Real-time network communication system and method, storage medium and equipment
The real-time network communication system, which utilizes data grouping, dynamic priority scheduling, and composite network diagnostics, solves the problems of blocking during the initialization phase, delay in slave status detection, and lag in network health detection in PLC communication systems. This improves the real-time performance, reliability, and security of communication, meeting the real-time and security requirements of PLC systems.
Patent Information
- Application Number
- CN202511232056.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-09-01
- Publication Date
- 2025-11-11
AI Technical Summary
Existing PLC communication systems suffer from several issues, including blocked real-time communication during the initialization phase, delayed detection of slave station abnormal states, lagging network health checks, insufficient security, and lack of differentiation in data security levels. These issues result in inadequate real-time performance, reliability, and security.
The communication data is divided into initialization, IO and status data groups by the data grouping module, and high and low priority queue scheduling is performed by the dynamic priority scheduling module, the health assessment is performed by the composite network diagnosis module, and the data security transmission module performs encryption and access control to achieve dynamic priority scheduling and secure transmission of data.
The IO data response time has been optimized, improving the real-time performance and reliability of communication. Seamless network failover and health assessment have been achieved, enhancing data security and meeting the real-time requirements of the ISO 13849 standard for PL e-level safety systems.
Smart Images
Figure CN120934878A_ABST
Abstract
Description
Technical Field
[0001] This application belongs to the field of data communication technology, and in particular relates to a real-time network communication system, method, storage medium and device. Background Technology
[0002] In industrial automation control systems, the master-slave communication architecture of programmable logic controllers (PLCs) is widely used in production line control, equipment monitoring, and other fields. In traditional PLC communication technology, the master station exchanges data with each slave station through periodic polling to issue control commands and collect equipment status data. However, existing communication solutions have the following shortcomings in terms of real-time performance, reliability, and security: 1. Initialization data and real-time I / O data were not separated, causing real-time communication to be blocked during the initialization phase.
[0003] In traditional PLC communication, the master and slave stations transmit initialization configuration data (such as device ID and process parameters) and real-time I / O data (such as sensor readings and actuator commands) through the same physical channel during the initialization phase (e.g., device power-on and parameter configuration) and runtime. Since initialization data packets are typically large (e.g., configuration files of several hundred KB), they consume a high proportion of bandwidth during transmission, forcing real-time I / O data to queue. For large systems, this significantly increases initialization time, directly impacting the ramp-up of factory production lines. Furthermore, critical control commands (such as emergency stop signals) may be delayed during the initialization phase, triggering safety cascading failures and creating safety hazards.
[0004] 2. The detection of abnormal status at the slave station relies on periodic polling, which cannot achieve real-time reporting of important events.
[0005] Existing technologies employ a fixed-period polling mechanism (typically 50ms~1s) to detect slave station status, and the response delay for abnormal events is strongly correlated with the polling period. Slave stations lack the authority to proactively report events, and emergency events (such as temperature sensor overload) must wait for the next polling window before being transmitted to the master station. Local anomalies may escalate into systemic failures due to delayed processing, and post-event fault tracing relies on offline log analysis, making real-time root cause localization difficult.
[0006] 3. Network health checks require a dedicated diagnostic cycle, which affects the efficiency of normal data transmission.
[0007] Diagnostics and data transmission compete for bandwidth. Network health status detection (such as link connectivity and CRC error counting) inserts dedicated diagnostic messages at fixed intervals (e.g., every 10 seconds), occupying normal data time slots. To reduce the impact of diagnostics on real-time performance, the diagnostic interval is often forced to be extended (e.g., more than 30 seconds), resulting in lag in network status monitoring and an inability to promptly capture transient faults (such as occasional packet loss caused by electromagnetic interference). Shortening the diagnostic cycle, on the other hand, exacerbates bandwidth competition, creating a conflict between real-time performance and reliability. Furthermore, intermittent network anomalies (such as CRC errors caused by voltage fluctuations at night) are difficult to capture due to excessively long detection intervals, which can severely impact operations and maintenance, creating blind spots in operations and maintenance.
[0008] 4. Lack of built-in security mechanisms poses a risk of command forgery.
[0009] Traditional PLC communication protocols transmit data in plaintext, making it easy for attackers to intercept and parse the communication content (such as sensor data and control commands), leading to the leakage or tampering of sensitive information. Furthermore, the protocol does not verify device identity, allowing attackers to forge legitimate devices (such as PLCs or HMIs) to send malicious commands, such as forcibly shutting down production lines or modifying critical parameters (such as temperature thresholds).
[0010] 5. Failure to differentiate data security levels results in an expanded risk exposure area.
[0011] All data (such as core process parameters, equipment logs, and status monitoring data) are protected by the same security policy. High-value data (such as formula parameters and patented processes) lacks additional protection, allowing attackers to obtain core data without breaking through multiple layers of defense, thus threatening the company's intellectual property. At the same time, low-priority data (such as logs) consumes security resources, while critical data may become a vulnerability due to insufficient protection. Summary of the Invention
[0012] To address the shortcomings of existing technologies, this application provides a real-time network communication system, method, storage medium, and device. Based on innovative architecture design and algorithm optimization, it performs dynamic priority scheduling, encrypted data transmission, and access for different data groups through data orchestration and grouping. It also conducts health assessment through composite network diagnostics, which can optimize IO data response time, detect anomalies in real time, achieve seamless network fault switching, assess health, and optimize data encryption processing, thereby improving communication performance, real-time performance, reliability, and security.
[0013] This application is achieved through the following technical solution: The real-time network communication system includes: a data packet module, a dynamic priority scheduling module, a composite network diagnostic module, and a data security transmission module; The data grouping module is used to group the acquired communication data; The dynamic priority scheduling module is used to dynamically prioritize the communication data based on the data grouping results, through a dual-priority queue scheduler and an event-driven mechanism. The composite network diagnostic module is used to perform composite network diagnostics by deploying embedded broadcast probes and to calculate bus health for health assessment. The data security transmission module is used to encrypt data in different groups based on the data grouping results, and to verify data access and network connection.
[0014] Optional, The data grouping module is also configured to: The acquired communication data is divided into initialization data group, IO data group and status data group.
[0015] Optional, The dynamic priority scheduling module includes: a dual-priority queue scheduler unit and an event-driven mechanism unit; The dual-priority queue scheduler unit is configured to: use a high-priority queue to process IO data groups; and use a low-priority queue to process status data groups. The event-driven mechanism unit is used to elevate the state data group that triggers the event-driven mechanism to a high-priority queue.
[0016] Optional, The composite network diagnostic module is also configured to: Deploy an embedded broadcast probe, and the main station periodically sends broadcast test frames at preset intervals; Upon receiving the broadcast test frame, the slave station sends back a response signal carrying a timestamp within a predetermined time window; The bus health status is calculated based on the response signal to perform a health assessment.
[0017] Optional, The data security transmission module includes: a data packet encryption unit and a dynamic access control unit; The data packet encryption unit is used to encrypt the IO data group and the status data group respectively; The dynamic access control unit is used to verify data access and network connectivity.
[0018] Optional, The AES-128 stream encryption algorithm is used to encrypt the IO data group; And / or, The state data group is encrypted using the RSA-2048 asymmetric encryption algorithm.
[0019] Optional, Verify data access through role-based access control; And / or, Network connectivity is verified through a two-way certificate authentication mechanism.
[0020] This application also provides a real-time network communication method, the method comprising: The acquired communication data is grouped using the data grouping module; Based on the data grouping results, the communication data is dynamically prioritized and scheduled using a dynamic priority scheduling module, a dual-priority queue scheduler, and an event-driven mechanism. Using a composite network diagnostic module, composite network diagnostics are performed by deploying embedded broadcast probes, and bus health is calculated for health assessment. The data security transmission module encrypts data from different groups and verifies data access and network connectivity.
[0021] Optional, The process of grouping the acquired communication data through the data grouping module includes: The acquired communication data is divided into initialization data group, IO data group and status data group.
[0022] Optional, The step of dynamically prioritizing the communication data based on data grouping results, using a dynamic priority scheduling module, and employing a dual-priority queue scheduler and an event-driven mechanism, includes: Use a high-priority queue to process I / O data groups and a low-priority queue to process status data groups. Promote the state data group that triggers the event-driven mechanism to a high-priority queue.
[0023] Optional, The method of utilizing a composite network diagnostic module to perform composite network diagnostics by deploying embedded broadcast probes and calculating bus health for health assessment includes: Deploy an embedded broadcast probe, and the main station periodically sends broadcast test frames at preset intervals; Upon receiving the broadcast test frame, the slave station sends back a response signal carrying a timestamp within a predetermined time window; The bus health status is calculated based on the response signal to perform a health assessment.
[0024] Optional, The data security transmission module encrypts data in different groups and verifies data access and network connection, including: Encryption is performed on both the IO data group and the status data group through data block encryption. Verify data access and network connectivity through the dynamic access control unit.
[0025] This application also provides a computer-readable storage medium storing one or more programs, which, when executed, can implement the aforementioned real-time network communication method.
[0026] This application also provides a device, including a processor, a communication interface, a computer-readable storage medium, and a communication bus; wherein the processor, the communication interface, and the computer-readable storage medium communicate with each other through the communication bus; The processor is used to execute programs stored in a computer-readable storage medium.
[0027] Compared with the prior art, this application has the following advantages: 1. The real-time network communication system proposed in this application organizes and groups data through a data grouping module; it performs dynamic priority scheduling, encrypted data transmission, and access for different data groups through a dynamic priority scheduling module and a secure data transmission module; and it conducts health assessment through composite network diagnostics. This optimizes IO data response time, enables real-time anomaly detection, achieves seamless network failover, health assessment, and optimized data encryption processing, thereby improving communication performance, real-time performance, reliability, and security.
[0028] 2. Based on dynamic priority scheduling, the IO data response time is optimized. In a typical industrial bus environment, the measured end-to-end response time of IO instructions is reduced from 18.2ms in the traditional solution to 10.6ms. The efficiency of the embodiment in this application is improved by 42% (test conditions: 500 nodes, 70% load rate), thus improving communication efficiency.
[0029] 3. Based on the corresponding event-driven mechanism, a hardware-accelerated event stream processing engine (ESP) is adopted to achieve a full-link latency of ≤2ms for the detection and reporting of important abnormal events (such as signal mutations and device offline), meeting the real-time requirements of the ISO 13849 standard for PL e-level safety systems. Simultaneously, it can stably detect signal amplitude anomalies at the 0.5% level (such as voltage ripple exceeding the standard), improving sensitivity by 6 times compared to traditional threshold detection methods. This achieves key event capture and minute anomaly identification, improving the real-time performance of anomaly detection.
[0030] 4. Based on composite network diagnostics, and through a pre-synchronous dual-bus architecture and fast state transition protocol, the master / standby bus switching time is <50ms (industry average 200ms), ensuring uninterrupted PLC control cycles (typical cycle 1ms-10ms); and, when bus health falls below 75%, redundant channel reconstruction is automatically triggered, achieving system availability of 99.999% (downtime <5 minutes per year). Seamless fault switching and self-healing of health are achieved, improving network reliability.
[0031] 5. Based on the characteristics and security requirements of different types of data, different encryption algorithms are used for different data groups. The AES-128 algorithm is used to encrypt IO data groups that usually contain information with high real-time requirements, while the RSA-2048 algorithm is used to encrypt status data groups that have high requirements for data integrity and confidentiality. This improves security while meeting different data requirements.
[0032] Other features and advantages of this application will be set forth in the description which follows, and will be apparent in part from the description, or may be learned by practicing the application. The objectives and other advantages of this application may be realized and obtained by means of the structures pointed out in the description, claims and drawings. Attached Figure Description
[0033] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0034] Figure 1 A schematic block diagram of a real-time network communication system is shown. Figure 2 A schematic diagram of data grouping according to an embodiment of this application is shown; Figure 3 A schematic diagram of the high-priority queue processing flow according to an embodiment of this application is shown; Figure 4 A schematic diagram of the low-priority queue processing flow according to an embodiment of this application is shown; Figure 5 A schematic diagram of the dual-priority scheduling process according to an embodiment of this application is shown; Figure 6 A schematic diagram of the state data group triggering process according to an embodiment of this application is shown; Figure 7 A schematic diagram of the composite network diagnostic processing flow according to an embodiment of this application is shown; Figure 8A schematic diagram of the data packet encryption process according to an embodiment of this application is shown; Figure 9 This illustration shows a schematic diagram of the two-way authentication process between the master station and the slave station according to an embodiment of this application; Figure 10 A flowchart illustrating a real-time network communication method is shown. Figure 11 This is a schematic diagram of the structure of a device according to an embodiment of this application. Detailed Implementation
[0035] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.
[0036] See appendix Figure 1 The system of this application includes: The real-time network communication system includes: a data packet module, a dynamic priority scheduling module, a composite network diagnostic module, and a data security transmission module; The data grouping module is used to group the acquired communication data; wherein, the data grouping module is further configured to divide the acquired communication data into an initialization data group, an IO data group, and a status data group.
[0037] The dynamic priority scheduling module is used to dynamically prioritize the communication data based on the data grouping results, using a dual-priority queue scheduler and an event-driven mechanism. The dynamic priority scheduling module includes a dual-priority queue scheduler unit and an event-driven mechanism unit. The dual-priority queue scheduler unit is configured to: use a high-priority queue to process IO data groups; and use a low-priority queue to process status data groups. The event-driven mechanism unit is used to promote status data groups that trigger the event-driven mechanism to a high-priority queue.
[0038] The composite network diagnostic module is used to perform composite network diagnostics by deploying embedded broadcast probes and to calculate bus health for health assessment. The composite network diagnostic module is further configured to: deploy embedded broadcast probes; have the master station periodically send broadcast test frames at preset intervals; have slave stations that receive the broadcast test frames respond with timestamp-carrying response signals within a predetermined time window; and calculate bus health for health assessment based on the response signals.
[0039] The data security transmission module is used to encrypt different data packets based on the data packetization results, and to verify data access and network connection. The data security transmission module includes a data packet encryption unit and a dynamic access control unit. The data packet encryption unit is used to encrypt IO data packets and status data packets respectively. The dynamic access control unit is used to verify data access and network connection. Specifically, the IO data packets are encrypted using the AES-128 stream encryption algorithm; and / or, the status data packets are encrypted using the RSA-2048 asymmetric encryption algorithm. Data access is verified through role-based access control; and / or, network connection is verified through a two-way certificate authentication mechanism.
[0040] Specifically, Compared with traditional PLCs, this application proposes a data packet transmission mechanism to address the problem of the lack of separation between initialization data and I / O data. This mechanism is used in the real-time network communication system of this application and includes: a data packet module, a dynamic priority scheduling module, a composite network diagnostic module, and a data security transmission module.
[0041] The present application will now be described in further detail with reference to the accompanying drawings and specific embodiments.
[0042] I. Data Grouping.
[0043] The data grouping module is used to group the acquired communication data, including: initialization data group, IO data group and status data group.
[0044] Initialization Data Group: Initialization data (such as device ID and process parameters) are configuration parameters used during the slave initialization phase to initialize the slave's parameters and status information. These configuration parameters are transmitted via a dedicated channel during the device power-on phase, using a non-preemptive transmission protocol.
[0045] IO Data Group: IO data consists of data read from input devices (such as sensors) and data sent to output devices (such as actuators). It is used for high-frequency reception and real-time transmission of important data, including the aggregated number of slave events. A high-speed loop channel (typical cycle ≤ 10ms) is established to transmit IO data. The channel includes: a real-time input / output signal channel and a slave event statistics channel (classified and counted according to urgency).
[0046] Status Data Group: Status data is received via low-frequency communication, transmitting detailed status information of the slave station and supporting detailed reading and writing of the slave station's status by the master station. A low-frequency update channel (typical cycle ≥100ms) is configured to transmit status data, including: slave station operating parameters (temperature, voltage, etc.) and bus health status register.
[0047] As attached Figure 2As shown, the data groups include: initialization data, status data, and IO data; among them, status data is low-frequency data; IO data includes: high-frequency data, second-highest-frequency data, and low-frequency data.
[0048] II. Dynamic priority scheduling.
[0049] The dynamic priority scheduling module is used to dynamically prioritize the communication data based on the data grouping results, through a dual-priority queue scheduler and an event-driven mechanism.
[0050] The main station uses a dual-priority queue scheduler for dynamic priority scheduling, including: Use a high-priority queue to process I / O data groups (including event statistics); Use a low-priority queue to process groups of state data.
[0051] In this embodiment, an event-driven mechanism is also introduced, which elevates the state data group that triggers the event-driven mechanism to a high-priority queue. That is, when the change in the slave event counter exceeds the threshold, the state data group is automatically read.
[0052] 1. Dual-priority queue scheduler.
[0053] High-priority queues are used to process I / O data groups, including real-time I / O signals (such as sensor data and emergency stop commands) and event statistics snapshots (such as the number of device malfunctions and operation trigger frequency). The design goals are: to ensure millisecond-level response (typical latency <10ms); preemptive processing to interrupt low-priority tasks; and a fixed-length queue (to prevent overflow), discarding the oldest data and logging alarms when the queue is full.
[0054] See appendix Figure 3 The high-priority queue processing flow includes: initializing the low-priority queue and setting the initial capacity of the low-priority queue; enqueuing IO data groups and determining whether the high-priority queue is full; if the high-priority queue is full, discarding the oldest data and recording an alarm.
[0055] Use a low-priority queue to process status data groups: including periodic device status (such as temperature and voltage trends) and non-critical logs (such as operation logs and self-test reports). The design goals are: to allow sub-second latency (typical latency 100ms-1s); batch processing during idle periods to reduce CPU usage; and dynamically expanding the queue to allow temporary backlogs (such as during network congestion).
[0056] As attached Figure 4 As shown, the low-priority queue processing flow includes: initializing the high-priority queue and setting the initial capacity of the high-priority queue; enqueuing the status data group and determining whether expansion is needed; if expansion is needed, dynamically expanding the queue.
[0057] The dual-priority scheduling strategy includes: support for priority preemption rules, i.e., when there is data in the high-priority queue, the low-priority task is immediately paused, and the low-priority task resumes after the high-priority task is completed; CPU time slice allocation, in this embodiment, the high-priority task is allocated 70% and the low-priority task is allocated 30%; memory pre-allocation, with the high-priority queue exclusively occupying the real-time memory pool (Locked Memory).
[0058] As attached Figure 5 As shown, the dual-priority scheduling process includes: determining whether data exists in the priority queue; if it exists, pausing the low-priority task and recording the breakpoint; processing the high-priority task to ensure millisecond-level response; and resuming the low-priority task from the breakpoint.
[0059] 2. Event-driven mechanism.
[0060] This application introduces an event-driven mechanism. When an event is triggered, the corresponding state data group is promoted to a high-priority queue.
[0061] Event types include: hardware events (slave communication timeout, power fluctuation) and software events (buffer overflow, protocol parsing error). Thresholds include: static thresholds (preset fixed values, such as more than 5 communication errors within 1 minute) and dynamic thresholds (adaptively adjusted based on historical data, such as a sliding window to statistically analyze abnormal baselines).
[0062] As attached Figure 6 As shown, in this embodiment, the status data group triggering process includes: real-time update of the master station's built-in counter (e.g., once every 100ms); calculation of the difference between adjacent period counters; if the difference between adjacent period counters is greater than or equal to a preset static threshold, then the module is marked as "requiring in-depth diagnosis"—the status data group of the corresponding slave station is promoted to a high-priority queue—the event context (timestamp, counter value, related slave station number) is recorded.
[0063] III. Composite Network Diagnosis.
[0064] The composite network diagnostic module is used to perform composite network diagnostics by deploying embedded broadcast probes, calculating bus health, and conducting health assessments, including: Deploy an embedded broadcast probe, and the main station sends broadcast test frames periodically (typically at 1 second interval) according to a preset time. Upon receiving the broadcast test frame, the slave station sends back a response signal carrying a timestamp within a predetermined time window; The bus health status is calculated and assessed as follows: Bus health status = (Number of valid responses / Total number of slaves) × 100%. If the health status is less than a preset first threshold, the backup bus is activated; if the health status is less than a preset second threshold, a system alarm is triggered. (Where the first threshold is greater than the second threshold.) Composite network diagnostics has the following characteristics: millisecond-level network status awareness (1-second detection cycle + sub-second response processing); combining active detection and passive statistics to avoid the blind spots of a single detection mechanism; and achieving automatic fault switching and graded alarm response through threshold linkage.
[0065] Deploying embedded broadcast probes includes: when the system starts up, first perform unicast tests on key nodes, and then start broadcasting after confirming that the basic links are normal; automatically generate a network topology map based on the broadcast response, and mark nodes with abnormal response delays.
[0066] As attached Figure 7 As shown, the composite network diagnostic process includes: the master station periodically (typically at 1s interval) sends broadcast test frames; after receiving the broadcast test frames, the slave station sends back a timestamped response signal within a predetermined time window; the bus health is calculated: bus health = (number of valid responses / total number of slave stations) × 100%; it is determined whether the health is less than the preset first threshold: if the health is less than threshold 1, the backup bus is activated; otherwise, it is further determined whether the health is less than the preset second threshold: if the health is less than threshold 2, a system alarm is triggered; otherwise, the network status is considered normal.
[0067] III. Secure Data Transmission.
[0068] The data security transmission module is used to encrypt different data packets based on the data packet results, and to verify data access and network connection, including: The data packet encryption unit is used to encrypt the IO data group and the status data group respectively; The dynamic access control unit is used to verify data access and network connectivity.
[0069] In this embodiment, in order to more effectively ensure the security of data during transmission, this application proposes a comprehensive solution that integrates data packet encryption transmission and dynamic access control, building a robust defense from the two key levels of data encryption and access control to ensure the secure flow of data in complex network environments.
[0070] 1. Data group encryption.
[0071] Considering the characteristics and security requirements of different types of data, the data is meticulously grouped and different encryption algorithms are used.
[0072] IO Data Group Encryption: IO data groups typically contain information with high real-time requirements, such as real-time IO signals (sensor data, emergency stop commands) and event statistics snapshots (number of device anomalies, operation trigger frequency). To achieve efficient encryption while ensuring data real-time performance, the AES-128 stream encryption algorithm is used to encrypt the IO data groups. The AES-128 algorithm is characterized by its fast encryption speed and high efficiency, capable of encrypting IO data groups within milliseconds, ensuring data security during transmission while meeting the system's stringent requirements for real-time response.
[0073] Status data group encryption: Status data groups mainly cover periodic equipment status (temperature, voltage trends) and non-critical logs (operation records, self-test reports), etc. Since this type of data has relatively low real-time requirements but high requirements for data integrity and confidentiality, the RSA-2048 asymmetric encryption algorithm is used to encrypt the status data groups. The RSA-2048 algorithm is based on complex mathematical principles and has extremely high security, effectively preventing data from being stolen or tampered with during transmission, providing reliable encryption protection for the status data groups.
[0074] Encrypting data into blocks can effectively reduce the risk of core data being tampered with.
[0075] As attached Figure 8 As shown, the data packet encryption process includes: data type determination: if it is IO data, it is transmitted after AES-128 stream encryption; if it is status data, it is transmitted after RSA-2048 asymmetric encryption.
[0076] 2. Dynamic access control.
[0077] To further enhance system security, this embodiment also introduces role-based access control (RBAC) and a two-way certificate authentication mechanism to achieve fine-grained control and strict verification of data access.
[0078] Role-Based Access Control (RBAC): RBAC is a widely used access control model that effectively manages user access behavior by defining different roles and assigning specific permissions to each role, and is used to verify data access. In this embodiment, the master station has the right to control the slave station; the master station can access the slave station, but the slave station cannot access the master station.
[0079] Two-way certificate authentication mechanism: This mechanism is an identity verification method based on digital certificates. It requires both communicating parties to verify each other's identity when establishing a connection, thus validating the network connection. In this scheme, each entity participating in data transmission (such as a master station and a slave station) possesses a unique digital certificate issued by a trusted Certificate Authority (CA). When two entities communicate, they first exchange their respective digital certificates and then verify the validity and authenticity of the certificates to confirm each other's identity. Only after both parties' identities have been verified is a secure communication connection allowed, effectively preventing man-in-the-middle attacks and identity impersonation risks.
[0080] As attached Figure 9 As shown, the two-way authentication process between the master station and the slave station includes: the master station initiates a connection request; it determines whether the slave station responds; if there is no response, the connection fails; if there is a response, the master station sends a certificate to the slave station, and the slave station verifies the validity of the certificate; if the certificate is invalid, the connection fails; if the certificate is valid, the master station and the slave station negotiate a key; if the negotiation is successful, a secure connection is established; if the negotiation fails, the connection fails.
[0081] Compared with traditional PLCs, the real-time network communication method proposed in this application proposes a systematic optimization strategy that takes into account data transmission efficiency, data transmission security, and health status detection, thereby effectively improving the performance of traditional PLC systems.
[0082] See appendix Figure 10 The flowchart of the real-time network communication method in this embodiment is shown, including: The acquired communication data is grouped using the data grouping module; Based on the data grouping results, the communication data is dynamically prioritized and scheduled using a dynamic priority scheduling module, a dual-priority queue scheduler, and an event-driven mechanism. Using a composite network diagnostic module, composite network diagnostics are performed by deploying embedded broadcast probes, and bus health is calculated for health assessment. The data security transmission module encrypts data from different groups and verifies data access and network connectivity.
[0083] Furthermore, embodiments of this application also provide a real-time network communication device, including: The data grouping module groups the acquired communication data. The dynamic priority scheduling module performs dynamic priority scheduling of the communication data based on the data grouping results, using a dual-priority queue scheduler and an event-driven mechanism. The composite network diagnostic module performs composite network diagnostics by deploying embedded broadcast probes and calculates bus health for health assessment. The data security transmission module encrypts different data packets based on the data packetization results, and verifies data access and network connection.
[0084] Based on the same concept, this application also provides a computer-readable storage medium storing one or more programs, which, when executed, can realize the aforementioned real-time network communication method.
[0085] As attached Figure 11 As shown in the illustration, this application also provides a device including a processor, a communication interface, a memory, and a communication bus. The processor, communication interface, and memory communicate with each other via the communication bus.
[0086] The memory is a computer-readable storage medium used to store one or more programs.
[0087] The processor is configured to execute a program stored in a computer-readable storage medium.
[0088] The computer-readable storage medium may be included in the device / apparatus described in the above embodiments; or it may exist independently and not assembled into the device / apparatus.
[0089] Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application.
Claims
1. A real-time network communication system, characterized in that, The real-time network communication system includes: a data packet module, a dynamic priority scheduling module, a composite network diagnostic module, and a data security transmission module; The data grouping module is used to group the acquired communication data; The dynamic priority scheduling module is used to dynamically prioritize the communication data based on the data grouping results, through a dual-priority queue scheduler and an event-driven mechanism. The composite network diagnostic module is used to perform composite network diagnostics by deploying embedded broadcast probes and to calculate bus health for health assessment. The data security transmission module is used to encrypt data in different groups based on the data grouping results, and to verify data access and network connection.
2. The system according to claim 1, characterized in that, The data grouping module is also configured to: The acquired communication data is divided into initialization data group, IO data group and status data group.
3. The system according to claim 2, characterized in that, The dynamic priority scheduling module includes: a dual-priority queue scheduler unit and an event-driven mechanism unit; The dual-priority queue scheduler unit is configured to: use a high-priority queue to process IO data groups; and use a low-priority queue to process status data groups. The event-driven mechanism unit is used to elevate the state data group that triggers the event-driven mechanism to a high-priority queue.
4. The system according to claim 1, characterized in that, The composite network diagnostic module is also configured to: Deploy an embedded broadcast probe, and the main station periodically sends broadcast test frames at preset intervals; Upon receiving the broadcast test frame, the slave station sends back a response signal carrying a timestamp within a predetermined time window; The bus health status is calculated based on the response signal to perform a health assessment.
5. The system according to any one of claims 1-4, characterized in that, The data security transmission module includes: a data packet encryption unit and a dynamic access control unit; The data packet encryption unit is used to encrypt the IO data group and the status data group respectively; The dynamic access control unit is used to verify data access and network connectivity.
6. The system according to claim 5, characterized in that, The data packet encryption unit is used to encrypt the IO data group and the status data group respectively, including: The IO data group is encrypted using the AES-128 stream encryption algorithm; and / or the status data group is encrypted using the RSA-2048 asymmetric encryption algorithm. The dynamic access control unit is used to verify data access and network connection, including: verifying data access through role-based permission management; and / or verifying network connection through a two-way certificate authentication mechanism.
7. A real-time network communication method, characterized in that, The method includes: The acquired communication data is grouped using the data grouping module; Based on the data grouping results, the communication data is dynamically prioritized and scheduled using a dynamic priority scheduling module, a dual-priority queue scheduler, and an event-driven mechanism. Using a composite network diagnostic module, composite network diagnostics are performed by deploying embedded broadcast probes, and bus health is calculated for health assessment. The data security transmission module encrypts data from different groups and verifies data access and network connectivity.
8. The method according to claim 7, characterized in that, The data security transmission module encrypts data in different groups and verifies data access and network connection, including: Encryption is performed on both the IO data group and the status data group through data block encryption. Verify data access and network connectivity through the dynamic access control unit.
9. A computer-readable storage medium storing one or more programs, characterized in that, When one or more programs are executed, the real-time network communication method described in any one of claims 7-8 can be implemented.
10. An electronic device, comprising a processor, a communication interface, a computer-readable storage medium as described in claim 9, and a communication bus; wherein, The processor, communication interface, and computer-readable storage medium communicate electronically with each other via a communication bus; characterized in that, The processor is used to execute programs stored in a computer-readable storage medium.