Method, system and equipment for mutual recognition of credible states of DCS (Distributed Control System) controller and upper computer

Abstract

The invention discloses a credible state mutual recognition method, system and device for a DCS controller and an upper computer, and belongs to the technical field of credible DCS controller safety protection. The credible state mutual recognition method for the DCS controller and the upper computer comprises the steps that safety operation content of a credible supporting module is set, and a communication certificate is imported; the trusted support module is connected to the DCS controller and the upper computer; self-checking whether the trusted support module is successfully accessed or not, and if not, sending an alarm to the DCS controller and the upper computer; and if the self-inspection credible support module is successfully accessed, a communication certificate is acquired, and when communication and data exchange are performed between the DCS controller and the upper computer, information is encrypted and transmitted, so that credible state mutual recognition between the upper computer and the DCS is realized. According to the application, a trusted computing environment is established by using a hardware trust chain, so that communication and data exchange between the DCS controller and the upper computer are ensured to be trusted.

Description

Technical Field

[0001] The present application belongs to the technical field of trusted DCS controller security protection, and specifically relates to a method, system and device for mutual recognition of trusted status between a DCS controller and a host computer. Background Art

[0002] In the thermal power industry, unit control relies on an efficient and stable distributed control system (DCS). At present, domestic thermal power distributed control systems are usually composed of multiple types of equipment such as DCS controllers, engineer stations, operator stations, and history stations, forming a complex control system.

[0003] In the relevant technologies, the DCS controller is the core of the distributed control system, responsible for accurately controlling key equipment such as boilers, turbines (including digital electric hydraulic control systems (DEH)) and generators, ensuring that they operate stably according to preset parameters. The host computer includes engineer stations, operator stations, etc., providing operators with a full range of management tools such as operation interface, monitoring functions, alarm prompts, trend displays, and report recording and printing. The DCS controller and the host computer transmit information through specific communication protocols and data exchange mechanisms, which is the basis for the stable operation of the entire distributed control system.

[0004] Although the existing technology is relatively mature, there are still some shortcomings in the communication and data exchange between the DCS controller and the host computer: ‌Communication reliability issues‌: Due to the complexity of the industrial environment, the communication lines may be disturbed or damaged, resulting in data transmission errors or interruptions, which in turn affects the stable operation of the distributed control system. ‌Data security risks‌: With the development of network technology, distributed control systems are also facing the risk of external network attacks and data leakage, and data security has become an urgent problem to be solved. ‌Data real-time and accuracy challenges‌: In high-speed production processes, data real-time and accuracy are crucial. However, the existing technology may have problems such as data processing delays, data loss or errors, which affect the rapid response capability of distributed control systems. Summary of the invention

[0005] The purpose of this application is to address the problems in the above-mentioned prior art and provide a method, system and device for mutual recognition of trusted status between a DCS controller and a host computer, using a hardware trust chain to establish a trusted computing environment, thereby ensuring that the communication and data exchange between the DCS controller and the host computer are trustworthy.

[0006] In order to achieve the above purpose, this application has the following technical solutions: In a first aspect, a method for mutual recognition of trusted status between a DCS controller and a host computer is provided, comprising: Connect the trusted support module to the DCS controller and the host computer respectively; wherein the trusted support module is pre-set with security operation content, and the trusted support module is pre-imported with a communication certificate; The trusted support module self-checks whether it has successfully connected to the DCS controller or the host computer; When the trusted support module is not connected to the DCS controller or the host computer, the trusted support module sends an alarm message to the DCS controller or the host computer; When the trusted support module is connected to the DCS controller or the host computer, and when the trusted chain of communication between the DCS controller and the host computer is complete, the DCS controller and the host computer communicate and exchange data.

[0007] As a preferred solution, the security operation content includes generating keys, storing keys, managing keys, and performing at least one of encryption operations and signing operations. The encryption operation is to convert sensitive data into original data information that can only be decrypted by authorized users with corresponding keys.

[0008] As a preferred solution, before the trusted support module self-checks whether it has successfully connected to the DCS controller or the host computer, the method for mutual recognition of trusted status between the DCS controller and the host computer further includes: After the main program is started, the trusted authentication library is called, and the trusted support module self-checks whether the DCS controller and the host computer are credible; The trusted authentication library is used to perform encryption and / or decryption operations on data during the communication process to establish the trusted chain.

[0009] As a preferred solution, the DCS controller and the host computer trusted state mutual recognition method further includes: During the communication and data exchange between the DCS controller and the host computer, when the host computer issues an instruction to the DCS controller, the DCS controller executes a corresponding task according to the instruction sent by the host computer and obtains an execution result; The DCS controller encrypts the execution result and transmits it back to the host computer.

[0010] As a preferred solution, the DCS controller performs corresponding tasks according to the instructions sent by the host computer, including: The DCS controller receives notification information sent by the host computer; The DCS controller calls the trusted authentication library to decrypt the notification information to obtain the instruction; The DCS controller executes corresponding tasks according to the instructions sent by the host computer.

[0011] As a preferred solution, the trusted support module sends alarm information to the DCS controller or the host computer, including: The trusted support module sends the first alarm information to the DCS controller, where the first alarm information is used to instruct the DCS controller to issue an alarm through an indicator light; Alternatively, the trusted support module sends a second alarm message to the host computer, where the second alarm message is used to instruct the host computer to perform a prompt operation.

[0012] In a second aspect, a DCS controller and a host computer trusted state mutual recognition system is provided, comprising: An access module, used to connect the trusted support module to the DCS controller and the host computer respectively; wherein the trusted support module is pre-set with security operation content, and the trusted support module is pre-imported with a communication certificate; A self-check module, used for the trusted support module to self-check whether it has successfully connected to the DCS controller or the host computer; an alarm module, configured to send an alarm message to the DCS controller or the host computer when the trusted support module is not connected to the DCS controller or the host computer; The communication module is used for communicating and exchanging data between the DCS controller and the host computer when the trusted support module is connected to the DCS controller or the host computer and the trusted chain of communication between the DCS controller and the host computer is complete.

[0013] According to a third aspect, an electronic device is provided, including: A memory storing at least one instruction; and a processor executing the instruction stored in the memory to implement the method for mutual recognition of trusted status between the DCS controller and the host computer.

[0014] In a fourth aspect, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method for mutual recognition of trusted status between a DCS controller and a host computer is implemented.

[0015] In a fifth aspect, a computer program product is provided. The computer program product is stored in a storage medium and is executed by at least one processor to implement the method for mutual recognition of trusted status between a DCS controller and a host computer.

[0016] Compared with the prior art, this application has at least the following beneficial effects: In the process of communication and data exchange between the DCS controller and the host computer, a trusted support module is set up and a communication certificate is imported. If the self-checked trusted support module has been successfully connected, the communication certificate is obtained. Then, when the DCS controller and the host computer communicate and exchange data, the trusted support module is used to encrypt and transmit the information, thereby realizing the mutual recognition of the trusted status between the host computer and the DCS. This application uses a trusted support module to gradually establish a hardware trust chain, creating a trusted computing environment to ensure that the communication and data exchange between the DCS controller and the host computer are reliable. At the same time, different protection strategies can be formed for different types of equipment, thereby improving the security of each device in a targeted manner, improving the overall security of the DCS controller, and receiving an alarm message when an attack occurs, ensuring the security of the communication data. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without creative work.

[0018] Figure 1 It is a flow chart of a method for mutual recognition of trusted status between a DCS controller and a host computer according to an embodiment of the present application; Figure 2 It is a structural block diagram of the DCS controller and host computer trusted status mutual recognition system in the embodiment of the present application. DETAILED DESCRIPTION

[0019] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, ordinary technicians in this field can also obtain other embodiments without making creative work.

[0020] See also Figure 1 The method for mutual recognition of trusted status between a DCS controller and a host computer in an embodiment of the present application comprises the following steps: Step 101: Connect the trusted support module to the DCS controller and the host computer respectively; wherein the trusted support module is pre-set with security operation content, and the trusted support module is pre-imported with a communication certificate Step 102: The trusted support module self-checks whether it has successfully connected to the DCS controller or the host computer; Step 103: When the trusted support module is not connected to the DCS controller or the host computer, the trusted support module sends an alarm message to the DCS controller or the host computer; Step 104: When the trusted support module is connected to the DCS controller or the host computer, and when the trusted chain of communication between the DCS controller and the host computer is complete, the DCS controller communicates and exchanges data with the host computer.

[0021] It should be noted that the application of Trusted Service Manager (TSM) in the Distributed Control System (DCS), although not directly used as a standard component for communication and data exchange between the DCS controller and the host computer, can establish a hardware trust chain to strengthen communication security and data encryption, thereby ensuring system security and reliability.

[0022] The trusted support module can integrate or cooperate with encryption technologies, such as Advanced Encryption Standard (AES), Shang Yong Mi Ma (SM) series of national encryption algorithms, etc., to encrypt the data transmitted between the DCS controller and the host computer. In this way, even if the data is intercepted during transmission, it cannot be interpreted by unauthorized personnel, ensuring the confidentiality and integrity of the data and preventing sensitive information from being leaked or tampered with. The trusted support module can establish a trust mechanism based on digital certificates or key management, so that the DCS controller and the host computer can verify each other's identity and status. This mechanism can ensure that only trusted devices can participate in communication and data exchange, thereby preventing unauthorized devices from accessing the system and improving the overall security of the system. In industrial automation and control systems, DCS is usually responsible for monitoring various equipment and parameters in the production process. By introducing trusted support modules for data encryption and mutual recognition of trusted status, the security and reliability of the system can be significantly improved. As distributed control systems in different industries and fields may need to communicate and exchange data with each other, the trusted support module can serve as a secure bridge for cross-industry communication to ensure the security and credibility of data during transmission. In the specific implementation process, it is necessary to select appropriate encryption algorithms and trust management mechanisms based on the specific needs and security requirements of the distributed control system. When integrating the trusted support module functions into the distributed control system, it is necessary to ensure its compatibility and stability with the existing system. Conduct sufficient security testing before deployment to verify the effectiveness and reliability of the trusted support module in data encryption and mutual recognition of trusted status.

[0023] Distributed control systems are responsible for monitoring and controlling key production processes. Trusted communication and data exchange can ensure that the system can perceive and handle abnormal situations in a timely manner to prevent safety accidents. In an emergency, trusted communication channels can ensure that control instructions are quickly transmitted to the DCS controller, so that necessary emergency measures can be taken in a timely manner. The host computer can fully monitor and analyze the production process by receiving data transmitted by the DCS controller. Trusted communication and data exchange can ensure the accuracy and integrity of data and provide a reliable basis for management to make decisions. With the development of the industrial Internet, remote monitoring and operation have become a trend. Trusted communication and data exchange are the basis for remote monitoring and operation, which helps to improve management efficiency and reduce operating costs. Trusted communication and data exchange are the basis for realizing advanced functions of distributed control systems (such as predictive maintenance, optimization control, etc.). These functions rely on real-time and accurate data transmission and analysis. Therefore, according to the specific needs and security requirements of the distributed control system, select appropriate encryption algorithms and trust management mechanisms. Integrating the functions of the trusted support module into the distributed control system ensures its compatibility and stability with the existing system. The communication and data exchange between the DCS controller and the host computer are reliable, which is of great significance for improving system stability, ensuring production safety, improving management efficiency, achieving data security and privacy protection, and promoting intelligence and automation.

[0024] In an optional embodiment, the security operation content includes generating keys, storing keys, managing keys, and performing at least one of encryption operations and signing operations, and the encryption operation is to convert sensitive data into original data information that can only be decrypted by authorized users with corresponding keys.

[0025] Furthermore, the trusted support module needs to be able to generate high-quality keys that meet certain security standards, such as key length and complexity. The generation of keys usually relies on a random number generator, and the generated keys should be unpredictable and unique. Depending on the application requirements, the trusted support module may need to generate different types of keys, such as symmetric keys (used to encrypt and decrypt the same data), asymmetric keys (including public keys and private keys, the public key is used to encrypt data, and the private key is used to decrypt data). At the same time, the trusted support module needs to ensure the storage security of the keys to prevent unauthorized access and leakage. This usually involves storing the keys in a protected secure area, such as a hardware security module (HSM) or an encrypted storage device. The trusted support module is able to manage the entire life cycle of the key, including the stages of key creation, distribution, use, update, and destruction. In addition, a key backup and recovery plan is formulated to prevent data from being decrypted due to key loss or damage. The trusted support module should be able to perform cryptographic operations to convert sensitive data into a format that can only be decrypted by authorized users with the corresponding keys. This helps to protect the confidentiality and integrity of the data. Through digital signature technology, the trusted support module can verify the integrity and source of the data. Digital signatures are usually generated using a private key and verified using a public key to ensure that the data has not been tampered with during transmission. The trusted support module should record all key security operations, such as key generation, storage, access, and encryption / signature operations, for security auditing and monitoring. By monitoring and analyzing log data, the trusted support module can detect potential security threats and abnormal behaviors and take appropriate countermeasures. By implementing these security operations, it can be ensured that the trusted support module has a high degree of security and reliability when processing sensitive data.

[0026] In an optional implementation, before the trusted support module self-checks whether it has successfully connected to the DCS controller or the host computer, the method for mutual recognition of trusted status between the DCS controller and the host computer further includes: After the main program is started, the trusted authentication library is called, and the trusted support module self-checks whether the DCS controller and the host computer are credible; The trusted authentication library is used to perform encryption and / or decryption operations on data during the communication process to establish the trusted chain.

[0027] In an optional implementation, the DCS controller and the host computer trusted state mutual recognition method further includes: During the communication and data exchange between the DCS controller and the host computer, when the host computer issues an instruction to the DCS controller, the DCS controller executes a corresponding task according to the instruction sent by the host computer and obtains an execution result; The DCS controller encrypts the execution result and transmits it back to the host computer.

[0028] In an optional implementation, the DCS controller performs a corresponding task according to the instruction sent by the host computer, including: The DCS controller receives notification information sent by the host computer; The DCS controller calls the trusted authentication library to decrypt the notification information to obtain the instruction; The DCS controller executes corresponding tasks according to the instructions sent by the host computer.

[0029] In an optional implementation manner, the trusted support module sends alarm information to the DCS controller or the host computer, including: The trusted support module sends the first alarm information to the DCS controller, where the first alarm information is used to instruct the DCS controller to issue an alarm through an indicator light; Alternatively, the trusted support module sends a second alarm message to the host computer, where the second alarm message is used to instruct the host computer to perform a prompt operation.

[0030] Furthermore, in the embodiment of the present application, after the main program is started, the trusted authentication library is called to self-check whether the DCS controller and the host computer are trustworthy. The trusted authentication library encrypts and decrypts data during the communication process, gradually establishes a trust chain, and realizes the security and trustworthiness of the communication data and the trustworthiness of the equipment.

[0031] Specifically, the encryption process needs to select a suitable encryption algorithm based on the security requirements of both parties in communication, such as a symmetric encryption algorithm (such as the Advanced Encryption Standard (AES)) or an asymmetric encryption algorithm (such as the Rivest-Shamir-Adleman algorithm (RSA)). The encryption process requires a key. For symmetric encryption, both parties in communication need to share a key; for asymmetric encryption, a public key and a private key are generated respectively, the public key is used for encryption, and the private key is used for decryption. Finally, the selected algorithm and key are used to convert the plaintext data to be transmitted into ciphertext data. Even if the ciphertext data is intercepted during transmission, it cannot be easily decrypted by unauthorized users. The receiver receives the encrypted ciphertext data and uses the same algorithm and key (for symmetric encryption) or the corresponding private key (for asymmetric encryption) as used for encryption to restore the ciphertext data to plaintext data.

[0032] The process of gradually establishing a trust chain includes that both parties need to authenticate their identities before communication begins to ensure the authenticity of the communication object. This is usually achieved by exchanging digital certificates or using other identity authentication mechanisms. When the trust chain is passed, the starting point of the trust chain is usually a trusted root certificate or a certificate issued by an authority. By verifying the validity of the certificates step by step, a trust chain from the root certificate to the certificates of the two communicating parties can be established. During the communication process, each step of the authentication and encryption operation is based on the established trust chain, thereby ensuring the security and reliability of the entire communication process.

[0033] In addition to authenticating the identities of both parties in communication, the credibility of the communication equipment also needs to be verified. This can be achieved by checking the hardware and software configuration of the equipment, the implementation of security policies, etc. By verifying the identity and status of the device through the trusted authentication library, it can be ensured that only legitimate devices can access the network and participate in communication. When achieving the security and credibility of communication data, technical means such as digital signatures can ensure that the transmitted data has not been tampered with during the transmission process. After receiving the data, the receiver can use the sender's public key to verify the validity of the digital signature to confirm the integrity of the data. Encryption technology can ensure that the transmitted data is not obtained or understood by unauthorized third parties during the transmission process. Even if the data is intercepted, it cannot be easily decrypted. During the communication process, the behavior and operations of the two parties in communication can also be recorded and traced through logging, audit tracking, etc. This helps to quickly locate the cause of the problem and take corresponding countermeasures when a security incident occurs.

[0034] In a possible implementation, during the communication and data exchange between the DCS controller and the host computer, when the host computer sends an instruction to the DCS controller, the DCS controller first calls the trusted authentication library to parse the host computer instruction data, then executes the task according to the host computer instruction, and encrypts the execution result and sends it back to the host computer.

[0035] In a possible implementation manner, the step of sending an alarm to the DCS controller and the host computer includes: The alarm is given on the DCS controller through the indicator light, and the host computer sends an alarm message to prompt the operation administrator.

[0036] The core idea of ​​the DCS controller and host computer trusted state mutual recognition method in the embodiment of the present application is to use the hardware trust chain to establish a trusted computing environment, thereby ensuring that the communication and data exchange between the DCS controller and the host computer are trusted. When the trusted operating system terminal is attacked, an alarm will be transmitted to the trusted management platform to ensure the security of the communication data.

[0037] See also Figure 2Another embodiment of the present application further proposes a DCS controller and a host computer trusted state mutual recognition system, comprising: The access module 201 is used to connect the trusted support module to the DCS controller and the host computer respectively; wherein the trusted support module is pre-set with security operation content, and the trusted support module is pre-imported with a communication certificate; A self-check module 202, used for the trusted support module to self-check whether it has successfully connected to the DCS controller or the host computer; An alarm module 203 is used for sending an alarm message to the DCS controller or the host computer when the trusted support module is not connected to the DCS controller or the host computer; The communication module 204 is used for the DCS controller to communicate and exchange data with the host computer when the trusted support module is connected to the DCS controller or the host computer and the trusted chain of communication between the DCS controller and the host computer is complete.

[0038] Another embodiment of the present application further provides an electronic device, including: A memory storing at least one instruction; and a processor executing the instruction stored in the memory to implement the method for mutual recognition of trusted status between the DCS controller and the host computer.

[0039] Another embodiment of the present application further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method for mutual recognition of trusted status between a DCS controller and a host computer is implemented.

[0040] Another embodiment of the present application further proposes a computer program product, which is stored in a storage medium and executed by at least one processor to implement the method for mutual recognition of trusted status between a DCS controller and a host computer.

[0041] Exemplarily, the instructions stored in the memory may be divided into one or more modules / units, which are stored in a computer-readable storage medium and executed by the processor to complete the method for mutual recognition of trusted status between a DCS controller and a host computer described in an embodiment of the present application. The one or more modules / units may be a series of computer-readable instruction segments capable of completing a specific function, which are used to describe the execution process of the computer program in the server.

[0042] The electronic device may be a computing device such as a smart phone, a notebook, a PDA, and a cloud server. The electronic device may include, but is not limited to, a processor and a memory. Those skilled in the art will appreciate that the electronic device may also include more or fewer components, or a combination of certain components, or different components, for example, the electronic device may also include an input / output device, a network access device, a bus, etc.

[0043] The processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0044] The memory may be an internal storage unit of the server, such as a hard disk or memory of the server. The memory may also be an external storage device of the server, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the server. Furthermore, the memory may include both an internal storage unit of the server and an external storage device. The memory is used to store the computer-readable instructions and other programs and data required by the server. The memory may also be used to temporarily store data that has been output or is to be output.

[0045] It should be noted that the information interaction, execution process and other contents between the above-mentioned module units are based on the same concept as the method embodiment. Their specific functions and technical effects can be found in the method embodiment part and will not be repeated here.

[0046] The technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example for illustration. In practical applications, the above-mentioned function allocation can be completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiment can be integrated in a processing unit, or each unit can exist physically separately, or two or more units can be integrated in one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application. The specific working process of the units and modules in the above-mentioned system can refer to the corresponding process in the aforementioned method embodiment, which will not be repeated here.

[0047] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present application implements all or part of the processes in the above-mentioned embodiment method, which can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of the above-mentioned various method embodiments when executed by the processor. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may at least include: any entity or device that can carry the computer program code to the camera device / terminal device, recording medium, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), electrical carrier signal, telecommunication signal and software distribution medium. For example, a USB flash drive, a mobile hard disk, a disk or an optical disk.

[0048] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0049] The embodiments described above are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, a person skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application, and should all be included in the protection scope of the present application.

Claims

1. A method for mutual recognition of trusted status between a DCS controller and a host computer, characterized in that: include: Connect the trusted support module to the DCS controller and the host computer respectively; wherein the trusted support module is pre-set with security operation content, and the trusted support module is pre-imported with a communication certificate; The trusted support module self-checks whether it has successfully connected to the DCS controller or the host computer; When the trusted support module is not connected to the DCS controller or the host computer, the trusted support module sends an alarm message to the DCS controller or the host computer; When the trusted support module is connected to the DCS controller or the host computer, and when the trusted chain of communication between the DCS controller and the host computer is complete, the DCS controller and the host computer communicate and exchange data.

2. The method for mutual recognition of trusted status between a DCS controller and a host computer according to claim 1, characterized in that: The security operation content includes generating keys, storing keys, managing keys, and performing at least one of encryption operations and signing operations. The encryption operation is to convert sensitive data into original data information that can only be decrypted by authorized users with corresponding keys.

3. The method for mutual recognition of trusted status between a DCS controller and a host computer according to claim 1, characterized in that: Before the trusted support module self-checks whether it has successfully connected to the DCS controller or the host computer, it also includes: After the main program is started, the trusted authentication library is called, and the trusted support module self-checks whether the DCS controller and the host computer are credible; The trusted authentication library is used to perform encryption and / or decryption operations on data during the communication process to establish the trusted chain.

4. The method for mutual recognition of trusted status between a DCS controller and a host computer according to claim 1, characterized in that: Also includes: During the communication and data exchange between the DCS controller and the host computer, when the host computer issues an instruction to the DCS controller, the DCS controller executes a corresponding task according to the instruction sent by the host computer and obtains an execution result; The DCS controller encrypts the execution result and transmits it back to the host computer.

5. The method for mutual recognition of trusted status between a DCS controller and a host computer according to claim 4 is characterized in that: The DCS controller performs corresponding tasks according to the instructions sent by the host computer, including: The DCS controller receives notification information sent by the host computer; The DCS controller calls the trusted authentication library to decrypt the notification information to obtain the instruction; The DCS controller executes corresponding tasks according to the instructions sent by the host computer.

6. The method for mutual recognition of trusted status between a DCS controller and a host computer according to claim 1, characterized in that: The trusted support module sends alarm information to the DCS controller or the host computer, including: The trusted support module sends the first alarm information to the DCS controller, where the first alarm information is used to instruct the DCS controller to issue an alarm through an indicator light; Alternatively, the trusted support module sends a second alarm message to the host computer, where the second alarm message is used to instruct the host computer to perform a prompt operation.

7. A DCS controller and host computer trusted state mutual recognition system, characterized in that: include: An access module, used to connect the trusted support module to the DCS controller and the host computer respectively; wherein the trusted support module is pre-set with security operation content, and the trusted support module is pre-imported with a communication certificate; A self-check module, used for the trusted support module to self-check whether it has successfully connected to the DCS controller or the host computer; an alarm module, configured to send an alarm message to the DCS controller or the host computer when the trusted support module is not connected to the DCS controller or the host computer; The communication module is used for communicating and exchanging data between the DCS controller and the host computer when the trusted support module is connected to the DCS controller or the host computer and the trusted chain of communication between the DCS controller and the host computer is complete.

8. An electronic device, characterized in that: include: A memory storing at least one instruction; and The processor executes the instructions stored in the memory to implement the method for mutual recognition of trusted status between a DCS controller and a host computer according to any one of claims 1 to 6.

9. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the method for mutual recognition of trusted status between a DCS controller and a host computer according to any one of claims 1 to 6 is implemented.

10. A computer program product, characterized in that The computer program product is stored in a storage medium, and the computer program product is executed by at least one processor to implement the method for mutual recognition of trusted status between a DCS controller and a host computer according to any one of claims 1 to 6.

Images