Cross-system far-end industrial control instruction issuing method, system and related device

Abstract

The invention discloses a cross-system far-end industrial control instruction issuing method and system and a related device, and belongs to the technical field of industrial control, and the method comprises the steps: obtaining the control right of a remote control instruction, and transmitting the remote control instruction to a station side; the station side is used for receiving the remote control instruction, unpacking and verifying the remote control instruction, judging whether an operation right and a transfer operation right exist or not currently based on an unpacked instruction file and a verification result, and sending an operation right transfer result according to a judgment result; receiving an operation right transfer success message, and displaying an operation right listing message for prompting operation; receiving an operation instruction, packaging the operation instruction, issuing the operation instruction at the station side, and recording a remote control event at the same time; and after feedback issued by the operation instruction is received, displaying the state of the remote equipment. According to the method, the information security problem in remote cross-system remote control can be prevented, the security of the remote control instruction is improved, and the possibility of hacker intrusion is reduced.

Description

Technical Field

[0001] The present invention belongs to the field of industrial control technology, and relates to a method, system and related device for issuing cross-system remote industrial control instructions. Background Art

[0002] As the centralized and large-scale development trend of new energy becomes increasingly prominent, new energy control systems are gradually moving towards centralized control. This change means that the control command mode originally issued mainly by the station side will undergo a profound change, and the demand for direct control of the equipment by the centralized control center will become more prominent. In the current control scheme, the transfer of control rights has become the core mechanism, that is, through the communication interaction between the station side and the centralized control side, the control rights are transferred to the centralized control center, thereby realizing remote control operation.

[0003] However, this instruction transmission process spans the station-side system and the centralized control system, resulting in the inability to fully verify the permissions and record the operation of the event on both sides. Specifically, once the control is handed over, the station side will no longer conduct further verification of the instructions from the centralized control center. At the same time, the operation record simply marks that the instructions come from the centralized control center, but lacks detailed information such as specific machines and roles in the centralized control center. This situation is very likely to cause problems such as unclear responsibilities and unclear reasons when tracing operations, bringing potential risks to the safe and stable operation of the system.

[0004] In order to meet this challenge, it is necessary to enrich and improve the functions of the new energy control system. On the one hand, the authority verification mechanism should be strengthened to ensure that after the transfer of control rights, the station side or the centralized control side can still perform necessary verification on the instructions to prevent unauthorized execution of instructions. On the other hand, the operation record function should be optimized, requiring the system to record in detail the source, execution time, execution results of each instruction, and the specific machine and role information in the centralized control center, so that the responsibility can be accurately located and the cause can be quickly identified during operation tracing. Through the implementation of these measures, the safety, reliability and traceability of the new energy control system will be further improved, providing a solid guarantee for the centralized and large-scale development of new energy.

[0005] The original remote control between the station side and the centralized control side only exchanges control rights, without detailed verification of the source, which poses risks such as identity impersonation, illegal privilege escalation, IP impersonation, and replay attacks. Because the station side and the centralized control side are generally built separately and are two systems, user role information across systems is not easy to circulate, and it is impossible to accurately perform permission verification and security protection. Therefore, when it comes to cross-system remote control, the current method cannot fully record the permission verification and logs of industrial control instructions. Summary of the invention

[0006] The purpose of the present invention is to provide a method, system and related devices for issuing cross-system remote industrial control instructions. Through the compilation method, the method can prevent information security problems in remote cross-system remote control, improve the security of remote control instructions, and reduce the possibility of hacker intrusion.

[0007] To achieve the above purpose, the present invention adopts the following technical means: The first aspect of the present invention is to provide a method for issuing cross-system remote industrial control instructions, comprising: Obtain the control right of the remote control command and send the remote control command to the station side. The remote control command includes the name of the operation source node, the operation role, and the operation source node IP. The station side is used to receive the remote control command, unpack and verify it. The unpacked command file includes the source node name, the operation role, the operation source node IP, the sending event sequence number, and the sending time. Based on the unpacked command file and the verification result, it is judged whether the operation right and the transfer operation right are currently possessed, and the operation right transfer result is issued according to the judgment result. Receive the message of successful operation right transfer and display the operation right listing message to prompt the operation; Receive operation instructions, encapsulate the operation instructions and send the operation instructions to the station side, and record remote control events at the same time; after the station side receives and sends remote adjustment or remote control instructions and verifies all remote adjustment or remote control instruction information, it then records the remote control event and calls the device interface to perform remote adjustment and remote control operations, and sends feedback that the operation instructions have been sent; After receiving feedback that the operation command has been issued, the remote device status is displayed.

[0008] As a further improvement of the present invention, the step of obtaining the control right of the remote control command and sending the remote control command to the station side includes: Receive remote control instructions from the operator or other remote control instructions, and obtain control rights from the station side. After confirming that the control right ID and value are correct, send them to the station side through the remote communication program.

[0009] As a further improvement of the present invention, if there is a longitudinal encryption device on the centralized control side and the station side, the remote control instructions do not need additional encryption; if there is no longitudinal encryption device, the remote control instructions need to be encrypted by a certificate.

[0010] As a further improvement of the present invention, the transfer of operation rights requires that the source node name, operation role, and operation source node IP must match the records in the remote control authority list recorded on the site side. Release is allowed only if there are matching records for all three items.

[0011] As a further improvement of the present invention, the receiving of the message of successful operation right transfer and displaying the operation right listing message for prompting operation includes: displaying the operation right listing message on the operation screen to prompt the operator to operate and wait for the operator's operation instruction.

[0012] As a further improvement of the present invention, the step of encapsulating the operation instruction and issuing the operation instruction, and recording the remote control event at the same time, includes: The command information needs to encapsulate the source node name, operation role, and operation source node IP. The remote control event recording includes recording the source node name, operation role, operation source node IP, sending event sequence number, and sending time; The sending event sequence number is the sequence number of the event entering the database, which represents the unique identification of the event entering the database. There will be no repeated event sequence number in a single system. The size of the sequence number is a 64-bit unsigned long integer. The sequence number increases sequentially and is reset regularly. The sending event sequence number is compared with the remote time sequence number recorded in the current event database. The sequence number needs to be greater than the previous remote remote control event sequence number within this month. The verification is passed and released; If the event sending time exceeds the response time, a sending failure event is fed back to the operation source; If the difference between the sending time and the current system time exceeds a certain limit, the execution will be rejected; otherwise, it will be released.

[0013] A second aspect of the present invention is to provide a cross-system remote industrial control instruction issuing system, comprising: The remote control instruction acquisition module is used to obtain the control right of the remote control instruction and send the remote control instruction to the station side. The remote control instruction includes the name of the operation source node, the operation role, and the operation source node IP. The station side is used to receive the remote control instruction, unpack and verify. The unpacked instruction file includes the source node name, the operation role, the operation source node IP, the sending event sequence number, and the sending time. Based on the unpacked instruction file and the verification result, it is judged whether the current operation right and the transfer operation right are available, and the operation right transfer result is issued according to the judgment result; An operation right display module is used to receive a message indicating that the operation right has been successfully transferred, and to display an operation right listing message to prompt the operation; The operation instruction sending module is used to receive the operation instruction, encapsulate the operation instruction and send the operation instruction to the station side, and record the remote control event at the same time; after the station side receives the sent remote adjustment or remote control instruction and verifies all the remote adjustment or remote control instruction information, it then records the remote control event and calls the device interface to perform remote adjustment and remote control operation, and sends feedback that the operation instruction has been sent; The device status display module is used to display the remote device status after receiving feedback that the operation instruction has been issued.

[0014] The third aspect of the present invention is to provide an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the cross-system remote industrial control instruction issuing method when executing the computer program.

[0015] A fourth aspect of the present invention is to provide a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the cross-system remote industrial control instruction issuing method is implemented.

[0016] A fifth aspect of the present invention is to provide a computer program product, wherein the computer program product comprises computer instructions, and the computer instructions instruct a computer to execute the insulation defect identification method.

[0017] Compared with the prior art, the present invention has the following beneficial effects: The centralized control side of the present invention obtains control rights and sends remote control instructions to the station side. The station side unpacks and verifies the received instructions, performs logical judgment, and replies to the result of the operation right transfer. After receiving the message of successful operation right transfer, the station side displays the operation right listing message and waits for the operator's instructions. After receiving the operator's instructions, the centralized control side encapsulates the instruction information and issues remote adjustment or remote control instructions, and records the remote control events at the same time. After the station side verifies all information, it records the remote control events and calls the device interface to perform remote adjustment and remote control operations. Through the verification and recording of information, it is ensured that the issuance of cross-system remote industrial control instructions meets the security requirements. The centralized control side sends a remote control instruction containing information such as the operation source node name, operation role, and operation source node IP to the station side. The station side unpacks and verifies the instructions, verifies and records the remote control events again, and then calls the device interface to perform remote adjustment and remote control operations. Feedback is given after the operation instruction is issued. After receiving the feedback, the centralized control side displays it on the screen, and checks the status of the remote device through the normal data acquisition program. The present invention enhances the security of cross-system remote industrial control instructions, and prevents risks such as identity impersonation, illegal privilege escalation, IP impersonation, and replay attacks through information verification and recording. The accuracy of remote control instructions is improved, and the legitimacy and accuracy of instructions are ensured by separately verifying the source node name, IP, operator role, time, serial number and other information for authority verification. The possibility of hacker intrusion is reduced, and the system's anti-attack capability is improved by strengthening security verification and recording operation process logs. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 A flow chart of a method for issuing cross-system remote industrial control instructions provided by the present invention; Figure 2 The present invention provides a cross-system remote industrial control instruction issuing system; Figure 3A schematic diagram of an electronic device provided by the present invention. DETAILED DESCRIPTION

[0019] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0020] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein.

[0021] In addition, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or apparatus that includes a series of steps or elements is not necessarily limited to those steps or elements explicitly listed, but may include other steps or elements not explicitly listed or inherent to such process, method, product, or apparatus.

[0022] Terminology explanation: The centralized control side, as the core part of the remote centralized control system, is mainly responsible for centralized monitoring and control of the equipment within the entire system. Its main functions and features include: Equipment installation and deployment: The centralized control side needs to install servers, workstations, switches, routers, firewalls, vertical encryption devices, forward (reverse) isolation devices and other equipment to build a stable network and communication environment.

[0023] Monitoring program deployment: Based on the hardware, various monitoring programs will be deployed on the centralized control side. These programs can collect and process data from the site side in real time, providing a basis for remote monitoring.

[0024] Drawing and configuring configuration screens: The staff on the centralized control side will draw configuration screens according to actual needs, configure calculation formulas, power prediction modules, etc., in order to intuitively display the system operation status and conduct data analysis.

[0025] Remote control and command issuance: The centralized control side has remote control function, which can issue control commands to the equipment on the station side to achieve remote operation. This is of great significance for improving production efficiency and reducing the demand for on-site personnel.

[0026] Data storage and analysis: The centralized control side stores a large amount of operating data and historical records, which are crucial for system analysis, troubleshooting, and optimization of operating strategies.

[0027] The station side, as the front end of the remote centralized control system, is mainly responsible for data collection and control of on-site equipment. Its main functions and features include: Equipment installation and data collection: The station side needs to install edge gateways, switches, routers, firewalls, vertical encryption devices, forward (reverse) isolation devices and other equipment, and connect to various monitoring systems through edge gateways for data collection. Since new energy stations are usually located in remote areas and have relatively simple working conditions, the equipment installation and commissioning work on the station side is particularly important.

[0028] Network equipment joint debugging and networking: The network equipment on the station side needs to be jointly debugged and networked with the centralized control side to ensure real-time data transmission and accurate instruction delivery. This process requires professional technicians to carefully design and debug.

[0029] Local control and response: After receiving the control instructions from the centralized control side, the equipment on the station side will perform local control operations, such as starting and stopping equipment, adjusting parameters, etc. At the same time, the equipment on the station side will also feed back the operating status and real-time data to the centralized control side.

[0030] Security protection and isolation: As the front end of the system, the station side faces various potential security threats. Therefore, strict security protection measures need to be taken, such as using firewalls, vertical encryption devices and other equipment to encrypt and isolate data transmission to ensure the safe and stable operation of the system.

[0031] like Figure 1 As shown, the first object of the present invention is to provide a method for issuing cross-system remote industrial control instructions, comprising the following steps: S1, obtain the control right of the remote control command and send the remote control command to the station side, the remote control command includes the name of the operation source node, the operation role, and the operation source node IP; the station side is used to receive the remote control command, unpack and verify, the unpacked command file includes the source node name, the operation role, the operation source node IP, the sending event sequence number, and the sending time; based on the unpacked command file and the verification result, judge whether the current operation right and the transfer operation right are available, and issue the operation right transfer result according to the judgment result; S2, receiving a message indicating that the operation right has been successfully transferred, and displaying an operation right listing message to prompt the operation; S3, receiving the operation instruction, encapsulating the operation instruction and sending the operation instruction to the station side, and recording the remote control event at the same time; after the station side receives and sends the remote adjustment or remote control instruction and verifies all the remote adjustment or remote control instruction information, it then records the remote control event and calls the device interface to perform the remote adjustment and remote control operation, and sends feedback that the operation instruction has been sent; S4, after receiving feedback that the operation command has been issued, the remote device status is displayed.

[0032] The working principle of the present invention is: the present invention ensures that the issuance of cross-system remote industrial control instructions meets security requirements through information verification and recording. The centralized control side sends a remote control instruction containing information such as the name of the operation source node, the operation role, and the IP of the operation source node to the station side. The station side unpacks and verifies the instruction, including the source node name, the operation role, the IP of the operation source node, the sending event sequence number, the sending time, etc., to ensure the legality and security of the instruction. After the station side makes a logical judgment, it replies with the result of the transfer of the operation right. After receiving the successful message, the centralized control side displays the operation right listing message and waits for the operator's instructions. After the operator's instructions are issued, the station side verifies and records the remote control events again, and then calls the device interface to perform remote adjustment and remote control operations. Feedback is given after the operation instruction is issued. After receiving the feedback, the centralized control side displays it on the screen, and checks the status of the remote device through the normal data acquisition program.

[0033] The specific working process is as follows: The centralized control side obtains the control right and sends the remote control command to the station side, including the name of the operation source node, the operation role, the operation source node IP and other information. The station side unpacks and verifies the received command, including the source node name, the operation role, the operation source node IP, the sending event sequence number, the sending time, etc. The station side makes a logical judgment to determine whether the current operation right is in the station, whether the operation right can be transferred, and replies to the result of the operation right transfer. After the centralized control side receives the message of successful operation right transfer, it displays the operation right listing message and waits for the operator's instructions. After receiving the operator's instructions, the centralized control side encapsulates the instruction information and sends the remote adjustment or remote control instructions, and records the remote control events at the same time. After verifying all the information, the station side records the remote control events and calls the device interface for remote adjustment and remote control operations. After the operation instruction is sent, feedback is given. After receiving the feedback, the centralized control side displays it on the screen and checks the status of the remote device through the normal data acquisition program.

[0034] Through the coordinated work of the centralized control side and the station side, centralized monitoring and control of equipment across the entire system can be achieved, thereby improving production efficiency and safety.

[0035] The method of the present invention is described in detail below with reference to specific embodiments.

[0036] The purpose of the present invention is to provide a cross-system remote industrial control command issuing method, which verifies the information to ensure that the time, source, authority, role, operation type and other aspects meet the security requirements, releases the remote control command, and records the complete operation process log. The specific steps are as follows: Step 1: On the centralized control side, the centralized control side receives remote control instructions from the operator or other remote control instructions to obtain control rights from the site. After confirming that the control right ID and value are correct, it is sent to the site through the remote communication program. It needs to include the operation source node name, operation role, and operation source node IP.

[0037] Furthermore, the centralized control side and the station side generally need to include a longitudinal encryption device, and the instructions do not need additional encryption. If the longitudinal encryption device is not included, encryption through a certificate is required.

[0038] As a preferred solution, this step ensures the legitimacy and validity of the instruction by confirming the accuracy of the control right ID and value. It contains information such as the name of the operation source node, the operation role, and the operation source node IP, providing basic data for subsequent verification. Encryption using a longitudinal encryption device or certificate ensures the security of the instruction during transmission.

[0039] Furthermore, as the initiator of the instruction, the centralized control side needs to ensure the accuracy and security of the instruction. By verifying the control right ID and value, the sending of illegal instructions can be prevented. At the same time, it contains necessary operation information so that the station side can verify and execute it. Encryption measures are used to protect the instructions from being stolen or tampered with during transmission.

[0040] Step 2: After the station receives the remote control command, it needs to unpack it and verify the information such as "source node name, operation role, operation source node IP, sending event sequence number, sending time" one by one.

[0041] Furthermore, the source node name, operation role, and operation source node IP need to match the records in the remote control authority list recorded on the site side. Only when there are matching records for all three items can the access be allowed.

[0042] As a preferred solution, this step verifies the key information in the instruction one by one to ensure the legitimacy and accuracy of the instruction, and matches it with the remote control permission list to prevent unauthorized operations.

[0043] Furthermore, as the executor of the instructions, the station side needs to strictly verify the received instructions. By verifying the source node name, operation role, operation source node IP and other information, it can ensure that the instructions come from a legitimate operator. At the same time, matching with the remote control permission list can further ensure the legitimacy of the operator's permissions and roles.

[0044] Step 3: After receiving the control right request, the station side performs a logical judgment to determine whether the current operation right is in the station and whether the operation right can be transferred. If the conditions are met, it replies that the operation right transfer is completed, otherwise it replies that the operation right transfer fails.

[0045] Furthermore, as a preferred solution, this step ensures the legal transfer of operating rights through logical judgment to prevent operational conflicts or erroneous operations.

[0046] In particular, before remote operation, the station side needs to determine whether the current operation right is in the station and whether the operation right can be transferred. This is to ensure that there will be no operation conflicts or misoperations during the remote operation. Only after certain conditions are met will the station side reply that the operation right transfer is completed, thus ensuring the smooth progress of remote operation.

[0047] Step 4: After receiving the message that the operation right has been successfully transferred, the centralized control side displays the operation right listing message on the operation screen, prompting the operator that the operation can be performed and waiting for the operator's instructions.

[0048] Furthermore, as a preferred solution, this step prompts the operator that the operation can be performed, thereby enhancing the convenience and accuracy of the operation.

[0049] Furthermore, when the centralized control side receives the message that the operation right has been successfully transferred, the operation right listing message will be displayed on the operation screen. This is to remind the operator that remote operation is now possible, thereby enhancing the convenience and accuracy of the operation. At the same time, this can also prevent the operator from making erroneous operations without obtaining the operation right.

[0050] Step 5: The centralized control side receives the operator's remote control command or other remote control command, requiring remote operation and sending remote adjustment or remote control commands. The command information needs to encapsulate the source node name, operation role, operation source node IP and other information, and record the remote control event at the same time. The event records "source node name, operation role, operation source node IP, sending event sequence number, and sending time".

[0051] Furthermore, the sending event sequence number is the sequence number of the event entry, which represents the unique identification of the event entry. There will be no repeated event sequence number in a single system. The size of the sequence number is a 64-bit unsigned long integer. The sequence number can only be increased and is reset to zero at 0:00 am at the end of each month.

[0052] Furthermore, if the event sending time exceeds the response time, a sending failure event is fed back to the operation source. The response time is system configuration, and the default is generally 5 seconds.

[0053] Furthermore, the sending time is verified. The time at both ends of the system should be basically consistent. If the difference between the sending time and the current system time exceeds a certain limit, the execution is rejected. Otherwise, it can be released. This step is mainly to prevent replay attacks.

[0054] Furthermore, the event sequence number is sent, and the remote time sequence number is compared with the record in the current event library. The sequence number needs to be greater than the sequence number of the last remote control event within this month. If the verification is passed, it can be released.

[0055] As a preferred solution, this step encapsulates the necessary operation information and provides basic data for verification and execution on the station side. It records remote control events to provide a basis for subsequent analysis and tracing. It ensures the security and effectiveness of instructions by verifying the sending time and event sequence number.

[0056] Furthermore, when the centralized control side issues remote control instructions, it needs to encapsulate the necessary operation information so that the station side can verify and execute it. At the same time, recording remote control events can facilitate subsequent analysis and tracing. In order to ensure the security and effectiveness of the instructions, the centralized control side also needs to verify the sending time and event sequence number. By verifying the sending time, replay attacks can be prevented; by verifying the event sequence number, the order and uniqueness of the instructions can be ensured.

[0057] Step 6: After the station has verified all the information and recorded the remote control events, it calls the device interface to perform remote control operations. After the operation command is issued, the feedback of "the operation command has been issued" is first performed, and the feedback is fed back to the centralized control side through the remote communication program.

[0058] As a preferred solution, this step performs a final check on the instruction to ensure the legitimacy and accuracy of the instruction. The device interface is called to perform remote adjustment and remote control operations to achieve the remote control function.

[0059] Furthermore, after receiving the remote control command, the station side needs to perform a final check. This is to ensure the legality and accuracy of the command and prevent misoperation or illegal operation. After the check is passed, the station side will call the device interface to perform remote control operation, thereby realizing the remote control function.

[0060] Step 7: After the centralized control side receives the feedback that "the operation command has been issued", it will be displayed on the screen. Then check whether the switch of the remote device is changed successfully through the normal data acquisition procedure.

[0061] Furthermore, as a preferred solution, this step promptly feeds back the operation results to the operator to enhance the transparency and traceability of the operation.

[0062] Furthermore, when the station side executes the remote control command, it will feed back the operation results to the centralized control side. After receiving the feedback, the centralized control side will display it on the screen. This is to timely feed back the operation results to the operators so that they can understand the results of the remote operation. At the same time, this can also enhance the transparency and traceability of the operation, facilitating subsequent analysis and tracing work.

[0063] The present invention verifies the authority verification source node name, IP, operator role, time, serial number and other information separately to prevent information security problems in remote cross-system remote control, improve the security of remote control instructions, and reduce the possibility of hacker intrusion.

[0064] like Figure 2 As shown, the second object of the present invention is to provide a cross-system remote industrial control instruction issuing system, comprising: The remote control instruction acquisition module is used to obtain the control right of the remote control instruction and send the remote control instruction to the station side. The remote control instruction includes the name of the operation source node, the operation role, and the operation source node IP. The station side is used to receive the remote control instruction, unpack and verify. The unpacked instruction file includes the source node name, the operation role, the operation source node IP, the sending event sequence number, and the sending time. Based on the unpacked instruction file and the verification result, it is judged whether the current operation right and the transfer operation right are available, and the operation right transfer result is issued according to the judgment result; An operation right display module is used to receive a message indicating that the operation right has been successfully transferred, and to display an operation right listing message to prompt the operation; The operation instruction sending module is used to receive the operation instruction, encapsulate the operation instruction and send the operation instruction to the station side, and record the remote control event at the same time; after the station side receives the sent remote adjustment or remote control instruction and verifies all the remote adjustment or remote control instruction information, it then records the remote control event and calls the device interface to perform remote adjustment and remote control operation, and sends feedback that the operation instruction has been sent; The device status display module is used to display the remote device status after receiving feedback that the operation instruction has been issued.

[0065] like Figure 3 As shown, the third object of the present invention is to provide an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the cross-system remote industrial control instruction issuing method when executing the computer program.

[0066] A fourth object of the present invention is to provide a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the cross-system remote industrial control instruction issuing method is implemented.

[0067] A fifth object of the present invention is to provide a computer program product, wherein the computer program product comprises computer instructions, and the computer instructions instruct a computer to execute the insulation defect identification method.

[0068] Based on the above description, the cross-system remote industrial control instruction issuing method of the present invention has at least the following advantages compared with the prior art: 1) Comprehensive information verification mechanism: In the process of issuing instructions, the present invention conducts comprehensive verification of time, source, authority, role, operation type and other information. This mechanism ensures that only instructions that meet all security requirements can be released for execution, greatly improving the security of the system. In the prior art, only the basic format of instructions and the validity of some contents are often focused on, lacking comprehensive and in-depth verification of instructions. This may lead to the execution of illegal or erroneous instructions, thus causing security issues.

[0069] 2) Strict authority management: The present invention strictly manages the authority and role of the operator through the remote control authority list. Only instructions that match the records in the list can be released for execution, which effectively prevents unauthorized operations. The authority management in the prior art may be loose or lack an effective authority verification mechanism. This may lead to the abuse of operating permissions, which in turn causes security issues.

[0070] 3) Complete record of operation process log: The present invention records the complete operation process log during the process of issuing and executing instructions. This not only helps the subsequent analysis and tracing work, but also provides valuable data support for the operation, maintenance and optimization of the system. In the prior art, the record of the operation process log may not be complete or detailed. This may make it difficult to quickly locate the cause when a problem occurs, increasing the difficulty of solving the problem.

[0071] 4) Efficient instruction issuance and feedback mechanism: The present invention realizes efficient remote control operation by optimizing the instruction encapsulation, issuance and feedback process. The instruction issuance speed is fast and the accuracy is high, and the operation results can be fed back to the operator in time. The instruction issuance and feedback mechanism in the prior art may have problems such as delay, high error rate or untimely feedback. This not only affects the efficiency of remote control, but also may cause unnecessary troubles to the operator.

[0072] 5) Flexible security protection measures: The present invention provides a variety of security protection measures such as longitudinal encryption and certificate encryption for selection. Users can choose the appropriate encryption method according to actual conditions and needs to ensure the security of instructions during transmission. The security protection measures in the prior art may be relatively simple or fixed, and it is difficult to meet the needs of different users or scenarios. This may lead to poor security protection effects or excessive costs in some cases.

[0073] To sum up, the cross-system remote industrial control command issuing method of the present invention significantly improves the security, reliability and efficiency of the remote control system through core advantages such as comprehensive information verification mechanism, strict authority management, complete operation process log recording, efficient command issuing and feedback mechanism and flexible security protection measures.

[0074] It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0075] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0076] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0077] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0078] It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules / units in the methods disclosed above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In a hardware implementation, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some or all components may be implemented as software executed by a processor, such as a digital signal processor or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or a non-transitory medium) and a communication medium (or a temporary medium).

[0079] As is well known to those of ordinary skill in the art, the term computer storage media includes volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storing information (such as computer readable instructions, data structures, program modules or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, it is well known to those of ordinary skill in the art that communication media typically contain computer readable instructions, data structures, program modules or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

Claims

1. A method for issuing remote industrial control instructions across systems, applied to the centralized control side, characterized in that: include: Obtain the control right of the remote control command and send the remote control command to the station side. The remote control command includes the name of the operation source node, the operation role, and the operation source node IP. The station side is used to receive the remote control command, unpack and verify it. The unpacked command file includes the source node name, the operation role, the operation source node IP, the sending event sequence number, and the sending time. Based on the unpacked command file and the verification result, it is judged whether the current operation right and the transfer operation right are possessed, and the operation right transfer result is issued according to the judgment result; Receive the message of successful operation right transfer and display the operation right listing message to prompt the operation; Receive operation instructions, encapsulate the operation instructions and send the operation instructions to the station side, and record remote control events at the same time; after the station side receives and sends remote adjustment or remote control instructions and verifies all remote adjustment or remote control instruction information, it then records the remote control event and calls the device interface to perform remote adjustment and remote control operations, and sends feedback that the operation instructions have been sent; After receiving feedback that the operation command has been issued, the remote device status is displayed.

2. A method for issuing cross-system remote industrial control instructions according to claim 1, characterized in that: The step of obtaining the control right of the remote control command and sending the remote control command to the station side includes: Receive remote control instructions from the operator or other remote control instructions, and obtain control rights from the station side. After confirming that the control right ID and value are correct, send them to the station side through the remote communication program.

3. A method for issuing cross-system remote industrial control instructions according to claim 1, characterized in that: If there is a longitudinal encryption device on the centralized control side and the station side, the remote control instructions do not need additional encryption; if there is no longitudinal encryption device, the remote control instructions need to be encrypted by a certificate.

4. The method for issuing cross-system remote industrial control instructions according to claim 1, characterized in that: The transfer of operation rights requires that the source node name, operation role, and operation source node IP must match the records in the remote control authority list recorded on the site side. Release is allowed only if there are matching records for all three items.

5. The method for issuing cross-system remote industrial control instructions according to claim 1, characterized in that: The receiving of the message of successful operation right transfer and displaying the operation right hanging message for prompting operation includes: displaying the operation right hanging message on the operation screen to prompt the operator to operate and wait for the operator's operation instruction.

6. A method for issuing cross-system remote industrial control instructions according to claim 1, characterized in that: The encapsulating operation instructions and issuing the operation instructions, and recording the remote control events at the same time, include: The command information needs to encapsulate the source node name, operation role, and operation source node IP. The remote control event recording includes recording the source node name, operation role, operation source node IP, sending event sequence number, and sending time; The sending event sequence number is the sequence number of the event entering the database, which represents the unique identification of the event entering the database. There will be no repeated event sequence number in a single system. The size of the sequence number is a 64-bit unsigned long integer. The sequence number increases sequentially and is reset regularly. The sending event sequence number is compared with the remote time sequence number recorded in the current event database. The sequence number needs to be greater than the previous remote remote control event sequence number within this month. The verification is passed and released; If the event sending time exceeds the response time, a sending failure event is fed back to the operation source; If the difference between the sending time and the current system time exceeds a certain limit, the execution will be rejected; otherwise, it will be released.

7. A cross-system remote industrial control command issuing system, characterized in that: include: The remote control instruction acquisition module is used to obtain the control right of the remote control instruction and send the remote control instruction to the station side. The remote control instruction includes the operation source node name, operation role, and operation source node IP. The station side is used to receive the remote control instruction, unpack and verify it. The unpacked instruction file includes the source node name, operation role, operation source node IP, sending event sequence number, and sending time. Based on the unpacked command file and the verification result, it is judged whether the current operation right and the transfer operation right are possessed, and the operation right transfer result is issued according to the judgment result; An operation right display module is used to receive a message indicating that the operation right has been successfully transferred, and to display an operation right listing message to prompt the operation; The operation instruction sending module is used to receive the operation instruction, encapsulate the operation instruction and send the operation instruction to the station side, and record the remote control event at the same time; after the station side receives the sent remote adjustment or remote control instruction and verifies all the remote adjustment or remote control instruction information, it then records the remote control event and calls the device interface to perform remote adjustment and remote control operation, and sends feedback that the operation instruction has been sent; The device status display module is used to display the remote device status after receiving feedback that the operation instruction has been issued.

8. An electronic device, characterized in that: The invention comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the processor implements the cross-system remote industrial control instruction issuing method as claimed in any one of claims 1 to 6 when executing the computer program.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method for issuing cross-system remote industrial control instructions according to any one of claims 1 to 6 is implemented.

10. A computer program product, comprising computer instructions, characterized in that: The computer instructions instruct the computer to execute the insulation defect identification method according to any one of claims 1 to 6.

Images