Trust verification method and device, electronic equipment, storage medium and program product

Abstract

The invention discloses a trust verification method and device, electronic equipment, a storage medium and a program product. The specific implementation scheme comprises the following steps: determining an initial trust list corresponding to the industrial control system, obtaining a transmission request initiated by a request transmission terminal and a transmission terminal address code included in the transmission request, matching each terminal public key in the initial trust list with the transmission terminal address code, and sending the matching result to the industrial control system; and obtaining a matching result of the industrial control system and the request transmission terminal, and determining a trust verification result of the request transmission terminal according to the matching result. The initial trust list is automatically generated, manual intervention is reduced, the maintenance cost is reduced, and unique identification and management of the request transmission terminal are realized. By determining the trust verification result of the request transmission terminal, it is ensured that only the request transmission terminal trusted by the industrial control system can communicate, potential security threats are effectively prevented, and it is ensured that the industrial control system can communicate safely and effectively in a resource-limited environment.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a trust verification method, device, electronic device, storage medium and program product. Background Art

[0002] In modern industrial control systems, the security of industrial control terminal devices is crucial because industrial control systems usually operate in resource-constrained environments, such as those with limited memory and processing power.

[0003] In resource-constrained environments, existing security mechanisms for industrial control terminal devices often require manual intervention, and the management of these devices is complex and difficult to implement directly. When an industrial control terminal device needs to communicate with an industrial control system, it is difficult to identify which one is trustworthy. This exposes the industrial control system to abnormal behavior or attacks, resulting in resource loss. Summary of the Invention

[0004] The present invention provides a trust verification method, device, electronic device, storage medium and program product to verify a device requesting to communicate with an industrial control system, thereby improving the security of the operation of the industrial control system.

[0005] According to one aspect of the present invention, a trust verification method is provided, comprising:

[0006] Determine an initial trust list corresponding to an industrial control system, wherein the industrial control system includes at least one sub-industrial control terminal, and the initial trust list stores a terminal public key of each sub-industrial control terminal;

[0007] Acquire a transmission request initiated by a transmission requesting terminal, and the transmission terminal address code included in the transmission request;

[0008] Matching the public keys of the terminals in the initial trust list with the address code of the transmission terminal to obtain a matching result between the industrial control system and the requesting transmission terminal;

[0009] A trust verification result of the transmission requesting terminal is determined according to the matching result, where the trust verification result indicates whether the transmission requesting terminal can communicate with the industrial control system.

[0010] According to another aspect of the present invention, there is provided a trust verification device, comprising:

[0011] A first determining module is configured to determine an initial trust list corresponding to an industrial control system, wherein the industrial control system includes at least one sub-industrial control terminal, and the initial trust list stores a terminal public key of each sub-industrial control terminal;

[0012] An acquisition module, configured to acquire a transmission request initiated by a transmission requesting terminal, and an address code of the transmission terminal included in the transmission request;

[0013] a matching module, configured to match the public key of each terminal in the initial trust list with the address code of the transmission terminal to obtain a matching result between the industrial control system and the requesting transmission terminal;

[0014] The second determining module is configured to determine a trust verification result of the transmission requesting terminal according to the matching result, wherein the trust verification result indicates whether the transmission requesting terminal can communicate with the industrial control system.

[0015] According to another aspect of the present invention, an electronic device is provided, comprising:

[0016] at least one processor; and

[0017] a memory communicatively connected to the at least one processor; wherein,

[0018] The memory stores a computer program that can be executed by the at least one processor. The computer program is executed by the at least one processor so that the at least one processor can perform the trust verification method described in any embodiment of the present invention.

[0019] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the trust verification method described in any embodiment of the present invention when executed.

[0020] According to another aspect of the present invention, a computer program product is provided. The computer program product includes a computer program. When the computer program is executed by a processor, the trust verification method according to any embodiment of the present invention is implemented.

[0021] The technical solution of an embodiment of the present invention determines an initial trust list corresponding to an industrial control system, obtains a transmission request initiated by a requesting transmission terminal and the transmission terminal address code included in the transmission request, matches the public keys of each terminal in the initial trust list with the transmission terminal address code, and obtains a matching result between the industrial control system and the requesting transmission terminal. Based on the matching result, a trust verification result of the requesting transmission terminal is determined, and the trust verification result indicates whether the requesting transmission terminal can communicate with the industrial control system. By determining the initial trust list corresponding to the industrial control system, the initial trust list is automatically generated, reducing manual intervention and lowering maintenance costs. The transmission terminal address code of the requesting transmission terminal is obtained, enabling unique identification and management of the requesting transmission terminal. By determining the trust verification result of the requesting transmission terminal, it is ensured that only requesting transmission terminals trusted by the industrial control system can communicate, effectively preventing potential security threats and ensuring that the industrial control system can communicate securely and effectively in a resource-constrained environment.

[0022] It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present invention, nor is it intended to limit the scope of the present invention. Other features of the present invention will become readily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0024] Figure 1 This is a flowchart of a trust verification method provided according to the first embodiment of the present invention;

[0025] Figure 2 This is a flowchart of a method for determining a trust verification result according to a second embodiment of the present invention;

[0026] Figure 3 This is a structural diagram of a trust verification device provided according to Embodiment 3 of the present invention;

[0027] Figure 4 This is a block diagram of an electronic device provided according to a fourth embodiment of the present invention. DETAILED DESCRIPTION

[0028] In order to enable those skilled in the art to better understand the solutions of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the embodiments described are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of the present invention.

[0029] It should be noted that the terms "first", "second", etc. in the description and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0030] Example 1

[0031] Figure 1 A flowchart of a trust verification method is provided for the first embodiment of the present invention. This embodiment is applicable to the case where trust verification is performed on a requesting transmission terminal. The method can be executed by a trust verification device, which can be implemented in the form of hardware and / or software. The trust verification device can be configured in an electronic device, which can be an industrial control system, etc. Figure 1 As shown, the method includes:

[0032] S110: Determine an initial trust list corresponding to the industrial control system.

[0033] The industrial control system includes at least one sub-industrial control terminal, and the initial trust list stores the terminal public key of each sub-industrial control terminal.

[0034] In this embodiment, an industrial control system can be understood as a system used to manage equipment and processes in an industrial environment. Devices within the industrial control system can be sub-industrial control terminals. An industrial control system can include at least one trusted sub-industrial control terminal. Initial trust can be understood as a database system used to record and manage trusted devices. Sub-industrial control terminals can be understood as devices that have been trusted by the industrial control system. Sub-industrial control terminals can communicate with each other through the industrial control system. A terminal public key can be understood as an identifier used to uniquely identify a sub-industrial control terminal. The terminal public key can be made public and used to encrypt data corresponding to communication with the sub-industrial control terminal or to verify the identity of the sub-industrial control terminal.

[0035] Specifically, for each of the industrial control terminals in the industrial control system, a terminal public key is determined. This terminal public key uniquely identifies each terminal. The terminal public keys corresponding to the industrial control terminals in the industrial control system are stored in an initial trust list, which is then sent to each terminal.

[0036] For example, the initial trust list is pre-set to ensure that only authorized slave industrial control terminals can participate in subsequent communication processes. During the communication process of the industrial control system, the initial trust list can be updated in real time.

[0037] S120: Acquire a transmission request initiated by a transmission requesting terminal and a transmission terminal address code included in the transmission request.

[0038] In this embodiment, a requesting transmission terminal can be understood as a device that initiates a transmission request to an industrial control system. The requesting transmission terminal can initiate a transmission request to any sub-industrial control terminal in the industrial control system. A transmission request can be understood as a request initiated by the requesting transmission terminal to the industrial control system to communicate with the industrial control system. The transmission request can include a transmission terminal address code identifying the requesting transmission terminal and the content of the transmission request. The transmission terminal address code can be understood as an identifier used to uniquely identify the requesting transmission terminal. The transmission terminal address code can be an identifier such as a physical address or serial number.

[0039] Specifically, when a requesting transmission terminal initiates a transmission request, the industrial control system will first refer to an initial trust list, which contains the terminal public keys of all sub-control terminals that are recognized by the industrial control system as trustworthy. At this time, the transmission request provides at least three types of information about the requesting transmission terminal, including: an encrypted transmission terminal address code, the content requested for transmission, and the public key corresponding to the transmission terminal. The encrypted transmission terminal address code is intended to protect the true identity of the requesting transmission terminal and prevent unauthorized eavesdroppers from obtaining information about the requesting transmission terminal. After the industrial control terminal receives the transmission request, it can use the public key corresponding to the transmission terminal to decrypt the encrypted transmission terminal address code to obtain the transmission terminal address code.

[0040] S130: Match the public key of each terminal in the initial trust list with the address code of the transmission terminal to obtain a matching result between the industrial control system and the terminal requesting transmission.

[0041] In this embodiment, the matching result can be understood as the matching result between the transmission terminal address code corresponding to the requesting transmission terminal and the initial trust list corresponding to the industrial control system. The matching result includes a matching success or a matching failure.

[0042] Specifically, the transmission terminal address code is used to verify the identity of the terminal requesting transmission. This code can be matched against the terminal public key in the initial trust list. If the transmission terminal address code matches the initial trust list, the industrial control system is considered to be a successful match with the terminal requesting transmission. If the transmission terminal address code fails to match the initial trust list, the industrial control system is considered to be a failed match with the terminal requesting transmission.

[0043] S140: Determine a trust verification result of the terminal requesting transmission according to the matching result.

[0044] The trust verification result indicates whether the request transmission terminal can communicate with the industrial control system.

[0045] In this embodiment, the trust verification result can be understood as a verification result of whether the industrial control system trusts the terminal requesting transmission.

[0046] Specifically, if the matching result indicates that the industrial control system and the requesting transmission terminal are successfully matched, it means that the requesting transmission terminal is a device trusted by the industrial control system. The industrial control system can then receive transmission requests initiated by the requesting transmission terminal, and the requesting transmission terminal can communicate with the industrial control system. If the matching result indicates that the industrial control system and the requesting transmission terminal are unmatched, it is impossible to determine whether the requesting transmission terminal is a device trusted by the industrial control system. Further information on transmission activities trusted by the industrial control system must be obtained to determine whether the requesting transmission terminal can communicate with the industrial control system.

[0047] The technical solution of an embodiment of the present invention determines an initial trust list corresponding to an industrial control system, obtains a transmission request initiated by a requesting transmission terminal and the transmission terminal address code included in the transmission request, matches the public keys of each terminal in the initial trust list with the transmission terminal address code, and obtains a matching result between the industrial control system and the requesting transmission terminal. Based on the matching result, a trust verification result of the requesting transmission terminal is determined, and the trust verification result indicates whether the requesting transmission terminal can communicate with the industrial control system. By determining the initial trust list corresponding to the industrial control system, the initial trust list is automatically generated, reducing manual intervention and lowering maintenance costs. The transmission terminal address code of the requesting transmission terminal is obtained, enabling unique identification and management of the requesting transmission terminal. By determining the trust verification result of the requesting transmission terminal, it is ensured that only requesting transmission terminals trusted by the industrial control system can communicate, effectively preventing potential security threats and ensuring that the industrial control system can communicate securely and effectively in a resource-constrained environment.

[0048] Based on the above embodiment, a modified embodiment of the above embodiment is proposed. It should be noted that, in order to simplify the description, only the differences from the above embodiment are described in the modified embodiment.

[0049] In one embodiment, after determining the trust verification result of the requesting transmission terminal according to the matching result, the method further includes:

[0050] If the trust verification result indicates that the requesting transmission terminal can communicate with the industrial control system, determining a transmission terminal public key of the requesting transmission terminal, wherein the transmission terminal public key includes the transmission terminal address code;

[0051] The transmission terminal public key is added to the initial trust list to obtain an updated initial trust list.

[0052] In this embodiment, the transmission terminal public key can be understood as an identifier used to uniquely identify the transmission requesting terminal, and the transmission terminal public key can be generated from the transmission terminal address code.

[0053] Specifically, if the trust verification result indicates that the requesting transmission terminal can communicate with the industrial control system, it indicates that the requesting transmission terminal is a device trusted by the industrial control system. The public key corresponding to the transmission terminal and the transmission terminal address code can be combined to obtain the transmission terminal public key. The transmission terminal public key is then added to the initial trust list, completing the update of the initial trust list and obtaining an updated initial trust list.

[0054] For example, the requesting transmission terminal is processed and its transmission terminal public key is obtained to ensure unique identification of the requesting transmission terminal. The obtained transmission terminal public key of the requesting transmission terminal is added to the initial trust list. The initial trust list serves as a reference for the system to identify and trust devices. By adding the transmission terminal public key of a newly trusted requesting transmission terminal, the security and flexibility of the industrial control system can be enhanced. Once added, the initial trust list is updated, and the industrial control system will be able to identify and trust the newly added requesting transmission terminal, allowing it to conduct subsequent communications and data exchange.

[0055] In one embodiment, determining the initial trust list corresponding to the industrial control system includes:

[0056] For each sub-industrial control terminal in the industrial control system, generating a terminal public key corresponding to the sub-industrial control terminal, wherein the terminal public key includes an address code of the sub-industrial control terminal corresponding to the sub-industrial control terminal;

[0057] An initial trust list corresponding to the industrial control system is generated based on the terminal public key corresponding to each of the sub-industrial control terminals.

[0058] In this embodiment, the sub-industrial control terminal address code can be understood as an identifier for uniquely identifying the sub-industrial control terminal. The sub-industrial control terminal address code can be combined with the public key corresponding to the sub-industrial control terminal to generate a terminal public key.

[0059] Specifically, for each sub-industrial control terminal in the industrial control system, an asymmetric encryption algorithm can be used to generate an identity for each sub-industrial control terminal. The identity consists of a terminal public key and a terminal private key. This identity can be formed by a base key generated based on an encryption algorithm and then associated with an address code or trust root to form the final identity, which is equivalent to a paired key. The terminal public key can be made public and used to encrypt data or verify the identity of the sub-industrial control terminal. The terminal private key must be kept strictly confidential and is used to decrypt or sign data. The terminal public key in the identity is generated into an initial trust list, which is then sent to all sub-industrial control terminals.

[0060] For example, when building a secure industrial control system, to ensure the unique and verifiable identity of each slave industrial control terminal, an identity generation method based on a root of trust and an address code can be employed. The method includes the following steps: first, creating a root of trust for the industrial control system. The root of trust is the foundation of industrial control system security and can be a root certificate or a root key. It is used to verify the validity of all other keys and certificates in the industrial control system. Second, each slave industrial control terminal has a unique address code. This address code can be a physical address, serial number, or any other identifier that uniquely identifies the terminal. The address code ensures the unique identity of each slave industrial control terminal. Then, an asymmetric encryption algorithm is used to generate a pair of keys for each slave industrial control terminal, consisting of a public key and a private key. Asymmetric encryption algorithms are characterized by the public key being publicly available while the private key must be kept secret. Finally, the address code is associated with the public key, associating the address code of each slave industrial control terminal with its corresponding public key. The address code can be embedded in a public key certificate, or the binding of the public key and address code can be ensured by other means. Associating the root of trust with the private key and associating the root of trust with the private key of each sub-industrial control terminal means that the root of trust can be used to sign the private key, or the root of trust can be used to ensure the secure distribution and storage of the private key.

[0061] Optionally, after generating the initial trust list corresponding to the industrial control system, the method further includes:

[0062] Acquiring operation status data corresponding to each of the sub-industrial control terminals in the industrial control system, wherein the operation status data includes data indicating a status of each of the sub-industrial control terminals;

[0063] For each sub-industrial control terminal, the trust level of the sub-industrial control terminal is determined according to the operating status data corresponding to the sub-industrial control terminal, and the trust evaluation result of the sub-industrial control terminal is judged by the trust level. If the trust evaluation result indicates that the sub-industrial control terminal has failed the trust evaluation, the terminal public key corresponding to the sub-industrial control terminal is removed from the initial trust list.

[0064] In this embodiment, the operating status data is key information indicating the operating status of the sub-industrial control terminal, including but not limited to CPU utilization, memory usage, and network connection status. The operating status data can reflect the performance status and potential security risks of the sub-industrial control terminal. For example, if the CPU utilization of a sub-industrial control terminal remains high for a long time, it may indicate that the sub-industrial control terminal is processing an abnormal task or is under attack; abnormal fluctuations in memory usage may also indicate a potential security threat; and abnormal changes in network connection status, such as frequent disconnections or unknown external connection attempts, also require attention. The trust level can be understood as a parameter indicating the different trust states of the industrial control system for the sub-industrial control terminal. The trust level can be multiple levels, such as high, medium, low, or more detailed divisions. A high trust level means that the sub-industrial control terminal is operating normally and has high security; while a low trust level means that there may be security risks or performance issues. The trust assessment result can be understood as the judgment result of whether the sub-industrial control terminal has passed the trust assessment.

[0065] Specifically, the system first collects and analyzes the operational status data of the slave ICP terminals, including CPU utilization, memory usage, and network connectivity. Network connectivity is a key factor in assessing the security of slave ICP terminals. Network connectivity includes the number of network connections and bandwidth usage. The number of network connections can determine whether the slave ICP terminal is establishing an unusually high number of connections, which could indicate an attack or malware infection. Bandwidth usage shows the total amount of data transmitted by the slave ICP terminal over a given period of time. Abnormal bandwidth usage may indicate a data leak or malicious communication.

[0066] After acquiring operational status data, a trust score is determined for each slave industrial control terminal. This score is calculated based on pre-set rules and thresholds. For example, if CPU utilization exceeds a certain percentage for a prolonged period, or if memory usage exceeds the normal range, the trust score will be lowered. Similarly, an abnormal increase in the number of network connections or bandwidth usage exceeding the normal range will also negatively impact the trust score.

[0067] After obtaining the trust score for each child industrial control terminal, the trust level of the child industrial control terminal is determined based on the trust score, and the trust level is used to judge the trust assessment result of the child industrial control terminal. The trust level can be divided into three levels: first trust level, second trust level, and third trust level, with the third trust level being the highest, the second trust level being the second, and the first trust level being the lowest.

[0068] The specific method includes: detecting the number of network connections of the sub-industrial control terminal and comparing it with the preset number of connections. The number of network connections can be understood as the number of connections between the industrial control system and other sub-industrial control terminals. The preset number of connections can be a set number. When the number of network connections of the sub-industrial control terminal is less than the preset number of connections, only when the trust level of the sub-industrial control terminal reaches the third trust level, the trust assessment result indicates that the sub-industrial control terminal has passed the trust assessment. When the trust level is the first or second trust level, the trust assessment result indicates that the sub-industrial control terminal has failed the trust assessment. When the number of network connections of the sub-industrial control terminal is greater than or equal to the preset number of connections, as long as the trust level of the sub-industrial control terminal is the second trust level or the third trust level, the trust assessment result indicates that the sub-industrial control terminal has passed the trust assessment. When the trust level is only the first trust level, the trust assessment result indicates that the sub-industrial control terminal has failed the trust assessment.

[0069] If the trust evaluation result indicates that the sub-industrial control terminal has passed the trust evaluation, the sub-industrial control terminal can be considered safe and reliable, and it can be allowed to continue to participate in network communications and data exchange. If the trust evaluation result indicates that the sub-industrial control terminal has failed the trust evaluation, it means that the sub-industrial control terminal needs to be isolated, and the terminal public key corresponding to the sub-industrial control terminal can be removed from the initial trust list.

[0070] For example, the trust score can be determined according to the following formula:

[0071] Q=q1×(C0-C)+q2×(U0-U)+q3×(D0-D)

[0072] Where Q represents the trust score, q1, q2, and q3 represent weight coefficients, C0 represents the CPU usage threshold, C represents the CPU usage, U0 represents the memory usage threshold, U represents the memory usage, D0 represents the bandwidth usage threshold, and D represents the bandwidth usage.

[0073] In one embodiment, matching the public keys of the terminals in the initial trust list with the address code of the transmission terminal to obtain a matching result between the industrial control system and the requesting transmission terminal includes:

[0074] If the transmission terminal address code successfully matches one of the terminal public keys, it is considered that the matching result between the industrial control system and the requesting transmission terminal is a successful match;

[0075] Otherwise, it is considered that the matching result between the industrial control system and the request transmission terminal is a matching failure.

[0076] For example, if the transmission terminal address code successfully matches a terminal public key in the initial trust list, this indicates that the requesting transmission terminal is a member of the initial trust list and is an authorized device, indicating a successful match. In this case, the industrial control system will determine that the requesting transmission terminal has passed trust verification and allow it to proceed with subsequent communication operations. Conversely, if the transmission terminal address code does not match any terminal public key in the initial trust list, this indicates that the requesting transmission terminal is not a member of the initial trust list. Therefore, the industrial control system will determine that the requesting transmission terminal has failed trust verification, indicating a match failure.

[0077] Example 2

[0078] Figure 2 This is a flowchart of a method for determining a trust verification result provided by the second embodiment of the present invention. This embodiment is based on the method for determining the trust verification result in the above embodiment. Figure 2 As shown, the method includes:

[0079] S210: Determine an initial trust list corresponding to the industrial control system.

[0080] S220: Acquire a transmission request initiated by the transmission requesting terminal and the transmission terminal address code included in the transmission request.

[0081] S230 , matching the public key of each terminal in the initial trust list with the address code of the transmission terminal to obtain a matching result between the industrial control system and the requesting transmission terminal, and executing S240 or S250 .

[0082] S240: When the matching result indicates that the industrial control system and the request transmission terminal are successfully matched, determine that the trust verification result is that the request transmission terminal can communicate with the industrial control system.

[0083] Specifically, if the transmission terminal's address code successfully matches the terminal's public key in the initial trust list, this indicates that the requesting transmission terminal is indeed a trusted device by the industrial control system (i.e., an authorized device). Therefore, the matching result indicates that the industrial control system and the requesting transmission terminal have successfully matched. The trust verification result indicates that the requesting transmission terminal has passed the trust verification, allowing the requesting transmission terminal to perform subsequent transmission operations with the industrial control system.

[0084] S250: When the matching result indicates that the industrial control system fails to match the transmission requesting terminal, determine a trust verification result of the transmission requesting terminal according to a historical transmission record of the industrial control system.

[0085] In this embodiment, historical transmission records can be understood as records stored in a database or log file. The historical transmission records contain detailed information on all successful data transmission activities of the industrial control system in the past, which may include transmission time, transmission terminal address code, type and size of transmitted data, and other information.

[0086] Specifically, if the transmission terminal address code fails to match the terminal public key in the initial trust list, it is necessary to obtain the historical transmission record of the industrial control system and determine the trust verification result of the requesting transmission terminal based on the matching result between the historical transmission record and the requesting transmission terminal.

[0087] Optionally, determining the trust verification result of the terminal requesting transmission according to the historical transmission record of the industrial control system includes:

[0088] Acquiring a historical transmission record of the industrial control system, wherein the historical transmission record includes information about transmission activities that have successfully communicated with the industrial control system;

[0089] If the historical transmission record successfully matches the transmission terminal address code, determining that the trust verification result is that the requesting transmission terminal can communicate with the industrial control system;

[0090] In the case that the historical transmission record fails to match the transmission terminal address code, the trust verification result of the transmission requesting terminal is determined according to the pending transmission plan of the industrial control system.

[0091] In this embodiment, the pending transmission plan can be understood as information about the transmission activity to be performed to communicate with the industrial control system. The pending transmission plan may include the upcoming data transmission activity, including information such as a predetermined transmission terminal address code.

[0092] Specifically, historical transmission records stored in a database or log file are obtained, and the transmission terminal address code of the requesting transmission terminal is matched with the historical transmission records. If the historical transmission record and the transmission terminal address code successfully match, it indicates that the transmission terminal address code exists in the historical transmission record and corresponds to a known, legal transmission activity. This means that the requesting transmission terminal and the industrial control system have had legal transmission activities in the past. Therefore, the trust verification result is determined to be that the requesting transmission terminal can communicate with the industrial control system. If the historical transmission record and the transmission terminal address code fail to match, the trust verification result of the requesting transmission terminal is determined based on the industrial control system's pending transmission plan.

[0093] Optionally, determining the trust verification result of the terminal requesting transmission according to the pending transmission plan of the industrial control system includes:

[0094] Acquire a pending transmission plan of the industrial control system, wherein the pending transmission plan includes information of a transmission activity to be performed to communicate with the industrial control system;

[0095] In the case where the to-be-transmitted plan successfully matches the address code of the transmission terminal, determining that the trust verification result is that the requesting transmission terminal can communicate with the industrial control system;

[0096] In the case where the to-be-transmitted plan fails to match the address code of the transmission terminal, the trust verification result is determined to be that the industrial control system refuses to communicate with the transmission requesting terminal.

[0097] Specifically, if the transmission terminal address code of the terminal requesting transmission does not find a successful match in the historical transmission records, it is necessary to further check the transmission plan of the industrial control system and match the transmission terminal address code of the terminal requesting transmission with the transmission plan. If the transmission plan and the transmission terminal address code successfully match, it means that the terminal requesting transmission has a legitimate transmission task to be executed, and the trust verification result can be determined to be that the terminal requesting transmission can communicate with the industrial control system. If the transmission plan and the transmission terminal address code fail to match, the trust verification result is determined to be that the industrial control system refuses to communicate with the terminal requesting transmission. At this time, the industrial control system will take corresponding security measures for the terminal requesting transmission to facilitate further manual review and other operations.

[0098] The technical solution of the embodiment of the present invention refines the method for determining the trust verification result of the request transmission terminal based on the matching result. If the matching result indicates that the industrial control system and the request transmission terminal are successfully matched, the trust verification result is determined to be that the request transmission terminal can communicate with the industrial control system. If the matching result indicates that the industrial control system and the request transmission terminal are unmatched, the trust verification result of the request transmission terminal is determined based on the historical transmission records of the industrial control system. This ensures that only request transmission terminals that have successfully matched can communicate with the industrial control system, thereby ensuring the security and reliability of the industrial control system. If the industrial control system fails to match the request transmission terminal, the historical transmission records of the industrial control system are continued to be obtained to verify the request transmission terminal, thereby maximizing the communication of the request transmission terminal.

[0099] Example 3

[0100] Figure 3 This is a structural diagram of a trust verification device provided by the third embodiment of the present invention. Figure 3 As shown, the device includes:

[0101] The first determining module 310 is configured to determine an initial trust list corresponding to an industrial control system, wherein the industrial control system includes at least one sub-industrial control terminal, and the initial trust list stores the terminal public key of each sub-industrial control terminal.

[0102] The acquisition module 320 is configured to acquire a transmission request initiated by a transmission requesting terminal and the transmission terminal address code included in the transmission request.

[0103] The matching module 330 is configured to match the public keys of the terminals in the initial trust list with the address codes of the transmission terminals to obtain a matching result between the industrial control system and the transmission requesting terminal.

[0104] The second determining module 340 is configured to determine a trust verification result of the transmission requesting terminal according to the matching result, where the trust verification result indicates whether the transmission requesting terminal can communicate with the industrial control system.

[0105] The trust verification device of an embodiment of the present invention determines an initial trust list corresponding to an industrial control system through a first determination module, obtains a transmission request initiated by a requesting transmission terminal and the transmission terminal address code included in the transmission request through an acquisition module, matches the public keys of each terminal in the initial trust list with the transmission terminal address code through a matching module to obtain a matching result between the industrial control system and the requesting transmission terminal, and determines a trust verification result for the requesting transmission terminal based on the matching result through a second determination module. The trust verification result indicates whether the requesting transmission terminal can communicate with the industrial control system. Through the coordination of the modules, the initial trust list corresponding to the industrial control system is determined, achieving automated generation of the initial trust list, reducing manual intervention and lowering maintenance costs. Obtaining the transmission terminal address code of the requesting transmission terminal enables unique identification and management of the requesting transmission terminal. By determining the trust verification result for the requesting transmission terminal, only requesting transmission terminals trusted by the industrial control system can communicate, effectively preventing potential security threats and ensuring secure and efficient communication between the industrial control system and resource-constrained environments.

[0106] In one embodiment, the second determining module 340 includes:

[0107] a matching success unit, configured to, if the matching result indicates that the industrial control system and the request transmission terminal are successfully matched, determine that the trust verification result is that the request transmission terminal can communicate with the industrial control system;

[0108] A matching failure unit is configured to determine a trust verification result of the requesting transmission terminal based on a historical transmission record of the industrial control system when the matching result indicates that the industrial control system fails to match the requesting transmission terminal.

[0109] In one embodiment, the matching failure unit includes:

[0110] an acquisition subunit, configured to acquire a historical transmission record of the industrial control system, wherein the historical transmission record includes information on transmission activities that have successfully communicated with the industrial control system;

[0111] a matching success subunit, configured to determine, when the historical transmission record successfully matches the transmission terminal address code, that the trust verification result is that the requesting transmission terminal can communicate with the industrial control system;

[0112] The matching failure subunit is used to determine the trust verification result of the terminal requesting transmission according to the pending transmission plan of the industrial control system when the historical transmission record fails to match the address code of the transmission terminal.

[0113] In one embodiment, the matching failure subunit is specifically configured to:

[0114] Acquire a pending transmission plan of the industrial control system, wherein the pending transmission plan includes information of a transmission activity to be performed to communicate with the industrial control system;

[0115] In the case where the to-be-transmitted plan successfully matches the address code of the transmission terminal, determining that the trust verification result is that the requesting transmission terminal can communicate with the industrial control system;

[0116] In the case where the to-be-transmitted plan fails to match the address code of the transmission terminal, the trust verification result is determined to be that the industrial control system refuses to communicate with the transmission requesting terminal.

[0117] In one embodiment, the trust verification device further includes an update module, specifically configured to:

[0118] If the trust verification result indicates that the requesting transmission terminal can communicate with the industrial control system, determining a transmission terminal public key of the requesting transmission terminal, wherein the transmission terminal public key includes the transmission terminal address code;

[0119] The transmission terminal public key is added to the initial trust list to obtain an updated initial trust list.

[0120] In one embodiment, the first determining module 310 includes:

[0121] A first generating unit is configured to generate, for each sub-industrial control terminal in the industrial control system, a terminal public key corresponding to the sub-industrial control terminal, wherein the terminal public key includes an address code of the sub-industrial control terminal corresponding to the sub-industrial control terminal;

[0122] The second generating unit is configured to generate an initial trust list corresponding to the industrial control system based on the terminal public key corresponding to each of the sub-industrial control terminals.

[0123] In one embodiment, the first determining module 310 further includes a removing unit, specifically configured to:

[0124] Acquiring operation status data corresponding to each of the sub-industrial control terminals in the industrial control system, wherein the operation status data includes data indicating a status of each of the sub-industrial control terminals;

[0125] For each sub-industrial control terminal, the trust level of the sub-industrial control terminal is determined according to the operating status data corresponding to the sub-industrial control terminal, and the trust evaluation result of the sub-industrial control terminal is judged by the trust level. If the trust evaluation result indicates that the sub-industrial control terminal has failed the trust evaluation, the terminal public key corresponding to the sub-industrial control terminal is removed from the initial trust list.

[0126] In one embodiment, the matching module 330 is specifically configured to:

[0127] If the transmission terminal address code successfully matches one of the terminal public keys, it is considered that the matching result between the industrial control system and the requesting transmission terminal is a successful match;

[0128] Otherwise, it is considered that the matching result between the industrial control system and the request transmission terminal is a matching failure.

[0129] The trust verification device provided in the embodiment of the present invention can execute the trust verification method provided in any embodiment of the present invention, and completes the trust verification of the requesting transmission terminal through the mutual cooperation and collaboration between the modules, and has the functional modules and beneficial effects corresponding to the execution method.

[0130] Example 4

[0131] According to an embodiment of the present invention, the present invention further provides an electronic device, a computer-readable storage medium, and a computer program product.

[0132] Figure 4is a block diagram of an electronic device provided according to embodiment four of the present invention, which can implement the trust verification method described in the embodiment of the present invention. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0133] like Figure 4 As shown, the electronic device 410 includes at least one processor 411, and a memory connected to the at least one processor 411 in communication, such as a read-only memory (ROM) 412, a random access memory (RAM) 413, etc., wherein the memory stores a computer program that can be executed by the at least one processor, and the processor 411 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 412 or the computer program loaded from the storage unit 418 to the random access memory (RAM) 413. Various programs and data required for the operation of the electronic device 410 can also be stored in the RAM 413. The processor 411, ROM 412 and RAM 413 are connected to each other via a bus 414. An input / output (I / O) interface 415 is also connected to the bus 414.

[0134] Multiple components in the electronic device are connected to the I / O interface 415, including an input unit 416, such as a keyboard, mouse, etc.; an output unit 417, such as various types of displays, speakers, etc.; a storage unit 418, such as a magnetic disk, optical disk, etc.; and a communication unit 419, such as a network card, modem, wireless communication transceiver, etc. The communication unit 419 allows the electronic device to exchange information / data with other devices via a computer network such as the Internet and / or various telecommunication networks.

[0135] Processor 411 can be various general-purpose and / or specialized processing components with processing and computing capabilities. Some examples of processor 411 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various specialized artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. Processor 411 executes the various methods and processes described above, such as the trust verification method.

[0136] In some embodiments, the trust verification method may be implemented as a computer program that is tangibly contained in a computer-readable storage medium, such as storage unit 418. In some embodiments, part or all of the computer program may be loaded and / or installed on electronic device 410 via ROM 412 and / or communication unit 419. When the computer program is loaded into RAM 413 and executed by processor 411, one or more steps of the trust verification method described above may be performed. Alternatively, in other embodiments, processor 411 may be configured to perform the trust verification method in any other appropriate manner (e.g., by means of firmware).

[0137] Various embodiments of the systems and techniques described herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), system-on-chip systems (SOCs), programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments can include being implemented in one or more computer programs that are executable and / or interpreted on a programmable system that includes at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0138] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when the computer program is executed by the processor, the functions / operations specified in the flowcharts and / or block diagrams are implemented. The computer program may be executed entirely on the machine, partially on the machine, as a stand-alone software package, partially on the machine and partially on a remote machine, or entirely on a remote machine or server.

[0139] In the context of the present invention, computer-readable storage media can be tangible media that can contain or store a computer program for use with an instruction execution system, device or equipment or used in combination with an instruction execution system, device or equipment. Computer-readable storage media can include but are not limited to electronic, magnetic, optical, electromagnetic, infrared or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, computer-readable storage media can be machine-readable signal media. More specific examples of machine-readable storage media can include electrical connections based on one or more lines, portable computer disks, hard disks, random access memories (RAM), read-only memories (ROM), erasable programmable read-only memories (EPROM or flash memory), optical fibers, portable compact disk read-only memories (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0140] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, voice input, or tactile input).

[0141] The systems and techniques described herein can be implemented in a computing system that includes back-end components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes front-end components (e.g., a user computer with a graphical user interface or web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such back-end components, middleware components, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0142] A computing system may include clients and servers. The clients and servers are typically remote from each other and typically interact via a communication network. This client-server relationship arises through computer programs running on the respective computers, creating a client-server relationship. The server may be a cloud server, also known as a cloud computing server or cloud host. This server is a hosting product within the cloud computing service ecosystem that addresses the management difficulties and limited scalability of traditional physical hosting and VPS services.

[0143] In some embodiments, the computer program product includes a computer program, and when the computer program is executed by a processor, it implements the trust verification method provided by the embodiment of the present invention.

[0144] The technical solution of the embodiments of the present invention is provided by a trust verification method, apparatus, electronic device, storage medium, and program product. The method determines an initial trust list corresponding to an industrial control system, obtains a transmission request initiated by a requesting transmission terminal and the transmission terminal address code included in the transmission request, matches the public keys of each terminal in the initial trust list with the transmission terminal address code, and obtains a matching result between the industrial control system and the requesting transmission terminal. Based on the matching result, a trust verification result for the requesting transmission terminal is determined, indicating whether the requesting transmission terminal can communicate with the industrial control system. By determining the initial trust list corresponding to the industrial control system, the initial trust list is automatically generated, reducing manual intervention and lowering maintenance costs. The transmission terminal address code of the requesting transmission terminal is obtained, enabling unique identification and management of the requesting transmission terminal. By determining the trust verification result for the requesting transmission terminal, only requesting transmission terminals trusted by the industrial control system can communicate, effectively preventing potential security threats and ensuring secure and efficient communication between the industrial control system and resource-constrained environments.

[0145] It should be understood that the various forms of the processes shown above can be used to reorder, add, or delete steps. For example, the steps described in the present invention can be performed in parallel, sequentially, or in a different order, as long as the desired results of the technical solution of the present invention can be achieved. This is not limited herein.

[0146] The above specific embodiments do not limit the scope of protection of the present invention. Those skilled in the art will appreciate that various modifications, combinations, sub-combinations, and substitutions may be made based on design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention are intended to be included within the scope of protection of the present invention.

Claims

1. A trust verification method, characterized in that: include: Determine an initial trust list corresponding to an industrial control system, wherein the industrial control system includes at least one sub-industrial control terminal, and the initial trust list stores a terminal public key of each sub-industrial control terminal; Acquire a transmission request initiated by a transmission requesting terminal, and the transmission terminal address code included in the transmission request; Matching the public keys of the terminals in the initial trust list with the address code of the transmission terminal to obtain a matching result between the industrial control system and the requesting transmission terminal; A trust verification result of the transmission requesting terminal is determined according to the matching result, where the trust verification result indicates whether the transmission requesting terminal can communicate with the industrial control system.

2. The method according to claim 1, characterized in that Determining a trust verification result of the terminal requesting transmission according to the matching result includes: If the matching result indicates that the industrial control system and the request transmission terminal are successfully matched, determining that the trust verification result is that the request transmission terminal can communicate with the industrial control system; In a case where the matching result indicates that the industrial control system fails to match the transmission requesting terminal, a trust verification result of the transmission requesting terminal is determined based on the historical transmission record of the industrial control system.

3. The method according to claim 2, characterized in that The step of determining the trust verification result of the terminal requesting transmission based on the historical transmission record of the industrial control system includes: Acquiring a historical transmission record of the industrial control system, wherein the historical transmission record includes information about transmission activities that have successfully communicated with the industrial control system; If the historical transmission record successfully matches the transmission terminal address code, determining that the trust verification result is that the requesting transmission terminal can communicate with the industrial control system; In the case that the historical transmission record fails to match the transmission terminal address code, the trust verification result of the transmission requesting terminal is determined according to the pending transmission plan of the industrial control system.

4. The method according to claim 3, characterized in that The step of determining the trust verification result of the terminal requesting transmission according to the transmission plan to be transmitted of the industrial control system includes: Acquire a pending transmission plan of the industrial control system, wherein the pending transmission plan includes information of a transmission activity to be performed to communicate with the industrial control system; In the case where the to-be-transmitted plan successfully matches the address code of the transmission terminal, determining that the trust verification result is that the requesting transmission terminal can communicate with the industrial control system; In the case where the to-be-transmitted plan fails to match the address code of the transmission terminal, the trust verification result is determined to be that the industrial control system refuses to communicate with the transmission requesting terminal.

5. The method according to claim 1, wherein After determining the trust verification result of the requesting transmission terminal according to the matching result, the method further includes: If the trust verification result indicates that the requesting transmission terminal can communicate with the industrial control system, determining a transmission terminal public key of the requesting transmission terminal, wherein the transmission terminal public key includes the transmission terminal address code; The transmission terminal public key is added to the initial trust list to obtain an updated initial trust list.

6. The method according to claim 1, characterized in that Determining the initial trust list corresponding to the industrial control system includes: For each sub-industrial control terminal in the industrial control system, generating a terminal public key corresponding to the sub-industrial control terminal, wherein the terminal public key includes an address code of the sub-industrial control terminal corresponding to the sub-industrial control terminal; An initial trust list corresponding to the industrial control system is generated based on the terminal public key corresponding to each of the sub-industrial control terminals.

7. The method according to claim 6, characterized in that After generating the initial trust list corresponding to the industrial control system, the method further includes: Acquiring operation status data corresponding to each of the sub-industrial control terminals in the industrial control system, wherein the operation status data includes data indicating a status of each of the sub-industrial control terminals; For each sub-industrial control terminal, the trust level of the sub-industrial control terminal is determined according to the operating status data corresponding to the sub-industrial control terminal, and the trust evaluation result of the sub-industrial control terminal is judged by the trust level. If the trust evaluation result indicates that the sub-industrial control terminal has failed the trust evaluation, the terminal public key corresponding to the sub-industrial control terminal is removed from the initial trust list.

8. The method according to claim 1, characterized in that The matching of the public keys of the terminals in the initial trust list with the address code of the transmission terminal to obtain a matching result between the industrial control system and the requesting transmission terminal includes: If the transmission terminal address code successfully matches one of the terminal public keys, it is considered that the matching result between the industrial control system and the requesting transmission terminal is a successful match; Otherwise, it is considered that the matching result between the industrial control system and the request transmission terminal is a matching failure.

9. A trust verification device, characterized in that: include: A first determining module is configured to determine an initial trust list corresponding to an industrial control system, wherein the industrial control system includes at least one sub-industrial control terminal, and the initial trust list stores a terminal public key of each sub-industrial control terminal; An acquisition module, configured to acquire a transmission request initiated by a transmission requesting terminal, and an address code of the transmission terminal included in the transmission request; a matching module, configured to match the public key of each terminal in the initial trust list with the address code of the transmission terminal to obtain a matching result between the industrial control system and the requesting transmission terminal; The second determining module is configured to determine a trust verification result of the transmission requesting terminal according to the matching result, wherein the trust verification result indicates whether the transmission requesting terminal can communicate with the industrial control system.

10. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor. The computer program is executed by the at least one processor to enable the at least one processor to perform the trust verification method according to any one of claims 1 to 8.

11. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the trust verification method according to any one of claims 1 to 8 when executed.

12. A computer program product, characterized in that The computer program product comprises a computer program, which, when executed by a processor, implements the trust verification method according to any one of claims 1 to 8.

Images