated data, merge the original data with the differential data. Apply the differential data to the original data to generate the latest data set with all changes.

[0067] (4) Optimization and cleaning: Differential updates will accumulate a large amount of differential data over time. Regularly optimizing and cleaning differential data can improve system efficiency and reduce storage space usage.

[0068] like Figure 4 As shown in the figure, the configuration file deletion method includes:

[0069] (1) Safe Deletion:

[0070] Before deleting the configuration file, the system will perform a security check to ensure that the deletion operation will not affect the normal operation of the system.

[0071] By recording the file's dependencies, associated configurations and other information, you can determine whether the file can be safely deleted.

[0072] (2) Logging:

[0073] The deletion operation will be recorded in detail in the log, including deletion time, operator, deleted file name and version, etc.

[0074] Logging helps track and audit deletion operations to ensure compliance and traceability of operations.

[0075] (3) File recovery:

[0076] The system should provide a recovery mechanism for configuration files that are deleted accidentally or illegally.

[0077] Through the Recycle Bin function, users can restore accidentally deleted files to avoid data loss.

[0078] The present invention is further explained below in conjunction with specific embodiments.

[0079] Example

[0080] like Figure 2 As shown, the present invention provides a specific process of a trusted DCS controller configuration file update method, including:

[0081] S1: trusted DCS controller and trusted configuration software connection;

[0082] S2: The trusted DCS controller attempts to connect with the trusted configuration software and triggers trusted verification to verify whether the trusted DCS controller and the trusted configuration software are registered on the trusted management platform;

[0083] Every time a trusted DCS controller connects to trusted configuration software, trusted verification is triggered;

[0084] If the trusted DCS controller and the trusted configuration software are both registered on the trusted management platform, they will be connected and the trusted management platform will be periodically maintained, that is, the trusted status of the trusted DCS controller and the trusted configuration software will be maintained in real time, and the trusted configuration files can be updated and deleted at any time;

[0085] If the trusted DCS controller and the trusted configuration software are not registered on the trusted management platform, contact the system management to handle the untrusted device;

[0086] S3: The trusted management platform will maintain the trusted status of the trusted DCS controller and the trusted configuration software in real time. When the trusted management platform determines that one of the trusted DCS controller and the trusted configuration software is untrustworthy, it will verify that both parties are disconnected, upload the abnormal information to the trusted management platform, and contact the administrator to handle the untrustworthy device;

[0087] S4: After the administrator has processed the untrusted device, reconnect the trusted DCS controller to the trusted configuration software.

[0088] Among them, the trusted status of the trusted DCS controller and the trusted configuration software is maintained in real time, and the engineering personnel decide whether to update or delete the trusted configuration files, including trusted configuration file update and trusted configuration file deletion;

[0089] like Figure 3 As shown in the figure, the trusted configuration file is updated, including:

[0090] The trusted management platform initiates a trusted configuration file update request and performs a differential update;

[0091] If the differential update is not satisfied, a full file update is performed to complete the update;

[0092] If the differential update is satisfied, the differential update package is obtained and verified;

[0093] If the verification fails, the update fails and an error log is recorded;

[0094] If the verification is successful, the differential update is performed, and the current configuration file is backed up online. The update process is monitored, and if the system is in normal operation, the update is successful and completed;

[0095] If the verification is successful, a differential update is performed, and the current configuration file is backed up online to monitor the update process. However, if the system cannot operate normally, the update is unsuccessful and rolls back to the backup state, recording an error log.

[0096] This application adopts differential update, which only transmits the changed parts in the configuration file, reduces network transmission volume and improves update efficiency. At the same time, differential update can also reduce the occupation of system resources during the update process and reduce the impact on normal operation.

[0097] The implementation methods of differential update include:

[0098] Initialize the data structure: Create a data structure to store the original data and differential data. The original data is the actual data set to be processed, while the differential data is used to record the changes in the original data.

[0099] Record changes: When the original data changes (for example, the value of an element is updated), record these changes in the differential data instead of modifying the original data directly. Determine which elements have changed and record these changes.

[0100] Apply differential data: When accessing or operating on updated data, merge the original data with the differential data. Apply the differential data to the original data to produce the latest data set with all changes.

[0101] Optimization and cleanup: Differential updates will accumulate a large amount of differential data over time. Regularly optimizing and cleaning differential data can improve system efficiency and reduce storage space usage.

[0102] like Figure 4 As shown, the trusted configuration files are deleted, including:

[0103] The trusted management platform initiates a trusted configuration file deletion request, checks the deletion permission, and determines whether the deletion permission exists;

[0104] If there is no deletion permission, the trusted management platform will reject the trusted configuration file deletion request and record it to form a record deletion log, and the trusted configuration file deletion fails;

[0105] If there is deletion permission, a safe deletion check is performed to determine whether it can be safely deleted;

[0106] If it cannot be safely deleted, the trusted management platform will reject the trusted configuration file deletion request and record it to form a record deletion log, and the trusted configuration file deletion fails;

[0107] If it can be safely deleted, the deletion log is recorded, the deletion operation is executed, and the trusted configuration file is deleted successfully;

[0108] For deleted trusted configuration files, users can choose whether to restore them according to the recycle bin mechanism.

[0109] Before deleting the trusted configuration file in the present invention, the system will perform a security check to ensure that the deletion operation will not affect the normal operation of the system.

[0110] By recording the file's dependencies, associated configurations and other information, you can determine whether the file can be safely deleted.

[0111] The deletion operation will be recorded in detail in the log, including deletion time, operator, deleted file name and version, etc.

[0112] Logging helps track and audit deletion operations to ensure compliance and traceability of operations.

[0113] The system should provide a recovery mechanism for configuration files that are deleted accidentally or illegally.

[0114] Through the Recycle Bin function, users can restore accidentally deleted files to avoid data loss.

[0115] In summary, the present invention registers and verifies the trusted DCS controller and trusted configuration software through the trusted management platform, ensuring that only trusted devices and software can connect and exchange data. This greatly enhances the system's defense against internal threats, because any unauthorized or untrusted attempts will be blocked. Due to the real-time nature of connection verification and trusted state maintenance, the method of the present invention can effectively resist attacks using advanced bypass techniques. Even if an attacker can bypass external defense measures such as firewalls, it is difficult for them to carry out effective attacks in the internal network.

[0116] The present invention adopts differential update technology to transmit only the changed parts of the configuration file, which greatly reduces the network transmission volume and improves the update efficiency. At the same time, this also reduces the occupation of system resources during the update process and reduces the impact on the normal operation of the system. By regularly optimizing and cleaning differential data, the method of the present invention can maintain the efficient operation of the system, reduce the use of storage space, and improve the overall resource utilization.

[0117] The present invention performs a security check before deleting the configuration file to ensure that the deletion operation will not affect the normal operation of the system. This avoids system failure or data loss caused by accidental or illegal deletion. The deletion operation is recorded in detail in the log, including information such as the deletion time, operator, deleted file name and version. This helps to track and audit the deletion operation to ensure the compliance and traceability of the operation. The system provides a recovery mechanism, such as a recycle bin function, allowing users to restore accidentally deleted files. This further enhances the data protection capability and avoids data loss caused by misoperation.

[0118] The present invention centrally manages and maintains the trusted DCS controller and trusted configuration software through a trusted management platform, ensuring the overall security and stability of the system. The trusted management platform can monitor the status of the equipment and software in real time, and promptly discover and handle potential security threats. The method of the present invention combines a variety of security protection measures, including connection verification, differential update, secure deletion and log recording, to form a comprehensive security protection system. This can more effectively deal with various known and unknown threats and improve the security of the overall system.

[0119] Therefore, the present invention solves the problems in the prior art that firewalls can block unauthorized external access but are difficult to resist internal threats or advanced bypass technologies; intrusion detection systems can identify known attack patterns but have limited defense capabilities against unknown threats and zero-day vulnerabilities; and virus prevention software often lags behind the speed of virus mutations and is difficult to provide comprehensive protection. It ensures that only trusted devices and software can connect and exchange data, enhances internal security defense, improves update efficiency and resource utilization, enhances data protection and recovery capabilities, and improves overall system security.

[0120] The second object of the present invention is to provide a trusted DCS controller configuration file update system, such as Figure 5 As shown, including:

[0121] Verification registration module 102: used to connect the trusted DCS controller with the trusted configuration software and trigger the trusted verification to verify whether the trusted DCS controller and the trusted configuration software are registered in the trusted management platform;

[0122] Update and delete module 202: When the trusted DCS controller and the trusted configuration software are registered in the trusted management platform, the trusted management platform will maintain the trusted status of the trusted DCS controller and the trusted configuration software in real time, and update and delete the configuration files.

[0123] like Figure 6 As shown, the third object of the present invention is to provide an electronic device,

[0124] The electronic device includes: a processor 301, a memory 302 and a display screen 303. The memory 302 and the display screen 303 are both connected to the processor 301, such as through a bus 304. Optionally, the electronic device may further include a transceiver 305. It should be noted that in actual applications, the transceiver 305 is not limited to one, and the structure of the electronic device does not constitute a limitation on the embodiments of the present application.

[0125] Processor 301 may be a CPU (Central Processing Unit), a general purpose processor, a DSP (Digital Signal Processor), an ASIC (Application Specific Integrated Circuit), an FPGA (Field Programmable Gate Array) or other programmable logic devices, transistor logic devices, hardware components or any combination thereof. It may implement or execute various exemplary logic blocks, modules and circuits described in conjunction with the disclosure of this application. Processor 301 may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, etc.

[0126] The bus 304 may include a path to transmit information between the above components. The bus 304 may be a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus, etc. The bus 304 may be divided into an address bus, a data bus, a control bus, etc.

[0127] The memory 302 can be a ROM (Read Only Memory) or other types of static storage devices that can store static information and instructions, a RAM (Random Access Memory) or other types of dynamic storage devices that can store information and instructions, or an EEPROM (Electrically Erasable Programmable Read Only Memory), a CD-ROM (Compact Disc Read Only Memory) or other optical disk storage, optical disk storage (including compressed optical disk, laser disk, optical disk, digital versatile disk, Blu-ray disk, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited to these.

[0128] The memory 302 is used to store the application code for executing the solution of the present application, and the execution is controlled by the processor 301. The processor 301 is used to execute the application code stored in the memory 302 to implement the contents shown in the above method embodiment.

[0129] Figure 6 The electronic device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0130] The fourth object of the present invention is to provide a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, wherein the computer program is stored thereon, and when the program is executed by a processor, the aforementioned Figure 1 The various processes of the method embodiment shown in the figure include, for example, a memory including instructions, and the instructions can be executed by a processor of an electronic device to complete the method.

[0131] A computer-readable storage medium may be a tangible device that holds and stores instructions used by an instruction execution device. A computer-readable storage medium may be, but is not limited to, an electrical storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any combination thereof. Specifically, a computer-readable storage medium may be a portable computer disk, a hard disk, a USB flash drive, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a podium random access memory (SRAM), a portable compact disk read-only memory (CD-ROM), a digital versatile disk (DVD), a memory stick, a floppy disk, an optical disk, a magnetic disk, a mechanical encoding device, and any combination thereof.

[0132] A fifth object of the present invention is to provide a computer program product, comprising computer instructions, which, when executed by a processor, implement the above Figure 1 The various processes of the method embodiment shown can achieve the same technical effect, and will not be described again here to avoid repetition.

[0133] Many embodiments and many applications beyond the examples provided will be apparent to those skilled in the art upon reading the above description. Therefore, the scope of the present teachings should not be determined with reference to the above description, but rather with reference to the preceding claims and the full scope of equivalents to which such claims are entitled. For the purpose of comprehensiveness, all articles and references, including disclosures of patent applications and publications, are incorporated herein by reference. The omission of any aspect of the subject matter disclosed herein in the preceding claims is not intended to be a disclaimer of such subject matter, nor should it be considered that the applicants did not consider such subject matter to be part of the disclosed inventive subject matter.

[0134] The above content is a further detailed description of the present invention. It cannot be determined that the specific implementation methods of the present invention are limited to these. For ordinary technicians in the technical field to which the present invention belongs, without departing from the concept of the present invention, they can also make several simple deductions or substitutions, which should be regarded as belonging to the protection scope of the present invention determined by the submitted claims.

Claims

1. A trusted DCS controller configuration file update method, characterized in that: include: The trusted DCS controller is connected to the trusted configuration software and the trusted verification is triggered to verify whether the trusted DCS controller and the trusted configuration software are registered on the trusted management platform; When the trusted DCS controller and the trusted configuration software are registered in the trusted management platform, the trusted management platform will maintain the trusted status of the trusted DCS controller and the trusted configuration software in real time, and update and delete the configuration files.

2. A trusted DCS controller configuration file updating method according to claim 1, characterized in that: The verification of whether the trusted DCS controller and the trusted configuration software are registered on the trusted management platform includes: If any one of the trusted DCS controller and the trusted configuration software is not registered in the trusted management platform, the trusted DCS controller and the trusted configuration software are reconnected and the trusted verification is triggered.

3. A trusted DCS controller configuration file updating method according to claim 1, characterized in that: When the trusted DCS controller and the trusted configuration software are registered in the trusted management platform, the trusted management platform will maintain the trusted status of the trusted DCS controller and the trusted configuration software in real time, including: When the trusted management platform maintains the trusted status of the trusted DCS controller and the trusted configuration software in real time, if it is determined that either the trusted DCS controller or the trusted configuration software is in an untrusted state, the connection between the trusted DCS controller and the trusted configuration software will be disconnected; and the abnormal signal will be uploaded to the trusted management platform for processing. After the processing is completed, the trusted DCS controller and the trusted configuration software will be reconnected and the trusted verification will be triggered.

4. A trusted DCS controller configuration file updating method according to claim 1, characterized in that: When the trusted DCS controller and the trusted configuration software are registered in the trusted management platform, the trusted management platform will maintain the trusted status of the trusted DCS controller and the trusted configuration software in real time and update the configuration files, including: The trusted management platform initiates a configuration file update request and determines whether it passes the differential update confirmation; If the differential update confirmation is not passed, the full file update is performed and the update is successful; If the differential update is confirmed, obtain the differential update package and verify it. After the verification is passed, execute the differential update and then determine whether the system is running normally. If the system runs normally, the update is successful; If the system does not function properly, record the error log and re-verify.

5. A trusted DCS controller configuration file updating method according to claim 4, characterized in that: The differential update includes: Create a file to store original data and differential data, where the original data is used for the actual data set to be processed, and the differential data is used to record the changes in the original data; When the original data changes, the changes are recorded in the differential data; When accessing or operating on updated data, the original data is merged with the differential data; the differential data is applied to the original data to produce the latest data set with all changes.

6. A trusted DCS controller configuration file updating method according to claim 1, characterized in that: When the trusted DCS controller and the trusted configuration software are registered in the trusted management platform, the trusted management platform will maintain the trusted status of the trusted DCS controller and the trusted configuration software in real time and delete the configuration files, including: The trusted management platform initiates a configuration file deletion request to determine whether the trusted management platform has the authority to delete the configuration file; If the trusted management platform does not have the authority to delete the file, the file deletion fails; If a trusted management platform has the authority to delete, a safe deletion check is performed to determine whether it can be safely deleted; If it cannot be safely deleted, the file deletion fails; If it is safe to delete, the deletion operation is performed and the file is deleted successfully.

7. A trusted DCS controller configuration file update system, characterized in that: include: Verification and registration module: used to connect the trusted DCS controller with the trusted configuration software and trigger the trusted verification to verify whether the trusted DCS controller and the trusted configuration software are registered on the trusted management platform; Update and delete module: When the trusted DCS controller and trusted configuration software are registered in the trusted management platform, the trusted management platform will maintain the trusted status of the trusted DCS controller and trusted configuration software in real time, and update and delete the configuration files.

8. An electronic device, characterized in that: The invention comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of a trusted DCS controller configuration file updating method as claimed in any one of claims 1 to 6 when executing the computer program.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method for updating a configuration file of a trusted DCS controller according to any one of claims 1 to 6 are implemented.

10. A computer program product, characterized in that The method comprises computer instructions, which, when executed by a processor, implement the steps of a trusted DCS controller configuration file updating method as described in any one of claims 1 to 6.

Images