Data security transmission system and method

Abstract

The invention relates to the technical field of data transmission, and discloses a data security transmission system and method, and the method comprises the steps: a data obtaining module obtains to-be-transmitted data of a subsystem; the key generation module generates a data key and a channel key; the data encryption module encrypts data to be transmitted; the channel generation module generates a dynamic hidden data transmission channel; the data transmission module is used for transmitting the encrypted data to a receiving point of a central system of the industrial control system through a dynamic hidden data transmission channel; the secret key decryption module is used for carrying out channel decryption on the dynamic hidden data transmission channel and carrying out data decryption on the encrypted data; and the security verification module is used for obtaining the timing duration of the decrypted key time-limiting verifier, determining the integrity of the data to be transmitted and performing authenticity verification on the content of the data to be transmitted. According to the invention, the security, efficiency and stability of data transmission are improved, and the dynamic hidden data transmission channel reduces network congestion and transmission delay.

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission, and in particular to a data security transmission system and method. Background Art

[0002] With the development of industrial automation and informatization, industrial control systems (ICSs) play a vital role in modern industry. They are responsible for monitoring and controlling industrial production processes, including critical infrastructure such as electricity, water treatment, chemicals, oil and gas. However, as these systems become networked and connected to the internet, they are becoming increasingly vulnerable to cyberattacks. Traditional IC system security measures mainly rely on physical isolation and network firewalls, but these methods cannot completely prevent potential attackers from attacking IC systems through various means. Therefore, how to improve the security of data transmission in IC systems is a technical problem that needs to be solved urgently. Summary of the Invention

[0003] The purpose of the present invention is to provide a data security transmission system and method, which can improve the security of data transmission in industrial control systems.

[0004] In a first aspect, the present invention provides a data security transmission system, comprising:

[0005] A data acquisition module is provided in each subsystem of the industrial control system and is used to acquire the data to be transmitted of each subsystem, wherein the data to be transmitted includes the subsystem code, subsystem operation data and data acquisition time;

[0006] A key generation module, configured to generate a data key and a channel key for each subsystem, wherein the data key and the channel key correspond one-to-one to the subsystem code of each subsystem;

[0007] a data encryption module, configured to encrypt the data to be transmitted based on the data key to obtain encrypted data, wherein the encrypted data includes the encrypted data to be transmitted and a key time-limited verifier, wherein the key time-limited verifier is configured to perform a verification timer after determining that the encrypted data has been decrypted;

[0008] A channel generation module, configured to generate a dynamic hidden data transmission channel based on the channel key;

[0009] A data transmission module, configured to transmit the encrypted data to a receiving point of a central system of an industrial control system through the dynamic hidden data transmission channel;

[0010] A key decryption module is used to decrypt the dynamic hidden data transmission channel using the channel key, and to decrypt the encrypted data using the data key;

[0011] The security verification module is used to obtain the timing duration of the decrypted key time-limited verifier, determine the integrity of the data to be transmitted based on the timing duration, and when it is determined that the integrity of the data to be transmitted meets the preset conditions, verify the authenticity of the data to be transmitted. If the verification is successful, it is determined that the data to be transmitted has completed secure transmission.

[0012] Preferably, the key generation module is used to generate a data key and a channel key for each subsystem, including:

[0013] The key generation module is provided with a preset time interval;

[0014] When the preset time interval passes, the key generation module generates a data key and a channel key for each subsystem using a random number generator, and sends the data key to the data encryption module and the key decryption module, and sends the channel key to the channel generation module and the key decryption module;

[0015] The key generation module is also connected to the security verification module. When the security verification module fails to pass verification, the key generation module receives the failure verification information and regenerates the data key and the channel key.

[0016] Preferably, the data encryption module is used to encrypt the data to be transmitted based on the data key to obtain encrypted data, including:

[0017] The data encryption module includes an encryption unit and a key verification unit;

[0018] The encryption unit is used to encrypt the data to be transmitted according to the data key to obtain encrypted data to be transmitted;

[0019] The key verification unit is used to set a judgment subunit and a timing subunit for the key time limit verifier, and add the key time limit verifier to the encrypted data;

[0020] The judging subunit is used to judge whether the encrypted data has been decrypted and obtain the key time-limited verifier, and if it is determined that the encrypted data has been decrypted, send a decryption completion message to the timing subunit;

[0021] The timing subunit is used to start verification timing when it is determined that the encrypted data has been decrypted.

[0022] Preferably, the key decryption module is used to perform channel decryption on the dynamic hidden data transmission channel using the channel key, and to perform data decryption on the encrypted data using the data key, including:

[0023] The dynamic hidden data transmission channel corresponds one-to-one with the subsystem code of each subsystem;

[0024] The key decryption module determines the channel key corresponding to the dynamic hidden data transmission channel and the data key of the encrypted data according to the subsystem code;

[0025] Decrypting the dynamic hidden data transmission channel of the receiving point using the channel key; if the channel decryption is successful, obtaining the encrypted data; and decrypting the encrypted data using the data key;

[0026] If the channel decryption is unsuccessful, it is determined that the data to be transmitted is not transmitted securely;

[0027] If the data decryption is unsuccessful, it is determined that the data to be transmitted is not transmitted securely.

[0028] Preferably, the security verification module determines the integrity of the data to be transmitted according to the timing duration, including:

[0029] Get the key length of the data key;

[0030] Determining a preset time for data decryption based on the key length;

[0031] Calculating a duration difference between the preset duration and the timed duration, and determining a duration ratio between the duration difference and the preset duration;

[0032] Determine whether the duration ratio is within an acceptable range. If so, determine that the integrity of the data to be transmitted meets the preset conditions. If not, determine that the integrity of the data to be transmitted does not meet the preset conditions.

[0033] Preferably, the security verification module determines a preset duration for data decryption according to the key length, including:

[0034] Presetting a first preset key length, a second preset key length, and a third preset key length, wherein the first preset key length, the second preset key length, and the third preset key length increase in sequence;

[0035] Setting a preset duration for data decryption according to a relationship between the key length and the first preset key length, the second preset key length, and the third preset key length;

[0036] If the key length is less than the first preset key length, the preset time length for data decryption is set to the first preset time length T1;

[0037] If the key length is greater than or equal to the first preset key length and the key length is less than the second preset key length, the preset duration for data decryption is set to the second preset duration T2;

[0038] If the key length is greater than or equal to the second preset key length and the key length is less than the third preset key length, the preset duration for data decryption is set to the third preset duration T3;

[0039] If the key length is greater than or equal to the third preset key length, the preset time length for data decryption is set to a fourth preset time length T4; wherein T1<T2<T3<T4.

[0040] Preferably, the acceptance range is [0, 0.05].

[0041] Preferably, the security verification module verifies the authenticity of the content of the data to be transmitted, including:

[0042] Verifying the data acquisition time and the subsystem operation data;

[0043] If both the data acquisition time and the subsystem operation data are verified, it is determined that the authenticity verification of the data to be transmitted is passed.

[0044] Preferably, the security verification module verifies the data acquisition time, including:

[0045] The security verification module is provided with an acquisition time comparison table, which includes subsystem codes, and each subsystem code corresponds to a unique data acquisition time;

[0046] Determining the subsystem code in the data to be transmitted, and when determining that the subsystem code in the acquisition time comparison table is consistent with the subsystem code in the data to be transmitted, filtering out the corresponding data acquisition time;

[0047] If the data acquisition time in the data to be transmitted is consistent with the filtered data acquisition time, it is determined that the data acquisition time verification is passed;

[0048] If the data acquisition time in the data to be transmitted is inconsistent with the filtered data acquisition time, it is determined that the data acquisition time verification has failed.

[0049] Preferably, the security verification module verifies the subsystem operation data, including:

[0050] Determine the subsystem code of the data to be transmitted, obtain historical subsystem operation data of the same subsystem code, and determine the operation items in the historical subsystem operation data;

[0051] Determining the operation items of the subsystem operation data in the data to be transmitted;

[0052] Comparing the operation items in the historical subsystem operation data with the operation items of the data to be transmitted, and if the operation items of the data to be transmitted are the same as the operation items in the historical subsystem operation data, determining that the subsystem operation data verification has passed;

[0053] If the operation items of the data to be transmitted are different from the operation items in the historical subsystem operation data, it is determined that the subsystem operation data verification has failed.

[0054] In a second aspect, the present invention provides a method for secure data transmission, comprising: obtaining data to be transmitted from each subsystem of an industrial control system, wherein the data to be transmitted includes a subsystem code, subsystem operation data, and data acquisition time;

[0055] Generate a data key and a channel key for each subsystem, wherein the data key and the channel key correspond one-to-one to the subsystem code of each subsystem;

[0056] Encrypting the data to be transmitted based on the data key to obtain encrypted data, wherein the encrypted data includes the encrypted data to be transmitted and a key time-limited verifier, wherein the key time-limited verifier is used to perform verification timing after determining that the encrypted data has been decrypted;

[0057] generating a dynamic hidden data transmission channel based on the channel key;

[0058] Transmitting the encrypted data to a receiving point of the central system of the industrial control system through the dynamic hidden data transmission channel;

[0059] Decrypting the dynamic hidden data transmission channel using the channel key, and decrypting the encrypted data using the data key;

[0060] Obtain the timing duration of the decrypted key time-limited verifier, determine the integrity of the data to be transmitted based on the timing duration, and when it is determined that the integrity of the data to be transmitted meets the preset conditions, verify the authenticity of the data to be transmitted. If the verification passes, it is determined that the data to be transmitted has completed secure transmission.

[0061] In a third aspect, the present invention provides a data security transmission device, comprising: an acquisition unit, a generation unit, an encryption unit, a transmission unit, a decryption unit, and a verification unit;

[0062] An acquisition unit, configured to acquire data to be transmitted from each subsystem of the industrial control system, wherein the data to be transmitted includes a subsystem code, subsystem operation data, and data acquisition time;

[0063] a generating unit, configured to generate a data key and a channel key for each subsystem, wherein the data key and the channel key correspond one-to-one to a subsystem code of each subsystem;

[0064] an encryption unit, configured to encrypt the data to be transmitted based on the data key to obtain encrypted data, wherein the encrypted data includes the encrypted data to be transmitted and a key time-limited verifier, wherein the key time-limited verifier is configured to perform a verification timer after determining that the encrypted data has been decrypted;

[0065] The generating unit is further configured to generate a dynamic hidden data transmission channel based on the channel key;

[0066] A transmission unit, configured to transmit the encrypted data to a receiving point of the central system of the industrial control system through the dynamic hidden data transmission channel;

[0067] a decryption unit, configured to perform channel decryption on the dynamic hidden data transmission channel using the channel key, and to perform data decryption on the encrypted data using the data key;

[0068] The acquisition unit is also used to obtain the timing duration of the decrypted key time-limited verifier;

[0069] The verification unit is used to determine the integrity of the data to be transmitted based on the timing duration. When it is determined that the integrity of the data to be transmitted meets the preset conditions, the authenticity of the data to be transmitted is verified. If the verification passes, it is determined that the data to be transmitted has been safely transmitted.

[0070] In a fourth aspect, a data security transmission device is provided, comprising a memory and a processor; the memory is used to store computer execution instructions, and the processor is connected to the memory through a bus; when the data security transmission device is running, the processor executes the computer execution instructions stored in the memory, so that the data security transmission device executes the data security transmission method described in the first aspect.

[0071] The data security transmission device can be a network device, or a portion of a network device, such as a chip system in the network device. The chip system is used to support the network device in implementing the functions involved in the first aspect and any possible implementation thereof, such as obtaining, determining, and sending the data and / or information involved in the above-mentioned data security transmission method. The chip system includes a chip and may also include other discrete devices or circuit structures.

[0072] In a fifth aspect, a computer-readable storage medium is provided, the computer-readable storage medium including computer execution instructions, which, when executed on a computer, enables the computer to execute the data security transmission method described in the first aspect.

[0073] In a sixth aspect, a computer program product is also provided, which includes computer instructions. When the computer instructions are executed on a data security transmission device, the data security transmission device executes the data security transmission method as described in the first aspect above.

[0074] It should be noted that the above-mentioned computer instructions may be stored in whole or in part on a computer-readable storage medium. The computer-readable storage medium may be packaged together with the processor of the data security transmission device, or may be packaged separately from the processor of the data security transmission device, and this embodiment of the application is not limited to this.

[0075] The descriptions of the second, third, fourth, fifth and sixth aspects of this application can refer to the detailed description of the first aspect.

[0076] In the embodiments of this application, the names of the aforementioned data security transmission devices do not limit the devices or functional modules themselves. In actual implementation, these devices or functional modules may appear by other names. For example, the receiving unit may also be called a receiving module, a receiver, etc. As long as the functions of each device or functional module are similar to those of this application, they are within the scope of the claims of this application and their equivalents.

[0077] Compared with the prior art, the beneficial effect of the present invention is that by using data keys and channel keys to double encrypt data, the security of data during transmission is ensured. Even if an attacker intercepts a data packet, the data content cannot be decrypted without the correct key. The setting of a dynamic hidden data transmission channel makes data transmission more difficult to monitor and track, thereby protecting the privacy of both communicating parties. Through the design of a key time-limited verifier and a security verification module, it is possible to effectively detect whether the data has been tampered with or damaged during transmission, ensuring that the received data is complete and authentic. Each subsystem has independent data keys and channel keys, which correspond one-to-one to the subsystem code, making it easy to manage and update, while also improving the security of the system. Due to the use of dynamic hiding technology, the transmission system can adapt to different network environments and threat models, and has good flexibility and robustness. In addition, the system can monitor the status of data transmission in real time and respond promptly when an anomaly is detected, such as regenerating keys, switching transmission channels, etc., to deal with potential security threats. BRIEF DESCRIPTION OF THE DRAWINGS

[0078] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are merely embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without any creative work.

[0079] Figure 1 This is a functional block diagram of a data security transmission system provided by the present invention;

[0080] Figure 2 This is a schematic diagram of the hardware structure of multiple modules in a data security transmission system provided by the present invention;

[0081] Figure 3 This is a flow chart of a data security transmission method provided by the present invention;

[0082] Figure 4 It is a structural schematic diagram of a data security transmission device provided by the present invention. DETAILED DESCRIPTION

[0083] Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art. It should be noted that, unless there is a conflict, the embodiments of the present disclosure and the features in the embodiments can be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and in conjunction with the embodiments.

[0084] It should be noted that in the embodiments of this application, words such as "exemplary" or "for example" are used to indicate examples, illustrations, or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of this application should not be interpreted as being more preferred or advantageous over other embodiments or designs. Rather, the use of words such as "exemplary" or "for example" is intended to present the relevant concepts in a concrete manner.

[0085] In order to facilitate the clear description of the technical solutions of the embodiments of the present application, in the embodiments of the present application, words such as "first" and "second" are used to distinguish between identical or similar items with substantially the same functions and effects. Those skilled in the art will understand that words such as "first" and "second" do not limit the quantity and execution order. With the development of industrial automation and informatization, industrial control systems play a vital role in modern industry. They are responsible for monitoring and controlling industrial production processes, including critical infrastructure such as electricity, water treatment, chemicals, oil and gas. However, with the networking of these systems and their connection to the Internet, data in industrial control systems has become increasingly vulnerable to network attacks during transmission. Therefore, how to improve the security of data transmission in power control systems is a technical problem that needs to be solved urgently.

[0086] In this regard, the embodiments of the present application can double-encrypt data using data keys and channel keys to ensure the security of data during transmission. Even if an attacker intercepts a data packet, the data content cannot be decrypted without the correct key. The setting of a dynamic hidden data transmission channel makes data transmission more difficult to monitor and track, thereby protecting the privacy of both communicating parties. Through the design of a key time-limited verifier and a security verification module, it is possible to effectively detect whether the data has been tampered with or damaged during transmission, ensuring that the received data is complete and authentic. Each subsystem has an independent data key and channel key, which correspond one-to-one to the subsystem code, making it easy to manage and update, while also improving the security of the system. Due to the use of dynamic hiding technology, the transmission system can adapt to different network environments and threat models, and has good flexibility and robustness. In addition, the system can monitor the status of data transmission in real time and respond promptly when an anomaly is detected, such as regenerating keys, switching transmission channels, etc., to deal with potential security threats.

[0087] like Figure 1 As shown, the present invention provides a data security transmission system, including: a data acquisition module, a key generation module, a data encryption module, a channel generation module, a data transmission module, a key decryption module, and a security verification module.

[0088] The data acquisition module is set in each subsystem of the industrial control system and is used to obtain the data to be transmitted of each subsystem. The data to be transmitted includes the subsystem code, subsystem operation data and data acquisition time.

[0089] Industrial control systems are composed of multiple subsystems, each of which requires data transmission to a central system. To ensure the security of transmitted data, a data acquisition module can be installed in each subsystem to capture the data to be transmitted. Data acquisition can be performed at the time when the subsystem's code and operating data are obtained.

[0090] The key generation module is used to generate the data key and channel key of each subsystem. The data key and channel key correspond one-to-one with the subsystem code of each subsystem.

[0091] The key generation module can generate data keys and channel keys corresponding to each subsystem. Each subsystem code is unique, and the subsystem code corresponds one-to-one to the data key and channel key. That is, each subsystem has its own corresponding data key and channel key, and different subsystems have different data keys and channel keys.

[0092] The data encryption module is used to encrypt the data to be transmitted based on the data key to obtain the encrypted data. The encrypted data includes the encrypted data to be transmitted and the key time-limited verifier. The key time-limited verifier is used to verify the timing after determining that the encrypted data has been decrypted.

[0093] After acquiring the data to be transmitted from a subsystem, the data encryption module encrypts the data using the data key corresponding to the subsystem. The encrypted data includes a key timer, which is used to verify the timing of the decrypted data after decryption at the receiving end (the receiving end of the data to be transmitted).

[0094] The channel generation module is used to generate a dynamic, hidden data transmission channel based on the channel key. After encrypting the data to be transmitted using the data key, the data transmission channel that transmits the data to be transmitted also needs to be encrypted to generate a dynamic, hidden data transmission channel. This achieves dual encryption by encrypting both the data to be transmitted and the channel that transmits the data to be transmitted, thereby improving the security of the data to be transmitted.

[0095] The data transmission module is used to transmit the encrypted data via a dynamic hidden data transmission channel to the receiving point of the industrial control system's central system. After double encryption, the data transmission module begins transmitting the encrypted data to the receiving point of the power control system's central system, facilitating processing by the central system. The key decryption module is used to decrypt the dynamic hidden data transmission channel using the channel key and decrypt the encrypted data using the data key.

[0096] Since both the encrypted data and the dynamic hidden data transmission channel are encrypted, if you want to obtain the original data to be transmitted, you need to decrypt both the data and the channel so that you can obtain the data to be transmitted.

[0097] The security verification module is used to obtain the timing duration of the decrypted key time-limited verifier, determine the integrity of the data to be transmitted based on the timing duration, and when it is determined that the integrity of the data to be transmitted meets the preset conditions, verify the authenticity of the data to be transmitted. If the verification passes, it is determined that the data to be transmitted has completed secure transmission.

[0098] The data decrypted by the data decryption module may be incomplete or tampered with. Therefore, in order to avoid obtaining incomplete or erroneous data, it is necessary to verify the integrity and authenticity of the decrypted data.

[0099] The present invention improves the security of data transmission in industrial control systems. Through data encryption and dynamic concealment of data transmission channels, it effectively prevents data from being stolen or tampered with during transmission. Through a key time-limited authenticator, it ensures the timeliness and validity of data and prevents the use of expired data. It realizes fine-grained data security management, with each subsystem having an independent key, thereby enhancing the overall security of the system. It improves the efficiency and stability of data transmission, and the dynamic concealment of data transmission channels reduces network congestion and transmission delays. The security verification module ensures the integrity and authenticity of data after decryption, further enhancing data security.

[0100] In some embodiments of the present application, the key generation module is used to generate a data key and a channel key for each subsystem, including:

[0101] A preset time interval is set in the key generation module; when the preset time interval passes, the key generation module uses a random number generator to generate a data key and a channel key for each subsystem, and sends the data key to the data encryption module and the key decryption module, and sends the channel key to the channel generation module and the key decryption module; the key generation module is also connected to the security verification module. When the security verification module fails to pass the verification, the key generation module receives the unverified pass information and regenerates the data key and the channel key.

[0102] The key generation module is a crucial component of the entire security system. It is responsible for providing each subsystem with the necessary data keys and channel keys to ensure the security and confidentiality of data transmission. The module has a built-in preset interval, which can be fixed or dynamically adjusted based on security policies. At each preset interval, the key generation module initiates the key update process, generating new data keys and channel keys, further enhancing data transmission security.

[0103] To generate keys, the key generation module has a built-in random number generator. This random number generator produces high-quality random numbers, which are then used to generate data keys and channel keys. Data keys are used to encrypt and decrypt data, while channel keys are used to establish secure communication channels.

[0104] The generated data key is sent to the data encryption module and the key decryption module. The data encryption module uses the data key to encrypt the transmitted data, ensuring that the data cannot be read by unauthorized third parties during transmission. The key decryption module is responsible for decrypting the data using the corresponding data key at the data receiving end, restoring the original information.

[0105] Similarly, the generated channel key is sent to the channel generation module and the key decryption module. The channel generation module uses the channel key to establish and maintain a secure communication channel, ensuring the integrity and confidentiality of data transmission. The key decryption module uses the channel key to decrypt and receive encrypted data from the channel.

[0106] The key generation module is also connected to the security verification module. This module is responsible for monitoring and verifying system security, ensuring there are no security breaches or unauthorized access attempts. If the security verification module detects any anomalies or verification failures, it sends a verification failure notification to the key generation module. Upon receiving this notification, the key generation module immediately initiates a new key generation process, regenerating the data key and channel key to replace the old keys, thereby enhancing system security. This process ensures that even after a security threat is detected, the system can react quickly to prevent potential security risks.

[0107] In some embodiments of the present application, the data encryption module is used to encrypt the data to be transmitted based on the data key to obtain encrypted data, including:

[0108] The data encryption module includes an encryption unit and a key verification unit; the encryption unit is used to encrypt the data to be transmitted according to the data key to obtain the encrypted data to be transmitted; the key verification unit is used to set the judgment subunit and the timing subunit for the key time-limited verifier, and add the key time-limited verifier to the encrypted data; the judgment subunit is used to judge whether the encrypted data has been decrypted and obtain the key time-limited verifier. If it is determined that the encrypted data has been decrypted, the decryption completion information is sent to the timing subunit; the timing subunit is used to start verification timing when it is determined that the encrypted data has been decrypted.

[0109] The data encryption module is designed to encrypt data to be transmitted, ensuring data security during transmission. This module consists of two main components: the encryption unit and the key verification unit. The encryption unit uses the data key to encrypt the original data (i.e., the data to be transmitted), converting it into encrypted data that can only be decrypted by the recipient holding the correct key. This process ensures data confidentiality during transmission.

[0110] The key verification unit is responsible for providing an alert mechanism when data is illegally decrypted. It consists of two subunits: the judgment subunit and the timing subunit. The judgment subunit monitors encrypted data to detect whether decryption attempts have occurred. Once the judgment subunit detects decryption, it transmits the decryption completion information to the timing subunit.

[0111] Upon receiving the decryption completion message, the timing subunit begins counting. The timing duration determines whether the decryption attempt is illegal or legal. If the timing duration does not exceed the set duration, the decryption attempt is considered legal. If the timing duration exceeds the set duration, the decryption attempt is considered illegal. In this way, the key verification unit enhances the security of the data encryption module, ensuring data transmission security and data integrity.

[0112] In some embodiments of the present application, the key decryption module is used to decrypt the dynamic hidden data transmission channel using the channel key and decrypt the encrypted data using the data key, including:

[0113] The dynamic hidden data transmission channel corresponds one-to-one to the subsystem code of each subsystem; the key decryption module determines the channel key corresponding to the dynamic hidden data unpacking channel and the data key of the encrypted data according to the subsystem code; the dynamic hidden data transmission channel of the receiving point is decrypted by the channel key. If the channel decryption is successful, the encrypted data is obtained, and the encrypted data is decrypted using the data key; if the channel decryption is unsuccessful, it is determined that the data to be transmitted is not transmitted securely; if the data decryption is unsuccessful, it is determined that the data to be transmitted is not transmitted securely.

[0114] In other words, each subsystem corresponds to a dynamic hidden data transmission channel. The key decryption module can determine the dynamic hidden data transmission channel corresponding to the subsystem based on the subsystem code. It then performs channel decryption on the dynamic hidden data transmission channel, using the channel key. Only after successful decryption can the encrypted data be transmitted or replaced. The encrypted data is then decrypted using the data key.

[0115] The key decryption module's main function is to ensure that data transmitted through the dynamic hidden data transmission channel can be correctly decrypted when it reaches the target subsystem. The module's workflow is as follows:

[0116] When the key decryption module receives data sent via a dynamic hidden data transmission channel (one for each subsystem), it first determines which channel key to use for channel decryption based on the subsystem code contained in the packet. The channel key is used to decrypt the encryption key of the transmission channel itself, ensuring channel security.

[0117] Once channel decryption is successful, the key decryption module will be able to obtain the encrypted data. At this point, the module will decrypt the encrypted data using the corresponding data key. The data key is a key specifically used to decrypt the data content. Unlike the channel key, it is used to ensure the confidentiality of the data content.

[0118] If the channel cannot be successfully decrypted during the channel decryption phase, or the data cannot be successfully decrypted during the data decryption phase, the key decryption module will determine that the data may have been tampered with during transmission or was not transmitted in the expected manner, and therefore the data was not transmitted securely.

[0119] In summary, the key decryption module ensures the security and integrity of data during transmission through a series of encryption and decryption steps. It is responsible not only for decrypting the channel, but also for decrypting the data content, and provides error feedback if any decryption step fails, thus ensuring the security of the entire data transmission process.

[0120] In some embodiments of the present application, the security verification module determines the integrity of the data to be transmitted based on the timing duration, including:

[0121] Obtain the key length of the data key; determine the preset time for data decryption based on the key length; calculate the time difference between the preset time and the timing time, and determine the time ratio between the time difference and the preset time; determine whether the time ratio is within an acceptable range. If the time ratio is within the acceptable range, determine that the integrity of the data to be transmitted meets the preset conditions; if the time ratio is not within the acceptable range, determine that the integrity of the data to be transmitted does not meet the preset conditions.

[0122] The security verification module determines the integrity of the transmitted data based on the timed duration. The specific steps are as follows: First, the security verification module obtains the length of the data key used to encrypt the data. Next, based on this key length, the security verification module determines a preset decryption duration, which is estimated based on the key length and the complexity of the decryption process. The security verification module then calculates the difference between the actual timed duration and the preset duration. Based on this duration difference, the security verification module further calculates a duration ratio, which reflects the relative relationship between the actual timed duration and the preset duration.

[0123] Finally, the security verification module determines whether this duration ratio is within an acceptable range. This range is pre-set and takes into account the fluctuation range of the time required for decryption under normal circumstances. If the duration ratio is within the acceptable range, it means that the data decryption process takes as expected, which can be inferred that the data has not been tampered with during transmission, and therefore it can be determined that the integrity of the data to be transmitted meets the requirements. Conversely, if the duration ratio is not within the acceptable range, it may indicate that the data has been tampered with during transmission or there are other abnormal conditions, so it can be determined that the integrity of the data to be transmitted does not meet the requirements. In this case, the security verification module will take appropriate measures, such as refusing to receive the data or issuing a security alert.

[0124] In some embodiments of the present application, the security verification module determines the preset duration for data decryption based on the key length, including:

[0125] A first preset key length, a second preset key length and a third preset key length are pre-set, and the first preset key length, the second preset key length and the third preset key length increase in sequence; a preset time length for data decryption is set according to a relationship between the key length and the first preset key length, the second preset key length and the third preset key length; if the key length is less than the first preset key length, the preset time length for data decryption is set to the first preset time length T1; if the key length is greater than or equal to the first preset key length and the key length is less than the second preset key length, the preset time length for data decryption is set to the second preset time length T2; if the key length is greater than or equal to the second preset key length and the key length is less than the third preset key length, the preset time length for data decryption is set to the third preset time length T3; if the key length is greater than or equal to the third preset key length, the preset time length for data decryption is set to the fourth preset time length T4; wherein T1<T2<T3<T4.

[0126] It can be seen that key length is positively correlated with the preset decryption duration. Dynamically adjusting the preset data decryption duration based on key length can effectively improve data decryption efficiency. Presetting decryption durations for different key lengths adapts to varying security requirements, enhancing the system's flexibility and scalability. Categorizing key lengths reduces the uncertainty of decryption times due to varying key lengths. This optimizes the decryption process and improves overall system performance. By setting preset durations T1, T2, T3, and T4, refined management of the decryption process is achieved, ensuring data security.

[0127] In some embodiments of the present application, the acceptance range is [0, 0.05]. For example, when the duration ratio is 0, it indicates that the integrity of the data meets the preset conditions. When the duration ratio is 1, it indicates that the integrity of the data meets the preset conditions.

[0128] In some embodiments of the present application, the security verification module verifies the authenticity of the data to be transmitted, including: verifying the data acquisition time and verifying the subsystem operation data; if both the data acquisition time and the subsystem operation data are verified, it is determined that the authenticity verification of the data to be transmitted is passed.

[0129] The security verification module verifies the authenticity of the content of the data to be transmitted. The specific operations include: First, the security verification module will verify the data acquisition time to ensure that the data is generated within the specified time range to prevent outdated or future timestamp data from being processed incorrectly. Secondly, the module will verify the subsystem operation data, which may include checking the integrity and consistency of the data and whether it meets the expected operating parameters. If the data acquisition time and the verification of the subsystem operation data pass the standards set by the security verification module, then it can be determined that the authenticity verification of the data to be transmitted is successful, and the data can be deemed to be authentic and valid, and then proceed to the next step of transmission processing. If any verification link fails, the security verification module will mark the data as verification failed, which may trigger further security measures, such as refusing transmission, alarming or recording logs.

[0130] It can be seen that this solution improves the security of data transmission, ensures the authenticity and reliability of transmitted data, prevents the risk of forged or tampered data, strengthens the integrity protection of data during transmission, and reduces possible errors or losses during data transmission.

[0131] In some embodiments of the present application, the security verification module verifies the data acquisition time, including: an acquisition time comparison table is provided in the security verification module, the acquisition time comparison table includes a subsystem code, and each subsystem code corresponds to a unique data acquisition time; determining the subsystem code in the data to be transmitted, and determining that the subsystem code in the acquisition time comparison table is consistent with the subsystem code in the data to be transmitted, and filtering out the corresponding data acquisition time; if the data acquisition time in the data to be transmitted is consistent with the filtered data acquisition time, then determining that the data acquisition time verification is passed; if the data acquisition time in the data to be transmitted is inconsistent with the filtered data acquisition time, then determining that the data acquisition time verification is failed.

[0132] The security verification module verifies data acquisition times using the following steps: First, the module maintains an acquisition time comparison table, which details the subsystem codes and their corresponding unique data acquisition times. When verifying data acquisition times, the module first extracts the subsystem code from the data being transmitted. It then searches the acquisition time comparison table for an entry that matches the subsystem code.

[0133] Once a matching subsystem code is found, the security verification module extracts the corresponding scheduled data acquisition time from the comparison table. Next, the module compares the data acquisition time recorded in the data to be transmitted with the data acquisition time selected from the comparison table. If the two are identical, the data acquisition time is considered valid and verification is successful. Conversely, if the data acquisition time in the data to be transmitted is inconsistent with the time in the comparison table, the data acquisition time verification is considered to have failed, which may indicate that the data has been tampered with during transmission or there are other security issues. In this case, the security verification module will reject the data or implement other security measures to ensure system security.

[0134] In some embodiments of the present application, the security verification module verifies the subsystem operation data, including: determining the subsystem code of the data to be transmitted, obtaining the historical subsystem operation data of the same subsystem code, and determining the operation items in the historical subsystem operation data; determining the operation items of the subsystem operation data in the data to be transmitted; comparing the operation items in the historical subsystem operation data with the operation items of the data to be transmitted, if the operation items of the data to be transmitted are the same as the operation items in the historical subsystem operation data, then determining that the subsystem operation data verification has passed; if the operation items of the data to be transmitted are different from the operation items in the historical subsystem operation data, then determining that the subsystem operation data verification has failed.

[0135] The security verification module is responsible for strictly verifying the subsystem operation data to ensure the accuracy and integrity of the data. This process includes the following steps:

[0136] First, the security verification module determines the subsystem code of the data to be transmitted. Each subsystem has a unique code that identifies its source and type. This code allows the verification module to identify the subsystem to which the data belongs.

[0137] Next, the verification module obtains historical subsystem operation data with the same subsystem code as the data to be transmitted. This historical data is previously recorded and used for comparison and analysis with the current data.

[0138] The module then identifies specific operational items from the historical subsystem operational data. An operational item is a specific data point generated during the subsystem's operation, such as temperature, pressure, speed, and other parameters.

[0139] After determining the operating items in the historical data, the verification module will check the subsystem operating data in the data to be transmitted and also identify the operating items therein.

[0140] Next, the module performs a critical comparison step, comparing the operational items in the historical subsystem operational data with the operational items in the data to be transferred. This process is accomplished through algorithms (such as AI algorithms, similarity comparison, etc.) or manual review to detect any discrepancies between the two.

[0141] If the running items in the data to be transferred are exactly the same as the running items in the historical subsystem running data (or the similarity is greater than a preset threshold), then the subsystem running data verification can be determined to have passed. This means that the currently transferred data is consistent with the historical records and there are no anomalies or errors.

[0142] However, if the operational items in the data to be transmitted differ from those in the historical subsystem operational data (or the degree of similarity is less than or equal to a preset threshold), the verification module will determine that the subsystem operational data verification has failed. This may indicate that the data has been erroneous, tampered with, or that there is an anomaly in the system operation, requiring further investigation and resolution.

[0143] The entire verification process ensures the reliability of subsystem data and provides protection for the safe operation of the system. Any data that does not conform to historical records will be marked so that appropriate safety measures can be taken.

[0144] Figure 2 This is a hardware structure diagram of multiple modules in a data security transmission system according to an exemplary embodiment. The module may include a processor 202, which is used to execute application code to implement the industrial control system secure transmission method based on a dynamic hidden data transmission channel in this application.

[0145] The processor 202 may be a CPU, a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits for controlling the execution of the program of the present application.

[0146] like Figure 2 As shown, the multiple modules may further include a memory 203. The memory 203 is used to store application code for executing the solution of the present application, and the execution is controlled by the processor 202.

[0147] The memory 203 may be a read-only memory (ROM) or other type of static storage device that can store static information and instructions, a random access memory (RAM) or other type of dynamic storage device that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, an optical disc storage (including a compact disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory 203 may exist independently and be connected to the processor 202 via the bus 204. The memory 203 may also be integrated with the processor 202.

[0148] like Figure 2 As shown, the multiple modules may further include a communication interface 201, wherein the communication interface 201, the processor 202, and the memory 203 may be coupled to each other, for example, via a bus 204. The communication interface 201 is used to exchange information with other devices, for example, to support information exchange between multiple modules and other devices.

[0149] It should be pointed out that Figure 2 The equipment structure shown in the does not constitute a limitation on the security control equipment of the big data platform, except Figure 2 In addition to the components shown, the module may include more or fewer components than shown, or combine certain components, or arrange the components differently.

[0150] In actual implementation, the functions implemented by multiple modules can be Figure 2 The processor 202 shown calls the program code in the memory 203 to implement it.

[0151] The above mainly introduces the solution provided by the embodiment of the present application from the perspective of the system. In order to realize the above functions, it includes hardware structures and / or software modules corresponding to the execution of each function. Those skilled in the art should easily appreciate that, in combination with the units and algorithm steps of each example described in the embodiments disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in a hardware or computer software driven hardware manner depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0152] The data security transmission method provided in the embodiments of the present application is described in detail below with reference to the accompanying drawings.

[0153] like Figure 3 As shown, the data security transmission method includes:

[0154] S301: Acquire data to be transmitted from each subsystem of the industrial control system, wherein the data to be transmitted includes subsystem code, subsystem operation data, and data acquisition time.

[0155] S302: Generate a data key and a channel key for each subsystem, wherein the data key and the channel key correspond to the subsystem code of each subsystem in a one-to-one manner.

[0156] S303. Encrypt the data to be transmitted based on the data key to obtain encrypted data, wherein the encrypted data includes the encrypted data to be transmitted and a key time-limited verifier, and the key time-limited verifier is used to perform verification timing after determining that the encrypted data has been decrypted.

[0157] S304: Generate a dynamic hidden data transmission channel based on the channel key.

[0158] S305: Transmit the encrypted data to a receiving point of the central system of the industrial control system through the dynamic hidden data transmission channel.

[0159] S306: Decrypt the dynamic hidden data transmission channel using the channel key, and decrypt the encrypted data using the data key.

[0160] S307. Obtain the timing duration of the decrypted key time-limited verifier, determine the integrity of the data to be transmitted based on the timing duration, and when it is determined that the integrity of the data to be transmitted meets the preset conditions, verify the authenticity of the data to be transmitted. If the verification passes, it is determined that the data to be transmitted has completed secure transmission.

[0161] The present invention improves the security of data transmission in industrial control systems. Through data encryption and dynamic concealment of data transmission channels, it effectively prevents data from being stolen or tampered with during transmission. Through a key time-limited authenticator, it ensures the timeliness and validity of data and prevents the use of expired data. It realizes fine-grained data security management, with each subsystem having an independent key, thereby enhancing the overall security of the system. It improves the efficiency and stability of data transmission, and the dynamic concealment of data transmission channels reduces network congestion and transmission delays. The security verification module ensures the integrity and authenticity of data after decryption, further enhancing data security.

[0162] The above mainly introduces the solution provided by the embodiment of the present application from the perspective of method. In order to realize the above functions, it includes hardware structures and / or software modules corresponding to the execution of each function. Those skilled in the art should easily appreciate that, in combination with the units and algorithm steps of each example described in the embodiments disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in a hardware or computer software driven hardware manner depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0163] The embodiment of the present application can divide the data security transmission device into functional modules according to the above method example. For example, each functional module can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated modules can be implemented in the form of hardware or in the form of software functional modules. Optionally, the division of modules in the embodiment of the present application is schematic and is only a logical functional division. In actual implementation, there may be other division methods.

[0164] like Figure 4 FIG. 1 is a schematic structural diagram of a data security transmission device provided by the present invention. Figure 4 The data security transmission device shown includes: an acquisition unit 401, a generation unit 402, an encryption unit 403, a transmission unit 404, a decryption unit 405 and a verification unit 406.

[0165] An acquisition unit 401 is configured to acquire data to be transmitted from each subsystem of the industrial control system, wherein the data to be transmitted includes a subsystem code, subsystem operation data, and data acquisition time;

[0166] A generating unit 402 is configured to generate a data key and a channel key for each subsystem, wherein the data key and the channel key correspond to a subsystem code of each subsystem in a one-to-one manner;

[0167] An encryption unit 403 is configured to encrypt the data to be transmitted based on the data key to obtain encrypted data, wherein the encrypted data includes the encrypted data to be transmitted and a key time-limited verifier, wherein the key time-limited verifier is configured to perform a verification timer after determining that the encrypted data has been decrypted;

[0168] The generating unit 402 is further configured to generate a dynamic hidden data transmission channel based on the channel key;

[0169] A transmission unit 404 is configured to transmit the encrypted data to a receiving point of the central system of the industrial control system through the dynamic hidden data transmission channel;

[0170] The decryption unit 405 is configured to perform channel decryption on the dynamic hidden data transmission channel using the channel key, and to perform data decryption on the encrypted data using the data key;

[0171] The acquisition unit 401 is further configured to acquire the timing duration of the decrypted key time-limited verifier;

[0172] The verification unit 406 is used to determine the integrity of the data to be transmitted based on the timing duration. When it is determined that the integrity of the data to be transmitted meets the preset conditions, the authenticity of the data to be transmitted is verified. If the verification is successful, it is determined that the data to be transmitted has been safely transmitted.

[0173] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit the same. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that they can still modify or replace the technical solutions of the present invention with equivalents, and these modifications or equivalent replacements cannot cause the modified technical solutions to deviate from the spirit and scope of the technical solutions of the present invention.

[0174] The system provided in the above embodiment is only illustrated by the division of the above functional modules. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the modules or steps in the embodiments of the present invention can be further decomposed or combined. For example, the modules in the above embodiment can be combined into one module or further divided into multiple sub-modules to complete all or part of the functions described above. The names of the modules and steps involved in the embodiments of the present invention are only for distinguishing the modules or steps and are not to be regarded as improper limitations of the present invention.

[0175] Those skilled in the art should be able to appreciate that, in conjunction with the modules and method steps of each example described in the embodiments disclosed herein, it is possible to implement them with electronic hardware, computer software, or a combination of the two, and the programs corresponding to the software modules and method steps can be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically erasable programmable ROM, registers, hard disks, removable disks, CD-ROMs, or any other form of storage medium known in the art. In order to clearly illustrate the interchangeability of electronic hardware and software, the composition and steps of each example have been generally described in terms of function in the above description. Whether these functions are performed in electronic hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present invention.

Claims

1. A data security transmission system, characterized in that: include: A data acquisition module is provided in each subsystem of the industrial control system and is used to acquire the data to be transmitted of each subsystem, wherein the data to be transmitted includes the subsystem code, subsystem operation data and data acquisition time; A key generation module, configured to generate a data key and a channel key for each subsystem, wherein the data key and the channel key correspond one-to-one to the subsystem code of each subsystem; a data encryption module, configured to encrypt the data to be transmitted based on the data key to obtain encrypted data, wherein the encrypted data includes the encrypted data to be transmitted and a key time-limited verifier, wherein the key time-limited verifier is configured to perform a verification timer after determining that the encrypted data has been decrypted; A channel generation module, configured to generate a dynamic hidden data transmission channel based on the channel key; A data transmission module, configured to transmit the encrypted data to a receiving point of the central system of the industrial control system through the dynamic hidden data transmission channel; A key decryption module, configured to decrypt the dynamic hidden data transmission channel using the channel key, and decrypt the encrypted data using the data key; The security verification module is used to obtain the timing duration of the decrypted key time-limited verifier, determine the integrity of the data to be transmitted based on the timing duration, and when it is determined that the integrity of the data to be transmitted meets the preset conditions, verify the authenticity of the data to be transmitted. If the verification passes, it is determined that the data to be transmitted has completed secure transmission.

2. The data security transmission system according to claim 1, characterized in that: The key generation module is used to generate a data key and a channel key for each subsystem, including: The key generation module is provided with a preset time interval; When the preset time interval passes, the key generation module generates a data key and a channel key for each subsystem using a random number generator, and sends the data key to the data encryption module and the key decryption module, and sends the channel key to the channel generation module and the key decryption module; The key generation module is also connected to the security verification module. When the security verification module fails to pass verification, the key generation module receives the failure verification information and regenerates the data key and the channel key.

3. The data security transmission system according to claim 1, characterized in that: The data encryption module is used to encrypt the data to be transmitted based on the data key to obtain encrypted data, including: The data encryption module includes an encryption unit and a key verification unit; The encryption unit is used to encrypt the data to be transmitted according to the data key to obtain encrypted data to be transmitted; The key verification unit is used to set a judgment subunit and a timing subunit for the key time limit verifier, and add the key time limit verifier to the encrypted data; The judging subunit is used to judge whether the encrypted data has been decrypted and obtain the key time-limited verifier, and if it is determined that the encrypted data has been decrypted, send a decryption completion message to the timing subunit; The timing subunit is used to start verification timing when it is determined that the encrypted data has been decrypted.

4. The data security transmission system according to claim 1, characterized in that: The key decryption module is used to use the channel key to decrypt the dynamic hidden data transmission channel, and use the data key to decrypt the encrypted data, including: The dynamic hidden data transmission channel corresponds one-to-one to the subsystem code of each subsystem; The key decryption module determines the channel key corresponding to the dynamic hidden data transmission channel and the data key of the encrypted data according to the subsystem code; Decrypting the dynamic hidden data transmission channel of the receiving point using the channel key, obtaining encrypted data if the channel decryption is successful, and decrypting the encrypted data using the data key; If the channel decryption is unsuccessful, it is determined that the data to be transmitted is not transmitted securely; If the data decryption is unsuccessful, it is determined that the data to be transmitted is not transmitted securely.

5. The data security transmission system according to claim 1, characterized in that: The security verification module determines the integrity of the data to be transmitted according to the timing duration, including: Obtaining the key length of the data key; Determining a preset time for data decryption based on the key length; Calculating a duration difference between the preset duration and the timed duration, and determining a duration ratio between the duration difference and the preset duration; Determine whether the duration ratio is within an acceptable range. If the duration ratio is within the acceptable range, determine that the integrity of the data to be transmitted meets the preset conditions. If the duration ratio is not within the acceptable range, determine that the integrity of the data to be transmitted does not meet the preset conditions.

6. The data security transmission system according to claim 5, characterized in that: The security verification module determines a preset duration for data decryption according to the key length, including: Presetting a first preset key length, a second preset key length, and a third preset key length, wherein the first preset key length, the second preset key length, and the third preset key length increase in sequence; Setting a preset duration for data decryption according to a relationship between the key length and the first preset key length, the second preset key length, and the third preset key length; If the key length is less than the first preset key length, the preset time length for data decryption is set to the first preset time length T1; If the key length is greater than or equal to the first preset key length and the key length is less than the second preset key length, the preset duration for data decryption is set to the second preset duration T2; If the key length is greater than or equal to the second preset key length and the key length is less than the third preset key length, the preset duration for data decryption is set to the third preset duration T3; If the key length is greater than or equal to the third preset key length, the preset time length for data decryption is set to a fourth preset time length T4; wherein T1<T2<T3<T4.

7. The data security transmission system according to claim 1, characterized in that: The security verification module verifies the authenticity of the data to be transmitted, including: Verifying the data acquisition time and verifying the subsystem operation data; If both the data acquisition time and the subsystem operation data are verified, it is determined that the authenticity verification of the data to be transmitted is passed.

8. The data security transmission system according to claim 7, characterized in that: The security verification module verifies the data acquisition time, including: The security verification module is provided with an acquisition time comparison table, which includes subsystem codes, and each subsystem code corresponds to a unique data acquisition time; Determining the subsystem code in the data to be transmitted, and when determining that the subsystem code in the acquisition time comparison table is consistent with the subsystem code in the data to be transmitted, selecting the corresponding data acquisition time; If the data acquisition time in the data to be transmitted is consistent with the filtered data acquisition time, it is determined that the data acquisition time verification is passed; If the data acquisition time in the data to be transmitted is inconsistent with the filtered data acquisition time, it is determined that the data acquisition time verification has failed.

9. The data security transmission system according to claim 8, characterized in that: The security verification module verifies the subsystem operation data, including: Determine the subsystem code of the data to be transmitted, obtain historical subsystem operation data of the same subsystem code, and determine the operation items in the historical subsystem operation data; Determining the operation items of the subsystem operation data in the data to be transmitted; Comparing the operation items in the historical subsystem operation data with the operation items of the data to be transmitted, and if the operation items of the data to be transmitted are the same as the operation items in the historical subsystem operation data, determining that the subsystem operation data verification has passed; If the operation items of the data to be transmitted are different from the operation items in the historical subsystem operation data, it is determined that the subsystem operation data verification has failed.

10. A data security transmission method, characterized in that: The method comprises: Acquire data to be transmitted from each subsystem of the industrial control system, wherein the data to be transmitted includes a subsystem code, subsystem operation data, and data acquisition time; Generate a data key and a channel key for each subsystem, wherein the data key and the channel key correspond one-to-one to the subsystem code of each subsystem; Encrypting the data to be transmitted based on the data key to obtain encrypted data, wherein the encrypted data includes the encrypted data to be transmitted and a key time-limited verifier, wherein the key time-limited verifier is used to perform verification timing after determining that the encrypted data has been decrypted; generating a dynamic hidden data transmission channel based on the channel key; Transmitting the encrypted data to a receiving point of the central system of the industrial control system through the dynamic hidden data transmission channel; Decrypting the dynamic hidden data transmission channel using the channel key, and decrypting the encrypted data using the data key; Obtain the timing duration of the decrypted key time-limited verifier, determine the integrity of the data to be transmitted based on the timing duration, and when it is determined that the integrity of the data to be transmitted meets the preset conditions, verify the authenticity of the data to be transmitted. If the verification passes, it is determined that the data to be transmitted has completed secure transmission.

Images