DCS controller trusted measurement consistency method and system

Abstract

The invention relates to the technical field of thermal power plant intelligent control, in particular to a DCS controller trusted measurement consistency method and system, and the method comprises the steps: enabling a DCS controller to push the state of the DCS controller to a DCS upper computer background program and a DCS lower computer IO card in real time; the DCS upper computer background program and the DCS lower computer IO card sense the state of the DCS controller in real time; when the state of the DCS controller is changed from a trusted state to a non-trusted state, communication between the DCS controller and other nodes in the DCS is interrupted through a background program of the DCS upper computer, and an alarm is given to a user; the IO card of the DCS lower computer cuts off a path of a control signal and stops interacting with other data; and after the DCS controller is recovered from the non-trusted state to the trusted state, the background program of the DCS upper computer recovers the trusted state of the DCS controller, and the background program of the DCS upper computer and the IO card of the DCS lower computer recover all data interaction with the DCS controller. According to the invention, the accuracy of real-time verification and perception of the credible state of the DCS controller is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of intelligent control of thermal power plants, and in particular to a DCS controller trustworthiness metric consistency method and system. Background Art

[0002] With the increasing demand for energy, the scale of thermal power plants is also gradually expanding. Among them, the role of control system automation in thermal power plants is becoming increasingly important. Control system automation improves the production efficiency of electric energy and effectively controls costs. At the same time, control system automation plays a very significant role in maintaining the safety and stability of thermal power plant operations. At present, DCS (Distributed Control System) controllers are the most commonly used automation control systems in thermal power plants. The system is mainly composed of multiple computers that control multiple control loops in the production process. It is an automation control system that can centrally obtain data, centrally manage and centrally control. Advanced communication technology is used to achieve accurate and reliable information exchange and real-time sharing, providing scientific guidance for the operation of coal-fired units.

[0003] Most DCS systems are designed to meet real-time requirements, and the basic functions of the system are severely cut. Security is mostly not considered during design, resulting in weak security protection capabilities during actual operation. In addition, based on the requirements of continuous production, real-time updates of systems and software are difficult. Traditional anti-virus and detection methods such as patching are difficult to ensure long-term safe operation of the system. As a key device in the DCS core layer, the DCS controller is a key research object for DCS trust enhancement. Therefore, how to ensure the real-time update of the DCS controller and real-time perception of the trusted state has become an urgent problem to be solved. Summary of the invention

[0004] The invention provides a DCS controller trust metric consistency method and system, which are used to solve the existing problems.

[0005] The purpose of the present invention can be achieved through the following technical solutions: A first aspect of the present invention is to provide a DCS controller trusted metric consistency method, comprising: The DCS controller pushes its own status to the DCS host computer background program in real time, and the DCS controller pushes its own status to the DCS lower computer IO card in real time; The DCS host computer background program senses the status of the DCS controller in real time. When the status of the DCS controller changes from a trusted state to an untrusted state, it first determines whether the DCS controller needs to switch between the primary and standby states based on the status of the DCS controller, and then interrupts the communication between the DCS controller and other nodes in the DCS through the DCS host computer background program and issues an alarm to the user. The DCS lower computer IO card senses the status of the DCS controller in real time. When the status of the DCS controller changes from a trusted state to an untrusted state, the DCS lower computer IO card cuts off the control signal path and stops interacting with the DCS controller for other data except for the trusted state notification. When the DCS controller is restored from an untrusted state to a trusted state, the DCS host computer background program restores the trusted state of the DCS controller, and the DCS host computer background program and the DCS slave computer IO card resume all data interactions with the DCS controller.

[0006] Furthermore, the DCS controller pushes its own status to the DCS host computer background program in real time, including: The DCS controller uses Ethernet message communication to push its own status to the DCS host computer background program in real time.

[0007] Furthermore, the DCS controller pushes its own status to the DCS lower computer IO card in real time, including: The DCS controller uses a private bus protocol, a universal bus protocol or an Ethernet message to communicate and push its own status to the DCS lower computer IO card in real time.

[0008] Furthermore, the specific process of the DCS controller pushing its own status to the DCS host computer background program in real time is: The DCS controller obtains the trusted state of the DCS controller in each scanning cycle from its own trusted components; determines the trusted state of the DCS controller in the current scanning cycle; If the DCS controller is in a trusted state in the current scan cycle, then check whether the DCS controller is trusted in the previous scan cycle. If the previous scan cycle is in a trusted state, push it to the DCS host computer background program through a trusted state message, and continue to obtain the state of the DCS controller in the next scan cycle after completion; if the previous scan cycle is in an untrusted state, restore the DCS controller to a trusted state, generate fault recovery alarm information, and push it to the DCS host computer background program through a trusted state message, and continue to obtain the state of the DCS controller in the next scan cycle after completion; If the DCS controller is in an untrusted state in the current scanning cycle, then check whether the DCS controller is trustworthy in the previous scanning cycle. If it is in a trustworthy state in the previous scanning cycle, the DCS controller has a trustworthy state failure, generates a fault alarm message and sends it to the DCS host computer background program through a trustworthy state message. After completion, continue to obtain the trustworthy state of the DCS controller in the next scanning cycle; if the DCS controller is in an untrustworthy state in the previous scanning cycle, send a master-slave switching message to the DCS controller to cut off the business data message interaction with the DCS controller.

[0009] Furthermore, the specific process of the DCS controller pushing its own status to the DCS lower computer IO card in real time is: The DCS controller obtains the trusted state of the DCS controller in the current scan cycle from its own trusted components; If the trusted state of the DCS controller in the current scanning cycle is normal, the DCS controller and the DCS lower computer IO card will normally exchange data, and push the trusted state message to the DCS lower computer IO card. After completion, continue to obtain the trusted state of the DCS controller in the next scanning cycle; If the trusted state of the DCS controller in the current scanning cycle is abnormal, the DCS controller stops interacting with the DCS lower computer IO card for other data except the trusted state notification, and pushes the trusted state message to the DCS lower computer IO card. After completion, it continues to obtain the trusted state of the DCS controller in the next scanning cycle.

[0010] Further, judging whether the DCS controller needs to perform active / standby switching according to the state of the DCS controller includes: The DCS host computer background program determines the active and standby status of the DCS controller; If the DCS controller in the untrusted state is the master controller, the DCS host computer background program sends a master-slave switch message to notify the DCS controller to perform the master-slave switch; If the DCS controller in the untrusted state is a standby controller, the DCS host computer background program changes the trusted state of the DCS controller to the untrusted state, and there is no need to switch, and directly proceed to the next step.

[0011] Furthermore, the DCS lower computer IO card resumes all data interactions with the DCS controller, including: Send the data of IO card of DCS lower computer back to DCS controller or receive the output signal of IO card issued by DCS controller.

[0012] A second aspect of the present invention is to provide a DCS controller trusted metric consistency system, comprising: Trusted status real-time push module, used by the DCS controller to push its own status to the DCS host computer background program and DCS slave computer IO card in real time; The DCS host computer background program real-time perception module is used for the DCS host computer background program to perceive the status of the DCS controller in real time. When the status of the DCS controller changes from a trusted state to an untrusted state, the DCS host computer background program interrupts the communication between the DCS controller and other nodes in the DCS and sends an alarm to the user; The DCS lower computer IO card real-time perception module is used for the DCS lower computer IO card to perceive the state of the DCS controller in real time. When the state of the DCS controller changes from a trusted state to an untrusted state, the DCS lower computer IO card cuts off the control signal path and stops other data interaction with the DCS controller except for the trusted state notification; The trusted state recovery module is used for the DCS host computer background program to restore the trusted state of the DCS controller after the DCS controller is restored from an untrusted state to a trusted state, and the DCS host computer background program and the DCS slave computer IO card resume all data interactions with the DCS controller.

[0013] A third aspect of the present invention is to provide an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the DCS controller trusted metric consistency method when executing the computer program.

[0014] A fourth aspect of the present invention is to provide a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the DCS controller trust metric consistency method is implemented.

[0015] Compared with the prior art, the beneficial effects of the present invention are as follows: by adding a new type of real-time push mechanism of the trusted state of the DCS controller on the basis of the original up-down communication of the DCS controller, the trusted state of the DCS controller is periodically sent to the DCS host computer background program and the DCS lower computer IO card. By real-time perception of the trusted state of the DCS controller, the DCS lower computer IO card can timely cut off the path of the control signal to prevent illegal tampering of the input and output signals of the local equipment, resulting in reduced security of the field control layer. At the same time, the DCS host computer can detect the trusted state of the DCS controller in real time, timely strip the untrusted DCS controller from the entire system, interrupt the communication between the DCS controller and other nodes in the DCS, and timely issue an alarm to the user to prevent the expansion of the impact range. This embodiment can effectively ensure the network security status of the entire DCS and realize the trusted enhancement of the DCS controller based on trusted computing. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0017] Figure 1The present invention provides a flow chart of a DCS controller trust metric consistency method; Figure 2 A module flow chart of a DCS controller trusted metric consistency system is provided for the present invention; Figure 3 This is a schematic diagram of the trusted status update process of the background controller of the DCS host computer of the present invention; Figure 4 The figure is a schematic diagram of the trusted status update process of the IO card controller of the DCS lower computer of the present invention. DETAILED DESCRIPTION

[0018] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0019] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0020] Aiming at the problems existing in the background technology, a DCS controller trust measurement consistency method and system are studied and designed, which has important practical significance.

[0021] like Figure 1 As shown, a DCS controller trusted metric consistency method provided by the first aspect of the present invention comprises the following steps: Step S001: Obtain the trusted status of the DCS controller and push it.

[0022] Obtain the trusted state of the DCS controller from its own trusted components through the DCS controller; And push the trusted status to the DCS host computer background program and DCS slave computer IO card respectively; Among them, the specific push notification method reuses the original communication method, the push notification of the DCS host computer background program adopts Ethernet message communication, and the push notification of the DCS slave computer IO card adopts private bus protocol or universal bus protocol or Ethernet message, etc.

[0023] Step S002: Sense the trusted state of the DCS host computer background controller through the DCS host computer background program and make control adjustments.

[0024] It should be noted that through real-time perception of the trusted status of the DCS controller, the DCS host computer can detect the trusted status of the DCS controller in real time, promptly separate the untrusted DCS controller from the entire system, interrupt the communication between the untrusted DCS controller and other nodes in the DCS, and promptly issue an alarm to the user to prevent the expansion of the impact range.

[0025] Specifically, the DCS controller obtains the trusted state of the DCS controller in each scanning cycle from its own trusted component; Determine the trustworthy status of the DCS controller in the current scan cycle; If the DCS controller is in a trusted state in the current scan cycle, then check whether the DCS controller is trusted in the previous scan cycle. If the previous scan cycle is in a trusted state, push it to the DCS host computer background program through a trusted state message, and continue to obtain the state of the DCS controller in the next scan cycle after completion; if the previous scan cycle is in an untrusted state, restore the DCS controller to a trusted state, generate fault recovery alarm information, and push it to the DCS host computer background program through a trusted state message, and continue to obtain the state of the DCS controller in the next scan cycle after completion; If the DCS controller is in an untrusted state in the current scanning cycle, then check whether the DCS controller is trustworthy in the previous scanning cycle. If it is in a trustworthy state in the previous scanning cycle, the DCS controller has a trustworthy state failure, generates a fault alarm message and sends it to the DCS host computer background program through a trustworthy state message. After completion, continue to obtain the trustworthy state of the DCS controller in the next scanning cycle; if the DCS controller is in an untrustworthy state in the previous scanning cycle, send a master-slave switching message to the DCS controller to cut off the business data message interaction with the DCS controller.

[0026] Before the DCS host computer background program interrupts the communication between the DCS controller and other nodes in the DCS and issues an alarm to the user, it is necessary to determine whether the DCS controller needs to perform active / standby switching based on the status of the DCS controller. The specific process of the determination is as follows: The DCS host computer background program determines the active and standby status of the DCS controller; If the DCS controller in the untrusted state is the master controller, the DCS host computer background program sends a master-slave switch message to notify the DCS controller to perform the master-slave switch; If the DCS controller in the untrusted state is a standby controller, the DCS host computer background program changes the trusted state of the DCS controller to the untrusted state, and there is no need to switch, and directly proceed to the next step.

[0027] like Figure 3 As shown, the DCS host computer background real-time perception of the controller's trusted state includes two processes: the DCS controller trusted state real-time notification process and the DCS host computer background program updating the DCS controller trusted state process.

[0028] The specific process of the DCS controller trusted status real-time notification process is as follows: Step 1, the DCS controller obtains the DCS controller state from the DCS controller trusted component. If the DCS controller is in a trusted state in the current scanning cycle, jump to step 2; if the DCS controller is in an untrusted state in the current scanning cycle, jump to step 4; Step 2: Determine whether the DCS controller status in the last scan cycle is credible. If not, jump to step 3. If yes, jump to step 6. Step 3: The DCS controller is restored to a trusted state, and the corresponding fault recovery alarm information is generated and sent to the DCS host computer background program, and then jump to step 6; Step 4: Determine whether the DCS controller status in the last scan cycle is credible. If so, jump to step 5; if not, jump to step 6; Step 5: If the DCS controller fails in a trusted state, a fault alarm message is generated and sent to the DCS host computer background program, and then the process goes to step 6; Step 6: Send the trusted status message to the DCS host computer background program. After completion, jump to step 1 and repeat.

[0029] The specific process of the DCS host computer background program updating the DCS controller's trusted status is as follows: Step 1: The DCS host computer background program application obtains the trusted state of the DCS controller in the current scan cycle from the trusted state message. If the DCS controller is in a trusted state in the current scan cycle, jump to step 2; if the DCS controller is in an untrusted state in the current scan cycle, jump to step 4; Step 2: Determine whether the DCS controller status in the last scan cycle is credible. If not, jump to step 3. If yes, jump to step 7. Step 3: The trusted state of the DCS controller is restored, a trusted recovery alarm message is generated, and all business data message interactions with the DCS controller are restored, the state of the DCS controller is updated to a trusted state, and the process goes to step 7; Step 4: Determine whether the DCS controller status in the last scan cycle is credible. If so, jump to step 5; if not, jump to step 7; Step 5: Determine the master / slave status of the untrusted controller. If it is the master controller, jump to step 6; if it is the backup controller, jump to step 7. Step 6: Send the master / slave switch message to the DCS controller, cut off the business data message interaction with the DCS controller, and jump to step 7; Step 7: Update the trusted status of the DCS controller.

[0030] Step S003: Sense the trusted state of the DCS lower computer IO card controller through the DCS lower computer IO card and perform control adjustments.

[0031] It should be noted that through real-time perception of the trusted status of the DCS controller, the DCS lower computer IO card can promptly cut off the control signal path to prevent illegal tampering of the input and output signals of local equipment.

[0032] Specifically, the DCS controller obtains the trusted state of the DCS controller in the current scanning cycle from its own trusted component; If the trusted state of the DCS controller in the current scanning cycle is normal, the DCS controller and the DCS lower computer IO card will normally exchange data, and push the trusted state message to the DCS lower computer IO card. After completion, continue to obtain the trusted state of the DCS controller in the next scanning cycle; If the trusted state of the DCS controller in the current scanning cycle is abnormal, the DCS controller stops interacting with the DCS lower computer IO card for other data except the trusted state notification, and pushes the trusted state message to the DCS lower computer IO card. After completion, it continues to obtain the trusted state of the DCS controller in the next scanning cycle.

[0033] like Figure 4 As shown, the DCS host computer background real-time perception of the controller's trusted state includes two processes: the DCS controller trusted state real-time notification process and the DCS lower computer IO card component DCS controller trusted state update process.

[0034] The specific process of the DCS controller trusted status real-time notification process is as follows: Step 1: The DCS controller application obtains the controller trusted state from the DCS controller trusted component. If the DCS controller is in a trusted state, jump to step 2; if the DCS controller is in an untrusted state, jump to step 4. Step 2: Is the DCS controller status in the last scan cycle credible? If not, jump to step 3; if yes, jump to step 6; Step 3: The DCS controller is restored to a trusted state, and the corresponding fault recovery alarm information is generated and sent to the DCS host computer background program, and then jump to step 6; Step 4: Is the DCS controller status in the last scan cycle credible? If so, jump to step 5; if not, jump to step 8; Step 5: If the DCS controller fails in the trusted state, a fault alarm message is generated and sent to the DCS host computer background program, and then the process goes to step 7; Step 6: The DCS controller is in a normal trusted state and has normal data interaction with the DCS lower computer IO card, so jump to step 8; Step 7: The DCS controller has an abnormal trusted state, and stops interacting with the DCS lower computer IO card except for the trusted state notification, and jumps to step 8; Step 8: Notify the DCS lower computer IO card of the DCS controller's trusted status. After completion, jump to step 1 and repeat.

[0035] The specific process of the DCS lower computer IO card updating the DCS controller trusted status is as follows: Step 1: The DCS lower computer IO card obtains the DCS controller trusted state from the trusted state notified by the DCS controller. If the DCS controller is in a trusted state, jump to step 2; if the DCS controller is in an untrusted state, jump to step 3; Step 2: Normal data interaction with the DCS controller, jump to step 1 and repeat; Step 3: Stop all data interactions with the DCS controller except for the trusted status notification, and jump to step 1 and repeat.

[0036] The DCS lower computer IO card component restores all data interactions with the DCS controller, including: transmitting the data of the DCS lower computer IO card component back to the DCS controller or receiving the IO board output signal sent by the DCS controller.

[0037] Figure 2 A DCS controller trusted metric consistency system is provided for the second aspect of the present invention, comprising the following modules: a trusted state real-time push module 101, a DCS host computer background program real-time perception module 102, a DCS host computer IO card real-time perception module 103, and a trusted state recovery module 104; The trusted status real-time push module 101 is used for the DCS controller to push its own status to the DCS host computer background program and the DCS slave computer IO card in real time; The DCS host computer background program real-time perception module 102 is used for the DCS host computer background program to perceive the state of the DCS controller in real time. When the state of the DCS controller changes from a trusted state to an untrusted state, the DCS host computer background program interrupts the communication between the DCS controller and other nodes in the DCS and sends an alarm to the user; The DCS lower computer IO card real-time perception module 103 is used for the DCS lower computer IO card to perceive the state of the DCS controller in real time. When the state of the DCS controller changes from a trusted state to an untrusted state, the DCS lower computer IO card cuts off the path of the control signal and stops other data interaction with the DCS controller except for the trusted state notification; The trusted state recovery module 104 is used for the DCS host computer background program to restore the trusted state of the DCS controller after the DCS controller is restored from the untrusted state to the trusted state, and the DCS host computer background program and the DCS slave computer IO card components to restore all data interactions with the DCS controller.

[0038] The third aspect of the present invention is to provide an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, a step process of a DCS controller trust metric consistency method is implemented.

[0039] A fourth aspect of the present invention is to provide a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, a step process of a DCS controller trust metric consistency method is implemented.

[0040] It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0041] The present invention is described with reference to flowcharts and / or block diagrams of methods, systems, and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the process in the flowchart. Figure 1A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0042] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0043] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0044] Finally, it should be noted that the above embodiments are only used to illustrate the technical solution of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the relevant field should understand that the specific implementation methods of the present invention can still be modified or replaced by equivalents, and any modifications or equivalent replacements that do not depart from the spirit and scope of the present invention should be covered within the scope of protection of the present invention.

Claims

1. A DCS controller trust measurement consistency method, characterized in that: include: The DCS controller pushes its own status to the DCS host computer background program in real time, and the DCS controller pushes its own status to the DCS lower computer IO card in real time; The DCS host computer background program senses the status of the DCS controller in real time. When the status of the DCS controller changes from a trusted state to an untrusted state, it first determines whether the DCS controller needs to switch between the primary and standby states based on the status of the DCS controller, and then interrupts the communication between the DCS controller and other nodes in the DCS through the DCS host computer background program and issues an alarm to the user. The DCS lower computer IO card senses the status of the DCS controller in real time. When the status of the DCS controller changes from a trusted state to an untrusted state, the DCS lower computer IO card cuts off the control signal path and stops interacting with the DCS controller for other data except for the trusted state notification. When the DCS controller is restored from an untrusted state to a trusted state, the DCS host computer background program restores the trusted state of the DCS controller, and the DCS host computer background program and the DCS slave computer IO card resume all data interactions with the DCS controller.

2. A DCS controller trust measurement consistency method according to claim 1, characterized in that: The DCS controller pushes its own status to the DCS host computer background program in real time, including: The DCS controller uses Ethernet message communication to push its own status to the DCS host computer background program in real time.

3. A DCS controller trust metric consistency method according to claim 1, characterized in that: The DCS controller pushes its own status to the DCS lower computer IO card in real time, including: The DCS controller uses a private bus protocol, a universal bus protocol or an Ethernet message to communicate and push its own status to the DCS lower computer IO card in real time.

4. A DCS controller trust measurement consistency method according to claim 2, characterized in that: The specific process of the DCS controller pushing its own status to the DCS host computer background program in real time is as follows: The DCS controller obtains the trusted state of the DCS controller in each scanning cycle from its own trusted components; determines the trusted state of the DCS controller in the current scanning cycle; If the DCS controller is in a trusted state in the current scan cycle, then check whether the DCS controller is trusted in the previous scan cycle. If it is trusted in the previous scan cycle, push the trusted state message to the DCS host computer background program, and continue to obtain the state of the DCS controller in the next scan cycle after completion; If the last scan cycle is in an untrusted state, the DCS controller is restored to a trusted state, a fault recovery alarm message is generated and pushed to the DCS host computer background program through a trusted state message, and after completion, the state of the DCS controller in the next scan cycle is obtained; If the DCS controller is in an untrusted state in the current scanning cycle, then check whether the DCS controller is trustworthy in the previous scanning cycle. If it is in a trustworthy state in the previous scanning cycle, the DCS controller has a trustworthy state failure, generates a fault alarm message and sends it to the DCS host computer background program through a trustworthy state message. After completion, continue to obtain the trustworthy state of the DCS controller in the next scanning cycle; if the DCS controller is in an untrustworthy state in the previous scanning cycle, send a master-slave switching message to the DCS controller to cut off the business data message interaction with the DCS controller.

5. A DCS controller trust measurement consistency method according to claim 3, characterized in that: The specific process of the DCS controller pushing its own status to the DCS lower computer IO card in real time is as follows: The DCS controller obtains the trusted state of the DCS controller in the current scan cycle from its own trusted components; If the trusted state of the DCS controller in the current scanning cycle is normal, the DCS controller and the DCS lower computer IO card will normally exchange data, and push the trusted state message to the DCS lower computer IO card. After completion, continue to obtain the trusted state of the DCS controller in the next scanning cycle; If the trusted state of the DCS controller in the current scanning cycle is abnormal, the DCS controller stops interacting with the DCS lower computer IO card for other data except the trusted state notification, and pushes the trusted state message to the DCS lower computer IO card. After completion, it continues to obtain the trusted state of the DCS controller in the next scanning cycle.

6. A DCS controller trust metric consistency method according to claim 1, characterized in that: The determining whether the DCS controller needs to perform active / standby switching according to the state of the DCS controller includes: The DCS host computer background program determines the active and standby status of the DCS controller; If the DCS controller in the untrusted state is the master controller, the DCS host computer background program sends a master-slave switch message to notify the DCS controller to perform the master-slave switch; If the DCS controller in the untrusted state is a standby controller, the DCS host computer background program changes the trusted state of the DCS controller to the untrusted state, and there is no need to switch, and directly proceed to the next step.

7. A DCS controller trust measurement consistency method according to claim 1, characterized in that: The DCS lower computer IO card resumes all data interactions with the DCS controller, including: Send the data of IO card of DCS lower computer back to DCS controller or receive the output signal of IO card issued by DCS controller.

8. A DCS controller trust metric consistency system, characterized in that: include: Trusted status real-time push module, used by the DCS controller to push its own status to the DCS host computer background program and DCS slave computer IO card in real time; The DCS host computer background program real-time perception module is used for the DCS host computer background program to perceive the status of the DCS controller in real time. When the status of the DCS controller changes from a trusted state to an untrusted state, the DCS host computer background program interrupts the communication between the DCS controller and other nodes in the DCS and sends an alarm to the user; The DCS lower computer IO card real-time perception module is used for the DCS lower computer IO card to perceive the state of the DCS controller in real time. When the state of the DCS controller changes from a trusted state to an untrusted state, the DCS lower computer IO card cuts off the control signal path and stops other data interaction with the DCS controller except for the trusted state notification; The trusted state recovery module is used for the DCS host computer background program to restore the trusted state of the DCS controller after the DCS controller is restored from an untrusted state to a trusted state, and the DCS host computer background program and the DCS slave computer IO card resume all data interactions with the DCS controller.

9. An electronic device, characterized in that: The invention comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the DCS controller trusted measurement consistency method according to any one of claims 1 to 7 is implemented.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the DCS controller trusted measurement consistency method according to any one of claims 1 to 7 is implemented.

Images