Intelligent control system of shot blasting machine

Abstract

The invention relates to the technical field of intelligent control of shot blasting machines, and discloses an intelligent control system of a shot blasting machine, a PLC (Programmable Logic Controller) in the shot blasting machine control system based on the PLC exchanges data with an upper computer through the Ethernet, and remote control of the shot blasting machine is realized on the upper computer; the mobile terminal device is connected to the upper computer through the security authentication server, the upper computer exchanges data with the mobile terminal device through an HTTP protocol, and the shot blasting machine controls the application program to transmit a control instruction of a user to the upper computer. The invention provides a technical scheme for carrying out security and credibility authentication on the identity of a user who sends a shot blasting machine control instruction through mobile terminal equipment, and the scheme applies the principle of a certificateless public key cryptosystem to an industrial Internet of Things environment, so that the security of an industrial Internet of Things application server (upper computer) is ensured, and the security of the user is improved. And the calculation efficiency in the process of executing the security and credibility authentication program is obviously improved.

Description

Technical Field

[0001] The invention relates to the technical field of intelligent control of shot blasting machines, in particular to an intelligent control system for shot blasting machines. Background Art

[0002] In modern industrial production, the assembly manufacturing industry often uses a large number of various types of forgings, castings and welded parts. These workpieces have poor surface quality at the beginning of production, often with a lot of residual sand and oxide scale, and there is also a large residual stress on the surface of the workpiece.

[0003] At present, shot blasting with a high degree of automation is mostly used for processing. Shot blasting is a processing method that uses a shot blaster to throw a certain particle size of projectiles at a high speed to the workpiece being processed. This process can effectively remove rust, molding sand and oxide scale on the surface of the workpiece, which not only improves the surface finish of the workpiece, but also enhances the compressive stress on the surface of the workpiece and improves the fatigue resistance of the workpiece.

[0004] The hook-type shot blasting machine is a hook-type workpiece cleaning equipment, which consists of a cleaning cabinet, a lifting motor, a separator, a conveyor belt, two shot blasting controllers, a shot blasting control room, a hook system, dust removal and electrical control. When the shot blasting machine starts working, when the dust removal motor, hoist, screw conveyor and other equipment are ready for operation, the equipment starts to work normally. First, the electric hoist descends to lift the casting to be processed, and then rises to a fixed position through the lifting motor, and then transports the casting into the shot blasting cleaning room along the track. When the casting reaches the preset position, it stops, and then the self-rotating motor of the hook is started to start rotating. At this time, the door of the shot blasting cleaning room is closed, the shot blasting machine is started, the shot gate is opened, and the workpiece is started to be shot blasted and strengthened. This process is repeated until the cleaning is completed, and finally the machine is stopped in sequence.

[0005] The working environment of shot blasting machine is relatively harsh. The use of remote intelligent control can avoid the impact of the environment on human body and microcomputer equipment during the production process. Summary of the invention

[0006] For the hook-type shot blasting machine, the present invention provides an intelligent control system, in which the mobile terminal device transmits the user's control instructions to the host computer, and the host computer exchanges data with the PLC controller through Ethernet, so as to realize remote control of the start-up, operation, shot blasting, alarm and dust removal processes of the shot blasting machine on the host computer.

[0007] An intelligent control system for a shot blasting machine, comprising: a shot blasting machine control system based on PLC, a host computer running a shot blasting machine control service program, a mobile terminal device running a shot blasting machine control application program, and a security authentication server;

[0008] In the PLC-based shot blasting machine control system, PLC is used to control the start-up, operation, shot blasting, alarm and dust removal processes of the shot blasting machine;

[0009] In the PLC-based shot blasting machine control system, the PLC controller exchanges data with the host computer through Ethernet, and the remote control of the shot blasting machine is realized on the host computer;

[0010] The mobile terminal device is connected to the host computer through the security authentication server. The host computer exchanges data with the mobile terminal device through the HTTP protocol and transmits the user's control instructions to the host computer through the shot blasting machine control application.

[0011] Preferably, the security authentication server is used to implement a secure and trusted authentication operation on the identity of a user who issues a shot blasting machine control instruction via a mobile terminal device.

[0012] Preferably, the method by which the security authentication server implements a secure and trusted authentication operation on the identity of a user who issues a shot blasting machine control instruction through a mobile terminal device is:

[0013] Generate identity information of the host computer, security authentication server and the user who issues the shot blasting machine control command through the mobile terminal device;

[0014] Generate secure communication permissions for the host computer, security authentication server, and users who issue shot blasting machine control instructions through mobile terminal devices;

[0015] The user who issues the shot blasting machine control command through the mobile terminal device registers the user control authority on the security authentication server;

[0016] The user who issues the shot blasting machine control command through the mobile terminal device logs in and authenticates on the security authentication server. After the authentication is successful, the mobile terminal device accesses the host computer through the security authentication server.

[0017] Preferably, the communication authority of the host computer includes a secure communication mark and a secure communication number.

[0018] Preferably, the communication authority of the user whose mobile terminal device issues the shot blasting machine control instruction includes: a first safety communication mark, a second safety communication mark and a safety communication number.

[0019] Preferably, the communication authority of the security authentication server includes: a first security communication mark, a second security communication mark and a security communication number.

[0020] Preferably, the user whose mobile terminal device issues the shot blasting machine control instruction registers the user communication authority on the security authentication server to obtain a legal user registration number.

[0021] Compared with the prior art, the present invention has the following beneficial technical effects:

[0022] The present invention provides a technical solution for secure and trusted authentication of the identity of a user who issues a shot blasting machine control instruction through a mobile terminal device. The solution applies the principle of a certificateless public key cryptographic system to an industrial Internet of Things environment, and while ensuring the security of an industrial Internet of Things application server (host computer), it significantly improves the computing efficiency in the process of executing a secure and trusted authentication program. DETAILED DESCRIPTION

[0023] Embodiment 1:

[0024] An intelligent control system for a shot blasting machine, comprising: a shot blasting machine control system based on PLC, a host computer MCcsp running a shot blasting machine control service program, a mobile terminal device Tcappi running a shot blasting machine control application program, and a security authentication server Ssa;

[0025] In the PLC-based shot blasting machine control system, PLC is used to control the start-up, operation, shot blasting, alarm and dust removal processes of the shot blasting machine. It recognizes the input of the switch quantity and realizes the start and stop control of the external AC contactor according to the set start-up process, thereby realizing the control of the peripheral motor;

[0026] In the PLC-based shot blasting machine control system, the PLC controller exchanges data with the host computer MCCsp through Ethernet, and the host computer MCCsp exchanges data with the mobile terminal device Tcappi through the HTTP protocol. The mobile terminal device Tcappi transmits the control instructions of the user Ui to the host computer MCCsp, and the host computer MCCsp realizes remote control of the shot blasting machine;

[0027] And the mobile terminal device Tcappi is connected to the host computer MCCsp through the security authentication server Ssa, and the security authentication server Ssa is used to implement a secure and trusted authentication operation on the identity of the user who issues the shot blasting machine control instruction through the mobile terminal device Tcpi.

[0028] Embodiment 2:

[0029] The method for the security authentication server Ssa to implement the secure and trusted authentication operation of the user identity who issues the shot blasting machine control instruction through the mobile terminal device Tcpi includes the following specific steps:

[0030] Step 1: Initialize the security authentication server Ssa. The specific operations are as follows:

[0031] Select a large prime number p with a bit length of K, where K is a given security parameter;

[0032] Define a bilinear map e: G1×G1→G2;

[0033] G1 and G2 are both multiplicative cyclic groups of order p, and g is the generator of G1;

[0034] Select a hash function H(·);

[0035] Select collision-resistant hash functions H1 and H2:

[0036] H1: {0,1} * →G1;

[0037] H2: {0,1} * →G1;

[0038] Public parameters (e, G1, G1, p, g, H1, H2);

[0039] Step 2: Generate the identity information of the host computer MCcsp, the security authentication server Ssa, and the user Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi. The specific operations are as follows:

[0040] Set the name of the host computer MCcsp in the shot blasting machine intelligent control system DN (MCcsp):

[0041] DN(MCcsp)∈{0,1} * ;

[0042] Set the name DN (Ssa) of the security authentication server Ssa in the shot blasting machine intelligent control system:

[0043] DN(Ssa)∈{0,1} * ;

[0044] Calculate the identity information ID (Ssa) of the security authentication server Ssa:

[0045] ID(Ssa)=DN(MCcsp)∥DN(Ssa);

[0046] Among them, ∥ represents the splicing operation;

[0047] Set the name of the user Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi in the shot blasting machine intelligent control system DN(Ui)∈{0,1} * , calculate the identity information ID(Ui)=DN(MCcsp)||DN(Ui) of the user Ui who issues the shot blasting machine control instruction through the mobile terminal device Tcpi;

[0048] Public parameters (ID(Ssa), ID(Ui));

[0049] Step 3: Generate the communication permissions of the host computer MCcsp. The specific operations are as follows:

[0050] The host computer MCcsp selects the secure communication mark SCM(MCcsp)← R Z p * , calculate the security communication number SCN(MCcsp)=g^SCM(MCcsp), and make the security communication number SCN(MCcsp) public;

[0051] Among them, SCM(MCcsp)← R Z p * Represents Z from a uniform distribution p * = Select an element SCM(MCcsp) from {1,2,…p-1};

[0052] Step 4: Generate the communication authority of user Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi. The specific operations are as follows:

[0053] (1) User Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi selects the first safety communication mark SCMⅠ(Ui)← R Z p * , calculate the security communication number SCN(Ui)=g^SCMⅠ(Ui), and make the security communication number SCN(Ui) public;

[0054] Among them, SCMⅠ(Ui)← R Z p * Represents Z from a uniform distribution p * Select element SCMⅠ(Ui);

[0055] (2) The host computer MCcsp calculates the auxiliary generation information AigI(Ui) of the second safety communication mark SCMⅡ(Ui) of the user Ui who issues the shot blasting machine control instruction through the mobile terminal device Tcpi:

[0056] AigI(Ui)=[SCN(Ui)^SCM(MCcsp)]×[h(Ui)^SCM(MCcsp)];

[0057] Where, h(Ui)=H1(ID(Ui));

[0058] h(Ui) is the identity hash value of the user Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi;

[0059] Send the auxiliary generated information AigI(Ui) to the user Ui who issues the shot blasting machine control instruction through the mobile terminal device Tcpi;

[0060] (3) User Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi calculates the second safety communication mark SCMⅡ(Ui) and verifies whether equation (1) holds;

[0061] Among them, SCMⅡ(Ui)=AigI(Ui)÷[SCN(MCcsp)^SCMⅠ(Ui)];

[0062] e(SCMⅡ(Ui), g)=e(H1(ID(Ui)), SCN(MCcsp)) (1)

[0063] If equation (1) is not true, a failure mark is output, otherwise the user Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi generates a safety communication mark (SCMⅠ(Ui), SCMⅡ(Ui));

[0064] Step 5: Generate the communication authority of the security authentication server Ssa. The specific operations are as follows:

[0065] (1) The security authentication server Ssa selects the first security communication mark SCMⅠ(Ssa)← R Z p * , calculate the security communication number SCN(Ssa)=g^SCMⅠ(Ssa), and make the security communication number SCN(Ssa) public;

[0066] Among them, SCMⅠ(Ssa)← R Z p * Represents Z from a uniform distribution p * Select element SCMⅠ(Ssa);

[0067] (2) The host computer MCcsp calculates the auxiliary generation information AigI(Ssa) of the second security communication mark SCMⅡ(Ssa) of the security authentication server Ssa:

[0068] AigI(Ssa)=[SCN(Ssa)^SCM(MCcsp)]×[h(Ssa)^SCM(MCcsp)];

[0069] Where, h(Ssa)=H1(ID(Ssa));

[0070] h(Ssa) is the identity hash value of the security authentication server Ssa;

[0071] Send the auxiliary generated information AigI(Ssa) to the security authentication server Ssa;

[0072] (3) The security authentication server Ssa calculates the second security communication mark SCMⅡ(Ssa) and verifies whether equation (2) holds;

[0073] Where, SCMⅡ(Ssa)=AigI(Ssa)÷[SCN(MCcsp)^SCMⅠ(Ssa)];

[0074] e(SCMⅡ(Ssa), g)=e(H1(ID(Ssa)), SCN(MCcsp)) (2)

[0075] If equation (2) does not hold, a failure mark is output, otherwise, the security authentication server Ssa generates a secure communication mark (SCMⅠ(Ssa), SCMⅡ(Ssa));

[0076] Step 6: User Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi registers the user communication authority on the security authentication server Ssa. The specific operations are as follows:

[0077] (1) User Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi selects a registration number RN(Ui)← R Z p * ; Among them, RN(Ui)← R Z p * Represents Z from a uniform distribution p * Select element RN(Ui) from

[0078] (2) User Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi performs the following calculation process:

[0079] Calculate the registration certificate RC(Ui) = g^RN(Ui);

[0080] Calculate the first registration information RI-I(Ui)=H2(ID(Ui)∥ID(Ssa));

[0081] Calculate the second registration information RI-II(Ui)=RI-I(Ui)×RC(Ui);

[0082] Calculate the third registration information RI-III (Ui) = [RI-II (Ui) ^ SCMⅠ (Ui)] × SCMⅡ (Ui);

[0083] Output registration request RegReq = {ID(Ui), RC(Ui), RI-Ⅰ(Ui), RI-Ⅲ(Ui)};

[0084] Send the registration request RegReq to the security authentication server Ssa;

[0085] (3) The security authentication server Ssa performs the following operation process:

[0086] Check whether ID (Ui) exists in the registered user information table Tregister;

[0087] If ID (Ui) is already stored in the registered user information table Tregister, the registered flag is returned. Otherwise, the user Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi verifies whether equation (3) is true or not;

[0088] e(RI-Ⅲ(Ui), g)=e(RC(Ui)×RI-Ⅰ(Ui), SCN(Ui))×e(H1(ID(Ui)), SCN(MCcsp))(3)

[0089] If equation (3) does not hold, a failure mark is output. Otherwise, the security authentication server Ssa performs the following operations:

[0090] Select the registration mark RM(Ui)← R Z p * ; Among them, RM(Ui)← R Z p * Represents Z from a uniform distribution p * =Select an element RM(Ui) from {1,2,…p-1};

[0091] Calculate the registration response information RRI(Ui)=g^RM(Ui);

[0092] Store ID(Ui), RM(Ui), RRI(Ui) and RI-Ⅰ(Ui) in the registered user information table Tregiste r;

[0093] Perform the following calculations:

[0094] Calculate the first registration parameter RP-I(Ui)=H2(ID(Ssa) / / ID(Ui));

[0095] Calculate the second registration parameter RP-II(Ui)=RRI(Ui)×RP-I(Ui);

[0096] Calculate the third registration parameter RP-Ⅲ(Ui)=[RP-Ⅱ(Ui)^SCMⅠ(Ssa)]×SCMⅡ(Ssa));

[0097] Output registration response information RegRes = {ID (Ssa), RRI (Ui), RP-III (Ui)};

[0098] Send the registration response information RegRes to the user Ui who issues the shot blasting machine control instruction through the mobile terminal device Tcpi;

[0099] (4) The user Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi verifies whether equation (4) is true or not by executing the calculation program;

[0100] Calculate the first registration parameter RP-I(Ui)=H2(ID(Ssa) / / ID(Ui));

[0101] Calculate the second registration parameter RP-II(Ui)=RRI(Ui)×RP-I(Ui);

[0102] e(RP-Ⅲ(Ui), g)=e(RP-Ⅱ(Ui), SCN(Ssa))×e(H1(ID(Ssa)), SCN(MCcsp)) (4)

[0103] If equation (4) is not true, the registration failure mark is output. Otherwise, the user Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi is successfully registered on the security authentication server Ssa;

[0104] Step 7: User Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi logs in and authenticates on the security authentication server Ssa. The specific operations are as follows:

[0105] (1) User Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi selects the login authentication number LAN(Ui)← R Z p * ; Among them, LAN(Ui)← R Z p * Represents Z from a uniform distribution p * Select element LAN(Ui);

[0106] The user Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi performs the following calculation process:

[0107] Calculate the first registration information RI-I(Ui)=H2(ID(Ui)∥ID(Ssa));

[0108] Calculate the login authentication credential LAC(Ui)=g^LAN(Ui);

[0109] Output login authentication request AuthReq = {ID(Ui), LAC(Ui), RI-I(Ui)};

[0110] Send the login authentication request AuthReq to the security authentication server Ssa;

[0111] (2) The security authentication server Ssa queries the registered user information table Tregister based on ID(Ui) to see whether the RI-I(Ui) value stored therein is equal to the received value;

[0112] If they are not equal, an error message is returned. Otherwise, the security authentication server Ssa performs the following operation process:

[0113] Select auxiliary authentication parameters AAP (Ssa→Ui)← R Z p * ; Among them, AAP(Ssa→Ui)← R Z p * Represents Z from a uniform distribution p * Select element AAP(Ssa→Ui);

[0114] Calculate auxiliary authentication information AAI(Ssa→Ui)=g^AAP(Ssa→Ui);

[0115] Calculate shared authentication information SAI(Ssa→Ui)=RC(Ui)^RM(Ui);

[0116] Calculate the authentication hash value VⅠ(Ssa→Ui)=H(SAI(Ssa→Ui)∥LAC(Ui));

[0117] Output authentication response information AuthRes = {ID (Ssa), AAI (Ssa → Ui), VI (Ssa → Ui)};

[0118] Send the authentication response information AuthRes to the user Ui who issues the shot blasting machine control instruction through the mobile terminal device Tcpi;

[0119] (3) The user Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi queries the registration response information RRI(Ui) in the registration response information RegRes according to ID(Ssa);

[0120] Calculate shared authentication information SAI(Ui→Ssa)=RRI(Ui)^RN(Ui);

[0121] Calculate the authentication hash value VⅠ(Ui→Ssa)=H(SAI(Ui→Ssa)∥LAC(Ui));

[0122] Verify whether VⅠ(Ui→Ssa) is equal to VⅠ(Ssa→Ui);

[0123] If VⅠ(Ui→Ssa) is not equal to VⅠ(Ssa→Ui), the identity authentication of the security authentication server Ssa fails. On the contrary, the user Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi completes the identity authentication of the security authentication server Ssa.

[0124] The user Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi calculates the authentication hash value VⅡ(Ui→Ssa)=H(SAI(Ui→Ssa)∥AAI(Ssa→Ui)) and sends the hash value VⅡ(Ui→Ssa) to the security authentication server Ssa;

[0125] (4) The security authentication server Ssa calculates the authentication hash value VⅡ(Ssa→Ui):

[0126] VⅡ(Ssa→Ui)=H(SAI(Ssa→Ui)∥AAI(Ssa→Ui));

[0127] Verify whether VⅡ(Ui→Ssa) is equal to VⅡ(Ssa→Ui);

[0128] If VⅡ(Ui→Ssa) is not equal to VⅡ(Ssa→Ui), the identity authentication of the user Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi fails, and the authentication process is terminated;

[0129] On the contrary, the security authentication server Ssa completes the authentication of the identity of the user Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi;

[0130] At this point, the mobile terminal device Tcappi accesses the host computer MCcsp through the security authentication server Ssa.

Claims

1. An intelligent control system for a shot blasting machine, characterized in that: include: PLC-based shot blasting machine control system, a host computer running a shot blasting machine control service program, a mobile terminal device running a shot blasting machine control application program, and a security authentication server; In the PLC-based shot blasting machine control system, PLC is used to control the start-up, operation, shot blasting, alarm and dust removal processes of the shot blasting machine; In the PLC-based shot blasting machine control system, the PLC controller exchanges data with the host computer through Ethernet, and the remote control of the shot blasting machine is realized on the host computer; The mobile terminal device is connected to the host computer through the security authentication server. The host computer exchanges data with the mobile terminal device through the HTTP protocol and transmits the user's control instructions to the host computer through the shot blasting machine control application.

2. According to claim 1, the intelligent control system for a shot blasting machine is characterized in that: The security authentication server is used to implement a secure and trusted authentication operation on the identity of the user who issues the shot blasting machine control command through the mobile terminal device.

3. The intelligent control system for a shot blasting machine according to claim 2, characterized in that: The method by which the security authentication server implements the secure and trusted authentication operation of the identity of the user who issues the shot blasting machine control command through the mobile terminal device is: Generate identity information of the host computer, security authentication server and the user who issues the shot blasting machine control command through the mobile terminal device; Generate secure communication permissions for the host computer, security authentication server, and users who issue shot blasting machine control instructions through mobile terminal devices; The user who issues the shot blasting machine control command through the mobile terminal device registers the user control authority on the security authentication server; The user who issues the shot blasting machine control command through the mobile terminal device logs in and authenticates on the security authentication server. After the authentication is successful, the mobile terminal device accesses the host computer through the security authentication server.

4. The intelligent control system for a shot blasting machine according to claim 3, characterized in that: The communication authority of the host computer includes the secure communication mark and the secure communication number.

5. The intelligent control system for a shot blasting machine according to claim 3, characterized in that: The communication authority of the user whose mobile terminal device issues the shot blasting machine control instruction includes: a first safety communication mark, a second safety communication mark and a safety communication number.

6. The intelligent control system for a shot blasting machine according to claim 3, characterized in that: The communication authority of the security authentication server includes: a first security communication mark, a second security communication mark and a security communication number.

7. The intelligent control system for a shot blasting machine according to claim 3, characterized in that: The user whose mobile terminal device issues the shot blasting machine control command registers the user communication authority on the security authentication server and obtains the legal user registration number.