Industrial internet platform security communication system and method

Abstract

The invention discloses an industrial internet platform security communication system and method, and relates to the technical field of energy management, and the system comprises a multi-dimensional perception and parameter configuration module which collects data, divides interference levels and configures parameters; the fault-tolerant coding and dynamic modulation module calculates a check value and completes dynamic modulation; the self-adaptive carrier transmission module guarantees signal transmission; the demodulation fault tolerance and safety verification module demodulates and recovers the data; the encrypted storage and traceability module stores and synchronizes data, establishes a traceability mechanism, and ensures the safety of industrial production data; according to the invention, the sensing units are deployed at each station of the equipment manufacturing production line, a whole-process collaboration mechanism is constructed, an industrial scene is accurately adapted, and flexible, confidential and stable communication is guaranteed; meanwhile, data closed-loop management and control are formed through a demodulation fault-tolerant module and the like, data damage can be repaired, leakage can be prevented, traceability and backup can be achieved, and support is provided for data circulation management and control of an industrial internet platform.

Description

Technical Field

[0001] This invention relates to the field of energy management technology, specifically to a secure communication system and method for an industrial internet platform. Background Technology

[0002] With the deep development of industrial internet technology, the digital and intelligent upgrading of manufacturing has become a core trend in industry transformation, especially in the field of special vehicle manufacturing. Enterprises urgently need to build a unified information platform that supports multiple factories and cross-regional operations to achieve collaborative linkage of multiple systems such as Product Lifecycle Management (PLM), Enterprise Resource Planning (ERP), and Manufacturing Execution System (MES) in order to optimize production processes, improve product quality and R&D efficiency. In the production and manufacturing process of special vehicles such as truck-mounted cranes, each workstation on the production line generates a large amount of equipment operation data, environmental data, workstation status data and core production data. The real-time transmission, secure storage and accurate traceability of this data directly affect the effectiveness of process optimization, quality control and production scheduling. Therefore, the communication system of the industrial internet platform has become a key support for the construction of digital workshops, and its anti-interference capability, data security and transmission stability have become core requirements.

[0003] Traditional industrial communication technologies are ill-suited to the complex environments of specialized vehicle manufacturing workshops, exhibiting numerous shortcomings. On one hand, traditional systems lack multi-dimensional environmental and equipment status awareness, failing to accurately identify key factors affecting communication such as electromagnetic interference and temperature / humidity changes. This results in a lack of targeted anti-interference mechanisms, making data transmission susceptible to packet loss and distortion due to strong interference sources like welding equipment in the workshop. On the other hand, coding and security protection designs are disconnected, with fault tolerance and encryption mechanisms not deeply integrated, making it difficult to balance data transmission integrity and security. Furthermore, carrier transmission parameters are often fixed, unable to be dynamically adjusted based on different workstation attributes and latency requirements, resulting in insufficient adaptability. Additionally, traditional technologies employ simplistic key management methods, lack robust access control and traceability mechanisms for data storage, suffer from poor data synchronization across multiple systems, and exhibit low efficiency in recovering lost data. These shortcomings fail to meet the digital production needs of multi-workstation collaboration and multi-system integration in specialized vehicle manufacturing, hindering the advancement of intelligent workshop upgrades. Summary of the Invention

[0004] The purpose of this invention is to overcome the shortcomings of existing technologies and provide a secure communication system and method for an industrial internet platform. A multi-dimensional sensing module collects environmental, equipment, and workstation data and configures encryption parameters. A fault-tolerant coding and dynamic modulation module integrates a proprietary algorithm to complete encoding and modulation. An adaptive carrier transmission module dynamically adjusts transmission parameters to ensure stable transmission. A demodulation and verification module realizes data recovery, decryption, and verification. An encrypted storage and traceability module ensures data storage security and traceability through blockchain, hierarchical permissions, and other methods. The system is deeply adapted to complex industrial environments, achieving deep integration of communication and security protection, ensuring the anti-interference, confidentiality, and integrity of production data transmission, and efficiently collaborating with existing industrial systems to provide reliable communication support for industrial internet platforms.

[0005] To solve the above-mentioned technical problems, the present invention provides the following technical solution: In one aspect, an industrial internet platform secure communication system, the system comprising: Multi-dimensional perception and parameter configuration module: Deployed at each workstation of the communication system equipment manufacturing production line, it collects electromagnetic interference intensity, equipment operating parameters, environmental parameters and workstation status data, classifies interference levels, configures global encryption keys, key fragments and workstation coding parameters, and transmits them to the fault-tolerant coding and dynamic modulation module. Fault-tolerant coding and dynamic modulation module: Receives parameters from the multi-dimensional perception and parameter configuration module and production data from the MES system. It calculates the fault-tolerant safety check value through the fault-tolerant and safety integrated coding algorithm and embeds the redundant bits of the QAM / PSK modulation symbol. It calculates the dynamic phase rotation angle through the dynamic phase fusion and adaptation algorithm, and completes dynamic modulation by combining the interference level and workstation attributes, and outputs the modulated signal. Adaptive carrier transmission module: Receives the modulated signal from the fault-tolerant coding and dynamic modulation module, obtains the delay requirements from the PLM / ERP / MES system, dynamically switches the carrier frequency and modulation order, encapsulates the header identifier, and uses frequency hopping, retransmission and repeater deployment to ensure transmission, and sends the signal to the receiving end. Demodulation fault tolerance and security verification module: Receives and filters the modulated signal, parses the header identifier to extract parameters, reverses and reuses the dynamic phase fusion adaptation algorithm to complete demodulation, locates the lost packet station and recovers the data according to the fault tolerance and security integrated coding algorithm logic, verifies after decryption by splicing the key, and outputs legitimate production data; Encrypted storage and traceability module: Receives legitimate production data, stores algorithm parameters and results, synchronizes with PLM / ERP / MES systems, records communication logs through blockchain, establishes access control, data backup and traceability mechanisms, and monitors and handles anomalies.

[0006] Furthermore, the electromagnetic interference intensity measurement range collected by the multi-dimensional sensing and parameter configuration module is 0.01V / m-10V / m. The equipment operating parameters include the current, voltage, and gas flow of the welding equipment, and the signal output power and test duration of the testing equipment. The environmental parameters include the temperature and humidity of the workstation area, with the temperature range being 0℃-60℃ and the humidity range being 20%-90%RH. The workstation status data includes the equipment running, standby, and fault status, the work batch number, and the operator ID. The specific thresholds for classifying interference levels are as follows: electromagnetic interference intensity < 0.5V / m is low interference, 0.5V / m ≤ electromagnetic interference intensity < 1.5V / m is medium interference, and electromagnetic interference intensity ≥ 1.5V / m is high interference.

[0007] Furthermore, the global encryption key of the multi-dimensional perception and parameter configuration module is an AES-256 key. The generation process uses a combination of workshop number, production line number, and total number of workstations as a seed, combined with a 32-byte random number, and generates the key through three iterations using the SHA-256 hash algorithm. The key fragment length is dynamically adjusted according to the total number of workstations. Specifically, the fragment length is 16 bits when the total number of workstations is less than or equal to 16, 8 bits when the total number of workstations is greater than 16 and less than or equal to 32, and 4 bits when the total number of workstations is greater than 32 and less than or equal to 64. The integrity of all key fragments is verified by a CRC-16 checksum after concatenation, and the checksum is stored at the end of the global key.

[0008] Furthermore, in the fault-tolerant coding and dynamic modulation module, the mathematical expression of the fault-tolerant and security integrated coding algorithm is: ;in, For dynamic phase rotation angle, To adapt the attenuation coefficient to the environment, For real-time electromagnetic interference intensity, This is the workstation priority coefficient. As a weight for latency requirements, As the initial phase reference value, To dynamically adjust the rate coefficient, For continuous communication duration, It is a natural constant.

[0009] Furthermore, in the fault-tolerant coding and dynamic modulation module, the mathematical expression of the dynamic phase fusion adaptation algorithm is: ;in, This is the fault-tolerant safety check value; mod is the modulo operation value. A unique code for each workstation. For XOR operation, A key fragment specific to each workstation. The effective length of the redundant bits. For data importance coefficients, This is the floor function. For dynamic phase rotation angle, This is the 32-bit CRC checksum of the original production data. This is a right shift operation. This is the raw production data.

[0010] Furthermore, the fault-tolerant coding and dynamic modulation module combines interference level and workstation attributes to complete dynamic modulation. Specifically, based on the interference level classification results, the interference level is divided into three levels: low, medium, and high. The phase rotation angle of the corresponding modulation signal is adjusted according to a preset rule. Based on the workstation attributes, core workstations and non-core workstations are distinguished. The core workstations are those that have a critical impact on the production process or data integrity. Core workstations use low-order modulation methods, while non-core workstations use high-order modulation methods. Combining the dynamic phase rotation angle calculated by the dynamic phase fusion adaptation algorithm, the switching between BPSK, QPSK, and 16QAM modulation methods is completed. Finally, a modulation signal carrying workstation identification, safety verification information, and anti-interference characteristics is output.

[0011] Furthermore, the adaptive carrier transmission module employs orthogonal frequency division multiplexing (OFDM) technology for its 2.4GHz high-frequency carrier, with 64 subcarriers, a channel bandwidth of 20MHz, and ten selectable channels at its center frequency: 2.412GHz, 2.422GHz, 2.432GHz, 2.442GHz, 2.452GHz, 2.462GHz, 2.472GHz, 2.482GHz, 2.402GHz, and 2.492GHz. The 900MHz low-frequency carrier uses frequency division multiple access (FDMA) technology, with a channel bandwidth of 10MHz and a center frequency range of 868MHz-915MHz, divided into eight independent channels with a channel spacing of 2MHz. The frequency hopping technology has a channel switching period of 50ms, selecting the channel with the lowest interference based on real-time electromagnetic interference intensity data transmitted by the multi-dimensional sensing and parameter configuration module. Seamless switching technology is used, with an interruption time of less than or equal to 1ms.

[0012] Furthermore, the key fragment splicing order of the demodulation fault tolerance and security verification module is arranged in ascending order according to the workstation number. After splicing, the integrity is verified by a preset 16-bit fixed check code. The verification process is to perform an XOR operation between the spliced ​​key and the check code. If the result is all 0, the verification passes. In the packet loss data recovery process, specific fields are recovered first, including the power value and frequency deviation value in the base station radio frequency test data, the time slot number and allocation duration in the switch time slot data, and the size error and assembly torque value in the component assembly parameters. The recovery process takes less than or equal to 5ms.

[0013] Furthermore, the encrypted storage and traceability module uses AES-256-CBC encryption mode for data encryption, with an initial vector of 16 bytes, generated in real time by a hardware random number generator. The initial vector and encrypted data are stored in the order of initial vector and encrypted data. Access control is divided into three levels: the first level allows reading and writing all data, the second level allows reading and writing only data at the current workstation, and the third level allows reading all data but not writing. Access verification adopts a role-based access control mechanism. The data backup cycle is 1 hour, and the backup data is stored on a remote server.

[0014] On the other hand, a secure communication method for an industrial internet platform includes the following specific steps: S100, multi-dimensional perception and parameter configuration: deploy perception units at each workstation of the communication system equipment manufacturing line to collect electromagnetic interference intensity, equipment operating parameters, environmental parameters and workstation status data, and classify interference levels; configure global encryption keys, key fragments and workstation coding parameters, and transmit the collected data and configuration parameters to the next step; S200, fault-tolerant coding and dynamic modulation: Receives parameters transmitted from S100 and production data from the MES system, calculates fault-tolerant and safety check values ​​through a fault-tolerant and safety integrated coding algorithm and embeds redundant bits of QAM / PSK modulation symbols, calculates dynamic phase rotation angles through a dynamic phase fusion and adaptation algorithm, and completes dynamic modulation by combining interference level and workstation attributes, and outputs the modulated signal. S300, Adaptive Carrier Transmission: Receives the modulated signal output from S200, obtains the latency requirements from the PLM / ERP / MES system, dynamically switches the carrier frequency and modulation order, encapsulates the header identifier, and uses frequency hopping, retransmission, and repeater deployment to ensure transmission, and sends the modulated signal to the receiving end. S400, demodulation fault tolerance and security verification: Receives the modulated signal sent by S300 and filters it, parses the header identifier to extract parameters, reverses the dynamic phase fusion adaptation algorithm to complete demodulation, locates the lost workstation and recovers the data according to the fault tolerance and security integrated coding algorithm logic, performs verification after decryption by splicing the key, and outputs legitimate production data. S500, encrypted storage and traceability: Receives legitimate production data output from S400, stores algorithm parameters and results, synchronizes data with PLM / ERP / MES systems, records communication logs through blockchain, establishes access control, data backup and traceability mechanisms, and monitors and handles communication anomalies.

[0015] Compared with existing technologies, this secure communication system and method for an industrial internet platform has the following advantages: I. This invention deploys sensing units at each workstation of the equipment manufacturing production line to collect multi-dimensional key data and classify interference levels. It simultaneously configures global encryption-related parameters to form a fundamental support for communication security. This is achieved by linking fault-tolerant coding and dynamic modulation modules, embedding verification information into modulation symbols through a fault-tolerant and secure integrated coding algorithm, and dynamically adjusting the modulation method based on interference levels and workstation attributes. This achieves deep integration of coding and modulation. Furthermore, an adaptive carrier transmission module dynamically switches transmission parameters, employing multiple transmission protection measures to construct a collaborative mechanism covering the entire process from sensing, coding, modulation to transmission. This collaborative mode can accurately adapt to the complex environment of industrial scenarios, effectively resisting various interference factors. Simultaneously, the scientific configuration of encryption parameters strengthens the security foundation, ensuring that the communication process possesses both the flexibility to adapt to environmental changes and the confidentiality and stability of data transmission, fully meeting the stringent communication quality requirements of industrial internet platforms.

[0016] Second, this invention completes demodulation by reverse reuse and adaptation algorithms through a demodulation fault tolerance and security verification module. Relying on the integrated encoding algorithm logic, it accurately locates the workstation where packets are lost, prioritizes the recovery of core production data, and ensures the integrity and validity of the received data. Subsequently, the legitimate data is encrypted through an encrypted storage and traceability module, and related system data is synchronously linked. Blockchain technology is used to record the entire communication log, and a hierarchical permission management, regular backup, and traceability mechanism is established to form a closed-loop control of data reception, verification, storage, and traceability. This closed-loop design can quickly repair data damage during transmission and avoid the loss of critical production data. It can also prevent the risk of data leakage through encrypted storage and hierarchical permissions, and achieve traceability of communication behavior through blockchain traceability. At the same time, data backup ensures long-term data security, providing comprehensive support for the secure flow, compliant use, and full-process control of production data on the industrial internet platform.

[0017] Other advantages, objectives and features of the invention will be set forth in part in the description which follows, and in part will be apparent to those skilled in the art from the following examination or study, or may be learned from the practice of the invention. Attached Figure Description

[0018] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the accompanying drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are merely some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without any creative effort.

[0019] Figure 1 A schematic diagram of the workflow of the secure communication system module for an industrial internet platform; Figure 2Flowchart of the implementation steps for secure communication methods on industrial internet platforms; Figure 3 This is a schematic diagram of the overall architecture of a secure communication system for an industrial internet platform. Detailed Implementation

[0020] To further illustrate the technical means and effects of the present invention in achieving its intended purpose, the following detailed description of the specific implementation methods, structures, features, and effects of the present invention, in conjunction with the accompanying drawings and preferred embodiments, is provided below.

[0021] Example 1 System implementation in a low-interference scenario for intelligent truck-mounted crane assembly line.

[0022] Multi-dimensional perception and parameter configuration module: Perception units are deployed at all 10 workstations (including welding workstation, structural component assembly workstation, electrical wiring workstation, performance testing workstation, etc.) of the intelligent truck-mounted crane assembly line. The system collects real-time data on the electromagnetic interference intensity of each workstation, ranging from 0.2V / m to 0.4V / m. Equipment operating parameters include the current, voltage, and gas flow of the welding equipment, as well as the signal output power and test duration of the testing equipment. Environmental parameters include the temperature of the workstation area (22℃-28℃) and the humidity (30%-55%RH). Workstation status data includes the equipment operation, standby, fault status, work batch number, and operator ID. Based on a threshold, all workstations are classified as low-interference. Simultaneously, using a combination of the workshop number, production line number, and the total number of 10 workstations as a seed, and incorporating a 32-byte random number, an AES-256 global encryption key is generated through three iterations of the SHA-256 hash algorithm. Since the total number of workstations is less than or equal to 16, the key fragment length is set to 16 bits. All key fragments are concatenated and their integrity is verified using a CRC-16 checksum. The checksum is stored at the end of the global key. The encoding parameters for each workstation are configured synchronously, and the collected data and configuration parameters are transmitted completely to the fault-tolerant coding and dynamic modulation module. Figure 1 As shown.

[0023] Fault-tolerant coding and dynamic modulation module: Receives parameters transmitted from the multi-dimensional perception and parameter configuration module, as well as production data such as welding standards for structural components of the truck-mounted crane transport vehicle, electrical wiring parameters, and performance test indicators issued by the MES system. It calculates the fault-tolerant safety check value using an integrated fault-tolerant and safety coding algorithm and embeds QAM / PSK modulation symbol redundancy bits. The mathematical expression of the integrated fault-tolerant and safety coding algorithm is: ;in, For dynamic phase rotation angle, To adapt the attenuation coefficient to the environment, For real-time electromagnetic interference intensity, This is the workstation priority coefficient. As a weight for latency requirements, As the initial phase reference value, To dynamically adjust the rate coefficient, For continuous communication duration, Let be a natural constant. The dynamic phase rotation angle is calculated using a dynamic phase fusion adaptation algorithm. The mathematical expression for the dynamic phase fusion adaptation algorithm is: ;in, This is the fault-tolerant safety check value; mod is the modulo operation value. A unique code for each workstation. For XOR operation, A key fragment specific to each workstation. The effective length of the redundant bits. For data importance coefficients, This is the floor function. For dynamic phase rotation angle, This is the 32-bit CRC checksum of the original production data. This is a right shift operation. Based on the raw production data, core and non-core workstations are distinguished by low interference level and workstation attributes. Structural component assembly workstations and performance testing workstations are core workstations, while welding workstations and electrical wiring workstations are non-core workstations. Core workstations use BPSK low-order modulation, while non-core workstations use 16QAM high-order modulation. After dynamic modulation, a modulated signal carrying workstation identification, safety verification information, and anti-interference characteristics is output.

[0024] Adaptive Carrier Transmission Module: Receives the modulated signal output from the fault-tolerant coding and dynamic modulation module, obtains the production line's routine latency requirements from the PLM / ERP / MES system, and dynamically switches to a 2.4GHz high-frequency carrier. This carrier uses orthogonal frequency division multiplexing (OFDM) technology, with 64 subcarriers and a channel bandwidth of 20MHz. It selects three center frequency channels with the lowest interference: 2.412GHz, 2.432GHz, and 2.452GHz. It encapsulates a header identifier containing the latency requirement of the workstation coding modulation method. Frequency hopping technology ensures transmission, with a channel switching period of 50ms. Based on the electromagnetic interference intensity data transmitted in real time by the multi-dimensional sensing and parameter configuration module, it dynamically selects the optimal channel. The switching employs seamless switching technology with an interruption time of less than or equal to 1ms. Simultaneously, a retransmission mechanism is used to stably deliver the modulated signal to the receiving end.

[0025] Demodulation fault tolerance and security verification module: After receiving the modulated signal, it first performs filtering, parses the header identifier to extract key information such as carrier parameters and modulation mode, and reverses the dynamic phase fusion adaptation algorithm to complete demodulation. Based on the fault tolerance and security integrated coding algorithm logic, it locates welding stations that may have packet loss. The mathematical expression of the fault tolerance and security integrated coding algorithm is: ;in, For dynamic phase rotation angle, To adapt the attenuation coefficient to the environment, For real-time electromagnetic interference intensity, This is the workstation priority coefficient. As a weight for latency requirements, As the initial phase reference value, To dynamically adjust the rate coefficient, For continuous communication duration, As a natural constant, priority is given to restoring key field data such as welding current, voltage, and gas flow rate for this workstation, with the restoration process taking 2ms. Key fragments are concatenated in ascending order of workstation number. The concatenated key is then XORed with a preset 16-bit fixed checksum. If the result is all zeros, the check passes, and valid production data is output after decryption.

[0026] Encrypted Storage and Traceability Module: Receives legitimate production data output from the demodulation, fault tolerance, and security verification module. Stores algorithm parameters and production data results. Data is encrypted using AES-256-CBC encryption mode, with an initial vector of 16 bytes, generated in real-time by a hardware random number generator. The initial vector and encrypted data are stored in the order of the initial vector and encrypted data. Simultaneously, it synchronizes data such as structural component assembly progress, electrical wiring quality, performance test results, etc., with the PLM / ERP / MES system. A three-level access control mechanism is established, recording the entire process communication log via blockchain. Level 1 allows read / write access to all data; level 2 allows read / write access to data specific to the workstation; and level 3 allows read access to all data but not write access. Access verification uses a role-based access control mechanism. Data backup is performed every hour, with backup data stored on a remote server. The system monitors for data transmission anomalies during communication in real-time and automatically initiates processing procedures, such as... Figure 3 As shown.

[0027] In summary, this industrial internet platform's secure communication system achieves secure communication in a low-interference scenario on an intelligent truck-mounted crane assembly line through the coordinated operation of five modules. The multi-dimensional perception and parameter configuration module accurately collects various data, including electromagnetic interference and equipment operation data, from 10 workstations, classifies them into low-interference levels, and configures AES-256 keys and related parameters. The fault-tolerant coding and dynamic modulation module combines algorithms to complete adaptive modulation. The adaptive carrier transmission module uses a 2.4GHz high-frequency carrier and employs frequency hopping and other technologies to ensure transmission. The demodulation, fault tolerance, and security verification module quickly recovers and verifies lost data. The encrypted storage and traceability module ensures data security and traceability through encryption, three-level access control, and blockchain logs, adhering to file parameter standards throughout the process, thus achieving stable and efficient production line data communication in a low-interference environment.

[0028] Example 2: Implementation of methods in high-interference scenarios on intelligent truck-mounted crane assembly lines.

[0029] S100 Multi-Dimensional Perception and Parameter Configuration: Perception units are deployed at 40 workstations on the intelligent truck-mounted crane assembly line to comprehensively collect electromagnetic interference intensity data from each workstation, ranging from 1.8V / m to 4.2V / m. Equipment operating parameters include the current, voltage, and gas flow rate of welding equipment, as well as the signal output power and test duration of testing equipment. Environmental parameters include workstation area temperature (32℃-48℃) and humidity (45%-75%RH). Workstation status data includes equipment operation, standby, fault status, work batch number, and operator ID, accurately classifying all workstations as high-interference levels. Using the combination of workshop number, production line number, and the total number of 40 workstations as a seed, and combining it with a 32-byte random number, an AES-256 global encryption key is generated through three iterations of the SHA-256 hash algorithm. Since the total number of workstations is greater than 32 and less than or equal to 64, the key fragment length is set to 4 bits. All key fragments are concatenated and their integrity is verified using a CRC-16 checksum. The checksum is stored at the end of the global key. Encoding parameters for each workstation are configured synchronously, and the collected data and configuration parameters are completely transmitted to the next step. This allows for a comprehensive understanding of the production line environment and equipment status, providing accurate data support for subsequent encoding, modulation, and transmission. Figure 2 As shown.

[0030] S200, Fault-Tolerant Coding and Dynamic Modulation: Receives parameters transmitted from S100 and production data from the MES system, including hydraulic system assembly parameters, crane mechanism debugging data, and vehicle assembly tolerance requirements for the truck-mounted crane. It calculates the fault-tolerant safety check value using an integrated fault-tolerant and safety coding algorithm and embeds QAM / PSK modulation symbol redundancy bits. The mathematical expression for the integrated fault-tolerant and safety coding algorithm is: ;in, For dynamic phase rotation angle, To adapt the attenuation coefficient to the environment, For real-time electromagnetic interference intensity, This is the workstation priority coefficient. As a weight for latency requirements, As the initial phase reference value, To dynamically adjust the rate coefficient, For continuous communication duration, Let be a natural constant. The dynamic phase rotation angle is calculated using a dynamic phase fusion adaptation algorithm. The mathematical expression for the dynamic phase fusion adaptation algorithm is: ;in, This is the fault-tolerant safety check value; mod is the modulo operation value. A unique code for each workstation. For XOR operation, A key fragment specific to each workstation. The effective length of the redundant bits. For data importance coefficients, This is the floor function. For dynamic phase rotation angle, This is the 32-bit CRC checksum of the original production data. This is a right shift operation. Based on the raw production data, core and non-core workstations are distinguished according to the level of high interference and workstation attributes. The hydraulic system assembly workstation and the crane mechanism debugging workstation are core workstations, while the vehicle assembly workstation and other workstations are non-core workstations. Core workstations use BPSK low-order modulation to ensure data transmission stability, while non-core workstations use 16QAM high-order modulation to improve transmission efficiency. After dynamic modulation, the output is a modulated signal carrying workstation identification safety verification information and anti-interference characteristics, so that the modulated signal has both fault tolerance and anti-interference performance, adapting to the data transmission needs in high-interference environments.

[0031] S300, Adaptive Carrier Transmission: Receives the modulated signal output from S200, obtains the high-reliability, low-latency transmission requirements of the production line from the PLM / ERP / MES system, and dynamically switches to a 900MHz low-frequency carrier. This carrier uses frequency division multiple access technology, with a channel bandwidth of 10MHz and a center frequency range of 868MHz-915MHz. It selects two independent channels with the lowest interference, encapsulates a header identifier containing high-interference adaptation markers and workstation priority transmission requirements, and employs frequency hopping retransmission mechanisms and production line mid-section repeater deployment to ensure transmission. The frequency hopping channel switching period is 50ms. Based on the electromagnetic interference intensity data transmitted in real time by S100, the channel is dynamically adjusted. The switching adopts seamless switching technology, with an interruption time of less than or equal to 1ms, effectively penetrating high-interference environments and ensuring that the modulated signal is delivered to the receiving end without loss or delay.

[0032] S400, Demodulation Fault Tolerance and Security Verification: Receives the modulated signal sent by S300 and performs filtering; parses the header identifier to extract key information such as carrier parameters and modulation mode; performs demodulation using the reverse multiplexing dynamic phase fusion adaptation algorithm; and quickly locates the crane mechanism debugging station experiencing packet loss based on the fault-tolerant and security integrated coding algorithm logic. The mathematical expression of the fault-tolerant and security integrated coding algorithm is: ;in, For dynamic phase rotation angle, To adapt the attenuation coefficient to the environment, For real-time electromagnetic interference intensity, This is the workstation priority coefficient. As a weight for latency requirements, As the initial phase reference value, To dynamically adjust the rate coefficient, For continuous communication duration, As a natural constant, priority is given to restoring specific field data such as signal output power, frequency deviation, and assembly torque values ​​for this workstation. The restoration process takes 3ms. Key fragments are concatenated in ascending order of workstation number. The concatenated key is XORed with a preset 16-bit fixed check code. If the result is all 0, the check passes. After decryption, valid production data is output to ensure data integrity and accuracy and to remove abnormal and invalid data.

[0033] S500, Encrypted Storage and Traceability: Receives legitimate production data output from S400, uses AES-256-CBC encryption to store algorithm parameters and production data results. The initial vector is 16 bytes, generated in real-time by a hardware random number generator. The initial vector and encrypted data are stored in the order of the initial vector and encrypted data. Simultaneously, it synchronizes data such as hydraulic system assembly quality, crane mechanism debugging results, and vehicle assembly progress with PLM / ERP / MES systems. It fully records the entire communication process log through blockchain, establishes a three-level access control mechanism, and uses a role-based access control mechanism for access verification. Data backup is performed every hour, with backup data stored on a remote server. It monitors and quickly handles data transmission anomalies during communication, ensuring data storage security and traceability, and providing reliable data support for production line quality control and problem investigation.

[0034] In summary, this industrial internet platform's secure communication method achieves reliable communication in a high-interference scenario on an intelligent truck-mounted crane assembly line through a five-step process. S100 collects multi-dimensional data from 40 workstations and classifies them into high-interference levels, generating adaptive key parameters to lay the foundation for subsequent steps. S200 uses two core algorithms to perform dynamic modulation, balancing stability and transmission efficiency. S300 switches to a 900MHz low-frequency carrier, combining frequency hopping and repeater deployment to penetrate the high-interference environment. S400 accurately locates the workstation where packets are lost and recovers critical data, ensuring data integrity. S500 uses AES-256-CBC encrypted storage, synchronizes data from multiple systems, and establishes a traceability mechanism. The entire process strictly adheres to file parameter requirements, effectively adapting to the communication needs of a high-interference production line.

[0035] The above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention in any way. Although the present invention has been disclosed above with reference to preferred embodiments, it is not intended to limit the present invention. Any person skilled in the art can make some modifications or alterations to the above-disclosed technical content to create equivalent embodiments without departing from the scope of the present invention. Any simple modifications, equivalent changes and alterations made to the above embodiments based on the technical essence of the present invention without departing from the scope of the present invention shall still fall within the scope of the present invention.

Claims

1. A secure communication system for an industrial internet platform, characterized in that, The system includes: Multi-dimensional perception and parameter configuration module: Deployed at each workstation of the communication system equipment manufacturing production line, it collects electromagnetic interference intensity, equipment operating parameters, environmental parameters and workstation status data, classifies interference levels, configures global encryption keys, key fragments and workstation coding parameters, and transmits them to the fault-tolerant coding and dynamic modulation module. Fault-tolerant coding and dynamic modulation module: Receives parameters from the multi-dimensional perception and parameter configuration module and production data from the MES system. It calculates the fault-tolerant safety check value through the fault-tolerant and safety integrated coding algorithm and embeds the redundant bits of the QAM / PSK modulation symbol. It calculates the dynamic phase rotation angle through the dynamic phase fusion and adaptation algorithm, and completes dynamic modulation by combining the interference level and workstation attributes, and outputs the modulated signal. Adaptive carrier transmission module: Receives the modulated signal from the fault-tolerant coding and dynamic modulation module, obtains the delay requirements from the PLM / ERP / MES system, dynamically switches the carrier frequency and modulation order, encapsulates the header identifier, and uses frequency hopping, retransmission and repeater deployment to ensure transmission, and sends the signal to the receiving end. Demodulation fault tolerance and security verification module: Receives and filters the modulated signal, parses the header identifier to extract parameters, reverses and reuses the dynamic phase fusion adaptation algorithm to complete demodulation, locates the lost packet station and recovers the data according to the fault tolerance and security integrated coding algorithm logic, verifies after decryption by splicing the key, and outputs legitimate production data; Encrypted storage and traceability module: Receives legitimate production data, stores algorithm parameters and results, synchronizes with PLM / ERP / MES systems, records communication logs through blockchain, establishes access control, data backup and traceability mechanisms, and monitors and handles anomalies.

2. The secure communication system for an industrial internet platform according to claim 1, characterized in that, The electromagnetic interference intensity measurement range collected by the multi-dimensional sensing and parameter configuration module is 0.01V / m-10V / m. The equipment operating parameters include the current, voltage, and gas flow of the welding equipment, and the signal output power and test duration of the testing equipment. The environmental parameters include the temperature and humidity of the workstation area, with the temperature range being 0℃-60℃ and the humidity range being 20%-90%RH. The workstation status data includes the equipment running, standby, and fault status, the work batch number, and the operator ID. The specific thresholds for classifying interference levels are as follows: electromagnetic interference intensity < 0.5V / m is low interference, 0.5V / m ≤ electromagnetic interference intensity < 1.5V / m is medium interference, and electromagnetic interference intensity ≥ 1.5V / m is high interference.

3. The secure communication system for an industrial internet platform according to claim 1, characterized in that, The global encryption key of the multi-dimensional perception and parameter configuration module is an AES-256 key. The generation process uses a combination of workshop number, production line number, and total number of workstations as a seed, combined with a 32-byte random number, and generates the key through three iterations using the SHA-256 hash algorithm. The key fragment length is dynamically adjusted according to the total number of workstations. Specifically, the fragment length is 16 bits when the total number of workstations is less than or equal to 16, 8 bits when the total number of workstations is greater than 16 and less than or equal to 32, and 4 bits when the total number of workstations is greater than 32 and less than or equal to 64. The integrity of all key fragments is verified by a CRC-16 checksum after concatenation, and the checksum is stored at the end of the global key.

4. The secure communication system for an industrial internet platform according to claim 1, characterized in that, In the fault-tolerant coding and dynamic modulation module, the mathematical expression of the fault-tolerant and security integrated coding algorithm is: ;in, For dynamic phase rotation angle, To adapt the attenuation coefficient to the environment, For real-time electromagnetic interference intensity, This is the workstation priority coefficient. As a weight for latency requirements, As the initial phase reference value, To dynamically adjust the rate coefficient, For continuous communication duration, It is a natural constant.

5. The secure communication system for an industrial internet platform according to claim 1, characterized in that, In the fault-tolerant coding and dynamic modulation module, the mathematical expression of the dynamic phase fusion adaptation algorithm is: ;in, This is the fault-tolerant safety check value; mod is the modulo operation value. A unique code for each workstation. For XOR operation, A key fragment specific to each workstation. The effective length of the redundant bits. For data importance coefficients, This is the floor function. For dynamic phase rotation angle, This is the 32-bit CRC checksum of the original production data. This is a right shift operation. This is the raw production data.

6. The secure communication system for an industrial internet platform according to claim 1, characterized in that, The fault-tolerant coding and dynamic modulation module combines interference level and workstation attributes to complete dynamic modulation. Specifically, based on the interference level classification, the interference level is divided into three levels: low, medium, and high. The phase rotation angle of the corresponding modulation signal is adjusted according to a preset rule. Based on the workstation attributes, core workstations and non-core workstations are distinguished. The core workstations are those that have a critical impact on the production process or data integrity. Core workstations use low-order modulation methods, while non-core workstations use high-order modulation methods. Combined with the dynamic phase rotation angle calculated by the dynamic phase fusion adaptation algorithm, the switching between BPSK, QPSK, and 16QAM modulation methods is completed. Finally, a modulation signal carrying workstation identification, safety verification information, and anti-interference characteristics is output.

7. The secure communication system for an industrial internet platform according to claim 1, characterized in that, The adaptive carrier transmission module employs orthogonal frequency division multiplexing (OFDM) technology for its 2.4GHz high-frequency carrier, with 64 subcarriers and a channel bandwidth of 20MHz. The center frequency includes ten selectable channels: 2.412GHz, 2.422GHz, 2.432GHz, 2.442GHz, 2.452GHz, 2.462GHz, 2.472GHz, 2.482GHz, 2.402GHz, and 2.492GHz. The 900MHz low-frequency carrier uses frequency division multiple access (FDMA) technology, with a channel bandwidth of 10MHz and a center frequency range of 868MHz-915MHz, divided into eight independent channels with a channel spacing of 2MHz. The frequency hopping technology has a channel switching period of 50ms. Based on the electromagnetic interference intensity data transmitted in real-time by the multi-dimensional sensing and parameter configuration module, the channel with the lowest interference is selected. Seamless switching technology is used, with an interruption time of less than or equal to 1ms.

8. The secure communication system for an industrial internet platform according to claim 1, characterized in that, The key fragments of the demodulation fault tolerance and security verification module are arranged in ascending order according to the workstation number. After splicing, the integrity is verified by a preset 16-bit fixed check code. The verification process is to perform an XOR operation between the spliced ​​key and the check code. If the result is all 0, the verification is successful. The packet loss data recovery process prioritizes the recovery of specific fields, including the power value and frequency deviation value in the base station radio frequency test data, the time slot number and allocation duration in the switch time slot data, and the size error and assembly torque value in the component assembly parameters. The recovery process takes less than or equal to 5ms.

9. The secure communication system for an industrial internet platform according to claim 1, characterized in that, The encrypted storage and traceability module uses AES-256-CBC encryption mode for data encryption. The initial vector is 16 bytes and is generated in real time by a hardware random number generator. The initial vector and encrypted data are stored in the order of initial vector and encrypted data. The access control is divided into three levels: the first level can read and write all data, the second level can only read and write data at this workstation, and the third level can only read all data but cannot write. The access control mechanism is based on role verification. The data backup cycle is 1 hour, and the backup data is stored on a remote server.

10. A secure communication method for an industrial internet platform, applicable to the secure communication system for an industrial internet platform as described in any one of claims 1-9, characterized in that, The specific steps of this method are as follows: S100, multi-dimensional perception and parameter configuration: deploy perception units at each workstation of the communication system equipment manufacturing line to collect electromagnetic interference intensity, equipment operating parameters, environmental parameters and workstation status data, and classify interference levels; configure global encryption keys, key fragments and workstation coding parameters, and transmit the collected data and configuration parameters to the next step; S200, fault-tolerant coding and dynamic modulation: Receives parameters transmitted from S100 and production data from the MES system, calculates fault-tolerant and safety check values ​​through a fault-tolerant and safety integrated coding algorithm and embeds redundant bits of QAM / PSK modulation symbols, calculates dynamic phase rotation angles through a dynamic phase fusion and adaptation algorithm, and completes dynamic modulation by combining interference level and workstation attributes, and outputs the modulated signal. S300, Adaptive Carrier Transmission: Receives the modulated signal output from S200, obtains the latency requirements from the PLM / ERP / MES system, dynamically switches the carrier frequency and modulation order, encapsulates the header identifier, and uses frequency hopping, retransmission, and repeater deployment to ensure transmission, and sends the modulated signal to the receiving end. S400, demodulation fault tolerance and security verification: Receives the modulated signal sent by S300 and filters it, parses the header identifier to extract parameters, reverses the dynamic phase fusion adaptation algorithm to complete demodulation, locates the lost workstation and recovers the data according to the fault tolerance and security integrated coding algorithm logic, performs verification after decryption by splicing the key, and outputs legitimate production data. S500, encrypted storage and traceability: Receives legitimate production data output from S400, stores algorithm parameters and results, synchronizes data with PLM / ERP / MES systems, records communication logs through blockchain, establishes access control, data backup and traceability mechanisms, and monitors and handles communication anomalies.

Images