Method and system for dynamically sensing credible state of DCS (Distributed Control System)

Abstract

The invention discloses a credible state dynamic sensing method and system of a DCS system, and belongs to the technical field of thermal power plant intelligent control, and the method comprises the steps that credible software is configured in equipment, and the credible software uploads equipment information to a credible management platform through agent software; and the credible management platform dynamically senses the credible state of the equipment through the credible software, and the credible management platform sends a request instruction to the equipment through the credible software to obtain the state information of the equipment. According to the method, the credible state of the underlying equipment of the DCS is dynamically sensed by installing credible software, uploading data by using agent software, monitoring the state of the equipment in real time, actively sending a request instruction by a credible management platform and the like. According to the method, the accuracy and the timeliness of information acquisition are improved, the safety and the reliability of the DCS are enhanced, and a powerful guarantee is provided for stable operation of the DCS.

Description

Technical Field

[0001] The present invention relates to the technical field of intelligent control of thermal power plants, and in particular to a method and system for dynamically sensing the trusted state of a DCS system. Background Art

[0002] The DCS system (Distributed Control System) adopts the basic design concept of decentralized control and centralized operation and management, and adopts a multi-layer hierarchical, cooperative and autonomous structure. Its main features are its centralized management and decentralized control. The DCS system of a thermal power plant includes multiple devices such as controllers, engineer stations, history stations, and operator stations. These devices will be registered in the trusted industrial control system security management platform (referred to as the trusted management platform) and will be managed uniformly by the trusted management platform.

[0003] The method of obtaining the trusted state of the equipment in the DCS system often uses control flow graphs for analysis. However, this method is difficult to effectively represent the structure of parallel programs when processing parallel programs. Therefore, it is impossible to fully and accurately reflect the interaction and state changes between the various devices in the DCS system, and it is impossible to confirm the trusted state of the equipment in real time, which means that the DCS system may be threatened by unauthorized access, malware infection, or hardware failure without knowing it. These threats may cause the DCS system to lose control, data leakage or tampering, and then cause production accidents or safety incidents. As the core control system of thermal power production, the stability and reliability of the DCS system are crucial to production efficiency. If the trusted state of the equipment cannot be perceived in real time, once the equipment fails or is abnormal, it may not be discovered and handled in time, resulting in production interruption or reduced efficiency. For the DCS system of a thermal power plant, it is crucial to obtain the trusted state of the equipment in real time and dynamically. This can not only improve the security and stability of the DCS system, but also ensure the smooth progress of the production process and the accurate recording of data. Summary of the invention

[0004] In view of the problems existing in the prior art, the present invention provides a method and system for dynamically sensing the trusted state of a DCS system, which can dynamically acquire the trusted state of a device in real time and improve the security and stability of the DCS system.

[0005] The present invention is achieved through the following technical solutions: In a first aspect, the present application provides a method for dynamically perceiving a trusted state of a DCS system, comprising: Configure trusted software in the devices of the DCS system, and the trusted software uploads device information to the trusted management platform through agent software; The trusted management platform dynamically senses the trusted state of the device through the trusted software, including: The trusted software monitors the operating status and trusted changes of the device in real time, and upon detecting a status change of the device, the trusted software organizes the operating status and the trusted changes into a standardized data format and uploads the data to the trusted management platform through the agent software; The trusted management platform sends a request instruction to the device through the trusted software to obtain status information of the device.

[0006] Preferably, the method for configuring the trusted software in the equipment of the DCS system is as follows: The installation package of the trusted software is uploaded to the device and installed, and the operating parameters of the trusted software are configured.

[0007] Preferably, the trusted software transmits the operating status and trusted changes of the device to the agent software in an encrypted transmission manner.

[0008] Preferably, the device information includes device model, serial number, IP address and initial status data.

[0009] Preferably, the trusted management platform sends a request instruction to the device through the trusted software, including: The trusted management platform sends a request instruction to the agent software, the agent software receives the request instruction from the trusted management platform and forwards the request instruction to the trusted software, and the trusted software executes the request instruction.

[0010] Preferably, the request instruction includes querying the current value of a specific parameter, requesting a device log, and obtaining a fault code list.

[0011] Preferably, the trusted state includes at least one of the following: Identity authentication, which is used to indicate whether the identity of the device has been authenticated; Data integrity, which is used to indicate whether the data transmitted and stored by the device is complete; Access control, which is used to indicate whether access to the device is controlled; Security policy execution, where the security policy execution is used to indicate whether the device is running according to a preset security policy.

[0012] In a second aspect, the present application provides a trusted state dynamic perception system of a DCS system, comprising: Trusted module, used to configure trusted software in the equipment of DCS system. Trusted software uploads equipment information to the trusted management platform through agent software. A perception module, used for the trusted management platform to dynamically perceive the trusted state of the device through the trusted software, including: The trusted software monitors the operating status and trusted changes of the device in real time, and upon detecting a status change of the device, the trusted software organizes the operating status and the trusted changes into a standardized data format and uploads the data to the trusted management platform through the agent software; The trusted management platform sends a request instruction to the device through the trusted software to obtain status information of the device.

[0013] In a third aspect, the present application provides an electronic device, including: Memory for storing computer programs; The processor is used to implement the steps of the method for dynamically perceiving the trusted state of a DCS system when executing the computer program.

[0014] In a fourth aspect, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method for dynamically perceiving the trusted state of a DCS system are implemented.

[0015] Compared with the prior art, the present invention has the following beneficial technical effects: The present application provides a method for dynamic perception of the trusted state of a DCS system. By configuring trusted software in the device, the trusted software can monitor the operating state and trusted changes of the device in real time. Once the state of the device is found to have changed, the state change information is immediately sorted and uploaded to the trusted management platform, ensuring the real-time and accuracy of the device state information. This dynamic perception mechanism enables the DCS system to respond quickly to changes in the device state, providing strong support for the stable operation of the production process. Secondly, the proxy software, as a bridge for data transmission, can receive requests from the trusted management platform and forward the requests to the trusted software. This design enables the DCS system to flexibly handle different types of requests and data. With the continuous development and upgrading of the DCS system, the trusted software, the proxy software and the trusted management platform can be expanded and upgraded accordingly to adapt to new device types and functional requirements. The present invention realizes dynamic perception and real-time monitoring of the trusted state of the device by introducing trusted software, proxy software and a trusted management platform, and has the advantages of high security, real-time, flexibility, high efficiency and easy management.

[0016] Furthermore, by configuring trusted software in the equipment and using encrypted transmission during data transmission, the confidentiality and integrity of the data are effectively guaranteed, and the risk of data leakage and tampering is prevented. The built-in security mechanism of the trusted software can monitor and defend against potential malicious attacks and illegal access in real time, enhancing the security of the DCS system.

[0017] Furthermore, the equipment status information obtained by the trusted management platform through the trusted software includes not only basic information such as equipment model, serial number, IP address, etc., but also detailed information such as the real-time operation status of the equipment, trusted changes, current values ​​of specific parameters, equipment logs, fault code lists, etc. This information provides comprehensive data support for the monitoring and management of the production process. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without creative work.

[0019] Figure 1 A flow chart of a method for dynamically sensing a trusted state of a DCS system provided by the present invention; Figure 2 A structural diagram of a trusted state dynamic perception system of a DCS system provided by the present invention. DETAILED DESCRIPTION

[0020] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. The components of the embodiments of the present application described and shown in the drawings here can be arranged and designed in various different configurations.

[0021] Therefore, the following detailed description of the embodiments of the present application provided in the accompanying drawings is not intended to limit the scope of the present application for which protection is sought, but merely represents selected embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.

[0022] See also Figure 1 The present application implements a method for dynamically perceiving the trusted state of a DCS system, comprising the following steps: Step 1: Configure trusted software in the equipment of the DCS system; Deploy specially designed trusted software on the equipment of the DCS system. The trusted software has a high degree of security and reliability, and can monitor and control the operation of the equipment while ensuring the integrity and confidentiality of the equipment's data transmission. The installation process uploads the installation package of the trusted software to the equipment, installs the trusted software through the management interface of the equipment, configures the necessary operating parameters of the trusted software, and ensures that the trusted software is compatible with other components of the DCS system.

[0023] Trusted software is the core of the DCS system. Trusted software can collect device status information, monitor abnormal device behavior, and report to the trusted management platform in real time. Trusted software installed on the device can directly access the device's hardware resources to ensure the accuracy and timeliness of data acquisition.

[0024] Trusted software can collect real-time operating status data of equipment in the DCS system, including but not limited to temperature, pressure, flow, switch status, etc. At the same time, it can also monitor abnormal behavior and potential failures of equipment to ensure the smooth progress of the production process.

[0025] The collected data will be further processed and analyzed by trusted software to extract valuable information, which can be used to assess the health of the equipment, predict potential failure points, and provide support for subsequent decision-making.

[0026] Trusted software has built-in multiple security mechanisms to protect the DCS system from malicious attacks and illegal access. It can encrypt data transmission and storage to ensure data confidentiality and integrity. At the same time, it can detect and prevent various network security threats, such as viruses, Trojans, etc.

[0027] Once a device status change or abnormal behavior is detected, the trusted software will immediately generate a corresponding status report and upload the status report to the trusted management platform through the agent software. In this way, managers can understand the operation status of the device in real time and take timely measures to solve the problem.

[0028] Step 2: The trusted software registers and uploads the device information to the trusted management platform through the agent software; Trusted software uses agent software as a bridge for data transmission to register and upload basic device information (such as device model, serial number, IP (Internet Protocol) address, etc.) and initial status data to the trusted management platform. Agent software is a lightweight middleware that is responsible for data formatting and transmission. This step ensures that the trusted management platform can identify and manage newly added devices.

[0029] The use of agent software increases the flexibility and security of data transmission. It can achieve reliable data transmission without directly exposing the internal details of the device or trusted software. The registration of device information enables the trusted management platform to establish a database containing all controlled device information, providing a basis for subsequent status monitoring and management.

[0030] The agent software is responsible for transmitting the device status information, operation records and other data collected by the trusted software to the trusted management platform through appropriate communication protocols (such as HTTP (HyperText Transfer Protocol), TCP (Transmission Control Protocol), UDP (User Datagram Protocol), etc.). At the same time, the agent software can also receive request instructions from the trusted management platform and forward the request instructions to the trusted software.

[0031] Since the trusted software and the trusted management platform may use different data formats and communication protocols, the agent software has the ability to convert data. It can convert the data generated by the trusted software into a format that the trusted management platform can recognize, ensuring the correctness and compatibility of the data.

[0032] To ensure the security of data transmission, trusted software usually encrypts the transmitted data. This can prevent sensitive information from being stolen or tampered with during transmission and ensure the confidentiality and integrity of the data.

[0033] Trusted software has built-in encryption algorithms, such as symmetric encryption algorithms and asymmetric encryption algorithms. Based on the importance of the data and transmission requirements, the trusted software will select the most appropriate encryption algorithm to encrypt the data.

[0034] The encryption process requires keys to ensure the security of data. Trusted software generates keys for the encryption and decryption processes. These keys can be symmetric keys (for symmetric encryption algorithms) or public and private key pairs (for asymmetric encryption algorithms).

[0035] Before data encryption, the trusted software will perform initial processing on the data, such as padding and grouping, to ensure that the data length meets the requirements of the encryption algorithm. Then, the trusted software uses the selected encryption algorithm and key to encrypt the data, converting the plaintext (data) into ciphertext (encrypted data). After encryption is completed, the trusted software transmits the ciphertext to the recipient (trusted management platform) through the agent software. During the data transmission process, even if the data is intercepted, the attacker cannot directly read and understand the ciphertext content.

[0036] The trusted management platform receives the ciphertext from the agent software and decrypts the ciphertext according to the decryption key. The decryption process involves mathematical operations and transformations that are opposite to the encryption process, restoring the ciphertext to plaintext, that is, the original data. After the decryption is completed, the trusted management platform verifies the data to ensure its integrity and authenticity.

[0037] The proxy software can reasonably allocate network bandwidth and server resources through load balancing technology to improve the overall performance and stability of the system. At the same time, it can also realize the failover function. When a node fails, it automatically forwards the request to other available nodes to ensure the continuity and availability of data.

[0038] Step 3: The trusted management platform obtains the trusted status of the device through the trusted software.

[0039] During the normal operation of the equipment, the trusted software will continuously monitor the operating status and running status of the equipment. The operation or running status changes on the equipment will be monitored by the trusted software, and the change information will be uploaded to the trusted management platform. When the running status changes (such as equipment failure, parameter adjustment, illegal access, etc.) are detected, the trusted software will immediately organize these change information into a standardized data format and upload it to the trusted management platform through the agent software. The trusted management platform is responsible for receiving, parsing and storing this data for subsequent analysis and processing.

[0040] Through real-time monitoring and instant reporting, the trusted management platform can keep track of the latest status of the equipment at any time, discover potential problems in a timely manner and take measures. This real-time performance is crucial to ensure the stable operation of the DCS system.

[0041] Trusted status refers to the state of a device at a certain moment that can be verified and trusted. This state is usually based on a series of security and reliability indicators to assess whether the device is operating normally and whether it is subject to potential threats or attacks.

[0042] The trusted status includes: 1. Identity authentication: whether the identity of the device has been verified to ensure that it is a legal and authorized device. 2. Data integrity: whether the data transmitted and stored by the device remains intact and has not been tampered with or destroyed. 3. Access control: whether access to the device is strictly controlled, and only authorized users can access sensitive information or perform key operations. 4. Security policy execution: whether the device operates in accordance with established security policies, including firewall rules, intrusion detection, and defense system configuration. 5. Operation status monitoring: whether the operating status of the device is stable and whether there are any abnormalities or failures. 6. Trusted measurement: The trusted status of the device is evaluated in real time or regularly through trusted measurement mechanisms (such as static measurement, dynamic measurement, etc.) to ensure that it is in a trusted state.

[0043] Step 4: The trusted management platform sends a request instruction to the trusted software to obtain the status information of the device corresponding to the trusted software.

[0044] In order to have a more comprehensive understanding of the operation of the device, the trusted management platform can actively send request instructions to the trusted software to obtain detailed status information of a specific device. These request instructions may include querying the current value of a specific parameter, requesting device logs, obtaining a list of fault codes, etc. After receiving the request instruction, the trusted software will perform the corresponding operation according to the content of the request instruction and return the result to the trusted management platform.

[0045] This step enables the trusted management platform to actively manage and control the device. By sending request instructions and receiving responses, the trusted management platform can flexibly obtain the required data without waiting for the trusted software to automatically report. This interactive method improves the flexibility and efficiency of data acquisition and helps to better cope with complex and changing production environments.

[0046] To adapt to different types of equipment, the trusted management platform supports data requests via HTTP, TCP or UDP protocols. It can dynamically perceive the trusted status of the underlying equipment in real time, ensuring the accuracy and timeliness of the DCS system's required information.

[0047] This method realizes the dynamic perception of the trusted status of the underlying equipment of the DCS system by installing trusted software, using agent software to upload data, real-time monitoring of the equipment operation status, and the trusted management platform actively sending request instructions. This method not only improves the accuracy and timeliness of data acquisition, but also enhances the security and reliability of the DCS system, providing a strong guarantee for the stable operation of the DCS system.

[0048] See also Figure 2 The present application also provides a trusted state dynamic perception system of a DCS system, including: Trusted module, used to configure trusted software in the equipment of DCS system. Trusted software uploads equipment information to the trusted management platform through agent software. A perception module, used for the trusted management platform to dynamically perceive the trusted state of the device through the trusted software, including: The trusted software monitors the operating status and trusted changes of the device in real time, and upon detecting a status change of the device, the trusted software organizes the operating status and the trusted changes into a standardized data format and uploads the data to the trusted management platform through the agent software; The trusted management platform sends a request instruction to the device through the trusted software to obtain status information of the device.

[0049] It should be noted that in the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of each module is only a logical function division. There may be other division methods in actual implementation. For example, multiple modules can be combined or integrated into another device, or some features can be ignored or not executed. The module described as a separate component may or may not be physically separated. The component displayed as a module may be a physical unit or multiple physical units, that is, it may be located in one place, or it may be distributed in multiple different places. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment.

[0050] In addition, each module in each embodiment of the present invention may be integrated into a processing unit, each module may exist physically separately, or two or more modules may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of a software functional unit.

[0051] An electronic device provided in an embodiment of the present application includes a memory and a processor. The memory stores a computer program. When the processor executes the computer program, the steps of a method for dynamically perceiving a trusted state of a DCS system as described in any of the above embodiments are implemented.

[0052] Another electronic device provided in the embodiment of the present application may also include: an input port connected to the processor, used to transmit multimodal data collected by an external acquisition device to the processor; and a display unit connected to the processor, used to display the processing results of the processor to the outside world; a communication module connected to the processor, used to realize the communication between the electronic device and the outside world. The display unit can be a display panel, a laser scanning display, etc.; the communication method adopted by the communication module includes but is not limited to mobile high-definition link technology, universal serial bus, high-definition multimedia interface, wireless connection (including wireless fidelity technology, Bluetooth communication technology, low-power Bluetooth communication technology, communication technology based on IEEE802.11s), IEEE 802.11s is a standard developed by IEEE (Institute of Electrical and Electronics Engineers) for wireless local area networks, specifically used to support the construction and management of wireless mesh networks.

[0053] An embodiment of the present application provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, the steps of a method for dynamically perceiving a trusted state of a DCS system as described in any of the above embodiments are implemented.

[0054] The computer-readable storage medium involved in this application includes random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disks, removable disks, CD-ROMs (Compact Disc Read-Only Memory), or any other form of storage medium known in the technical field.

[0055] For the description of the relevant parts of the trusted state dynamic perception system, electronic device and computer-readable storage medium of a DCS system provided in the embodiment of the present application, please refer to the detailed description of the corresponding parts in the trusted state dynamic perception method of a DCS system provided in the embodiment of the present application, which will not be repeated here. In addition, the parts of the above technical solutions provided in the embodiment of the present application that are consistent with the implementation principles of the corresponding technical solutions in the prior art are not described in detail to avoid excessive elaboration.

[0056] The above contents are only for explaining the technical idea of ​​the present invention and cannot be used to limit the protection scope of the present invention. Any changes made on the basis of the technical solution in accordance with the technical idea proposed by the present invention shall fall within the protection scope of the claims of the present invention.

Claims

1. A method for dynamically perceiving the trusted state of a DCS system, characterized in that: include: Configure trusted software in the devices of the DCS system, and the trusted software uploads device information to the trusted management platform through agent software; The trusted management platform dynamically senses the trusted state of the device through the trusted software, including: The trusted software monitors the operating status and trusted changes of the device in real time, and upon detecting a status change of the device, the trusted software organizes the operating status and the trusted changes into a standardized data format and uploads the data to the trusted management platform through the agent software; The trusted management platform sends a request instruction to the device through the trusted software to obtain status information of the device.

2. The method for dynamically sensing the trusted state of a DCS system according to claim 1, characterized in that: The method for configuring the trusted software in the equipment of the DCS system is as follows: The installation package of the trusted software is uploaded to the device and installed, and the operating parameters of the trusted software are configured.

3. The method for dynamically sensing the trusted state of a DCS system according to claim 1, characterized in that: The trusted software transmits the operating status and trusted changes of the device to the agent software in an encrypted transmission manner.

4. The method for dynamically sensing the trusted state of a DCS system according to claim 1, characterized in that: The device information includes device model, serial number, IP address and initial status data.

5. The method for dynamically sensing the trusted state of a DCS system according to claim 1, characterized in that: The trusted management platform sends a request instruction to the device through the trusted software, including: The trusted management platform sends a request instruction to the agent software, the agent software receives the request instruction from the trusted management platform and forwards the request instruction to the trusted software, and the trusted software executes the request instruction.

6. The method for dynamically sensing the trusted state of a DCS system according to claim 1, characterized in that: The request instructions include querying the current value of a specific parameter, requesting a device log, and obtaining a fault code list.

7. The method for dynamically sensing the trusted state of a DCS system according to claim 1, characterized in that: The trustworthy status includes at least one of the following: Identity authentication, which is used to indicate whether the identity of the device has been authenticated; Data integrity, which is used to indicate whether the data transmitted and stored by the device is complete; Access control, which is used to indicate whether access to the device is controlled; Security policy execution, where the security policy execution is used to indicate whether the device is running according to a preset security policy.

8. A trusted state dynamic perception system of a DCS system, characterized in that: include: Trusted module, used to configure trusted software in the equipment of DCS system. Trusted software uploads equipment information to the trusted management platform through agent software. A perception module, used for the trusted management platform to dynamically perceive the trusted state of the device through the trusted software, including: The trusted software monitors the operating status and trusted changes of the device in real time, and upon detecting a status change of the device, the trusted software organizes the operating status and the trusted changes into a standardized data format and uploads the data to the trusted management platform through the agent software; The trusted management platform sends a request instruction to the device through the trusted software to obtain status information of the device.

9. An electronic device, characterized in that: include: Memory for storing computer programs; A processor is used to implement the steps of a method for dynamically sensing the trusted state of a DCS system as described in any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method for dynamically sensing the trusted state of a DCS system according to any one of claims 1 to 7 are implemented.

Images