Production office data transmission method and integrated data transmission system

Abstract

A production office data transmission method comprises the following steps: step 1, inputting a data acquisition requirement through a prepositive server, generating a data acquisition configuration command, and sending the data acquisition configuration command to a production environment network; 2, after receiving the data acquisition configuration command, the production environment network forms a data configuration packet and sends the data configuration packet to a prepositive server; step 3, a data extraction processing module in the prepositive server performs data extraction and data processing; 4, the one-way network isolation device sends the data received from the front server to a rear server; and step 5, after receiving the data packet sent by the one-way network isolation device, the rear server analyzes and processes the data packet into a required data format and sends the data packet to the office environment network. By means of the front server and the rear server, one-way smooth data transmission from the production environment and the office environment can be achieved, an office environment network and a production environment network are effectively isolated, and the safety of the data transmission process is guaranteed.

Description

Technical Field

[0001] The present invention belongs to the field of software technology, relates to data security transmission technology, and specifically relates to a production and office data transmission method and an integrated data transmission system. Background Art

[0002] The Industrial Internet is a new type of infrastructure, application model and industrial ecology that deeply integrates the new generation of information and communication technology with the industrial economy. Through the comprehensive connection of people, machines, objects, systems, etc., it builds a new manufacturing and service system covering the entire industrial chain and the entire value chain, providing a way to achieve the digitalization, networking and intelligent development of industry and even the industry. The Industrial Internet is directly related to industrial production, connecting people, machines, objects, systems and the entire industrial chain, requiring higher reliability and stronger security of the transmission network.

[0003] In actual applications, the Industrial Internet includes a production environment network for production and an office environment network for back-end office work. The former is used to collect production environment data, issue production instructions and other production activities, while the latter is used to collect production environment data on the production environment network and formulate production instructions to coordinate production and office work.

[0004] In order to ensure the needs of industrial production safety, it is necessary to isolate the production environment from the office environment network through a one-way network isolation device. The so-called one-way network isolation device means that various production equipment in the production environment can only send their own data to the outside through the one-way network isolation device, and cannot receive any data including instructions from the one-way network isolation device, thereby effectively preventing unauthorized users from the outside, such as hackers, from entering the production environment to control the production equipment. In socially dangerous production environments such as nuclear power plants and large chemical plants, this risk is unacceptable; at the same time, in the prior art, due to the limited functions of the processors built into the production equipment, only a small amount of data with fixed format can be sent to the one-way network isolation device at a time, which usually cannot be directly used by the office environment network to obtain intuitive results.

[0005] However, in the context of the industrial Internet, users often need real-time data and information about the on-site environment in order to better understand and control the production process. In order to ensure safe production, it is difficult to strike a balance between safety and convenience. Summary of the invention

[0006] In order to overcome the defects of the prior art, the present invention discloses a production and office data transmission method and an integrated data transmission system.

[0007] The production office data transmission method of the present invention comprises the following steps: Step 1. Input the data acquisition request through the front-end server, and generate the data collection configuration command that can be recognized by the production environment network according to the input data acquisition request file through the input command parsing module set in the front-end server, and send it to the production environment network; Step 2. After receiving the data collection configuration command, the production environment network reads the data to be collected, forms a data configuration package and sends it to the front-end server; Step 3. The data extraction and processing module in the front-end server extracts and processes the data configuration package, and packages the processed data into a format that can be recognized and processed by the one-way network isolation device; Step 4. The one-way network isolation device sends the data received from the front-end server to the back-end server; Step 5. After the back-end server receives the data packet sent by the unidirectional network isolation device, the built-in data parsing and processing module of the back-end server parses and processes it into the required data format and sends it to the office environment network.

[0008] Preferably, the input data retrieval request is input to the front-end server via an Internet server.

[0009] Preferably, the office environment network to which the rear-end server is connected in step 2 includes a switch, and the switch is connected to the rear-end server.

[0010] Preferably, the data analysis and processing module built into the post-server performs reverse analysis according to the process of extracting and processing data by the front-end server.

[0011] Preferably, in step 3, the data extraction processing module in the front-end server packages the processed data into TCP or UDP format.

[0012] Preferably, in step 5, the data parsing and processing module built into the back-end server parses and processes the data into MQTT data format and sends it to the office environment network.

[0013] The present invention also discloses a production and office data transmission method and an integrated data transmission system, comprising a one-way network isolation device, wherein the one-way network isolation device is connected to a front-end server and a rear-end server, wherein the one-way network isolation device can only receive data from the front-end server and can only send data to the rear-end server; The front-end server includes an input command parsing module for receiving and processing external commands, and a data extraction processing module for receiving and processing data sent from the production environment network; the back-end server includes a data parsing processing module for processing data sent from the unidirectional network isolation device.

[0014] Preferably, the front-end server and the back-end server are also connected to the public Internet respectively.

[0015] The production-office data transmission method and the integrated data transmission system described in the present invention can realize one-way smooth data transmission from the production environment and the office environment by adding a front-end server to collect data and a back-end server to process data, and can also perform network security management of the data transmission process through the gateway, front-end server and back-end server, and effectively isolate the office environment network and the production environment network, thereby ensuring the security of the data transmission process. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 A schematic diagram of a specific implementation of the production office data transmission method of the present invention; Figure 2 A schematic diagram of a specific implementation of the production-office integrated data transmission system of the present invention; Figure 3 It is a schematic diagram of a specific implementation of the front-end server and the back-end server of the present invention. DETAILED DESCRIPTION

[0017] The specific embodiments of the present invention are described in further detail below.

[0018] like Figure 1 As shown, the production office data transmission method of the present invention includes the following steps: Step 1. Input data retrieval request through the front-end server. The data retrieval request is generally for the production management needs of enterprise managers, who hope to obtain the production environment operation data immediately, and hope that the data will be presented in a form that is easy for enterprise managers to read and display.

[0019] At the same time, the data acquisition requirements are edited in a form that is convenient for enterprise managers to input, such as editing and generating in the form of an EXCEL table and inputting it into the front-end server. The front-end server is provided with an input command parsing module, which is used to generate data collection configuration commands that can be recognized by the production environment network according to the input data acquisition requirement file, and send it to the production environment network; In this step, the production environment network can only receive data collection configuration commands in a fixed format. Data collection configuration commands that do not meet the format requirements will not be received and processed, so that files in other formats cannot enter the production environment network, ensuring the security of the production environment network; the production environment network can generally only send data in a fixed format, such as Figure 2 In the specific implementation manner shown, the data collected by the production environment network is sent to the front-end server through the RS485 interface in a format that complies with the RS485 protocol.

[0020] Step 2. After receiving the data collection configuration command, the production environment network reads the data to be collected from the corresponding production equipment and industrial sensor network, forms a data configuration package and sends it to the front-end server; like Figure 1 As shown in the figure, in a typical production environment network, there are two sources of data collection. One is data collection from all network devices connected to the internal network, such as production area servers, PLCs and controllers inside various production equipment, or data collection through switches connected to the internal network. The other data source is through the serial bus, connecting all devices connected to the bus, such as sensors and interface terminals.

[0021] Step 3. The data extraction and processing module in the front-end server extracts and processes the data configuration package, and packages the processed data into a format that can be recognized and processed by the one-way network isolation device, generally in the form of TCP or UDP, so that the one-way network isolation device connected to the front-end server can receive from the front-end server and send it backward.

[0022] Step 4. The one-way network isolation device sends the data received from the front-end server to the back-end server; The one-way network isolation device is a one-way gateway that can only receive data in a fixed format from a front-end server and only send data in the same format to a back-end server.

[0023] Step 5. After the back-end server receives the data packet sent by the unidirectional network isolation device, it performs reverse analysis based on the process of data extraction and processing by the front-end server. The back-end server has a built-in data analysis and processing module. The data processing process performed by the data analysis and processing module and the data extraction and processing module in the front-end server is an inverse process. For example, it can be an encryption and decryption process of a data encryption method. The encryption process is performed on the front-end server, and the decryption process that is inverse to the encryption is performed on the back-end server.

[0024] The data collection, aggregation and conversion functions implemented by the front-end server are transmitted to the one-way network isolation device via TCP / UDP format.

[0025] The back-end server implements data restoration, conversion and forwarding functions, and transmits the data to the application server of the office environment network or the remote cloud platform server.

[0026] The back-end server performs reverse analysis based on the process of extracting and processing data from the front-end server, and then processes the parsed data into the data format required by the office environment. Figure 1 In the specific implementation shown, the office environment network is provided with a switch as a gateway for a public network such as a 5G network, and various devices in the office environment network such as a database server, a storage device, and an application server are connected through the switch.

[0027] The data format after reverse parsing by the back-end server can also be a data processing format suitable for uploading to the network cloud, such as MQTT (Message Queuing Telemetry Transport), etc., and uploaded to the public network, so that it can be quickly accessed by any terminal on the public Internet using the Internet server.

[0028] The production office data transmission method of the present invention can be based on the following Figure 2 The production-office integrated data transmission system shown includes a one-way network isolation device, which is connected to a front-end server and a back-end server, wherein the one-way network isolation device can only receive data from the front-end server and can only send data to the back-end server; like Figure 3 As shown, the front-end server includes an input command parsing module for receiving and processing external commands, and a data extraction processing module for receiving and processing data sent from the production environment network; The post-server includes a data analysis and processing module for processing data sent from the unidirectional network isolation device.

[0029] Figure 2 The integrated production and office data transmission system shown in the figure inputs data retrieval requests through the front-end server. The user can log in to the production environment network and send commands to the front-end server from the internal terminal of the production environment network, thereby directly sending the data retrieval requests to the front-end server through the Internet.

[0030] The input command parsing module set in the front-end server is used to generate data collection configuration commands and send them to the production environment network connected to the front-end server.

[0031] After receiving the data collection configuration command, the production environment network reads the data to be collected from the corresponding production equipment and industrial sensor network, forms a data configuration package and sends it to the front-end server; At this time, the data extraction processing module in the front-end server processes the data configuration package and sends it to the one-way network isolation device, and the one-way network isolation device sends the data received from the front-end server to the back-end server.

[0032] After the back-end server receives the data packet sent by the unidirectional network isolation device, the built-in data analysis and processing module of the back-end server performs reverse analysis according to the process of extracting and processing data by the front-end server.

[0033] The back-end server performs reverse analysis based on the process of extracting and processing data from the front-end server, and then processes the parsed data into the data format required by the office environment. Figure 1In the specific implementation shown, the office environment network is provided with a switch as a gateway to a public network such as a 5G network, and various devices in the office environment network such as a database server, storage, and application server are connected through the switch, and are connected to the public Internet.

[0034] The production-office data transmission method and the integrated data transmission system described in the present invention can realize one-way smooth data transmission from the production environment and the office environment by adding a front-end server to collect data and a back-end server to process data, and can also perform network security management of the data transmission process through the gateway, front-end server and back-end server, and effectively isolate the office environment network and the production environment network, thereby ensuring the security of the data transmission process.

[0035] It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0036] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0037] The computer program instructions referred to in the present invention may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0038] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0039] The foregoing describes various preferred embodiments of the present invention. Unless the preferred implementation modes in various preferred embodiments are obviously self-contradictory or based on a certain preferred implementation mode, various preferred implementation modes can be arbitrarily superimposed and used in combination. The embodiments and specific parameters in the embodiments are only for clearly describing the invention verification process of the inventor, and are not used to limit the patent protection scope of the present invention. The patent protection scope of the present invention shall still be based on its claims. All equivalent structural changes made using the contents of the specification of the present invention should be included in the protection scope of the present invention.

Claims

1. A production office data transmission method, characterized in that: The following steps are involved: Step 1. Input the data acquisition request through the front-end server, and generate the data collection configuration command that can be recognized by the production environment network according to the input data acquisition request file through the input command parsing module set in the front-end server, and send it to the production environment network; Step 2. After receiving the data collection configuration command, the production environment network reads the data to be collected, forms a data configuration package and sends it to the front-end server; Step 3. The data extraction and processing module in the front-end server extracts and processes the data configuration package, and packages the processed data into a format that can be recognized and processed by the one-way network isolation device; Step 4. The one-way network isolation device sends the data received from the front-end server to the back-end server; Step 5. After the back-end server receives the data packet sent by the unidirectional network isolation device, the built-in data parsing and processing module of the back-end server parses and processes it into the required data format and sends it to the office environment network.

2. The production office data transmission method according to claim 1, characterized in that: The office environment network to which the back-end server is connected in step 2 includes a switch, and the switch is connected to the back-end server.

3. The production office data transmission method according to claim 1, characterized in that: The data analysis and processing module built into the post-server performs reverse analysis according to the process of extracting and processing data by the front-end server.

4. The production office data transmission method according to claim 1, characterized in that: In step 3, the data extraction processing module in the front-end server packages the processed data into TCP or UDP format.

5. The production office data transmission method according to claim 1, characterized in that: In step 5, the data parsing and processing module built into the back-end server parses and processes the data into the MQTT data format and sends it to the office environment network.

6. A production office data transmission method and an integrated data transmission system, characterized in that: It includes a unidirectional network isolation device, which is connected to a front-end server and a back-end server, wherein the unidirectional network isolation device can only receive data from the front-end server and can only send data to the back-end server; The front-end server includes an input command parsing module for receiving and processing external commands, and a data extraction processing module for receiving and processing data sent from the production environment network; the back-end server includes a data parsing processing module for processing data sent from the unidirectional network isolation device.

7. The production office data transmission method and integrated data transmission system as claimed in claim 6, characterized in that: The backend server is also connected to the public Internet.

Images