Method for acquiring industrial data

Abstract

The invention provides a method for acquiring industrial data, which belongs to the technical field of data acquisition and comprises the following steps of: accessing various types of industrial equipment by setting a communication plug-in, incorporating various communication protocols by utilizing a communication database, converting the communication protocols into a uniform format and storing the communication protocols as non-encrypted industrial protocols; the method comprises the following steps: encrypting a non-encrypted industrial protocol through a set mode of an extended class loader and then transmitting the encrypted industrial protocol, and encrypting by adopting a set encryption algorithm in an encryption process to obtain encrypted data; performing data matching on the encrypted data set by using a corresponding protocol through an extension class loader for encryption, and encrypting a message under an independent protocol by using an independently set extension class loader; the method can reasonably help the industrial plant to manage equipment operation, realizes association of signals of different specifications, easily guarantees the data transmission safety in the current signal transmission process, avoids serious consequences caused by data leakage, and effectively improves the data transmission safety of the industrial plant.

Description

Technical Field

[0001] The invention belongs to the technical field of data acquisition, and in particular relates to a method for acquiring industrial data. Background Art

[0002] In the current industrial process, it is an inevitable trend to realize industrial data collection, storage, analysis and application of different industries through industrial data centers. The industrial data center first needs to solve the Internet access problem of multiple industrial protocols. At present, there are many fieldbus protocols, and there are more than 40 popular fieldbus standards. The industrial data center needs a method to access the signal sources of multiple different standard protocols.

[0003] Existing industrial control systems often achieve Internet access to industrial control systems in the following ways: achieving Internet access by modifying existing configuration software and achieving access to signal sources through remote terminal units and data transmission units. The use of configuration software includes two ways: directly connecting to the configuration software database and achieving Internet access through the OPC protocol on the configuration software. However, this method requires the modification of the existing central control system based on configuration software, and for small industrial control systems and unmanned industrial control systems, the deployment problem of the configuration software system needs to be solved. The method of establishing an Internet connection using a remote terminal unit and a data transmission unit needs to solve the underlying protocol driver and the retrieval access problem of the signal device. For industrial data centers, the application and business layers need to use a unified access method to access signal sources of different protocols and different connection methods, and to achieve signal associations of different specifications. At present, the signal transmission process is prone to data leakage and is exploited by industry competitors. Summary of the invention

[0004] The present invention aims at solving the problems in the prior art. The technical solution adopted in the present application is: a method for obtaining industrial data, comprising: Step 1: Access various types of industrial equipment by setting up communication plug-ins, incorporate various communication protocols into the communication database, convert the communication protocols into a unified format and store them as non-encrypted industrial protocols; Step 2: The non-encrypted industrial protocol is encrypted and transmitted by running it in a setting mode of the extended class loader. The encryption process uses a set encryption algorithm to encrypt and obtain encrypted data. Step 3: Encrypt the encrypted data set by matching the corresponding protocol through the extended class loader, and encrypt the message under the separate protocol by using a separately set extended class loader; Step 4: When the user needs to obtain data and decrypt it, the decryption is verified by CRC to see if the decryption is valid. The critical time point is used for switching calculations. CRC is used to check whether the time seed is switched. The extended class loader is set to run the decryption. The corresponding decryption method uses C language to write the decryption rules and then stores them in the database.

[0005] The encryption algorithm is to calculate the KEY by byte splitting after preprocessing the data to obtain a binary code, select a random number r, and use the KEY to generate a ciphertext C, which is a point pair, C = {rG, M+rQ}, where Q is the public key. The crc code, the current time code and the public key are XORed to obtain the shift number. Each byte is shifted, the high bit is cyclically shifted to the left, the low bit is cyclically shifted to the right, the crc is not moved, and the encryption result is obtained by recombining.

[0006] Furthermore, by setting up communication plug-ins to access various types of industrial equipment, various communication protocols are included in the communication database, the communication protocols are converted into a unified format, the signal in a unified format transmitted by the communication plug-in is received through the device adapter, the communication protocol is searched from the communication database, data analysis is performed after the protocol matches, and the analyzed data is sent to the TLS terminal for encryption processing. The TLS terminal is configured at the edge of the device to encrypt the industrial data message and interact with the customized driver to implement the full protocol stack, including Modbus, MC, and S7 non-encrypted industrial protocols for encrypted transmission, to ensure the security of industrial equipment and the edge side, and the encrypted files are stored in the industrial database; when data needs to be accessed, the identity information is authenticated, and the stored data is extracted and decrypted by the controller to obtain processable industrial data, and the industrial data is sent to the user terminal.

[0007] Furthermore, industrial data includes traffic information of industrial networks, equipment operation information, equipment parameter information, and personnel configuration information.

[0008] Furthermore, the traffic information of the industrial network includes: the traffic information corresponding to the transport layer, network layer and application layer of the industrial network respectively, the equipment operation information includes the operation time, operation status and error report information during the operation process, the equipment parameter information includes the equipment model, equipment factory settings, equipment power parameters, source IP, destination IP, source IP MAC, destination IP MAC and device name and other information, and the personnel configuration information includes the personnel list, business and corresponding positions and work information.

[0009] Compared with the prior art, the advantages and positive effects of the present invention are: The present invention provides a method for obtaining industrial data, including: connecting various types of industrial equipment by setting a communication plug-in, incorporating various communication protocols into a communication database, converting the communication protocol into a unified format and storing it as a non-encrypted industrial protocol; encrypting the non-encrypted industrial protocol and transmitting it after running it in a setting mode of an extended class loader, wherein the encryption process uses a set encryption algorithm to encrypt and obtain encrypted data; The encrypted data set is encrypted by matching the corresponding protocol through the extended class loader, and the message under the separate protocol is encrypted by a separately set extended class loader; when the user needs to obtain data and decrypt it, the decryption is verified by CRC to see if the decryption is valid, the time critical point is switched and calculated, and the CRC is used to check whether the time seed is switched, and the decryption is performed in the setting mode of the extended class loader. The corresponding decryption method is written in C language and the decryption rules are stored in the database, which can reasonably help industrial plants to manage equipment operation and realize signal association of different specifications. In addition, the current signal transmission process is easy to ensure the security of data transmission, avoid serious consequences after data leakage, and effectively improve the data transmission security of industrial plants. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0011] Figure 1 The figure is a flow chart of a method for acquiring industrial data according to the present invention. DETAILED DESCRIPTION

[0012] In order to more clearly understand the above-mentioned purpose, features and advantages of the present invention, the present invention is further described below in conjunction with the accompanying drawings and embodiments. It should be noted that the embodiments of the present application and the features in the embodiments can be combined with each other without conflict.

[0013] In the following description, many specific details are set forth to facilitate a full understanding of the present invention. However, the present invention may also be implemented in other ways than those described herein. Therefore, the present invention is not limited to the specific embodiments of the following disclosure.

[0014] Embodiment 1, as Figure 1As shown, the present application provides a method for obtaining industrial data. Currently, there is no transmission method specifically used for encrypting industrial data transmission. The traditional information data encryption method is to transmit the data through an encryption algorithm. Industrial data is different from information data. Industrial data involves not only data but also messages of various industrial protocols. This makes it impossible for traditional encryption methods to be directly used for industrial data encryption. For example, the AES encryption algorithm uses byte substitution, row shifting, column confusion and round key combination for encryption. This method cannot effectively encrypt messages of multiple different protocols.

[0015] In order to solve this technical problem, the present application adopts a method of encrypting and transmitting the non-encrypted industrial protocol through the setting mode of the extended class loader. The encryption process adopts a set encryption algorithm for encryption. The set encryption algorithm is to obtain the binary code by preprocessing the data and then calculate the KEY by byte splitting, select a random number r, and generate a ciphertext C from the KEY. The ciphertext is a point pair, C = {rG, M+rQ}, where Q is the public key. The crc code, the current time code and the public key are XORed to obtain the shift number. According to each byte shift, the high bit is cyclically shifted to the left, and the low bit is cyclically shifted to the right. The crc does not move, and the encryption result is obtained by recombination.

[0016] The decryption result is the opposite. After decryption, CRC is used to verify whether the decryption is valid. The time critical point is switched and calculated. CRC is used to check whether the time seed is switched. The encryption is performed in the setting mode of the extended class loader. The corresponding decryption method uses C language to write the decryption rules and then uses the database for storage.

[0017] By setting the encryption algorithm, the security of encrypted files can be effectively improved, and information can be effectively prevented from being obtained by industry competitors after data leakage. The encryption method set by the extended class loader is an encryption method that uses the corresponding protocol to match data. The messages under a single protocol are encrypted using a separately set extended class loader, which effectively solves the current problem of being unable to effectively encrypt messages of multiple different protocols.

[0018] Specifically, communication plug-ins are set up to access various types of industrial equipment, various communication protocols are included in the communication database, the communication protocols are converted into a unified format, the signal in a unified format transmitted by the communication plug-in is received through the device adapter, the communication protocol is searched from the communication database, data analysis is performed after the protocol is matched, and the analyzed data is sent to the TLS terminal for encryption processing. The TLS terminal is configured at the edge of the device to encrypt the industrial data message and interact with the customized driver to realize the full protocol stack, including Modbus, MC, S7 and other non-encrypted industrial protocols for encrypted transmission, to ensure the security of industrial equipment and edge side, and the encrypted files are stored in the industrial database; when data needs to be accessed, the identity information is authenticated, and the stored data is extracted and decrypted by the controller to obtain the industrial data that can be processed, and the industrial data is sent to the user terminal; Industrial data includes traffic information, equipment operation information, equipment parameter information and personnel configuration information of industrial networks. The traffic information of industrial networks includes: the traffic information corresponding to the transport layer, network layer and application layer of the industrial network respectively; the equipment operation information includes the operation time, operation status and error reports during the operation process; the equipment parameter information includes the equipment model, equipment factory settings, equipment power parameters, source IP, destination IP, source IP MAC, destination IP MAC and equipment name; the personnel configuration information includes the list of personnel, business and corresponding positions and work information.

[0019] The communication protocol is converted into a unified format by using a communication protocol converter. The communication protocol includes any one or more of Modbus, MC, and S7. The communication protocol is obtained based on the data document of the communication protocol; the communication protocol converter includes at least two data interface modules and a protocol conversion module; the protocol conversion module is connected to at least two data interface modules, and is used to receive the communication protocol from at least two data interface modules and convert the received communication protocol into a standard MODBUS protocol. After the protocol is matched, data analysis is performed using a data analysis host computer. A virtual instrument host computer written based on Labview software realizes communication with a data acquisition, storage, and transfer processing module, and can realize the acquisition and analysis of data of industrial equipment, and transmit the analyzed data to the controller. Dynamic data analysis is to model the localized stored data, draw tables or lists, and then substitute them into the data for online analysis; data mining is to obtain the dynamic data refresh rate through data frequency analysis, and save the data granularity and data acquisition frequency.

[0020] The above description is only a preferred embodiment of the present invention and does not limit the present invention in other forms. Any technician familiar with the profession may use the technical content disclosed above to change or modify it into an equivalent embodiment with equivalent changes and apply it to other fields. However, any simple modification, equivalent change and modification made to the above embodiment based on the technical essence of the present invention without departing from the content of the technical solution of the present invention still falls within the protection scope of the technical solution of the present invention.

Claims

1. A method for acquiring industrial data, characterized in that: include: Step 1: Access various types of industrial equipment by setting up communication plug-ins, incorporate various communication protocols into the communication database, convert the communication protocols into a unified format and store them as non-encrypted industrial protocols; Step 2: The non-encrypted industrial protocol is encrypted and transmitted by running it in a setting mode of the extended class loader. The encryption process uses a set encryption algorithm to encrypt and obtain encrypted data. Step 3: Encrypt the encrypted data set by matching the corresponding protocol through the extended class loader, and encrypt the message under the separate protocol by using a separately set extended class loader; Step 4: When the user needs to obtain data and decrypt it, the decryption is verified by CRC to see if the decryption is valid. The critical time point is used for switching calculations. CRC is used to check whether the time seed is switched. The extended class loader is set to run the decryption. The corresponding decryption method uses C language to write the decryption rules and then stores them in the database.

2. A method for acquiring industrial data according to claim 1, characterized in that: The encryption algorithm is to calculate the KEY by byte splitting after preprocessing the data to obtain a binary code, select a random number r, and use the KEY to generate a ciphertext C, which is a point pair, C = {rG, M+rQ}, where Q is the public key. The crc code, the current time code and the public key are XORed to obtain the shift number. Each byte is shifted, the high bit is cyclically shifted to the left, the low bit is cyclically shifted to the right, the crc is not moved, and the encryption result is obtained by recombining.

3. A method for acquiring industrial data according to claim 1, characterized in that: By setting up communication plug-ins to access various types of industrial equipment, various communication protocols are included in the communication database, the communication protocols are converted into a unified format, the signal in a unified format transmitted by the communication plug-in is received through the device adapter, the communication protocol is searched from the communication database, data analysis is performed after the protocol matches, and the analyzed data is sent to the TLS terminal for encryption processing. The TLS terminal is configured at the edge of the device to encrypt the industrial data message and interact with the customized driver to implement the full protocol stack, including Modbus, MC, and S7 non-encrypted industrial protocols for encrypted transmission, to ensure the security of industrial equipment and the edge side, and the encrypted files are stored in the industrial database; when data needs to be accessed, the identity information is authenticated, and the stored data is extracted and decrypted by the controller to obtain processable industrial data, and the industrial data is sent to the user terminal.

4. A method for acquiring industrial data according to claim 1, characterized in that: Industrial data includes industrial network traffic information, equipment operation information, equipment parameter information, and personnel configuration information.

5. A method for acquiring industrial data according to claim 4, characterized in that: The traffic information of the industrial network includes: the traffic information corresponding to the transport layer, network layer and application layer of the industrial network respectively; the equipment operation information includes the operation time, operation status and error report information during the operation process; the equipment parameter information includes the equipment model, equipment factory settings, equipment power parameters, source IP, destination IP, source IP MAC, destination IP MAC and device name; the personnel configuration information includes the list of personnel, business and corresponding positions and work information.

Images