Data processing method and system for industrial control safety system

Abstract

The invention relates to the technical field of industrial control data processing, and discloses a data processing method and system for an industrial control security system, and the method comprises the steps: collecting equipment data and network data; calculating an equipment reliability index according to the equipment fault frequency and the equipment fault frequency, calculating an equipment state value according to the equipment reliability index and the equipment maintenance success rate, and determining the equipment maintenance frequency based on the similarity between the equipment state value and historical data; judging whether the network needs to be maintained according to the network security index, calculating a current network state value based on the network security index and the network attack response condition, and determining a network maintenance frequency according to the network state value; calculating a comprehensive state value of the industrial control safety system according to the equipment state value and the network state value, and determining the regular synchronous maintenance frequency of the equipment and the network according to the comprehensive state value. According to the invention, the dynamic maintenance and management of equipment and a network are realized, and the stability and safety of the industrial control system are obviously improved.

Description

Technical Field

[0001] The present invention relates to the technical field of industrial control data processing, and in particular to a data processing method and system for an industrial control safety system. Background Art

[0002] With the rapid development of industrial automation and informatization, industrial control systems (ICS) play a vital role in modern manufacturing and infrastructure. However, with the popularization of the Internet and the deepening of device interconnection, the security and reliability of industrial control systems are facing increasingly severe challenges. Industrial control systems not only involve the operation of equipment, but also include real-time data exchange with external networks, which makes them vulnerable to more complex risks when facing equipment failures and network attacks.

[0003] In traditional industrial control system management, equipment maintenance and network security protection are often based on experience or regular inspections. This approach has problems such as inaccurate maintenance frequency and uncoordinated equipment and network maintenance, which can easily lead to failure to detect equipment failures or fail to respond to network attacks in a timely manner, resulting in production stagnation, economic losses, and even threats to public safety.

[0004] Therefore, it is necessary to provide a data processing method and system for an industrial control safety system to solve the problems of inaccurate maintenance frequency and uncoordinated equipment network maintenance in traditional industrial control system management. Summary of the invention

[0005] In view of this, the present invention proposes a data processing method and system for an industrial control safety system, aiming to solve the problems of inaccurate maintenance frequency and uncoordinated equipment network maintenance in traditional industrial control system management.

[0006] On the one hand, the present invention provides a data processing method for an industrial control safety system, comprising:

[0007] Collect equipment data and network data; wherein the equipment data includes the number of equipment failures, the frequency of equipment failures and the success rate of equipment maintenance; the network data includes the encryption of transmitted data, the number of network attacks and the response to network attacks;

[0008] Calculate the equipment reliability index according to the equipment failure times and equipment failure frequency, calculate the equipment status value according to the equipment reliability index and equipment maintenance success rate, and determine the equipment maintenance frequency based on the similarity between the equipment status value and historical data;

[0009] Calculate a network security index based on data encryption and the number of network attacks, determine whether network maintenance is required based on the network security index, and when it is determined that network maintenance is required, calculate a current network status value based on the network security index and the network attack response, and determine a network maintenance frequency based on the network status value;

[0010] The comprehensive status value of the industrial control safety system is calculated according to the device status value and the network status value, and the frequency of regular synchronous maintenance of the device and the network is determined according to the comprehensive status value.

[0011] Furthermore, the calculation of the equipment reliability index according to the equipment failure times and equipment failure frequency includes:

[0012] The equipment reliability index is calculated by the following formula:

[0013]

[0014] In the above formula, R represents the equipment reliability index, N represents the number of equipment failures, T represents the total equipment operation time, λ represents the equipment failure frequency, where λ=N / T, a represents the weight coefficient of the number of equipment failures, and b represents the weight coefficient of the equipment failure frequency, where the value range of a and b are both 0-1.

[0015] Furthermore, the calculation of the equipment status value according to the equipment reliability index and the equipment maintenance success rate includes:

[0016] The device status value is calculated by the following formula:

[0017]

[0018] In the above formula, V represents the equipment status value, R represents the equipment reliability index, and S represents the equipment maintenance success rate.

[0019] Furthermore, the determining of the equipment maintenance frequency based on the similarity between the equipment status value and the historical data includes:

[0020] If there is a historical device status value that is the same as the device status value in the historical data, the historical device maintenance frequency corresponding to the historical device status value is used as the current device maintenance frequency;

[0021] If there is no historical device status value identical to the device status value in the historical data, setting a first status value and a second status value; wherein the first status value is smaller than the second status value;

[0022] If the device status value is less than or equal to the first status value, using the first maintenance frequency as the device maintenance frequency;

[0023] If the device status value is greater than the first status value and less than or equal to the second status value, the second maintenance frequency is used as the device maintenance frequency;

[0024] If the device status value is greater than the second status value, the third maintenance frequency is used as the device maintenance frequency;

[0025] The first maintenance frequency is greater than the second maintenance frequency, and the second maintenance frequency is greater than the third maintenance frequency.

[0026] Furthermore, the calculation of the network security index based on the data encryption status and the number of network attacks includes:

[0027] The encryption status is the percentage of successful data encryption;

[0028] The network security index is calculated according to the percentage of successful data encryption and the number of network attacks using the following formula:

[0029]

[0030] In the above formula, I represents the network security index, E represents the percentage of successful data encryption, A represents the number of network attacks, α represents the encryption adjustment coefficient, and β represents the network attack adjustment coefficient. The value ranges of α and β are both 0-1.

[0031] Further, judging whether network maintenance is required according to the network security index includes:

[0032] Setting a minimum value of the network security index, if the network security index is less than or equal to the minimum value of the network security index, determining that network maintenance is required;

[0033] If the network security index is greater than the minimum network security index value, it is determined that network maintenance is not required.

[0034] Further, when it is determined that the network needs to be maintained, the current network status value is calculated based on the network security index and the network attack response situation, including:

[0035] The network attack response situation includes attack response time, measure response time, recovery time and recovery success rate;

[0036] Calculate the average attack response time, average measure response time, average recovery time and recovery success rate;

[0037] The current network status value is calculated by the following formula:

[0038]

[0039] In the above formula, Z represents the network status value, I represents the network security index, Tg represents the average attack response time, Tc represents the average measure response time, Th represents the average recovery time, L represents the recovery success rate, c represents the attack average response time adjustment coefficient, d represents the measure average response time adjustment coefficient, e represents the average recovery time adjustment coefficient, and f represents the recovery success rate adjustment coefficient. The value ranges of c, d, e and f are all 0-1.

[0040] Further, the determining of the network maintenance frequency according to the network status value includes:

[0041] If there is a historical network status value that is the same as the network status value in the historical data, the historical network maintenance frequency corresponding to the historical network status value is used as the current network maintenance frequency;

[0042] If there is no historical network status value identical to the network status value in the historical data, setting a first network status value and a second network status value; wherein the first network status value is smaller than the second network status value;

[0043] If the network status value is less than or equal to the first network status value, using the first network maintenance frequency as the network maintenance frequency;

[0044] If the network status value is greater than the first network status value and less than or equal to the second network status value, using the second network maintenance frequency as the network maintenance frequency;

[0045] If the network status value is greater than the second network status value, using the third network maintenance frequency as the network maintenance frequency;

[0046] The first network maintenance frequency is greater than the second network maintenance frequency, and the second network maintenance frequency is greater than the third network maintenance frequency.

[0047] Further, the calculating of the comprehensive status value of the industrial control safety system according to the device status value and the network status value, and determining the periodic synchronous maintenance frequency of the device and the network according to the comprehensive status value, includes:

[0048] The comprehensive status value is the sum of the device status value and the network status value, and the frequency of regular synchronization maintenance of the device and the network is determined according to the sum;

[0049] Setting a first sum value and a second sum value, wherein the first sum value is smaller than the second sum value;

[0050] If the comprehensive status value is less than the first sum value, the regular synchronization maintenance frequency is the first frequency;

[0051] If the comprehensive status value is greater than or equal to the first sum value, and less than or equal to the second sum value, the regular synchronization maintenance frequency is the second frequency;

[0052] If the comprehensive status value is greater than the second sum value, the regular synchronization maintenance frequency is a third frequency;

[0053] The first frequency is greater than the second frequency, and the second frequency is greater than the third frequency.

[0054] Compared with the prior art, the beneficial effect of the present invention is that the present invention realizes the dynamic maintenance and management of equipment and network, and significantly improves the stability and security of industrial control system. First, by calculating the equipment reliability index and status value through parameters such as the number of equipment failures, failure frequency and maintenance success rate, the health status of the equipment can be accurately evaluated, thereby determining the appropriate equipment maintenance frequency. This not only avoids excessive maintenance, but also reduces the risk of equipment failure. Secondly, based on network data, such as data encryption, number of network attacks and response, the network security index is calculated, and it is determined whether maintenance is required to ensure that the network is protected in time under the threat of attack. Further, the network status value is calculated through the network security index and the network attack response, and the timely network maintenance frequency is determined. Most importantly, by comprehensively considering the status values ​​of the equipment and the network, the system can automatically adjust the regular synchronous maintenance frequency of the equipment and the network, ensuring that the two operate in coordination under the optimized maintenance plan, reducing system failures and safety hazards. This method not only improves the overall security and responsiveness of the industrial control system, but also reduces the operation and maintenance costs and the risk of human errors through intelligent data analysis, providing a solid guarantee for long-term reliable operation.

[0055] On the other hand, the present application also provides a data processing system for an industrial control safety system, comprising:

[0056] A collection module is configured to collect device data and network data; wherein the device data includes the number of device failures, the frequency of device failures and the success rate of device maintenance; and the network data includes the encryption status of transmitted data, the number of network attacks and the response status of network attacks;

[0057] an equipment processing module, configured to calculate an equipment reliability index according to the equipment failure number and the equipment failure frequency, calculate an equipment status value according to the equipment reliability index and the equipment maintenance success rate, and determine an equipment maintenance frequency based on a similarity between the equipment status value and historical data;

[0058] A network processing module is configured to calculate a network security index based on data encryption and the number of network attacks, determine whether network maintenance is required based on the network security index, and when it is determined that network maintenance is required, calculate a current network status value based on the network security index and the network attack response, and determine a network maintenance frequency based on the network status value;

[0059] The comprehensive processing module is configured to calculate the comprehensive status value of the industrial control safety system according to the device status value and the network status value, and determine the frequency of regular synchronous maintenance of the device and the network according to the comprehensive status value.

[0060] It can be understood that the data processing method and system for the industrial control safety system provided in this application have the same beneficial effects and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0061] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present invention. Moreover, the same reference symbols are used throughout the accompanying drawings to represent the same components. In the accompanying drawings:

[0062] Figure 1 A flow chart of a data processing method for an industrial control safety system provided by an embodiment of the present invention;

[0063] Figure 2 A functional block diagram of a data processing system for an industrial control safety system provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0064] Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments described herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art. It should be noted that, in the absence of conflict, the embodiments of the present invention and the features described in the embodiments can be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0065] In some embodiments of the present application, see Figure 1 As shown, this embodiment provides a data processing method for an industrial control safety system, comprising the following steps:

[0066] S100, collecting equipment data and network data; wherein the equipment data includes the number of equipment failures, the frequency of equipment failures and the success rate of equipment maintenance; the network data includes the encryption status of transmitted data, the number of network attacks and the response status of network attacks;

[0067] S200, calculating the equipment reliability index according to the number of equipment failures and the equipment failure frequency, calculating the equipment status value according to the equipment reliability index and the equipment maintenance success rate, and determining the equipment maintenance frequency based on the similarity between the equipment status value and historical data;

[0068] S300, calculating a network security index based on data encryption and the number of network attacks, determining whether network maintenance is required based on the network security index, and when it is determined that network maintenance is required, calculating a current network status value based on the network security index and the network attack response, and determining a network maintenance frequency based on the network status value;

[0069] S400: Calculate a comprehensive status value of the industrial control safety system according to the device status value and the network status value, and determine a regular synchronous maintenance frequency of the device and the network according to the comprehensive status value.

[0070] It can be understood that the present invention realizes dynamic maintenance and management of equipment and networks, and significantly improves the stability and security of industrial control systems. First, by calculating the equipment reliability index and status value through parameters such as the number of equipment failures, failure frequency, and maintenance success rate, the health status of the equipment can be accurately evaluated, thereby determining the appropriate equipment maintenance frequency. This not only avoids excessive maintenance, but also reduces the risk of equipment failure. Secondly, based on network data, such as data encryption, the number of network attacks, and the response, the network security index is calculated, and it is determined whether maintenance is required to ensure that the network is protected in time under the threat of attack. Further, the network status value is calculated through the network security index and the network attack response, and the timely network maintenance frequency is determined. Most importantly, by comprehensively considering the status values ​​of the equipment and the network, the system can automatically adjust the regular synchronous maintenance frequency of the equipment and the network, ensuring that the two operate in coordination under the optimized maintenance plan, reducing system failures and safety hazards. This method not only improves the overall security and responsiveness of the industrial control system, but also reduces the operation and maintenance costs and the risk of human errors through intelligent data analysis, providing a solid guarantee for long-term reliable operation.

[0071] In some embodiments of the present application, when calculating the equipment reliability index according to the number of equipment failures and the equipment failure frequency, it includes:

[0072] The equipment reliability index is calculated by the following formula:

[0073]

[0074] In the above formula, R represents the equipment reliability index, N represents the number of equipment failures, T represents the total equipment operation time, λ represents the equipment failure frequency, where λ=N / T, a represents the weight coefficient of the number of equipment failures, and b represents the weight coefficient of the equipment failure frequency, where the value range of a and b are both 0-1.

[0075] It can be understood that the present invention comprehensively considers the number of equipment failures, the total equipment operation time and the equipment failure frequency, thereby providing a comprehensive equipment performance evaluation. The introduction of weight coefficients a and b makes the calculation more flexible and adaptable to the characteristics of different equipment. The value range of a and b is 0-1, allowing the user to adjust the importance of the number of failures and the failure frequency in the calculation of the reliability index according to actual conditions. For example, for some equipment that is more sensitive to the number of failures, the value of a can be increased, while for those equipment that is more sensitive to the failure frequency, the value of b can be increased. This calculation method can not only help users quickly identify equipment reliability problems, but also provide data support for maintenance decisions, thereby reducing unexpected downtime and improving the operating efficiency and life of the equipment. In addition, by continuously monitoring and calculating the equipment reliability index, enterprises can better plan maintenance cycles and spare parts inventory, and achieve cost optimization management. In short, this equipment reliability index calculation method based on the number of failures and the failure frequency provides a scientific, efficient and highly adaptable tool for equipment management and maintenance. Specifically, the number of equipment failures, the total equipment operation time and the equipment failure frequency are parameters within a preset time period.

[0076] In some embodiments of the present application, when calculating the equipment status value according to the equipment reliability index and the equipment maintenance success rate, it includes:

[0077] The device status value is calculated by the following formula:

[0078]

[0079] In the above formula, V represents the equipment status value, R represents the equipment reliability index, and S represents the equipment maintenance success rate.

[0080] It is understandable that the present invention provides a more comprehensive and accurate equipment health assessment method by combining the equipment reliability index and the equipment maintenance success rate to calculate the equipment status value. Specifically, the calculation formula of the equipment status value not only takes into account the reliability of the equipment itself, that is, the probability that the equipment completes the specified function under specified conditions and within a specified time, but also takes into account the probability that its function can be successfully restored through maintenance after the equipment fails. Such a comprehensive evaluation can more accurately reflect the actual operating status of the equipment and provide more scientific decision-making support for the maintenance and management of the equipment. Through this calculation method, the one-sidedness that may be caused by a single indicator can be effectively avoided, so as to make more reasonable arrangements in equipment maintenance and resource allocation. In addition, this calculation method is also convenient for continuous tracking and dynamic evaluation of equipment status, which helps to timely discover potential problems, prevent equipment failures, improve equipment operation efficiency and reliability, and ultimately achieve optimized management of the equipment life cycle. Specifically, the equipment maintenance success rate is a parameter within a preset time period.

[0081] In some embodiments of the present application, when determining the equipment maintenance frequency based on the similarity between the equipment status value and the historical data, it includes:

[0082] If there is a historical device status value that is the same as the device status value in the historical data, the historical device maintenance frequency corresponding to the historical device status value is used as the current device maintenance frequency;

[0083] If there is no historical device status value identical to the device status value in the historical data, setting a first status value and a second status value; wherein the first status value is smaller than the second status value;

[0084] If the device status value is less than or equal to the first status value, the first maintenance frequency is used as the device maintenance frequency;

[0085] If the device status value is greater than the first status value and less than or equal to the second status value, the second maintenance frequency is used as the device maintenance frequency;

[0086] If the device status value is greater than the second status value, the third maintenance frequency is used as the device maintenance frequency;

[0087] The first maintenance frequency is greater than the second maintenance frequency, and the second maintenance frequency is greater than the third maintenance frequency.

[0088] It can be understood that in some embodiments of the present application, the present invention can ensure that the frequency of equipment maintenance is closely related to the actual operating status of the equipment, thereby improving the pertinence and effectiveness of maintenance. When there is a historical equipment status value that is the same as the current equipment status value in the historical data, the corresponding historical maintenance frequency is directly adopted, which not only simplifies the decision-making process, but also can use past experience to guide the current maintenance work, ensuring that the equipment is properly maintained in a similar state. Secondly, when there is no situation that is the same as the current equipment status value in the historical data, by setting the first status value and the second status value, and determining different maintenance frequencies according to the comparison results of the equipment status value and the two status values, this method provides a flexible maintenance strategy. In this way, a reasonable maintenance plan can be formulated for equipment with equipment status values ​​in different ranges, thereby avoiding the problem of over-maintenance or under-maintenance. Specifically, if the equipment status value is low, a higher maintenance frequency can be adopted to ensure the stable operation of the equipment; if the equipment status value is in a medium range, a medium maintenance frequency is adopted; and if the equipment status value is high, it indicates that the equipment may face a greater risk. At this time, a lower maintenance frequency is adopted, which can timely discover and solve problems and avoid equipment failures. In summary, this maintenance frequency determination method based on the similarity between equipment status value and historical data can not only improve the accuracy and efficiency of maintenance, but also flexibly adjust the maintenance strategy according to the actual operating conditions of the equipment, thereby extending the service life of the equipment, reducing maintenance costs, and ensuring the stable operation of the equipment.

[0089] In some embodiments of the present application, when calculating the network security index based on the data encryption status and the number of network attacks, it includes:

[0090] The encryption status is the percentage of successful data encryption;

[0091] The cybersecurity index is calculated based on the percentage of successful data encryption and the number of network attacks using the following formula:

[0092]

[0093] In the above formula, I represents the network security index, E represents the percentage of successful data encryption, A represents the number of network attacks, α represents the encryption adjustment coefficient, and β represents the network attack adjustment coefficient. The value ranges of α and β are both 0-1.

[0094] It is understandable that in some embodiments of the present application, the method for calculating the network security index includes considering the success rate of data encryption and the frequency of network attacks. Specifically, the network security index calculation formula combines the percentage of data encryption success (E) and the number of network attacks (A), and introduces two adjustment coefficients α and β. These two coefficients are used to adjust the impact of the encryption situation and the number of network attacks on the network security index, and their value range is between 0 and 1. In this way, when the success rate of data encryption is high, the network security index will increase accordingly; and the more network attacks there are, the lower the network security index will be. Such a calculation method can intuitively reflect the security status of the network, help relevant managers take timely measures, and enhance the network's protection capabilities. Specifically, the percentage of data encryption success and the number of network attacks are parameters within a preset time period.

[0095] In some embodiments of the present application, judging whether network maintenance is required according to the network security index includes:

[0096] Set the minimum value of the network security index. If the network security index is less than or equal to the minimum value, it is determined that network maintenance is required.

[0097] If the network security index is greater than the minimum value of the network security index, it is determined that the network does not need to be maintained.

[0098] It is understandable that in some embodiments of the present application, by setting a minimum value of the network security index to determine whether the network needs to be maintained, when the network security index is less than or equal to the set minimum value, it is automatically determined that network maintenance is required, which helps to promptly discover and solve network security problems and prevent potential security threats. On the contrary, if the network security index is greater than the minimum value, the system determines that the network is in a safe state and no maintenance is required. This method simplifies the network security management process, improves efficiency, and ensures the stable operation of the network and the security of data.

[0099] In some embodiments of the present application, when it is determined that network maintenance is required, the current network status value is calculated based on the network security index and the network attack response situation, including:

[0100] The network attack response includes attack response time, measure response time, recovery time and recovery success rate;

[0101] Calculate the average attack response time, average measure response time, average recovery time and recovery success rate;

[0102] The current network status value is calculated by the following formula:

[0103]

[0104] In the above formula, Z represents the network status value, I represents the network security index, Tg represents the average attack response time, Tc represents the average measure response time, Th represents the average recovery time, L represents the recovery success rate, c represents the attack average response time adjustment coefficient, d represents the measure average response time adjustment coefficient, e represents the average recovery time adjustment coefficient, and f represents the recovery success rate adjustment coefficient. The value ranges of c, d, e and f are all 0-1.

[0105] It is understandable that in the embodiment of the present application, when the network needs to be maintained, the current network state value is evaluated by calculating the network security index and the network attack response situation, and multiple key indicators of the network attack response are comprehensively considered, including the attack response time, the measure response time, the recovery time and the recovery success rate. These indicators can fully reflect the security status of the network and the ability to deal with attacks. By calculating the average attack response time, the average measure response time, the average recovery time and the recovery success rate, a quantified network state value Z can be obtained. This value not only takes into account the network security index I, but also weights different response times and recovery success rates by adjusting coefficients c, d, e and f, so that the evaluation of the network state is more accurate and dynamic. The value range of the adjustment coefficient is 0 to 1, which ensures that the importance of different indicators can be flexibly adjusted according to the actual situation during the calculation process. The present invention provides a standardized and quantified indicator to measure the health of the network, so that network maintenance personnel can quickly identify the problem and take corresponding maintenance measures. In addition, the method can also help network managers monitor the changing trend of network status and promptly discover potential security threats, thereby improving the overall security and stability of the network. In this way, network maintenance becomes more proactive and efficient, helping to reduce the losses and impacts of cyber attacks. Specifically, the average response time to attacks, the average response time to measures, the average recovery time, and the recovery success rate are average values ​​and parameters within a preset time period.

[0106] In some embodiments of the present application, when determining the network maintenance frequency according to the network status value, it includes:

[0107] If there is a historical network status value that is the same as the network status value in the historical data, the historical network maintenance frequency corresponding to the historical network status value is used as the current network maintenance frequency;

[0108] If there is no historical network status value identical to the network status value in the historical data, setting a first network status value and a second network status value; wherein the first network status value is smaller than the second network status value;

[0109] If the network status value is less than or equal to the first network status value, using the first network maintenance frequency as the network maintenance frequency;

[0110] If the network status value is greater than the first network status value and less than or equal to the second network status value, the second network maintenance frequency is used as the network maintenance frequency;

[0111] If the network status value is greater than the second network status value, the third network maintenance frequency is used as the network maintenance frequency;

[0112] The first network maintenance frequency is greater than the second network maintenance frequency, and the second network maintenance frequency is greater than the third network maintenance frequency.

[0113] It is understandable that the present invention can optimize the maintenance plan according to the historical performance of the network status. Specifically, if the current network status value matches a certain value in the historical data, the corresponding historical maintenance frequency can be directly adopted, which can use past experience to guide the current maintenance work and improve efficiency. If the current network status value does not have a direct corresponding value in the historical data, the system will determine the maintenance frequency according to the set first and second network status values. When the network status value is low, a higher maintenance frequency (first network maintenance frequency) is adopted, which helps to timely discover and solve potential problems and prevent network failures. When the network status value is at a medium level, a medium maintenance frequency (second network maintenance frequency) is adopted, which can ensure the stability of the network while avoiding the waste of resources caused by excessive maintenance. When the network status value is high, a lower maintenance frequency (third network maintenance frequency) is adopted, which may be because the network is already in a relatively unstable state, and frequent maintenance may aggravate the problem. Through this hierarchical maintenance frequency setting, network maintenance work can be managed more flexibly and efficiently to ensure the stability and reliability of the network.

[0114] In some embodiments of the present application, when calculating the comprehensive status value of the industrial control safety system according to the device status value and the network status value, and determining the periodic synchronization maintenance frequency of the device and the network according to the comprehensive status value, it includes:

[0115] The comprehensive status value is the sum of the device status value and the network status value, and the frequency of regular synchronization maintenance of the device and the network is determined based on the sum;

[0116] Set the first sum and the second sum, the first sum is smaller than the second sum;

[0117] If the comprehensive status value is less than the first sum value, the regular synchronization maintenance frequency is the first frequency;

[0118] If the comprehensive status value is greater than or equal to the first sum value and less than or equal to the second sum value, the regular synchronization maintenance frequency is the second frequency;

[0119] If the comprehensive status value is greater than the second sum value, the regular synchronization maintenance frequency is the third frequency;

[0120] The first frequency is greater than the second frequency, and the second frequency is greater than the third frequency.

[0121] It can be understood that the present invention optimizes the regular synchronous maintenance frequency of equipment and networks by calculating the comprehensive status value of the industrial control safety system. The comprehensive status value is the sum of the equipment status value and the network status value. This calculation method can comprehensively reflect the overall operating status of the equipment and the network. By setting different sum value thresholds (first sum value and second sum value), the maintenance frequency can be flexibly adjusted. When the comprehensive status value is low, that is, when the equipment and network are in good condition, a higher regular synchronous maintenance frequency (first frequency) is adopted to maintain the optimal operating state of the system; when the comprehensive status value is at a medium level, a medium maintenance frequency (second frequency) is adopted to balance the maintenance cost and system stability; and when the comprehensive status value is high, indicating the existence of potential risks, a lower maintenance frequency (third frequency) is adopted for more in-depth inspection and repair. This hierarchical maintenance strategy helps to improve maintenance efficiency, reduce unnecessary maintenance costs, and ensure the safety and reliability of the system. Specifically, the regular synchronous maintenance frequency does not conflict with the above-mentioned equipment maintenance frequency and network maintenance frequency.

[0122] On the other hand, see Figure 2 As shown, the present application also provides a data processing system for an industrial control safety system, which is used to apply the above-mentioned data processing method for an industrial control safety system, including:

[0123] The collection module is configured to collect device data and network data; wherein the device data includes the number of device failures, the frequency of device failures and the success rate of device maintenance; the network data includes the encryption status of transmission data, the number of network attacks and the response status of network attacks;

[0124] An equipment processing module is configured to calculate an equipment reliability index according to the number of equipment failures and the equipment failure frequency, calculate an equipment status value according to the equipment reliability index and the equipment maintenance success rate, and determine an equipment maintenance frequency based on a similarity between the equipment status value and historical data;

[0125] The network processing module is configured to calculate a network security index based on data encryption and the number of network attacks, determine whether network maintenance is required based on the network security index, and when it is determined that network maintenance is required, calculate a current network status value based on the network security index and the network attack response, and determine a network maintenance frequency based on the network status value;

[0126] The comprehensive processing module is configured to calculate the comprehensive status value of the industrial control safety system according to the device status value and the network status value, and determine the frequency of regular synchronous maintenance of the device and the network according to the comprehensive status value.

[0127] It can be understood that, through the acquisition module of the present invention, the system can monitor the key data of the equipment and network in real time, such as the number and frequency of equipment failures, the success rate of maintenance, data encryption, the number and response of network attacks, which helps to discover potential problems in time and take measures. The equipment processing module can intelligently determine the equipment maintenance frequency by calculating the equipment reliability index and status value, thereby improving the equipment operation efficiency and reliability. The network processing module determines the necessity of network maintenance through the network security index, and calculates the network status value to ensure the stability and security of the network. The comprehensive processing module further integrates the equipment and network status values, calculates the comprehensive status value of the industrial control safety system, and determines the regular synchronous maintenance frequency of the equipment and network based on this, which helps to achieve the optimization management of the entire system. In general, this data processing system can improve the safety and efficiency of the industrial control system, reduce maintenance costs, and ensure the continuity and stability of the industrial production process.

[0128] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems or computer program products. Therefore, the present application may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present application may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0129] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems) and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0130] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0131] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0132] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the relevant field should understand that the specific implementation methods of the present invention can still be modified or replaced by equivalents. Any modification or equivalent replacement that does not depart from the spirit and scope of the present invention should be covered within the scope of protection of the claims of the present invention.

Claims

1. A data processing method for an industrial control safety system, characterized in that: include: Collect equipment data and network data; wherein the equipment data includes the number of equipment failures, the frequency of equipment failures and the success rate of equipment maintenance; the network data includes the encryption of transmitted data, the number of network attacks and the response to network attacks; Calculate the equipment reliability index according to the equipment failure times and equipment failure frequency, calculate the equipment status value according to the equipment reliability index and equipment maintenance success rate, and determine the equipment maintenance frequency based on the similarity between the equipment status value and historical data; Calculate a network security index based on data encryption and the number of network attacks, determine whether network maintenance is required based on the network security index, and when it is determined that network maintenance is required, calculate a current network status value based on the network security index and the network attack response, and determine a network maintenance frequency based on the network status value; The comprehensive status value of the industrial control safety system is calculated according to the device status value and the network status value, and the frequency of regular synchronous maintenance of the device and the network is determined according to the comprehensive status value.

2. The data processing method for industrial control safety system according to claim 1, characterized in that: The calculation of the equipment reliability index according to the equipment failure times and equipment failure frequency includes: The equipment reliability index is calculated by the following formula: In the above formula, R represents the equipment reliability index, N represents the number of equipment failures, T represents the total equipment operation time, λ represents the equipment failure frequency, where λ=N / T, a represents the weight coefficient of the number of equipment failures, and b represents the weight coefficient of the equipment failure frequency, where the value range of a and b are both 0-1.

3. The data processing method for industrial control safety system according to claim 2, characterized in that: The calculation of the equipment status value according to the equipment reliability index and the equipment maintenance success rate includes: The device status value is calculated by the following formula: In the above formula, V represents the equipment status value, R represents the equipment reliability index, and S represents the equipment maintenance success rate.

4. The data processing method for industrial control safety system according to claim 3, characterized in that: The determining of the equipment maintenance frequency based on the similarity between the equipment status value and the historical data includes: If there is a historical device status value that is the same as the device status value in the historical data, the historical device maintenance frequency corresponding to the historical device status value is used as the current device maintenance frequency; If there is no historical device status value identical to the device status value in the historical data, setting a first status value and a second status value; wherein the first status value is smaller than the second status value; If the device status value is less than or equal to the first status value, using the first maintenance frequency as the device maintenance frequency; If the device status value is greater than the first status value and less than or equal to the second status value, the second maintenance frequency is used as the device maintenance frequency; If the device status value is greater than the second status value, the third maintenance frequency is used as the device maintenance frequency; The first maintenance frequency is greater than the second maintenance frequency, and the second maintenance frequency is greater than the third maintenance frequency.

5. The data processing method for industrial control safety system according to claim 4, characterized in that: The calculation of the network security index based on data encryption and the number of network attacks includes: The encryption status is the percentage of successful data encryption; The network security index is calculated according to the percentage of successful data encryption and the number of network attacks using the following formula: In the above formula, I represents the network security index, E represents the percentage of successful data encryption, A represents the number of network attacks, α represents the encryption adjustment coefficient, and β represents the network attack adjustment coefficient. The value ranges of α and β are both 0-1.

6. The data processing method for industrial control safety system according to claim 5, characterized in that: The determining whether network maintenance is required according to the network security index includes: Setting a minimum value of the network security index, if the network security index is less than or equal to the minimum value of the network security index, determining that network maintenance is required; If the network security index is greater than the minimum network security index value, it is determined that network maintenance is not required.

7. The data processing method for industrial control safety system according to claim 6, characterized in that: When it is determined that the network needs to be maintained, the current network status value is calculated based on the network security index and the network attack response situation, including: The network attack response situation includes attack response time, measure response time, recovery time and recovery success rate; Calculate the average attack response time, average measure response time, average recovery time and recovery success rate; The current network status value is calculated by the following formula: In the above formula, Z represents the network status value, I represents the network security index, Tg represents the average attack response time, Tc represents the average measure response time, Th represents the average recovery time, L represents the recovery success rate, c represents the attack average response time adjustment coefficient, d represents the measure average response time adjustment coefficient, e represents the average recovery time adjustment coefficient, and f represents the recovery success rate adjustment coefficient. The value ranges of c, d, e and f are all 0-1.

8. The data processing method for industrial control safety system according to claim 7, characterized in that: The determining of the network maintenance frequency according to the network status value includes: If there is a historical network status value that is the same as the network status value in the historical data, the historical network maintenance frequency corresponding to the historical network status value is used as the current network maintenance frequency; If there is no historical network status value identical to the network status value in the historical data, setting a first network status value and a second network status value; wherein the first network status value is smaller than the second network status value; If the network status value is less than or equal to the first network status value, using the first network maintenance frequency as the network maintenance frequency; If the network status value is greater than the first network status value and less than or equal to the second network status value, using the second network maintenance frequency as the network maintenance frequency; If the network status value is greater than the second network status value, using the third network maintenance frequency as the network maintenance frequency; The first network maintenance frequency is greater than the second network maintenance frequency, and the second network maintenance frequency is greater than the third network maintenance frequency.

9. The data processing method for industrial control safety system according to claim 8, characterized in that: The method of calculating the comprehensive status value of the industrial control safety system according to the device status value and the network status value, and determining the periodic synchronous maintenance frequency of the device and the network according to the comprehensive status value, includes: The comprehensive status value is the sum of the device status value and the network status value, and the frequency of regular synchronization maintenance of the device and the network is determined according to the sum; Setting a first sum value and a second sum value, wherein the first sum value is smaller than the second sum value; If the comprehensive status value is less than the first sum value, the regular synchronization maintenance frequency is the first frequency; If the comprehensive status value is greater than or equal to the first sum value, and less than or equal to the second sum value, the regular synchronization maintenance frequency is the second frequency; If the comprehensive status value is greater than the second sum value, the regular synchronization maintenance frequency is a third frequency; The first frequency is greater than the second frequency, and the second frequency is greater than the third frequency.

10. A data processing system for an industrial control safety system, used for applying the data processing method for an industrial control safety system as claimed in any one of claims 1 to 9, characterized in that: include: A collection module is configured to collect device data and network data; wherein the device data includes the number of device failures, the frequency of device failures and the success rate of device maintenance; and the network data includes the encryption status of transmitted data, the number of network attacks and the response status of network attacks; an equipment processing module, configured to calculate an equipment reliability index according to the equipment failure number and the equipment failure frequency, calculate an equipment status value according to the equipment reliability index and the equipment maintenance success rate, and determine an equipment maintenance frequency based on a similarity between the equipment status value and historical data; A network processing module is configured to calculate a network security index based on data encryption and the number of network attacks, determine whether network maintenance is required based on the network security index, and when it is determined that network maintenance is required, calculate a current network status value based on the network security index and the network attack response, and determine a network maintenance frequency based on the network status value; The comprehensive processing module is configured to calculate the comprehensive status value of the industrial control safety system according to the device status value and the network status value, and determine the frequency of regular synchronous maintenance of the device and the network according to the comprehensive status value.

Images