Industrial information safety transmission device and method based on two-dimensional code

Abstract

The invention aims to provide an industrial information secure transmission device and method based on a two-dimensional code. The device comprises a box body, and a display, a power supply system, a network interface A and a network interface B which are arranged on the box body, the analysis computer A, the analysis computer B, the industrial code reader B, the data display A and the data display B are arranged in the box body. The method comprises the following steps: step 1, an analysis computer A receives industrial management network data and converts the data into two-dimensional code encrypted data; 2, the industrial code reader B reads two-dimensional code encrypted data of the analysis computer A and then sends the two-dimensional code encrypted data to an analysis computer B; and step 3, the analysis computer B analyzes the received two-dimensional code encrypted data and sends the analyzed data to the industrial control network. Safety transmission of industrial information is realized by analyzing computer software control, displaying of a data display and reading of data by an industrial code reader through a physical isolation mode and a software encryption function.

Description

Technical Field

[0001] The present invention belongs to the field of industrial information security technology, and specifically relates to an industrial information security transmission device and method based on a two-dimensional code. Background Art

[0002] QR code is a barcode technology widely used in various fields. It has the characteristics of large information capacity, strong readability, easy production and easy dissemination. In the industrial field, the safe transmission and sharing of information is very important, and the industrial information security transmission device technology based on QR code came into being to solve this problem. By using the industrial information security transmission device technology based on QR code, the safe sharing and transmission of industrial information can be achieved, thereby improving the efficiency and competitiveness of industrial enterprises. At the same time, this technology can also reduce the error rate and misoperation rate in the process of information transmission, and ensure the stability and reliability of industrial production systems. The industrial information security transmission device technology based on QR code has been widely used in industrial automation, logistics management, production process monitoring and other fields, and will continue to play an important role in future industrial development.

[0003] The main disadvantages of existing QR code industrial information security transmission devices are as follows:

[0004] (1) The hardware structure of the QR code transmission device is loose, the equipment is numerous and complex, and it is difficult to deploy; the QR code display to scanning process is mostly open, which poses a risk of QR code information leakage.

[0005] (2) For large-capacity information transmission, the use of color QR codes to increase the amount of transmitted information places high demands on hardware equipment. Although it increases the amount of information, it also reduces the recognition rate. The use of compression technology to compress information can increase the amount of information transmitted by the QR code to a certain extent, but it cannot fundamentally solve the problem.

[0006] As can be seen from the above, simply, quickly and safely realizing the secure transmission of large-capacity information between two physically isolated information equipment terminals without network connection, increasing the security of information transmission, and improving the accuracy of information transmission are problems to be solved in this field. Summary of the invention

[0007] The purpose of the present invention is to provide an industrial information security transmission device and method based on QR code, which realizes the secure transmission of industrial information through physical isolation and software encryption function by analyzing computer software control, data display display and industrial code reader reading data.

[0008] The technical solution adopted by the present invention to achieve the above-mentioned purpose is: an industrial information security transmission device based on a two-dimensional code, comprising: a box, a display arranged on the box, a power supply system, a network interface A and a network interface B; an analysis computer A, an analysis computer B, an industrial code reader B, a data display A and a data display B arranged in the box;

[0009] The power supply system is used to supply power to each component;

[0010] The display is arranged on the front panel of the box body, connected to the analysis computers A and B, and is used to display the device status information and the amount of information transmission;

[0011] The analysis computer A is connected to the industrial management network via the network interface A, and is used to convert the industrial data received by the industrial management network into two-dimensional code encrypted information, and display it on the data display A;

[0012] The industrial code reader B is connected to the analysis computers A and B respectively, and is used to read the two-dimensional code encrypted information converted by the analysis computer A and transmit it to the analysis computer B;

[0013] The analysis computer B is connected to the industrial control network via a network interface B, and is used to parse the encrypted QR code information received by the industrial code reader B and transmit it to the industrial control network, while displaying the verification QR code and data transmission status on the data display B.

[0014] Furthermore, the above-mentioned QR code-based industrial information security transmission device also includes an industrial code reader A and an alarm component; the industrial code reader A is used to read the verification QR code of the analysis computer B and transmit it to the analysis computer A; the alarm component is used to receive the verification and comparison of the verification QR code by the analysis computer A and issue an alarm message when a transmission error is found.

[0015] The present invention also provides a method for securely transmitting industrial information based on a two-dimensional code, comprising the following steps:

[0016] Step 1: Analyzing computer A receives industrial management network data and converts the data into QR code encrypted data;

[0017] Step 2: Industrial code reader B reads the encrypted data of the QR code of analysis computer A and sends it to analysis computer B;

[0018] Step 3: Analysis computer B parses the received QR code encrypted data and then sends the parsed data to the industrial control network.

[0019] Furthermore, in the above-mentioned method for secure transmission of industrial information based on a two-dimensional code, the step 3, before the analysis computer B sends the data to the industrial control network, further comprises the following steps:

[0020] Step 3-1, the analysis computer B converts the parsed data into a verification QR code;

[0021] Step 3-2, industrial code reader A reads the verification QR code of analysis computer B and transmits it to analysis computer A;

[0022] Step 3-3, analysis computer A converts the received verification QR code into readable text, and performs content verification and comparison with the industrial management network data received by analysis computer A to confirm the transmission quality; if the content verification is correct, analysis computer A notifies analysis computer B to send this data to the industrial control network, and analysis computer B displays the result of generating the verification QR code and the result of successful transmission on data display B; if the content verification is wrong, analysis computer A issues an alarm message, and after analysis computer B receives the alarm message, it cancels sending this data to the industrial control network, and displays the result of generating the verification QR code and the result of failed transmission on data display B.

[0023] Furthermore, in the above-mentioned QR code-based industrial information security transmission method, in step 1, the analysis computer A also displays the QR code encrypted information on the data display A.

[0024] Furthermore, in the above-mentioned QR code-based industrial information security transmission method, the QR code encryption algorithm adopts the national cryptographic algorithm SM2 formulated by the State Cryptography Bureau (asymmetric encryption, signature and key generation speed are better than RSA, based on ECC algorithm).

[0025] Furthermore, in the above-mentioned industrial information security transmission method based on QR code, the QR code content on the data display A includes the following three parts:

[0026] Message header: version number (3 bytes), information source (10 bytes), message ID (14 format: MMDDHHMISSsss+3-digit sequence number), paging sequence number (4 bytes, specifically 2 digits for the current page number and 2 digits for the total page number);

[0027] Message body: The information is encrypted with the SM2 private key and converted into readable text using the BASE64 algorithm;

[0028] Check bit: 2 bytes, used to ensure data integrity, simply accumulate all bytes and then take the result of the modulus operation;

[0029] The content displayed on the data display B includes the verification QR code and the data transmission status (the status includes transmission failure and transmission success);

[0030] The content of the QR code on data display B: message header: version number (3 bytes), information source (10 bytes), message ID (14 format: MMDDHHMISSsss+3-digit sequence number), paging number (4 bytes, specifically 2 digits for the current page number and 2 digits for the total page number), receiving status (1 byte), check code (2 bytes).

[0031] Furthermore, in the above-mentioned method for secure transmission of industrial information based on a two-dimensional code, in step 3-2, the specific method in which the industrial code reader A reads the verification two-dimensional code of the analysis computer B and transmits it to the analysis computer A is:

[0032] 3-2-1. After the industrial code reader A reads and verifies the content of the QR code, it parses and verifies the content of the QR code. If the parsing fails, it notifies the analysis computer A to issue an alarm message and notifies the analysis computer B to cancel sending this data to the industrial control network;

[0033] 3-2-2. When the content of the QR code is parsed correctly, first verify the integrity of the information through the check digit. If it is incomplete, notify the analysis computer A to issue an alarm and notify the analysis computer B to cancel the sending of this data to the industrial control network. After the verification is successful, parse the message header information in the QR code, identify the transmission protocol version number, information source, message ID, paging information, and then send the verification QR code to the analysis computer A.

[0034] Furthermore, in the above-mentioned industrial information security transmission method based on QR code, in step 3-3, the data verification method is:

[0035] The message body is decrypted using the preset SM2 public key and converted into readable text using the BASE64 algorithm; if the decryption or conversion is unsuccessful or the decryption is successful but the content verification is incorrect, it is set to a transmission failure state, and analysis computer A issues an alarm message and notifies analysis computer B; if the decryption is successful and the content verification is correct, analysis computer A assembles and updates the received transmission information and sets it to a transmission success state, and then notifies analysis computer B.

[0036] Furthermore, in the above-mentioned QR code-based industrial information security transmission method, the analysis computer A will update the amount of data received from the industrial management network on the display in real time, and the analysis computer B will update the amount of data sent to the industrial management network on the display in real time.

[0037] The present invention has the following beneficial effects and advantages:

[0038] 1. The present invention can realize data security transmission between industrial management network and industrial control network by physical isolation. The hardware device of the present invention is highly integrated and small in size, which is convenient for installation and use.

[0039] 2. The present invention realizes the transmission of industrial management network data to industrial control network through QR code display and reading. The transmission process is closed and controllable, ensuring the safe transmission of information;

[0040] 3. In terms of software, the present invention adopts the cryptographic algorithm SM2 to encrypt messages, standardizes the transmission message format, and transmits information in a paging form to ensure information security and meet the transmission requirements of large-capacity information. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 It is a structural schematic diagram of the basic device of the present invention;

[0042] Among them, 1. display, 2. power supply system, 3. network interface A, 4. network interface B, 5. analysis computer A, 6. analysis computer B, 7. industrial code reader A, 8. industrial code reader B, 9. data display A, 10. data display B.

[0043] Figure 2 The figure is a flow chart of the method of the present invention. DETAILED DESCRIPTION

[0044] Example 1

[0045] An industrial information security transmission device based on a QR code, such as Figure 1 As shown, it includes: a box, a display 1 arranged on the box, a power supply system 2, a network interface A3 and a network interface B4; an analysis computer A5, an analysis computer B6, an industrial code reader B8, a data display A9 and a data display B10 arranged in the box.

[0046] The power supply system is used to supply power to each component;

[0047] The display is arranged on the front panel of the box body, connected to the analysis computers A and B, and is used to display the device status information and the amount of information transmission;

[0048] The analysis computer A is connected to the industrial management network via the network interface A, and is used to convert the industrial data received by the industrial management network into two-dimensional code encrypted information, and display it on the data display A;

[0049] The industrial code reader B is connected to the analysis computers A and B respectively, and is used to read the two-dimensional code information converted by the analysis computer A and transmit it to the analysis computer B;

[0050] The analysis computer B is connected to the industrial control network via the network interface B, and is used to convert the two-dimensional code information received by the industrial code reader B into a verification two-dimensional code after parsing and transmit it to the industrial control network, and at the same time display the verification two-dimensional code on the data display B;

[0051] The device also includes an industrial code reader A7 and an alarm component; the industrial code reader A is used to read the verification QR code of the analysis computer B and transmit it to the analysis computer A; the alarm component is used to receive the verification and comparison of the verification QR code by computer A and issue an alarm message when a transmission error is found.

[0052] Example 2

[0053] A method for secure transmission of industrial information based on QR code, such as Figure 2 As shown, the device of Example 1 includes the following steps:

[0054] Step 1: Analytical computer A receives industrial management network data, converts the data into QR code encrypted data, and the QR code encryption algorithm adopts the national cryptographic algorithm SM2 (asymmetric encryption, signature and key generation speed is better than RSA, based on ECC algorithm) formulated by the State Cryptography Bureau. Analytical computer A also displays the QR code encrypted information on data display A, and updates the amount of data received from the industrial management network on the display in real time;

[0055] Step 2: Industrial code reader B reads the encrypted data of the QR code of analysis computer A and sends it to analysis computer B;

[0056] Step 3: Analysis computer B parses the received QR code encrypted data, and then sends the parsed data to the industrial control network, and updates the amount of data sent to the industrial management network on the display in real time, completing the secure transmission of the management network data information to the industrial control network;

[0057] Before the analysis computer B sends the data to the industrial control network, the following steps are also included:

[0058] Step 3-1, the analysis computer B converts the parsed data into a verification QR code;

[0059] Step 3-2: Industrial barcode reader A reads the verification QR code of analysis computer B and transmits it to analysis computer A. The specific method is as follows:

[0060] 3-2-1. After the industrial code reader A reads and verifies the content of the QR code, it parses and verifies the content of the QR code according to the transmission protocol. If the parsing fails, it notifies the analysis computer A to issue an alarm message and notifies the analysis computer B to cancel the sending of this data to the industrial control network;

[0061] 3-2-2. Verify that the QR code content is parsed correctly. First, check the integrity of the information through the check digit (the check digit is used to ensure data integrity, and the result of the modulo operation after simply accumulating all bytes). If it is incomplete, notify the analysis computer A to issue an alarm message and notify the analysis computer B to cancel the sending of this data to the industrial control network. After the verification is successful, parse the message header information in the QR code, identify the transmission protocol version number, information source, message ID, and paging information, and then send the verification QR code to the analysis computer A.

[0062] Step 3-3, the analysis computer A converts the received verification QR code into readable text, and performs content verification and comparison with the industrial management network data received by the analysis computer A to confirm the transmission quality; if the content verification is correct, the analysis computer A notifies the analysis computer B to send this data to the industrial control network, and the analysis computer B displays the result of generating the verification QR code and the result of successful transmission on the data display B; if the content verification is wrong, the analysis computer A issues an alarm message, and after receiving the alarm message, the analysis computer B cancels sending this data to the industrial control network, and displays the result of generating the verification QR code and the result of failed transmission on the data display B;

[0063] The content verification and comparison method is specifically as follows:

[0064] The message body is decrypted using the preset SM2 public key and converted into readable text using the BASE64 algorithm; if the decryption or conversion is unsuccessful or the decryption is successful but the content verification is wrong, it is set to a transmission failure state, and the analysis computer A issues an alarm message and notifies the analysis computer B; if the decryption is successful and the content verification is correct, the analysis computer A assembles and updates the received transmission information and sets it to a transmission success state, and then notifies the analysis computer B;

[0065] The verification QR code content on data display B includes: message header: version number (3 bytes), information source (10 bytes), message ID (14 format: MMDDHHMISSsss+3-digit sequence number), paging number (4 bytes, specifically 2 digits for the current page number and 2 digits for the total page number), receiving status (1 byte), and verification code (2 bytes).

Claims

1. A QR code-based industrial information security transmission device, characterized in that: include: A box, a display, a power system, a network interface A and a network interface B arranged on the box; An analysis computer A, an analysis computer B, an industrial code reader B, a data display A and a data display B are arranged in the box; The power supply system is used to supply power to each component; The display is arranged on the front panel of the box body, connected to the analysis computers A and B, and is used to display the device status information and the amount of information transmission; The analysis computer A is connected to the industrial management network via the network interface A, and is used to convert the industrial data received by the industrial management network into two-dimensional code encrypted information, and display it on the data display A; The industrial code reader B is connected to the analysis computers A and B respectively, and is used to read the two-dimensional code encrypted information converted by the analysis computer A and transmit it to the analysis computer B; The analysis computer B is connected to the industrial control network via a network interface B, and is used to parse the encrypted QR code information received by the industrial code reader B and transmit it to the industrial control network, while displaying the verification QR code and data transmission status on the data display B.

2. The industrial information security transmission device based on a two-dimensional code according to claim 1 is characterized in that: It also includes an industrial code reader A and an alarm component; the industrial code reader A is used to read the verification QR code of the analysis computer B and transmit it to the analysis computer A; the alarm component is used to receive the verification and comparison of the verification QR code by computer A and issue an alarm message when a transmission error is found.

3. A method for secure transmission of industrial information based on a QR code, characterized in that: The steps include: Step 1: Analyzing computer A receives industrial management network data and converts the data into QR code encrypted data; Step 2: Industrial code reader B reads the encrypted data of the QR code of analysis computer A and sends it to analysis computer B; Step 3: Analysis computer B parses the received QR code encrypted data and then sends the parsed data to the industrial control network.

4. The method for secure transmission of industrial information based on a two-dimensional code according to claim 3 is characterized in that: The step 3, before the analysis computer B sends the data to the industrial control network, also includes the following steps: Step 3-1, the analysis computer B converts the parsed data into a verification QR code; Step 3-2, industrial code reader A reads the verification QR code of analysis computer B and transmits it to analysis computer A; Step 3-3, analysis computer A converts the received verification QR code into readable text, and performs content verification and comparison with the industrial management network data received by analysis computer A to confirm the transmission quality; if the content verification is correct, analysis computer A notifies analysis computer B to send this data to the industrial control network, and analysis computer B displays the result of generating the verification QR code and the result of successful transmission on data display B; if the content verification is wrong, analysis computer A issues an alarm message, and after analysis computer B receives the alarm message, it cancels sending this data to the industrial control network, and displays the result of generating the verification QR code and the result of failed transmission on data display B.

5. The method for secure transmission of industrial information based on a two-dimensional code according to claim 3 is characterized in that: In step 1, the analysis computer A also displays the QR code encrypted information on the data display A.

6. The method for secure transmission of industrial information based on a two-dimensional code according to claim 3, characterized in that: The QR code encryption algorithm adopts the national cryptographic algorithm SM2 formulated by the State Cryptography Administration.

7. The method for secure transmission of industrial information based on a two-dimensional code according to claim 4, characterized in that: In step 3-2, the specific method for the industrial code reader A to read the verification QR code of the analysis computer B and transmit it to the analysis computer A is: 3-2-1. After the industrial code reader A reads and verifies the content of the QR code, it parses and verifies the content of the QR code. If the parsing fails, it notifies the analysis computer A to issue an alarm message and notifies the analysis computer B to cancel sending this data to the industrial control network; 3-2-2. When the content of the QR code is parsed correctly, first verify the integrity of the information through the check digit. If it is incomplete, notify the analysis computer A to issue an alarm and notify the analysis computer B to cancel the sending of this data to the industrial control network. After the verification is successful, parse the message header information in the QR code, identify the transmission protocol version number, information source, message ID, paging information, and then send the verification QR code to the analysis computer A.

8. The method for secure transmission of industrial information based on a two-dimensional code according to claim 4, characterized in that: In step 3-3, the data verification method is: The message body is decrypted using the preset SM2 public key and converted into readable text using the BASE64 algorithm; if the decryption or conversion is unsuccessful or the decryption is successful but the content verification is incorrect, it is set to a transmission failure state, and analysis computer A issues an alarm message and notifies analysis computer B; if the decryption is successful and the content verification is correct, analysis computer A assembles and updates the received transmission information and sets it to a transmission success state, and then notifies analysis computer B.

9. The method for secure transmission of industrial information based on a two-dimensional code according to claim 3, characterized in that: The QR code on the data display A includes the following three parts: Message header: version number, information source, message ID, paging number; Message body: The information is encrypted using the SM2 private key and converted into readable text using the BASE64 algorithm; Check bit: 2 bytes, used to ensure data integrity, simply accumulate all bytes and then take the result of the modulus operation; The content displayed on the data display B includes the verification QR code and the data transmission status, which includes transmission failure and transmission success; Verify the QR code content: message header: version number, information source, message ID, paging number, receiving status, verification code.

10. The method for secure transmission of industrial information based on a two-dimensional code according to claim 3, characterized in that: The analysis computer A updates the amount of data received from the industrial management network on the display in real time, and the analysis computer B updates the amount of data sent to the industrial management network on the display in real time.

Images