A communication protocol system between an exchange side inside an industrial network MDU unit and an ONU chip

Abstract

The application discloses a communication protocol system between an exchange side in an industrial network MDU unit and an ONU chip, adopts an asynchronous / synchronous mixed message distribution architecture, supports multi-session concurrent communication between a master control chip and an exchange control chip, realizes double security protection through dynamic key negotiation and hash chain data integrity check, and resists the risks of man-in-the-middle attack and data tampering; the protocol is compatible with an existing industrial equipment hardware architecture, supports RS232 / 485 interface binding and containerized extension, and can be adapted to ONU chips and exchange chips of different manufacturers; the reliability of instruction transmission is guaranteed through port state monitoring and data retransmission mechanism, and a transparent mode and an open interface are provided, so that network upgrading and function expansion are facilitated. The protocol scheme can be widely applied to intelligent manufacturing, edge computing and other scenes, and significantly improves the efficiency and security of industrial network configuration management.

Description

Technical Field

[0001] This invention relates to the field of optical network communication technology, specifically to the communication protocol technology between the switching side of the multi-service delivery unit (MDU) and the optical network unit (ONU) chip in an industrial PON network. Background Technology

[0002] In the field of industrial networks, the Multi-Service Delivery Unit (MDU) is a key node between the fiber optic access network and user equipment. The communication protocol design between its internal switching side and the Optical Network Unit (ONU) chip directly affects the reliability and security of the network configuration.

[0003] In traditional industrial PON networks, communication between the MDU main control chip and the switching control chip often relies on proprietary protocols, resulting in poor compatibility and insufficient scalability between devices from different manufacturers. For example, existing protocols often use a single transmission channel, which cannot support concurrent processing of multiple sessions. When the OLT issues batch configuration commands, it is prone to data congestion and delays, making it difficult to meet the millisecond-level real-time response requirements of smart manufacturing scenarios. In addition, factors such as electromagnetic interference and temperature and humidity fluctuations in the industrial environment further exacerbate the transmission error rate, and existing protocols lack dynamic fault tolerance mechanisms. Data loss cannot be quickly retransmitted, which may lead to network configuration errors or even system paralysis.

[0004] In existing technologies, the communication security mechanisms between MDU and ONU have significant flaws:

[0005] Most existing technologies employ only static keys or basic encryption algorithms, making them vulnerable to man-in-the-middle attacks and data tampering. For example, while some solutions support TLS encryption, they fail to implement end-to-end dynamic key negotiation, allowing attackers to steal configuration information over extended periods using fixed keys. Furthermore, data integrity verification often relies on a single CRC checksum, lacking chained verification mechanisms like hash chains, thus failing to detect packet order tampering or replacement attacks. Given the frequent occurrence of industrial network attacks, such security vulnerabilities could lead to malicious tampering of critical production instructions, threatening the stability of industrial control systems.

[0006] In terms of transmission efficiency, traditional protocols do not fully consider the burstiness and priority differences of industrial network traffic. Configuration commands issued by OLTs typically include multiple services such as device control, parameter adjustment, and status monitoring. However, existing bandwidth allocation strategies are mostly based on statistical multiplexing principles, which cannot dynamically adjust resources according to the urgency of the service. For example, high-priority control commands may be mixed with other data due to unreasonable queue scheduling algorithms, leading to delays in critical operations. Furthermore, the internal interface design of MDUs suffers from energy waste; some protocols fail to close idle ports or activate functional modules as needed, increasing device power consumption, which contradicts the trend of green and energy-saving development in industrial networks.

[0007] The scalability of existing protocols also faces challenges. With the popularization of Industrial IoT and edge computing, MDUs need to support new functions such as containerized deployment and third-party plugin loading. However, traditional communication architectures are rigid and difficult to extend flexibly through open interfaces. For example, although some MDU devices support VLAN configuration, the protocol does not define a standardized transparent transmission mode and cannot adapt to the proprietary protocol formats of different manufacturers' switching chips. In addition, when upgrading industrial networks, existing protocols often require downtime to update firmware, lacking hot-swappable and seamless switching capabilities, which affects the continuous operation of production lines.

[0008] To address the aforementioned issues, the industry has attempted to introduce optimization solutions such as cooperative DBA technology and single-frame multi-burst transmission, but limitations remain. For example, cooperative DBA reduces "request-authorization" latency by pre-allocating bandwidth, but it does not solve the resource contention problem when multiple sessions are concurrent; while single-frame multi-burst technology reduces transmission latency, it leads to a decrease in system throughput due to increased protection bandwidth. Furthermore, existing low-latency solutions mostly focus on physical layer optimization and fail to achieve end-to-end deterministic transmission guarantees at the protocol layer, making it difficult to meet the stringent requirements of industrial control networks for latency boundaries and jitter control.

[0009] Therefore, how to effectively improve the overall performance (such as reliability, security, efficiency and scalability) of the communication protocol between the switching side of the Multi-Service Delivery Unit (MDU) and the Optical Network Unit (ONU) chip in an industrial PON network is an urgent problem to be solved in this field. Summary of the Invention

[0010] To address the shortcomings of existing communication security mechanisms between MDUs and ONUs in industrial networks, the present invention aims to provide a communication protocol system between the switching side of an industrial network MDU unit and the ONU chip. This system solution can effectively improve the reliability, security, and efficiency of configuration command transmission in industrial PON networks.

[0011] To achieve the above objectives, the present invention provides a communication protocol system between the internal switching side and the ONU chip of an industrial network MDU unit, comprising a message encapsulation module, a security verification module, and a session management module.

[0012] The message encapsulation module is configured to adopt a hybrid asynchronous and synchronous message distribution architecture, supporting multi-session concurrent communication between the ONU main control chip and the switching control chip;

[0013] The security verification module forms a dual security protection structure based on dynamic key negotiation and hash chain data integrity verification.

[0014] The session management module is used for the establishment, maintenance and termination of sessions. It realizes the concurrent management and resource scheduling of multiple sessions through port status monitoring and dynamic bandwidth allocation. It works in conjunction with the message encapsulation module and the security verification module to ensure the reliability, real-time performance and security of the communication process.

[0015] Furthermore, the session management module includes a port status monitoring unit and a dynamic bandwidth allocation unit.

[0016] The port status monitoring unit detects the connection status of each port of the switching chip through periodic heartbeat messages. When a port abnormality is detected, a data retransmission mechanism is triggered and an alarm log is generated.

[0017] The dynamic bandwidth allocation unit can map DSCP service categories to different message queues according to the priority tags of the configuration instructions issued by the OLT.

[0018] Furthermore, the message encapsulation module adopts a three-segment structure of header, payload, and tail. The message header includes an instruction type identifier, a session ID field, and a security verification identifier. The message payload stores the configuration parameters issued by the optical line terminal (OLT) in binary encoding format. The message tail is appended with a CRC cyclic redundancy check code.

[0019] Furthermore, the message encapsulation module introduces a priority mapping mechanism, which maps the configuration instructions issued by the OLT to different priority queues according to their DSCP tags. Combined with the bandwidth strategy and queue scheduling algorithm provided by the dynamic bandwidth allocation unit, high-priority instructions are transmitted first.

[0020] Furthermore, in asynchronous mode, the message encapsulation module enables the main control chip to send instruction units in parallel through multiple threads and adopts an exponential backoff retransmission strategy; in synchronous mode, the message encapsulation module ensures deterministic response to key instructions through blocking interaction.

[0021] Furthermore, the communication protocol system supports a hybrid binding mode of RS232 / RS485 serial communication interface and Ethernet interface through the collaborative work of the session management module and message encapsulation module, and deploys protocol extension components through a containerized platform to achieve interface adaptation and function expansion.

[0022] Furthermore, the session management module monitors the link status in real time through the port status monitoring unit, and triggers a data retransmission mechanism when an anomaly occurs.

[0023] Furthermore, the communication protocol system uses a message encapsulation module to form a dual working state of transparent transmission mode and parsing mode:

[0024] In transparent transmission mode, only the message header is parsed while the original data format of the payload is preserved. At the same time, a configuration parameter conversion interface is provided to map OLT instructions to the private protocol format of the target switching chip.

[0025] In parsing mode, the OLT standard configuration instructions are mapped in real time to the private protocol format of the target switching chip through the parameter conversion interface.

[0026] Furthermore, in the communication protocol system, the session management module identifies the peer device manufacturer's identifier during the session establishment phase to control the subsequent communication mode's working status.

[0027] The solution provided by this invention can effectively solve the problems of reliability, security and efficiency in the transmission of configuration commands in industrial PON networks.

[0028] Specifically, the solution provided by this invention adopts an asynchronous / synchronous hybrid message distribution architecture, supports multi-session concurrent communication between the main control chip and the switching control chip, and achieves dual security protection through dynamic key negotiation and hash chain data integrity verification to resist man-in-the-middle attacks and data tampering risks. At the same time, it introduces a priority mapping mechanism, combined with dynamic bandwidth allocation and queue scheduling strategies, to reduce transmission latency and meet industrial real-time requirements. It is compatible with existing industrial equipment hardware architecture, supports RS232 / 485 interface binding and containerized expansion, and can be adapted to ONU chips and switching chips from different manufacturers. It ensures the reliability of command transmission through port status monitoring and data retransmission mechanisms, and provides a transparent transmission mode and open interface to facilitate network upgrades and functional expansion.

[0029] The solution provided by this invention can be widely applied to scenarios such as intelligent manufacturing and edge computing, significantly improving the efficiency and security of industrial network configuration management. Attached Figure Description

[0030] The present invention will be further described below with reference to the accompanying drawings and specific embodiments.

[0031] Figure 1 This is a schematic diagram of the message encapsulation format in the present invention, which includes header fields, payload structure, and check bits.

[0032] Figure 2 This is a schematic diagram of the protocol architecture between the internal switching side of the MDU unit and the ONU chip in an example of the present invention. Detailed Implementation

[0033] To make the technical means, creative features, objectives and effects of this invention easier to understand, the invention will be further described below with reference to specific illustrations.

[0034] The communication protocol system between the internal switching side and the ONU chip of the industrial network MDU unit provided by this invention adopts a layered architecture design, including a three-layer structure of physical layer, transport layer and application layer. The physical layer supports a hybrid bonding mode of RS232 / RS485 interface and Ethernet interface; the transport layer realizes multi-session concurrent communication based on TCP / UDP protocol; the application layer defines a standardized instruction encapsulation format to realize accurate parsing and forwarding of OLT configuration instructions.

[0035] Based on this layered architecture, a message encapsulation module, a security verification module, and a session management module are further introduced to improve the reliability, security, and efficiency of configuration command transmission in industrial PON networks.

[0036] The message encapsulation module is configured to adopt a hybrid asynchronous and synchronous message distribution architecture. Through multi-threaded parallel processing and exponential backoff retransmission strategy, it supports multi-session concurrent communication between the ONU main control chip and the switching control chip, effectively improving the efficiency of batch instruction processing and real-time control response capabilities.

[0037] The security verification module forms a dual security protection structure based on dynamic key negotiation and hash chain data integrity verification.

[0038] The session management module is responsible for establishing, maintaining, and terminating sessions. It achieves concurrent management and resource scheduling of multiple sessions through port status monitoring and dynamic bandwidth allocation. It also works in conjunction with the message encapsulation module and the security verification module to ensure the reliability, real-time performance, and security of the communication process.

[0039] The message encapsulation module, security verification module, and session management module are deployed collaboratively within the application layer: the message encapsulation module handles message formatting and transmission methods, the security verification module provides security guarantees, and the session management module manages communication sessions and resource allocation. In this three-tier architecture, the physical layer provides hardware interface support, the transport layer is responsible for reliable transmission, and the application layer implements business logic and protocol processing through these three modules.

[0040] The following provides a detailed explanation of the specific implementation scheme of this communication protocol.

[0041] In some embodiments of the present invention, see Figure 1 The message encapsulation module in this invention adopts a three-segment structure of header-payload-tail. The message header includes an instruction type identifier, a session ID field, and a security verification identifier. The message payload stores the configuration parameters issued by the optical line terminal (OLT) in binary encoding format. The tail is appended with a CRC cyclic redundancy check code to achieve data integrity verification at the transport layer.

[0042] Based on this, the message encapsulation module introduces a mechanism for classifying and processing asynchronous and synchronous messages to effectively balance the needs of batch configuration and real-time control. In asynchronous mode, the main control chip sends instruction units in parallel through multiple threads and adopts an exponential backoff retransmission strategy, while in synchronous mode, it ensures deterministic response to critical instructions through blocking interaction.

[0043] Furthermore, the asynchronous message processing flow of this message encapsulation module includes the following steps:

[0044] When the ONU main control chip receives a batch configuration command from the OLT, it splits the command into multiple asynchronous message units. Each message unit carries an independent session ID and a timestamp, and sends them to the switching control chip in parallel through a multi-threaded mechanism. After receiving the message, the switching control chip reassembles it according to the session ID and returns an acknowledgment frame containing a successful reception identifier to the main control chip. If no acknowledgment frame is received within the preset timeout period, an automatic retransmission mechanism is triggered. The maximum number of retransmissions is set to 3, and the interval between each retransmission increases exponentially according to the backoff algorithm.

[0045] As an example, the ONU main control chip here can be constructed using the HiSilicon platform Hi5682TV300 main control chip.

[0046] Furthermore, the synchronous message processing flow of the message encapsulation module is suitable for control commands with high real-time requirements. After sending the synchronous message, the main control chip starts a timer to block subsequent operations until it receives the execution status code returned by the exchange control chip. The status code here includes three types of identifiers: "success", "parameter error" and "hardware abnormality", and is accompanied by a detailed error description field for fault diagnosis.

[0047] Furthermore, this message encapsulation module introduces a priority mapping mechanism, which maps the configuration instructions issued by the OLT to different priority queues based on their DSCP tags. Combined with the bandwidth strategy provided by the dynamic bandwidth allocation unit in the session management module and the scheduling algorithm of the queue scheduling module, the priority transmission of high-priority instructions and low latency guarantee are achieved, thereby meeting the real-time requirements of industry.

[0048] In some embodiments of the present invention, the session management module of the present invention is specifically configured with a port status monitoring unit and a dynamic bandwidth allocation unit.

[0049] Among them, the port status monitoring unit detects the connection status of each port of the switching chip through periodic heartbeat messages. When an abnormality is detected in the port, a data retransmission mechanism is triggered and an alarm log is generated.

[0050] The dynamic bandwidth allocation unit can map DSCP service categories to different message queues according to the priority tags of the configuration instructions issued by the OLT. It uses a weighted fair queue scheduling algorithm to achieve priority transmission of high-priority instructions, and supports independent rate limiting configuration of uplink and downlink channels to adapt to the needs of industrial network traffic fluctuations.

[0051] Based on this, the session management module is configured to perform session lifecycle management, port status monitoring, and dynamic bandwidth allocation. This module works in conjunction with the message encapsulation module to manage concurrent message transmission and retransmission based on the session ID; and with the security verification module, it terminates the session upon security verification failure. Through real-time monitoring and resource scheduling, this module ensures communication reliability, real-time performance, and resource utilization efficiency in a multi-session environment.

[0052] Furthermore, in the present invention, the session management module detects the link status in real time through the port status monitoring unit, and triggers a data retransmission mechanism when an anomaly occurs to ensure transmission reliability.

[0053] In some embodiments of the present invention, the data retransmission mechanism adopts an adaptive algorithm with an initial retransmission interval of 200ms, which increases exponentially by 1.5 times thereafter, and the maximum number of retries is set to 3. Based on this, the retransmission strategy is dynamically adjusted in conjunction with the real-time feedback of the port status monitoring unit, so as to avoid excessive consumption of network resources while ensuring reliability.

[0054] In some embodiments of the present invention, the communication protocol system formed in the present invention supports a hybrid binding mode of RS232 / RS485 serial communication interface and Ethernet interface through the collaborative work of session management module and message encapsulation module, and supports the deployment of protocol extension components through containerized platform.

[0055] In some embodiments of the present invention, the transport layer of the three-layer architecture formed by the present invention has a built-in traffic shaping function, which can dynamically allocate bandwidth according to the DSCP priority label issued by the OLT. High-priority instructions can preempt low-priority queue resources, ensuring millisecond-level transmission delay of control instructions.

[0056] In practical implementation, this can be achieved by deploying a dynamic bandwidth allocation unit in the session management module running in the application layer, which works in conjunction with the message encapsulation module and the queue scheduling module to improve transmission efficiency and real-time performance.

[0057] In some embodiments of the present invention, the compatibility of the solution is improved by adopting an open architecture and standardized interfaces. The protocol of this solution defines two working states: transparent transmission mode and parsing mode.

[0058] In transparent transmission mode, the protocol only parses the message header while retaining the original data format of the payload. At the same time, it provides a configuration parameter conversion interface to map OLT instructions to the private protocol format of the target switching chip, so as to achieve compatibility and adaptation between ONU chips of different brands and switching chips.

[0059] In parsing mode, the OLT instructions are mapped to the target chip's proprietary protocol through the parameter conversion interface.

[0060] As further explained, the present invention achieves dual working states of transparent transmission mode and parsing mode through the organic cooperation between the message encapsulation module and the session management module, thereby improving protocol compatibility and device adaptability through the dual-mode design.

[0061] The specific operation schemes for transparent transmission mode and parsing mode are implemented by the message encapsulation module and are controlled by the port status and link negotiation results of the session management module.

[0062] The session management module here exposes two orchestratable services—pass-through service and parsing service—by setting up an open interface.

[0063] Among them, the pass-through service: the message encapsulation module runs in pass-through mode, does not parse the message payload, and forwards it directly after reading only the session ID and length fields in the header, which will preserve the original data format for blind connection across vendor devices and achieve cross-vendor compatibility;

[0064] Parsing Service: The message encapsulation module runs in parsing mode, dynamically loading the corresponding parameter conversion plugins through an open interface to map the OLT standard configuration instructions to the target switching chip's private protocol format in real time.

[0065] Furthermore, the open interfaces set up in this session management module run as containerized microservices within the session management module, supporting hot-swappable expansion and allowing third-party plugins to register new resolution modes via REST / gRPC. This enables the simultaneous hybrid deployment of transparent transmission mode and multi-vendor resolution mode on the same hardware platform, supporting smooth network upgrades and flexible functional expansion.

[0066] Based on this, the session management module and the message encapsulation module work together to determine and switch between transparent transmission mode and parsing mode. During the session establishment phase, the session management module identifies the peer device vendor identifier (private OID or standard LLDP field) through the port status monitoring unit and determines which mode to use for subsequent communication.

[0067] If the device is identified as a certified standard / unknown vendor device, a "transparent transmission mode" activation flag is sent to the message encapsulation module. At this time, the message encapsulation module only parses the message header, and the payload maintains its original format without any conversion and is forwarded directly to ensure cross-vendor interoperability.

[0068] If the device is identified as a specific manufacturer's device that has been adapted, a "parsing mode" activation flag is issued. The message encapsulation module calls the built-in parameter conversion interface to map the OLT standard instructions to the target switching chip's private protocol format before encapsulating and sending them.

[0069] The mode switching action here is arbitrated only once by the session management module before the session is established; the mode does not change during the session, thus avoiding latency jitter caused by repeated switching.

[0070] In addition, when the session management module detects a link anomaly (such as port disconnection or key negotiation failure) during operation and triggers session reconstruction, it re-executes the above identification and arbitration process to ensure that subsequent mode selection is always consistent with the latest link status.

[0071] In some embodiments of the present invention, the implementation of the present invention in an industrial environment encompasses both hardware configuration and software logic optimization:

[0072] In terms of hardware configuration, the ONU chip is equipped with a quad-core ARM processor (clock frequency ≥ 1.2GHz), 1GB DDR4 memory and 4GB eMMC flash memory. The switching chip needs to have 24 gigabit ports and dual SFP slots, and the operating temperature range is extended to -40℃~85℃ to adapt to harsh industrial environments.

[0073] At the software logic level, it is deployed on a customized Linux system (kernel ≥ 4.19), integrates the OpenSSL 1.1.1 encryption library and real-time kernel patches, and the communication quality monitoring module can generate a full-dimensional report including packet loss rate, latency distribution and security events, and upload it to the network management platform in encryption via SNMPv3 protocol.

[0074] Meanwhile, actual tests show that this protocol achieves a 99.999% command transmission success rate in smart manufacturing scenarios, is 98.7% effective in resisting man-in-the-middle attacks, and reduces end-to-end latency by 46% compared to traditional solutions.

[0075] Regarding the communication protocol scheme between the internal switching side and the ONU chip of the industrial network MDU unit provided in this invention, the following specific examples further illustrate its application and implementation process.

[0076] The communication protocol between the internal switching side and the ONU chip of the industrial network MDU unit constructed in this example mainly involves three core modules: hardware architecture design, software logic implementation, and protocol function verification.

[0077] Combination Figure 2 As shown, the hardware architecture must meet industrial-grade environmental requirements. The main control chip uses a quad-core ARM Cortex-A53 processor (clock speed ≥ 1.2GHz), equipped with 1GB DDR4 memory and 4GB eMMC flash memory, supporting wide operating temperature range of -40℃ to 85℃. The switching control chip needs to integrate 24 Gigabit Ethernet ports and dual SFP optical module slots, and the optical modules must meet industrial-grade dustproof and shockproof standards. The ONU chip user side is configured with RS485 / RS232 industrial interfaces and Ethernet hybrid ports, supporting simultaneous connection of PLCs, sensors, and other industrial equipment, with a physical layer interface protection level of IP67.

[0078] The software architecture is deployed on a customized embedded Linux system (kernel ≥ 4.19) and adopts a microservice containerized design. The main program consists of three main components: a protocol parsing engine, a security service engine, and a resource scheduling engine. The protocol parsing engine supports common protocol conversions such as OPCUA and MQTT through a dynamic loading mechanism. A pseudocode example is shown below:

[0079] def protocol_converter(raw_data, target_format):

[0080] if target_format == "OPCUA":

[0081] opcua_frame = struct.pack('!HH', 0x4555, len(raw_data)) +raw_data

[0082] return opcua_frame

[0083] elif target_format == "MQTT":

[0084] mqtt_header = bytes([0x30, len(raw_data)+2])

[0085] return mqtt_header + raw_data

[0086] The protocol implementation process consists of five stages:

[0087] 1) During the session establishment phase, the main control chip and the switching control chip establish a TCP / UDP connection through a three-way handshake and exchange digital certificates to complete two-way authentication;

[0088] 2) During the key negotiation phase, the ECDHE algorithm is used to generate a temporary session key. The pseudocode is as follows:

[0089] EC_KEY *ecdh = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);

[0090] EC_KEY_generate_key(ecdh);

[0091] EVP_PKEY *pkey = EVP_PKEY_new();

[0092] 3) During the data transmission phase, the configuration command is encapsulated as a header (command type + session ID + priority) + payload (binary parameters) + tail (CRC32 checksum). Asynchronous messages are transmitted in multi-threaded segments, while synchronous messages are subject to a blocking and waiting mechanism.

[0093] 4) During the status feedback phase, the switching chip returns an execution status code (0x00 success / 0x01 parameter error / 0x02 hardware exception), along with a detailed error description field;

[0094] 5) During the session termination phase, destroy the temporary key and generate an audit log.

[0095] The security mechanism comprises four layers of protection: the physical layer employs a hardware encryption engine to isolate key storage and computation; the transport layer establishes an encrypted tunnel via TLS 1.3, disabling weak cipher suites (such as RC4 and MD5); the application layer implements hash chain verification, with each data packet carrying a hash digest of the preceding packet; and the management layer implements two-factor authentication and operation auditing functions. Key lifecycle management follows a zero-trust principle, with session keys valid for no more than 300 seconds, and seamless transition technology is used to avoid business interruption when changing keys.

[0096] Efficiency optimization is achieved through hardware acceleration and intelligent scheduling. The NPU core built into the switching chip can process encryption and decryption tasks in parallel, achieving a throughput of 10Gbps for the AES-256-GCM algorithm. The traffic scheduling algorithm uses an improved DRR (Deficit Round Robin) queue, reserving 20% ​​of bandwidth for high-priority services. The pseudocode is as follows:

[0097] class EnhancedDRR {

[0098] void schedulePacket(Queue highPriQueue, Queue lowPriQueue) {

[0099] int deficit = 0;

[0100] while (!highPriQueue.isEmpty() || !lowPriQueue.isEmpty()) {

[0101] if (!highPriQueue.isEmpty()) {

[0102] Packet pkt = highPriQueue.dequeue();

[0103] transmit(pkt);

[0104] deficit -= pkt.length;

[0105] if (deficit <= 0) deficit += QUANTUM;

[0106] } else {

[0107] / / Handling low-priority queues

[0108] }

[0109] }

[0110] }

[0111] }

[0112] The compatibility design is reflected in a dual-mode operation mechanism: in pass-through mode, the original protocol format is preserved, supporting cross-vendor device interoperability; in parsing mode, the OLT instructions are mapped to the target device's private format through a protocol conversion engine. The containerization platform is built on Docker 20.10.x, supports the simultaneous running of 32 protocol plugin instances, and resource isolation adopts cgroups and namespace technology, with CPU quota allocation accuracy reaching 1%.

[0113] The testing and verification included two levels of testing: laboratory environment and industrial field. Laboratory testing used SpirentTestCenter to simulate OLT traffic surges, verifying the protocol's performance under 100,000 concurrent sessions. Results showed an average latency of ≤2ms and a packet loss rate of <0.001%. Industrial field testing was deployed on a smart manufacturing production line, running continuously for 30 days without any protocol parsing errors and successfully resisting seven man-in-the-middle attack attempts. Environmental adaptability testing showed that the protocol remained stable under conditions of 85℃ high temperature and 95% humidity, with an MTBF (Mean Time Between Failures) exceeding 100,000 hours.

[0114] The deployment and implementation of the protocol should follow a phased upgrade strategy:

[0115] 1) During the canary release phase, select non-critical business nodes for pilot testing;

[0116] 2) During the dual-protocol parallel phase, the old and new protocols coexist and are gradually migrated;

[0117] 3) During the full switchover phase, old protocol services are shut down. The operation and maintenance management system integrates a real-time monitoring dashboard, which can display key indicators such as link quality, security events, and resource utilization, and supports connection to the industrial cloud platform via the SNMPv3 protocol.

[0118] The fault handling mechanism includes a three-level response:

[0119] 1) Port-level self-healing: automatically switches to a backup port when a physical link interruption is detected;

[0120] 2) Protocol-level retransmission: Fast retransmission is triggered when a data packet is lost (RTO=200ms).

[0121] 3) System-level disaster recovery: In the event of a main control chip failure, the backup chip takes over the service within 50ms. The log system records all operation events, with a storage period of ≥180 days, and supports multi-dimensional retrieval based on timestamps and event types.

[0122] This embodiment achieves the deployment of highly reliable, secure, and efficient communication protocols in industrial network environments through the solution of the present invention, meeting the stringent requirements of scenarios such as intelligent manufacturing and edge computing, and providing core communication guarantees for Industry 4.0 transformation.

[0123] The foregoing has shown and described the basic principles, main features, and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The embodiments and descriptions in the specification are merely illustrative of the principles of the invention. Various changes and modifications can be made to the invention without departing from its spirit and scope, and all such changes and modifications fall within the scope of the present invention as claimed. The scope of protection of this invention is defined by the appended claims and their equivalents.

Claims

1. A communication protocol system between the switching side and the ONU chip within an industrial network MDU unit, characterized in that, It includes a message encapsulation module, a security verification module, and a session management module. The message encapsulation module is configured to adopt a hybrid asynchronous and synchronous message distribution architecture, supporting multi-session concurrent communication between the ONU main control chip and the switching control chip; The security verification module forms a dual security protection structure based on dynamic key negotiation and hash chain data integrity verification. The session management module is used for session establishment, maintenance and termination, and is configured to: realize concurrent management and resource scheduling of multiple sessions through the port status monitoring unit and the dynamic bandwidth allocation unit; the dynamic bandwidth allocation unit maps the Differential Service Code Point (DSCP) service category to different message queues according to the configuration instruction priority label issued by the optical line terminal (OLT), and performs priority transmission of high-priority instructions in combination with the queue scheduling algorithm. The session management module works in conjunction with the message encapsulation module and the security verification module, and is configured such that the session management module identifies the peer device vendor identifier during the session establishment phase, and controls the message encapsulation module to select between transparent transmission mode and parsing mode based on the identification result; the session management module terminates the session when the security verification fails; the lifecycle of the session key generated by the security verification module is synchronized with the lifecycle of the session maintained by the session management module. The system achieves concurrent management and resource scheduling for multiple sessions through port status monitoring and dynamic bandwidth allocation, and works in conjunction with the message encapsulation module and the security verification module.

2. The communication protocol system between the internal switching side and the ONU chip of the industrial network MDU unit according to claim 1, characterized in that, The port status monitoring unit detects the connection status of each port of the switching chip through periodic heartbeat messages. When a port abnormality is detected, a data retransmission mechanism is triggered and an alarm log is generated.

3. The communication protocol system between the internal switching side and the ONU chip of the industrial network MDU unit according to claim 1, characterized in that, The message encapsulation module adopts a three-segment structure of header, payload, and tail. The message header includes an instruction type identifier, a session ID field, and a security verification identifier. The message payload stores the configuration parameters issued by the optical line terminal (OLT) in binary encoding format. The message tail is appended with a CRC cyclic redundancy check code.

4. The communication protocol system between the internal switching side and the ONU chip of the industrial network MDU unit according to claim 1, characterized in that, In asynchronous mode, the message encapsulation module enables the main control chip to send instruction units in parallel through multiple threads and adopts an exponential backoff retransmission strategy; in synchronous mode, the message encapsulation module ensures deterministic response to critical instructions through blocking interaction.

5. The communication protocol system between the internal switching side and the ONU chip of the industrial network MDU unit according to claim 1, characterized in that, The communication protocol system supports a hybrid binding mode of RS232 / RS485 serial communication interface and Ethernet interface through the collaborative work of the session management module and message encapsulation module, and deploys protocol extension components through a containerized platform to achieve interface adaptation and function expansion.

6. The communication protocol system between the internal switching side and the ONU chip of the industrial network MDU unit according to claim 2, characterized in that, The session management module monitors the link status in real time through the port status monitoring unit and triggers a data retransmission mechanism when an anomaly occurs.

7. The communication protocol system between the internal switching side and the ONU chip of the industrial network MDU unit according to claim 1, characterized in that, The communication protocol system uses a message encapsulation module to form a dual working state of transparent transmission mode and parsing mode: In transparent transmission mode, only the message header is parsed while the original data format of the payload is preserved. At the same time, a configuration parameter conversion interface is provided to map OLT instructions to the private protocol format of the target switching chip. In parsing mode, OLT instructions are mapped in real time to the target switching chip's proprietary protocol format via a parameter conversion interface.

Images