Trusted component division and automatic deployment method of trusted DCS (Distributed Control System) controller

Abstract

The invention provides a trusted component division and automatic deployment method for a trusted DCS (Distributed Control System) controller, which comprises the following steps of: dividing components in the trusted DCS controller into a trustmodule bottom layer management trusted security component and an agent proxy management communication trusted security component according to functional characteristics and security requirements of the components in the trusted DCS controller; and installing a trust module bottom layer management trusted security component and an agent agent management communication trusted security component at the same time or in a time-sharing manner through a trust module trusted security component automatic deployment tool and an agent agent trusted security component automatic deployment tool. According to the method, the modular design of the trusted component is realized, the required trusted security component can be independently installed and configured, the deployment process of the trusted component is greatly simplified, and the deployment efficiency is improved.

Description

Technical Field

[0001] The invention belongs to the field of industrial control systems and relates to a trusted component division and automatic deployment method of a trusted DCS controller. Background Art

[0002] With the deep integration of industrialization and informatization, intelligent manufacturing and industrial Internet are developing rapidly, and industrial control systems are widely used in energy, transportation, advanced manufacturing, public utilities and other fields. However, compared with the already relatively secure traditional information systems, industrial control systems are particularly vulnerable in terms of information security. Therefore, it is particularly important to ensure the overall security of industrial control systems.

[0003] As a core component of industrial control systems, DCS (distributed control system) plays an increasingly important role, and its security is particularly critical. However, with the popularization of network technology, DCS systems are facing increasingly serious security challenges. Trusted DCS controllers have trusted computing functions, which can perform trusted verification on boot programs, operating system kernels, applications, configuration files, and processes to ensure the trustworthiness of the controller's software and hardware environment.

[0004] In the current trusted DCS controller, the installation and deployment methods of trusted components are indeed complex, which is mainly reflected in the following aspects, resulting in the inability to install and uninstall components independently, and the inefficiency of overall adjustment when problems occur: First, the existing installation and deployment methods often adopt an integrated design, which means that the various trusted components are tightly coupled and lack independence. When one of the components has a problem or needs to be updated, the entire system often needs to be shut down for maintenance, which not only affects the normal operation of the DCS controller, but also increases the cost and time of maintenance.

[0005] ‌Secondly, due to the high inter-component dependency, when deploying new components or uninstalling old components, compatibility and interactivity with other components need to be considered. This requires engineers to have a high level of technical skills and rich experience to ensure that the overall stability and security of the system will not be undermined during operation. However, this highly inter-dependent design also increases the risk and uncertainty of operation.

[0006] ‌Finally, the existing installation and deployment methods lack flexibility and scalability‌. With the continuous development of technology and the changing business needs, DCS controllers may need to add new trusted components or upgrade existing components. However, due to the complexity of the existing methods, it becomes very difficult to add new components and upgrade old components, and even requires the reconstruction of the entire system. This not only affects the scalability of the system, but also limits the application of DCS controllers in new technologies and business areas.

[0007] In summary, the existing trusted component installation and deployment methods of trusted DCS controllers are indeed complex and cannot achieve independent installation and uninstallation of each component. When a trusted component has a problem, it needs to be adjusted as a whole, which is not only inefficient but also seriously affects the normal operation of the DCS controller. Therefore, it is necessary to improve and optimize the existing installation and deployment methods to improve the stability, security and scalability of the system. Summary of the invention

[0008] In order to solve the above problems of the prior art, the present invention provides a trusted component division and automated deployment method of a trusted DCS controller, realizes the modular design of trusted components, and makes the rapid deployment of trusted DSC controllers easier through the automated installation, configuration and management of each trusted security component. The required trusted security components can be installed and configured separately, which greatly simplifies the trusted component deployment process and improves deployment efficiency.

[0009] The present invention is achieved through the following technical solutions: In a first aspect, the present invention provides a method for partitioning and automatically deploying trusted components of a trusted DCS controller, comprising: According to the functional characteristics and security requirements of the components in the trusted DCS controller, the components in the trusted DCS controller are divided into trust_module bottom-level management trusted security components and agent agent management communication trusted security components, wherein the trust_module bottom-level management trusted security components are used for bottom-level security management functions, and the agent agent management communication trusted security components are used for security control during the communication process, and the trust_module bottom-level management trusted security components are correspondingly provided with a trust_module trusted security component automation deployment tool, and the agent agent management communication trusted security components are correspondingly provided with an agent agent trusted security component automation deployment tool; The trust_module underlying management trusted security component and the agent agent management communication trusted security component are installed simultaneously through a compressed package containing the trust_module trusted security component automated deployment tool and the agent agent trusted security component automated deployment tool; or, the trust_module underlying management trusted security component is installed through a compressed package containing the trust_module trusted security component automated deployment tool, and the agent agent management communication trusted security component is installed through a compressed package containing the agent agent trusted security component automated deployment tool.

[0010] Optionally, the trust_module underlying management trusted security component and the agent agent management communication trusted security component are simultaneously installed through a compressed package containing the trust_module trusted security component automatic deployment tool and the agent agent trusted security component automatic deployment tool, including: Decompress the compressed package containing the trust_module trusted security component automated deployment tool and the agent trusted security component automated deployment tool to a specified directory to obtain the trust_module trusted security component automated deployment tool and the agent trusted security component automated deployment tool; Run the trust_module trusted security component automated deployment tool, install the trust_module underlying management trusted security component, and configure the trust_module underlying management trusted security component; Run the agent agent trusted security component automated deployment tool, install the agent agent management communication trusted security component, and configure the agent agent management communication trusted security component; Start the trust_module underlying management trusted security component and the agent agent management communication trusted security component.

[0011] Optionally, the compressed package containing the trust_module trusted security component automatic deployment tool and the agent trusted security component automatic deployment tool exists in the form of a tar file compressed package.

[0012] Optionally, the trust_module trusted security component automated deployment tool exists in the form of a Linux self-extracting bin executable file.

[0013] Optionally, the agent agent trusted security component automated deployment tool adopts an automated deployment script; the automated deployment script exists in the form of a Linux shell script, and the automated deployment script contains instructions and configuration information required to deploy the agent agent management communication trusted security component.

[0014] Optionally, the configuration content of configuring the trust_module underlying management trusted security component includes: setting monitoring frequency and defining trusted status determination rules.

[0015] Optionally, the configuration content of configuring the agent management communication trusted security component includes: setting a communication protocol and defining task execution rules.

[0016] Optionally, the compressed package containing the trust_module trusted security component automated deployment tool exists in the form of a self-extracting bin file compressed package.

[0017] Optionally, the step of installing the trust_module underlying management trusted security component through a compressed package containing the trust_module trusted security component automated deployment tool, and configuring the agent agent management communication trusted security component, comprises: Logging into the operating system of the trusted DCS controller; Open a shell terminal; Locate the directory storing the bin file compression package of the trust_module trusted security component automated deployment tool in the shell terminal; In the directory where the bin file compression package of the trust_module trusted security component automated deployment tool is located, execute the bin file compression package of the trust_module trusted security component automated deployment tool to start the installation process of the trust_module underlying management trusted security component, the installation process includes decompressing the compression package, copying files, and setting permissions; While or after installing the trust_module underlying management trusted security component, configure the agent agent management communication trusted security component according to the instructions or configuration files in the bin file compression package of the trust_module trusted security component automated deployment tool, so that the agent agent management communication trusted security component works in coordination with the trust_module underlying management trusted security component to achieve security control during the communication process.

[0018] Optionally, when the trust_module underlying management trusted security component has been installed on the trusted DCS controller, the following method is used to replace the trust_module underlying management trusted security component: Logging into the operating system of the trusted DCS controller; Open a shell terminal; Locate the directory storing the bin file compressed package of the new trust_module underlying management trusted security component in the shell terminal; Uninstall the installed trust_module underlying management trusted security component based on the bin file compression package of the new trust_module underlying management trusted security component; Decompress the bin file compressed package of the new trust_module underlying management trusted security component, and install the new trust_module underlying management trusted security component based on the decompressed bin file of the new trust_module underlying management trusted security component; According to the configuration file or instruction carried in the bin file compressed package of the new trust_module underlying management trusted security component, the new trust_module underlying management trusted security component is configured so that the new trust_module underlying management trusted security component runs correctly and works in coordination with other components in the system.

[0019] In a second aspect, the present invention provides a trusted component partitioning and automated deployment device for a trusted DCS controller, the device comprising: A division module is used to divide the components in the trusted DCS controller into trust_module bottom-level management trusted security components and agent agent management communication trusted security components according to the functional characteristics and security requirements of the components in the trusted DCS controller, wherein the trust_module bottom-level management trusted security components are used for bottom-level security management functions, the agent agent management communication trusted security components are used for security control during the communication process, the trust_module bottom-level management trusted security components are correspondingly provided with a trust_module trusted security component automatic deployment tool, and the agent agent management communication trusted security components are correspondingly provided with an agent agent trusted security component automatic deployment tool; An installation module is used to simultaneously install the trust_module underlying management trusted security component and the agent agent management communication trusted security component through a compressed package containing the trust_module trusted security component automatic deployment tool and the agent agent trusted security component automatic deployment tool; or, install the trust_module underlying management trusted security component through a compressed package containing the trust_module trusted security component automatic deployment tool, and install the agent agent management communication trusted security component through a compressed package containing the agent agent trusted security component automatic deployment tool.

[0020] In a third aspect, the present invention provides an electronic device, comprising: a memory, a processor, and a computer program stored in the memory and running on the processor; the processor is used to read the computer program in the memory to implement the steps in the method for trusted component division and automated deployment of a trusted DCS controller described in the first aspect.

[0021] In a fourth aspect, the present invention provides a computer-readable storage medium, on which a program or instruction is stored, and when the program or instruction is executed by a processor, the steps of the method for dividing and automatically deploying trusted components of a trusted DCS controller described in the first aspect are implemented.

[0022] The present invention has the following beneficial effects: The trusted component rapid deployment method of the trusted DCS controller of the present invention divides the trusted component into multiple trusted safety components, including the trust_module bottom management trusted safety component and the agent agent management communication trusted safety component, so as to realize the modular design of the trusted component. Through the modular design of the trusted component, the rapid deployment of the trusted DCS controller is easier, because only the required trusted safety components need to be installed and configured, which greatly simplifies the deployment process of the trusted DCS controller, improves the deployment efficiency, enhances the stability of the DCS system, reduces the production loss caused by system crash or failure, reduces the maintenance cost, and reduces the frequent repair and update caused by system security issues. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0024] Figure 1 A flow chart of a method for dividing and automatically deploying trusted components of a trusted DCS controller provided by an embodiment of the present invention; Figure 2a Flow chart of a method for dividing and automatically deploying trusted components of a trusted DCS controller in Example 1 of the present invention; Figure 2b Flow chart of the trusted component division and automated deployment method of the trusted DCS controller of embodiments 2 and 3 of the present invention; Figure 3 It is a structural diagram of a trusted component division and automated deployment device of a trusted DCS controller provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0025] The following describes the embodiments of the present invention through specific examples, and those skilled in the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present invention.

[0026] It should be noted that the process equipment or devices not specifically specified in the following embodiments are all conventional equipment or devices in the art.

[0027] It should be noted that the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices. Moreover, unless otherwise specified, the numbering of each method step is only a convenient tool for identifying each method step, and is not intended to limit the order of arrangement of each method step or to define the scope of the present invention. Changes or adjustments in their relative relationships should also be regarded as the scope of the present invention without substantially changing the technical content.

[0028] In order to facilitate the understanding of the technical solution of the present application, the nouns or terms mentioned in the embodiments of the present application are first explained: 1. Division of trusted components: The trusted components of the trusted DCS controller are divided into two categories: trust_module underlying management trusted security components and agent agent management communication trusted security components.

[0029] This division is based on the functional characteristics and security requirements of the components, where the trust_module is responsible for the underlying security management tasks, such as encryption, decryption, and identity authentication, while the agent is responsible for security control during the communication process, such as the establishment of secure channels and encrypted data transmission.

[0030] 2. Logic and ideas of division: The division follows the principles of modularity, hierarchy and security isolation, aiming to improve the maintainability, scalability and security of the system.

[0031] By separating security components with different functions, it is easier to conduct independent security audits and updates on each component, reducing the security risk of the overall system.

[0032] ‌3. Beneficial effects of division‌: Improves system security because each component can be independently hardened and protected.

[0033] Enhances the scalability of the system, making it easier to add new security components or functions in the future.

[0034] Maintenance and management of the system is simplified because the responsibilities of each component are clearly defined.

[0035] ‌4. Component features‌: The trust_module underlying management trusted security components are highly secure and stable and usually run in the system's kernel layer or trusted execution environment.

[0036] The agent agent manages the communication trusted security components more flexibly and can dynamically adjust the security policy according to communication needs.

[0037] ‌5. Setting up automated deployment tools‌: For the trust_module underlying management trusted security components, one or more trust_module trusted security component automated deployment tools are provided, and each tool is responsible for the deployment and configuration of a specific security component.

[0038] For the agent management communication trusted security component, an agent trusted security component automatic deployment tool is also set up to be responsible for the deployment, configuration and update of the component.

[0039] ‌6. Automated deployment in multiple security component scenarios‌: When the trust_module contains multiple security components, each security component corresponds to a dedicated automated deployment tool, or a general deployment tool is used to deploy different security components through different configuration parameters.

[0040] Automated deployment tools communicate with security components through pre-defined interfaces or protocols to achieve automated and intelligent deployment and configuration processes.

[0041] The present invention divides the trusted components of the trusted DSC controller into multiple trusted security components, which can realize the modular design of the trusted components of the system. These trusted security components include the trust_module bottom management trusted security component and the agent agent management communication trusted security component. The functions of the trust_module bottom management trusted security component include: realizing the protection of files that have been configured with trusted policies and realizing the protection of processes that have been configured with trusted policies; the functions of the agent agent management communication trusted security component include: realizing the information communication between the upper computer management end and the bottom rust_module bottom management trusted security component.

[0042] Furthermore, the modular design of trusted components makes it easier to quickly replace trusted components of the DCS system, because you only need to automatically run the bin file compression package to uninstall, install, configure policies and other related content, which greatly simplifies the replacement process of the DCS system and improves the efficiency of rapid replacement; quickly restores the stability and security of the DCS system and reduces production losses caused by module failures; improves the simplicity and efficiency of replacement operations and reduces maintenance costs; ensures the continuous operation of the system and data integrity during the replacement process.

[0043] For these trusted security components, there are separate automated deployment tools, namely the trust_module trusted security component automated deployment tool and the agent trusted security component automated deployment tool. Each automated deployment tool can realize automated installation, configuration and management. Through their own automated installation, configuration and management, the rapid deployment of trusted DSC controllers is easier.

[0044] The trust_module bottom management trusted security component and the agent agent management communication trusted security component of the present invention can be installed in combination or independently, depending on actual needs.

[0045] Specifically, Figure 1 As shown, the trusted component rapid deployment method of the trusted DCS controller of the present invention comprises the following steps: Step S1, according to the functional characteristics and security requirements of the components in the trusted DCS controller, the components in the trusted DCS controller are divided into trust_module bottom-level management trusted security components and agent agent management communication trusted security components, wherein the trust_module bottom-level management trusted security components are used for bottom-level security management functions, the agent agent management communication trusted security components are used for security control during the communication process, the trust_module bottom-level management trusted security components are correspondingly provided with a trust_module trusted security component automatic deployment tool, and the agent agent management communication trusted security components are correspondingly provided with an agent agent trusted security component automatic deployment tool; Step S2: simultaneously install the trust_module underlying management trusted security component and the agent agent management communication trusted security component through a compressed package containing the trust_module trusted security component automated deployment tool and the agent agent trusted security component automated deployment tool; or, install the trust_module underlying management trusted security component through a compressed package containing the trust_module trusted security component automated deployment tool, and install the agent agent management communication trusted security component through a compressed package containing the agent agent trusted security component automated deployment tool.

[0046] ‌When you need to install both the trust_module underlying management trusted security component and the agent agent management communication trusted security component, installing them through a compressed package containing the automated deployment tools for both is an efficient and integrated deployment method‌. This technical solution not only simplifies the installation process, but also ensures compatibility and collaboration between components. It includes the following steps: ‌Unzip the compressed package‌: First, unzip the compressed package containing the trust_module trusted security component automated deployment tool and the agent trusted security component automated deployment tool to the specified directory to obtain the two automated deployment tools.

[0047] ‌Install and configure the trust_module underlying management trusted security component‌: Next, run the trust_module trusted security component automated deployment tool. The tool will automatically complete the installation of the trust_module underlying management trusted security component and configure it according to the preset configuration files or parameters to ensure that the component can run correctly and manage the trusted security of the system.

[0048] ‌Install and configure the agent management communication trusted security component‌: Then, run the agent agent trusted security component automatic deployment tool. Similarly, the tool will be responsible for the installation and configuration of the agent agent management communication trusted security component, ensuring that the agent agent management communication trusted security component can communicate effectively with other components in the system (including the trust_module underlying management trusted security component) and jointly maintain the security of the system.

[0049] ‌Start components‌: Finally, start the installed and configured trust_module underlying management trusted security component and agent agent management communication trusted security component, so that they can start working together to provide comprehensive trusted security protection for the system.

[0050] The beneficial effects of this technical solution are mainly reflected in the following aspects: ‌Improve installation efficiency‌: Automated deployment tools can greatly shorten component installation and configuration time and improve deployment efficiency.

[0051] ‌Ensure component compatibility‌: Since the compressed package contains the automated deployment tools for the two components, the compatibility of the two components during installation and configuration can be ensured to avoid problems caused by version mismatch or configuration errors.

[0052] ‌Improve system security‌: The collaborative work of the trust_module underlying management trusted security component and the agent agent management communication trusted security component can provide the system with multi-level and comprehensive trusted security protection and effectively prevent various security threats.

[0053] In addition, the trusted component division and automated deployment method of the trusted DCS controller provided in the embodiment of the present application can also adopt the following parallel solution: in addition to installing through a compressed package containing two automated deployment tools, it is also possible to download and install the trust_module underlying management trusted security component and the agent agent management communication trusted security component separately. Specifically, the user can first download the installation package of the trust_module underlying management trusted security component from the official channel, and install and configure it according to the installation guide; then download the installation package of the agent agent management communication trusted security component, and also install and configure it according to the installation guide. Finally, start these two components manually or automatically so that they start working together. Although this solution is relatively complex, it provides higher flexibility and customizability to meet the different needs of users.

[0054] When you need to install the trust_module underlying management trusted security component independently, install the trust_module underlying management trusted security component through the compressed package that contains the trust_module trusted security component automated deployment tool.

[0055] Example 1 In the trusted security component division and automated deployment method of the trusted DSC controller provided in this embodiment, the trust_module underlying management trusted security component and the agent agent management communication trusted security component are installed in combination. The method provides an installation program, which exists in the form of a tar file compression package, and after decompression, it is divided into a trust_module trusted security component automated deployment tool and an agent agent trusted security component automated deployment tool.

[0056] The trust_module trusted security component automated deployment tool exists in the form of a Linux self-extracting bin executable file. The agent trusted security component automated deployment tool contains the executable program and related dependency files of the agent management communication trusted security component. The installation is in the form of a Linux shell script.

[0057] Before deploying trusted security components, ensure that the following conditions are met: (1) The hardware and software installation of the DCS system is complete and the system is running normally.

[0058] (2) The DCS system has sufficient permissions to install and configure the trust_module underlying management trusted security component and the agent agent management communication trusted security component.

[0059] (3) The network environment is stable to ensure that data transmission is not disturbed during the installation process.

[0060] In some embodiments of the present invention, the trust_module underlying management trusted security component and the agent agent management communication trusted security component are installed simultaneously by using a compressed package containing the trust_module trusted security component automated deployment tool and the agent agent trusted security component automated deployment tool, including: Decompress the compressed package containing the trust_module trusted security component automated deployment tool and the agent trusted security component automated deployment tool to a specified directory to obtain the trust_module trusted security component automated deployment tool and the agent trusted security component automated deployment tool; Run the trust_module trusted security component automated deployment tool, install the trust_module underlying management trusted security component, and configure the trust_module underlying management trusted security component; Run the agent agent trusted security component automated deployment tool, install the agent agent management communication trusted security component, and configure the agent agent management communication trusted security component; Start the trust_module underlying management trusted security component and the agent agent management communication trusted security component.

[0061] like Figure 2a As shown, the trusted security component division and automatic deployment method of the trusted DCS controller of the present invention includes the following steps: (1) Unzip the installation program; Decompress the tar file to the specified directory to obtain the trust_module trusted security component automated deployment tool and the agent trusted security component automated deployment tool.

[0062] (2) Install the trust_module underlying management trusted security component; Run the trust_module trusted security component automated deployment tool and follow the prompts to complete the installation process. The tool automatically detects the system environment and configuration to ensure that the trust_module underlying management trusted security component can be correctly installed and run. During the installation process, you may need to enter some necessary configuration information, such as the controller's IP address, port number, etc.

[0063] (3) Configure the trust_module underlying management trusted security component; After the installation is complete, you need to configure the trust_module underlying management trusted security component to ensure that it can correctly monitor the trusted status of the trusted DCS controller. The configuration content includes but is not limited to: setting the monitoring frequency, defining the trusted status determination rules, etc.

[0064] (4) Install the agent management communication trusted security component; Run the agent trusted security component automated deployment tool and follow the prompts to complete the installation process. The tool will automatically detect the system environment and configuration to ensure that the agent management communication trusted security component can be correctly installed and run. During the installation process, you may also need to enter some necessary configuration information.

[0065] (5) Configure the agent to manage communication trusted security components; After the installation is complete, you need to configure the agent management communication trusted security component to ensure that it can communicate with the trust_module underlying management trusted security component and correctly execute related tasks. The configuration content includes but is not limited to: setting the communication protocol, defining task execution rules, etc.

[0066] (6) Start the trust_module underlying management trusted security component and the agent agent management communication trusted security component.

[0067] After completing the configuration, start the trust_module underlying management trusted safety component and the agent agent management communication trusted safety component to start working. At this time, the trust_module underlying management trusted safety component will start to periodically monitor the trusted status of the trusted DCS controller, and the agent agent management communication trusted safety component will execute tasks according to the configuration.

[0068] In some embodiments of the present invention, the compressed package containing at least one of the trust_module trusted security component automated deployment tool and the agent agent trusted security component automated deployment tool can exist in the form of a tar file compressed package, or in the form of a Linux self-extracting bin executable file, which is not specifically limited here.

[0069] In some implementations, the automated deployment tool is in the form of a tar file compression package, which has the following beneficial effects: ‌Wide compatibility‌: The tar file compression package is an archive format widely used in Unix / Linux systems and has good cross-platform compatibility. This means that users can easily decompress and use the compressed package on any Unix / Linux distribution, thus reducing compatibility issues during deployment; ‌Efficient compression‌: tar file compression packages usually have a good compression rate, which can effectively reduce the file size and save storage space. When transmitting or distributing trusted security component automation deployment tools, smaller file sizes can significantly reduce transmission time and bandwidth consumption; ‌Easy to manage‌: The tar file compression package can package multiple files and directories into a single file, making it easier to manage the deployment tool. Users can easily back up, copy, and move the entire compressed package without worrying about file loss or path errors; ‌Standardized format‌: The tar file compression package follows the standard archive format, which makes it easy for various Unix / Linux tools to process it. Users can use standard tar commands to decompress, view and operate the contents of the compressed package without additional learning costs.

[0070] In other embodiments, the automated deployment tool is in the form of a Linux self-extracting bin executable file, which has the following beneficial effects: ‌One-click deployment‌: The Linux self-extracting bin executable file integrates the decompression and installation processes. Users only need to run one command to automatically complete the entire deployment process. This one-click deployment method greatly simplifies the deployment process and improves user convenience; ‌No additional tools required‌: Unlike traditional compressed packages, self-extracting bin files do not require users to install or rely on other decompression tools. This reduces the dependency and complexity of the deployment process, allowing users to easily deploy trusted security component automation deployment tools in any environment that supports Linux; ‌Reducing human errors‌: The self-extracting bin file performs the decompression and installation process in an automated manner, reducing the chances of human operation and potential errors. This helps ensure the consistency and reliability of the deployment process and reduces the risk of deployment failure due to human error; ‌High integration‌: The self-extracting bin file can integrate all the necessary components and configurations of the deployment tool into a single executable file. This makes the deployment process more compact and efficient, without the need for users to manually configure or install additional dependencies.

[0071] In summary, using the tar file compression package or the Linux self-extracting bin executable file has different beneficial effects. In practical applications, the most suitable compression package format can be selected according to specific needs and scenarios to meet the efficient, convenient and reliable deployment of deployment tools.

[0072] In some embodiments of the present invention, the agent agent trusted security component automated deployment tool uses an automated deployment script; the automated deployment script exists in the form of a Linux shell script, and the automated deployment script contains instructions and configuration information required to deploy the agent agent management communication trusted security component.

[0073] This embodiment has the following beneficial effects: ‌Improve deployment efficiency‌: Automated deployment scripts can automatically execute a series of preset instructions and configurations, which greatly reduces the time of manual intervention and significantly improves deployment efficiency. Especially in scenarios where large-scale agent deployment is required, this automated method can save a lot of manpower and time costs; ‌Ensure deployment consistency‌: Since the automated deployment script contains all necessary instructions and configuration information, each deployment will follow the same process, ensuring the consistency and reliability of the deployment results. This avoids deployment inconsistencies caused by differences in human operations and improves the stability and security of the system; ‌Simplify the deployment process‌: Linux shell scripts are a widely used scripting language that is easy to use and write. Using this form of automated deployment scripts makes the deployment process more intuitive and easy to understand, so even non-professional users can quickly get started and deploy; ‌Convenient version management and update‌: The automated deployment script exists in the form of a file, which is convenient for version management and update. When you need to upgrade or modify the deployment process, you only need to update the corresponding script file, without having to manually operate each deployment node, which greatly improves the convenience of management; ‌Enhanced scalability and flexibility‌: Automated deployment scripts can be customized and expanded according to actual needs. By modifying or adding instructions and configuration information in the script, deployment requirements in different scenarios can be easily achieved, enhancing the scalability and flexibility of the system.

[0074] In summary, the use of automated deployment scripts in the form of Linux shell scripts has brought many benefits to the deployment of trusted security components of agent agents, including improving deployment efficiency, ensuring deployment consistency, simplifying the deployment process, facilitating version management and updates, and enhancing scalability and flexibility. These advantages provide a strong guarantee for the rapid, stable and secure deployment of the system.

[0075] In some implementations of the present invention, the configuration content of configuring the trust_module underlying management trusted security component includes: setting monitoring frequency and defining trusted status determination rules.

[0076] This embodiment has the following beneficial effects: ‌Improve monitoring efficiency‌: By setting the monitoring frequency‌, users can adjust the monitoring frequency of the trust_module underlying management trusted security component on the system or application according to actual needs. By setting a reasonable frequency, you can ensure that security threats are detected in a timely manner while avoiding the waste of system resources caused by too frequent monitoring. This helps to improve monitoring efficiency and ensure a balance between system performance and security; ‌Enhanced judgment accuracy‌: By defining trusted status judgment rules, users can customize trusted status judgment rules based on specific security policies and business needs. This means that the trust_module underlying management trusted security component can accurately determine whether the system or application is in a trusted state based on the standards set by the user, so as to promptly discover and respond to potential security risks. This enhances the accuracy of judgment and improves the effectiveness of security response; ‌Increase flexibility‌: By configuring the monitoring frequency and trusted status determination rules, users can flexibly adjust the working mode and behavior of the trust_module underlying management trusted security component according to different application scenarios and security requirements. This flexibility enables the trust_module underlying management trusted security component to better adapt to various complex environments and scenarios, providing more accurate and effective security protection; ‌Simplified Management‌: Centralized configuration management allows users to easily adjust the working parameters of the trust_module underlying management trusted security components by modifying configuration files or interface settings without having to go deep into the code or perform complex operations. This simplifies the management process, reduces management costs, and enables users to more easily maintain and manage system security; ‌Enhanced scalability‌: As business grows and security requirements change, users may need to adjust or expand the functions of the trust_module underlying management trusted security components. By configuring the monitoring frequency and trusted status determination rules, users can easily adjust the behavior of the trust_module underlying management trusted security components without changing the core code, thereby enhancing the scalability and maintainability of the system.

[0077] In summary, configuring the trust_module underlying management trusted security component configuration content, including setting the monitoring frequency and defining the trusted status determination rules, can significantly improve monitoring efficiency, enhance determination accuracy, improve flexibility, simplify management, and enhance scalability, providing more powerful and flexible support for the system's security protection.

[0078] In some implementations of the present invention, the configuration content of configuring the agent agent management communication trusted security component includes: setting a communication protocol and defining a task execution rule.

[0079] In some embodiments of the present invention, the configuration content of the agent management communication trusted security component is carefully set, including setting the communication protocol and defining the task execution rules, which can achieve the following beneficial effects: ‌Ensure communication security‌: By setting the communication protocol, a secure and reliable channel can be established for the communication between the agent agent management communication trusted security component and other trusted security components. This helps prevent data from being stolen or tampered with during transmission, thereby ensuring the confidentiality and integrity of the communication and providing a solid foundation for the safe operation of the system; ‌Improve task execution efficiency‌: Clearly define task execution rules so that the agent management communication trusted security component can efficiently execute various security tasks according to the established logic and sequence. This not only reduces confusion and delays in the task execution process, but also improves the overall security management efficiency of the system; ‌Enhanced system compatibility‌: The use of standardized communication protocols and task execution rules helps to improve the compatibility of the system with other security components or systems. This makes it easier for the invention to be integrated into the existing security architecture and achieve seamless connection with various security components; ‌Easy to manage and maintain‌: By configuring the trusted and secure communication component, we can more easily monitor and manage the behavior of the agent management communication trusted and secure component. This not only simplifies the daily operation and maintenance of the system, but also enables quick location and resolution of problems when they occur, reducing the maintenance cost of the system; Improve system flexibility: Flexible configuration of communication protocols and task execution rules enables the system to be adaptively adjusted according to different security requirements and actual environments. This flexibility enables the invention to cope with ever-changing security threats and provide strong guarantees for the long-term safe operation of the system.

[0080] In summary, the careful configuration of the trusted security components of agent management communication not only ensures the security of communication and the efficient execution of tasks, but also enhances the compatibility of the system, facilitates management and maintenance, and improves the flexibility of the system. These beneficial effects together provide strong support for building a more secure, reliable and efficient communication system environment.

[0081] In some implementations of the present invention, the compressed package containing the trust_module trusted security component automated deployment tool exists in the form of a self-extracting bin file compressed package.

[0082] This embodiment can achieve the following beneficial effects: ‌Simplify the deployment process‌: The self-extracting bin file compression package makes the installation and configuration process of the deployment tool easier. Users do not need to manually decompress and install multiple files. They only need to run a self-extracting file to automatically complete all deployment steps, which greatly reduces the complexity and error rate of deployment; ‌Improve deployment efficiency‌: Since the self-extracting file can automatically complete the decompression and installation process, the time required for deployment can be significantly shortened. This is especially important for environments that need to quickly deploy a large number of trust_module agents to manage communication trusted security components, which can greatly improve work efficiency; ‌Ensure deployment consistency‌: The self-extracting bin file package ensures the consistency and integrity of the deployment tool. All users download the same compressed package, and the decompression and installation process is also automated, thus avoiding deployment inconsistencies caused by manual operation differences; ‌Easy to distribute and transfer‌: Self-extracting files are usually small in size, which is convenient for distribution and transfer on the network. This can save a lot of bandwidth and time costs for remote deployment or environments where trust_module agents need to be installed on multiple nodes to manage communication trusted security components; ‌Enhanced security‌: Self-extracting files can be digitally signed and verified during the decompression and installation process to ensure the integrity of the files and that they have not been tampered with. This is especially important for security components such as the trust_module agent that manages communication trusted security components, which can effectively prevent the intrusion and damage of malicious software.

[0083] In summary, the trust_module trusted security component automated deployment tool in the form of a self-extracting bin file compression package can simplify the deployment process, improve deployment efficiency, ensure deployment consistency, facilitate distribution and transmission, and enhance security, providing strong support for the widespread application of the trust_module agent management communication trusted security component.

[0084] Below, reference Figure 2b As shown, Example 2 and Example 3 are explained: Example 2 In some embodiments of the present invention, the step of installing the trust_module underlying management trusted security component through a compressed package containing the trust_module trusted security component automated deployment tool, and configuring the agent agent management communication trusted security component, includes: Logging into the operating system of the trusted DCS controller; Open a shell terminal; Locate the directory storing the bin file compression package of the trust_module trusted security component automated deployment tool in the shell terminal; In the directory where the bin file compression package of the trust_module trusted security component automated deployment tool is located, execute the bin file compression package of the trust_module trusted security component automated deployment tool to start the installation process of the trust_module underlying management trusted security component, the installation process includes decompressing the compression package, copying files, and setting permissions; While or after installing the trust_module underlying management trusted security component, configure the agent agent management communication trusted security component according to the instructions or configuration files in the bin file compression package of the trust_module trusted security component automated deployment tool, so that the agent agent management communication trusted security component works in coordination with the trust_module underlying management trusted security component to achieve security control during the communication process.

[0085] ‌Technical solution description and beneficial effect analysis‌: ‌1. Technical solution description‌ This embodiment provides a method for independent and rapid installation and deployment of the trusted security components of the trusted DSC controller, especially the trust_module underlying management trusted security components. The method uses the trust_module trusted security component automated deployment tool provided in the form of a self-extracting bin file compressed package to achieve the entire process of independent uninstallation, installation, and configuration of the components. The specific steps are as follows: ‌1. Design and prepare the DCS controller operating system‌: Select a suitable hardware platform and a compatible Linux operating system.

[0086] 2. Prepare necessary components, such as the bin file compression package of trust_module, drivers, dependent libraries, etc.

[0087] 3. Create a special directory in the operating system to manage installation files.

[0088] 4. Log in to the operating system of the trusted DCS controller: Use credentials to log in to the DCS controller and ensure that you have the authority to perform installation and configuration tasks.

[0089] 5. Open the shell terminal for subsequent operations.

[0090] 6. Install the trust_module underlying management trusted security component: 7. Navigate to the directory where the bin file compression package is located in the shell terminal.

[0091] 8. Execute the bin file compression package to start the installation, usually by entering the . / trust_module.bin command.

[0092] 9. Complete the configuration according to the installation program prompts, such as selecting the installation location, setting environment variables, configuring network parameters, etc.

[0093] 10. The installer automatically handles steps such as decompression, copying files, and setting permissions to ensure that the components are installed and run correctly.

[0094] ‌2. Analysis of beneficial effects‌ ‌1. Improve installation efficiency‌: The automated deployment tool simplifies the installation process, reduces manual intervention, and significantly improves installation efficiency. The design of the self-extracting bin file compression package makes the installation process more convenient, without the need for additional decompression steps.

[0095] 2. Ensure installation accuracy: Automated deployment tools can be installed according to preset steps and parameters, avoiding human errors. The installer automatically handles details such as file copying and permission settings to ensure the correctness and completeness of component installation.

[0096] ‌3. Enhance system flexibility‌: The independent installation design allows the trust_module underlying management trusted security component to be separated from other components, making it easier to manage and maintain. Users can choose to install or uninstall components according to actual needs without affecting the normal operation of other systems.

[0097] 4. Improve system security: The independent installation and configuration of the trust_module underlying management trusted security components helps build a more secure and reliable system environment. Installation through automated deployment tools can reduce security risks introduced by improper human operations.

[0098] ‌III. Explanation of the parallel scheme‌ The trusted component division and automated deployment method of the trusted DCS controller provided in the embodiment of the present invention may also adopt the following installation method: ‌1. Script-based installation method‌: In addition to providing a self-extracting bin file compressed package, a script-based installation method can also be provided. Users can download a script file containing installation instructions and configuration parameters, and execute the script file through the shell terminal to complete the installation of the trust_module underlying management trusted security component. The script file can contain detailed installation steps, dependency checks, environment variable settings, etc. to ensure the accuracy and completeness of the installation process. This script-based installation method provides users with more flexibility and customizability. Users can modify the script file according to actual needs to meet specific installation requirements.

[0099] Through the description of the above parallel solutions, the connotation of the technical solution is further enriched, and the comprehensiveness and feasibility of the trusted component division and automated deployment method of the trusted DCS controller provided by the embodiment of the present application are enhanced. At the same time, it is also shown that the installation method provided by this embodiment is not the only option, but can be flexibly adjusted and expanded according to actual needs.

[0100] Example 3 In some implementations of the present invention, when the trust_module underlying management trusted security component has been installed on the trusted DCS controller, the following method is used to replace the trust_module underlying management trusted security component: Logging into the operating system of the trusted DCS controller; Open a shell terminal; Locate the directory storing the bin file compressed package of the new trust_module underlying management trusted security component in the shell terminal; Uninstall the installed trust_module underlying management trusted security component based on the bin file compression package of the new trust_module underlying management trusted security component; Decompress the bin file compressed package of the new trust_module underlying management trusted security component, and install the new trust_module underlying management trusted security component based on the decompressed bin file of the new trust_module underlying management trusted security component; According to the configuration file or instruction carried in the bin file compressed package of the new trust_module underlying management trusted security component, the new trust_module underlying management trusted security component is configured so that the new trust_module underlying management trusted security component runs correctly and works in coordination with other components in the system.

[0101] ‌Technical solution description and beneficial effect analysis‌: ‌1. Technical solution description‌ This embodiment provides a method for quickly replacing the trust_module underlying management trusted security component that has been installed on the trusted DCS controller. This method uses the trust_module trusted security component automated deployment tool provided in the form of a self-extracting bin file compressed package to achieve the entire process of uninstalling the old component, installing and configuring the new component, and thus quickly restoring the normal function of the DCS controller. The specific steps are as follows: 1. Clarify requirements and prepare replacement environment: Clearly define and understand the functions and features of the trust_module underlying management trusted security components to be replaced, and ensure that the replacement process does not introduce incompatible or non-compliant functions. Prepare a stable replacement environment, including selecting a suitable hardware platform, installing a suitable Linux operating system version, and ensuring that all necessary dependencies and tools are installed and configured properly.

[0102] 2. Log in to the DCS controller and access the shell terminal: Log in to the DCS controller's operating system by entering the correct username and password, and ensure that you have sufficient permissions to perform the replacement operation. After a successful login, open a shell terminal session to interact with the system through the command line.

[0103] 3. Perform a quick replacement of the trust_module underlying management trusted security component: Navigate to the bin file compressed package directory containing the new trust_module underlying management trusted security component in the shell terminal. Execute the bin file compressed package, the tool will automatically uninstall the old trust_module underlying management trusted security component (if it exists), then install the new trust_module underlying management trusted security component, and configure the necessary system settings or environment variables.

[0104] ‌2. Analysis of beneficial effects‌ 1. Improve replacement efficiency: The automated deployment tool simplifies the replacement process, reduces manual intervention, and significantly improves replacement efficiency. The design of the self-extracting bin file compression package makes the replacement process more convenient, without the need for additional decompression and manual operation steps.

[0105] 2. Ensure replacement accuracy: Automated deployment tools can perform replacements according to preset steps and parameters, avoiding human errors. The tool automatically handles details such as uninstallation, installation, and configuration to ensure the correct installation of new components and the complete uninstallation of old components.

[0106] 3. Enhanced system stability: The quick replacement method can quickly restore the normal function of the DCS controller and reduce system downtime caused by component failure. New components are verified and tested to ensure their compatibility and stability, which helps to improve the stability of the overall system.

[0107] 4. Improve system security: Replacement through automated deployment tools can reduce security risks introduced by improper human operations. The installation and configuration of new components follow strict security standards, which helps to build a more secure and reliable system environment.

[0108] ‌III. Explanation of the parallel scheme‌ The trusted component division and automated deployment method of the trusted DCS controller provided in the embodiment of the present application may also adopt the following replacement method: ‌Script-based replacement method‌: In addition to providing a self-extracting bin file compressed package, a script-based replacement method can also be provided. Users can download a script file containing replacement instructions and configuration parameters, and execute the script file through the shell terminal to complete the replacement of the trust_module underlying management trusted security component. The script file can contain detailed replacement steps, dependency checks, environment variable settings, etc. to ensure the accuracy and completeness of the replacement process. Before executing the script, users can modify the parameters and instructions in the script file according to actual needs to meet specific replacement requirements. This script-based replacement method provides users with more flexibility and customizability, and is suitable for scenarios that require complex replacement logic or special configuration.

[0109] Through the description of the above parallel solutions, the connotation of the technical solution is further enriched, and the comprehensiveness and feasibility of the trusted component division and automated deployment method of the trusted DCS controller provided by the embodiment of the present application are enhanced. At the same time, it is also shown that the replacement method provided by this embodiment is not the only option, but can be flexibly adjusted and expanded according to actual needs.

[0110] like Figure 3As shown, the embodiment of the present application also provides a trusted component division and automatic deployment device 300 of a trusted DCS controller, and the trusted component division and automatic deployment device 300 of a trusted DCS controller includes: A division module 301 is used to divide the components in the trusted DCS controller into a trust_module bottom-level management trusted security component and an agent agent management communication trusted security component according to the functional characteristics and security requirements of the components in the trusted DCS controller, wherein the trust_module bottom-level management trusted security component is used for bottom-level security management functions, the agent agent management communication trusted security component is used for security control during the communication process, the trust_module bottom-level management trusted security component is correspondingly provided with a trust_module trusted security component automatic deployment tool, and the agent agent management communication trusted security component is correspondingly provided with an agent agent trusted security component automatic deployment tool; The installation module 302 is used to simultaneously install the trust_module underlying management trusted security component and the agent agent management communication trusted security component through a compressed package containing the trust_module trusted security component automatic deployment tool and the agent agent trusted security component automatic deployment tool; or, install the trust_module underlying management trusted security component through a compressed package containing the trust_module trusted security component automatic deployment tool, and install the agent agent management communication trusted security component through a compressed package containing the agent agent trusted security component automatic deployment tool.

[0111] Optionally, the installation module 302 is specifically used for: Decompress the compressed package containing the trust_module trusted security component automated deployment tool and the agent trusted security component automated deployment tool to a specified directory to obtain the trust_module trusted security component automated deployment tool and the agent trusted security component automated deployment tool; Run the trust_module trusted security component automated deployment tool, install the trust_module underlying management trusted security component, and configure the trust_module underlying management trusted security component; Run the agent agent trusted security component automated deployment tool, install the agent agent management communication trusted security component, and configure the agent agent management communication trusted security component; Start the trust_module underlying management trusted security component and the agent agent management communication trusted security component.

[0112] Optionally, the compressed package containing the trust_module trusted security component automatic deployment tool and the agent trusted security component automatic deployment tool exists in the form of a tar file compressed package.

[0113] Optionally, the trust_module trusted security component automated deployment tool exists in the form of a Linux self-extracting bin executable file.

[0114] Optionally, the agent agent trusted security component automated deployment tool adopts an automated deployment script; the automated deployment script exists in the form of a Linux shell script, and the automated deployment script contains instructions and configuration information required to deploy the agent agent management communication trusted security component.

[0115] Optionally, the configuration content of configuring the trust_module underlying management trusted security component includes: setting monitoring frequency and defining trusted status determination rules.

[0116] Optionally, the configuration content of configuring the agent management communication trusted security component includes: setting a communication protocol and defining task execution rules.

[0117] Optionally, the compressed package containing the trust_module trusted security component automated deployment tool exists in the form of a self-extracting bin file compressed package.

[0118] Optionally, the installation module 302 is specifically used for: Logging into the operating system of the trusted DCS controller; Open a shell terminal; Locate the directory storing the bin file compression package of the trust_module trusted security component automated deployment tool in the shell terminal; In the directory where the bin file compression package of the trust_module trusted security component automated deployment tool is located, execute the bin file compression package of the trust_module trusted security component automated deployment tool to start the installation process of the trust_module underlying management trusted security component, the installation process includes decompressing the compression package, copying files, and setting permissions; While or after installing the trust_module underlying management trusted security component, configure the agent agent management communication trusted security component according to the instructions or configuration files in the bin file compression package of the trust_module trusted security component automated deployment tool, so that the agent agent management communication trusted security component works in coordination with the trust_module underlying management trusted security component to achieve security control during the communication process.

[0119] Optionally, the trusted component division and automated deployment device 300 of the trusted DCS controller further includes: The replacement module is used to replace the trust_module underlying management trusted security component by the following method when the trust_module underlying management trusted security component has been installed on the trusted DCS controller: Logging into the operating system of the trusted DCS controller; Open a shell terminal; Locate the directory storing the bin file compressed package of the new trust_module underlying management trusted security component in the shell terminal; Uninstall the installed trust_module underlying management trusted security component based on the bin file compression package of the new trust_module underlying management trusted security component; Decompress the bin file compressed package of the new trust_module underlying management trusted security component, and install the new trust_module underlying management trusted security component based on the decompressed bin file of the new trust_module underlying management trusted security component; According to the configuration file or instruction carried in the bin file compressed package of the new trust_module underlying management trusted security component, the new trust_module underlying management trusted security component is configured so that the new trust_module underlying management trusted security component runs correctly and works in coordination with other components in the system.

[0120] The trusted component division and automated deployment device of the trusted DCS controller provided in the embodiment of the present application can perform the following operations: Figure 1 The various steps in the method embodiment shown can achieve the same beneficial effects, and will not be described again here to avoid repetition.

[0121] Optionally, an embodiment of the present application further provides an electronic device, including a processor, a memory, and a program or instruction stored in the memory and executable on the processor. When the program or instruction is executed by the processor, each process of the above-mentioned trusted component partitioning and automated deployment method embodiment of the trusted DCS controller is implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0122] It should be noted that the electronic devices in the embodiments of the present application include the mobile electronic devices and non-mobile electronic devices mentioned above.

[0123] The embodiment of the present application also provides a computer-readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, each process of the embodiment of the trusted component division and automated deployment method of the above-mentioned trusted DCS controller is implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0124] The readable storage medium includes a computer-readable storage medium, such as a computer read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0125] The embodiment of the present application further provides a chip, which includes a processor and a communication interface, the communication interface is coupled to the processor, and the processor is used to run a program or instruction to implement the various processes of the embodiment of the trusted component division and automated deployment method of the above-mentioned trusted DCS controller, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0126] It should be understood that the chip mentioned in the embodiments of the present application can also be called a system-level chip, a system chip, a chip system or a system-on-chip chip, etc.

[0127] The embodiments of the present disclosure have been described above, and the above description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The selection of terms used herein is intended to best explain the principles of the embodiments, practical applications, or technical improvements to the technology in the market, or to enable other persons of ordinary skill in the art to understand the embodiments disclosed herein.

Claims

1. A trusted component partitioning and automated deployment method for a trusted DCS controller, characterized in that: include: According to the functional characteristics and security requirements of the components in the trusted DCS controller, the components in the trusted DCS controller are divided into trust_module bottom-level management trusted security components and agent agent management communication trusted security components, wherein the trust_module bottom-level management trusted security components are used for bottom-level security management functions, and the agent agent management communication trusted security components are used for security control during the communication process, and the trust_module bottom-level management trusted security components are correspondingly provided with a trust_module trusted security component automation deployment tool, and the agent agent management communication trusted security components are correspondingly provided with an agent agent trusted security component automation deployment tool; The trust_module underlying management trusted security component and the agent agent management communication trusted security component are installed simultaneously through a compressed package containing the trust_module trusted security component automated deployment tool and the agent agent trusted security component automated deployment tool; or, the trust_module underlying management trusted security component is installed through a compressed package containing the trust_module trusted security component automated deployment tool, and the agent agent management communication trusted security component is installed through a compressed package containing the agent agent trusted security component automated deployment tool.

2. The trusted component division and automated deployment method of a trusted DCS controller according to claim 1, characterized in that: The trust_module underlying management trusted security component and the agent agent management communication trusted security component are installed simultaneously by using a compressed package containing the trust_module trusted security component automatic deployment tool and the agent agent trusted security component automatic deployment tool, including: Decompress the compressed package containing the trust_module trusted security component automated deployment tool and the agent trusted security component automated deployment tool to a specified directory to obtain the trust_module trusted security component automated deployment tool and the agent trusted security component automated deployment tool; Run the trust_module trusted security component automated deployment tool, install the trust_module underlying management trusted security component, and configure the trust_module underlying management trusted security component; Run the agent agent trusted security component automated deployment tool, install the agent agent management communication trusted security component, and configure the agent agent management communication trusted security component; Start the trust_module underlying management trusted security component and the agent agent management communication trusted security component.

3. The trusted component division and automated deployment method of a trusted DCS controller according to claim 2, characterized in that: The compressed package containing the trust_module trusted security component automatic deployment tool and the agent trusted security component automatic deployment tool exists in the form of a tar file compressed package.

4. The trusted component division and automated deployment method of a trusted DCS controller according to claim 2, characterized in that: The trust_module trusted security component automated deployment tool exists in the form of a Linux self-extracting bin executable file.

5. The trusted component division and automated deployment method of a trusted DCS controller according to claim 2, characterized in that: The agent agent trusted security component automated deployment tool adopts an automated deployment script; the automated deployment script exists in the form of a Linux shell script, and the automated deployment script contains instructions and configuration information required to deploy the agent agent management communication trusted security component.

6. The trusted component division and automated deployment method of a trusted DCS controller according to claim 2, characterized in that: The configuration content of configuring the trust_module bottom-level management trusted security component includes: setting monitoring frequency and defining trusted status determination rules.

7. The trusted component division and automated deployment method of a trusted DCS controller according to claim 2, characterized in that: The configuration content of configuring the agent management communication trusted security component includes: setting the communication protocol and defining the task execution rules.

8. The trusted component division and automated deployment method of a trusted DCS controller according to claim 1, characterized in that: The compressed package containing the trust_module trusted security component automated deployment tool exists in the form of a self-extracting bin file compressed package.

9. The method for dividing and automatically deploying trusted components of a trusted DCS controller according to claim 8, characterized in that: The step of installing the trust_module underlying management trusted security component through a compressed package containing the trust_module trusted security component automated deployment tool, and configuring the agent agent management communication trusted security component, includes: Logging into the operating system of the trusted DCS controller; Open a shell terminal; Locate the directory storing the bin file compression package of the trust_module trusted security component automated deployment tool in the shell terminal; In the directory where the bin file compression package of the trust_module trusted security component automated deployment tool is located, execute the bin file compression package of the trust_module trusted security component automated deployment tool to start the installation process of the trust_module underlying management trusted security component, the installation process includes decompressing the compression package, copying files, and setting permissions; While or after installing the trust_module underlying management trusted security component, configure the agent agent management communication trusted security component according to the instructions or configuration files in the bin file compression package of the trust_module trusted security component automated deployment tool, so that the agent agent management communication trusted security component works in coordination with the trust_module underlying management trusted security component to achieve security control during the communication process.

10. The trusted component division and automated deployment method of a trusted DCS controller according to claim 8, characterized in that: In the case where the trust_module underlying management trusted security component has been installed on the trusted DCS controller, the following method is used to replace the trust_module underlying management trusted security component: Logging into the operating system of the trusted DCS controller; Open a shell terminal; Locate the directory storing the bin file compressed package of the new trust_module underlying management trusted security component in the shell terminal; Uninstall the installed trust_module underlying management trusted security component based on the bin file compression package of the new trust_module underlying management trusted security component; Decompress the bin file compressed package of the new trust_module underlying management trusted security component, and install the new trust_module underlying management trusted security component based on the decompressed bin file of the new trust_module underlying management trusted security component; According to the configuration file or instruction carried in the bin file compressed package of the new trust_module underlying management trusted security component, the new trust_module underlying management trusted security component is configured so that the new trust_module underlying management trusted security component runs correctly and works in coordination with other components in the system.

Images