High-security-level industrial data acquisition and transmission method and system

Abstract

The invention discloses a high-security-level industrial data acquisition and transmission method and a high-security-level industrial data acquisition and transmission system. The method comprises the following steps: S1, acquiring related data of an industrial control network by using a handset; s2, connecting the handset to an external network processor; s3, verifying the model of the handset through external network processing, and if the verification is not passed, blocking data transmission; if the verification is passed, executing the step S4; s4, the external network processor pulls the data stored in the handset and transmits the data to the internal network processor; s5, the intranet processor performs integrity check on the received data and uploads the data to a background server; s6, the background server processes the received data; s7, the universal interface of the internal network processor downloads the processed data from the background server and transmits the processed data to the external network processor; and S8, the external network processor performs integrity check on the received data and transmits the data to the handset. According to the invention, the data processing efficiency is improved, and the security of the data exchange process is ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of industrial control network security, and more particularly to a method and system for collecting and transmitting industrial data at a high security level. Background Art

[0002] With the development of technology and the need for management decision-making, general communication networks and diversified IT components are constantly integrated with industrial control systems. The originally closed industrial control systems are beginning to be more interconnected with external enterprise networks. The demand for long-distance data transmission is growing. The data collected from the external network needs to be transmitted to the internal network, processed by the internal network background service, and then transmitted back to the external network handheld device.

[0003] Manual disc burning can achieve the above requirements as a means of protecting data integrity and confidentiality, but there are still many problems with the manual disc burning method. On the one hand, with the increase in data frequency, manual disc burning cannot meet the timeliness requirements; on the other hand, in actual application scenarios, when the amount of data transmission is large, the manual disc burning method restricts the efficiency of data transmission.

[0004] Therefore, how to provide a method and system for industrial data collection and transmission with a high security level is an urgent problem to be solved by those skilled in the art. Summary of the invention

[0005] In view of this, the present invention provides a high-security level industrial data collection and transmission method and system, which helps to improve the efficiency of data processing and ensure the security of the data exchange process by exchanging the collected data to the background service for processing through USB cables and network cables, and then exchanging the processed data to the handheld device.

[0006] In order to achieve the above object, the present invention adopts the following technical solution:

[0007] A method for collecting and transmitting industrial data with a high security level comprises the following steps:

[0008] S1, using data acquisition equipment to collect industrial control network related data and store it according to preset rules;

[0009] S2, connecting the data acquisition device to an external network processor;

[0010] S3, after the external network processor detects the access of the data acquisition device, it verifies the model of the data acquisition device. If the verification fails, the data transmission is blocked; if the verification passes, step S4 is executed;

[0011] S4, the external network processor pulls the data stored in the data acquisition device and transmits the successfully pulled data to the internal network processor;

[0012] S5, the intranet processor performs integrity check on the received data and uploads the data that passes the check to the backend server;

[0013] S6, the backend server processes the received data;

[0014] S7, the internal network processor universal interface downloads the processed data from the background server and transmits it to the external network processor;

[0015] S8, the external network processor performs integrity check on the received data and transmits the data that passes the check to the data acquisition device.

[0016] Furthermore, in step S1, the data acquisition device is connected to the external network processor via a USB interface.

[0017] Furthermore, in step S4, the external network processor transmits the successfully pulled data to the internal network processor in a unidirectional manner via a non-IP protocol.

[0018] Furthermore, in step S7, the intranet processor transmits the data processed by the backend server to the external network processor in a unidirectional manner via a non-IP protocol.

[0019] Furthermore, the data acquisition device is a handheld device.

[0020] A high-security industrial data collection and transmission system, including data collection equipment, an external network processor, an internal network processor and a background server;

[0021] The data acquisition device, the external network processor, the internal network processor, and the internal network processor are connected to the backend server in sequence;

[0022] The data acquisition device is used to collect data related to the industrial control network and store it according to preset rules;

[0023] The data acquisition device is used to collect data related to the industrial control network and store it according to preset rules;

[0024] The external network processor is used to verify the model of the data acquisition device, and to pull the data stored in the data acquisition device that has passed the verification, and transmit the successfully pulled data to the internal network processor; and to perform integrity check on the data transmitted by the internal network processor after being processed by the background server, and transmit the data that has passed the inspection to the data acquisition device;

[0025] The internal network processor is used to perform integrity check on the pulled data transmitted by the external network processor, and upload the data that passes the check to the backend server; and download the processed data from the backend server through the interface and transmit it to the external network processor;

[0026] The background server is used for processing data.

[0027] It can be seen from the above technical solution that compared with the prior art, the present invention has the following beneficial effects:

[0028] (1) High security: The present invention performs dual-way exchange processing on the handset data without affecting the intranet.

[0029] (2) High efficiency: The system automatically pulls data from the handheld device and exchanges it to the backend server of the intranet processor. After processing, the backend server automatically downloads the latest data and exchanges it to the external network processor, and automatically pushes it to the designated directory of the handheld device, which greatly saves time and improves production efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0031] Figure 1 A schematic flow chart of a method for collecting and transmitting industrial data at a high security level provided by the present invention.

[0032] Figure 2 This is a schematic diagram of the structural composition of the high-security level industrial data acquisition and transmission system provided by the present invention. DETAILED DESCRIPTION

[0033] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0034] The embodiment of the present invention discloses a method for collecting and transmitting industrial data with a high security level. A typical industrial control network data transmission scenario is selected for analysis. After the data is collected, the data on the handheld device is transmitted back to the intranet processor for processing. Figure 1 As shown, the following steps are included:

[0035] S1, using the handheld device of the external network processor to collect industrial control network related data and store it according to preset rules.

[0036] S2, connect the handheld device to the USB cable and insert it into the USB port of the external network processor.

[0037] S3, the external network processor detects the insertion of the handset and verifies the legitimacy of the handset model. If it is not legal, data transmission is blocked; if it is legal, step S4 is executed.

[0038] S4, the external network processor pulls the data stored in the handheld device according to the set cycle and directory, and after the pull is successful, it is unidirectionally exchanged to the internal network processor through the non-IP protocol.

[0039] S5, the intranet processor performs integrity check on the received data, and uploads the data that passes the check to the background server through the interface, waiting for the background server to respond.

[0040] S6, the backend server processes the received data.

[0041] S7, the common interface of the intranet processor downloads the processed data from the background server, and after the download is completed, it is unidirectionally exchanged to the external network processor through the non-IP protocol.

[0042] S8, the external network processor performs integrity check on the received data, and the data that passes the check is uploaded to the handheld device via USB. The handheld device detects the file and issues an audible and visual notification.

[0043] Another embodiment of the present invention discloses a high-security industrial data collection and transmission system. Figure 2 As shown, it includes data acquisition equipment, external network processor, internal network processor and background server.

[0044] Among them, the data acquisition equipment, the external network processor, the internal network processor, and the internal network processor are connected to the background server in sequence.

[0045] The data acquisition device is a handheld device that is used to collect data related to the industrial control network and store it according to preset rules.

[0046] The external network processor is used to judge the model of the handheld device, allowing access to legal ones and blocking access to illegal ones; for legal handheld devices, the external network processor pulls the data stored in the handheld device according to the set cycle and directory, and transmits the successfully pulled data to the internal network processor in one direction through the non-IP protocol; and receives the data processed by the background server and returns it from the internal network processor and performs integrity verification, and transmits the data that passes the verification to the handheld device. The handheld device detects the file and issues an audio and visual notification.

[0047] The intranet processor is used to receive the pulled data transmitted by the external network processor and perform integrity check, and upload the data that passes the check to the background server; and download the processed data from the background server through the interface, and transmit it to the external network processor through non-IP protocol one-way transmission.

[0048] The backend server is used to process data.

[0049] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.

[0050] The above description of the disclosed embodiments enables one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A high-security level industrial data collection and transmission method, characterized in that: The following steps are involved: S1, using data acquisition equipment to collect industrial control network related data and store it according to preset rules; S2, connecting the data acquisition device to an external network processor; S3, after the external network processor detects the access of the data acquisition device, it verifies the model of the data acquisition device. If the verification fails, the data transmission is blocked; if the verification passes, step S4 is executed; S4, the external network processor pulls the data stored in the data acquisition device and transmits the successfully pulled data to the internal network processor; S5, the intranet processor performs integrity check on the received data and uploads the data that passes the check to the backend server; S6, the backend server processes the received data; S7, the internal network processor universal interface downloads the processed data from the background server and transmits it to the external network processor; S8, the external network processor performs integrity check on the received data and transmits the data that passes the check to the data acquisition device.

2. A high-security level industrial data collection and transmission method according to claim 1, characterized in that: In step S1, the data acquisition device is connected to the external network processor via a USB interface.

3. A high-security level industrial data collection and transmission method according to claim 1, characterized in that: In step S4, the external network processor transmits the successfully pulled data to the internal network processor in a unidirectional manner via a non-IP protocol.

4. A high-security level industrial data collection and transmission method according to claim 1, characterized in that: In step S7, the intranet processor transmits the data processed by the backend server to the external network processor in a unidirectional manner through a non-IP protocol.

5. A high-security level industrial data collection and transmission method according to claim 1, characterized in that: The data acquisition device is a handheld device.

6. A high-security industrial data acquisition and transmission system, characterized in that: Including data acquisition equipment, external network processor, internal network processor and background server; The data acquisition device, the external network processor, the internal network processor, and the internal network processor are connected to the backend server in sequence; The data acquisition device is used to collect data related to the industrial control network and store it according to preset rules; The external network processor is used to verify the model of the data acquisition device, and to pull the data stored in the data acquisition device that has passed the verification, and to transmit the successfully pulled data to the internal network processor in a unidirectional manner through a non-IP protocol; and to perform integrity verification on the data transmitted by the internal network processor after being processed by the background server, and to transmit the data that has passed the verification to the data acquisition device; The internal network processor is used to perform integrity check on the pulled data transmitted by the external network processor, and upload the data that passes the check to the backend server; and downloading the processed data from the backend server through the interface, and transmitting it unidirectionally to the external network processor through a non-IP protocol; The background server is used for processing data.

Images