Multi-step multi-line ship lock management and control method and system based on encryption application

Abstract

The invention relates to a multi-step multi-line ship lock management and control method and system based on encryption application, and the method comprises the steps: carrying out the encryption transmission of communication data through a distributed fault-tolerant method, correcting the data transmitted by a centralized management and control center through a data channel between multi-step ship locks, and completing the preliminary verification of the data; and performing secondary confirmation of data by using a special physical channel among the multi-line ship locks so as to ensure the correctness of instruction data issued by the centralized management and control system, and finally performing distributed data response by ship lock response receiving the data of the centralized management and control system so as to complete closed loop of data transmission. Wherein when the centralized management and control center issues a data instruction, distributed encryption transmission is carried out on data, and the controlled ship lock carries out double check on the data. Compared with the prior art, the method has the advantage of high security, solves the problem that a controlled point cannot timely break away from malicious node control, and prevents malicious consequences caused by tampering and invasion of instruction information of a centralized management and control center.

Description

Technical Field

[0001] The present invention relates to the field of communication security control between a cascade ship lock and a centralized control center, and in particular to a multi-step multi-line ship lock control method and system based on encryption application. Background Art

[0002] There are generally three ways of communication between the cascade ship locks and the centralized control center: dedicated line communication, public network communication, and information service provider network dedicated line communication.

[0003] To realize the centralized control of ship locks in inland river basins, it is necessary to ensure the information communication security between the ship locks and the centralized control center. Since the cascade ship locks in the river basin are generally far away from the centralized control center, and the distance between the distant ship locks and the centralized control center is as long as hundreds of kilometers, it is expensive to build a dedicated data transmission channel. Although public network communication is cheap and easy to use, its security is relatively low. Considering all factors, the centralized control system of ship locks usually uses the network dedicated line of the communication service provider to realize the communication between the ship locks and the centralized control center.

[0004] The use of dedicated network lines of communication service providers for communication between ship locks and centralized control centers is widely applicable in China. Although the use of dedicated network lines of information service providers has achieved the effect of centralized control, its disadvantages are: although the physical communication link in the centralized control center of the ship lock uses a dedicated line, it can ensure isolation from other data flows, but the physical communication link outside the centralized control center uses the public physical channel of the communication service provider, and only uses VLAN and other technologies in the router to achieve data segmentation, and does not achieve complete data dedicated line on the physical channel. Since data is transmitted through the public physical channel of the communication service provider, there are uncontrollable risks such as external intrusion and data leakage.

[0005] At present, there are two methods to solve the transmission risk of data transmitted through the dedicated line of the information service provider network: one method is to install an encryption and decryption device between the centralized control center and the ship lock to realize the encrypted transmission of data. Although this method has achieved a good display effect, its disadvantages are: if the data of the centralized control center is stolen, there is a risk that all communication data will be reversely decrypted, and there is a risk that the control instructions of the centralized control center will be stolen and modified; one method is to add a data security module to the on-site control system of the ship lock, so that data communication can be realized using an asymmetric key method to ensure the security of data communication. The disadvantage is that a data security module needs to be added on site, which is expensive. At the same time, due to the diversity of on-site PLC control systems, the compatibility requirements of the data security module are high.

[0006] No matter which method is used, it is closely related to data encryption. Therefore, a data encryption transmission method with high security and strong compatibility is needed to control multi-level and multi-line ship locks. Summary of the invention

[0007] The purpose of the present invention is to provide a multi-step and multi-line ship lock control method and system based on encryption application.

[0008] The purpose of the present invention can be achieved by the following technical solutions:

[0009] A multi-step multi-line ship lock control method based on encryption application, which uses a distributed fault-tolerant method to encrypt and transmit communication data, corrects the data issued by a centralized control center through data channels between multi-step ship locks, completes the initial verification of the data, and uses a dedicated physical channel between multi-line ship locks to perform secondary confirmation of the data to ensure the correctness of the instruction data issued by the centralized control system. Finally, the ship locks that receive the data from the centralized control system respond with distributed data responses to complete the closed loop of data transmission. When the centralized control center issues a data instruction, the data is distributedly encrypted and transmitted, and the controlled ship locks perform double verification of the data.

[0010] The data transmission process of the method comprises the following steps:

[0011] Step 1) Initialize the operation flow steps of the cascade multi-line ship lock, realize the mutual storage of operation data between the multi-line ship locks, generate the instruction encryption verification matrix, and realize the safe interaction of mutual verification and mutual locking of control instructions between the multi-line ship locks;

[0012] Step 2) The centralized control center broadcasts the control pre-instructions to all slave nodes;

[0013] Step 3) After receiving the pre-instruction and verifying that it is correct, the multi-line ship lock of the cascade where the controlled ship lock is located and the adjacent cascade ship locks of all the controlled ship locks send a response message to the centralized control center;

[0014] Step 4) The centralized control center determines whether the response message has timed out. If so, it returns to step 3). If the timeout exceeds the preset number of times, no formal instruction is issued, and the control of the controlled ship lock is transferred to the local area. If not, it executes step 5);

[0015] Step 5) The centralized control center determines an adjacent cascade ship lock of the controlled ship lock as a data verification point according to the response message of the secondary node;

[0016] Step 6) The centralized control center sends control instructions to the controlled lock step and its adjacent lock step data verification points;

[0017] Step 7) After receiving the control instruction, the controlled ship lock sends a verification request to the data verification point of the adjacent cascade ship lock and the ship lock of the same cascade;

[0018] Step 8) The data checkpoints of the adjacent cascade ship locks and the ship locks of the same cascade ship locks send check information to the controlled ship locks, and the controlled ship locks check the correctness of the received check information. If the check is correct, step 9) is executed; if the check is incorrect, the process returns to step 2) and the centralized control center is identified as a low-credibility node. If the number of consecutive identifications of the centralized control center as a low-credibility point in the same time period exceeds a preset value, the control of the controlled ship lock is transferred to the local site;

[0019] Step 9) The correctness of the control instructions is checked between the controlled ship lock and the cascade ship lock. The cascade ship lock checks the instructions to be output by the controlled ship lock according to the instruction encryption check matrix to check the security of the instructions and the correctness of the control process. If the verification is correct, step 10) is executed; if the verification is incorrect, the controlled ship lock does not execute the instruction and step 11) is executed;

[0020] Step 10) The controlled ship lock outputs control information according to the control instruction of the centralized control center;

[0021] Step 11) The controlled ship lock sends the instruction execution status to the centralized control center and all the sub-nodes participating in the process. The instruction execution status is to execute or not execute the instruction. If the control instruction is executed, the control chain point of the instruction encryption inspection matrix is ​​updated at the same level ship lock.

[0022] In the step 1), the cascade multi-line ship locks generate a command encryption check matrix according to the ship lock operation control process and interlocking information, so as to privately check the correctness of the command through the internal communication line.

[0023] The method for generating the instruction encryption check matrix is:

[0024] Initialize and generate a main locking condition check matrix of a controlled ship lock and a safety condition check matrix of another ship lock at the same level, wherein the main locking condition check matrix of the controlled ship lock and the safety condition check matrix of another ship lock at the same level are fixed data and the data are not disclosed to the public;

[0025] Based on the on-site clock device, a first data matrix and a second data matrix are randomly generated, wherein the first data matrix has the same size as the main locking condition check matrix of the controlled ship lock, and the second data matrix has the same size as the safety condition check matrix of another ship lock at the same level;

[0026] The first data matrix is ​​multiplied by the main locking condition check matrix of the controlled lock to obtain the command encryption check matrix of the controlled lock; the second data matrix is ​​multiplied by the safety condition check matrix of another lock of the same level to obtain the command encryption check matrix of another lock of the same level.

[0027] The first element of each row of the main locking condition check matrix of the controlled lock represents different operating states of the lock operation, and the elements of each row except the first element represent the operating locking conditions corresponding to the operating state of the first element. Under the operating state corresponding to the first element of the row, when all the operating locking conditions of the row are met, the main locking condition check matrix of the controlled lock opens the execution operation instruction exit.

[0028] The first element of each row of the safety condition check matrix of another ship lock at the same level represents different operating states of the ship lock operation, and the elements of each row except the first element represent operable operations, interlocks and safety conditions corresponding to the operating state of the first element. Under the operating state corresponding to the first element of the row, when all operable operations, interlocks and safety conditions of the row are met, the safety condition check matrix of another ship lock at the same level sends an execution permission command to the main locking condition check matrix of the controlled ship lock.

[0029] In the step 5), a cascade ship lock adjacent to the controlled ship lock is randomly determined as a data verification point.

[0030] In the step 9), the same-level ship lock encrypts and checks the correctness of the instruction according to the instruction encryption check matrix which is not disclosed to the outside, and uses the internal dedicated line network to transmit the verification information without relying on external communication.

[0031] After the control of the controlled ship lock is transferred to the local site, it will not accept instructions from the centralized control center and will be reintegrated into the centralized control system after the cause of the fault is manually found.

[0032] A multi-step and multi-line ship lock control system based on encryption application is used to implement the method described above.

[0033] Compared with the prior art, the present invention has the following beneficial effects:

[0034] (1) Since the relationship between the ship lock and the centralized control center is a relationship between being controlled and controlling, the present invention introduces a centralized control center reputation system and performs specific processing on centralized control centers with high reputation and centralized control centers with low reputation, thereby solving the problem that the controlled points cannot escape the control of malicious nodes in time and preventing the malicious consequences caused by the tampering and intrusion of the command information of the centralized control center.

[0035] (2) The data checkpoints determined by the present invention are random. The correctness of the data not only depends on the encryption and decryption facilities and algorithms of the centralized control center and the controlled nodes, but also the data will be distributedly checked to reach a consensus on the correctness of the instructions.

[0036] (3) Since the multi-line ship locks of the same level can each collect the control process status of the other party, they can each generate an encrypted inspection matrix of instructions that are not open to the public, and perform safety, interlocking, and interlocking safety checks on the instructions to be executed by the other party. The inspection results of the instructions are transmitted through the private network communication between the ship locks of the same level. This can ensure that even if the controlled ship lock receives tampered data instructions, the execution of the tampered instructions can still be carried out in accordance with the safety of the site, and no damage will be caused to the ships passing through the lock and the lock facilities.

[0037] (4) The data verification and data encryption between nodes of the present invention adopt mature algorithms with high reliability. The command security verification between the same-level ship locks adopts a private algorithm to verify the final correctness of the control command, which can effectively avoid the malicious consequences caused by human misoperation and tampering of the control command.

[0038] (5) The present invention does not require additional hardware at the controlled end, and uses a private dedicated communication channel between multi-line ship locks to verify the correctness of instructions, and has high compatibility. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] Figure 1 is a flow chart of the method of the present invention;

[0040] Figure 2 A flowchart of issuing instructions from the centralized control center of the present invention;

[0041] Figure 3 It is a schematic diagram of checking the correctness of instructions between multi-line ship locks of the same level according to the present invention. DETAILED DESCRIPTION

[0042] The present invention is described in detail below in conjunction with the accompanying drawings and specific embodiments. This embodiment is implemented based on the technical solution of the present invention, and provides a detailed implementation method and specific operation process, but the protection scope of the present invention is not limited to the following embodiments.

[0043] The present embodiment provides a multi-step multi-line ship lock control method based on encryption application, which uses a distributed fault-tolerant method to encrypt and transmit communication data, corrects the data issued by the centralized control center through the data channel between the multi-step ship locks, completes the preliminary verification of the data, and uses the dedicated physical channel between the multi-line ship locks to perform secondary confirmation of the data to ensure the correctness of the instruction data issued by the centralized control system, and finally the ship lock response that receives the data from the centralized control system performs a distributed data response to complete the closed loop of data transmission; wherein, when the centralized control center issues a data instruction, the data is distributedly encrypted and transmitted, and the controlled ship lock performs a double verification of the data, without adding hardware at the controlled end, and uses the private dedicated communication channel between the multi-line ship locks to verify the correctness of the instruction, which has high security.

[0044] Specifically, Figure 1 As shown, the data transmission process of the method includes the following steps:

[0045] Step 1) Initialize the operation flow steps of the cascade multi-line ship lock, realize the mutual storage of operation data between the multi-line ship locks, generate the instruction encryption verification matrix, and realize the safe interaction of mutual verification and mutual locking of control instructions between the multi-line ship locks;

[0046] Step 2) The centralized control center broadcasts the control pre-instructions to all slave nodes;

[0047] Step 3) After receiving the pre-instruction and verifying that it is correct, the multi-line ship lock of the cascade where the controlled ship lock is located and the adjacent cascade ship locks of all the controlled ship locks send a response message to the centralized control center;

[0048] Step 4) The centralized control center determines whether the response message has timed out. If so, it returns to step 3). If it times out three times, no formal instruction is issued, and the control of the controlled ship lock is transferred to the local area. If it has not timed out, it executes step 5);

[0049] Step 5) The centralized control center randomly determines an adjacent cascade ship lock of the controlled ship lock as a data verification point according to the response message of the secondary node;

[0050] Step 6) The centralized control center sends control instructions to the controlled lock step and its adjacent lock step data verification points;

[0051] Step 7) After receiving the control instruction, the controlled ship lock sends a verification request to the data verification point of the adjacent cascade ship lock and the ship lock of the same cascade;

[0052] Step 8) The data checkpoints of the adjacent cascade ship locks and the ship locks of the same cascade ship locks send check information to the controlled ship locks, and the controlled ship locks check the correctness of the received check information. If the check is correct, step 9) is executed; if the check is incorrect, the process returns to step 2) and the centralized control center is identified as a low-reputation node once. If the centralized control center is identified as a low-reputation node three times in a row in the same time period, the control right of the controlled ship lock is transferred to the local area;

[0053] Step 9) The correctness of the control instructions is checked between the controlled ship lock and the cascade ship lock. The cascade ship lock checks the instructions to be output by the controlled ship lock according to the instruction encryption check matrix to check the security of the instructions and the correctness of the control process. If the verification is correct, step 10) is executed; if the verification is incorrect, the controlled ship lock does not execute the instruction and step 11) is executed;

[0054] Step 10) The controlled ship lock outputs control information according to the control instruction of the centralized control center;

[0055] Step 11) The controlled ship lock sends the instruction execution status to the centralized control center and all the sub-nodes participating in the process. The instruction execution status is to execute or not execute the instruction. If the control instruction is executed, the control chain point of the instruction encryption inspection matrix is ​​updated at the same level ship lock.

[0056] In step 1), the cascade multi-line ship locks generate a command encryption verification matrix based on the ship lock operation control process and interlocking information to privately verify the correctness of the command through an internal communication line.

[0057] In step 5), the data checkpoints determined are random to ensure the security of communication verification.

[0058] In step 7), the controlled ship lock will synchronously request other nodes to perform data verification, which is used to synchronously check the correctness of the instructions.

[0059] In step 8), if the controlled ship lock determines that the centralized control center is a low-credibility point in the same time period, the control right is directly transferred to the local area, and the instructions of the centralized control center are not accepted, so as to ensure the high credibility of the main node participating in the control process.

[0060] In step 9), the same-level ship lock encrypts and verifies the correctness of the instruction according to its own instruction encryption verification matrix which is not disclosed to the outside world, and uses the internal dedicated network to transmit the verification information without relying on external communication, thus ensuring the security of the final instruction output.

[0061] After the control of the controlled ship lock is transferred to the local site, it will not accept instructions from the centralized control center and will be reintegrated into the centralized control system after the cause of the fault is manually found.

[0062] The above process steps are applicable to multi-line and multi-level locks in the basin, including that all locks in the basin participate in the verification of control instructions and the execution of private encryption matrix verification for locks of the same level. Distributed instruction verification and double instruction verification are used to prevent data from being invaded and tampered with during transmission over the public network. At the same time, measures for abnormal transfer of control rights are implemented. When an abnormal instruction is discovered at the first time, the controlled lock will be removed from the control of the control center and transferred to local control.

[0063] Figure 2 This is a flowchart of the centralized control center issuing instructions of the present invention, which completes the process of the centralized control center issuing control instructions to the controlled ship lock. Figure 2 The following steps of the instruction issuing process are described in detail:

[0064] exist Figure 2 In the figure, C represents the centralized control center, 1 represents the controlled lock, 2 represents another lock of the same level as the controlled lock, 3 represents the cascade lock adjacent to the controlled lock, and 4 represents the cascade lock adjacent to another controlled lock.

[0065] In the initialization step, 1 and 2 generate the instruction encryption verification matrix and confirm the matrix generation through internal communication between the two parties; then the centralized control center executes the pre-instruction step;

[0066] In the pre-instruction step, C sends pre-control instructions to 1, 2, 3, and 4, receives feedback information from nodes 1, 2, 3, and 4, and randomly selects 3 points as data check points for 1, and executes the formal instruction issuance step;

[0067] In the formal instruction issuing step, C issues a formal execution instruction to 1, 2, and 3. After 1 receives the formal execution instruction, it executes the formal instruction verification step;

[0068] In the formal instruction verification step, 1 sends verification information to 2 and 3, and 2 and 3 feedback the verification results. If the instruction verification is correct, the same-level ship lock verification is executed; if the instruction verification is incorrect, 1 sends a re-instruction message to C, and records C as a low-credibility node. If C is recorded as a low-credibility node three times in the same time period, the control authority of 1 is switched to the local area, and no longer receives instructions from C. It is included in the centralized control scope after manual confirmation of troubleshooting;

[0069] In the same-level verification, 1 and 2 send control instructions to their respective instruction encryption verification matrices, and the correctness and safety of the instructions are verified through the private communication network between the respective instruction encryption verification matrices. The instruction encryption verification matrix of the controlled ship lock determines whether to execute the control instruction and feeds back the result to 1, and then the system executes the instruction response step;

[0070] In the instruction response step, 1 sends a message to C and 2 asking whether the instruction should be executed, and the process ends.

[0071] like Figure 3 As shown, the present invention utilizes the characteristics of the private communication network between the locks of the same level and the characteristics of the lock operation step flow to generate an instruction encryption check matrix for each lock to check the instructions to be executed to ensure whether the instructions are correct.

[0072] The ship lock operation can only perform two operations normally in a certain state. The ship lock operation usually has only 8 cyclic operations. This special rule can be used to generate a control check matrix.

[0073] During initialization, the main locking condition check matrix F() of the controlled ship lock and the safety condition check matrix K() of another ship lock at the same level are generated. The F() and K() matrices are fixed data and will be solidified in the field control device during system initialization. The matrix data will not be published externally:

[0074]

[0075]

[0076] where f 11 to f 81 Represents the 8 operating states of the lock operation. i2 to f im Represents the lock at f i1 The operation locking conditions under the state, such as prohibiting valve operation, prohibiting non-continuous operation, prohibiting simultaneous operation of the same gate valve, etc., are i1 In this state, only f i2 to f im Only when all conditions are met will F() open the exit for executing the operation instruction.

[0077] k 11 to k 81 Represents the 8 operating states of the lock operation. i2 to k im Represents the lock at k i1 The operational, interlocking and safety conditions in the state, such as operable equipment, prohibition of simultaneous filling and discharge of water in the common pilot channel lock, prohibition of rapid filling and discharge of water in the dry season, activation and detection of normal anti-clip system, activation and detection of normal ship crossing system, activation and detection of normal anti-collision device system, etc. i1 In this state, only k i2 to k im When all conditions are met, K() will send an execution permission command to F(), and F() will formally output the output instruction to the controlled device.

[0078] To ensure the security of data transmission, the on-site clock device will randomly generate data matrices S1() and S2(). The S1() matrix is ​​the same size as the F() matrix, and the S2() matrix is ​​the same size as the K() matrix. The values ​​in the S1() and S2() matrices are all randomly generated positive integer data. The F1() encryption matrix is ​​obtained by multiplying the S1() and F() matrices, and the K1() encryption matrix is ​​obtained by multiplying the S2() and K() matrices to ensure the security of matrix data communication between the two parties. The S1() and S2() matrix data are sent to the two locks by the on-site clock device through the internal network.

[0079] After the control instruction is verified to be correct, the controlled lock sends the instruction to the instruction encryption verification matrix F1() of the lock. After receiving the control instruction, another lock of the same level sends the instruction to the instruction encryption verification matrix K1() of the lock. The F1() matrix verifies that the instruction meets the locking condition and opens the instruction exit. After the K1() matrix verifies that the instruction meets the safety condition, it sends the execution permission command to F1(). After the F1() matrix obtains the operating conditions of K1() after opening the instruction exit, it will formally send the command to the controlled device. In this way, even if the data of the controlled lock is tampered with, the security of the output instruction can still be guaranteed through the mutual verification of data between the locks of the same level.

[0080] This embodiment also provides a multi-step and multi-line ship lock control system based on encryption application, which is used to implement the method described above.

[0081] The preferred specific embodiments of the present invention are described in detail above. It should be understood that a person skilled in the art can make many modifications and changes based on the concept of the present invention without creative work. Therefore, any technical solution that can be obtained by a person skilled in the art through logical analysis, reasoning, or limited experiments based on the concept of the present invention on the basis of the prior art should be within the scope of protection determined by the claims.

Claims

1. A multi-level multi-line ship lock control method based on encryption application, characterized in that: This method uses a distributed fault-tolerant method to encrypt and transmit communication data, corrects the data sent by the centralized control center through the data channel between the multi-step ship locks, completes the preliminary verification of the data, and uses the dedicated physical channel between the multi-line ship locks to perform secondary confirmation of the data to ensure the correctness of the instruction data sent by the centralized control system. Finally, the ship locks that receive the data from the centralized control system respond with distributed data responses to complete the closed loop of data transmission. Among them, when the centralized control center sends data instructions, the data is distributed and encrypted for transmission, and the controlled ship locks perform double verification of the data.

2. A multi-level multi-line ship lock control method based on encryption application according to claim 1, characterized in that: The data transmission process of the method comprises the following steps: Step 1) Initialize the operation flow steps of the cascade multi-line ship lock, realize the mutual storage of operation data between the multi-line ship locks, generate the instruction encryption verification matrix, and realize the safe interaction of mutual verification and mutual locking of control instructions between the multi-line ship locks; Step 2) The centralized control center broadcasts the control pre-instructions to all slave nodes; Step 3) After receiving the pre-instruction and verifying that it is correct, the multi-line ship lock of the cascade where the controlled ship lock is located and the adjacent cascade ship locks of all the controlled ship locks send a response message to the centralized control center; Step 4) The centralized control center determines whether the response message has timed out. If so, it returns to step 3). If the timeout exceeds the preset number of times, no formal instruction is issued, and the control of the controlled ship lock is transferred to the local area. If not, it executes step 5); Step 5) The centralized control center determines an adjacent cascade ship lock of the controlled ship lock as a data verification point according to the response message of the secondary node; Step 6) The centralized control center sends control instructions to the controlled lock step and its adjacent lock step data verification points; Step 7) After receiving the control instruction, the controlled ship lock sends a verification request to the data verification point of the adjacent cascade ship lock and the ship lock of the same cascade; Step 8) The data checkpoints of the adjacent cascade ship locks and the ship locks of the same cascade ship locks send check information to the controlled ship locks, and the controlled ship locks check the correctness of the received check information. If the check is correct, step 9) is executed; if the check is incorrect, the process returns to step 2) and the centralized control center is identified as a low-credibility node. If the number of consecutive identifications of the centralized control center as a low-credibility point in the same time period exceeds a preset value, the control of the controlled ship lock is transferred to the local site; Step 9) The correctness of the control instructions is checked between the controlled ship lock and the cascade ship lock. The cascade ship lock checks the instructions to be output by the controlled ship lock according to the instruction encryption check matrix to check the security of the instructions and the correctness of the control process. If the verification is correct, step 10) is executed; if the verification is incorrect, the controlled ship lock does not execute the instruction and step 11) is executed; Step 10) The controlled ship lock outputs control information according to the control instruction of the centralized control center; Step 11) The controlled ship lock sends the instruction execution status to the centralized control center and all the sub-nodes participating in the process. The instruction execution status is to execute or not execute the instruction. If the control instruction is executed, the control chain point of the instruction encryption inspection matrix is ​​updated at the same level ship lock.

3. A multi-level multi-line ship lock control method based on encryption application according to claim 2, characterized in that: In the step 1), the cascade multi-line ship locks generate a command encryption check matrix according to the ship lock operation control process and interlocking information, so as to privately check the correctness of the command through the internal communication line.

4. A multi-level multi-line ship lock control method based on encryption application according to claim 2, characterized in that: The method for generating the instruction encryption check matrix is: Initialize and generate a main locking condition check matrix of a controlled ship lock and a safety condition check matrix of another ship lock at the same level, wherein the main locking condition check matrix of the controlled ship lock and the safety condition check matrix of another ship lock at the same level are fixed data and the data are not disclosed to the public; Based on the on-site clock device, a first data matrix and a second data matrix are randomly generated, wherein the first data matrix has the same size as the main locking condition check matrix of the controlled ship lock, and the second data matrix has the same size as the safety condition check matrix of another ship lock at the same level; The first data matrix is ​​multiplied by the main locking condition check matrix of the controlled lock to obtain the command encryption check matrix of the controlled lock; the second data matrix is ​​multiplied by the safety condition check matrix of another lock of the same level to obtain the command encryption check matrix of another lock of the same level.

5. A multi-level multi-line ship lock control method based on encryption application according to claim 4, characterized in that: The first element of each row of the main locking condition check matrix of the controlled lock represents different operating states of the lock operation, and the elements of each row except the first element represent the operating locking conditions corresponding to the operating state of the first element. Under the operating state corresponding to the first element of the row, when all the operating locking conditions of the row are met, the main locking condition check matrix of the controlled lock opens the execution operation instruction exit.

6. A multi-level multi-line ship lock control method based on encryption application according to claim 4, characterized in that: The first element of each row of the safety condition check matrix of another ship lock at the same level represents different operating states of the ship lock operation, and the elements of each row except the first element represent operable operations, interlocks and safety conditions corresponding to the operating state of the first element. Under the operating state corresponding to the first element of the row, when all operable operations, interlocks and safety conditions of the row are met, the safety condition check matrix of another ship lock at the same level sends an execution permission command to the main locking condition check matrix of the controlled ship lock.

7. A multi-level multi-line ship lock control method based on encryption application according to claim 2, characterized in that: In the step 5), a cascade ship lock adjacent to the controlled ship lock is randomly determined as a data verification point.

8. A multi-level multi-line ship lock control method based on encryption application according to claim 2, characterized in that: In the step 9), the same-level ship lock encrypts and checks the correctness of the instruction according to the instruction encryption check matrix which is not disclosed to the outside, and uses the internal dedicated line network to transmit the verification information without relying on external communication.

9. A multi-level multi-line ship lock control method based on encryption application according to claim 2, characterized in that: After the control of the controlled ship lock is transferred to the local site, it will not accept instructions from the centralized control center and will be reintegrated into the centralized control system after the cause of the fault is manually found.

10. A multi-level multi-line ship lock control system based on encryption application, characterized in that: Used to implement the method according to any one of claims 1-9.

Images