Industrial data acquisition system with interconnected devices

Abstract

The invention provides an industrial data acquisition system with interconnected devices. The industrial data acquisition system comprises the following functional areas: a core exchange area, a service area, an internet area, a wide area network area, a transportation management area and an industrial control data acquisition area. The core exchange area based on three-layer exchange is constructed, and the requirements for high availability, high performance and easy management are met. A plurality of switches are deployed, and a plurality of connection paths are established, so that the network can still run continuously when main equipment or links have faults, single-point faults of a network layer are avoided, the availability of the data center network is improved, and the horizontal capacity expansion capability is supported. According to the invention, a high-speed stable factory network platform is constructed, the design is carried out according to the thought of fusing a park network, flattening and multi-network separation, and equipment interconnection and data intercommunication of petrochemical plates and polyester plates in a factory are realized.

Description

Technical Field

[0001] The present invention belongs to the field of intelligent data acquisition, and in particular relates to an industrial data acquisition system for interconnected devices. Background Art

[0002] Manufacturing companies are accelerating the digital transformation of equipment and business with a focus on equipment interconnection and data interoperability. However, in the process of "smart transformation and digital transformation", problems such as inconsistent data communication between old and new equipment and lack of data sharing have led to a large number of data islands, making it impossible for companies to directly obtain original data such as equipment operating status and operating output.

[0003] At present, equipment data collection mainly relies on manual transcription and video monitoring, but these methods have low collection efficiency and result accuracy. Even if data can be collected intelligently, equipment interconnection cannot be achieved due to the relative independence of systems of equipment from different manufacturers and the lack of data interoperability. Summary of the invention

[0004] In order to overcome the deficiencies of the above prior art, the purpose of the present invention is to provide an industrial data acquisition system for interconnecting devices, so as to solve the problem of data islands through device interconnection.

[0005] The purpose of the present invention is achieved through the following technical solutions:

[0006] An industrial data acquisition system for interconnected devices includes the following functional areas:

[0007] A core switching area, the core switching area includes a core switch and a regional switch, the core switch and the regional switch are cross-connected, and the core switching area is connected to all functional areas to achieve high-speed data forwarding;

[0008] The business area includes a convergence switch and an access switch. The convergence switch and the access switch are cross-connected to provide internal business services in the data center and access to development and testing servers, and to deploy load balancing services and security services.

[0009] Internet zone, including DMZ zone, is used to support application deployment of Internet-oriented service platforms;

[0010] The wide area network area includes aggregation switches, firewalls, and SD-WAN devices, which are interconnected with the headquarters network through the SD-WAN network and are used for interconnection between data centers and with branch offices;

[0011] The operation and management area includes an out-of-band management network, an in-band management network, an operation and maintenance management area, and a border security area, which is used to provide a unified operation and maintenance management and analysis platform for the data center, establish the out-of-band network management, and separate network management traffic from business traffic;

[0012] The industrial control data acquisition area is used to provide industrial Internet data collection, achieve secure isolation and one-way transmission.

[0013] Preferably, in the core switching area, the interconnection port between the core switch and the regional switch adopts a no switchport layer 3 address and runs a dynamic routing protocol.

[0014] Preferably, the core switch is composed of two switches HA.

[0015] Preferably, in the service area, the core switch and the aggregation switch are cross-connected, and a firewall and access control are deployed between the core switch and the aggregation switch.

[0016] Preferably, the firewall is hung in-line or connected in series between the core device and the aggregation switch.

[0017] Preferably, the service area adopts a unified network architecture.

[0018] Preferably, the out-of-band management network is responsible for building an out-of-band management network covering all servers and network devices.

[0019] Preferably, the out-of-band management network and the production network run independent routes and cannot communicate with each other, and a firewall is provided between the out-of-band management network and the operation and maintenance management area.

[0020] Preferably, the in-band management network is responsible for building an in-band management network covering all server operating systems and network devices.

[0021] Preferably, the operation and maintenance management area is responsible for the operation management server deployed in the operation management area.

[0022] Preferably, the operation and maintenance management area, the production network and the out-of-band management network are connected by network.

[0023] Preferably, a firewall is deployed between the production network and the operation and maintenance management area.

[0024] Preferably, the following functional areas are also included:

[0025] The park office area is used to provide traffic access to the park offices;

[0026] The security monitoring area is used to provide access to the campus security monitoring traffic.

[0027] Compared with the prior art, the present invention has the following advantages and beneficial effects:

[0028] (1) The present invention constructs a core switching area based on "three-layer switching" to meet the requirements of high availability, high performance and easy management. The aggregation switch in the business area provides gateway services for servers and other devices, and as the boundary between layer3 / Layer2, realizes the dual-link side-mounted load balancing device between VLAN routing in the functional area, provides load balancing services for servers, supports network virtualization, and realizes green energy saving and network architecture flexibility. The target redundant architecture meets the requirements of high availability. Define a security boundary between the core switch and the aggregation switch, deploy a firewall, protect the service resources inside the functional area, set access control, and the firewall is side-mounted or connected in series between the core device and the aggregation switch to provide security protection for the server.

[0029] (2) The present invention deploys multiple switches and establishes multiple connection paths to ensure that the network can continue to operate when a major device or link fails, thereby avoiding single point failures at the network level, improving the availability of the data center network, and supporting horizontal expansion capabilities.

[0030] (3) The present invention builds a high-speed and stable factory network platform through equipment interconnection. It is designed according to the idea of ​​integrating park network, flattening, and multi-network separation, which can realize the interconnection of petrochemical and polyester equipment in the factory and data exchange. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 This is the overall topological diagram of the present invention.

[0032] Figure 2 It is divided into the central functional areas of the present invention.

[0033] Figure 3 This is a network architecture diagram of the core switching area of ​​the present invention.

[0034] Figure 4 This is a network architecture diagram of the service area of ​​the present invention. DETAILED DESCRIPTION

[0035] The purpose of the present invention is further described in detail below with reference to the accompanying drawings and specific examples. The examples cannot be described one by one here, but the implementation methods of the present invention are not therefore limited to the following examples.

[0036] Example 1

[0037] An industrial data acquisition system for interconnected devices includes the following functional areas:

[0038] Core switching area, the core switching area includes core switches and regional switches, the core switches and regional switches are cross-connected, the core switch is composed of two switches HA, the interconnection port between the core switch and the regional switch uses the no switchport three-layer address, and runs a dynamic routing protocol. The core layer adopts a high-redundancy architecture (dual-machine, dual-engine and dual-power configuration) to avoid single-point failures at the network level, improve the availability of the data center network, and support horizontal expansion capabilities. The core switching area is connected to all functional areas to achieve high-speed data forwarding;

[0039] Business area: The business area adopts a unified architecture, including aggregation switches and access switches. One end of the aggregation switch is interconnected with the core switch, and the other end of the aggregation switch is interconnected with the access switch. A security boundary is defined between the core switch and the aggregation switch, and a firewall is deployed to protect the service resources within the functional area and set access control. The firewall is hung or connected in series between the core switch and the aggregation switch to provide security protection for the server. The core switch is located in the headquarters, and the aggregation switch provides gateway services for servers and other devices. As the boundary between layer3 / Layer2, it realizes the dual-link routing between VLANs in the functional area and hangs the load balancing device by the side, providing load balancing services for servers. Support network virtualization, achieve green energy saving and network architecture flexibility, target redundant architecture, and meet high availability requirements; the business area provides internal business services in the data center and access to development and test servers, and deploys load balancing services and security services.

[0040] The Internet zone, including the DMZ zone, is used to support the application deployment of the Internet-oriented service platform; a firewall is used to construct a semi-secure zone (DMZ) to separate the non-secure zone and the secure zone; in the semi-secure zone (DMZ), a front-end server for Internet interaction is deployed, and intrusion detection equipment is deployed in the semi-secure zone (DMZ) to detect network intrusions. The Internet zone firewall controls Internet users to only access the front-end server in the semi-secure zone (DMZ), which then initiates access to the internal server, while Internet users cannot directly access the internal server. The load balancing device implements link load balancing.

[0041] The WAN area includes aggregation switches, firewalls, and SD-WAN devices. Two access switches are stacked at the export port to meet the multi-link access requirements of operators, dedicated lines, and bare optical fibers. The SD-WAN device adopts the HA deployment mode to achieve fault switching. The device is responsible for WAN link visualization, link load, and fault switching. Define security boundaries between core switches and aggregation, deploy WAN firewalls, protect service resources within the functional area, set access control, and set up a redundant architecture to meet high availability requirements. The SD-WAN network is interconnected with the headquarters network for interconnection between data centers and with branch offices.

[0042] The operation and management area includes the out-of-band management network, the in-band management network, the operation and maintenance management area, and the border security area. The out-of-band management network is responsible for building an out-of-band management network covering all servers and network devices. The out-of-band management network and the production network run independent routes and cannot communicate with each other. The in-band management network is responsible for building an in-band management network covering all server operating systems and network devices. The operation and maintenance management area is responsible for the operation and management server deployed in the operation and management area. The operation and maintenance management area, the production network, and the out-of-band management network are connected. Boundary security controls such as firewalls are required between the out-of-band management network and the operation and maintenance management area, and between the production network and the operation and maintenance management area. The operation and management area is used to provide a unified operation and maintenance management and analysis platform for the data center, establish out-of-band network management, and separate network management traffic from business traffic.

[0043] The industrial control data acquisition area is used to provide industrial Internet data acquisition, achieve secure isolation and one-way transmission. The data acquisition (isolation) gateway uses data acquisition and protection equipment designed for industrial network applications. It uses a high-performance embedded computing platform. The service kernel software can run in a desktop operating system or an embedded operating system. It is a communication service platform that is independent of the specific hardware device interface. As a bridge between the industrial control network and the production network, the data acquisition network mainly includes OPC clients, data acquisition machines, real-time database interface machines, and real-time database servers. The OPC client, data acquisition and interface functions can be shared. The communication protocol between the server and the real-time database is based on the TCP / IP protocol.

[0044] The industrial control data acquisition area includes real-time database, service manager, configuration management tool, data acquisition service program / configuration tool, calculation engine and image client;

[0045] Real-time database: used to store and process real-time data;

[0046] Service Manager: It is used to monitor all the background services in the system; the working status of the service processes is used to improve the continuous operation capability of the system. It is the core of the entire system, which collects various data and information, builds a unified data platform, processes all data from various external system devices, etc., and periodically compresses the data for file archiving. At the same time, it publishes alarm information as needed, and allows any client to easily access the system data according to the permissions.

[0047] Configuration management tool: completes user management of the service manager, adds, deletes, and modifies measurement points, and can query events, alarms, real-time data, historical data, etc.

[0048] Data collection service program / configuration tool: used to collect data from various systems and devices and push it to the database server.

[0049] Calculation engine: performs secondary calculations and advanced statistical analysis on the data, and writes the data back to the calculation point in the database server.

[0050] Image client: Provide users with a complete set of process flow chart production software for human-computer interaction.

[0051] An industrial data acquisition system for device interconnection also includes the following functional areas:

[0052] The park office area is used to provide park office traffic access.

[0053] The security monitoring area is used to provide access to the campus security monitoring traffic.

Claims

1. An industrial data acquisition system for interconnected devices, characterized in that: Includes the following functional areas: A core switching area, the core switching area includes a core switch and a regional switch, the core switch and the regional switch are cross-connected, and the core switching area is connected to all functional areas to achieve high-speed data forwarding; The business area includes a convergence switch and an access switch. The convergence switch and the access switch are cross-connected to provide internal business services in the data center and access to development and testing servers, and to deploy load balancing services and security services. Internet zone, including DMZ zone, is used to support application deployment of Internet-oriented service platforms; The wide area network area includes aggregation switches, firewalls, and SD-WAN devices, which are interconnected with the headquarters network through the SD-WAN network and are used for interconnection between data centers and with branch offices; The operation and management area includes an out-of-band management network, an in-band management network, an operation and maintenance management area, and a border security area, which is used to provide a unified operation and maintenance management and analysis platform for the data center, establish the out-of-band network management, and separate network management traffic from business traffic; The industrial control data acquisition area is used to provide industrial Internet data collection, achieve secure isolation and one-way transmission.

2. The industrial data acquisition system for interconnected devices according to claim 1, characterized in that: In the core switching area, the interconnection port between the core switch and the regional switch adopts the no switchport layer 3 address and runs a dynamic routing protocol.

3. The industrial data acquisition system for interconnected devices according to claim 2, characterized in that: The core switch is composed of two switches HA.

4. The industrial data acquisition system for interconnected devices according to claim 1, characterized in that: In the service area, the core switch and the aggregation switch are cross-connected, and a firewall and access control are deployed between the core switch and the aggregation switch.

5. The industrial data acquisition system for interconnected devices according to claim 4, characterized in that: The firewall is hung in parallel or connected in series between the core switch and the aggregation switch.

6. The industrial data acquisition system for interconnected devices according to claim 4, characterized in that: The business area adopts a unified network architecture.

7. The industrial data acquisition system for interconnected devices according to claim 1, characterized in that: The out-of-band management network and the production network both run independent routes and cannot communicate with each other. A firewall is provided between the out-of-band management network and the operation and maintenance management area.

8. The industrial data acquisition system for interconnected devices according to claim 7, characterized in that: The operation and maintenance management area, the production network and the out-of-band management network are connected by network.

9. The industrial data acquisition system for interconnected devices according to claim 7, characterized in that: A firewall is deployed between the production network and the operation and maintenance management area.

10. The industrial data acquisition system for interconnected devices according to claim 1, characterized in that: The following functional areas are also included: The park office area is used to provide traffic access to the park offices; The security monitoring area is used to provide access to campus security monitoring traffic.

Images