Equipment remote calibration access method and system for industrial isolation network

Abstract

The invention discloses an equipment remote calibration access method and system for an industrial isolation network, and the method comprises the steps: scanning an operation environment of an operation and maintenance terminal, and detecting whether the operation and maintenance terminal has the capability of processing an industrial field encryption protocol; when the operation environment does not have the capability of processing the industrial field encryption protocol, automatically blocking the connection; when the operation environment has the capability of processing an industrial field encryption protocol, establishing a cross-domain simulation link and a data link sending probe; when the echoed data are consistent, calibration is allowed to be performed, otherwise, an alarm indicates that the link is unreliable. According to the equipment remote calibration access method and system for the industrial isolation network provided by the invention, the equipment in the isolation network segment can be safely calibrated and maintained by establishing the cross-domain simulation link.

Description

Technical Field

[0001] This application relates to the field of automated operation and maintenance of industrial equipment, and in particular to a method and system for remote calibration access of equipment in industrial isolated networks. Background Technology

[0002] In critical infrastructure such as ports, factories, and power plants, Industrial Control Systems (ICS) typically employ a layered, zoned defense-in-depth architecture to ensure production security and data sovereignty. For example, industrial equipment such as port RTG (Rubber-Tyred Gantry Crane) spreaders, quay cranes, yard cranes, and industrial robots are usually deployed in strictly isolated network segments. However, such industrial network environments are significantly complex. Equipment networks are often physically isolated from management and office networks, or separated by one-way gateways, and frequently cross multiple security domains, including internal networks, DMZs (Demilitarized Zones), and external networks. This poses significant challenges to remote calibration, remote diagnostics, and data acquisition.

[0003] Therefore, it is necessary to provide a method and system for remote calibration access of devices in industrial isolation networks to solve the above problems. Summary of the Invention

[0004] This application provides a method and system for remote calibration access of devices in industrial isolated networks. By establishing a cross-domain simulated link, it is possible to safely calibrate and maintain devices located in isolated network segments.

[0005] In a first aspect, this application provides a method for remote calibration access of devices in an industrial isolation network, the method comprising: Scan the operating environment of the maintenance terminal to check whether it has the ability to handle encryption protocols in the industrial field; The connection is automatically blocked when the operating environment is not capable of handling industrial field encryption protocols. When the operating environment is capable of handling industrial field encryption protocols, a cross-domain simulated link is established and a data link probe is sent. If the echoed data is consistent, calibration is allowed; otherwise, an alarm indicates that the link is unreliable.

[0006] Preferably, the encryption protocol includes the SSH protocol or the password exchange tool sshpass.

[0007] Preferably, establishing a cross-domain simulation link includes: A first tunnel is established between the maintenance terminal and the first jump board, wherein the maintenance terminal is located on the IT management network and the first jump board is located in the DMZ buffer. A second tunnel is established between the first and second jump boards, with the second jump board located in the OT production network; The first jump server is a bastion host, the second jump server is a field gateway, the IT management network is an untrusted zone, the DMZ buffer is a semi-trusted zone, and the OT production network is a trusted zone.

[0008] Preferably, the data link probe includes: the second jump board sending a calibration command to the RTG rigging.

[0009] Preferably, the operating environment of the scanning and maintenance terminal further includes: Construct a proxy node sequence that maps to the industrial network security domain hierarchy, where each element in the proxy node sequence corresponds to a jump path between physically isolated network segments; and change the order of the proxy node sequence in response to the user's topology adjustment command.

[0010] Secondly, this application also provides a remote calibration access system for equipment in an industrial isolation network, the system comprising: The detection module is used to scan the operating environment of the maintenance terminal and detect whether it has the ability to process industrial field encryption protocols. A connection blocking module is used to automatically block the connection when the operating environment does not have the ability to process industrial field encryption protocols; A cross-domain simulated link establishment module is used to establish a cross-domain simulated link and send a data link probe when the operating environment has the ability to process industrial field encryption protocols. The calibration module is used to allow calibration when the echoed data is consistent; otherwise, it alarms that the link is unreliable.

[0011] Preferably, the encryption protocol includes the SSH protocol or the password exchange tool sshpass.

[0012] Preferably, establishing a cross-domain simulation link includes: A first tunnel is established between the maintenance terminal and the first jump board, wherein the maintenance terminal is located on the IT management network and the first jump board is located in the DMZ buffer. A second tunnel is established between the first and second jump boards, with the second jump board located in the OT production network; The first jump server is a bastion host, the second jump server is a field gateway, the IT management network is an untrusted zone, the DMZ buffer is a semi-trusted zone, and the OT production network is a trusted zone.

[0013] Preferably, the data link probe includes: the second jump board sending a calibration command to the RTG rigging.

[0014] Preferably, the operating environment of the scanning and maintenance terminal further includes: Construct a proxy node sequence that maps to the industrial network security domain hierarchy, where each element in the proxy node sequence corresponds to a jump path between physically isolated network segments; and change the order of the proxy node sequence in response to the user's topology adjustment command.

[0015] This application offers the following advantages over existing technologies: It provides a remote calibration access method and system for devices in industrial isolated networks. The method includes: scanning the operating environment of the maintenance terminal to detect whether it has the capability to process industrial field encryption protocols; automatically blocking the connection when the operating environment does not have the capability to process industrial field encryption protocols; establishing a cross-domain simulated link and sending a data link probe when the operating environment has the capability to process industrial field encryption protocols; allowing calibration to be performed when the echoed data is consistent, otherwise an alarm indicates that the link is unreliable. By establishing a cross-domain simulated link, it is possible to safely calibrate and maintain devices located in isolated network segments. Furthermore, through a closed-loop verification mechanism, 90% of link faults are eliminated before actual control commands are issued, avoiding the risk of the device being in an unstable state due to connection interruption during the device calibration process. Attached Figure Description

[0016] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0017] Figure 1 This is a flowchart illustrating a remote calibration access method for an industrial isolated network according to an embodiment of this application. Figure 2 This is a schematic diagram of a device remote calibration access system for an industrial isolation network, as described in an embodiment of this application.

[0018] The accompanying drawings illustrate specific embodiments of this application, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the concept in any way, but rather to illustrate the concept of this application to those skilled in the art through reference to particular embodiments. Detailed Implementation

[0019] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.

[0020] To address the aforementioned issues, the embodiments provided in this application offer a method and system for remote calibration access of devices in industrial isolated networks. By establishing a cross-domain simulated link, it is possible to securely calibrate and maintain devices located in isolated network segments.

[0021] Figure 1 This is a schematic flowchart illustrating a remote calibration access method for devices in an industrial isolation network, as described in an embodiment of this application. Now refer to... Figure 1 This invention provides a method for remote calibration access of devices in an industrial isolated network, the method comprising: Step S101: Scan the operating environment of the maintenance terminal to detect whether it has the ability to process industrial field encryption protocols; Step S102: When the operating environment does not have the ability to process industrial field encryption protocols, the connection is automatically blocked; Step S103: When the operating environment has the capability to process industrial field encryption protocols, establish a cross-domain simulated link and send a data link probe; Step S104: If the echoed data is consistent, allow calibration; otherwise, an alarm indicates that the link is unreliable.

[0022] Specifically, to ensure the security and determinism of remote calibration operations, the above-mentioned check process is performed before establishing an actual business connection. In step S102, the connection is automatically blocked while prompting for repair to prevent unexpected connection interruptions due to environmental differences. In step S104, when the echoed data is consistent, not only is the TCP / IP connectivity verified, but also whether the data link layer has the capability for bidirectional transmission of calibration data.

[0023] In practice, the encryption protocol includes the SSH protocol or the password exchange tool sshpass.

[0024] In specific implementation, establishing a cross-domain simulation link includes: A first tunnel is established between the maintenance terminal and the first jump board, wherein the maintenance terminal is located on the IT management network and the first jump board is located in the DMZ buffer. A second tunnel is established between the first and second jump boards, with the second jump board located in the OT production network; The first jump server is a bastion host, the second jump server is a field gateway, the IT management network is an untrusted zone, the DMZ buffer is a semi-trusted zone, and the OT production network is a trusted zone.

[0025] Specifically, for example, when an operations and maintenance terminal needs to access an RTG spreader controller located on an isolated intranet at a port from the group headquarters network, the access path must pass through the headquarters firewall, the port DMZ bastion host, the dock site aggregation network, and the RTG spreader controller. Due to the network hierarchy, the data flow must first pass through the DMZ before entering the site. Therefore, the system's underlying automatic parsing list sequence is as follows: Establish the first tunnel between the maintenance terminal and the first jump board; Construct a second tunnel between the first and second ramps; Ultimate goal: between the second tunnel and the RTG spreader controller.

[0026] In a specific implementation, the data link probe includes: the second jump board sending a calibration command to the RTG rigging.

[0027] Specifically, before scanning the operating environment of the maintenance terminal, the following verification process is automatically triggered: If a second gateway requires password authentication, immediately check if a non-interactive password processing tool such as sshpass is installed on your local environment. The calibration process cannot be interrupted by a pop-up password input box. If it is missing, the system will report an error and prevent subsequent high-risk operations.

[0028] The full-path simulation tunnel allows users to specify a test target located on the field network segment. This target could be a low-risk server on the same network segment or the management port of the target controller, and attempt to establish a complete cross-domain tunnel.

[0029] After confirming the data link validity and tunnel establishment, a standard probe frame, such as an echo command, is sent to the target, and the echoed data is compared. In specific implementations, the scanning of the operating environment of the maintenance terminal also includes: Construct a proxy node sequence that maps to the industrial network security domain hierarchy, where each element in the proxy node sequence corresponds to a jump path between physically isolated network segments; and change the order of the proxy node sequence in response to the user's topology adjustment command.

[0030] Specifically, each security gateway at each level is defined as an independent object containing authentication policies and port forwarding rules. To address the frequent changes in industrial network topology, a link adjustment mechanism based on index remapping is provided.

[0031] Figure 2 This is a schematic diagram of a remote calibration access system for an industrial isolation network, as described in an embodiment of this application. Now refer to... Figure 2 This invention also provides a remote calibration access system for devices in industrial isolated networks, the system comprising: The detection module 21 is used to scan the operating environment of the maintenance terminal and detect whether it has the ability to process industrial field encryption protocols. The connection blocking module 22 is used to automatically block the connection when the operating environment does not have the ability to process industrial field encryption protocols; Cross-domain simulated link establishment module 23 is used to establish a cross-domain simulated link and send a data link probe when the operating environment has the ability to process industrial field encryption protocols. The calibration module 24 is used to allow calibration to be performed when the echoed data is consistent; otherwise, it alarms that the link is unreliable.

[0032] In practice, the encryption protocol includes the SSH protocol or the password exchange tool sshpass.

[0033] In specific implementation, establishing a cross-domain simulation link includes: A first tunnel is established between the maintenance terminal and the first jump board, wherein the maintenance terminal is located on the IT management network and the first jump board is located in the DMZ buffer. A second tunnel is established between the first and second jump boards, with the second jump board located in the OT production network; The first jump server is a bastion host, the second jump server is a field gateway, the IT management network is an untrusted zone, the DMZ buffer is a semi-trusted zone, and the OT production network is a trusted zone.

[0034] In a specific implementation, the data link probe includes: the second jump board sending a calibration command to the RTG rigging.

[0035] In specific implementation, the operating environment of the scanning and maintenance terminal also includes: Construct a proxy node sequence that maps to the industrial network security domain hierarchy, where each element in the proxy node sequence corresponds to a jump path between physically isolated network segments; and change the order of the proxy node sequence in response to the user's topology adjustment command.

[0036] In summary, this application provides a method and system for remote calibration access of devices in an industrial isolated network. The method includes: scanning the operating environment of the maintenance terminal to detect whether it has the capability to process industrial field encryption protocols; automatically blocking the connection when the operating environment does not have the capability to process industrial field encryption protocols; establishing a cross-domain simulated link and sending a data link probe when the operating environment has the capability to process industrial field encryption protocols; allowing calibration to be performed when the echoed data is consistent, otherwise an alarm indicates that the link is unreliable. By establishing a cross-domain simulated link, devices in isolated network segments can be safely calibrated and maintained. Furthermore, through a closed-loop verification mechanism, 90% of link faults are eliminated before actual control commands are issued, avoiding the risk of the device being in an unstable state due to connection interruption during the device calibration process.

[0037] Other embodiments of this application will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of this application that follow the general principles of this application and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this application are indicated by the claims.

[0038] It should be understood that this application is not limited to the precise structure described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of this application is limited only by the appended claims.

Claims

1. A method for remote calibration access of devices in an industrial isolated network, characterized in that, The method includes: Scan the operating environment of the maintenance terminal to check whether it has the ability to handle encryption protocols in the industrial field; The connection is automatically blocked when the operating environment is not capable of handling industrial field encryption protocols. When the operating environment is capable of handling industrial field encryption protocols, a cross-domain simulated link is established and a data link probe is sent. If the echoed data is consistent, calibration is allowed; otherwise, an alarm indicates that the link is unreliable.

2. The method for remote calibration access of equipment in an industrial isolation network according to claim 1, characterized in that, The encryption protocol includes the SSH protocol or the password exchange tool sshpass.

3. The method for remote calibration access of equipment in an industrial isolation network according to claim 1, characterized in that, The establishment of the cross-domain simulation link includes: A first tunnel is established between the maintenance terminal and the first jump board, wherein the maintenance terminal is located on the IT management network and the first jump board is located in the DMZ buffer. A second tunnel is established between the first and second jump boards, with the second jump board located in the OT production network; The first jump server is a bastion host, the second jump server is a field gateway, the IT management network is an untrusted zone, the DMZ buffer is a semi-trusted zone, and the OT production network is a trusted zone.

4. The method for remote calibration access of equipment in an industrial isolation network according to claim 3, characterized in that, The data link probe includes: the second jump board sending calibration commands to the RTG rigging.

5. The method for remote calibration access of equipment in an industrial isolation network according to claim 1, characterized in that, The operating environment of the scanning and maintenance terminal also includes: Construct a proxy node sequence that maps to the industrial network security domain hierarchy, where each element in the proxy node sequence corresponds to a jump path between physically isolated network segments; and change the order of the proxy node sequence in response to the user's topology adjustment command.

6. A remote calibration access system for equipment in an industrial isolated network, characterized in that, The system includes: The detection module is used to scan the operating environment of the maintenance terminal and detect whether it has the ability to process industrial field encryption protocols. A connection blocking module is used to automatically block the connection when the operating environment does not have the ability to process industrial field encryption protocols; A cross-domain simulated link establishment module is used to establish a cross-domain simulated link and send a data link probe when the operating environment has the ability to process industrial field encryption protocols. The calibration module is used to allow calibration when the echoed data is consistent; otherwise, it alarms that the link is unreliable.

7. The remote calibration access system for industrial isolation networks according to claim 6, characterized in that, The encryption protocol includes the SSH protocol or the password exchange tool sshpass.

8. The remote calibration access system for industrial isolation networks according to claim 6, characterized in that, The establishment of the cross-domain simulation link includes: A first tunnel is established between the maintenance terminal and the first jump board, wherein the maintenance terminal is located on the IT management network and the first jump board is located in the DMZ buffer. A second tunnel is established between the first and second jump boards, with the second jump board located in the OT production network; The first jump server is a bastion host, the second jump server is a field gateway, the IT management network is an untrusted zone, the DMZ buffer is a semi-trusted zone, and the OT production network is a trusted zone.

9. The remote calibration access system for industrial isolation networks according to claim 8, characterized in that, The data link probe includes: the second jump board sending calibration commands to the RTG rigging.

10. The remote calibration access system for industrial isolation networks according to claim 6, characterized in that, The operating environment of the scanning and maintenance terminal also includes: Construct a proxy node sequence that maps to the industrial network security domain hierarchy, where each element in the proxy node sequence corresponds to a jump path between physically isolated network segments; and change the order of the proxy node sequence in response to the user's topology adjustment command.

Images