Method and device for remotely controlling a local slave computer of a SCADA based on VNC

Abstract

A method and device for remotely controlling a local slave computer based on VNC in a SCADA system. By combining VNC technology with the SCADA system, a new mode of remote support and maintenance work is achieved. Technicians do not need to travel long distances to each site. They can remotely connect to slave computers distributed in different regions just in the central control room or any place with a network connection. This remote support and maintenance method greatly improves the efficiency of technical support, shortens the fault handling time, and reduces the impact of equipment downtime on gas supply. At the same time, the coverage of remote support is no longer limited by geographical distance and can cover all gas stations connected to the SCADA system, ensuring that each station can obtain professional technical support in a timely manner, thus improving the operational stability and reliability of the entire gas industry.

Description

Technical Field

[0001] The present invention relates to the technical field of SCADA system control, and particularly relates to a method and device for remotely controlling a local slave computer based on VNC in SCADA. Background Art

[0002] Today, with the booming development of the gas industry, its operation and management face many challenges. On the one hand, gas stations are widely distributed in various regions with a large geographical span, which exponentially increases the difficulty of on-site management and technical support. The traditional on-site technical support mode requires technicians to visit each station in person. However, the number of professional technicians is limited and it is difficult to meet the on-site technical support needs of all stations. This not only results in high labor costs but also may affect the normal operation of equipment and the stability of gas supply due to untimely response. On the other hand, there are a wide variety of equipment types used in the gas industry, covering various equipment in all links from production, transportation to distribution, such as compressors, valves, flow meters, etc. These devices often use different operating systems and control systems, which poses a problem of interconnection between heterogeneous systems. Poor compatibility between different systems makes the unified management and maintenance of equipment extremely complex, increasing operation costs and technical difficulties.

[0003] In the trend of unattended operation, although the traditional SCADA system can collect data of on-site equipment through the network, users are accustomed to the monitoring mode and operation interface of the slave computer. To better help users transition, and at the same time, the VNC function can be implemented through an independent network. As a backup solution for SCADA monitoring, when the network between the equipment and SCADA fails, the VNC function can be switched to. Summary of the Invention

[0004] A method, device and storage medium for remotely controlling a local slave computer based on VNC in SCADA proposed by the present invention can at least solve one of the technical problems in the background art.

[0005] To achieve the above object, the present invention adopts the following technical solutions:

[0006] A method for remotely controlling a local slave computer based on VNC in SCADA. S1: Set VNC to work based on the Remote Frame Buffer protocol;

[0007] S2: After installation, start the vnc server and set the vnc login account, and the account supports two modes: read-only and read-write;

[0008] S3: Create a slave computer site in the SCADA system and enter the basic information of the slave computer, the IP address list, and the vnc account information;

[0009] S4. Configure the vnc menu permissions, slave computer, and vnc account according to the position.

[0010] S5. Log in to the scada system, obtain the position information according to the scada account, then obtain the menu permissions and data permissions through the position information, and display the corresponding interface according to the permission information.

[0011] S6. Enter the vnc menu, select the slave computer site to be remotely controlled, and obtain the IP address list and vnc account information according to the site identifier.

[0012] S7. The browser obtains the vncView proxy server IP address from the backend server, and the backend server selects a proxy server IP address from multiple proxy server IP addresses according to the least connection strategy.

[0013] S8. The browser initiates a websocket connection to the vncView proxy server address. If the connection is successfully established, it notifies the backend service of the successful result and marks the successful count of the proxy server address +1.

[0014] S9. After the browser establishes a websocket connection with the proxy server, it passes the slave computer number, vnc account information, and the IP address list of the slave computer to the proxy server as parameters.

[0015] S10. The vncView proxy server determines whether a VNC connection has been established with the slave computer vnc server according to the slave computer number. If a VNC connection has been established, it returns that a VNC connection already exists.

[0016] S11. If a VNC connection has not been established, it evaluates the network conditions of the IP address list and selects the optimal IP address.

[0017] S12. Vnc supports the security protocol at the network layer, which can encrypt network connections to prevent data from being stolen or tampered with during transmission. Therefore, a TLS secure connection is established with the slave computer vnc server according to the optimal IP address obtained after evaluation, and the slave computer number is used as the key, and the IP address, vnc account information, and connection information are stored in the cache as the value.

[0018] S13. The proxy server passes the vnc account information to the vnc server of the slave computer. The vnc server determines whether the account information is correct. If it is correct, the vnc login is successful and a remote desktop session is established. If it is incorrect, it returns that the vnc login fails.

[0019] S14. After successful login, the VNC server determines whether the VNC account permission is read-only or read-write. If it is read-only permission, the user can only open the monitoring and viewing interface of the lower-level machine based on VNC, and cannot enter the configuration interface.

[0020] S15. If it is read-write permission, the user can open the monitoring and viewing interface of the lower-level machine based on VNC and can also open the configuration interface for write operations.

[0021] S16. If it is read-write permission, when the user opens the configuration interface, the lower-level machine determines whether it has logged in to the lower-level machine system. If not, it opens the lower-level machine login interface, and the user enters the lower-level machine username and password. The lower-level machine sends the username, encrypted password, and lower-level machine number to the SCADA system through the MQTT protocol.

[0022] S17. The SCADA system verifies whether the login is successful based on the lower-level machine account password. After successful login, it returns the permission information according to the account and the lower-level machine number.

[0023] S18. The lower-level machine obtains the login result and permission information, and opens the corresponding configuration menu permission according to the permission information.

[0024] Furthermore, if the connection fails in step S8, a retry mechanism is triggered, and the retry policy is as follows:

[0025] 1) Without switching the proxy server address, retry, with a maximum of 2 retries.

[0026] 2) If both retries fail, notify the backend service of the failure result, mark the failure count of the failed address +1. If the failure count is greater than a certain threshold, exclude the address.

[0027] 3) After the backend service excludes the address of the current connection failure, it selects the proxy server IP address according to the least connection strategy and returns it to the browser.

[0028] 4) The browser obtains the new proxy server address and initiates a WebSocket connection. If the connection fails, retry up to 2 times. After the retry fails, remind the user to try again later or contact the system operation and maintenance.

[0029] Furthermore, step S1 includes the server continuously capturing screen image information and encoding it, and transmitting the encoded data to the client in a compressed form through the network.

[0030] The client decompresses and decodes the received data and displays the screen image.

[0031] When the client user operates, the operation information is captured and encapsulated into a specific format and sent back to the server side. The server side parses and simulates the operation, and then captures the screen change image data again and sends it to the client side. Such a cycle realizes real-time remote control and interaction;

[0032] Based on the general network protocol and standardized encoding and decoding methods, it can run on multiple operating systems;

[0033] If the lower computer does not install the vnc server, the corresponding vnc server can be selected and installed according to the operating system of the lower computer.

[0034] Further, the evaluation formula in step S11 is as follows:

[0035]

[0036] Score is the evaluation score of a certain IP; Cs is the connectivity score, which is evaluated according to the response time of the Ping command; Ls is the delay. Since the smaller the delay, the better, its reciprocal: 1 / delay, is used for evaluation; PLR is the packet loss rate. Since the smaller the packet loss rate, the better, 1 - packet loss rate is used for evaluation; WT1 is the connectivity weight; WT2 is the delay weight; WT3 is the packet loss rate weight.

[0037] Further, in step S13, multiple security mechanisms such as security protocols and authentication mechanisms are adopted to ensure the security of data.

[0038] Further, it also includes S19. The lower computer records the user's write operation logs and reports the operation logs to the scada system through the mqtt protocol, which is convenient for problem tracking and auditing.

[0039] On the other hand, the present invention also discloses a computer-readable storage medium storing a computer program. When the computer program is executed by a processor, the processor is caused to execute the steps of the above method.

[0040] On yet another aspect, the present invention also discloses a computer device including a memory and a processor. The memory stores a computer program. When the computer program is executed by the processor, the processor is caused to execute the steps of the above method.

[0041] As can be seen from the above technical solutions, the method and system for remotely controlling a local slave computer based on VNC in the present invention realizes a new mode of remote support and maintenance work by combining VNC technology with the SCADA system. Technicians do not need to travel long distances to each site. They can remotely connect to the slave computers distributed in different regions just in the central control room or any place with network connection. This remote support and maintenance method greatly improves the efficiency of technical support, shortens the fault handling time, and reduces the impact of equipment downtime on gas supply. At the same time, the coverage of remote support is no longer limited by geographical distance and can cover all gas sites connected to the SCADA system, ensuring that each site can obtain professional technical support in a timely manner, thus improving the operation stability and reliability of the entire gas industry. At the same time, the cross-platform feature of VNC can support the establishment of a stable and efficient connection and operation channel between the SCADA system and different slave computers. Whether it is Windows, Linux or other operating systems, they can be connected and operated with each other. It provides a solution to the problem of interconnection of heterogeneous systems, which enables gas enterprises to uniformly monitor and manage the entire operation system to cope with the complex operation environment of the gas industry.

[0042] Specifically, compared with the prior art, the beneficial effects are as follows:

[0043] Improvement in technical support efficiency and coverage: When the local station control system fails, remotely access the local station control system through the present invention to provide remote support operations, which greatly improves the efficiency of technical support, shortens the fault handling time, and reduces the impact of equipment downtime on gas supply. Optimization of technical personnel resource allocation: Due to the different development situations and scales of gas companies in different regions, the technical resources in some areas are sufficient, while those in some remote areas are insufficient. Through remote access of the present invention, experienced technical experts can conveniently provide remote technical support and give full play to their professional advantages. Support for heterogeneous system access and full utilization of existing resources: Some old local station controls or equipment cannot be connected to the SCADA system due to technical incompatibility or lack of after-sales support. Through the cross-platform feature of the present invention, remote centralized monitoring can be achieved through remote access, reducing the cost and risk of system upgrade and transformation. Emergency backup monitoring: The present invention uses an additional network line. When the network between the local device and the SCADA system fails or jitters, switch to VNC remote access to the slave computer for temporary monitoring through the present invention. Unified permission management (optional module): The account permissions of traditional slave computers are independently managed. When personnel rotate and transfer, reconfiguration is required and on-site operation is extremely cumbersome. The present invention centrally manages the accounts and permissions of the local station control system in the SCADA system, reducing the operation and management costs and risks of the enterprise. Brief Description of the Drawings

[0044] Figure 1This is the flow chart of the present invention. Detailed implementation manners

[0045] To make the objectives, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Apparently, the described embodiments are some but not all of the embodiments of the present invention.

[0046] As Figure 1 shown, the method for remotely controlling a local slave computer based on VNC in this embodiment includes the following steps.

[0047] VNC works based on the Remote Frame Buffer protocol. The server continuously captures screen image information and encodes it, and transmits the encoded data in a compressed form to the client through the network. After receiving, the client decompresses and decodes it to display the screen image. When the client user operates, the operation information is captured and encapsulated into a specific format and sent back to the server. The server parses and simulates the operation, and then captures the screen change image data again and sends it to the client. In this way, real-time remote control and interaction are achieved through such a cycle. It does not depend on a specific operating system hardware architecture, and is based on a general network protocol and standardized encoding and decoding methods, and can run on multiple operating systems. Therefore, if the slave computer does not install a VNC server, the corresponding VNC server can be selected and installed according to the operating system of the slave computer. 2. After the installation is completed, start the VNC server and set the VNC login account. The account supports two modes: read-only and read-write.

[0048] 3. Create a slave computer site in the SCADA system, and enter the basic information of the slave computer, the IP address list, and the VNC account information.

[0049] 4. Configure the VNC menu permissions, the slave computer, and the VNC account according to the positions.

[0050] 5. Log in to the SCADA system, obtain the position information according to the SCADA account, then obtain the menu permissions and data permissions through the position information, and display the corresponding interface according to the permission information.

[0051] 6. Enter the VNC menu, select the slave computer site to be remotely controlled, and obtain the IP address list and the VNC account information according to the site identifier.

[0052] 7. The browser obtains the IP address of the VNCView proxy server from the backend server, and the backend server selects a proxy server IP address from multiple proxy server IP addresses according to the least connection strategy.

[0053] 8. The browser initiates a WebSocket connection to the vncView proxy server address. If the connection is successfully established, it notifies the backend service of the successful result and marks the success count of this proxy server address +1. If the connection fails, it triggers a retry mechanism with the following retry strategy:

[0054] 1) Without switching the proxy server address, retry up to 2 times.

[0055] 2) If both retries fail, it notifies the backend service of the failure result and marks the failure count of this failed address +1. If the failure count is greater than a certain threshold, this address is excluded.

[0056] 3) After the backend service excludes the address that failed this connection, it selects a proxy server IP address according to the least connection strategy and returns it to the browser.

[0057] 4) The browser obtains the new proxy server address and initiates a WebSocket connection. If the connection fails, it retries up to 2 times. After the retry fails, it reminds the user to try again later or contact the system operation and maintenance.

[0058] 9. After the browser establishes a WebSocket connection with the proxy server, it passes the slave unit number, vnc account information, and the list of slave unit IP addresses as parameters to the proxy server.

[0059] 10. The vncView proxy server determines whether a VNC connection has been established with the slave unit vnc server according to the slave unit number. If a VNC connection has been established, it returns that there is an existing VNC connection.

[0060] 11. If a VNC connection has not been established, it evaluates the network conditions of the IP address list and selects the optimal IP address. The evaluation formula is as follows:

[0061]

[0062] Score is the evaluation score of a certain IP; Cs is the connectivity score, which is scored according to the response time of the Ping command; Ls is the latency. Since the smaller the latency, the better, its reciprocal (1 / latency) is used for scoring; PLR is the packet loss rate. Since the smaller the packet loss rate, the better, (1 - packet loss rate) is used for scoring; WT1 is the connectivity weight; WT2 is the latency weight; WT3 is the packet loss rate weight.

[0063] VNC supports security protocols at the network layer, which can encrypt network connections to prevent data from being stolen or tampered with during transmission. Therefore, a TLS secure connection is established with the lower computer's VNC server based on the optimal IP address obtained after evaluation, and the lower computer number is used as the key, while the IP address, VNC account information, and connection information are stored in the cache as the value. The proxy server transmits the VNC account information to the VNC server of the lower computer. The VNC server determines whether the account information is correct. If it is correct, the VNC login is successful, and a remote desktop session is established. If it is incorrect, a VNC login failure is returned. Multiple security mechanisms such as security protocols and authentication mechanisms are used to ensure data security. After a successful login, the VNC server determines whether the VNC account permission is read-only or read-write. If it is read-only permission, the user can only open the monitoring and viewing interface of the lower computer based on VNC, and cannot enter the configuration interface. If it is read-write permission, the user can open the monitoring and viewing interface of the lower computer based on VNC and can also open the configuration interface for write operations. 16. If it is read-write permission, when the user opens the configuration interface, the lower computer determines whether it has logged in to the lower computer system. If not, the lower computer login interface is opened, and the lower computer username and password are entered. The lower computer transmits the username, encrypted password, and lower computer number to the SCADA system through the MQTT protocol.

[0064] 17. The SCADA system verifies whether the login is successful based on the lower computer account password. After a successful login, it returns the permission information according to the account and the lower computer number.

[0065] 18. The lower computer obtains the login result and permission information and opens the corresponding configuration menu permissions according to the permission information.

[0066] 19. The lower computer records the user's write operation logs and reports the operation logs to the SCADA system through the MQTT protocol for easy problem tracking and auditing.

[0067] The method and system for remotely controlling a local slave computer based on VNC in the present invention realizes a new mode of remote support and maintenance work by combining VNC technology with the SCADA system. Technicians do not need to travel long distances to each site. They can remotely connect to the slave computers distributed in different regions just in the central control room or any place with network connection. This remote support and maintenance method greatly improves the efficiency of technical support, shortens the fault handling time, and reduces the impact of equipment downtime on gas supply. At the same time, the coverage of remote support is no longer limited by geographical distance and can cover all gas sites connected to the SCADA system, ensuring that each site can obtain professional technical support in a timely manner, thus improving the operation stability and reliability of the entire gas industry. At the same time, the cross-platform feature of VNC can support the establishment of a stable and efficient connection and operation channel between the SCADA system and different slave computers. Whether it is Windows, Linux or other operating systems, they can be connected and operated with each other. It provides a solution to the problem of interconnection of heterogeneous systems, which enables gas enterprises to uniformly monitor and manage the entire operation system to cope with the complex operation environment of the gas industry.

[0068] In another aspect, the present invention also discloses a computer-readable storage medium storing a computer program, which when executed by a processor causes the processor to execute the steps of the above method.

[0069] In still another aspect, the present invention also discloses a computer device including a memory and a processor, where the memory stores a computer program, and when the computer program is executed by the processor, it causes the processor to execute the steps of the above method.

[0070] In another embodiment provided by the present application, there is also provided a computer program product containing instructions, which when running on a computer causes the computer to execute any of the methods for remotely controlling a local slave computer based on VNC in the above embodiments.

[0071] It can be understood that the system, device and storage medium provided by the embodiments of the present invention correspond to the method provided by the embodiments of the present invention, and the explanations, examples and beneficial effects of the relevant content can refer to the corresponding parts in the above method.

[0072] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the processes or functions described in the embodiments of the present application are generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center by wire (such as coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (such as infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer, or a data storage device such as a server or data center that includes one or more integrated available media. The available medium can be a magnetic medium (such as a floppy disk, hard disk, magnetic tape), an optical medium (such as a DVD), or a semiconductor medium (such as a solid state disk (SSD)).

[0073] It should be noted that, in this document, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the term "comprising", "including" or any other variation thereof is intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article or device. Without further limitation, an element defined by the statement "comprising a..." does not exclude the existence of additional identical elements in the process, method, article or device comprising the element.

[0074] Each embodiment in this specification is described in a related manner. The same or similar parts among the embodiments can be referred to each other, and the differences between each embodiment and other embodiments are emphasized. In particular, for system embodiments, since they are basically similar to method embodiments, the description is relatively simple, and the relevant parts can be referred to the description of the method embodiments.

[0075] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: they can still modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements for some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for remotely controlling a local slave computer based on VNC in SCADA, characterized in that, It includes the following steps: S1. Set VNC to work based on the Remote Frame Buffer protocol; S2. After installation, start the vnc server and set the VNC login account, which supports two modes: read-only and read-write; S3. Create a slave station in the SCADA system and enter the basic information of the slave station, the IP address list, and the VNC account information; S4. Configure the VNC menu permissions, the slave station, and the VNC account according to the position; S5. Log in to the SCADA system, obtain the position information according to the SCADA account, then obtain the menu permissions and data permissions through the position information, and display the corresponding interface according to the permission information; S6. Enter the VNC menu, select the slave station to be remotely controlled, and obtain the IP address list and VNC account information according to the station identifier; S7. The browser obtains the vncView proxy server IP address from the backend server, and the backend server selects a proxy server IP address from multiple proxy server IP addresses according to the least connection strategy; S8. The browser initiates a websocket connection to the vncView proxy server IP address. If the connection is successfully established, notify the backend service of the successful result and mark the success count of the proxy server IP address +1; S9. After the browser establishes a websocket connection with the vncView proxy server, pass the slave station number, VNC account information, and the IP address list of the slave station to the vncView proxy server as parameters; S10. The vncView proxy server determines whether a VNC connection has been established with the slave station vnc server according to the slave station number. If a VNC connection has been established, return that a VNC connection already exists; S11. If a VNC connection has not been established, evaluate the network conditions of the IP address list and select the optimal IP address; S12. VNC supports the security protocol at the network layer, which can encrypt network connections to prevent data from being stolen or tampered with during transmission; therefore, establish a TLS secure connection with the slave station vnc server according to the optimal IP address obtained after evaluation, and store the slave station number as the key, and the IP address, VNC account information, and connection information as the value in the cache; S13. The vncView proxy server passes the VNC account information to the vnc server of the slave station. The vnc server determines whether the account information is correct. If it is correct, the VNC login is successful and a remote desktop session is established. If it is incorrect, return that the VNC login fails; S14. After successful login, the vnc server determines whether the VNC account permission is read-only or read-write. If it is read-only permission, the user can only open the slave station monitoring and viewing interface based on VNC, and cannot enter the configuration interface; S15. If it is read-write permission, the user opens the slave station monitoring and viewing interface based on VNC, or opens the configuration interface for write operations; S16. If it is read / write permission, when the user opens the configuration interface, the lower computer determines whether it has logged in to the lower computer system. If not, it opens the lower computer login interface, and the user inputs the lower computer username and password. The lower computer transmits the username, the encrypted password, and the lower computer number to the SCADA system through the MQTT protocol. S17. The SCADA system verifies whether the login is successful based on the lower computer account password. After successful login, it returns the permission information according to the account and the lower computer number. S18. The lower computer obtains the login result and the permission information, and opens the corresponding configuration menu permissions according to the permission information.

2. The method for remotely controlling a local slave computer of SCADA based on VNC according to claim 1, wherein: In step S8, if the connection fails, a retry mechanism is triggered, and the retry strategy is as follows: 1) Without switching the proxy server IP address, retry, with a maximum of 2 retries. 2) If both retries fail, notify the backend service of the failure result, mark the failure count of this proxy server IP address +1. If the failure count is greater than a certain threshold, exclude this address. 3) After the backend service excludes the address that failed in this connection, it selects a proxy server IP address according to the least connection strategy and returns it to the browser. 4) The browser obtains the new proxy server IP address and initiates a WebSocket connection. If the connection fails, retry up to 2 times. After the retry fails, remind the user to try again later or contact the system operation and maintenance.

3. The method for remotely controlling a local slave computer of SCADA based on VNC according to claim 1, wherein: Step S1 includes that the server continuously captures the screen image information and encodes it, and transmits the encoded data in a compressed form to the client through the network. The client decompresses and decodes it after receiving, and displays the screen image. When the client user operates, the operation information is captured and encapsulated into a specific format and sent back to the server. The server parses and simulates the operation, and then captures the screen change image data again and sends it to the client. In this way, real-time remote control and interaction are realized in a loop. Based on the general network protocol and standardized encoding and decoding methods, it can run on multiple operating systems. If the lower computer does not install the VNC server, the corresponding VNC server can be installed according to the lower computer operating system.

4. The method for locally controlling a slave computer in a SCADA system remotely based on VNC according to claim 1, characterized in that: In step S13, a security protocol and an authentication mechanism are adopted to ensure the security of the data.

5. The method for remotely controlling a local slave computer of SCADA based on VNC according to claim 1, wherein: It also includes S19. The lower computer records the user write operation logs and reports the operation logs to the SCADA system through the MQTT protocol, which is convenient for problem tracking and auditing.

6. A computer device, comprising a memory and a processor, the memory storing a computer program, characterized in that, When the computer program is executed by the processor, the processor executes the steps of the method according to any one of claims 1 to 5.

Images