External clamping type ultrasonic flow metering system and method supporting trusted communication

Abstract

The invention provides an external clamping type ultrasonic flow metering system and method supporting trusted communication. The system comprises an ultrasonic flow meter measuring module, a trusted communication module and a trusted communication data processing module. A first trusted platform control chip is arranged in the trusted communication unit, and a second trusted platform control chip is arranged in the trusted communication data processing module. The first trusted platform control chip and the second trusted platform control chip store the same password mechanism. The ultrasonic flowmeter measurement module is used for obtaining flow data in the target pipeline. And the trusted communication module is used for monitoring the operation environment of the trusted communication data processing module, and encrypting the flow data based on the operation environment and a password mechanism to obtain encrypted data. And the trusted communication data processing module is used for decrypting the encrypted data based on the operating environment and the password mechanism to obtain the flow data, and sending the flow data to the upper computer, thereby improving the security of flow data transmission.

Description

Technical Field

[0001] The invention relates to the technical field of petroleum storage and transportation, and in particular to an external clamp-on ultrasonic flow metering system and method supporting trusted communication. Background Art

[0002] Ultrasonic flowmeter refers to a flowmeter developed based on the principle that the propagation speed of ultrasonic waves in a flowing medium is equal to the vector sum of the average flow velocity of the measured medium and the speed of the sound wave in a stationary medium. It is mainly composed of a transducer and a converter, and has different types such as Doppler method, velocity difference method, beam offset method, noise method and correlation method. The ultrasonic flow measurement system based on ultrasonic flowmeter can be used to obtain flow data at corresponding positions in the oil and gas pipeline during oil and gas transportation, and transmit the flow data to the corresponding host computer.

[0003] However, if the ultrasonic flow metering system is attacked by a network during the transmission of flow data, resulting in the tampering of flow data, it will bring great harm to the safety of oil and gas transportation. Therefore, how to improve the security of flow data transmission is an urgent problem to be solved. Summary of the invention

[0004] The technical problem to be solved by the present invention is to provide an external clamp-on ultrasonic flow metering system and method supporting trusted communication, which can improve the security of flow data transmission.

[0005] The technical solution of the present invention to solve the above technical problems is as follows:

[0006] On the one hand, the present invention provides an external clamp-on ultrasonic flow metering system supporting trusted communication, including an ultrasonic flow meter measurement module, a trusted communication module and a trusted communication data processing module. The trusted communication unit is equipped with a first trusted platform control chip, and the trusted communication data processing module is equipped with a second trusted platform control chip; the first trusted platform control chip and the second trusted platform control chip store the same cryptographic mechanism. The ultrasonic flow meter measurement module is used to obtain flow data in the target pipeline and send the flow data to the trusted communication module. The trusted communication module is used to monitor the operating environment of the trusted communication data processing module, encrypt the flow data based on the operating environment and the cryptographic mechanism, obtain encrypted data, and send the encrypted data to the trusted communication data processing module. The trusted communication data processing module is used to decrypt the encrypted data based on the operating environment and the cryptographic mechanism, obtain flow data, and send the flow data to the host computer.

[0007] Based on the above technical solution, the present invention can also be improved as follows.

[0008] Furthermore, the system further comprises an external clamp-on sensor and a clamp. The clamp is arranged on the outer wall of the target pipe and is used to fix the external clamp-on sensor on the target pipe. The external clamp-on sensor is used to obtain parameter information associated with the flow data and send the parameter information to the ultrasonic flow meter measurement module.

[0009] Furthermore, the ultrasonic flow meter measurement module is also used to obtain flow data based on parameter information.

[0010] Furthermore, the clamp-on sensor includes an ultrasonic generator and an ultrasonic receiver. The ultrasonic generator is used to transmit an ultrasonic signal to the inside of the target pipe. The ultrasonic receiver is used to determine the ultrasonic signal reflected from the inside of the target pipe as parameter information and send the parameter information to the ultrasonic flow meter measurement module.

[0011] Furthermore, the system also includes a display module. The ultrasonic flow meter measurement module is also used to send flow data to the display module. The display module is also used to receive and display flow data.

[0012] On the other hand, the present invention provides an external clamp-on ultrasonic flow metering method supporting trusted communication, which is applied to an external clamp-on ultrasonic flow metering system supporting trusted communication. The external clamp-on ultrasonic flow metering system includes an ultrasonic flow meter measurement module, a trusted communication module, and a trusted communication data processing module. The trusted communication unit is equipped with a first trusted platform control chip, and the trusted communication data processing module is equipped with a second trusted platform control chip. The first trusted platform control chip and the second trusted platform control chip store the same cryptographic mechanism. In this method, the ultrasonic flow meter measurement module obtains the flow data in the target pipeline and sends the flow data to the trusted communication module. The trusted communication module monitors the operating environment of the trusted communication data processing module, encrypts the flow data based on the operating environment and the cryptographic mechanism, obtains the encrypted data, and sends the encrypted data to the trusted communication data processing module. The trusted communication data processing module decrypts the encrypted data based on the operating environment and the cryptographic mechanism, obtains the flow data, and sends the flow data to the host computer.

[0013] Based on the above technical solution, the present invention can also be improved as follows.

[0014] Furthermore, the clamp-on ultrasonic flow metering system further includes a clamp-on sensor and a clamp. The clamp is disposed on the outer wall of the target pipe and is used to fix the clamp-on sensor on the target pipe. The clamp-on sensor acquires parameter information associated with the flow data and sends the parameter information to the ultrasonic flow meter measurement module.

[0015] Furthermore, the ultrasonic flow meter measurement module obtains flow data based on the parameter information.

[0016] Furthermore, the clamp-on sensor includes an ultrasonic generator and an ultrasonic receiver. The ultrasonic generator transmits an ultrasonic signal to the inside of the target pipe. The ultrasonic receiver determines the ultrasonic signal reflected from the inside of the target pipe as parameter information and sends the parameter information to the ultrasonic flow meter measurement module.

[0017] Furthermore, the clamp-on ultrasonic flow metering system further comprises a display module. The ultrasonic flow meter measurement module sends flow data to the display module, and the display module receives and displays the flow data.

[0018] The beneficial effect of the present invention is that: the present invention addresses the problem of communication security in the flow metering system, configures a trusted communication module device with a trusted computing 3.0 dual system architecture, and can improve the security of flow data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 A schematic diagram of the structure of an external clamp-on ultrasonic flow metering system supporting trusted communication provided by the present invention;

[0020] Figure 2 A schematic flow chart of an external clamp-on ultrasonic flow metering method supporting trusted communication provided by the present invention. DETAILED DESCRIPTION

[0021] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application. Among them, in the description of the present application, unless otherwise specified, " / " indicates that the objects associated before and after are in an "or" relationship, for example, A / B can represent A or B; "and / or" in the present application is only a description of the association relationship of the associated objects, indicating that there can be three relationships, for example, A and / or B, which can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. And, in the description of the present application, unless otherwise specified, "multiple" refers to two or more than two. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b, or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple. In addition, in order to facilitate the clear description of the technical solutions of the embodiments of the present application, in the embodiments of the present application, the words "first", "second" and the like are used to distinguish between the same items or similar items with substantially the same functions and effects. Those skilled in the art will understand that the words "first", "second" and the like do not limit the quantity and execution order, and the words "first", "second" and the like do not necessarily limit the differences. At the same time, in the embodiments of the present application, the words "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or design.

[0022] Oil and gas resources are important strategic reserve resources for the country, and oil and gas pipelines are important ways to transport oil and gas. With the gradual improvement of oil and gas pipeline construction, smart instruments and industrial control systems have also been gradually applied to oil and gas pipelines, which has greatly improved transportation efficiency and effectively avoided the risk points caused by human operation during transportation. In the early construction of industrial control systems and smart instruments, emphasis was placed on improving the degree of automation and transportation efficiency, and the network was not effectively improved and reinforced. Therefore, there are potential network security risks in the process of system application. With the release of the national security protection 2.0 standard, more attention is paid to active defense, security, reliability, and dynamic perception of network protection.

[0023] Based on this, the present invention provides an external clamp-on ultrasonic flow metering system supporting trusted communication, see Figure 1 ,The system includes an ultrasonic flow meter measurement module, a trusted communication module and a trusted ,communication data processing module.

[0024] The trusted communication unit is built with a first trusted platform control chip, and the trusted communication data processing module is built with a second trusted platform control chip. The first trusted platform control chip and the second trusted platform control chip store the same password mechanism.

[0025] The ultrasonic flow meter measurement module is used to obtain the flow data in the target pipeline and send the flow data to the trusted communication module. The trusted communication module is used to monitor the operating environment of the trusted communication data processing module, encrypt the flow data based on the operating environment and the password mechanism, obtain the encrypted data, and send the encrypted data to the trusted communication data processing module. The trusted communication data processing module is used to decrypt the encrypted data based on the operating environment and the password mechanism, obtain the flow data, and send the flow data to the host computer.

[0026] Among them, the trusted communication data processing module is pre-arranged in front of the host computer. For example, the trusted communication data processing module is connected to the host computer by wire to prevent the flow data sent by the trusted communication data processing module to the host computer from being leaked or tampered with.

[0027] In some embodiments, the ultrasonic flow meter measurement module can transmit the flow data to the trusted communication module via RS485 using the Modbus protocol.

[0028] In some embodiments, see Figure 1 The system provided by the present invention also includes an external clamp-on ultrasonic sensor. The external clamp-on ultrasonic sensor includes an external clamp-on sensor and a clamp. The clamp is arranged on the outer wall of the target pipe and is used to fix the external clamp-on sensor on the target pipe. The external clamp-on sensor is used to obtain parameter information associated with the flow data and send the parameter information to the ultrasonic flow meter measurement module.

[0029] In some embodiments, the ultrasonic flow meter measurement module is further used to obtain flow data based on parameter information.

[0030] In some embodiments, the clamp-on sensor includes an ultrasonic generator and an ultrasonic receiver. The ultrasonic generator is used to transmit an ultrasonic signal to the inside of the target pipe. The ultrasonic receiver is used to determine the ultrasonic signal reflected from the inside of the target pipe as parameter information and send the parameter information to the ultrasonic flow meter measurement module.

[0031] In some embodiments, see Figure 1 The system provided by the present invention also includes a display module. The ultrasonic flow meter measurement module is also used to send flow data to the display module. The display module is also used to receive and display flow data.

[0032] The present invention also provides an external clamp-on ultrasonic flow metering method supporting reliable communication, which is applied to Figure 1The external clamp-on ultrasonic flow metering system supporting trusted communication is disclosed. The external clamp-on ultrasonic flow metering system includes an ultrasonic flow meter measurement module, a trusted communication module, and a trusted communication data processing module. The trusted communication unit is equipped with a first trusted platform control chip, and the trusted communication data processing module is equipped with a second trusted platform control chip. The first trusted platform control chip and the second trusted platform control chip store the same cryptographic mechanism.

[0033] See also Figure 2 The method provided by the present invention includes the following steps S201-S203.

[0034] S201: The ultrasonic flow meter measurement module obtains flow data in the target pipeline and sends the flow data to the trusted communication module.

[0035] In some embodiments, the clamp-on ultrasonic flow metering system further comprises a clamp-on sensor and a clamp. The clamp is disposed on the outer wall of the target pipe and is used to fix the clamp-on sensor on the target pipe. The clamp-on sensor obtains parameter information associated with the flow data and sends the parameter information to the ultrasonic flow meter measurement module.

[0036] In some embodiments, the ultrasonic flow meter measurement module obtains flow data based on parameter information.

[0037] In some embodiments, the clamp-on sensor includes an ultrasonic generator and an ultrasonic receiver. The ultrasonic generator transmits an ultrasonic signal to the inside of the target pipe. The ultrasonic receiver determines the ultrasonic signal reflected from the inside of the target pipe as parameter information and sends the parameter information to the ultrasonic flow meter measurement module.

[0038] In some embodiments, the ultrasonic flow meter measurement module can transmit the flow data to the trusted communication module via RS485 using the Modbus protocol.

[0039] S202: The trusted communication module monitors the operating environment of the trusted communication data processing module, encrypts the traffic data based on the operating environment and the cryptographic mechanism to obtain encrypted data, and sends the encrypted data to the trusted communication data processing module.

[0040] Among them, the trusted communication module has a trusted computing 3.0 dual architecture.

[0041] S203: The trusted communication data processing module decrypts the encrypted data based on the operating environment and the cryptographic mechanism to obtain flow data, and sends the flow data to the host computer.

[0042] Among them, the trusted communication data processing module is pre-arranged in front of the host computer. For example, the trusted communication data processing module is connected to the host computer by wire to prevent the flow data sent by the trusted communication data processing module to the host computer from being leaked or tampered with.

[0043] In some embodiments, the clamp-on ultrasonic flow metering system further includes a display module. The ultrasonic flow meter measurement module sends flow data to the display module, and the display module receives and displays the flow data.

[0044] The operating environment in the embodiments of the present application is described in detail below.

[0045] The trusted communication data processing module can be regarded as a small computer system, and the operating environment refers to the operating environment that the trusted communication data processing module relies on when executing corresponding instructions or running corresponding programs. For example, the internal storage space, external storage space, operating system category, device configuration, etc. required to execute corresponding instructions or run corresponding programs.

[0046] In this case, the trusted platform control chip can actively collect feature information corresponding to the operating environment and identify and determine the feature information. If the feature information is not recognized, the operation will not be allowed or a warning message will be given.

[0047] The encryption and decryption in the embodiments of the present application are described in detail below.

[0048] The trusted communication module can encrypt the traffic data based on the acquired operating environment and cryptographic mechanism to obtain encrypted data. For example, the algorithm can be synthesized based on the acquired operating environment and encrypted through the national secret SM4 as a secret key. The trusted communication data processing module can decrypt the encrypted data based on the operating environment and cryptographic mechanism to obtain traffic data. For example, the algorithm can be synthesized based on the operating environment and decrypted through the reverse national secret SM4 as a secret key.

[0049] Specifically, the SM4 decryption process may include the following steps:

[0050] Initialize SM4 key: Before using the SM4 algorithm for decryption, you need to initialize an SM4 key. This key is usually 128 bits and is used for encryption and decryption. The key can be generated through a random number generator to ensure that each generated key is random to increase security. Before the key is converted for use, it usually exists in the form of a hexadecimal string for easy storage and transmission1.

[0051] Create an SM4 decryptor: After initializing the key, you need to create an SM4 decryptor. This decryptor will use the previously initialized key to perform decryption operations. The creation of a decryptor usually involves selecting appropriate cryptographic libraries and APIs that provide functions and interfaces related to the SM4 algorithm.

[0052] Perform decryption operations: Use the created SM4 decryptor to operate on the ciphertext that needs to be decrypted. The decryption process involves a series of transformations on the ciphertext, which are the opposite of the transformations made during the encryption process, and finally obtain the original plaintext data.

[0053] Processing decrypted data: Decrypted data may require additional processing, such as removing padding, to ensure data integrity and availability. This step depends on the specific encryption scheme. Some encryption schemes will add padding during encryption to ensure that the size of the data block is suitable for the encryption algorithm to process.

[0054] The SM4 algorithm is a symmetric encryption algorithm, which means that the same key is used for encryption and decryption. It is designed to provide high security and efficiency and is suitable for a variety of application scenarios. Through the above steps, the correct decryption of SM4 encrypted data can be achieved, ensuring the confidentiality and integrity of the information12.

[0055] It can be seen that the trusted communication module in the needle of the present invention adopts a modular configuration, and uses a trusted communication module with dual-system inherent security using a built-in trusted platform control chip. The host computer is pre-placed with a trusted communication data processing module, which uses a built-in trusted platform control chip with dual-system inherent security, and has the ability to perform trusted remote verification and decryption of data uploaded by multiple trusted communication modules and forward the relevant decrypted data to the host computer.

[0056] Among them, the trusted communication module has the following functions because it has a built-in trusted platform control chip:

[0057] First, the trusted communication data processing module is protected by environmental measurement to prevent the leakage or tampering of traffic data due to malicious attacks. Second, the detected operating environment can be used as an encryption and decryption factor to encrypt the traffic data transmitted by the ultrasonic flow meter measurement module and then transmit it via 4G.

[0058] The encrypted data including the trusted measurement information is transmitted to the trusted communication data processing module, which can decrypt the received encrypted data based on the operating environment and the cryptographic mechanism, and send the decrypted traffic data to the host computer, thereby better ensuring the security of data transmission.

[0059] In some schemes, multiple embodiments of the present application can be combined, and the combined scheme can be implemented. Optionally, some operations in the process of each method embodiment are optionally combined, and / or the order of some operations is optionally changed. In addition, the execution order between the steps of each process is only exemplary and does not constitute a restriction on the execution order between the steps. There can also be other execution orders between the steps. It is not intended to indicate that the execution order is the only order in which these operations can be performed. A person of ordinary skill in the art will think of a variety of ways to reorder the operations described herein. In addition, it should be noted that the process details involved in a certain embodiment of this article are also applicable to other embodiments in a similar manner, or different embodiments can be used in combination.

[0060] In addition, some steps in the method embodiment may be equivalently replaced by other possible steps. Alternatively, some steps in the method embodiment may be optional and may be deleted in certain usage scenarios. Alternatively, other possible steps may be added to the method embodiment. Furthermore, the method embodiments may be implemented separately or in combination.

[0061] Through the description of the above implementation methods, technical personnel in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional modules is used as an example. In actual applications, the above-mentioned functions can be assigned to different functional modules as needed, that is, the internal structure of the system can be divided into different functional modules to complete all or part of the functions described above.

[0062] In the several embodiments provided in the present application, it should be understood that the disclosed systems and methods can be implemented in other ways. For example, the system embodiments described above are only schematic. For example, the division of the modules or units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of systems or units, which can be electrical, mechanical or other forms.

[0063] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0064] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a readable storage medium. Based on this understanding, the technical solution of the embodiment of the present application is essentially or the part that contributes or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium, including several instructions to enable a device (which can be a single-chip microcomputer, chip, etc.) or a processor (processor) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk and other media that can store program code.

[0065] The above contents are only specific implementation methods of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions within the technical scope disclosed in the present application shall be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims

1. An external clamp-on ultrasonic flow metering system supporting trusted communication, characterized in that: It includes an ultrasonic flow meter measurement module, a trusted communication module and a trusted communication data processing module; the trusted communication unit is equipped with a first trusted platform control chip, and the trusted communication data processing module is equipped with a second trusted platform control chip; the first trusted platform control chip and the second trusted platform control chip store the same cryptographic mechanism; The ultrasonic flow meter measurement module is used to obtain flow data in the target pipeline and send the flow data to the trusted communication module; The trusted communication module is used to monitor the operating environment of the trusted communication data processing module, encrypt the traffic data based on the operating environment and the cryptographic mechanism to obtain encrypted data, and send the encrypted data to the trusted communication data processing module; The trusted communication data processing module is used to decrypt the encrypted data based on the operating environment and the cryptographic mechanism to obtain the flow data, and send the flow data to the host computer.

2. The system according to claim 1, characterized in that It also includes an external clamp-on sensor and a clamp; the clamp is arranged on the outer wall of the target pipe; The clamp is used to fix the external clamp-on sensor on the target pipe; The clamp-on sensor is used to obtain parameter information associated with the flow data and send the parameter information to the ultrasonic flow meter measurement module.

3. The system according to claim 2, characterized in that The ultrasonic flow meter measurement module is also used to obtain the flow data based on the parameter information.

4. The system according to claim 3, characterized in that The external clamp-on sensor includes an ultrasonic generator and an ultrasonic receiver; The ultrasonic generator is used to transmit ultrasonic signals into the target pipe; The ultrasonic receiver is used to determine the ultrasonic signal reflected inside the target pipe as the parameter information, and send the parameter information to the ultrasonic flow meter measurement module.

5. The system according to claim 4, characterized in that Also includes a display module; The ultrasonic flow meter measurement module is also used to send the flow data to the display module; The display module is also used to receive and display the flow data.

6. A clamp-on ultrasonic flow metering method supporting trusted communication, characterized in that: An external clamp-on ultrasonic flow metering system for supporting trusted communication, the external clamp-on ultrasonic flow metering system comprising an ultrasonic flow meter measurement module, a trusted communication module and a trusted communication data processing module; the trusted communication unit is equipped with a first trusted platform control chip, the trusted communication data processing module is equipped with a second trusted platform control chip; the first trusted platform control chip and the second trusted platform control chip store the same cryptographic mechanism; the method comprises: The ultrasonic flow meter measurement module obtains flow data in the target pipeline and sends the flow data to the trusted communication module; The trusted communication module monitors the operating environment of the trusted communication data processing module, encrypts the traffic data based on the operating environment and the cryptographic mechanism to obtain encrypted data, and sends the encrypted data to the trusted communication data processing module; The trusted communication data processing module decrypts the encrypted data based on the operating environment and the cryptographic mechanism to obtain the flow data, and sends the flow data to the host computer.

7. The method according to claim 6, characterized in that The clamp-on ultrasonic flow metering system further comprises a clamp-on sensor and a fixture; the fixture is arranged on the outer wall of the target pipe; the fixture is used to fix the clamp-on sensor on the target pipe; before the ultrasonic flow meter measurement module obtains the flow data in the target pipe, the method further comprises: The clamp-on sensor acquires parameter information associated with the flow data and sends the parameter information to the ultrasonic flow meter measurement module.

8. The method according to claim 7, characterized in that The ultrasonic flow meter measurement module obtains flow data in the target pipeline, including: The ultrasonic flow meter measurement module obtains the flow data based on the parameter information.

9. The method according to claim 8, characterized in that The clamp-on sensor comprises an ultrasonic generator and an ultrasonic receiver; the clamp-on sensor acquires parameter information associated with the flow data and sends the parameter information to the ultrasonic flow meter measurement module, comprising: The ultrasonic generator transmits an ultrasonic signal into the target pipe; The ultrasonic receiver determines the ultrasonic signal reflected from the inside of the target pipe as the parameter information, and sends the parameter information to the ultrasonic flow meter measurement module.

10. The method according to claim 8, characterized in that The clamp-on ultrasonic flow metering system further includes a display module; after the ultrasonic flow meter measurement module acquires the flow data in the target pipeline, the method further includes: The ultrasonic flow meter measurement module sends the flow data to the display module; The display module receives and displays the flow data.

Images