Industrial control data security transmission system based on Internet of Things

Abstract

The invention discloses an industrial control data security transmission system based on Internet of Things, and relates to the field of data security transmission, the system comprises an industrial control platform, the industrial control platform is in communication connection with a data acquisition module, a data preprocessing module, a data processing module, a data transmission module and an industrial control module; the data acquisition module is used for acquiring data information; the data preprocessing module is used for acquiring a data type corresponding to the data information; the data processing module is used for encrypting the data information according to different data types of the data information; the data transmission module is used for selecting a corresponding data transmission channel to transmit the data information according to the data type of the data information; according to the data type of the data information, selecting a corresponding data transmission channel to transmit the data information; according to the invention, the security of data transmission in the industrial production process is improved to a certain extent.

Description

Technical Field

[0001] The present invention relates to the field of secure data transmission, and in particular to an industrial control data secure transmission system based on the Internet of Things. Background Art

[0002] With the establishment of the concept of industrial Internet, it has been promoted by the state and developed rapidly. Industrial control has gradually become an indispensable technology in the industrial production process. Industrial control refers to the process of monitoring, adjusting and managing the equipment, machines and systems in the industrial production process by using various hardware and software technologies, so as to ensure the efficiency, stability and safety of the industrial production process. In order to eliminate information islands and faults, it is necessary to connect the industrial control system to the information network, and interconnect with the upper management system through the access to the information network to complete the two-way information exchange between the management layer and the execution layer, so that the enterprise can keep a real-time response to the production situation, thereby achieving efficient production. However, due to the wide variety of data information in the industrial production process, the data information in the production process can only be processed by setting up various control terminals, which reduces the cost of the production process to a certain extent, and the security of data transmission in the production process cannot be ensured through a single encryption method and transmission method; therefore, how to improve the efficiency of the production process and the security of the transmission process is a problem we need to solve. For this reason, a secure transmission system for industrial control data based on the Internet of Things is now provided. Summary of the invention

[0003] In order to solve the above technical problems, the purpose of the present invention is to provide an industrial control data security transmission system based on the Internet of Things.

[0004] The object of the present invention can be achieved by the following technical solutions: An industrial control data security transmission system based on the Internet of Things, comprising an industrial control platform, wherein the industrial control platform is communicatively connected with a data acquisition module, a data preprocessing module, a data processing module, a data transmission module and an industrial control module; The data acquisition module is used to obtain corresponding data information, set a corresponding process subsequence according to the corresponding data information, set a corresponding acquisition monitoring site according to the process subsequence, and acquire data information at a corresponding position of the corresponding acquisition monitoring site; The data preprocessing module is used to obtain data information at corresponding positions of corresponding collection monitoring points, preprocess the data information, and obtain the data type of the corresponding data information; The data processing module is used to set a corresponding security encryption level according to the data type of the corresponding data information, and encrypt the data information; The data transmission module is used to select a corresponding data transmission channel according to the data type of the corresponding data information to transmit it to the industrial control module; The industrial control module is used to obtain the transmitted data information, decrypt it, and obtain a visual diagram of the entire process of the industrial production process based on the data information.

[0005] Furthermore, the process of setting the corresponding data collection terminal on the industrial Internet platform includes: The industrial Internet platform stores historical data information corresponding to the industrial production process, obtains the process flow characteristics of the corresponding industrial production equipment in the industrial production process based on the historical data information, and extracts the corresponding production process information based on its process flow characteristics; sets corresponding data collection points based on the production process information, sets corresponding data collection terminals at the corresponding data collection points, and associates the data collection terminals with the corresponding production process information.

[0006] Furthermore, the process of the data acquisition module acquiring relevant data information includes: The data acquisition module is provided with a data storage unit and a data acquisition unit; The data storage unit obtains the data acquisition terminal generated by the industrial Internet platform, sets the label of the corresponding data acquisition terminal according to the production process information associated with it, and marks the results of the corresponding data acquisition terminal during operation according to the label; The data acquisition unit is associated with the corresponding data acquisition terminal, and the data information collected by the data acquisition unit is marked according to the association result, and a corresponding label is set for the data, and the corresponding data information is uploaded to the data preprocessing module according to the labeling result.

[0007] Furthermore, the data preprocessing module obtains data information at corresponding positions of corresponding collection monitoring points, preprocesses the data information, and obtains the data type of the corresponding data information, including: The data preprocessing module constructs an industrial production detection model based on deep learning, constructs a historical data set according to the production process information of the corresponding labeled data acquisition terminal, divides the historical data set into a training set and a test set, and uses the historical data set to perform real-time training and learning on the industrial production detection model; By inputting the similarity data of the relevant industrial production detection model in the test set, the similarity data of the data is compared and analyzed with the standard similarity data to obtain an error reference value; an error reference threshold is set in the data preprocessing module, and the error reference value obtained from the test set is compared and analyzed with the error reference threshold; when the error reference value is greater than or equal to the error reference threshold, the industrial production detection model is trained again; when the error reference value is less than the error reference threshold, the industrial production detection model completes the training; The data preprocessing module inputs the obtained data information into the corresponding industrial production detection model, outputs the similarity data of the data information, and determines the data type of the corresponding data information according to its similarity data, and the data type includes normal, abnormal and seriously abnormal.

[0008] Furthermore, the data processing module sets a corresponding security encryption level according to different data types of the corresponding data information, and the process of encrypting the data information includes: The data processing module stores complex encryption clusters and simple encryption clusters; The complex encryption cluster is provided with multiple data encryption algorithms, the multiple data encryption algorithms are marked, the obtained marks are set as corresponding data sets, the length N of the data set is determined, and a random number generator is used to generate a range of A random integer between ; using the generated random certificate as the index of the selected data; obtaining the data encryption algorithm in the corresponding complex encryption cluster according to the corresponding index, and the simple encryption cluster selects the corresponding data encryption algorithm according to the above process; The data processing module encrypts data information with normal and abnormal data types using the data encryption algorithms obtained in the complex encryption cluster and the simple encryption cluster, and does not encrypt data information with serious abnormal data types, and sends it to the data transmission module.

[0009] Furthermore, the data transmission module selects a corresponding transmission path to transmit the data information corresponding to the collected monitoring site according to the data type thereof, and the process includes: The data transmission module is provided with a data transmission unit and a data monitoring unit; The data transmission unit is provided with a plurality of data transmission channels, the data transmission channels are provided with a plurality of transmission bandwidths, and the plurality of data transmission channels are respectively set as a common transmission channel and a standby transmission channel; The data monitoring unit is used to monitor the data transmission process of each data transmission channel, obtain its network process information, and determine whether the data transmission path is abnormal according to the network traffic information; the data monitoring unit is provided with a corresponding traffic anomaly threshold according to the transmission bandwidth of the corresponding data transmission channel, and by comparing and analyzing the obtained network traffic information and the corresponding traffic anomaly threshold, when the network traffic information is greater than the traffic anomaly threshold, a transmission anomaly information sending data transmission unit is generated, and the transmission anomaly information includes the corresponding data information and the data transmission channel mark.

[0010] Furthermore, the process of the data transmission unit selecting a corresponding data transmission path for the relevant data information includes: The data transmission unit obtains processed data information, monitors the connection status of each data transmission channel through the minimum connection number algorithm, and distributes the data information to the channel with the least connection; a temporary storage space is provided, and the temporary storage space is used to store data information that has not been successfully transmitted; when the data transmission unit receives corresponding transmission exception information, the data information at the corresponding position of the data transmission channel is deleted; the corresponding data transmission channel is reselected through the minimum connection number algorithm, and the data information in the data transmission channel corresponding to the transmission exception information is retransmitted. When the transmission is successful, the industrial control module generates corresponding feedback information and sends it to the data transmission unit, and the data transmission unit deletes the corresponding data information stored in the temporary storage space according to the received feedback information.

[0011] Furthermore, the process in which the industrial control module obtains the transmitted data information, decrypts it, and obtains a visual diagram of the entire process of the industrial production process according to the data information includes: The industrial control module obtains corresponding data information, decrypts the data information, processes the decrypted data information according to its corresponding data acquisition terminal, obtains a full-process visual diagram of the corresponding production process, maps the data information to the full-process visual diagram according to the data type of the corresponding data information, and the corresponding staff monitors and manages the industrial production process according to the corresponding full-process visual diagram.

[0012] Compared with the prior art, the present invention has the following beneficial effects: 1. According to the production process in the industrial production process, the corresponding data acquisition terminal is set, and the corresponding label is set for it. The industrial control module maps the source of the corresponding data information to the corresponding full-process visual diagram for display according to the label, so as to facilitate the monitoring and management of the production process by the staff; 2. Classify the data types of data information and take different encryption measures according to the type of data information, which not only improves the security of data information, but also improves the efficiency of the data information encryption process to a certain extent; 3. By setting up corresponding data monitoring units to monitor relevant data transmission channels, when there is an abnormality, the data information corresponding to the corresponding data transmission channel is deleted, and the corresponding data transmission channel is reselected for transmission, which improves the security of data information transmission to a certain extent. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] Figure 1 This is a schematic diagram of an industrial control data security transmission system based on the Internet of Things according to an embodiment of the present application. DETAILED DESCRIPTION

[0014] like Figure 1As shown, an industrial control data security transmission system based on the Internet of Things includes an industrial control platform, and the industrial control platform is communicatively connected with a data acquisition module, a data preprocessing module, a data processing module, a data transmission module and an industrial control module; The process of setting up the corresponding data collection terminal on the industrial Internet platform includes: The industrial Internet platform stores historical data information corresponding to the industrial production process, obtains the process flow characteristics of the corresponding industrial production equipment in the industrial production process based on the historical data information, and extracts the corresponding production process information based on its process flow characteristics; sets corresponding data collection points based on the production process information, sets corresponding data collection terminals at the corresponding data collection points, and associates the data collection terminals with the corresponding production process information.

[0015] The process of the data acquisition module collecting relevant data information includes: The data acquisition module is provided with a data storage unit and a data acquisition unit; The data storage unit obtains the data acquisition terminal generated by the industrial Internet platform, sets the label of the corresponding data acquisition terminal according to the production process information associated with it, and marks the results of the corresponding data acquisition terminal during operation according to the label; The data acquisition unit is associated with the corresponding data acquisition terminal, and the data information collected by the data acquisition unit is marked according to the association result, and a corresponding label is set for the data acquisition terminal, and the corresponding data information is uploaded to the data preprocessing module according to the labeling result; It should be further explained that, in the specific implementation process, the data storage unit is used to store the data label of the corresponding data acquisition terminal, and to associate the data storage unit with the corresponding industrial control module. The industrial control module obtains the source of the corresponding data information based on the data stored in the data storage unit, and maps the data information to the corresponding position of the full process visual diagram according to the source of the data information.

[0016] The data preprocessing module obtains data information at corresponding positions of corresponding collection monitoring points, preprocesses the data information, and obtains the data type of the corresponding data information. The process includes: The data preprocessing module constructs an industrial production detection model based on deep learning, constructs a historical data set according to the production process information of the corresponding labeled data acquisition terminal, divides the historical data set into a training set and a test set, and uses the historical data set to perform real-time training and learning on the industrial production detection model; By inputting the similarity data of the relevant industrial production detection model in the test set, the similarity data of the data is compared and analyzed with the standard similarity data to obtain an error reference value; an error reference threshold is set in the data preprocessing module, and the error reference value obtained from the test set is compared and analyzed with the error reference threshold; when the error reference value is greater than or equal to the error reference threshold, the industrial production detection model is trained again; when the error reference value is less than the error reference threshold, the industrial production detection model completes the training; The data preprocessing module inputs the obtained data information into the corresponding industrial production detection model, outputs the similarity data of the data information, and determines the data type of the corresponding data information according to the similarity data, wherein the data type includes normal, abnormal and seriously abnormal; It should be further explained that, in the specific implementation process, the data preprocessing module obtains the data type corresponding to the data information and classifies the data information, so as to facilitate the data processing module to encrypt different types of data, and to a certain extent improve the efficiency of the data processing module in processing the data information. The process of the data preprocessing module judging the type of the data information according to the corresponding similarity data includes: The data preprocessing module stores the similarity intervals of the corresponding data acquisition terminals, and sets the similarity intervals corresponding to the data types of normal, abnormal and severe abnormal as , Where A and B are the corresponding boundary similarity data, and A is smaller than B; the similarity data obtained by the corresponding data information is recorded as C; when When the data type corresponding to the data information is recorded as a serious anomaly; when When the data type corresponding to the data information is abnormal; when , the data type corresponding to the data information is recorded as normal; The data type corresponding to the corresponding data information is sent to the data processing module.

[0017] The data processing module sets a corresponding security encryption level according to different data types of the corresponding data information. The process of encrypting the data information includes: The data processing module stores complex encryption clusters and simple encryption clusters; The complex encryption cluster is provided with multiple data encryption algorithms, the multiple data encryption algorithms are marked, the obtained marks are set as corresponding data sets, the length N of the data set is determined, and a random number generator is used to generate a range of A random integer between ; using the generated random certificate as the index of the selected data; obtaining the data encryption algorithm in the corresponding complex encryption cluster according to the corresponding index, and the simple encryption cluster selects the corresponding data encryption algorithm according to the above process; The data processing module encrypts the data information of normal and abnormal data types respectively by using the data encryption algorithms obtained in the complex encryption cluster and the simple encryption cluster, and does not encrypt the data information of serious abnormal data type, and sends it to the data transmission module; It should be further explained that, in the specific implementation process, the complex encryption cluster includes corresponding strong encryption algorithms, such as ES-128, RSA-2048, etc.; the simple encryption cluster includes corresponding symmetric encryption algorithms and asymmetric encryption algorithms, such as DES, 3DES, etc.; By analyzing and processing data information through non-fixed encryption algorithms, the security of data transmission is improved to a certain extent; The data information corresponding to the normal and abnormal data types are analyzed and processed. The seriously abnormal data information is not encrypted and is directly transmitted, and the corresponding staff takes corresponding measures to improve the processing efficiency of seriously abnormal data information.

[0018] The process of the data transmission module selecting a corresponding transmission path to transmit the data information corresponding to the collected monitoring site according to the data type thereof includes: The data transmission module is provided with a data transmission unit and a data monitoring unit; The data transmission unit is provided with a plurality of data transmission channels, the data transmission channels are provided with a plurality of transmission bandwidths, and the plurality of data transmission channels are respectively set as a common transmission channel and a standby transmission channel; The data monitoring unit is used to monitor the data transmission process of each data transmission channel, obtain its network process information, and determine whether the data transmission path is abnormal according to the network traffic information; the data monitoring unit is provided with a corresponding traffic anomaly threshold according to the transmission bandwidth of the corresponding data transmission channel, and by comparing and analyzing the obtained network traffic information and the corresponding traffic anomaly threshold, when the network traffic information is greater than the traffic anomaly threshold, a transmission anomaly information sending data transmission unit is generated, and the transmission anomaly information includes the corresponding data information and the data transmission channel mark.

[0019] The process of the data transmission unit selecting a corresponding data transmission path for relevant data information includes: The data transmission unit obtains processed data information, monitors the connection status of each data transmission channel through the minimum connection number algorithm, and distributes the data information to the channel with the least connection; a temporary storage space is provided, and the temporary storage space is used to store data information that has not been successfully transmitted; when the data transmission unit receives corresponding transmission exception information, the data information at the corresponding position of the data transmission channel is deleted; the corresponding data transmission channel is reselected through the minimum connection number algorithm, and the data information in the data transmission channel corresponding to the transmission exception information is retransmitted. When the transmission is successful, the industrial control module generates corresponding feedback information and sends it to the data transmission unit, and the data transmission unit deletes the corresponding data information stored in the temporary storage space according to the received feedback information.

[0020] The process of the industrial control module acquiring the transmitted data information, decrypting it, and acquiring a visual diagram of the entire process of the industrial production process according to the data information includes: The industrial control module obtains the corresponding data information, decrypts the data information, processes the decrypted data information according to the corresponding data acquisition terminal, obtains the full process visual diagram of the corresponding production process, maps the corresponding data information to the full process visual diagram according to the data type of the corresponding data information, and the corresponding staff monitors and manages the industrial production process according to the corresponding full process visual diagram; It should be further explained that, in the specific implementation process, the corresponding data information will be mapped to the full-process visual diagram according to its data type. To facilitate the staff's visualization processing, severely abnormal data information will be marked in red, abnormal data information will be marked in orange, and normal data information will be marked in green. The corresponding mapping position will be set for the relevant data information according to the data information stored in the corresponding data storage unit.

[0021] The above embodiments are only used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical method of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical method of the present invention.

Claims

1. An industrial control data security transmission system based on the Internet of Things, including an industrial control platform, characterized in that: The industrial control platform is communicatively connected with a data acquisition module, a data preprocessing module, a data processing module, a data transmission module and an industrial control module; The data acquisition module is used to obtain corresponding data information, set a corresponding process subsequence according to the corresponding data information, set a corresponding acquisition monitoring site according to the process subsequence, and acquire data information at a corresponding position of the corresponding acquisition monitoring site; The data preprocessing module is used to obtain data information at corresponding positions of corresponding collection monitoring points, preprocess the data information, and obtain the data type of the corresponding data information; The data processing module is used to set the corresponding security encryption level according to the data type of the corresponding data information, and encrypt the data information; The data transmission module is used to select a corresponding data transmission channel according to the data type of the corresponding data information to transmit it to the industrial control module; The industrial control module is used to obtain the transmitted data information, decrypt it, and obtain a visual diagram of the entire process of the industrial production process based on the data information.

2. According to the Internet of Things-based industrial control data security transmission system of claim 1, it is characterized in that: The process of setting up the corresponding data collection terminal on the industrial Internet platform includes: The industrial Internet platform stores historical data information corresponding to the industrial production process, obtains the process flow characteristics of the corresponding industrial production equipment in the industrial production process based on the historical data information, and extracts the corresponding production process information based on its process flow characteristics; sets corresponding data collection points based on the production process information, sets corresponding data collection terminals at the corresponding data collection points, and associates the data collection terminals with the corresponding production process information.

3. According to the Internet of Things-based industrial control data security transmission system of claim 2, it is characterized in that: The process of the data acquisition module collecting relevant data information includes: The data acquisition module is provided with a data storage unit and a data acquisition unit; The data storage unit obtains the data acquisition terminal generated by the industrial Internet platform, sets the label of the corresponding data acquisition terminal according to the production process information associated with it, and marks the results of the corresponding data acquisition terminal during operation according to the label; The data acquisition unit is associated with the corresponding data acquisition terminal, and the data information collected by the data acquisition unit is marked according to the association result, and a corresponding label is set for the data, and the corresponding data information is uploaded to the data preprocessing module according to the labeling result.

4. According to the Internet of Things-based industrial control data security transmission system of claim 3, it is characterized in that: The data preprocessing module obtains data information at corresponding positions of corresponding collection monitoring points, preprocesses the data information, and obtains the data type of the corresponding data information. The process includes: The data preprocessing module constructs an industrial production detection model based on deep learning, constructs a historical data set according to the production process information of the corresponding labeled data acquisition terminal, divides the historical data set into a training set and a test set, and uses the historical data set to perform real-time training and learning on the industrial production detection model; By inputting the similarity data of the relevant industrial production detection model in the test set, the similarity data of the data is compared and analyzed with the standard similarity data to obtain an error reference value; an error reference threshold is set in the data preprocessing module, and the error reference value obtained from the test set is compared and analyzed with the error reference threshold; when the error reference value is greater than or equal to the error reference threshold, the industrial production detection model is trained again; when the error reference value is less than the error reference threshold, the industrial production detection model completes the training; The data preprocessing module inputs the obtained data information into the corresponding industrial production detection model, outputs the similarity data of the data information, and determines the data type of the corresponding data information according to its similarity data, and the data type includes normal, abnormal and seriously abnormal.

5. The industrial control data security transmission system based on the Internet of Things according to claim 4 is characterized in that: The data processing module sets a corresponding security encryption level according to different data types of the corresponding data information. The process of encrypting the data information includes: The data processing module stores complex encryption clusters and simple encryption clusters; The complex encryption cluster is provided with multiple data encryption algorithms, the multiple data encryption algorithms are marked, the obtained marks are set as corresponding data sets, the length N of the data set is determined, and a random number generator is used to generate a range of A random integer between ; using the generated random certificate as the index of the selected data; obtaining the data encryption algorithm in the corresponding complex encryption cluster according to the corresponding index, and the simple encryption cluster selects the corresponding data encryption algorithm according to the above process; The data processing module encrypts data information with normal and abnormal data types using the data encryption algorithms obtained in the complex encryption cluster and the simple encryption cluster, and does not encrypt data information with serious abnormal data types, and sends it to the data transmission module.

6. The industrial control data security transmission system based on the Internet of Things according to claim 5 is characterized in that: The process of the data transmission module selecting a corresponding transmission path to transmit the data information corresponding to the collected monitoring site according to the data type thereof includes: The data transmission module is provided with a data transmission unit and a data monitoring unit; The data transmission unit is provided with a plurality of data transmission channels, the data transmission channels are provided with a plurality of transmission bandwidths, and the plurality of data transmission channels are respectively set as a common transmission channel and a standby transmission channel; The data monitoring unit is used to monitor the data transmission process of each data transmission channel, obtain its network process information, and determine whether the data transmission path is abnormal according to the network traffic information; the data monitoring unit is provided with a corresponding traffic anomaly threshold according to the transmission bandwidth of the corresponding data transmission channel, and by comparing and analyzing the obtained network traffic information and the corresponding traffic anomaly threshold, when the network traffic information is greater than the traffic anomaly threshold, a transmission anomaly information sending data transmission unit is generated, and the transmission anomaly information includes the corresponding data information and the data transmission channel mark.

7. The industrial control data security transmission system based on the Internet of Things according to claim 6 is characterized in that: The process of the data transmission unit selecting a corresponding data transmission path for relevant data information includes: The data transmission unit obtains processed data information, monitors the connection status of each data transmission channel through the minimum connection number algorithm, and distributes the data information to the channel with the least connection; a temporary storage space is provided, and the temporary storage space is used to store data information that has not been successfully transmitted; when the data transmission unit receives corresponding transmission exception information, the data information at the corresponding position of the data transmission channel is deleted; the corresponding data transmission channel is reselected through the minimum connection number algorithm, and the data information in the data transmission channel corresponding to the transmission exception information is retransmitted. When the transmission is successful, the industrial control module generates corresponding feedback information and sends it to the data transmission unit, and the data transmission unit deletes the corresponding data information stored in the temporary storage space according to the received feedback information.

8. The industrial control data security transmission system based on the Internet of Things according to claim 7 is characterized in that: The process of the industrial control module acquiring the transmitted data information, decrypting it, and acquiring a visual diagram of the entire process of the industrial production process according to the data information includes: The industrial control module obtains corresponding data information, decrypts the data information, processes the decrypted data information according to its corresponding data acquisition terminal, obtains a full-process visual diagram of the corresponding production process, maps the data information to the full-process visual diagram according to the data type of the corresponding data information, and the corresponding staff monitors and manages the industrial production process according to the corresponding full-process visual diagram.

Images