Industrial computer dynamic encryption method, device, storage medium and computer equipment

Abstract

The industrial computer dynamic encryption method, device, storage medium and computer equipment provided by the present application include: the password management platform regularly collects time-sensitive information to be encrypted from each industrial computer, pre-processes each information to be encrypted and then forwards it to the encryption machine; the encryption machine splices the received pre-processed information to be encrypted to obtain a target string, determines an encryption algorithm and determines a key according to the encryption algorithm, encrypts the target string based on the key to obtain a dynamic encryption seed, generates a corresponding dynamic password according to the dynamic encryption seed, and transmits the dynamic password back to the password management platform. By collecting time-sensitive information to be encrypted, the dynamic password finally generated is time-sensitive, and in the process of generating the dynamic password, the time-sensitive target string is encrypted to obtain a dynamic encryption seed, and then a dynamic password is generated, which can increase the randomness of the password to improve the access security of the industrial computer.

Description

Technical Field

[0001] The present application relates to the field of industrial security technology, and in particular to a method, device, storage medium and computer equipment for dynamic encryption of an industrial computer. Background Art

[0002] With the vigorous development of the field of industrial automation control, various advanced intelligent devices and control systems are deeply integrated. In this process, industrial computers contain a large number of key production process instructions and data interaction programs. In order to ensure the access security of industrial computers, a fixed password generation and management mechanism is generally adopted. In this way, the administrator often sets a set of passwords based on simple rules or personal habits, and then remains unchanged for a considerable period of time. Users obtain operation permissions with this static password.

[0003] However, this traditional method has exposed many serious flaws in the face of the current complex and ever-changing network security situation. Since the security of fixed passwords is extremely low, they can be easily stolen by criminals through network sniffing and other means, making it difficult to ensure the security of industrial computers. Summary of the invention

[0004] The purpose of this application is to solve at least one of the above-mentioned technical defects, especially the technical defect in the prior art that the security of fixed passwords is extremely low and can be easily stolen by criminals through network sniffing and other means, making it difficult to ensure the security of industrial computers.

[0005] In a first aspect, the present application provides an industrial computer dynamic encryption method, which is applied to a dynamic encryption system. The system includes an encryption machine and a password management platform. The method includes:

[0006] The password management platform regularly collects time-sensitive information to be encrypted from each industrial computer, pre-processes each piece of information to be encrypted, and then forwards the pre-processed information to be encrypted to the encryption machine;

[0007] The encryption machine concatenates the received pre-processed information to be encrypted to obtain a target character string, determines an encryption algorithm and determines a key according to the encryption algorithm, encrypts the target character string based on the key to obtain a dynamic encryption seed, generates a corresponding dynamic password according to the dynamic encryption seed, and transmits the dynamic password back to the password management platform;

[0008] When receiving the dynamic password, the password management platform stores the dynamic password according to the industrial computer to which it belongs, and sends the dynamic password to the corresponding industrial computer.

[0009] In one embodiment, the encryption machine concatenates the received pre-processed information to be encrypted to obtain a target string, including:

[0010] The encryption machine determines a plurality of information in the received pre-processed information to be encrypted, and randomly determines the splicing order of the various information;

[0011] The encryption machine splices the pre-processed information to be encrypted according to the splicing order of various information, and determines the spliced ​​character string as the target character string.

[0012] In one embodiment, determining an encryption algorithm and determining a key according to the encryption algorithm includes:

[0013] The encryption machine selects the algorithm with the lowest usage frequency from a preset algorithm library as the encryption algorithm, and updates the usage frequency of the encryption algorithm;

[0014] The encryption engine determines the calculation factors used by the encryption algorithm, and calculates the key used for encryption based on the encryption algorithm and the calculation factors used by it.

[0015] In one embodiment, encrypting the target character string based on the key to obtain a dynamic encryption seed, and generating a corresponding dynamic password according to the dynamic encryption seed includes:

[0016] The encryption machine performs encryption operation on the target character string according to the encryption algorithm and the key to obtain a dynamic encryption seed;

[0017] The encryption machine performs a hash operation on the dynamic password seed according to a preset hash function, obtains a hash value of the dynamic password seed, and then transforms the hash value to obtain a dynamic password corresponding to the dynamic password seed.

[0018] In one embodiment, the method further comprises:

[0019] When receiving a password request instruction from a user, the password management platform determines the target industrial computer that the user wants to log in to based on the password request instruction, and obtains the latest dynamic password corresponding to the target industrial computer stored in the password management platform and sends it to the user, so that the user can use the dynamic password to log in to the target industrial computer.

[0020] In one embodiment, the password management platform periodically collects time-sensitive information to be encrypted from each industrial computer, pre-processes each piece of information to be encrypted, and then forwards each piece of pre-processed information to be encrypted to the encryption machine, including:

[0021] The password management platform collects the current time, device address and temperature of each industrial computer from each industrial computer when the preset collection cycle is triggered to form the information to be encrypted of each industrial computer in this collection cycle;

[0022] The password management platform performs data cleaning on each piece of information to be encrypted, and adjusts the format of each piece of information to be encrypted after data cleaning, and after obtaining each piece of pre-processed information to be encrypted, forwards each piece of pre-processed information to be encrypted to the encryption machine.

[0023] In one embodiment, the method further comprises:

[0024] When a user successfully logs in and receives a password viewing instruction, the password management platform divides the dynamic passwords stored in the password management platform using the industrial computer as a division dimension, and visually displays the divided dynamic passwords in the password management platform.

[0025] In a second aspect, the present application provides an industrial computer dynamic encryption device, which is applied to a dynamic encryption system. The system includes an encryption machine and a password management platform. The device includes:

[0026] An information collection module is used for the password management platform to regularly collect timely information to be encrypted from the industrial computer, pre-process the information to be encrypted, and then forward the pre-processed information to be encrypted to the encryption machine;

[0027] An information encryption module, used for the encryption machine to splice the pre-processed information to be encrypted to obtain a target character string, and to determine an encryption algorithm and determine a key according to the encryption algorithm, encrypt the target character string based on the key to obtain a dynamic encryption seed, generate a corresponding dynamic password according to the dynamic encryption seed, and transmit the dynamic password back to the password management platform;

[0028] The password management module is used for the password management platform to store the dynamic password when receiving the dynamic password, and send the dynamic password to the industrial computer.

[0029] In a third aspect, the present application provides a storage medium storing computer-readable instructions. When the computer-readable instructions are executed by one or more processors, the one or more processors execute the steps of the industrial computer dynamic encryption method as described in any of the above embodiments.

[0030] In a fourth aspect, the present application provides a computer device, comprising: one or more processors, and a memory;

[0031] The memory stores computer-readable instructions, and when the one or more processors execute the computer-readable instructions, the steps of the industrial computer dynamic encryption method described in any one of the above embodiments are performed.

[0032] It can be seen from the above technical solutions that the embodiments of the present application have the following advantages:

[0033] The industrial computer dynamic encryption method, device, storage medium and computer equipment provided by the present application are applied to a dynamic encryption system, wherein the system includes an encryption machine and a password management platform, and the method includes: the password management platform regularly collects time-sensitive information to be encrypted from each industrial computer, pre-processes each information to be encrypted, and then forwards each pre-processed information to be encrypted to the encryption machine; the encryption machine splices the received pre-processed information to be encrypted to obtain a target string, and determines an encryption algorithm and determines a key according to the encryption algorithm, encrypts the target string based on the key to obtain a dynamic encryption seed, generates a corresponding dynamic password according to the dynamic encryption seed, and transmits the dynamic password back to the password management platform. The time-sensitive information to be encrypted is collected through the password management platform, so that the dynamic password finally generated has timeliness, and in the process of generating the dynamic password, the time-sensitive target string is encrypted to obtain a dynamic encryption seed, and then a dynamic password is generated, which can increase the randomness of the password, thereby improving the access security of the industrial computer. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0035] Figure 1 A schematic diagram of a flow chart of a dynamic encryption method for an industrial computer provided in an embodiment of the present application;

[0036] Figure 2 A flowchart of the steps of the encryption machine provided in the embodiment of the present application splicing the received pre-processed information to be encrypted to obtain a target character string;

[0037] Figure 3 A flowchart of the steps of the password management platform provided in the embodiment of the present application regularly collecting time-sensitive information to be encrypted from each industrial computer, pre-processing each information to be encrypted, and then forwarding each pre-processed information to be encrypted to the encryption machine;

[0038] Figure 4 A schematic diagram of the structure of a dynamic encryption device for an industrial computer provided in an embodiment of the present application;

[0039] Figure 5 An internal structure diagram of a computer device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0040] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0041] like Figure 1 As shown, the present application provides an industrial computer dynamic encryption method, which is applied to a dynamic encryption system. The system includes an encryption machine and a password management platform. The method includes:

[0042] S101: The password management platform regularly collects time-sensitive information to be encrypted from each industrial computer, pre-processes each piece of information to be encrypted, and then forwards the pre-processed information to be encrypted to the encryption machine.

[0043] In this step, the password management platform can collect time-sensitive information to be encrypted from each industrial computer corresponding to the password management platform according to a preset cycle time, and then preprocess each information to be encrypted to obtain multiple preprocessed information to be encrypted, and then forward each preprocessed information to be encrypted to the encryption machine.

[0044] The information to be encrypted refers to information related to the industrial computer and has timeliness, such as time, temperature, etc. In addition, the information to be encrypted may also include information corresponding to the industrial computer, such as physical address, processor model, etc. In one example, the cycle time can be set to one hour, and the password management platform can collect information to be encrypted from each industrial computer every one hour.

[0045] Specifically, the password management platform can manage the login passwords of multiple industrial computers. By establishing communication between the password management platform and each industrial computer, the password management platform can collect information to be encrypted from each industrial computer when a collection cycle is triggered.

[0046] S102: The encryption machine concatenates the received pre-processed information to be encrypted to obtain a target character string, and determines an encryption algorithm and a key according to the encryption algorithm.

[0047] In this step, after the encryption machine receives the preprocessed information to be encrypted sent by the password management platform, the encryption machine concatenates the individual information in the received preprocessed information to be encrypted to obtain the target character string corresponding to the information to be encrypted, and then determines the encryption algorithm according to the preset algorithm selection strategy, and determines the key used for encryption according to the determined encryption algorithm.

[0048] The encryption machine refers to a device used for data encryption. A variety of encryption algorithms can be built into the encryption machine, and then the data input into the encryption machine is encrypted according to the set encryption rules. The encryption rules of the encryption machine can be flexibly configured and expanded according to actual needs. The target string refers to the string obtained by splicing the pre-processed information to be encrypted.

[0049] Specifically, in the process of determining the encryption algorithm, it can be determined by random selection, or by evaluating the score of the algorithm under a preset indicator system, or by the frequency of use of each algorithm. This application does not impose specific restrictions on this.

[0050] S103: Encrypt the target character string based on the key to obtain a dynamic encryption seed, generate a corresponding dynamic password according to the dynamic encryption seed, and transmit the dynamic password back to the password management platform.

[0051] Among them, the dynamic encryption seed is an intermediate data fragment generated after encryption based on the combination of the key and specific information. It contains the basic information required for the subsequent generation of dynamic passwords and has randomness and timeliness.

[0052] In this step, when the encryption algorithm and key are determined, the target string is encrypted. It can be understood that the target string can include multiple information such as the current accurate timestamp, the unique identifier of the device, the randomly generated digital string, and the temperature of the industrial computer. Through the complex operation of the encryption algorithm, the output ciphertext is the dynamic encryption seed. Then, the dynamic encryption seed is further processed using a specific conversion method to generate the corresponding dynamic password. Finally, based on the communication link between the encryption machine and the password management platform, the generated dynamic password is transmitted back to the password management platform for subsequent storage, verification and other processes.

[0053] S104: When receiving the dynamic password, the password management platform stores the dynamic password according to the industrial computer to which it belongs, and sends the dynamic password to the corresponding industrial computer.

[0054] In this step, when receiving the dynamic password, the password management platform can determine the industrial computer to which the received dynamic password belongs, and then classify and store the dynamic password in the password management platform according to the industrial computer to which it belongs, and also send the dynamic password to the industrial computer to which it belongs, so that the industrial computer stores the dynamic password, which is convenient for verification with the password entered by the user when the user logs in. Moreover, when the password management platform also stores a copy of the dynamic password, on the one hand, the user can obtain the dynamic password from the password management platform to log in to the industrial computer, and on the other hand, it can serve as a backup of the dynamic password stored in the industrial computer when the password storage file of the industrial computer is damaged.

[0055] It is understandable that the password management platform can manage the access passwords of multiple industrial computers at the same time, thereby improving the level and efficiency of password management. In addition, due to the dynamic collection and the timeliness and uniqueness of the information collected each time, the passwords of each industrial computer are different and have strong randomness. Subsequently, the dynamic encryption seed is determined by the encryption algorithm. At this time, the dynamic password seed covers the unique identification information of the device and time and other time-sensitive information. The multi-dimensional information contained in the dynamic password seed makes the encrypted data have a high complexity. Then the dynamic password is further determined based on the dynamic password seed, which greatly enhances the randomness and complexity of the generated dynamic password, thereby ensuring the security of industrial computer access.

[0056] In one example, when an industrial computer needs to generate a dynamic password, it uploads the time "23:15:20 on July 13, 2024" and the MAC address "EE-FF-GG-HH-II-JJ" to the password management platform. After verification, the password management platform forwards it to the encryption machine, which generates the password "12345678abcdefg" and transmits it back in sequence. After the industrial computer successfully verifies the password entered by the user, it allows the user to log in and operate on the industrial computer.

[0057] The industrial computer dynamic encryption method, device, storage medium and computer equipment provided by the present application are applied to a dynamic encryption system, wherein the system includes an encryption machine and a password management platform, and the method includes: the password management platform regularly collects time-sensitive information to be encrypted from each industrial computer, pre-processes each information to be encrypted, and then forwards each pre-processed information to be encrypted to the encryption machine; the encryption machine splices the received pre-processed information to be encrypted to obtain a target string, and determines an encryption algorithm and determines a key according to the encryption algorithm, encrypts the target string based on the key to obtain a dynamic encryption seed, generates a corresponding dynamic password according to the dynamic encryption seed, and transmits the dynamic password back to the password management platform. The time-sensitive information to be encrypted is collected through the password management platform, so that the dynamic password finally generated has timeliness, and in the process of generating the dynamic password, the time-sensitive target string is encrypted to obtain a dynamic encryption seed, and then a dynamic password is generated, which can increase the randomness of the password, thereby improving the access security of the industrial computer.

[0058] like Figure 2 As shown, in one embodiment, the encryption machine concatenates the received pre-processed information to be encrypted to obtain a target string, including:

[0059] S201: The encryption machine determines a plurality of information from the received pre-processed information to be encrypted, and randomly determines a splicing order of the various information.

[0060] S202: The encryption machine splices the pre-processed information to be encrypted according to the splicing order of various information, and determines the spliced ​​character string as the target character string.

[0061] In this embodiment, since the preprocessed information to be encrypted contains multiple types of information, the multiple types of information can be determined based on the information to be encrypted, and then the splicing order of each type of information can be randomly determined, and then the various types of information can be spliced ​​according to the determined splicing order, so as to obtain a target character string corresponding to the information to be encrypted.

[0062] Specifically, by randomly determining the splicing order of each information, the randomness of the target character string can be further enhanced, thereby improving the security of the dynamic password seed obtained through the target character string to increase the difficulty of cracking.

[0063] In one embodiment, determining an encryption algorithm and determining a key based on the encryption algorithm includes:

[0064] S1: The encryption machine selects the algorithm with the lowest usage frequency in the preset algorithm library as the encryption algorithm, and updates the usage frequency of the encryption algorithm.

[0065] S2: The encryption machine determines the calculation factors used by the encryption algorithm, and calculates the key used for encryption based on the encryption algorithm and the calculation factors used by it.

[0066] The algorithm library includes a variety of high-strength encryption algorithms, such as the RSA algorithm. The calculation factor refers to the key elements that directly participate in the operation during the operation of the encryption algorithm.

[0067] In this embodiment, the encryption machine can select the algorithm with the lowest frequency of use in the preset algorithm library as the encryption algorithm, and then update the frequency of use of the encryption algorithm recorded in the algorithm library, thereby determining the calculation factor required by the encryption algorithm, and applying the calculation factor to the encryption algorithm to determine the key used for encryption. This can avoid the repeated use of the same encryption algorithm, enhance the diversity of algorithm use, and improve the security and complexity of encryption.

[0068] Furthermore, the calculation factors required by different encryption algorithms can be pre-set or randomly selected within a preset range of each data covered by the calculation factors, and this application does not impose any specific restrictions on this.

[0069] In one example, when the RSA algorithm is used as the encryption algorithm, the calculation factors may be two randomly selected prime numbers and a public key exponent.

[0070] In one embodiment, the target character string is encrypted based on a key to obtain a dynamic encryption seed, and a corresponding dynamic password is generated according to the dynamic encryption seed, including:

[0071] S1: The encryption machine performs encryption operation on the target string according to the encryption algorithm and key to obtain a dynamic encryption seed.

[0072] S2: The encryption machine performs a hash operation on the dynamic password seed according to a preset hash function, obtains the hash value of the dynamic password seed, and then transforms the hash value to obtain a dynamic password corresponding to the dynamic password seed.

[0073] In this embodiment, the encryption machine can use the key to perform encryption operation on the target string according to the logic of the encryption algorithm to obtain a dynamic encryption seed. The encryption machine then performs a hash operation on the dynamic encryption seed according to a preset hash function, and then performs transformation processing after obtaining the corresponding hash value, such as interception, mathematical transformation, etc. Finally, the hash value after the transformation processing is determined as the dynamic password corresponding to the dynamic password seed.

[0074] It is understandable that in the process of determining the dynamic password based on the dynamic password seed, other processing means may be used to further process the dynamic password seed to obtain the dynamic password, and this application does not impose any specific limitation on this.

[0075] In one embodiment, the industrial computer dynamic encryption method further includes:

[0076] When the password management platform receives the user's password request instruction, it determines the target industrial computer that the user wants to log in to based on the password request instruction, and obtains the latest dynamic password corresponding to the target industrial computer stored in the password management platform and sends it to the user, so that the user can use the dynamic password to log in to the target industrial computer.

[0077] In this embodiment, when logging into an industrial computer, the user can request a password from the password management platform. At this time, a password request instruction can be initiated to the password management platform. When receiving the password request instruction from the user, the password management platform can determine the target industrial computer to be logged in according to the password request instruction, and then obtain the latest dynamic password corresponding to the target industrial computer from the dynamic passwords stored in the password management platform, and send the obtained dynamic password to the user, so that the user can use the dynamic password to log in to the target industrial computer. When the user uses the dynamic password to log in to the target industrial computer, the target industrial computer can compare the dynamic password with the latest dynamic password stored in it. When the comparison is consistent, it indicates that the password verification is passed, and the user is allowed to log in to the target industrial computer. When the comparison is inconsistent, it indicates that the password verification has not passed, and the user is not allowed to log in to the target industrial computer.

[0078] Furthermore, if the user fails to log in successfully after multiple attempts, the industrial computer can issue an alarm and take preset security measures. For example, in the control system of a large industrial park, dozens of industrial computers are connected to the password management platform, which is then connected to a high-performance encryption machine. The password management service platform monitors the inconsistency of password verification of each industrial computer in real time. When it is found that a certain industrial computer has too many wrong passwords, the password management platform will immediately issue an alarm and take corresponding security measures, such as temporarily freezing the password verification function of the industrial computer.

[0079] Specifically, the latest dynamic password is used for matching and comparison, and early warning measures are set after multiple errors. On the one hand, the randomness and complexity of the dynamic password can increase the difficulty of cracking, thereby improving the access security of the industrial computer. On the other hand, an early warning can be issued when multiple errors occur, so that relevant personnel can verify the login personnel in time to ensure the security of the industrial computer to the greatest extent.

[0080] like Figure 3 As shown, in one embodiment, the password management platform regularly collects time-sensitive information to be encrypted from each industrial computer, pre-processes each information to be encrypted, and then forwards each pre-processed information to be encrypted to the encryption machine, including:

[0081] S301: When a preset collection cycle is triggered, the password management platform collects the current time, device address and temperature of the industrial computer from each industrial computer to form the information to be encrypted of each industrial computer in this collection cycle.

[0082] Among them, the temperature of the industrial computer can be collected by the temperature sensor on the industrial computer. Since the temperature of the industrial computer is not necessarily consistent at different times, the temperature of the industrial computer also has a certain timeliness. The device address refers to the hardware address of the industrial computer device, that is, the MAC address.

[0083] S302: The password management platform cleans each piece of information to be encrypted, and adjusts the format of each piece of information to be encrypted after data cleaning, and after obtaining each piece of pre-processed information to be encrypted, forwards each piece of pre-processed information to be encrypted to the encryption machine.

[0084] In this step, the password management platform can perform data cleansing on each piece of information to be encrypted to remove incomplete or unreasonable information in each piece of information to be encrypted, and then adjust the format of each piece of information to be encrypted that has undergone data cleansing to match the input format of the encryption machine, and finally forward each piece of preprocessed information to be encrypted to the encryption machine for encryption.

[0085] Specifically, the complexity and randomness of the information passed into the encryption machine are doubly guaranteed through dynamic periodic collection and the timeliness and diversity of the collected information itself, thereby increasing the difficulty of password cracking and enhancing the access security of the industrial computer.

[0086] In one embodiment, the industrial computer dynamic encryption method further includes:

[0087] When a user successfully logs in and receives a password viewing instruction, the password management platform divides the dynamic passwords stored in the password management platform based on the industrial computer as the division dimension, and visually displays the divided dynamic passwords in the password management platform.

[0088] In this embodiment, when a user successfully logs in to the password management platform and receives a password viewing instruction initiated by the user, the password management platform can classify the dynamic passwords stored in the password management platform based on the industrial computer as a classification dimension, and then visualize the dynamic passwords in the password management platform according to the classification results. In this way, the user can conveniently and intuitively view the dynamic passwords stored in the password management platform and the industrial computers to which these dynamic passwords belong.

[0089] In another embodiment, the triggering conditions for the password management platform to divide the passwords may include verifying the user's personal information and checking whether the user has the right to view the password, in addition to the user's successful login and receiving the password viewing instruction. This ensures security while achieving visual management and display of dynamic passwords.

[0090] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0091] The following is a description of the industrial computer dynamic encryption device provided in an embodiment of the present application. The industrial computer dynamic encryption device described below and the industrial computer dynamic encryption method described above can be referenced to each other.

[0092] like Figure 4 As shown, the present application provides an industrial computer dynamic encryption device 400, which is applied to a dynamic encryption system. The system includes an encryption machine and a password management platform. The device includes:

[0093] The information collection module 401 is used for the password management platform to regularly collect the time-sensitive information to be encrypted from the industrial computer, pre-process the information to be encrypted, and then forward the pre-processed information to be encrypted to the encryption machine;

[0094] The information encryption module 402 is used for the encryption machine to splice the pre-processed information to be encrypted to obtain a target string, determine an encryption algorithm and determine a key according to the encryption algorithm, encrypt the target string based on the key, obtain a dynamic encryption seed, generate a corresponding dynamic password according to the dynamic encryption seed, and transmit the dynamic password back to the password management platform;

[0095] The password management module 403 is used for the password management platform to store the dynamic password when receiving the dynamic password, and send the dynamic password to the industrial computer.

[0096] In one embodiment, the information encryption module includes:

[0097] The sequence determination submodule is used for the encryption machine to determine multiple information in the received pre-processed information to be encrypted, and randomly determine the splicing order of various information;

[0098] The information splicing submodule is used for the encryption machine to splice the pre-processed information to be encrypted according to the splicing order of various information, and determine the spliced ​​character string as the target character string.

[0099] In one embodiment, the information encryption module includes:

[0100] The algorithm determination submodule is used for the encryption machine to select the algorithm with the lowest usage frequency in the preset algorithm library as the encryption algorithm, and to update the usage frequency of the encryption algorithm;

[0101] The key calculation submodule is used by the encryption machine to determine the calculation factors used by the encryption algorithm, and calculate the key used for encryption based on the encryption algorithm and the calculation factors used by it.

[0102] In one embodiment, the information encryption module includes:

[0103] The first encryption submodule is used for the encryption machine to perform encryption operation on the target string according to the encryption algorithm and the key to obtain a dynamic encryption seed;

[0104] The second encryption submodule is used for the encryption machine to perform a hash operation on the dynamic password seed according to a preset hash function, and after obtaining the hash value of the dynamic password seed, perform transformation processing on the hash value to obtain a dynamic password corresponding to the dynamic password seed.

[0105] In one embodiment, the industrial computer dynamic encryption device further includes:

[0106] The login module is used for the password management platform to determine the target industrial computer that the user wants to log in to according to the password request instruction when receiving the user's password request instruction, and obtain the latest dynamic password corresponding to the target industrial computer stored in the password management platform and send it to the user, so that the user can use the dynamic password to log in to the target industrial computer.

[0107] In one embodiment, the information collection module includes:

[0108] The information collection submodule is used for the password management platform to collect the current time, device address and temperature of each industrial computer from each industrial computer when the preset collection cycle is triggered to form the information to be encrypted of each industrial computer in this collection cycle;

[0109] The preprocessing submodule is used for the password management platform to clean the data of each piece of information to be encrypted, and to adjust the format of each piece of information to be encrypted after data cleaning. After obtaining each piece of preprocessed information to be encrypted, each piece of preprocessed information to be encrypted is forwarded to the encryption machine.

[0110] In one embodiment, the industrial computer dynamic encryption device further includes:

[0111] The visualization module is used for dividing the dynamic passwords stored in the password management platform based on the industrial computer as the division dimension when the user successfully logs in and receives the password viewing instruction, and visually displays the divided dynamic passwords in the password management platform.

[0112] The division of each module in the above-mentioned industrial computer dynamic encryption device is only used for illustration. In other embodiments, the industrial computer dynamic encryption device can be divided into different modules as needed to complete all or part of the functions of the above-mentioned industrial computer dynamic encryption device. Each module in the above-mentioned industrial computer dynamic encryption device can be implemented in whole or in part by software, hardware and a combination thereof. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0113] In one embodiment, the present application also provides a storage medium, which stores computer-readable instructions. When the computer-readable instructions are executed by one or more processors, the one or more processors execute the steps of the industrial computer dynamic encryption method as described in any of the above embodiments.

[0114] In one embodiment, the present application also provides a computer device, in which computer-readable instructions are stored. When the computer-readable instructions are executed by one or more processors, the one or more processors execute the steps of the industrial computer dynamic encryption method as described in any of the above embodiments.

[0115] Indicatively, Figure 5 As shown, Figure 5 This is a schematic diagram of the internal structure of a computer device provided in an embodiment of the present application. The computer device 500 may be provided as a server. Figure 5 The computer device 500 includes a processing component 502, which further includes one or more processors, and a memory resource represented by a memory 501, for storing instructions executable by the processing component 502, such as an application. The application stored in the memory 501 may include one or more modules, each corresponding to a set of instructions. In addition, the processing component 502 is configured to execute instructions to perform the industrial computer dynamic encryption method of any of the above embodiments.

[0116] The computer device 500 may further include a power supply component 503 configured to perform power management of the computer device 500, a wired or wireless network interface 504 configured to connect the computer device 500 to a network, and an input / output (I / O) interface 505. The computer device 500 may operate based on an operating system stored in the memory 501, such as Windows Server TM, Mac OS X TM, Unix TM, Linux TM, Free BSD TM, or the like.

[0117] Those skilled in the art will understand that Figure 5 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0118] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish an entity or operation from another entity or operation, and do not necessarily require or imply that there is any such actual relationship or order between these entities or operations. Moreover, the term "include", "comprise" or any other variant thereof is intended to cover non-exclusive inclusion, so that the process, method, article or equipment including a series of elements not only include those elements, but also include other elements that are not clearly listed, or also include elements inherent to such process, method, article or equipment. In the absence of more restrictions, the elements limited by the sentence "comprise one..." do not exclude the existence of other identical elements in the process, method, article or equipment including the elements. Herein, the singular "one", "one" and "described / the" may also include plural forms, unless the context clearly indicates another way. It should also be understood that the terms "include / comprise" or "have" etc. specify the existence of stated features, wholes, steps, operations, components, parts or combinations thereof, but do not exclude the possibility of the existence or addition of one or more other features, wholes, steps, operations, components, parts or combinations thereof. At the same time, the term "and / or" used in this specification includes any and all combinations of the relevant listed items.

[0119] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The various embodiments can be combined as needed, and the same or similar parts can refer to each other.

[0120] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A dynamic encryption method for an industrial computer, characterized in that: Applied to a dynamic encryption system, the system includes an encryption machine and a password management platform, and the method includes: The password management platform regularly collects time-sensitive information to be encrypted from each industrial computer, pre-processes each piece of information to be encrypted, and then forwards the pre-processed information to be encrypted to the encryption machine; The encryption machine concatenates the received pre-processed information to be encrypted to obtain a target character string, determines an encryption algorithm and determines a key according to the encryption algorithm, encrypts the target character string based on the key to obtain a dynamic encryption seed, generates a corresponding dynamic password according to the dynamic encryption seed, and transmits the dynamic password back to the password management platform; When receiving the dynamic password, the password management platform stores the dynamic password according to the industrial computer to which it belongs, and sends the dynamic password to the corresponding industrial computer.

2. The industrial computer dynamic encryption method according to claim 1, characterized in that: The encryption machine concatenates the received pre-processed information to be encrypted to obtain a target character string, including: The encryption machine determines a plurality of information in the received pre-processed information to be encrypted, and randomly determines the splicing order of the various information; The encryption machine splices the pre-processed information to be encrypted according to the splicing order of various information, and determines the spliced ​​character string as the target character string.

3. The industrial computer dynamic encryption method according to claim 1, characterized in that: The step of determining an encryption algorithm and determining a key according to the encryption algorithm comprises: The encryption machine selects the algorithm with the lowest usage frequency from a preset algorithm library as the encryption algorithm, and updates the usage frequency of the encryption algorithm; The encryption engine determines the calculation factors used by the encryption algorithm, and calculates the key used for encryption based on the encryption algorithm and the calculation factors used by it.

4. The industrial computer dynamic encryption method according to claim 1, characterized in that: The step of encrypting the target character string based on the key to obtain a dynamic encryption seed, and generating a corresponding dynamic password according to the dynamic encryption seed includes: The encryption machine performs encryption operation on the target character string according to the encryption algorithm and the key to obtain a dynamic encryption seed; The encryption machine performs a hash operation on the dynamic password seed according to a preset hash function, obtains a hash value of the dynamic password seed, and then transforms the hash value to obtain a dynamic password corresponding to the dynamic password seed.

5. The industrial computer dynamic encryption method according to claim 1, characterized in that: The method further comprises: When receiving a password request instruction from a user, the password management platform determines the target industrial computer that the user wants to log in to based on the password request instruction, and obtains the latest dynamic password corresponding to the target industrial computer stored in the password management platform and sends it to the user, so that the user can use the dynamic password to log in to the target industrial computer.

6. The industrial computer dynamic encryption method according to any one of claims 1 to 5, characterized in that: The password management platform regularly collects time-sensitive information to be encrypted from each industrial computer, pre-processes each piece of information to be encrypted, and then forwards each piece of pre-processed information to be encrypted to the encryption machine, including: The password management platform collects the current time, device address and temperature of each industrial computer from each industrial computer when the preset collection cycle is triggered to form the information to be encrypted of each industrial computer in this collection cycle; The password management platform performs data cleaning on each piece of information to be encrypted, and adjusts the format of each piece of information to be encrypted after data cleaning, and after obtaining each piece of pre-processed information to be encrypted, forwards each piece of pre-processed information to be encrypted to the encryption machine.

7. The industrial computer dynamic encryption method according to claim 1, characterized in that: The method further comprises: When a user successfully logs in and receives a password viewing instruction, the password management platform divides the dynamic passwords stored in the password management platform using the industrial computer as a division dimension, and visually displays the divided dynamic passwords in the password management platform.

8. A dynamic encryption device for an industrial computer, characterized in that: Applied to a dynamic encryption system, the system includes an encryption machine and a password management platform, and the device includes: An information collection module is used for the password management platform to regularly collect timely information to be encrypted from the industrial computer, pre-process the information to be encrypted, and then forward the pre-processed information to be encrypted to the encryption machine; An information encryption module, used for the encryption machine to splice the pre-processed information to be encrypted to obtain a target character string, and to determine an encryption algorithm and determine a key according to the encryption algorithm, encrypt the target character string based on the key to obtain a dynamic encryption seed, generate a corresponding dynamic password according to the dynamic encryption seed, and transmit the dynamic password back to the password management platform; The password management module is used for the password management platform to store the dynamic password when receiving the dynamic password, and send the dynamic password to the industrial computer.

9. A storage medium, characterized in that: The storage medium stores computer-readable instructions, and when the computer-readable instructions are executed by one or more processors, the one or more processors execute the steps of the industrial computer dynamic encryption method as described in any one of claims 1 to 7.

10. A computer device, characterized in that: include: one or more processors, and memory; The memory stores computer-readable instructions, and when the computer-readable instructions are executed by the one or more processors, the steps of the industrial computer dynamic encryption method as described in any one of claims 1 to 7 are executed.

Images