Method and device for remotely controlling local lower computer through scada based on VNC

Abstract

According to the method and equipment for remotely controlling the local lower computer by scada based on the VNC, the VNC technology and the SCADA system are combined, a new mode of remotely supporting maintenance work is realized, technicians do not need to go to various stations for a long distance, and the technicians only need to remotely control the local lower computer in a central control room or any place with network connection. The system can be remotely connected to the lower computers distributed in different areas only when the equipment is shut down, and the remote support maintenance mode greatly improves the technical support efficiency, shortens the fault processing time and reduces the influence of equipment shutdown on gas supply. Meanwhile, the coverage range of remote support is not limited by geographic distance any more, all the gas stations connected to the SCADA system can be covered, it is ensured that each station can obtain professional technical support in time, and therefore the operation stability and reliability of the whole gas industry are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of SCADA system control, and in particular to a method and device for remotely controlling a local lower computer by SCADA based on VNC. Background Art

[0002] As the gas industry is booming, its operation and management are facing many challenges. On the one hand, gas stations are widely distributed in various regions with a large geographical span, which makes the difficulty of on-site management and technical support increase exponentially. The traditional on-site technical support model requires technicians to visit each site in person. However, the number of professional technicians is limited, and it is difficult to meet the on-site technical support needs of all sites. This not only leads to high labor costs, but also may affect the normal operation of equipment and the stability of gas supply due to untimely response. On the other hand, there are many types of equipment used in the gas industry, covering various equipment from production, transportation to distribution, such as compressors, valves, flow meters, etc. These devices often use different operating systems and control systems, which creates the problem of interconnection between heterogeneous systems. The poor compatibility between different systems makes the unified management and maintenance of equipment extremely complicated, increasing operating costs and technical difficulties.

[0003] Under the trend of unattended operation, although the traditional SCADA system can collect data from on-site equipment through the network, users are accustomed to the monitoring mode and operation interface of the lower computer. In order to better help users transition, the VNC function can be implemented through an independent network as a backup plan for SCADA monitoring. When the network between the device and SCADA fails, it can switch to the VNC function. Summary of the invention

[0004] The present invention provides a method, device and storage medium for remotely controlling a local lower computer based on VNC SCADA, which can at least solve one of the technical problems in the background technology.

[0005] To achieve the above object, the present invention adopts the following technical solutions: A method for remotely controlling a local lower computer based on VNC scada, S1, setting VNC to work based on remote frame buffer protocol; S2. After the installation is complete, start the vnc server and set the vnc login account. The account supports read-only and read-write modes. S3. Create a lower-level machine site in the scada system and enter the basic information of the lower-level machine, IP address list and vnc account information; S4. Configure vnc menu permissions, lower computers and vnc accounts according to positions; S5. Log in to the SCADA system, obtain the position information according to the SCADA account, and then obtain the menu authority and data authority through the position information, and display the corresponding interface according to the authority information; S6. Enter the vnc menu, select the lower-level machine site that needs to be remoted, and obtain the IP address list and vnc account information according to the site identifier; S7, the browser obtains the vncView proxy server IP address from the backend server, and the backend server selects a proxy server IP address from multiple proxy server IP addresses according to the least connection strategy; S8. The browser initiates a websocket connection to the vncView proxy server address. If the connection is established successfully, the backend service is notified of the success result and the number of successes of the proxy server address is marked +1. S9, after the browser establishes a websocket connection with the proxy server, the serial number of the lower computer, the vnc account information and the IP address list of the lower computer are passed to the proxy server as parameters; S10, the vncView proxy server determines whether a VNC connection has been established with the lower-level vnc server according to the lower-level machine number, and if a VNC connection has been established, returns that a VNC connection already exists; S11. If the VNC connection is not established, the network conditions of the IP address list are evaluated to select the best IP address; S12, vnc supports the security protocol of the network layer, which can encrypt the network connection to prevent the data from being stolen or tampered with during transmission; therefore, according to the optimal IP address obtained after evaluation, a TLS secure connection is established with the lower-level vnc server, and the lower-level number is used as the key, and the IP address, vnc account information and connection information are stored in the cache as the value; S13, the proxy server transmits the vnc account information to the vnc server of the lower computer, and the vnc server determines whether the account information is correct. If it is correct, the vnc login is successful and a remote desktop session is established. If it is incorrect, a vnc login failure is returned; S14. After successful login, the vnc server determines whether the vnc account permission is read-only or read-write. If it is read-only permission, the user can only open the lower computer monitoring and viewing interface based on VNC, and the configuration interface cannot be entered; S15. If the user has read and write permissions, he can open the lower computer monitoring interface based on VNC, or he can open the configuration interface to perform write operations; S16. If it is read-write permission, when the user opens the configuration interface, the lower computer determines whether the lower computer system has been logged in. If not, the lower computer login interface is opened, and the lower computer user name and password are entered. The lower computer transmits the user name, encrypted password and lower computer number to the SCADA system through the MQTT protocol; S17, Scada system verifies whether the login is successful based on the lower computer account and password, and returns permission information based on the account and lower computer number after successful login; S18. The lower computer obtains the login result and permission information, and the permission information opens the corresponding configuration menu permission.

[0006] Furthermore, if the connection fails in step S8, a retry mechanism is triggered, and the retry strategy is as follows: 1) Do not change the proxy server address and retry for a maximum of 2 times; 2) If the retry fails twice, the backend service will be notified of the failure result and the failed address will be marked with the number of failures + 1. If the number of failures is greater than a certain threshold, the address will be removed; 3) After excluding the address that failed to connect this time, the backend service selects the proxy server IP address based on the least connection strategy and returns it to the browser; 4) The browser obtains the new proxy server address and initiates a websocket connection. If the connection fails, it will retry up to 2 times. If the retry fails, the user will be reminded to try again later or contact system operation and maintenance.

[0007] Further, step S1 includes the server side continuously capturing and encoding screen image information, and transmitting the encoded data in a compressed form to the client side via the network; After receiving, the client decompresses and decodes the image and displays it on the screen; When the client user operates, the operation information is captured and encapsulated into a specific format and sent back to the server. The server parses and simulates the operation, and then captures the screen change image data again and sends it to the client. This cycle realizes real-time remote control and interaction. Based on universal network protocols and standardized encoding and decoding methods, it can run on a variety of operating systems; If the lower computer does not have a vnc server installed, you can select the corresponding vnc server to install according to the lower computer operating system.

[0008] Furthermore, the evaluation formula in step S11 is as follows:

[0009] Score is the evaluation score of a certain IP; Cs is the connectivity score, which is scored according to the response time of the Ping command; Ls is the latency. Since the smaller the latency, the better, its reciprocal 1 / latency is used for scoring; PLR is the packet loss rate. Since the smaller the packet loss rate, the better, 1-packet loss rate is used for scoring; WT1 is the connectivity weight; WT2 is the latency weight; WT3 is the packet loss rate weight.

[0010] Furthermore, in step S13, multiple security mechanisms such as security protocols and identity authentication mechanisms are used to ensure data security.

[0011] Furthermore, it also includes S19, the lower computer records the user's write operation log, and reports the operation log to the SCADA system through the MQTT protocol to facilitate problem tracking and auditing.

[0012] On the other hand, the present invention further discloses a computer-readable storage medium storing a computer program, wherein when the computer program is executed by a processor, the processor executes the steps of the above method.

[0013] On the other hand, the present invention further discloses a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of the above method.

[0014] It can be seen from the above technical solutions that the method and system of remotely controlling the local lower computer based on VNC SCADA of the present invention realizes a new mode of remote support maintenance work by combining VNC technology with SCADA system. Technicians do not need to travel long distances to various sites. They can remotely connect to the lower computers distributed in different regions in the central control room or any place with network connection. This remote support and maintenance method greatly improves the efficiency of technical support, shortens the troubleshooting time, and reduces the impact of equipment downtime on gas supply. At the same time, the coverage of remote support is no longer limited by geographical distance, and can cover all gas sites connected to the SCADA system, ensuring that each site can obtain professional technical support in a timely manner, thereby improving the operational stability and reliability of the entire gas industry. At the same time, the cross-platform characteristics of VNC can support the establishment of stable and efficient connections and operation channels between the SCADA system and different lower computers. Whether it is Windows, Linux or other operating systems, they can be connected and operated with each other. A solution is provided to solve the interconnection problem of heterogeneous systems, which enables gas companies to uniformly monitor and manage the entire operating system to cope with the complex operating environment of the gas industry.

[0015] Specifically, compared with the prior art, the beneficial effects are as follows: Improvement of technical support efficiency and coverage: When the local station control system fails, the local station control system can be accessed remotely through the present invention to provide remote support operations, which greatly improves the efficiency of technical support, shortens the fault handling time, and reduces the impact of equipment downtime on gas supply. Optimization of technical personnel resource allocation: Due to the different development conditions and scales of gas companies in various regions, technical resources are sufficient in some areas, while technical resources are insufficient in some remote areas. Through the remote access of the present invention, experienced technical experts can conveniently provide remote technical support and give full play to their professional advantages. Support heterogeneous system access and make full use of old: Some old local station control or equipment cannot be accessed to the scada system due to technical incompatibility or lack of after-sales support. Through the cross-platform characteristics of the present invention, remote centralized monitoring can be achieved through remote access, reducing the cost and risk of system upgrades and transformations. Emergency standby monitoring: The present invention uses an additional network line. When the network between the local device and the scada system fails or jitters, the present invention switches to VNC remote access to the lower computer for temporary monitoring. Unified authority management (optional module): Traditional lower computer account authority is independently managed, and personnel need to be reconfigured when they are rotated and transferred, and on-site operation is required, which is extremely cumbersome. The present invention integrates the accounts and permissions of the local station control system into SCADA centralized management, reducing the enterprise operation and management costs and risks. BRIEF DESCRIPTION OF THE DRAWINGS Figure 1 It is a flowchart of the present invention. DETAILED DESCRIPTION

[0016] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments.

[0017] like Figure 1 As shown, the method of remotely controlling a local lower computer based on scada of VNC described in this embodiment includes the following steps: VNC works based on the Remote Frame Buffer protocol. The server continuously captures and encodes screen image information, and transmits the encoded data in compressed form to the client through the network. After receiving, the client decompresses and decodes, and displays the screen image. When the client user operates, the operation information is captured and encapsulated into a specific format and sent back to the server. The server parses and simulates the operation, and then captures the screen change image data again and sends it to the client. This cycle realizes real-time remote control and interaction. It does not rely on a specific operating system hardware architecture. It is based on general network protocols and standardized encoding and decoding methods and can run on multiple operating systems. Therefore, if the lower computer does not have a vnc server installed, you can select the corresponding vnc server installation according to the lower computer operating system. 2. After the installation is complete, start the vnc server and set the vnc login account. The account supports both read-only and read-write modes. 3. Create a lower-level machine site in the scada system and enter the basic information of the lower-level machine, IP address list and vnc account information 4. Configure vnc menu permissions, lower computers and vnc accounts according to positions 5. Log in to the scada system, obtain job information based on the scada account, and then obtain menu permissions and data permissions through the job information, and display the corresponding interface based on the permission information 6. Enter the vnc menu, select the remote lower-level machine site, and obtain the IP address list and vnc account information according to the site identifier 7. The browser obtains the vncView proxy server IP address from the backend server, and the backend server selects a proxy server IP address from multiple proxy server IP addresses based on the least connection strategy 8. The browser initiates a websocket connection to the vncView proxy server address. If the connection is established successfully, the backend service is notified of the success result and the number of successful connections of the proxy server address is marked +1. If the connection fails, the retry mechanism is triggered. The retry strategy is as follows: 1) Do not change the proxy server address and retry, up to 2 times 2) If the retries fail twice, the backend service will be notified of the failure result and the failed address will be marked with the number of failures + 1. If the number of failures is greater than a certain threshold, the address will be removed.

[0018] 3) After excluding the address that failed to connect this time, the backend service selects the proxy server IP address based on the least connection strategy and returns it to the browser 4) The browser obtains the new proxy server address and initiates a websocket connection. If the connection fails, it will retry up to 2 times. If the retry fails, the user will be reminded to try again later or contact the system operation and maintenance. 9. After the browser establishes a websocket connection with the proxy server, the slave machine number, vnc account information and the slave machine IP address list are passed to the proxy server as parameters.

[0019] 10. The vncView proxy server determines whether a VNC connection has been established with the lower-level vnc server according to the lower-level machine number. If a VNC connection has been established, it returns that a VNC connection already exists.

[0020] 11. If the VNC connection is not established, evaluate the network conditions of the IP address list and select the best IP address. The evaluation formula is as follows:

[0021] Score is the evaluation score of a certain IP; Cs is the connectivity score, which is scored according to the response time of the Ping command; Ls is the latency. Since the smaller the latency, the better, its reciprocal (1 / latency) is used for scoring; PLR is the packet loss rate. Since the smaller the packet loss rate, the better, (1-packet loss rate) is used for scoring; WT1 is the connectivity weight; WT2 is the latency weight; WT3 is the packet loss rate weight.

[0022] VNC supports the security protocol of the network layer, which can encrypt the network connection to prevent the data from being stolen or tampered with during transmission. Therefore, according to the optimal IP address obtained after evaluation, a TLS secure connection is established with the lower-level VNC server, and the lower-level machine number is used as the key, and the IP address, VNC account information and connection information are stored in the cache as the value. The proxy server transmits the VNC account information to the lower-level VNC server, and the VNC server determines whether the account information is correct. If it is correct, the VNC login is successful and a remote desktop session is established. If it is incorrect, the VNC login failure is returned. Multiple security mechanisms such as security protocols and identity authentication mechanisms are used to ensure the security of data. After successful login, the VNC server determines whether the VNC account permission is read-only or read-write. If it is read-only permission, the user can only open the lower-level monitoring and viewing interface based on VNC, and the configuration interface cannot be entered. If it is read-write permission, the user can open the lower-level monitoring and viewing interface based on VNC, and can also open the configuration interface for write operations. 16. If it is read-write permission, when the user opens the configuration interface, the lower computer determines whether he has logged in to the lower computer system. If not, the lower computer login interface is opened and the lower computer user name and password are entered. The lower computer transmits the user name, encrypted password and lower computer number to the SCADA system through the MQTT protocol.

[0023] 17. The Scada system verifies whether the login is successful based on the lower machine account and password. After successful login, it returns the permission information based on the account and lower machine number.

[0024] 18. The lower computer obtains the login result and permission information, and the permission information opens the corresponding configuration menu permissions.

[0025] 19. The lower computer records the user's operation log and reports the operation log to the SCADA system through the MQTT protocol to facilitate problem tracking and auditing.

[0026] The method and system of remotely controlling a local lower computer based on VNC SCADA of the present invention realizes a new mode of remote support and maintenance work by combining VNC technology with SCADA system. Technical personnel do not need to travel long distances to various sites. They can remotely connect to lower computers distributed in different regions in the central control room or any place with network connection. This remote support and maintenance mode greatly improves the efficiency of technical support, shortens the troubleshooting time, and reduces the impact of equipment downtime on gas supply. At the same time, the coverage of remote support is no longer limited by geographical distance, and can cover all gas sites connected to the SCADA system, ensuring that each site can obtain professional technical support in a timely manner, thereby improving the operational stability and reliability of the entire gas industry. At the same time, the cross-platform characteristics of VNC can support the establishment of stable and efficient connections and operation channels between the SCADA system and different lower computers. Whether it is Windows, Linux or other operating systems, they can be connected and operated with each other. A solution is provided to solve the interconnection problem of heterogeneous systems, which enables gas companies to uniformly monitor and manage the entire operating system to cope with the complex operating environment of the gas industry.

[0027] On the other hand, the present invention further discloses a computer-readable storage medium storing a computer program, wherein when the computer program is executed by a processor, the processor executes the steps of the above method.

[0028] On the other hand, the present invention further discloses a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of the above method.

[0029] In another embodiment provided by the present application, a computer program product including instructions is also provided, which, when executed on a computer, enables the computer to execute any of the VNC-based scada methods for remotely controlling a local lower computer in the above embodiments.

[0030] It is understandable that the system, device and storage medium provided in the embodiments of the present invention correspond to the method provided in the embodiments of the present invention, and the explanation, examples and beneficial effects of the relevant contents can refer to the corresponding parts in the above methods.

[0031] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions may be transmitted from a website site, a computer, a server or a data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium may be any available medium that a computer can access or a data storage device such as a server or a data center that includes one or more available media integrated. The available medium may be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid-state drive Solid State Disk (SSD)), etc.

[0032] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0033] Each embodiment in this specification is described in a related manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0034] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for remotely controlling a local lower computer using scada based on VNC, characterized in that: The following steps are included: S1. Set VNC to work based on remote frame buffer protocol; S2. After the installation is complete, start the vnc server and set the vnc login account. The account supports read-only and read-write modes. S3. Create a lower-level machine site in the scada system and enter the basic information of the lower-level machine, IP address list and vnc account information; S4. Configure vnc menu permissions, lower computers and vnc accounts according to positions; S5. Log in to the SCADA system, obtain the position information according to the SCADA account, and then obtain the menu authority and data authority through the position information, and display the corresponding interface according to the authority information; S6. Enter the vnc menu, select the lower-level machine site that needs to be remoted, and obtain the IP address list and vnc account information according to the site identifier; S7, the browser obtains the vncView proxy server IP address from the backend server, and the backend server selects a proxy server IP address from multiple proxy server IP addresses according to the least connection strategy; S8. The browser initiates a websocket connection to the vncView proxy server address. If the connection is established successfully, the backend service is notified of the success result and the number of successes of the proxy server address is marked +1. S9, after the browser establishes a websocket connection with the proxy server, the serial number of the lower computer, the vnc account information and the IP address list of the lower computer are passed to the proxy server as parameters; S10, the vncView proxy server determines whether a VNC connection has been established with the lower-level vnc server according to the lower-level machine number, and if a VNC connection has been established, returns that a VNC connection already exists; S11. If the VNC connection is not established, the network conditions of the IP address list are evaluated to select the best IP address; S12, vnc supports the security protocol of the network layer, which can encrypt the network connection to prevent the data from being stolen or tampered with during transmission; therefore, according to the optimal IP address obtained after evaluation, a TLS secure connection is established with the lower-level vnc server, and the lower-level number is used as the key, and the IP address, vnc account information and connection information are stored in the cache as the value; S13, the proxy server transmits the vnc account information to the vnc server of the lower computer, and the vnc server determines whether the account information is correct. If it is correct, the vnc login is successful and a remote desktop session is established. If it is incorrect, a vnc login failure is returned; S14. After successful login, the vnc server determines whether the vnc account permission is read-only or read-write. If it is read-only permission, the user can only open the lower computer monitoring and viewing interface based on VNC, and the configuration interface cannot be entered; S15. If the user has read and write permissions, he can open the lower computer monitoring interface based on VNC, or he can open the configuration interface to perform write operations; S16. If it is read-write permission, when the user opens the configuration interface, the lower computer determines whether the lower computer system has been logged in. If not, the lower computer login interface is opened, and the lower computer user name and password are entered. The lower computer transmits the user name, encrypted password and lower computer number to the SCADA system through the MQTT protocol; S17, Scada system verifies whether the login is successful based on the lower computer account and password, and returns permission information based on the account and lower computer number after successful login; S18. The lower computer obtains the login result and permission information, and the permission information opens the corresponding configuration menu permission.

2. The method of remotely controlling a local lower computer based on VNC scada according to claim 1, characterized in that: If the connection fails in step S8, a retry mechanism is triggered. The retry strategy is as follows: 1) Do not change the proxy server address and retry for a maximum of 2 times; 2) If the retry fails twice, the backend service will be notified of the failure result and the failed address will be marked with the number of failures + 1. If the number of failures is greater than a certain threshold, the address will be removed; 3) After excluding the address that failed to connect this time, the backend service selects the proxy server IP address based on the least connection strategy and returns it to the browser; 4) The browser obtains the new proxy server address and initiates a websocket connection. If the connection fails, it will retry up to 2 times. If the retry fails, the user will be reminded to try again later or contact system operation and maintenance.

3. The method of remotely controlling a local slave computer based on VNC scada according to claim 1, characterized in that: Step S1 includes the server continuously capturing and encoding screen image information, and transmitting the encoded data in a compressed form to the client via the network; After receiving, the client decompresses and decodes the image and displays it on the screen; When the client user operates, the operation information is captured and encapsulated into a specific format and sent back to the server. The server parses and simulates the operation, and then captures the screen change image data again and sends it to the client. This cycle realizes real-time remote control and interaction. Based on universal network protocols and standardized encoding and decoding methods, it can run on a variety of operating systems; If the lower computer does not have a vnc server installed, you can select the corresponding vnc server to install according to the lower computer operating system.

4. The method of remotely controlling a local lower computer based on VNC scada according to claim 1, characterized in that: The evaluation formula in step S11 is as follows: Score is the evaluation score of a certain IP; Cs is the connectivity score, which is scored based on the response time of the Ping command. Ls is the latency. Since the smaller the latency, the better, its reciprocal is used: 1 / latency, for scoring. PLR is the packet loss rate. Since the smaller the packet loss rate, the better, 1-packet loss rate is used for scoring; WT1 is the connectivity weight; WT2 is the delay weight; WT3 is the packet loss rate weight.

5. The method of remotely controlling a local lower computer based on VNC scada according to claim 1, characterized in that: In step S13, multiple security mechanisms such as security protocols and identity authentication mechanisms are used to ensure data security.

6. The method of remotely controlling a local lower computer based on VNC scada according to claim 1, characterized in that: It also includes S19 and the lower computer to record the user's write operation log, and report the operation log to the SCADA system through the MQTT protocol to facilitate problem tracking and auditing.

7. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that: When the computer program is executed by the processor, the processor is caused to perform the steps of the method according to any one of claims 1 to 6.

Images