Automatic Network Topology Method and System for Security Control in Industrial Internet of Things

Abstract

This invention provides an automatic network topology method and system for security control of the Industrial Internet of Things (IIoT), relating to the field of secure communication technology. The method includes: dividing a first network topology into a second network topology; setting up a MOSFET power switching circuit connected to the IIoT device; detecting security threats during the IIoT transmission process to obtain security threat indicators; and when the security threat indicators are greater than or equal to a preset threshold, switching the MOSFET power switching circuit from a first power supply to a second power supply, and then transmitting data based on the second network topology controlled by the second power supply. This invention solves the technical problem in existing technologies where the fixed IIoT network topology and lack of dynamic adjustment capabilities lead to insufficient network security and stability. It achieves the technical effect of flexibly adjusting the network topology structure, thereby improving the security and stability of the IIoT network.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of secure communication, and particularly relates to a network automatic topology method and system for industrial Internet of Things security control. BACKGROUND

[0002] In the industrial Internet of Things, the network topology structure bears the role of connecting key devices and edge nodes, and its security and stability directly affect the continuity and reliability of the entire production process. With the widespread deployment of industrial Internet of Things devices, the data transmitted in the network is diverse, and the data transmission path often spans multiple nodes. Due to the complex industrial site environment, diverse device types, and communication links vulnerable to external threats such as network attacks, electromagnetic interference, and malicious intrusion, the network operation is at great risk.

[0003] Existing industrial Internet of Things network topology is mostly fixed after design, using fixed network structure and single power supply control method, lacking the ability to adaptively switch according to real-time security state. When the network is at high risk or under attack, the topology cannot be quickly adjusted, and the key nodes may be affected, causing data transmission interruption or tampering, and further threatening the safety and stability of industrial production.

[0004] In summary, the prior art has the technical problem of insufficient network operation safety and stability due to fixed industrial Internet of Things network topology and lack of dynamic adjustment capability. SUMMARY

[0005] The purpose of the present application is to provide a network automatic topology method and system for industrial Internet of Things security control, to solve the technical problem of insufficient network operation safety and stability due to fixed industrial Internet of Things network topology and lack of dynamic adjustment capability in the prior art.

[0006] In view of the above problems, the present application provides a network automatic topology method and system for industrial Internet of Things security control.

[0007] In a first aspect of the present application, a network automatic topology method for industrial Internet of Things security control is provided, the method comprising: dividing a first network topology and a second network topology, wherein the first network topology comprises a key network topology node, and the second network topology comprises an edge network topology node; setting a MOS tube power supply switching circuit, the MOS tube power supply switching circuit being connected with an industrial Internet of Things device, the MOS tube power supply switching circuit comprising a first power supply and a second power supply, the first power supply being used for controlling the first network topology, and the second power supply being used for controlling the second network topology; acquiring a security threat index by performing security threat detection on a transmission process of the industrial Internet of Things, and switching the MOS tube power supply switching circuit from the first power supply to the second power supply when the security threat index is greater than or equal to a preset threshold, and performing data transmission based on the second network topology controlled by the second power supply.

[0008] Optionally, network real-time transmission data is acquired, industrial protocol anomaly detection, device behavior baseline anomaly detection and transmission signal execution anomaly detection are performed on the network real-time transmission data, and a multi-source anomaly detection result is acquired; a plurality of security threat indexes of the multi-source anomaly detection result are identified, and the MOS tube power supply switching circuit is switched from the first power supply to the second power supply when any security threat index of the plurality of security threat indexes is greater than or equal to a preset threshold.

[0009] Optionally, the MOS tube power supply switching circuit comprises an NMOS tube, a first PMOS tube and a second PMOS tube; when the MOS tube power supply switching circuit is powered based on the first power supply, the NMOS tube and the first PMOS tube are turned on, and the second PMOS tube is turned off; when the MOS tube power supply switching circuit is powered based on the second power supply, the NMOS tube and the first PMOS tube are turned off, and the second PMOS tube is turned on.

[0010] Optionally, a network topology node set used for industrial Internet of Things transmission is read; a criticality evaluation index set is obtained by performing function attribute evaluation on each network topology node in the network topology node set; a network topology node greater than a first preset criticality evaluation threshold in the criticality evaluation index set is identified, a first initial network topology structure is established, a network topology node less than a second preset criticality evaluation threshold in the criticality evaluation index set is identified, and a second initial network topology structure is established; a network topology node greater than or equal to the second preset criticality evaluation threshold and less than the first preset criticality evaluation threshold is marked as an overlap region; the overlap region is connected to the first initial network topology structure and the second initial network topology structure respectively, and the first network topology and the second network topology are obtained.

[0011] Optionally, the detection transmission process is based on a first network transmission path controlled by the first power supply; the first network topology node in the overlapping area is identified according to the first network transmission path, and the network topology node in the overlapping area is marked as a transferable network topology node; when the MOS tube power switching circuit is switched from the first power supply to the second power supply, the transmission process is re-planned based on a second network transmission path controlled by the second power supply, and data transmission is performed according to the re-planned second network transmission path.

[0012] Optionally, after the network topology node greater than or equal to the second preset criticality evaluation threshold and less than the first preset criticality evaluation threshold is marked as an overlapping area, an overlapping network topology node in the overlapping area is identified; the overlapping network topology node is based on the first power supply and the second power supply for dual power supply protection.

[0013] Optionally, transmission task information of the transmission process is identified; transmission compatibility matching analysis is performed on the transferable network topology node according to the transmission task information, and a first transferable network topology node is obtained; a first candidate network transmission path set is constructed based on the first transferable network topology node and the second network topology, transmission quality scores are calculated for the first candidate network transmission path set according to the transmission task information, and a first candidate network transmission path is obtained; and the first candidate network transmission path is output as the re-planned second network transmission path.

[0014] Optionally, k transferable network topology nodes meeting the compatibility requirements are obtained; any transferable network topology node in the k transferable network topology nodes is randomly selected, the first candidate network transmission path set is re-constructed and the first candidate network transmission path is obtained; the k transferable network topology nodes are re-analyzed for transmission compatibility matching based on the first candidate network transmission path, and the first candidate network transmission path is re-obtained according to the re-selected transferable network topology node. In this way, the first candidate network transmission path is re-obtained according to the re-selected transferable network topology node until the re-selected transferable network topology node re-obtains the first candidate network transmission path for a continuous number of times and returns the same, and the second network transmission path is output.

[0015] Optionally, the function attribute of each network topology node in the network topology node set is evaluated, including network real-time of each topology node, network historical failure probability, network security protection mechanism, service criticality, stored data value, and network connectivity.

[0016] In a second aspect of the present application, a network automatic topology system for industrial Internet of Things security control is provided, comprising: a network topology division module for dividing a first network topology and a second network topology, wherein the first network topology comprises a key network topology node, and the second network topology comprises an edge network topology node; a switching circuit setting module for setting a MOS tube power switching circuit, wherein the MOS tube power switching circuit is connected with an industrial Internet of Things device, the MOS tube power switching circuit comprises a first power supply and a second power supply, the first power supply is used for controlling the first network topology, and the second power supply is used for controlling the second network topology; and a security detection module for acquiring a security threat index by performing security threat detection on a transmission process of the industrial Internet of Things, and switching the MOS tube power switching circuit from the first power supply to the second power supply when the security threat index is greater than or equal to a preset threshold, and performing data transmission based on the second network topology controlled by the second power supply.

[0017] The one or more technical solutions provided in the present application have at least the following technical effects or advantages:

[0018] The method provided by the embodiments of the present application divides a first network topology and a second network topology, sets a MOS tube power switching circuit, the MOS tube power switching circuit is connected with an industrial Internet of Things device, the MOS tube power switching circuit comprises a first power supply and a second power supply, the first power supply is used for controlling the first network topology, and the second power supply is used for controlling the second network topology, a security threat index is acquired by performing security threat detection on a transmission process of the industrial Internet of Things, the MOS tube power switching circuit is switched from the first power supply to the second power supply when the security threat index is greater than or equal to a preset threshold, and data transmission is performed based on the second network topology controlled by the second power supply. The network topology structure is flexibly adjusted, the dynamic switching of the network topology under different security states is realized, the high-risk path is effectively isolated, and the network operation safety and stability of the industrial Internet of Things are improved.

[0019] The above description is only a summary of the technical solutions of the present application. In order to more clearly understand the technical means of the present application, the following detailed description can be implemented in accordance with the content of the description, and in order to make the above and other purposes, characteristics and advantages of the present application more obvious and easy to understand, the following specific embodiments of the present application are described. It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present application, nor is it intended to limit the scope of the present application. Other features of the present application will become apparent from the following description. BRIEF DESCRIPTION OF DRAWINGS

[0020] To more clearly illustrate the technical solutions in this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are merely exemplary. For those skilled in the art, other drawings can be obtained based on the provided drawings without creative effort.

[0021] Figure 1 This is a flowchart illustrating the automatic network topology method for security control of the Industrial Internet of Things provided in this application.

[0022] Figure 2 This is a schematic diagram of the network automatic topology system for security control of the Industrial Internet of Things provided in this application.

[0023] Figure labeling: Network topology partitioning module 11, switching circuit setting module 12, security detection module 13. Detailed Implementation

[0024] This application provides an automatic network topology method and system for security control of the Industrial Internet of Things (IIoT), addressing the technical problem in existing technologies where fixed network topologies and a lack of dynamic adjustment capabilities in IIoT networks lead to insufficient network security and stability. It achieves the technical effect of flexibly adjusting the network topology structure, thereby improving the security and stability of IIoT network operations.

[0025] The technical solutions of the present invention will now be clearly and completely described with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present invention, and not all of them. It should be understood that the present invention is not limited to the exemplary embodiments described herein. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative effort are within the scope of protection of the present invention. It should also be noted that, for ease of description, only the parts related to the present invention are shown in the accompanying drawings, not all of them.

[0026] Example 1, as Figure 1 As shown, this application provides an automatic network topology method for security control of industrial IoT, the automatic network topology method for security control of industrial IoT includes:

[0027] A first network topology and a second network topology are defined, wherein the first network topology includes key network topology nodes and the second network topology includes edge network topology nodes.

[0028] Further, the method for dividing the first network topology and the second network topology comprises: reading a network topology node set for industrial Internet of Things transmission; performing function attribute evaluation on each network topology node in the network topology node set to obtain a criticality evaluation index set; identifying a network topology node greater than a first preset criticality evaluation threshold in the criticality evaluation index set, establishing a first initial network topology structure, identifying a network topology node less than a second preset criticality evaluation threshold in the criticality evaluation index set, and establishing a second initial network topology structure; marking a network topology node greater than or equal to the second preset criticality evaluation threshold and less than the first preset criticality evaluation threshold as an overlapping area; and connecting the overlapping area to the first initial network topology structure and the second initial network topology structure respectively to obtain the first network topology and the second network topology.

[0029] Further, the function attribute evaluation on each network topology node in the network topology node set comprises network real-time performance, network historical failure probability, network security protection mechanism, service criticality, stored data value, and network connectivity of each topology node.

[0030] Specifically, by deploying sensors, monitoring devices and network management tools in the industrial Internet of Things, using network scanning tools Nmap or network discovery protocols LLDP, CDP, collect information of all devices and connection points in the industrial Internet of Things network transmission, including basic information such as IP address, MAC address, device type, connection state, and topology information such as device location and role in the industrial Internet of Things network transmission, integrate the collected information to form a network topology node set, which contains all devices and connection points participating in the industrial Internet of Things network data transmission. Through multiple indicators such as network real-time performance, network historical failure probability, network security protection mechanism, business criticality, stored data value, and network connectivity, the function attribute of each node in the network topology node set is evaluated, for example, using data analysis algorithms and expert experience, combined with historical data, the indicators of each node are quantitatively scored by weighted summation, and finally the criticality evaluation index set is obtained. Taking an intelligent factory network in an industrial Internet of Things as an example, in the intelligent factory, there are various types of network topology nodes, such as production control nodes PLC controllers, device monitoring nodes sensors, data storage nodes servers, and network communication nodes switches, etc. Multiple nodes work together to ensure the smooth progress of the production process of the factory. According to the actual needs and business characteristics of the industrial Internet of Things, combined with expert experience and historical data, each indicator is assigned a corresponding weight, network real-time performance is used to measure the speed of node processing and data transmission, the weight is set to 0.2, network historical failure probability is used to evaluate node stability, the weight is set to 0.15, network security protection mechanism is used to evaluate whether the node has perfect security protection measures such as firewall, encryption algorithm, etc., the weight is set to 0.25, business criticality refers to the importance of the business carried by the node in the entire industrial production, the weight is set to 0.2, the stored data value weight is set to 0.1, and the network connectivity represents the connection ability and communication quality of the node with other nodes, the weight is set to 0.1. Then score each node, the PLC controller is responsible for real-time control of the operation of production equipment, through analysis of historical data, it is shown that its data transmission delay is less than 5ms on average, 10 points, PLC controller node network real-time performance is scored 9 points, similarly, analyze the node's fault record in the past year, only once short-term failure occurred, according to the preset scoring rule, network historical failure probability is scored 8 points, PLC controller node is equipped with firewall and data encryption function, which can effectively resist common network attacks, and has high security protection level, network security protection mechanism is scored 9 points.The PLC controller is the core node of production control, and is directly related to the normal operation of the production line and product quality. The business criticality is very high, and is given 10 points. The value of the stored data is given 7 points. The network connectivity is given 8 points. Then, according to the weighted calculation formula: criticality evaluation index = network real-time score × network real-time weight + network historical failure probability score × network historical failure probability weight + network security protection mechanism score × network security protection mechanism weight + business criticality score × business criticality weight + stored data value score × stored data value weight + network connectivity score × network connectivity weight, the function attributes of the PLC controller are evaluated, that is, 9 × 0.2 + 8 × 0.15 + 9 × 0.25 + 10 × 0.2 + 7 × 0.1 + 8 × 0.1 = 8.75. Similarly, the function attributes of each network topology node in the network topology node set are evaluated to obtain a criticality evaluation index set. According to the actual needs and safety standards of the industrial Internet of Things, a first preset criticality evaluation threshold is set in advance, and then each index value in the criticality evaluation index set is compared with the first preset criticality evaluation threshold. The network topology nodes greater than the first preset criticality evaluation threshold in the criticality evaluation index set are identified. The nodes greater than the first preset criticality evaluation threshold have high real-time performance, low failure probability, strong security protection, high business criticality, high data value and good connectivity, and belong to critical network topology nodes. Based on the critical network topology nodes, a first initial network topology structure is established. For example, the first preset criticality evaluation threshold is set to 7, and the criticality evaluation index of the PLC controller node is 8.75, which is greater than the first preset criticality evaluation threshold. Therefore, the PLC controller node is included in the critical network topology node. At the same time, the network topology nodes less than the second preset criticality evaluation threshold are identified, and the network topology nodes less than the second preset criticality evaluation threshold are included in the second initial network topology structure. The network topology nodes less than the second preset criticality evaluation threshold have weak performance in function attributes, and belong to edge network topology nodes. The network topology nodes greater than or equal to the second preset criticality evaluation threshold and less than the first preset criticality evaluation threshold are marked as an overlap area. The network topology nodes in the overlap area are between the critical nodes and the edge nodes, and then the overlap area is connected to the first initial network topology structure and the second initial network topology structure respectively to obtain a final first network topology and a final second network topology. The first network topology includes the critical network topology nodes, and the second network topology includes the edge network topology nodes. Through the connection of the overlap area, the first network topology and the second network topology are independent of each other and have certain association. The buffer zone is provided for the dynamic adjustment of the network topology and the power switching. When the network faces a security threat or needs to be reconstructed, the transition can be more smooth, the influence on the normal operation of the network is reduced, and the flexibility and adaptability of the industrial Internet of Things network are enhanced.

[0031] Further, after marking the network topology nodes greater than or equal to the second preset criticality evaluation threshold and less than the first preset criticality evaluation threshold as overlapping areas, overlapping network topology nodes in the overlapping areas are identified; the overlapping network topology nodes are protected by dual power supply based on the first power supply and the second power supply.

[0032] Specifically, after completing the criticality evaluation of the network topology nodes, the network topology nodes greater than or equal to the second preset criticality evaluation threshold and less than the first preset criticality evaluation threshold are marked as overlapping areas. Then, all the network topology nodes marked as overlapping areas are identified by the network management tool, and the overlapping network topology nodes are protected by dual power supply based on the first power supply and the second power supply, i.e., the network topology nodes in the overlapping areas are connected to the first power supply and the second power supply at the same time. The purpose of dual power supply protection is to ensure that the network topology nodes in the overlapping areas can obtain stable power supply in any case, thereby guaranteeing the reliability and stability of network operation. Through dual power supply protection, the overlapping network topology nodes in the overlapping areas can seamlessly switch the power supply during network topology switching, avoiding interruption or data loss caused by power supply switching, and ensuring the safety and continuity of data transmission.

[0033] The MOS tube power supply switching circuit is connected with the industrial Internet of Things device, and includes a first power supply and a second power supply. The first power supply is used to control the first network topology, and the second power supply is used to control the second network topology.

[0034] Further, the MOS tube power supply switching circuit includes an NMOS tube, a first PMOS tube, and a second PMOS tube. When the MOS tube power supply switching circuit is powered based on the first power supply, the NMOS tube and the first PMOS tube are turned on, and the second PMOS tube is turned off. When the MOS tube power supply switching circuit is powered based on the second power supply, the NMOS tube and the first PMOS tube are turned off, and the second PMOS tube is turned on.

[0035] Specifically, according to the power requirement and electrical characteristics of the industrial Internet of Things device, a suitable MOS tube model is matched, for an industrial Internet of Things device with high power, a MOS tube with high withstand voltage value and large maximum current is selected to ensure that the working voltage and current of the device can be withstood during power switching, and power switching failure or device damage caused by MOS tube damage is avoided. According to the obtained MOS tube, a MOS tube power switching circuit is set, the MOS tube power switching circuit includes three MOS tubes: an NMOS tube, a first PMOS tube and a second PMOS tube, wherein the first PMOS tube works cooperatively with the NMOS tube to control the connection of the first power supply, the second PMOS tube controls the connection of the second power supply, the NMOS is a gate high level on and a low level off, and the PMOS is a gate low level on and a high level off. The MOS tube power switching circuit is connected to the industrial Internet of Things device through a driving circuit, and the polarity connection of the power supply is correct during the connection process to prevent damage to the device and the MOS tube due to reverse polarity connection and ensure stable supply of the power supply during the switching process. The MOS tube power switching circuit includes a first power supply and a second power supply, the first power supply is used to control a first network topology, i.e. a key network topology node, and the second power supply is used to control a second network topology, i.e. an edge network topology node. When the MOS tube power switching circuit is powered based on the first power supply, the NMOS tube and the first PMOS tube are turned on by controlling the gate voltage of the MOS tube, and the second PMOS tube is turned off, at this time, the first network topology is in a working state. When the MOS tube power switching circuit is powered based on the second power supply, the NMOS tube and the first PMOS tube are turned off by controlling the gate voltage of the MOS tube, and the second PMOS tube is turned on, and the second network topology is in a working state. By setting the MOS tube power switching circuit, when the industrial Internet of Things detects a security threat, the high-speed switching characteristics of the MOS tube are utilized to quickly and accurately switch the network topology, and seamless switching of the power supply is realized, which guarantees the continuous and stable operation of the industrial Internet of Things device, improves the security of the industrial Internet of Things, and improves the reliability and flexibility of the industrial Internet of Things.

[0036] By detecting security threats in the transmission process of the industrial Internet of Things, a security threat index is obtained, and when the security threat index is greater than or equal to a preset threshold, the MOS tube power switching circuit is switched from the first power supply to the second power supply, and data transmission is performed based on the second network topology controlled by the second power supply.

[0037] Further, by detecting security threats of the transmission process of the industrial Internet of Things, a security threat index is obtained, and the method comprises: obtaining network real-time transmission data, performing industrial protocol anomaly detection, device behavior baseline anomaly detection, and transmission signal execution anomaly detection on the network real-time transmission data, and obtaining multi-source anomaly detection results; identifying a plurality of security threat indexes of the multi-source anomaly detection results; and when any security threat index in the plurality of security threat indexes is greater than or equal to a preset threshold, switching the MOS tube power supply circuit from the first power supply to the second power supply.

[0038] Specifically, network real-time transmission data of the industrial Internet of Things is obtained by using a network analysis tool such as Wireshark, and the network real-time transmission data contains all information of communication between devices in the industrial Internet of Things, such as the source, destination, transmission protocol, data content, and the like of the data. Multidimensional anomaly detection is performed on the obtained network real-time transmission data, including industrial protocol anomaly detection, device behavior baseline anomaly detection, and transmission signal execution anomaly detection. Among them, the industrial protocol anomaly detection is used to check the protocol fields in the real-time transmission data one by one to determine whether there is a situation that does not conform to the protocol specification. For example, by using regular expressions or protocol parsing libraries to check whether the function code in the Modbus protocol is within the legal range, whether the data address is valid, and the like. By using time series analysis algorithm, a normal behavior baseline of each industrial Internet of Things device is established based on the normal operation data of the device, and the normal behavior baseline contains various behavior characteristics of the device in the normal operation state, such as data transmission frequency, data size, communication time, and the like. By comparing and analyzing the network real-time transmission data with the normal behavior baseline, it is detected whether the real-time behavior of the device deviates from the normal range. For example, whether the connection frequency of the device, the data transmission volume, and the like are abnormal. The transmission signal execution anomaly detection is used to detect the state of the transmission data in the transmission process, such as the strength, delay, and jitter of the signal. By setting reasonable signal quality index threshold values, the various indicators of the signal are monitored in real time, and when the indicators exceed the threshold range, it indicates that the transmission signal execution is abnormal. By performing multiple anomaly detection, multiple source anomaly detection results are obtained. Multiple security threat indicators, such as the number of protocol violations, the frequency of device behavior anomalies, and the signal execution anomaly rate, are identified in the multiple source anomaly detection results, and the multiple security threat indicators are used to reflect the security status of the industrial Internet of Things transmission process from different angles. The identified multiple security threat indicators are compared with the preset threshold values one by one. The preset threshold values are determined according to the actual security requirements, business importance, and historical data experience of the industrial Internet of Things, and are used to determine whether the current network state is safe. If any of the multiple security threat indicators is greater than or equal to the preset threshold value, it indicates that there is a security threat in the transmission process of the industrial Internet of Things, and at this time, the MOS transistor power switching circuit is triggered immediately, and the MOS transistor power switching circuit is switched from the first power supply to the second power supply. The second network topology controlled based on the second power supply is used for data transmission. If all the multiple security threat indicators are less than the preset threshold value, it indicates that the data transmission process is safe and stable, and no change is made, and the first network topology controlled by the first power supply is still used for data transmission.

[0039] Through comprehensive and meticulous security threat detection, potential security threats in the transmission process of industrial IoT can be detected in a timely manner. And through a fast and accurate power switching mechanism, the network topology can be dynamically switched under different security states, thereby effectively reducing the impact of security threats on industrial IoT and ensuring the normal operation of industrial production and the secure and stable transmission of data.

[0040] Furthermore, the method for switching the MOSFET power switching circuit from the first power supply to the second power supply includes: detecting a first network transmission path controlled by the first power supply during the transmission process; identifying network topology nodes in the overlapping area of ​​the first network topology based on the first network transmission path, and marking the network topology nodes in the overlapping area as relayable network topology nodes; when the MOSFET power switching circuit switches from the first power supply to the second power supply, replanning a second network transmission path controlled by the second power supply based on the relayable network topology nodes, and performing data transmission according to the replanned second network transmission path.

[0041] Specifically, monitoring devices deployed in the Industrial Internet of Things (IIoT), such as network analysis tools, are used to monitor and collect network transmission data in real time. This analysis includes the source address, destination address, network nodes traversed, and links of transmitted data packets. A first network transmission path, controlled by a first power supply, is determined, representing the data transmission path of the first network topology under the control of the first power supply. Based on this first network transmission path, and combined with a pre-constructed first and second network topologies, network topology nodes in the overlapping area of ​​the first network topology are identified and marked as relay nodes. These relay nodes act as relays during network switching. When a security threat indicator exceeds a preset threshold, triggering the MOSFET power switching circuit to switch from the first to the second power supply, the relay nodes are used as key nodes. A path planning algorithm, such as Dijkstra's algorithm or A* algorithm, is applied to re-plan the second network transmission path controlled by the second power supply. After planning, data transmission is performed according to the re-planned second network transmission path, achieving seamless data transmission during power switching and ensuring the stable operation of the IIoT.

[0042] By detecting the first network transmission path and identifying network topology nodes in overlapping areas, it is possible to quickly switch to a second power supply when a security threat occurs, and replan the transmission path based on relay nodes. This improves the security and flexibility of industrial IoT data transmission without affecting critical business operations, ensuring the stable operation of the industrial IoT.

[0043] Furthermore, the method for replanning the transmission process based on the relayable network topology node and the second network transmission path controlled by the second power supply includes: identifying the transmission task information of the transmission process; performing transmission compatibility matching analysis on the relayable network topology node according to the transmission task information to obtain a first relayable network topology node; constructing a first candidate network transmission path set based on the first relayable network topology node and the second network topology; performing transmission quality scoring on the first candidate network transmission path set according to the transmission task information to obtain a first candidate network transmission path; and outputting the first candidate network transmission path as the replanned second network transmission path.

[0044] Specifically, the process involves collecting and parsing network transmission data from the Industrial Internet of Things (IIoT) to identify the data type, source address, destination address, bandwidth utilization, packet size, and requirements for transmission latency and packet loss rate, thus forming transmission task information. Based on this information, a transmission compatibility matching analysis is performed on potential relay network topology nodes. This involves checking the current status and performance indicators of these nodes, including available bandwidth, processing latency, data throughput, and stability. A matching algorithm is then used to compare the requirements of the transmission task information with the performance indicators of the potential relay network topology nodes, selecting nodes that meet the requirements and forming the first set of potential relay network topology nodes to prevent data transmission failures due to node incompatibility. Using the second network topology as a graph structure and the first set of potential relay network topology nodes as intermediate nodes, a path planning algorithm, such as Dijkstra's algorithm or A* algorithm, is employed to generate multiple candidate paths from the source node to the destination node, constructing a first set of candidate network transmission paths. Each path in this set contains different combinations of potential relay nodes. Based on various metrics in the transmission task information, such as transmission latency, packet loss rate, and bandwidth utilization, a corresponding weight is assigned to each metric. A weighted average method is used to calculate the transmission quality score for each candidate path. A higher score indicates better transmission quality. The path with the highest score is selected as the first candidate network transmission path. This first candidate network transmission path is then used as the output of the replanned second network transmission path. Data transmission is performed based on this first candidate network transmission path to ensure the stability and continuity of data transmission during power switching.

[0045] By identifying transmission task information, performing transmission compatibility matching analysis, constructing a candidate path set, scoring transmission quality, and selecting the optimal path, the replanning of the second network transmission path based on relay network topology nodes is realized, effectively isolating high-risk paths and improving the continuity of industrial IoT operation and the security of transmitted data.

[0046] Furthermore, after performing transmission compatibility matching analysis on the relayable network topology nodes according to the transmission task information, the method further includes: obtaining k relayable network topology nodes that meet the compatibility requirements; randomly selecting any one of the k relayable network topology nodes, reconstructing the first candidate network transmission path set and obtaining the first candidate network transmission path; performing transmission compatibility matching analysis on the k relayable network topology nodes again based on the first candidate network transmission path, obtaining the first candidate network transmission path again according to the reselected relayable network topology node, and so on, until the number of consecutive times the reselected relayable network topology node obtains the first candidate network transmission path is the same, and outputting the second network transmission path.

[0047] Specifically, after completing the transmission compatibility matching analysis, k nodes that meet the compatibility requirements are selected from all possible relay network topology nodes. Here, k represents the number of nodes that meet the compatibility requirements of the current transmission task, and k is an integer greater than or equal to 2. Then, from these k compatible relay network topology nodes, a random number generation algorithm is used to randomly select one node. Random selection increases the diversity of path planning and avoids getting trapped in locally optimal paths due to a fixed initial selection. Using the randomly selected relay network topology node as a base, combined with the second network topology, a path planning algorithm, such as Dijkstra's algorithm or A* algorithm, is used to reconstruct the first candidate network transmission path set. Similarly, from the reconstructed first candidate network transmission path set, multiple candidate paths are evaluated based on the transmission task information to obtain the first candidate network transmission path. Based on the first candidate network transmission path, a transmission compatibility matching analysis is performed again on the k relayable network topology nodes to obtain relayable network topology nodes that meet the transmission compatibility requirements. The above steps are repeated based on the reselected relayable network topology nodes to obtain the first candidate network transmission path again. This process is repeated iteratively, with each time a relayable node is randomly selected, the candidate path set is reconstructed, and the optimal path is evaluated and selected. This continues until the reselected relayable network topology node obtains the first candidate network transmission path for the same number of consecutive times, with a minimum of 3 consecutive times. At this point, it indicates that the candidate network transmission path is optimal under the current network environment and transmission task conditions. This candidate network transmission path is then output as the second network transmission path, and data transmission is performed according to the replanned second network transmission path.

[0048] By randomly selecting relay nodes and reconstructing the candidate path set, the diversity of transmission paths is increased, reducing potential risks caused by fixed paths. Simultaneously, through repeated optimization processes, the stability and adaptability of the final selected path in dynamic network environments are ensured, improving the security, reliability, and efficiency of industrial IoT data transmission, and guaranteeing the stable operation of the industrial IoT.

[0049] Example 2, based on the same inventive concept as the automatic network topology method for industrial IoT security control in the foregoing examples, such as... Figure 2 As shown, this application provides an automatic network topology system for security control of the Industrial Internet of Things (IIoT), wherein the automatic network topology system for security control of the Industrial Internet of Things includes:

[0050] The network topology partitioning module 11 is used to partition a first network topology and a second network topology, wherein the first network topology includes critical network topology nodes and the second network topology includes edge network topology nodes; the switching circuit setting module 12 is used to set a MOSFET power switching circuit, which is connected to the industrial IoT device. The MOSFET power switching circuit includes a first power supply and a second power supply, wherein the first power supply is used to control the first network topology and the second power supply is used to control the second network topology; the security detection module 13 is used to perform security threat detection on the transmission process of the industrial IoT, obtain security threat indicators, and when the security threat indicators are greater than or equal to a preset threshold, switch the MOSFET power switching circuit from the first power supply to the second power supply, and perform data transmission based on the second network topology controlled by the second power supply.

[0051] Furthermore, the security detection module 13 in the network automatic topology system for industrial IoT security control is also used to: acquire real-time network transmission data, perform industrial protocol anomaly detection, equipment behavior baseline anomaly detection, and transmission signal execution anomaly detection on the real-time network transmission data, and acquire multi-source anomaly detection results; identify multiple security threat indicators of the multi-source anomaly detection results, and when any of the multiple security threat indicators is greater than or equal to a preset threshold, cause the MOS tube power switching circuit to switch from the first power supply to the second power supply.

[0052] Furthermore, the switching circuit setting module 12 in the network automatic topology system for industrial IoT security control is also configured to: the MOS transistor power switching circuit includes an NMOS transistor, a first PMOS transistor, and a second PMOS transistor; when the MOS transistor power switching circuit is powered by the first power supply, the NMOS transistor and the first PMOS transistor are turned on, and the second PMOS transistor is turned off; when the MOS transistor power switching circuit is powered by the second power supply, the NMOS transistor and the first PMOS transistor are turned off, and the second PMOS transistor is turned on.

[0053] Furthermore, the network topology partitioning module 11 in the automatic network topology system for industrial IoT security control is also used to: read the set of network topology nodes used for industrial IoT transmission; evaluate the functional attributes of each network topology node in the set of network topology nodes to obtain a set of key evaluation indicators; identify network topology nodes in the set of key evaluation indicators that are greater than a first preset key evaluation threshold and establish a first initial network topology structure; identify network topology nodes in the set of key evaluation indicators that are less than a second preset key evaluation threshold and establish a second initial network topology structure; mark network topology nodes that are greater than or equal to the second preset key evaluation threshold and less than the first preset key evaluation threshold as overlapping areas; and connect the overlapping areas to the first initial network topology structure and the second initial network topology structure respectively to obtain a first network topology and a second network topology.

[0054] Furthermore, the security detection module 13 in the network automatic topology system for industrial IoT security control is also used to: detect the first network transmission path controlled by the first power supply during the transmission process; identify network topology nodes in the overlapping area of ​​the first network topology based on the first network transmission path, and mark the network topology nodes in the overlapping area as relayable network topology nodes; when the MOS transistor power switching circuit switches from the first power supply to the second power supply, re-plan the second network transmission path controlled by the second power supply based on the relayable network topology nodes, and perform data transmission according to the re-planned second network transmission path.

[0055] Furthermore, the network topology partitioning module 11 in the automatic network topology system for industrial IoT security control is also used to: mark network topology nodes that are greater than or equal to the second preset criticality assessment threshold and less than the first preset criticality assessment threshold as overlapping areas, and then identify overlapping network topology nodes in the overlapping areas; the overlapping network topology nodes are protected by dual power supply based on the first power supply and the second power supply.

[0056] Furthermore, the switching circuit setting module 12 in the network automatic topology system for industrial IoT security control is also used to: identify the transmission task information of the transmission process; perform transmission compatibility matching analysis on the relayable network topology nodes according to the transmission task information to obtain a first relayable network topology node; construct a first candidate network transmission path set based on the first relayable network topology node and the second network topology; perform transmission quality scoring on the first candidate network transmission path set according to the transmission task information to obtain a first candidate network transmission path; and output the first candidate network transmission path as a replanned second network transmission path.

[0057] Furthermore, the switching circuit setting module 12 in the automatic network topology system for industrial IoT security control is also used to: obtain k relayable network topology nodes that meet compatibility requirements; randomly select any one of the k relayable network topology nodes, reconstruct the first candidate network transmission path set and obtain the first candidate network transmission path; re-perform transmission compatibility matching analysis on the k relayable network topology nodes based on the first candidate network transmission path, and re-obtain the first candidate network transmission path according to the re-selected relayable network topology node, and so on, until the number of consecutive times the re-selected relayable network topology node re-obtains the first candidate network transmission path is the same, and output the second network transmission path.

[0058] Furthermore, the network topology partitioning module 11 in the automatic network topology system for industrial IoT security control is also used to: evaluate the functional attributes of each network topology node in the network topology node set, including the network real-time performance, historical network failure probability, network security protection mechanism, business criticality, value of stored data, and network connectivity of each topology node.

[0059] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from other embodiments. Figure 1 The automatic network topology method and specific examples for industrial IoT security control in Example 1 are also applicable to the automatic network topology system for industrial IoT security control in this example. Through the foregoing detailed description of the automatic network topology method for industrial IoT security control, those skilled in the art can clearly understand the automatic network topology system for industrial IoT security control in this example. Therefore, for the sake of brevity, it will not be described in detail here.

[0060] The above description of the disclosed embodiments enables those skilled in the art to make or use this application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of this application. Therefore, this application is not to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

[0061] Obviously, those skilled in the art can make several improvements and modifications to this application without departing from the principles of this application, and these improvements and modifications also fall within the protection scope of this application.

Claims

1. A network automatic topology method for industrial internet of things security control, characterized in that, The method comprises: dividing a first network topology and a second network topology, wherein the first network topology comprises a key network topology node, and the second network topology comprises an edge network topology node; setting a MOS tube power supply switching circuit, the MOS tube power supply switching circuit is connected with an industrial internet of things device, the MOS tube power supply switching circuit comprises a first power supply and a second power supply, the first power supply is used for controlling the first network topology, and the second power supply is used for controlling the second network topology; through security threat detection on a transmission process of the industrial internet of things, a security threat index is obtained, when the security threat index is greater than or equal to a preset threshold, the MOS tube power supply switching circuit is switched from the first power supply to the second power supply, and data transmission is performed based on the second network topology controlled by the second power supply; dividing a first network topology and a second network topology, the method comprising: reading a network topology node set used for industrial internet of things transmission; performing function attribute evaluation on each network topology node in the network topology node set to obtain a key evaluation index set; identifying a network topology node greater than a first preset key evaluation threshold in the key evaluation index set to establish a first initial network topology structure, and identifying a network topology node less than a second preset key evaluation threshold in the key evaluation index set to establish a second initial network topology structure; marking a network topology node greater than or equal to the second preset key evaluation threshold and less than the first preset key evaluation threshold as an overlap region; connecting the overlap region to the first initial network topology structure and the second initial network topology structure respectively to obtain the first network topology and the second network topology; switching the MOS tube power supply switching circuit from the first power supply to the second power supply, the method comprising: detecting a first network transmission path controlled by the first power supply in a transmission process; identifying a network topology node in the overlap region of the first network topology according to the first network transmission path, and marking the network topology node in the overlap region as a transferable network topology node; when the MOS tube power supply switching circuit is switched from the first power supply to the second power supply, re-planning a second network transmission path controlled by the second power supply in the transmission process based on the transferable network topology node, and performing data transmission according to the re-planned second network transmission path; re-planning a second network transmission path controlled by the second power supply in the transmission process based on the transferable network topology node, the method comprising: identifying transmission task information of the transmission process; performing transmission compatibility matching analysis on the transferable network topology node according to the transmission task information to obtain a first transferable network topology node; based on the first transferable network topology node and the second network topology, constructing a first candidate network transmission path set, and performing transmission quality scoring on the first candidate network transmission path set according to the transmission task information to obtain a first candidate network transmission path; output the first candidate network transmission path as a re-planned second network transmission path; after performing transmission compatibility matching analysis on the transferable network topology nodes according to the transmission task information, the method further comprises: obtaining k transferable network topology nodes that meet the compatibility requirements; randomly selecting any transferable network topology node from the k transferable network topology nodes, re-establishing a first candidate network transmission path set and obtaining a first candidate network transmission path; based on the first candidate network transmission path, re-performing transmission compatibility matching analysis on the k transferable network topology nodes, and re-obtaining a first candidate network transmission path according to the re-selected transferable network topology node, and so on, until the re-selected transferable network topology node re-obtains a first candidate network transmission path for a continuous number of times and returns the same, and outputting a second network transmission path.

2. The network automatic topology method for industrial internet of things security control of claim 1, wherein, By detecting security threats in the transmission process of the industrial Internet of Things, security threat indicators are obtained, and the method comprises: obtaining network real-time transmission data, performing industrial protocol anomaly detection, device behavior baseline anomaly detection, and transmission signal execution anomaly detection on the network real-time transmission data, and obtaining multi-source anomaly detection results; identifying multiple security threat indicators of the multi-source anomaly detection results, and when any security threat indicator in the multiple security threat indicators is greater than or equal to a preset threshold, switching the MOS tube power supply switching circuit from the first power supply to the second power supply.

3. The network automatic topology method for industrial internet of things security control of claim 1, wherein, The MOS tube power supply switching circuit comprises an NMOS tube, a first PMOS tube, and a second PMOS tube. When the MOS tube power supply switching circuit is powered based on the first power supply, the NMOS tube and the first PMOS tube are turned on, and the second PMOS tube is turned off. When the MOS tube power supply switching circuit is powered based on the second power supply, the NMOS tube and the first PMOS tube are turned off, and the second PMOS tube is turned on.

4. The network automatic topology method for industrial internet of things security control of claim 1, wherein, After marking the network topology nodes that are greater than or equal to the second preset criticality evaluation threshold and less than the first preset criticality evaluation threshold as an overlap area, identifying the overlapping network topology nodes in the overlap area; The overlapping network topology nodes are dual-supplied and protected based on the first power supply and the second power supply.

5. The network automatic topology method for industrial internet of things security control of claim 1, wherein, The functional attribute evaluation of each network topology node in the network topology node set includes network real-time, network historical failure probability, network security protection mechanism, business criticality, stored data value, and network connectivity of each topology node.

6. A network auto topology system for industrial internet of things security control, characterized in that, Steps for implementing the network automatic topology method for industrial Internet of Things security control according to any one of claims 1 to 5, comprising: a network topology division module for dividing a first network topology and a second network topology, wherein the first network topology comprises a critical network topology node, and the second network topology comprises an edge network topology node; The switching circuit setting module is used for setting a MOS transistor power supply switching circuit connected with the industrial Internet of Things device, the MOS transistor power supply switching circuit comprises a first power supply and a second power supply, the first power supply is used for controlling the first network topology, and the second power supply is used for controlling the second network topology; The security detection module is used for acquiring a security threat index by performing security threat detection on a transmission process of the industrial Internet of Things, and switching the MOS transistor power supply switching circuit from the first power supply to the second power supply when the security threat index is greater than or equal to a preset threshold, so as to perform data transmission based on the second network topology controlled by the second power supply.

Images