Data encryption method of industrial control chip and related equipment

Abstract

The invention relates to a data encryption method for an industrial control chip and related equipment, and the method comprises the following steps: scanning and reading a storage region in a target industrial control chip through a preset scanning module, and obtaining the storage data of the target industrial control chip; carrying out importance identification on the storage data to obtain to-be-encrypted data; analyzing characteristics of the to-be-encrypted data through a preset analysis algorithm, and selecting a corresponding encryption strategy based on the characteristics; performing data encryption on the to-be-encrypted data through the encryption strategy to obtain encrypted data; performing data logic combination on the encrypted data and the unencrypted part of data in the storage data to obtain recombined structure data; and writing the recombined structure data back to the storage area of the target industrial control chip through a preset write-in module, thereby solving the technical problems that the existing data encryption technology usually focuses on the security guarantee in the transmission process and the static data stored in the industrial control chip is insufficiently protected.

Description

Technical Field

[0001] The present invention relates to the technical field of industrial control chips, and in particular to a data encryption method for an industrial control chip and related equipment. Background Art

[0002] With the popularization of Industry 4.0 and smart manufacturing concepts, industrial control systems (ICS) play an increasingly important role in modern production processes. Industrial control systems not only manage a number of key infrastructures from production automation to energy management, but are also developing in a more intelligent and networked direction. However, this trend has also made the security issues of industrial control systems increasingly prominent, especially threats to data security. Traditional industrial control environments often ignore the importance of network security, and most devices do not fully consider encryption mechanisms at the beginning of their design, which leads to vulnerability in the face of malicious attacks.

[0003] At present, data protection in industrial control systems faces multiple challenges. On the one hand, due to the complex internal structure and wide variety of industrial control systems, different types of industrial control chips may require different encryption schemes, which puts forward high requirements for achieving unified and effective data encryption; on the other hand, the high requirements for real-time and stability in industrial control environments limit the types of security measures that can be adopted. Overly complex encryption processes may lead to system performance degradation or increased latency, affecting normal production activities. In addition, existing data encryption technologies usually focus on security protection during transmission, but lack protection for static data stored in industrial control chips, which becomes one of the potential security vulnerabilities.

[0004] Therefore, it is particularly urgent to develop a data encryption method suitable for industrial control chips. The above-mentioned method aims to solve these problems existing in the existing technology by introducing efficient scanning, identification and analysis mechanisms to accurately locate the data that needs to be encrypted, and flexibly select encryption strategies according to data characteristics to ensure that data security can be effectively improved without significantly affecting the operating efficiency of the system. This method can not only provide strong protection for the static data of the industrial control system, but also take into account the special needs of the industrial control environment, such as real-time and stability, thus providing new ideas and technical support for building a more secure and reliable industrial control system. Summary of the invention

[0005] The main purpose of the present invention is to provide a data encryption method and related equipment for an industrial control chip, which solves the problem that the existing data encryption technology usually focuses on security protection during transmission, but does not provide sufficient protection for static data stored in the industrial control chip.

[0006] To achieve the above object, the present invention provides a data encryption method for an industrial control chip, comprising the following steps: Scan and read the storage area in the target industrial control chip through a preset scanning module to obtain the storage data of the target industrial control chip; The importance of the stored data is identified by a preset identification algorithm to obtain data to be encrypted; Analyzing the characteristics of the data to be encrypted by a preset analysis algorithm, and selecting a corresponding encryption strategy based on the characteristics; Encrypting the data to be encrypted using the encryption strategy to obtain encrypted data; Performing data logic combination on the encrypted data and the unencrypted portion of the stored data to obtain restructured data; The reorganized structure data is written back to the storage area of ​​the target industrial control chip through a preset writing module.

[0007] Furthermore, the scanning and reading of the storage area in the target industrial control chip by a preset scanning module to obtain the storage data of the target industrial control chip includes: Preliminarily scanning and reading the storage area in the target industrial control chip through a preset scanning module to obtain preliminary structural information of the storage area; Based on the preliminary structural information, the storage area is classified into regions to obtain storage partitions and storage partition types corresponding to the storage partitions; wherein the storage area includes a configuration area, a log area, and a user data area; Read each of the storage partitions one by one through a preset read instruction to obtain the original data in the corresponding storage partition; Based on the storage partition type, the original data is formatted and parsed to obtain identifiable data content; Verify whether the identifiable data content is complete through a preset verification algorithm, and if complete, use the identifiable data content as storage data of the target industrial control chip; If it is incomplete, the identifiable data content is repaired using a preset data repair algorithm, and the repaired identifiable data content is used as the storage data of the target industrial control chip.

[0008] Furthermore, the importance of the stored data is identified by a preset identification algorithm to obtain the data to be encrypted, including: Extracting order parameters from the stored data to obtain order parameter features; wherein the order parameter features include access frequency and modification frequency; Calculating the Lyapunov exponent of the order parameter characteristic; wherein the Lyapunov exponent is used to determine the stability of the order parameter; Using bifurcation theory, based on the Lyapunov exponent, critical analysis is performed on the stored data to obtain critical state characteristics of the stored data; wherein the critical state characteristics are important turning point characteristics of the stored data; Performing graph network mapping on the stored data based on the critical state characteristics to obtain a network structure representation; wherein the network structure representation is used to reflect the association and dependency relationship between the stored data; Based on the small-world network algorithm, the importance of the network structure representation is evaluated to obtain a data importance score; The stored data is screened for importance based on the data importance score to obtain data to be encrypted.

[0009] Furthermore, analyzing the characteristics of the data to be encrypted by a preset analysis algorithm and selecting a corresponding encryption strategy based on the characteristics includes: Perform byte-level analysis on the encrypted data based on a preset data analyzer to obtain byte distribution information; wherein the byte distribution information is the frequency of occurrence of different bytes and the length of continuous occurrence; Determining a byte arrangement based on the byte distribution information; Performing data structure identification on the data to be encrypted based on the byte arrangement to obtain a data structure to be encrypted; By using a preset analysis algorithm, based on the structure of the data to be encrypted, the characteristics of the data to be encrypted are analyzed to obtain the characteristics of the data to be encrypted; The characteristics of the data to be encrypted are mapped with characteristic identifiers in a preset rule mapping table to select a corresponding encryption strategy; wherein the characteristic identifiers and the encryption strategies are in a one-to-one correspondence.

[0010] Further, encrypting the data to be encrypted by using the encryption strategy to obtain encrypted data includes: Based on elliptic curve cryptography, the key is generated for the encrypted data to obtain an elliptic curve key pair; Through bilinear mapping, the elliptic curve key pair and the data to be encrypted are respectively subjected to data mapping operations to obtain corresponding mapping curve keys and mapped data to be encrypted; Fusing the mapping curve key and the mapped data to be encrypted to obtain fused mapping data; Based on a supersingular elliptic curve, performing an isomorphic transformation on the fused mapping data to obtain isomorphic transformation data; Committing the isomorphic transformation data using a preset polynomial commitment algorithm to obtain isomorphic transformation data with polynomial commitment; The isomorphic transformation data with polynomial commitment is verified through zero-knowledge proof technology to obtain the verification result; If the verification result is successful, the isomorphic transformation data with polynomial commitment is encrypted by using a preset data scrambling technology to obtain the encrypted data.

[0011] Furthermore, the encrypted data and the unencrypted portion of the stored data are logically combined to obtain restructured data, including: Performing a hash operation on the encrypted data using a preset hash function to obtain a hash value of the encrypted data; A preset hash chain structure performs logical combination and hash link processing on the encrypted data hash value and the unencrypted part of the stored data to obtain hash link data; Performing homomorphic encryption on the hash link data to obtain homomorphically encrypted link data; The homomorphically encrypted link data and the encrypted data are structured and organized using a preset tree data structure to obtain tree structured data; Generating a redundant check code for the tree-structured data to obtain the tree-structured data with the redundant check code; The tree-structured data with redundant check codes is subjected to block coding processing based on a preset block coding technology to obtain reorganized structure data.

[0012] Furthermore, the step of writing the reorganized structure data back to the storage area of ​​the target industrial control chip through a preset writing module includes: Performing address mapping on the reorganized structure data by using a preset address mapping algorithm to obtain a mapping address space of the reorganized structure data; Dividing the reorganized structure data into data segments based on the mapping address space to obtain a plurality of data segments; Performing differential encoding processing on each of the data segments to obtain corresponding encoded data segments; Using a preset dynamic scheduling algorithm to perform write scheduling on each of the encoded data segments to obtain a scheduling plan; wherein the scheduling plan includes priority setting and conflict resolution mechanism; Through a preset writing module, the encoded data segment is written back to the storage area of ​​the target industrial control chip based on the scheduling plan and the mapping address space.

[0013] The present invention also provides a data encryption device for an industrial control chip, comprising: A scanning module is used to scan and read the storage area in the target industrial control chip through a preset scanning module to obtain the storage data of the target industrial control chip; An identification module, used to identify the importance of the stored data through a preset identification algorithm to obtain data to be encrypted; A selection module, used to analyze the characteristics of the data to be encrypted by using a preset analysis algorithm, and select a corresponding encryption strategy based on the characteristics; An encryption module, used for encrypting the data to be encrypted according to the encryption strategy to obtain encrypted data; A combination module, used for performing data logic combination on the encrypted data and the unencrypted part of the stored data to obtain reorganized structure data; A write-back module is used to write the reorganized structure data back to the storage area of ​​the target industrial control chip through a preset write module.

[0014] The present invention also provides a computer device, comprising a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of any one of the above methods when executing the computer program.

[0015] The present invention also provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps of any of the above-mentioned methods are implemented.

[0016] The data encryption method of the industrial control chip provided by the present invention comprises the following steps: scanning and reading the storage area in the target industrial control chip by a preset scanning module to obtain the storage data of the target industrial control chip; identifying the importance of the storage data to obtain the data to be encrypted; analyzing the characteristics of the data to be encrypted by a preset analysis algorithm, and selecting a corresponding encryption strategy based on the characteristics; encrypting the data to be encrypted by the encryption strategy to obtain encrypted data; performing data logic combination on the encrypted data and the unencrypted part of the stored data to obtain reorganized structure data; writing the reorganized structure data back to the storage area of ​​the target industrial control chip by a preset writing module. Through the above-mentioned technical means, the technical problem that the existing data encryption technology usually focuses on the security guarantee during the transmission process, but the static data stored in the industrial control chip is insufficiently protected is solved, and the high requirements of the industrial control environment for real-time and stability are taken into account during the encryption process. Through the optimized data logic combination method, the encrypted data and the unencrypted part are reintegrated and then written back to the storage area, which not only enhances data security, but also avoids the problem of system performance degradation or delay increase caused by encryption. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 This is a schematic diagram of the steps of a data encryption method for an industrial control chip in one embodiment of the present invention; Figure 2It is a structural block diagram of a data encryption device for an industrial control chip in one embodiment of the present invention; Figure 3 It is a schematic block diagram of the structure of a computer device according to an embodiment of the present invention.

[0018] The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0019] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0020] like Figure 1 As shown, Figure 1 This is a schematic diagram of the steps of a data encryption method for an industrial control chip in one embodiment of the present invention; In one embodiment of the present invention, a data encryption method for an industrial control chip is provided, comprising the following steps: Step S1, scanning and reading the storage area in the target industrial control chip through a preset scanning module to obtain the storage data of the target industrial control chip.

[0021] Specifically, the process of scanning and reading the storage area in the target industrial control chip through the preset scanning module to obtain the storage data of the target industrial control chip is the basis and premise of the entire data encryption method. Specifically, first of all, the preset scanning module refers to a software or hardware tool specially designed to access and retrieve the internal storage information of the industrial control chip. It can go deep into each storage unit of the industrial control chip to ensure that all data that may contain valuable information can be read out completely. For example, in an automated production line in a manufacturing plant, each machine is equipped with an industrial control chip. These chips are responsible for controlling the movement of the robot arm, temperature adjustment and other tasks. The data stored therein may involve specific control instructions, parameter settings and even important information such as fault records. When it is necessary to encrypt and protect these data, the scanning module will be started, and it will traverse all the storage spaces of the industrial control chip according to the predetermined path or rules, whether it is volatile RAM or non-volatile Flash memory, and no corner will be missed. In actual operation, in order to improve scanning efficiency and accuracy, the scanning module may use a combination of multiple technical means, such as using a specific communication protocol to establish a connection with the industrial control chip, obtaining the storage address mapping table by sending a query command, and then accessing each address interval one by one according to this table. At the same time, it can also combine data type judgment and anomaly detection functions to filter out invalid or irrelevant information to ensure that the final collection is valid and complete storage data. In this way, the subsequent recognition algorithm can work based on an accurate data set, thereby improving the effectiveness and reliability of the entire encryption process.

[0022] Step S2, identifying the importance of the stored data through a preset identification algorithm to obtain data to be encrypted.

[0023] Specifically, the process of identifying the importance of the stored data through a preset recognition algorithm to obtain the data to be encrypted is a key step after completing the scanning and reading of the stored data of the target industrial control chip. The goal of this link is to screen out which data really needs to be encrypted to avoid the waste of resources and performance loss caused by indiscriminate encryption of all data. For example, in the aforementioned manufacturing plant automation production line scenario, the amount of data stored inside the industrial control chip may be very large, covering various types of information from equipment status reports to detailed process parameters, but not all data requires the same degree of protection. Therefore, the role of the recognition algorithm is to distinguish the value and sensitivity of this data.

[0024] Specifically, the recognition algorithm may comprehensively consider factors such as the type of data, update frequency, and access rights to conduct an assessment. For example, for real-time control parameters that are frequently updated, they should be considered as high-priority data to be encrypted because they directly affect the safety and efficiency of the production process; while for some historical records or log files, although they are equally important, they can be appropriately lowered in encryption priority because they change less frequently. In addition, the recognition algorithm may also use machine learning technology to automatically learn and adjust the importance judgment criteria by analyzing past data access patterns and security event records, so as to more accurately identify data items that need to be protected. In practical applications, the implementation of the recognition algorithm needs to be closely integrated with the specific industrial control system to ensure that it can understand and correctly parse various data formats, and also have good compatibility and scalability to cope with new types of data or more complex application requirements that may appear in the future. In this way, by using the preset recognition algorithm to identify the importance of stored data, it is possible to effectively determine which data needs to be encrypted, laying a solid foundation for the subsequent selection of encryption strategies and execution of encryption operations.

[0025] Step S3: Analyze the characteristics of the data to be encrypted by using a preset analysis algorithm, and select a corresponding encryption strategy based on the characteristics.

[0026] Specifically, the characteristics of the data to be encrypted are analyzed by a preset analysis algorithm, and the corresponding encryption strategy is selected based on the characteristics. This is one of the core links in the entire data encryption process. After completing the identification of the importance and sensitivity of the data stored in the industrial control chip, the next step is to deeply understand the specific attributes of these data to be encrypted so as to tailor the most appropriate encryption method for them. Taking the automated production line of a manufacturing plant as an example, the data to be encrypted screened by the identification algorithm may include real-time control parameters, security setting values, and communication keys between devices. Although these data need to be protected, they have different characteristics, so the encryption strategies should also be different.

[0027] For example, for control parameters with extremely high real-time requirements, the analysis algorithm will consider the data update speed and transmission frequency, and select an algorithm that can encrypt and decrypt quickly while ensuring sufficient security, such as AES-128-bit encryption, to ensure that the necessary security is provided without affecting the system response time. On the contrary, for security setting values ​​that are not frequently changed but will have a significant impact once leaked, more complex encryption methods can be selected, such as RSA public key encryption, which can provide a higher level of security although the processing speed is relatively slow. As for the communication key between devices, a hybrid encryption strategy may be required, that is, asymmetric encryption is used to generate session keys first, and then symmetric encryption is used for data transmission, so as to balance security and efficiency. In actual operation, the analysis algorithm not only needs to be able to accurately capture the dynamic change characteristics of data, but also needs to be able to adapt to special situations in the industrial control environment, such as power failure and restart, network interruption, etc., to ensure that the consistency and integrity of data can be maintained even under abnormal conditions. In addition, in order to make the selection of encryption strategies more scientific and reasonable, the analysis algorithm can also integrate the latest research results and technological advances, such as adaptive encryption technology and intelligent optimization algorithms, and continuously optimize encryption strategies through continuous learning and self-adjustment to better meet the growing security needs of industrial control systems. In this way, by analyzing the characteristics of the data to be encrypted through a preset analysis algorithm and selecting the most matching encryption strategy based on these characteristics, the effectiveness and flexibility of data protection can be greatly improved, laying a solid foundation for building a more secure and reliable industrial control system.

[0028] Step S4: encrypt the data to be encrypted using the encryption strategy to obtain encrypted data.

[0029] Specifically, the data to be encrypted is encrypted by the encryption strategy to obtain the encrypted data, which is a crucial part of the entire data encryption process. In the previous steps, the important data to be encrypted has been screened out by the preset recognition algorithm, and the encryption strategy that best suits the characteristics of these data has been determined by the analysis algorithm. Next, the selected encryption strategy is used to implement specific encryption operations on the data to be encrypted. For example, in the application scenario of an automated production line in a manufacturing plant, if a part of the data is identified as a real-time control parameter, and the analysis result recommends the use of AES-128-bit encryption, then the AES encryption algorithm will be started next to convert this part of the data into ciphertext form to ensure that even if the data is intercepted during transmission, its content cannot be easily interpreted. In this process, the selection and configuration of the encryption algorithm is very important. Taking AES-128-bit encryption as an example, it is a symmetric encryption algorithm, which means that the same key is used for encryption and decryption. In order to ensure security, it is necessary to ensure that the key generation and management process is strictly confidential. A random number generator is usually used to create a high-strength key and distribute it to the relevant decryption party through a secure channel. At the same time, the speed and efficiency of encryption also need to be considered, because industrial control systems often have high requirements for real-time performance, and too slow encryption speed may affect the normal operation of the system. Therefore, the encryption operation must not only ensure the security of the data, but also take into account the time cost of encryption processing. In addition, the integrity and consistency of the data must also be considered during the encryption process. Before encrypting the data, its original state can be verified by calculating the hash value of the data. After the encryption is completed, the hash value is calculated again and compared with the previous value to confirm that the data has not changed during the encryption process. This approach helps prevent data corruption or tampering during the encryption process and ensures the reliability and availability of the encrypted data. Finally, the encrypted data will be properly stored, waiting for the subsequent data logic combination step, ready to be written back to the storage area of ​​the target industrial control chip. In this way, sensitive data in the industrial control system can be effectively protected and the overall security of the system can be enhanced.

[0030] Step S5, performing data logic combination on the encrypted data and the unencrypted portion of the stored data to obtain restructured data.

[0031] Specifically, the encrypted data and the unencrypted part of the stored data are logically combined to obtain the restructured data, which is an important step in the data encryption method, aiming to ensure that the encrypted data can be seamlessly integrated into the original data structure while maintaining the normal operation of the system. In the previous step, we have determined which data needs to be encrypted and which encryption strategy should be adopted through the identification algorithm and the analysis algorithm, and completed the actual encryption operation of these data. Now, we need to reasonably combine these encrypted data with other unencrypted data in the storage area to form a new, logically complete data structure. For example, in the application scenario of the automated production line of a manufacturing plant, suppose that we encrypt some real-time control parameters, while other data such as equipment status reports do not need to be encrypted. In this case, the process of logical combination of data requires special attention, both to ensure that the encrypted control parameters can be correctly placed in the corresponding position in the original data stream, and to ensure that the unencrypted data is not affected, and its original format and arrangement order remain unchanged. To achieve this goal, a mapping table can be designed to record the original position of each data block and whether it has been encrypted. When combining data, the encrypted data is accurately inserted into the correct position according to the guidance of the mapping table, while the unencrypted data is directly copied to form the reorganized structure data. In addition, in order to ensure the compatibility and readability of the reorganized data structure in practical applications, the entire data format needs to be verified. This includes checking whether the metadata such as data header information and checksums are correctly set, and confirming whether the overall length and structure of the data meet expectations. In this way, system errors or data loss caused by improper data reorganization can be effectively avoided. At the same time, in order to further enhance the security of data, additional security mechanisms such as digital signatures or integrity checksums can be added during the data reorganization process, so that even if the data is tampered with during transmission or storage, it can be discovered in time and corresponding countermeasures can be taken. In short, through a carefully designed data logic combination scheme, not only can the encrypted data be perfectly integrated with the original data structure, but also stronger data protection capabilities can be provided without affecting system performance, which is of great significance for improving the overall security level of industrial control systems.

[0032] Step S6: writing the reorganized structure data back to the storage area of ​​the target industrial control chip through a preset writing module.

[0033] Specifically, writing the restructured data back to the storage area of ​​the target industrial control chip through a preset writing module is the last key step in the entire data encryption process. Prior to this, we have completed the scanning, identification, encryption and logical combination of the data, and obtained a new data structure containing encrypted data and unencrypted data. Now, we need to write this restructured data back to the storage area of ​​the target industrial control chip safely and accurately to ensure that the system can continue to operate normally while protecting sensitive information. Taking the automated production line of a manufacturing plant as an example, assume that we have encrypted some key control parameters and logically recombined these encrypted data with other unencrypted data. At this point, the preset writing module comes into play. The writing module is usually a software or hardware component designed specifically for industrial control chips. It can establish a stable communication connection with the industrial control chip and follow specific protocol specifications to ensure the accuracy and reliability of data transmission. In actual operation, the writing module will first verify the integrity and correctness of the restructured data, such as by calculating a checksum or using a digital signature to ensure that the data has not been tampered with or damaged during transmission. Next, the write module will accurately write each data block in the restructured data back to the corresponding position in the target industrial control chip according to the predefined address mapping table. This process requires high precision, because even a small deviation may cause the system to fail to correctly identify and process the data, which in turn affects the normal operation of the entire production line. In order to further improve the safety of the write process, the write module can also integrate a redundant verification mechanism, such as reading the data again for comparison after the write is completed to ensure that the data has been successfully written and the content is correct. In addition, considering the particularity of the industrial control environment, the design of the write module also needs to focus on real-time and stability. For example, during the data writing process, if there is an unexpected situation such as a sudden network interruption or power failure, the write module should have the ability to recover from the interruption, and be able to continue writing from the breakpoint after returning to normal, so as to avoid system paralysis due to data writing failure. At the same time, the write speed is also a factor that cannot be ignored, especially when the control parameters need to be updated frequently, a too slow write speed may affect production efficiency. In summary, writing the restructured data back to the storage area of ​​the target industrial control chip through the preset writing module requires not only efficient and accurate data transmission capabilities, but also a powerful data verification and error recovery mechanism to ensure data security and system stability. The successful implementation of this process marks the successful completion of the entire data encryption process, providing a strong guarantee for the data security of the industrial control system.

[0034] In a specific embodiment, scanning and reading the storage area in the target industrial control chip by a preset scanning module to obtain the storage data of the target industrial control chip includes: Preliminarily scanning and reading the storage area in the target industrial control chip through a preset scanning module to obtain preliminary structural information of the storage area; Based on the preliminary structural information, the storage area is classified into regions to obtain storage partitions and storage partition types corresponding to the storage partitions; wherein the storage area includes a configuration area, a log area, and a user data area; Read each of the storage partitions one by one through a preset read instruction to obtain the original data in the corresponding storage partition; Based on the storage partition type, the original data is formatted and parsed to obtain identifiable data content; Verify whether the identifiable data content is complete through a preset verification algorithm, and if complete, use the identifiable data content as storage data of the target industrial control chip; If it is incomplete, the identifiable data content is repaired using a preset data repair algorithm, and the repaired identifiable data content is used as the storage data of the target industrial control chip.

[0035] Specifically, the storage area in the target industrial control chip is scanned and read by the preset scanning module to obtain the storage data of the target industrial control chip. This is a complex but crucial process, which aims to provide accurate basic data for subsequent data encryption operations. First, the storage area in the target industrial control chip is preliminarily scanned and read by the preset scanning module to obtain the preliminary structural information of the storage area. The main purpose of this preliminary scan is to understand the basic layout of the internal storage space of the industrial control chip, including but not limited to basic information such as storage capacity, number of partitions and approximate location of each partition. Taking the industrial control chips in the automated production line of a manufacturing plant as an example, these chips are usually divided into multiple different storage areas, such as configuration area, log area and user data area, and each area stores different types of necessary information. Based on the preliminary structural information, the storage area is regionally classified to obtain storage partitions and storage partition types corresponding to the storage partitions. This classification process is to manage each storage area more finely to ensure that subsequent data reading and processing can be carried out in a targeted manner. For example, the configuration area mainly stores system configuration parameters, the log area records device operation logs, and the user data area stores data generated by the application. By classifying the storage area, it can be clear which data needs to be focused on and encrypted, and which data can be encrypted according to the actual situation. Next, each of the storage partitions is read one by one through the preset read instruction to obtain the original data in the corresponding storage partition. The read instruction here is a command sequence specially designed to communicate with the industrial control chip, which can effectively extract data from the specified address range. In the reading process, different data formats and encoding methods may be encountered, which requires the reading module to have strong compatibility and parsing capabilities to ensure that all required data can be correctly read. Based on the storage partition type, the original data is formatted and parsed to obtain identifiable data content. The purpose of format conversion and parsing is to convert the binary data read from the storage partition into structured information that can be used for subsequent processing. For example, the data in the configuration area may be stored in a specific binary format, while the data in the log area may be in text format. The reading module needs to be able to recognize these formats and convert them into a unified, easy-to-process form, such as JSON or XML. Through the preset verification algorithm, verify whether the identifiable data content is complete. If complete, the identifiable data content is used as the storage data of the target industrial control chip. The verification algorithm is mainly used to check the integrity and accuracy of data. Common verification methods include CRC verification, MD5 verification, etc. Through these verification methods, it can be ensured that the read data is not lost or damaged during the transmission process. Only when the data passes the verification can it be considered complete and reliable, and then used as the object of subsequent processing.If it is incomplete, the identifiable data content is repaired by a preset data repair algorithm, and the repaired identifiable data content is used as the storage data of the target industrial control chip. The data repair algorithm is a remedial measure initiated when the data integrity check fails, aiming to restore the original state of the damaged data as much as possible. For example, if a part of the data of a log file is lost, the repair algorithm may try to restore the missing part from the backup copy, or infer the possible content by using the context information. Of course, data repair does not always restore the data completely, but in many cases, even if it can only be partially restored, it can provide valuable reference for subsequent data analysis and processing. In summary, scanning and reading the storage area in the target industrial control chip through the preset scanning module is a comprehensive process involving multiple links such as preliminary scanning, area classification, partition reading one by one, format conversion and parsing, data verification, and data repair when necessary. This process requires not only precise technical support, but also a deep understanding of the characteristics and requirements of the industrial control system to ensure that the storage data finally obtained is both accurate and complete, laying a solid foundation for subsequent data encryption and other security measures. In the application scenario of automated production lines in manufacturing plants, the effective implementation of this process can not only ensure the stable operation of the production line, but also significantly improve the overall safety level of the system.

[0036] In a specific embodiment, the importance of the stored data is identified by a preset identification algorithm to obtain the data to be encrypted, including: Extracting order parameters from the stored data to obtain order parameter features; wherein the order parameter features include access frequency and modification frequency; Calculating the Lyapunov exponent of the order parameter characteristic; wherein the Lyapunov exponent is used to determine the stability of the order parameter; Using bifurcation theory, based on the Lyapunov exponent, critical analysis is performed on the stored data to obtain critical state characteristics of the stored data; wherein the critical state characteristics are important turning point characteristics of the stored data; Performing graph network mapping on the stored data based on the critical state characteristics to obtain a network structure representation; wherein the network structure representation is used to reflect the association and dependency relationship between the stored data; Based on the small-world network algorithm, the importance of the network structure representation is evaluated to obtain a data importance score; The stored data is screened for importance based on the data importance score to obtain data to be encrypted.

[0037] Specifically, the process of identifying the importance of the stored data by a preset identification algorithm to obtain the data to be encrypted is a highly intelligent and technically rich step. This process not only requires a comprehensive analysis of the stored data, but also requires the use of mathematical models and network theory to determine which data really need to be encrypted and protected in a scientific way. First, the stored data is subjected to order parameter extraction to obtain order parameter features, where the order parameter features mainly include access frequency and modification frequency. Taking the industrial control chip in the automated production line of a manufacturing plant as an example, the stored data may contain a large amount of control parameters, log records, user data and other information. By statistically analyzing the access frequency and modification frequency of these data, we can preliminarily understand which data is frequently used or modified during system operation, and these data often have high importance and sensitivity. Next, the Lyapunov index of the order parameter feature is calculated. The Lyapunov index is an important concept in the theory of dynamic systems, which is used to measure the stability and predictability of the system. In this step, by calculating the Lyapunov index of the stored data, the change trend and stability of these data can be quantitatively evaluated. For example, for data with high access frequency but low modification frequency, if its Lyapunov index is low, it indicates that the data changes slowly and predictably, and may belong to the core configuration parameters of the system. Once tampered, it will seriously affect the normal operation of the system; on the contrary, if the Lyapunov index is high, it indicates that the data changes quickly and is difficult to predict. Such data may involve real-time feedback or dynamic adjustment, and also need to be protected. Then, using bifurcation theory, critical analysis is performed on the stored data based on the Lyapunov index to obtain the critical state characteristics of the stored data. Bifurcation theory is a method for studying the law of behavior change of nonlinear systems. By analyzing the critical point or turning point of the system, the behavior pattern of the system under different conditions can be revealed. In this step, the critical state characteristics refer to the nodes where the stored data may undergo important changes during the operation of the system. These nodes are often the turning points of the importance of the data. For example, in the production process, the set value of a control parameter suddenly changes, which may cause a major adjustment in the working state of the entire production line. In this case, the critical state characteristics of the parameter are particularly important. Subsequently, the stored data is mapped to a graph network based on the critical state characteristics to obtain a network structure representation. Graph network mapping is to abstract the relationship between data into a graph structure composed of nodes and edges. In this way, the correlation and dependency between data can be intuitively displayed. In industrial control systems, there may be complex interactions between different data. For example, the adjustment of certain control parameters may affect the performance of other parameters and even affect the stability of the entire system. Through graph network mapping, the interaction between these data can be clearly seen, providing a basis for subsequent importance assessment. Finally, based on the small-world network algorithm, the importance of the network structure representation is evaluated to obtain the data importance score.The small-world network algorithm is a method for analyzing network characteristics, which can reveal the centrality and influence of nodes in the network. In this step, by evaluating the importance of nodes in the graph network, it is possible to determine which data is at the core of the network, which usually has a decisive impact on the operation of the system. For example, if a control parameter connects multiple other parameters in the network and its change causes a chain reaction, then the importance score of this parameter will be very high, and it should be the focus of encryption protection. Based on the data importance score, the stored data is identified and screened for importance to obtain the data to be encrypted. This final step is to summarize all the previous analysis results, sort them according to the importance score of the data, and select the data that needs to be protected most. These data will be used as the data to be encrypted and enter the next stage of encryption processing. For example, in an automated production line, if it is found that some control parameters have the highest importance score after evaluation, then these parameters should be encrypted first to ensure their security and integrity. In summary, the importance identification of stored data through a preset identification algorithm is a multi-step, multi-dimensional comprehensive evaluation process. This process not only takes into account the access and modification frequency of the data itself, but also deeply analyzes the data's changing trends, critical states, and correlation with other data. Ultimately, the importance of the data is determined through scientific methods, providing precise guidance for data encryption in industrial control systems. In the application scenario of automated production lines in manufacturing plants, the effective implementation of this process can not only improve the security of the system, but also ensure that key data is effectively protected, thereby ensuring the smooth progress of production.

[0038] In a specific embodiment, analyzing the characteristics of the data to be encrypted by a preset analysis algorithm and selecting a corresponding encryption strategy based on the characteristics includes: Perform byte-level analysis on the encrypted data based on a preset data analyzer to obtain byte distribution information; wherein the byte distribution information is the frequency of occurrence of different bytes and the length of continuous occurrence; Determining a byte arrangement based on the byte distribution information; Performing data structure identification on the data to be encrypted based on the byte arrangement to obtain a data structure to be encrypted; By using a preset analysis algorithm, based on the structure of the data to be encrypted, the characteristics of the data to be encrypted are analyzed to obtain the characteristics of the data to be encrypted; The characteristics of the data to be encrypted are mapped with characteristic identifiers in a preset rule mapping table to select a corresponding encryption strategy; wherein the characteristic identifiers and the encryption strategies are in a one-to-one correspondence.

[0039] Specifically, the process of analyzing the characteristics of the data to be encrypted by a preset analysis algorithm and selecting a corresponding encryption strategy based on the characteristics is a key link in the data encryption method. This process aims to identify its unique characteristics through in-depth analysis of the encrypted data, so as to tailor the most suitable encryption strategy for it. First, the encrypted data is analyzed at the byte level based on the preset data analyzer to obtain byte distribution information. The byte-level analysis mentioned here refers to breaking the data into the most basic byte unit and counting the frequency of each byte and the length of continuous appearance. For example, in an automated production line of a manufacturing plant, the data to be encrypted may include control parameters, log records, and user data, etc., and the distribution characteristics of these data at the byte level will be different. By performing byte-level analysis on these data, the inherent structure and pattern of the data can be revealed, providing a basis for further characteristic identification. Next, the byte arrangement is determined based on the byte distribution information. The byte arrangement reflects the organization of data in the memory, including the order, repeatability, and spacing of the data. For example, some control parameters may be stored in a fixed format, each parameter occupies a fixed number of bytes, and is arranged in a certain order; while log records may contain a large amount of text information, the byte arrangement is relatively random, and there are many repeated characters. By analyzing the byte arrangement, the organizational structure of the data can be understood more accurately, providing a basis for subsequent data structure identification. Then, the data structure of the data to be encrypted is identified based on the byte arrangement to obtain the data structure to be encrypted. Data structure identification refers to inferring the logical structure and organizational form of the data based on the byte arrangement. For example, for control parameters, it may be identified as a series of structured numerical data, each numerical value represents a specific parameter value; while for log records, it may be identified as a segment of free-format text data, containing information such as timestamps, operation types and operation results. Through data structure identification, the data to be encrypted can be abstracted from the disordered byte stream to form a data unit with clear meaning, creating conditions for subsequent feature analysis. Through a preset analysis algorithm, the data to be encrypted is analyzed based on the data structure to obtain the characteristics of the data to be encrypted. Feature analysis refers to further mining the unique attributes of the data, such as the update frequency, access mode, sensitivity, etc. of the data, based on the logical structure of the data. For example, for real-time control parameters, it may be analyzed that their update frequency is extremely high, requiring fast encryption and decryption processing; while for log records, it may be analyzed that their update frequency is low, but they record the operating status of the system, which may cause serious consequences once leaked. Through in-depth analysis of these characteristics, the most appropriate encryption strategy can be selected for each data unit. The characteristics of the data to be encrypted are mapped with the characteristic identifiers in the preset rule mapping table to select the corresponding encryption strategy. The rule mapping table is a predefined comparison table that lists the correspondence between various data characteristics and corresponding encryption strategies.For example, for control parameters with extremely high update frequency, the AES-128-bit symmetric encryption algorithm may be selected because it has high encryption speed and good security; while for log records with low update frequency but high sensitivity, the RSA asymmetric encryption algorithm may be selected, which has a slower encryption speed but provides higher security. By comparing the characteristics of the data to be encrypted with the rule mapping table, the most suitable encryption strategy can be automatically selected to ensure that the security of the data and the performance of the system are optimally balanced. In summary, analyzing the characteristics of the data to be encrypted by a preset analysis algorithm and selecting the corresponding encryption strategy based on the characteristics is a multi-step, multi-level comprehensive analysis process. This process requires not only detailed byte-level analysis and structure recognition of the data, but also the selection of the most appropriate encryption strategy based on the characteristics of the data. In the application scenario of the automated production line of a manufacturing plant, the effective implementation of this process can not only improve the security of the data, but also ensure that the encryption operation will not have a negative impact on the real-time performance and stability of the system, thereby providing a strong guarantee for the overall security of the industrial control system.

[0040] In a specific embodiment, encrypting the data to be encrypted by using the encryption strategy to obtain encrypted data includes: Based on elliptic curve cryptography, the key is generated for the encrypted data to obtain an elliptic curve key pair; Through bilinear mapping, the elliptic curve key pair and the data to be encrypted are respectively subjected to data mapping operations to obtain corresponding mapping curve keys and mapped data to be encrypted; Fusing the mapping curve key and the mapped data to be encrypted to obtain fused mapping data; Based on a supersingular elliptic curve, performing an isomorphic transformation on the fused mapping data to obtain isomorphic transformation data; Committing the isomorphic transformation data using a preset polynomial commitment algorithm to obtain isomorphic transformation data with polynomial commitment; The isomorphic transformation data with polynomial commitment is verified through zero-knowledge proof technology to obtain the verification result; If the verification result is successful, the isomorphic transformation data with polynomial commitment is encrypted by using a preset data scrambling technology to obtain the encrypted data.

[0041] Specifically, the process of encrypting the data to be encrypted by the encryption strategy to obtain the encrypted data is a highly complex and technically demanding step. This process not only requires the use of advanced cryptographic techniques, but also requires the combination of multiple mathematical algorithms to ensure the security and integrity of the data during the encryption process. First, the encrypted data is key-generated based on elliptic curve cryptography to obtain an elliptic curve key pair. Elliptic curve cryptography (ECC) is a public key cryptographic system based on the discrete logarithm problem on an elliptic curve. Compared with the traditional RSA algorithm, ECC requires a shorter key length and higher computational efficiency at the same security strength. In the application scenario of an automated production line in a manufacturing plant, the encrypted data includes important control parameters, log records, etc., and the security of these data is extremely important. The key pair generated by elliptic curve cryptography includes a public key and a private key, the public key is used to encrypt data, and the private key is used to decrypt data. Next, the elliptic curve key pair and the data to be encrypted are respectively subjected to data mapping operations through bilinear mapping to obtain the corresponding mapping curve key and the mapped data to be encrypted. Bilinear mapping is a special mathematical function that can establish a linear relationship between two different groups. In this step, through bilinear mapping, the elliptic curve key pair and the data to be encrypted can be mapped to another group respectively to generate a mapping curve key and a mapping data to be encrypted. This process not only increases the complexity of the data, but also provides more flexibility for subsequent encryption operations. For example, the mapped data may be easier to combine with other encryption technologies to improve the overall security. Then, the mapping curve key and the mapped data to be encrypted are subjected to data fusion to obtain fused mapping data. Data fusion refers to merging multiple data sources or data elements into a single data unit for unified processing. In this step, through data fusion, the mapping curve key and the mapped data to be encrypted can be organically combined to generate a fused mapping data. This process not only simplifies subsequent operations, but also enhances the security of the data, because the fused data is more difficult to be reverse analyzed and cracked. Based on the supersingular elliptic curve, the fused mapping data is isomorphically transformed to obtain isomorphically transformed data. The supersingular elliptic curve is a special elliptic curve with unique mathematical properties, which makes it widely used in cryptography. Through isomorphic transformation, the fused mapping data can be transformed from one domain to another, further increasing the complexity and security of the data. For example, in an automated production line, even if the data after isomorphic transformation is intercepted, it is difficult for an attacker to restore the original data through simple mathematical operations, thereby improving the security of the data. The isomorphic transformation data is committed to generation through a preset polynomial commitment algorithm to obtain isomorphic transformation data with polynomial commitment. The polynomial commitment algorithm is a technology used to verify data integrity and consistency. By generating a commitment value, it can be proved that the data has not been tampered with during transmission.In this step, a commitment value can be generated for the isomorphic transformation data through the polynomial commitment algorithm to ensure the integrity and consistency of the data during encryption and transmission. For example, the generated commitment value can be used for subsequent data verification to ensure that the received data is exactly the same as the sent data. The isomorphic transformation data with polynomial commitment is verified by zero-knowledge proof technology to obtain a verification result. Zero-knowledge proof is a technology that allows one party (prover) to prove to another party (verifier) ​​that a statement is correct without revealing any additional information. In this step, the correctness and integrity of the isomorphic transformation data with polynomial commitment can be verified by zero-knowledge proof technology to ensure that the data has not been tampered with during the encryption process. For example, the verification result can be used to confirm the authenticity and integrity of the data, thereby enhancing the security of the system. If the verification result is successful, the isomorphic transformation data with polynomial commitment is encrypted by data scrambling using a preset data scrambling technology to obtain encrypted data. Data scrambling technology is a technology that increases the complexity of data through randomization or other methods, making it more difficult to crack. In this step, the security of the encrypted data can be further enhanced by data scrambling technology, ensuring that even if the data is intercepted, it is difficult for the attacker to restore the original data through simple analysis. For example, data scrambling technology can include methods such as randomly inserting noise and rearranging the order of data, making the encrypted data more difficult to be reverse analyzed. In summary, the process of encrypting the data to be encrypted by the encryption strategy to obtain the encrypted data is a multi-level, multi-step comprehensive encryption process. This process not only utilizes advanced cryptographic technologies such as elliptic curve cryptography, bilinear mapping, and supersingular elliptic curves, but also combines polynomial commitment algorithms and zero-knowledge proof technology to ensure the security and integrity of the data during the encryption process. In the application scenario of the automated production line of a manufacturing plant, the effective implementation of this process can not only improve the security of the data, but also ensure the stability and reliability of the system, thereby providing a strong guarantee for the overall security of the industrial control system.

[0042] In a specific embodiment, the encrypted data and the unencrypted portion of the stored data are logically combined to obtain the reorganized structure data, including: Performing a hash operation on the encrypted data using a preset hash function to obtain a hash value of the encrypted data; A preset hash chain structure performs logical combination and hash link processing on the encrypted data hash value and the unencrypted part of the stored data to obtain hash link data; Performing homomorphic encryption on the hash link data to obtain homomorphically encrypted link data; The homomorphically encrypted link data and the encrypted data are structured and organized using a preset tree data structure to obtain tree structured data; Generating a redundant check code for the tree-structured data to obtain the tree-structured data with the redundant check code; The tree-structured data with redundant check codes is subjected to block coding processing based on a preset block coding technology to obtain reorganized structure data.

[0043] Specifically, the process of logically combining the encrypted data and the unencrypted part of the stored data to obtain the reorganized structure data is a multi-step, multi-level complex operation, which is intended to ensure the integrity and security of the data during the reorganization process. First, the encrypted data is hashed by a preset hash function to obtain an encrypted data hash value. A hash function is a function that converts data of any length into a fixed-length output, and is usually used for data integrity verification. In this step, a unique hash value can be generated by performing a hash operation on the encrypted data, and this hash value will be used for subsequent data combination and verification. For example, in an automated production line in a manufacturing plant, encrypted control parameters and log records and other data are generated by hashing to generate hash values, which can be used to verify whether the data has been tampered with during transmission and storage. Next, the preset hash chain structure performs logical combination and hash link processing on the encrypted data hash value and the unencrypted part of the stored data to obtain hash link data. A hash chain is a technology that links multiple data blocks by hash values, which can ensure the order and integrity between data blocks. In this step, the encrypted data hash value and the unencrypted data can be logically combined through the hash chain structure, and hash link data can be generated through hash link processing. For example, suppose the encrypted data hash value of a control parameter is , the unencrypted log record data hash is , a new hash value can be generated through the hash chain structure ,in represents a hash function, Represents a connection operation. The hash link data generated in this way not only contains the information of encrypted data and unencrypted data, but also ensures the order and integrity of the data. Then, the hash link data is homomorphically encrypted to obtain homomorphically encrypted link data. Homomorphic encryption is an encryption technology that allows calculations to be performed directly on encrypted data, and operations such as addition or multiplication can be performed on data without decryption. In this step, by homomorphically encrypting the hash link data, it can be ensured that the data remains encrypted during subsequent processing, thereby further improving the security of the data. For example, the homomorphically encrypted link data generated by homomorphic encryption can be used for subsequent data storage and transmission. Even if the data is intercepted during transmission, the attacker cannot restore the original data through simple calculations. The homomorphically encrypted link data and the encrypted data are structured and organized using a preset tree data structure to obtain tree structured data. The tree data structure is a hierarchical data organization method that can clearly show the relationship and hierarchy between data. In this step, the homomorphically encrypted link data and the encrypted data can be organically organized together through the tree data structure to form a structured data tree. For example, the root node of the tree structure may contain the hash value of the entire data block, and the child nodes may contain the hash value and encrypted data of each data block respectively. The data organized in this way is not only easy to manage and query, but also can quickly verify the integrity and consistency of the data through the tree structure. Redundancy check code is generated for the tree structured data to obtain tree structured data with redundant check code. Redundancy check code is a coding technology for detecting and correcting data errors. Common redundant check codes include parity check code, cyclic redundancy check code (CRC), etc. In this step, by generating redundant check code for tree structured data, the integrity and reliability of data during storage and transmission can be ensured. For example, by generating CRC check code, after the data is written into the storage area of ​​the industrial control chip, the integrity of the data can be verified by the check code to ensure that no error occurs in the data during transmission. The tree structured data with redundant check code is subjected to block coding processing based on the preset block coding technology to obtain reorganized structure data. Block coding technology is a technology for dividing a large data block into multiple small data blocks, which can improve the efficiency and reliability of data processing. In this step, the tree-structured data with redundant check codes can be divided into multiple small data blocks through block coding technology, and each data block can be processed and stored independently. For example, assuming that the tree-structured data has a total of 1MB, it can be divided into 10 100KB data blocks through block coding technology, and each data block contains part of the tree structure and redundant check codes. The data processed in this way is not only convenient for storage and transmission, but also can improve the efficiency of data processing through parallel processing.In summary, the process of logically combining the encrypted data and the unencrypted part of the stored data to obtain the restructured data is a multi-level, multi-step comprehensive operation. This process not only utilizes a variety of technical means such as hash functions, hash chain structures, homomorphic encryption, tree data structures, redundant check codes, and block encoding technology, but also ensures the integrity and security of the data during the reorganization process. In the application scenario of automated production lines in manufacturing plants, the effective implementation of this process can not only improve data security, but also ensure the stability and reliability of the system, thereby providing strong protection for the overall security of the industrial control system.

[0044] In a specific embodiment, writing the reorganized structure data back to the storage area of ​​the target industrial control chip through a preset writing module includes: Performing address mapping on the reorganized structure data by using a preset address mapping algorithm to obtain a mapping address space of the reorganized structure data; Dividing the reorganized structure data into data segments based on the mapping address space to obtain a plurality of data segments; Performing differential encoding processing on each of the data segments to obtain corresponding encoded data segments; Using a preset dynamic scheduling algorithm to perform write scheduling on each of the encoded data segments to obtain a scheduling plan; wherein the scheduling plan includes priority setting and conflict resolution mechanism; Through a preset writing module, the encoded data segment is written back to the storage area of ​​the target industrial control chip based on the scheduling plan and the mapping address space.

[0045] Specifically, the process of writing the reorganized structure data back to the storage area of ​​the target industrial control chip through the preset writing module is a highly complex and technology-intensive operation, which aims to ensure that the data can be safely and efficiently returned to the storage area of ​​the industrial control chip. This process requires not only accurate address mapping and data segmentation, but also efficient differential coding processing and dynamic scheduling algorithms to ensure the accuracy and reliability of data writing. First, the reorganized structure data is address mapped by a preset address mapping algorithm to obtain a mapping address space of the reorganized structure data. The address mapping algorithm is a technology that converts a logical address into a physical address. Through this algorithm, it can be ensured that each data block in the reorganized structure data can be correctly placed in the storage area of ​​the target industrial control chip. For example, in an automated production line of a manufacturing plant, the reorganized structure data may contain multiple data blocks, each of which has a specific storage location. The address mapping algorithm generates corresponding physical addresses based on the logical addresses of these data blocks to form a mapping address space. This address space will be used for subsequent data segmentation and writing operations to ensure that each data segment can be accurately located in the target storage area. Next, the reorganized structure data is segmented based on the mapping address space to obtain multiple data segments. Data segmentation refers to dividing the restructured data into multiple smaller data blocks for subsequent processing and writing operations. In this step, by mapping the address space, the restructured data can be divided into multiple data segments, each of which contains a part of logically continuous data. For example, assuming that the restructured data has a total of 1MB, it can be divided into 10 100KB data segments by data segmentation, and each data segment has a clear start address and end address. The advantage of this division is that it can improve the parallelism and efficiency of data processing, reduce the amount of data written in a single time, and thus reduce the writing time. Then, each of the data segments is differentially encoded to obtain the corresponding encoded data segment. Differential encoding is a coding technology that reduces data redundancy by recording data changes. In this step, by differentially encoding each data segment, the redundancy of data transmission can be reduced and the writing efficiency can be improved. For example, assuming that most of the data in a data segment has not changed, and only a few data have been updated, differential encoding can only record these changed parts instead of transmitting the entire data segment. This can not only save storage space, but also speed up data writing. The data segments after differential coding will contain incremental information, which will be used to update the data in the target storage area during the writing process. The preset dynamic scheduling algorithm is used to schedule the writing of each of the encoded data segments to obtain a scheduling plan. The dynamic scheduling algorithm is an algorithm that dynamically adjusts the execution order of tasks according to the current system status and resource allocation.In this step, a write scheduling plan can be generated for each coded data segment through a dynamic scheduling algorithm, and the plan includes priority setting and conflict resolution mechanism. Priority setting can determine the writing order according to the importance and urgency of the data segment, and the data segment with high importance is written first; the conflict resolution mechanism is used to handle the situation where multiple data segments request to write to the same storage area at the same time to ensure the orderly progress of the write operation. For example, assuming that the data segment of a certain control parameter has the highest priority, the dynamic scheduling algorithm will give priority to this data segment to ensure that it is written to the target storage area as soon as possible. At the same time, if multiple data segments request to write to the same address range, the conflict resolution mechanism will ensure that each data segment can successfully complete the write operation by queuing or retrying. Through a preset write module, the coded data segment is written back to the storage area of ​​the target industrial control chip based on the scheduling plan and the mapped address space. The write module is a software or hardware component specially designed for communicating with the industrial control chip, which can accurately write the coded data segment back to the storage area of ​​the target industrial control chip according to the scheduling plan and the mapped address space. In this step, the write module will write the coded data segment to the corresponding physical address in sequence according to the priority order in the scheduling plan. For example, assuming that a certain data segment in the scheduling plan has the highest priority, the write module will give priority to this data segment and write it to the physical address specified in the mapped address space. During the entire writing process, the write module will also perform real-time monitoring and error detection to ensure the integrity and consistency of the data. If an error occurs during the writing process, the write module will automatically trigger an error handling mechanism, such as retrying the write or recording an error log, to ensure the reliability of data writing. In summary, the process of writing the reorganized structure data back to the storage area of ​​the target industrial control chip through a preset write module is a multi-step, multi-level comprehensive operation. This process not only requires ensuring the correctness and integrity of the data through address mapping algorithms and data segment division, but also requires improving the efficiency and reliability of data writing through differential encoding processing and dynamic scheduling algorithms. In the application scenario of the automated production line of a manufacturing plant, the effective implementation of this process can not only ensure that the data is safely and accurately returned to the storage area of ​​the industrial control chip, but also improve the overall performance and stability of the system, thereby providing a strong guarantee for the data security of the industrial control system.

[0046] The above describes the data encryption method of the industrial control chip in the embodiment of the present invention. The following describes the data encryption device of the industrial control chip in the embodiment of the present invention. Figure 2 , an embodiment of the data encryption device of the industrial control chip in the embodiment of the present invention includes: The scanning module 21 is used to scan and read the storage area in the target industrial control chip through a preset scanning module to obtain the storage data of the target industrial control chip; The identification module 22 is used to identify the importance of the stored data through a preset identification algorithm to obtain data to be encrypted; A selection module 23, configured to analyze the characteristics of the data to be encrypted by using a preset analysis algorithm, and select a corresponding encryption strategy based on the characteristics; The encryption module 24 is used to encrypt the data to be encrypted according to the encryption strategy to obtain encrypted data; A combination module 25, used for performing data logic combination on the encrypted data and the unencrypted part of the stored data to obtain reorganized structure data; The write-back module 26 is used to write the reorganized structure data back to the storage area of ​​the target industrial control chip through a preset write module.

[0047] In this embodiment, for the specific implementation of each unit in the above system embodiment, please refer to the above method embodiment, which will not be repeated here.

[0048] Reference Figure 3 The present invention also provides a computer device in an embodiment, wherein the internal structure of the computer device can be as follows: Figure 3 As shown. The computer device includes a processor, a memory, a display screen, an input device, a network interface and a database connected through a system bus. Among them, the processor designed by the computer is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store the corresponding data in this embodiment. The network interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, the above method is implemented.

[0049] Those skilled in the art will understand that Figure 3 The structure shown in the figure is merely a block diagram of a portion of the structure related to the solution of the present invention, and does not constitute a limitation on the computer device to which the solution of the present invention is applied.

[0050] An embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, the above method is implemented. It can be understood that the computer-readable storage medium in this embodiment can be a volatile readable storage medium or a non-volatile readable storage medium.

[0051] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media provided by the present invention and used in the embodiments may include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in a variety of forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double-speed data rate SDRAM (SSRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM.

[0052] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, device, article or method including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, device, article or method. In the absence of further restrictions, an element defined by the sentence "includes a ..." does not exclude the presence of other identical elements in the process, device, article or method including the element.

[0053] The above description is only a preferred embodiment of the present invention, and does not limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made by using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.

Claims

1. A data encryption method for an industrial control chip, characterized in that: The following steps are involved: Scan and read the storage area in the target industrial control chip through a preset scanning module to obtain the storage data of the target industrial control chip; The importance of the stored data is identified by a preset identification algorithm to obtain data to be encrypted; Analyzing the characteristics of the data to be encrypted by a preset analysis algorithm, and selecting a corresponding encryption strategy based on the characteristics; Encrypting the data to be encrypted using the encryption strategy to obtain encrypted data; Performing data logic combination on the encrypted data and the unencrypted portion of the stored data to obtain restructured data; The reorganized structure data is written back to the storage area of ​​the target industrial control chip through a preset writing module.

2. The data encryption method for industrial control chip according to claim 1, characterized in that: The method of scanning and reading the storage area in the target industrial control chip by a preset scanning module to obtain the storage data of the target industrial control chip includes: Preliminarily scanning and reading the storage area in the target industrial control chip through a preset scanning module to obtain preliminary structural information of the storage area; Based on the preliminary structural information, the storage area is classified into regions to obtain storage partitions and storage partition types corresponding to the storage partitions; wherein the storage area includes a configuration area, a log area, and a user data area; Read each of the storage partitions one by one through a preset read instruction to obtain the original data in the corresponding storage partition; Based on the storage partition type, the original data is formatted and parsed to obtain identifiable data content; Verify whether the identifiable data content is complete through a preset verification algorithm, and if complete, use the identifiable data content as storage data of the target industrial control chip; If it is incomplete, the identifiable data content is repaired using a preset data repair algorithm, and the repaired identifiable data content is used as the storage data of the target industrial control chip.

3. The data encryption method for industrial control chip according to claim 1, characterized in that: The importance of the stored data is identified by a preset identification algorithm to obtain the data to be encrypted, including: Extracting order parameters from the stored data to obtain order parameter features; wherein the order parameter features include access frequency and modification frequency; Calculating the Lyapunov exponent of the order parameter characteristic; wherein the Lyapunov exponent is used to determine the stability of the order parameter; Using bifurcation theory, based on the Lyapunov exponent, critical analysis is performed on the stored data to obtain critical state characteristics of the stored data; wherein the critical state characteristics are important turning point characteristics of the stored data; Performing graph network mapping on the stored data based on the critical state characteristics to obtain a network structure representation; wherein the network structure representation is used to reflect the association and dependency relationship between the stored data; Based on the small-world network algorithm, the importance of the network structure representation is evaluated to obtain a data importance score; The stored data is screened for importance based on the data importance score to obtain data to be encrypted.

4. The data encryption method for industrial control chip according to claim 1, characterized in that: The analyzing the characteristics of the data to be encrypted by a preset analysis algorithm and selecting a corresponding encryption strategy based on the characteristics includes: Perform byte-level analysis on the encrypted data based on a preset data analyzer to obtain byte distribution information; wherein the byte distribution information is the frequency of occurrence of different bytes and the length of continuous occurrence; Determining a byte arrangement based on the byte distribution information; Performing data structure identification on the data to be encrypted based on the byte arrangement to obtain a data structure to be encrypted; By using a preset analysis algorithm, based on the structure of the data to be encrypted, the characteristics of the data to be encrypted are analyzed to obtain the characteristics of the data to be encrypted; The characteristics of the data to be encrypted are mapped with characteristic identifiers in a preset rule mapping table to select a corresponding encryption strategy; wherein the characteristic identifiers and the encryption strategies are in a one-to-one correspondence.

5. The data encryption method for industrial control chip according to claim 1, characterized in that: The step of encrypting the data to be encrypted by using the encryption strategy to obtain encrypted data includes: Based on elliptic curve cryptography, the key is generated for the encrypted data to obtain an elliptic curve key pair; Through bilinear mapping, the elliptic curve key pair and the data to be encrypted are respectively subjected to data mapping operations to obtain corresponding mapping curve keys and mapped data to be encrypted; Fusing the mapping curve key and the mapped data to be encrypted to obtain fused mapping data; Based on a supersingular elliptic curve, performing an isomorphic transformation on the fused mapping data to obtain isomorphic transformation data; Committing the isomorphic transformation data using a preset polynomial commitment algorithm to obtain isomorphic transformation data with polynomial commitment; The isomorphic transformation data with polynomial commitment is verified through zero-knowledge proof technology to obtain the verification result; If the verification result is successful, the isomorphic transformation data with polynomial commitment is encrypted by using a preset data scrambling technology to obtain the encrypted data.

6. The data encryption method for industrial control chip according to claim 1, characterized in that: The step of logically combining the encrypted data and the unencrypted portion of the stored data to obtain restructured data includes: Performing a hash operation on the encrypted data using a preset hash function to obtain a hash value of the encrypted data; A preset hash chain structure performs logical combination and hash link processing on the encrypted data hash value and the unencrypted part of the stored data to obtain hash link data; Performing homomorphic encryption on the hash link data to obtain homomorphically encrypted link data; The homomorphically encrypted link data and the encrypted data are structured and organized using a preset tree data structure to obtain tree structured data; Generating a redundant check code for the tree-structured data to obtain the tree-structured data with the redundant check code; The tree-structured data with redundant check codes is subjected to block coding processing based on a preset block coding technology to obtain reorganized structure data.

7. The data encryption method for industrial control chip according to claim 1, characterized in that: The step of writing the reorganized structure data back to the storage area of ​​the target industrial control chip through a preset writing module includes: Performing address mapping on the reorganized structure data by using a preset address mapping algorithm to obtain a mapping address space of the reorganized structure data; Dividing the reorganized structure data into data segments based on the mapping address space to obtain a plurality of data segments; Performing differential encoding processing on each of the data segments to obtain corresponding encoded data segments; Using a preset dynamic scheduling algorithm to perform write scheduling on each of the encoded data segments to obtain a scheduling plan; wherein the scheduling plan includes priority setting and conflict resolution mechanism; Through a preset writing module, the encoded data segment is written back to the storage area of ​​the target industrial control chip based on the scheduling plan and the mapping address space.

8. A data encryption device for an industrial control chip, characterized in that: include: A scanning module is used to scan and read the storage area in the target industrial control chip through a preset scanning module to obtain the storage data of the target industrial control chip; An identification module, used to identify the importance of the stored data through a preset identification algorithm to obtain data to be encrypted; A selection module, used to analyze the characteristics of the data to be encrypted by using a preset analysis algorithm, and select a corresponding encryption strategy based on the characteristics; An encryption module, used for encrypting the data to be encrypted according to the encryption strategy to obtain encrypted data; A combination module, used for performing data logic combination on the encrypted data and the unencrypted part of the stored data to obtain reorganized structure data; A write-back module is used to write the reorganized structure data back to the storage area of ​​the target industrial control chip through a preset write module.

9. A computer device comprising a memory and a processor, wherein a computer program is stored in the memory, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images